magus-cli 7.11.5 → 7.11.6

package/src/__tests__/mcp-registry-install-screen.test.tsx

@@ -0,0 +1,732 @@
+import { afterEach, describe, expect, test } from "bun:test";
+import {
+	existsSync,
+	mkdirSync,
+	mkdtempSync,
+	readFileSync,
+	rmSync,
+	writeFileSync,
+} from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { testRender } from "@opentui/react/test-utils";
+import { act, useEffect } from "react";
+import type { McpRegistryServer, McpServerConfig } from "../types/index.js";
+import { ModalContainer } from "../ui/components/modals/index.js";
+import { KeyRouter } from "../ui/input/KeyRouter.js";
+import McpRegistryScreen from "../ui/screens/McpRegistryScreen.js";
+import { AppProvider, useNavigation } from "../ui/state/AppContext.js";
+import { DimensionsProvider } from "../ui/state/DimensionsContext.js";
+
+// The mount/provider/keyboard approach is copied from the supplied
+// mcp-registry-screen-debounce.test.tsx. Only external registry data is faked.
+// Expected configs are contract literals, never registryInstallPlan's output.
+const realFetch = globalThis.fetch;
+let cleanup: Array<() => Promise<void> | void> = [];
+
+afterEach(async () => {
+	const callbacks = cleanup.reverse();
+	cleanup = [];
+	try {
+		for (const fn of callbacks) await fn();
+	} finally {
+		globalThis.fetch = realFetch;
+	}
+});
+
+type ProjectFiles = { mcp: string | null; approvals: string | null };
+type ProjectSeed = Partial<ProjectFiles>;
+type McpDocument = { mcpServers: Record<string, McpServerConfig> };
+type ApprovalDocument = {
+	enabledMcpjsonServers?: string[];
+	enableAllProjectMcpServers?: boolean;
+};
+
+const WARNING =
+	"It may need API keys or settings to work. magus doesn't add any.";
+const SOURCE_GUIDANCE = "The source below says what to set.";
+const KEEP_NAME = "qa/keep";
+const KEEP_CONFIG: McpServerConfig = {
+	type: "http",
+	url: "https://keep.example.test/mcp",
+};
+
+function server(
+	name: string,
+	url: string,
+	extra: Partial<Omit<McpRegistryServer, "name" | "url">> = {},
+): McpRegistryServer {
+	return { name, url, short_description: `${name} description`, ...extra };
+}
+
+function projectSeed(
+	entries: Record<string, McpServerConfig>,
+	approvedNames = Object.keys(entries),
+	enableAllProjectMcpServers = true,
+): ProjectSeed {
+	return {
+		mcp: `${JSON.stringify({ mcpServers: entries }, null, 2)}\n`,
+		approvals: `${JSON.stringify(
+			{ enabledMcpjsonServers: approvedNames, enableAllProjectMcpServers },
+			null,
+			2,
+		)}\n`,
+	};
+}
+
+function GoToRegistry() {
+	const { navigateToScreen } = useNavigation();
+	// biome-ignore lint/correctness/useExhaustiveDependencies: navigate once on mount
+	useEffect(() => navigateToScreen("mcp-registry"), []);
+	return null;
+}
+
+async function mount(
+	initialRows: Array<string | McpRegistryServer>,
+	seed: ProjectSeed = {},
+) {
+	const project = mkdtempSync(join(tmpdir(), "mcp-registry-install-screen-"));
+	cleanup.push(() => rmSync(project, { recursive: true, force: true }));
+	const mcpPath = join(project, ".mcp.json");
+	const approvalsPath = join(project, ".claude", "settings.local.json");
+
+	if (seed.mcp != null) writeFileSync(mcpPath, seed.mcp);
+	if (seed.approvals != null) {
+		mkdirSync(join(project, ".claude"), { recursive: true });
+		writeFileSync(approvalsPath, seed.approvals);
+	}
+	const rows = initialRows.map((row) =>
+		typeof row === "string"
+			? server(row, `https://${row.replace(/[^a-z]/g, "")}.example.test/mcp`)
+			: row,
+	);
+	globalThis.fetch = (async () =>
+		new Response(JSON.stringify({ servers: rows }), {
+			status: 200,
+			headers: { "content-type": "application/json" },
+		})) as typeof fetch;
+
+	const { renderer, mockInput, renderOnce, captureCharFrame } =
+		await testRender(
+			<AppProvider initialProjectPath={project}>
+				<DimensionsProvider>
+					<KeyRouter>
+						<GoToRegistry />
+						<McpRegistryScreen />
+						<ModalContainer />
+					</KeyRouter>
+				</DimensionsProvider>
+			</AppProvider>,
+			{ width: 180, height: 40 },
+		);
+	cleanup.push(async () => {
+		await act(async () => renderer.destroy());
+	});
+
+	const settle = async () => {
+		await new Promise<void>((resolve) => setTimeout(resolve, 10));
+		await renderOnce();
+	};
+	const send = async (fn: () => void | Promise<void>) =>
+		act(async () => {
+			await fn();
+			await settle();
+		});
+	// Poll outcomes while advancing the real renderer and debounce timer.
+	// A failed assertion is rethrown at the deadline rather than hidden.
+	const until = async (assertion: () => void) => {
+		const deadline = Date.now() + 3000;
+		while (true) {
+			await act(async () => settle());
+			try {
+				assertion();
+				return;
+			} catch (error) {
+				if (Date.now() >= deadline) throw error;
+			}
+		}
+	};
+	const read = (path: string) =>
+		existsSync(path) ? readFileSync(path, "utf8") : null;
+	const files = (): ProjectFiles => ({
+		mcp: read(mcpPath),
+		approvals: read(approvalsPath),
+	});
+	const mcp = (): McpDocument | undefined => {
+		const text = read(mcpPath);
+		return text === null ? undefined : (JSON.parse(text) as McpDocument);
+	};
+	const approvals = (): ApprovalDocument | undefined => {
+		const text = read(approvalsPath);
+		return text === null ? undefined : (JSON.parse(text) as ApprovalDocument);
+	};
+
+	const first = rows[0];
+	if (first) {
+		await until(() => {
+			expect(captureCharFrame()).toContain(first.name);
+			expect(captureCharFrame()).toContain("Status");
+		});
+	}
+
+	return {
+		mockInput,
+		send,
+		until,
+		files,
+		mcp,
+		approvals,
+		frame: captureCharFrame,
+	};
+}
+
+// Ignore terminal box separators and whitespace, not the wording being tested.
+function text(frame: string) {
+	return frame
+		.replace(/[│┃║┆┊]/g, " ")
+		.replace(/\s+/g, " ")
+		.trim();
+}
+
+function statusLine(frame: string) {
+	const line = frame
+		.split("\n")
+		.find((candidate) => /\bStatus\b/.test(candidate));
+	expect(line).toBeDefined();
+	return line ?? "";
+}
+
+function expectInstalled(frame: string) {
+	const status = statusLine(frame);
+	expect(status).toContain("Installed");
+	expect(status).not.toMatch(/\bnot\s+installed\b/i);
+}
+
+function expectNotInstalled(frame: string) {
+	// The contract fixes "Installed", but not the exact uninstalled label.
+	const status = statusLine(frame).replace(/\bnot\s+installed\b/gi, "");
+	expect(status).not.toMatch(/\binstalled\b/i);
+}
+
+type InstallCase = [
+	scenario: string,
+	row: McpRegistryServer,
+	config: McpServerConfig,
+];
+const installCases: InstallCase[] = [
+	[
+		"TEST-42 REQ-2 REQ-8 REQ-9 REQ-12 REQ-14: Enter installs PyPI by row name and shows Installed",
+		{
+			name: "qa/pypi",
+			url: "pypi:mcparmory-notion",
+			short_description: "qa/pypi description",
+			package_registry: "pypi",
+			version: "99.0.0",
+		},
+		{
+			command: "uvx",
+			args: ["mcparmory-notion"],
+		},
+	],
+	[
+		"TEST-43 REQ-3 REQ-8 REQ-9 REQ-12 REQ-14: Enter installs unscoped npm by row name and shows Installed",
+		{
+			name: "qa/npm",
+			url: "npm:npm-search-mcp",
+			short_description: "qa/npm description",
+			package_registry: "npm",
+			version: "99.0.0",
+		},
+		{
+			command: "npx",
+			args: ["-y", "npm-search-mcp"],
+		},
+	],
+	[
+		"TEST-44 REQ-3 REQ-8 REQ-9 REQ-12 REQ-14: Enter installs scoped npm by row name and shows Installed",
+		{
+			name: "qa/npm-scoped",
+			url: "npm:@yawlabs/npmjs-mcp",
+			short_description: "qa/npm-scoped description",
+			package_registry: "npm",
+			version: "99.0.0",
+		},
+		{
+			command: "npx",
+			args: ["-y", "@yawlabs/npmjs-mcp"],
+		},
+	],
+	[
+		"TEST-45 REQ-1 REQ-8 REQ-9 REQ-12 REQ-14: Enter keeps hosted HTTPS as HTTP despite npm metadata",
+		{
+			name: "qa/https",
+			url: "https://mcp.notion.com/mcp",
+			short_description: "qa/https description",
+			package_registry: "npm",
+		},
+		{
+			type: "http",
+			url: "https://mcp.notion.com/mcp",
+		},
+	],
+	[
+		"TEST-46 REQ-1 REQ-8 REQ-9 REQ-12 REQ-14: Enter installs an HTTP row without changing its config",
+		{
+			name: "qa/http",
+			url: "http://localhost:8080/mcp",
+			short_description: "qa/http description",
+		},
+		{
+			type: "http",
+			url: "http://localhost:8080/mcp",
+		},
+	],
+];
+
+describe("registry screen: Enter installs the row's contracted transport", () => {
+	test.each(installCases)("%s", async (_scenario, row, config) => {
+		const m = await mount([row]);
+		expect(m.files()).toStrictEqual({ mcp: null, approvals: null });
+
+		await m.send(() => m.mockInput.pressEnter());
+		await m.until(() => {
+			expectInstalled(m.frame());
+			expect(m.approvals()?.enabledMcpjsonServers).toContain(row.name);
+		});
+
+		expect(m.mcp()?.mcpServers).toStrictEqual({ [row.name]: config });
+		expect(m.approvals()?.enabledMcpjsonServers).toStrictEqual([row.name]);
+		expect(m.approvals()?.enableAllProjectMcpServers).toBe(true);
+	});
+
+	test("TEST-47 REQ-3 REQ-8 REQ-9: installing npm retains an existing entry and approval", async () => {
+		const row = server("qa/add-npm", "npm:npm-search-mcp", {
+			version: "99.0.0",
+		});
+		const m = await mount(
+			[row],
+			projectSeed({ [KEEP_NAME]: KEEP_CONFIG }, [KEEP_NAME], false),
+		);
+
+		await m.send(() => m.mockInput.pressEnter());
+		await m.until(() => {
+			expectInstalled(m.frame());
+			expect(m.approvals()?.enabledMcpjsonServers).toContain(row.name);
+		});
+
+		expect(m.mcp()?.mcpServers).toStrictEqual({
+			[KEEP_NAME]: KEEP_CONFIG,
+			[row.name]: { command: "npx", args: ["-y", "npm-search-mcp"] },
+		});
+		expect(
+			[...(m.approvals()?.enabledMcpjsonServers ?? [])].sort(),
+		).toStrictEqual([KEEP_NAME, row.name].sort());
+		expect(m.approvals()?.enableAllProjectMcpServers).toBe(true);
+	});
+});
+
+type DetailCase = [
+	scenario: string,
+	row: McpRegistryServer,
+	config: McpServerConfig,
+	runs: string,
+	installed: boolean,
+];
+const detailCases: DetailCase[] = [
+	[
+		"TEST-48 REQ-2 REQ-11 REQ-12 REQ-14: pypi details not installed without a source show package setup guidance",
+		{
+			name: "qa/pypi-detail",
+			url: "pypi:mcparmory-notion",
+			short_description: "qa/pypi-detail description",
+			package_registry: "pypi",
+			version: "99.0.0",
+		},
+		{
+			command: "uvx",
+			args: ["mcparmory-notion"],
+		},
+		"uvx mcparmory-notion",
+		false,
+	],
+	[
+		"TEST-49 REQ-2 REQ-11 REQ-12 REQ-14: pypi details not installed with a source show package setup guidance",
+		{
+			name: "qa/pypi-detail",
+			url: "pypi:mcparmory-notion",
+			short_description: "qa/pypi-detail description",
+			package_registry: "pypi",
+			version: "99.0.0",
+			source_code_url: "https://example.test/pypi/source",
+		},
+		{
+			command: "uvx",
+			args: ["mcparmory-notion"],
+		},
+		"uvx mcparmory-notion",
+		false,
+	],
+	[
+		"TEST-50 REQ-2 REQ-11 REQ-12 REQ-14: pypi details installed without a source show package setup guidance",
+		{
+			name: "qa/pypi-detail",
+			url: "pypi:mcparmory-notion",
+			short_description: "qa/pypi-detail description",
+			package_registry: "pypi",
+			version: "99.0.0",
+		},
+		{
+			command: "uvx",
+			args: ["mcparmory-notion"],
+		},
+		"uvx mcparmory-notion",
+		true,
+	],
+	[
+		"TEST-51 REQ-2 REQ-11 REQ-12 REQ-14: pypi details installed with a source show package setup guidance",
+		{
+			name: "qa/pypi-detail",
+			url: "pypi:mcparmory-notion",
+			short_description: "qa/pypi-detail description",
+			package_registry: "pypi",
+			version: "99.0.0",
+			source_code_url: "https://example.test/pypi/source",
+		},
+		{
+			command: "uvx",
+			args: ["mcparmory-notion"],
+		},
+		"uvx mcparmory-notion",
+		true,
+	],
+	[
+		"TEST-52 REQ-3 REQ-11 REQ-12 REQ-14: npm details not installed without a source show package setup guidance",
+		{
+			name: "qa/npm-detail",
+			url: "npm:@yawlabs/npmjs-mcp",
+			short_description: "qa/npm-detail description",
+			package_registry: "npm",
+			version: "99.0.0",
+		},
+		{
+			command: "npx",
+			args: ["-y", "@yawlabs/npmjs-mcp"],
+		},
+		"npx -y @yawlabs/npmjs-mcp",
+		false,
+	],
+	[
+		"TEST-53 REQ-3 REQ-11 REQ-12 REQ-14: npm details not installed with a source show package setup guidance",
+		{
+			name: "qa/npm-detail",
+			url: "npm:@yawlabs/npmjs-mcp",
+			short_description: "qa/npm-detail description",
+			package_registry: "npm",
+			version: "99.0.0",
+			source_code_url: "https://example.test/npm/source",
+		},
+		{
+			command: "npx",
+			args: ["-y", "@yawlabs/npmjs-mcp"],
+		},
+		"npx -y @yawlabs/npmjs-mcp",
+		false,
+	],
+	[
+		"TEST-54 REQ-3 REQ-11 REQ-12 REQ-14: npm details installed without a source show package setup guidance",
+		{
+			name: "qa/npm-detail",
+			url: "npm:@yawlabs/npmjs-mcp",
+			short_description: "qa/npm-detail description",
+			package_registry: "npm",
+			version: "99.0.0",
+		},
+		{
+			command: "npx",
+			args: ["-y", "@yawlabs/npmjs-mcp"],
+		},
+		"npx -y @yawlabs/npmjs-mcp",
+		true,
+	],
+	[
+		"TEST-55 REQ-3 REQ-11 REQ-12 REQ-14: npm details installed with a source show package setup guidance",
+		{
+			name: "qa/npm-detail",
+			url: "npm:@yawlabs/npmjs-mcp",
+			short_description: "qa/npm-detail description",
+			package_registry: "npm",
+			version: "99.0.0",
+			source_code_url: "https://example.test/npm/source",
+		},
+		{
+			command: "npx",
+			args: ["-y", "@yawlabs/npmjs-mcp"],
+		},
+		"npx -y @yawlabs/npmjs-mcp",
+		true,
+	],
+];
+
+describe("registry screen: package details explain the runner and user setup", () => {
+	test.each(detailCases)(
+		"%s",
+		async (_scenario, row, config, runs, installed) => {
+			const seed = installed ? projectSeed({ [row.name]: config }) : {};
+			const expectedFiles: ProjectFiles = {
+				mcp: seed.mcp ?? null,
+				approvals: seed.approvals ?? null,
+			};
+
+			const m = await mount([row], seed);
+
+			const visible = text(m.frame());
+			expect(visible).toContain(`Runs ${runs}`);
+			expect(visible).toContain(WARNING);
+			expect(visible.indexOf("Status")).toBeLessThan(visible.indexOf("Runs "));
+			expect(visible.indexOf("Runs ")).toBeLessThan(visible.indexOf(WARNING));
+			if (installed) {
+				expectInstalled(m.frame());
+			} else {
+				expectNotInstalled(m.frame());
+				expect(visible).toContain("Press Enter to install");
+			}
+			if (row.source_code_url) {
+				expect(visible).toContain(SOURCE_GUIDANCE);
+				expect(visible).toContain(row.source_code_url);
+				expect(visible.indexOf("Status")).toBeLessThan(
+					visible.indexOf(SOURCE_GUIDANCE),
+				);
+			} else {
+				expect(visible).not.toContain(SOURCE_GUIDANCE);
+			}
+			expect(m.files()).toStrictEqual(expectedFiles);
+		},
+	);
+});
+
+type RefusalCase = [
+	scenario: string,
+	row: McpRegistryServer,
+	kind: string,
+	reason: string,
+];
+const refusalCases: RefusalCase[] = [
+	[
+		"TEST-56 REQ-4 REQ-7 REQ-10 REQ-13: oci shows its refusal and creates neither file on Enter",
+		{
+			name: "qa/oci",
+			url: "oci:ghcr.io/x/y:1",
+			short_description: "qa/oci description",
+		},
+		"oci",
+		"magus can't install oci servers. It can install https, pypi and npm ones.",
+	],
+	[
+		"TEST-57 REQ-4 REQ-7 REQ-10 REQ-13: nuget shows its refusal and creates neither file on Enter",
+		{
+			name: "qa/nuget",
+			url: "nuget:Foo",
+			short_description: "qa/nuget description",
+		},
+		"nuget",
+		"magus can't install nuget servers. It can install https, pypi and npm ones.",
+	],
+	[
+		"TEST-58 REQ-4 REQ-7 REQ-10 REQ-13: foo shows its refusal and creates neither file on Enter",
+		{
+			name: "qa/foo",
+			url: "foo:bar",
+			short_description: "qa/foo description",
+		},
+		"foo",
+		"magus can't install foo servers. It can install https, pypi and npm ones.",
+	],
+	[
+		"TEST-59 REQ-4 REQ-7 REQ-10 REQ-13: unreadable shows its refusal and creates neither file on Enter",
+		{
+			name: "qa/unreadable",
+			url: "just-text",
+			short_description: "qa/unreadable description",
+		},
+		"unknown",
+		"magus can't read this server's address.",
+	],
+	[
+		"TEST-60 REQ-5 REQ-7 REQ-10 REQ-13: pypi-empty shows its refusal and creates neither file on Enter",
+		{
+			name: "qa/pypi-empty",
+			url: "pypi:",
+			short_description: "qa/pypi-empty description",
+		},
+		"pypi",
+		"This pypi server has no package name, so there's nothing to run.",
+	],
+	[
+		"TEST-61 REQ-5 REQ-7 REQ-10 REQ-13: pypi-bad shows its refusal and creates neither file on Enter",
+		{
+			name: "qa/pypi-bad",
+			url: "pypi:pkg[extra]",
+			short_description: "qa/pypi-bad description",
+		},
+		"pypi",
+		"The package name of this pypi server looks wrong, so magus won't run it.",
+	],
+	[
+		"TEST-62 REQ-5 REQ-7 REQ-10 REQ-13: npm-injection shows its refusal and creates neither file on Enter",
+		{
+			name: "qa/npm-injection",
+			url: "npm:--package=x",
+			short_description: "qa/npm-injection description",
+		},
+		"npm",
+		"The package name of this npm server looks wrong, so magus won't run it.",
+	],
+	[
+		"TEST-63 REQ-5 REQ-7 REQ-10 REQ-13: npm-empty shows its refusal and creates neither file on Enter",
+		{
+			name: "qa/npm-empty",
+			url: "npm:",
+			short_description: "qa/npm-empty description",
+		},
+		"npm",
+		"This npm server has no package name, so there's nothing to run.",
+	],
+	[
+		"TEST-64 REQ-4 REQ-7 REQ-10 REQ-13: https-no-host shows its refusal and creates neither file on Enter",
+		{
+			name: "qa/https-no-host",
+			url: "https://",
+			short_description: "qa/https-no-host description",
+		},
+		"unknown",
+		"magus can't read this server's address.",
+	],
+];
+
+describe("registry screen: refusals explain the kind without writing state", () => {
+	test.each(refusalCases)("%s", async (_scenario, row, kind, reason) => {
+		const m = await mount([row]);
+		const pane = text(m.frame());
+		// REQ-4b: every refused row shows the same reason in its pane and popup.
+		expect(pane).toContain(reason);
+		if (kind === "pypi" || kind === "npm" || kind === "unknown") {
+			expect(pane).not.toContain(
+				`magus can't install ${kind} servers. It can install https, pypi and npm ones.`,
+			);
+		}
+		expect(text(m.frame())).not.toContain("Press Enter to install");
+		expect(m.files()).toStrictEqual({ mcp: null, approvals: null });
+
+		await m.send(() => m.mockInput.pressEnter());
+		await m.until(() => {
+			expect(text(m.frame())).toContain(`${row.name} wasn't installed`);
+		});
+
+		expect(text(m.frame())).toContain(reason);
+		expect(m.files()).toStrictEqual({ mcp: null, approvals: null });
+	});
+
+	test("TEST-65 REQ-4 REQ-7 REQ-10 REQ-13: a refused install preserves both existing files byte-for-byte", async () => {
+		const row = server("qa/refused-oci", "oci:ghcr.io/x/y:1");
+		const seed = projectSeed({ [KEEP_NAME]: KEEP_CONFIG });
+		const m = await mount([row], seed);
+		const before = m.files();
+		expect(before).toStrictEqual({
+			mcp: seed.mcp,
+			approvals: seed.approvals,
+		});
+		expect(text(m.frame())).toContain(
+			"magus can't install oci servers. It can install https, pypi and npm ones.",
+		);
+		expect(text(m.frame())).not.toContain("Press Enter to install");
+
+		await m.send(() => m.mockInput.pressEnter());
+		await m.until(() => {
+			expect(text(m.frame())).toContain(`${row.name} wasn't installed`);
+		});
+
+		expect(text(m.frame())).toContain(
+			"magus can't install oci servers. It can install https, pypi and npm ones.",
+		);
+		expect(m.files()).toStrictEqual(before);
+	});
+});
+
+const removeCases: InstallCase[] = [
+	[
+		"TEST-66 REQ-12: d then confirmation removes installed PyPI by registry name",
+		{
+			name: "qa/remove-pypi",
+			url: "pypi:mcparmory-notion",
+			short_description: "qa/remove-pypi description",
+		},
+		{
+			command: "uvx",
+			args: ["mcparmory-notion"],
+		},
+	],
+	[
+		"TEST-67 REQ-12: d then confirmation removes installed npm by registry name",
+		{
+			name: "qa/remove-npm",
+			url: "npm:@yawlabs/npmjs-mcp",
+			short_description: "qa/remove-npm description",
+		},
+		{
+			command: "npx",
+			args: ["-y", "@yawlabs/npmjs-mcp"],
+		},
+	],
+	[
+		"TEST-68 REQ-12: d then confirmation removes installed HTTP by registry name",
+		{
+			name: "qa/remove-http",
+			url: "https://remove.example.test/mcp",
+			short_description: "qa/remove-http description",
+		},
+		{
+			type: "http",
+			url: "https://remove.example.test/mcp",
+		},
+	],
+];
+
+describe("registry screen: installed state and removal use the registry name", () => {
+	test.each(removeCases)("%s", async (_scenario, row, config) => {
+		const m = await mount(
+			[row],
+			projectSeed({ [KEEP_NAME]: KEEP_CONFIG, [row.name]: config }),
+		);
+		expectInstalled(m.frame());
+		const before = m.files();
+
+		await m.send(() => m.mockInput.typeText("d"));
+		expect(m.files()).toStrictEqual(before);
+		// Confirm through the mounted modal using its documented affirmative key.
+		await m.send(() => m.mockInput.typeText("y"));
+		await m.until(() => {
+			expect(m.mcp()?.mcpServers).toStrictEqual({ [KEEP_NAME]: KEEP_CONFIG });
+			expect(text(m.frame())).toContain("Press Enter to install");
+			expectNotInstalled(m.frame());
+		});
+	});
+});
+
+describe("registry screen: hosted HTTP remains the existing path", () => {
+	test("TEST-69 REQ-1 REQ-6 REQ-11 REQ-14: HTTP details do not acquire package-only guidance", async () => {
+		const row = server("qa/http-detail", "https://hosted.example.test/mcp", {
+			package_registry: "npm",
+			source_code_url: "https://example.test/http/source",
+		});
+
+		const m = await mount([row]);
+
+		const visible = text(m.frame());
+		expectNotInstalled(m.frame());
+		expect(visible).toContain("Press Enter to install");
+		expect(visible).not.toMatch(/\bRuns\b/);
+		expect(visible).not.toContain(WARNING);
+		expect(visible).not.toContain(SOURCE_GUIDANCE);
+		expect(m.files()).toStrictEqual({ mcp: null, approvals: null });
+	});
+});