offrouter-cli 0.2.1 → 0.3.0

package/src/cli.test.ts

@@ -1,1705 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import { chmod, mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { FileUsageStore } from "offrouter-core";
-import { createProgram, runCli } from "./index.js";
-
-async function capture(
-  argv: string[],
-  env: NodeJS.ProcessEnv = {
-    ...process.env,
-    OFFROUTER_HOME: "/tmp/offrouter-cli-test-empty",
-  },
-  options: { stdin?: string; cwd?: string } = {},
-): Promise<{ code: number; stdout: string; stderr: string }> {
-  let stdout = "";
-  let stderr = "";
-  const code = await runCli(argv, {
-    env,
-    cwd: options.cwd ?? process.cwd(),
-    stdin: options.stdin,
-    stdout: {
-      write(chunk: string) {
-        stdout += chunk;
-        return true;
-      },
-    },
-    stderr: {
-      write(chunk: string) {
-        stderr += chunk;
-        return true;
-      },
-    },
-  });
-  return { code, stdout, stderr };
-}
-
-const fixturePromptPath = fileURLToPath(
-  new URL(
-    "../../../tests/fixtures/claude/user-prompt-submit.json",
-    import.meta.url,
-  ),
-);
-
-const HONESTY =
-  "Claude Code's primary model is unchanged in V1. OffRouter routes delegated work.";
-
-const CODEX_HONESTY =
-  "Codex's primary model is unchanged in V1. OffRouter routes delegated work.";
-
-const GEMINI_HONESTY =
-  "Gemini CLI's primary model is unchanged in V1. OffRouter routes delegated work.";
-
-const GROK_HONESTY =
-  "Grok Build's primary model is unchanged in V1. OffRouter routes delegated work.";
-
-describe("offrouter CLI", () => {
-  it("offrouter --help lists core commands", async () => {
-    const { code, stdout } = await capture(["--help"]);
-    expect(code).toBe(0);
-    expect(stdout).toMatch(/Usage:/i);
-    for (const cmd of [
-      "init",
-      "doctor",
-      "login",
-      "models",
-      "profiles",
-      "route",
-      "status",
-      "update",
-      "mcp",
-      "hooks",
-      "install",
-      "uninstall",
-    ]) {
-      expect(stdout).toContain(cmd);
-    }
-  });
-
-  it("offrouter mcp serve --help is available without starting the stdio server", async () => {
-    const { code, stdout, stderr } = await capture(["mcp", "serve", "--help"]);
-    expect(code).toBe(0);
-    expect(stdout + stderr).toMatch(/mcp|stdio|server/i);
-    expect(stdout + stderr).not.toMatch(/Unknown command|error:/i);
-  });
-
-  it("offrouter hooks claude user-prompt-submit emits exact JSON with no profile", async () => {
-    const { readFile } = await import("node:fs/promises");
-    const stdin = await readFile(fixturePromptPath, "utf8");
-    const { code, stdout, stderr } = await capture(
-      ["hooks", "claude", "user-prompt-submit"],
-      {
-        ...process.env,
-        OFFROUTER_HOME: "/tmp/offrouter-cli-hook-no-profile",
-      },
-      { stdin },
-    );
-    expect(code).toBe(0);
-    expect(stderr).toBe("");
-    // Exact JSON object on stdout (no trailing prose).
-    const parsed = JSON.parse(stdout) as {
-      decision?: string;
-      hookSpecificOutput?: { additionalContext?: string };
-    };
-    expect(parsed.decision).toBeUndefined();
-    expect(parsed.hookSpecificOutput?.additionalContext).toMatch(
-      /no active profile/i,
-    );
-    expect(stdout.trim()).toBe(stdout);
-    expect(stdout).not.toContain("\n");
-  });
-
-  it("offrouter hooks claude user-prompt-submit blocks denied profiles when profile is supplied", async () => {
-    const { readFile } = await import("node:fs/promises");
-    const stdin = await readFile(fixturePromptPath, "utf8");
-    const { code, stdout, stderr } = await capture(
-      ["hooks", "claude", "user-prompt-submit", "--profile", "claude-work"],
-      {
-        ...process.env,
-        OFFROUTER_HOME: "/tmp/offrouter-cli-hook-work",
-      },
-      { stdin },
-    );
-    expect(code).toBe(0);
-    expect(stderr).toBe("");
-    const parsed = JSON.parse(stdout) as {
-      decision?: string;
-      reason?: string;
-    };
-    expect(parsed.decision).toBe("block");
-    expect(String(parsed.reason ?? "").toLowerCase()).toMatch(
-      /work|denied|not allowlisted|policy/,
-    );
-  });
-
-  it("offrouter doctor --json reports readiness and honesty line", async () => {
-    const { code, stdout } = await capture(["doctor", "--json"]);
-    expect(code).toBe(0);
-    const json = JSON.parse(stdout) as Record<string, unknown>;
-    expect(json.honesty).toBe(HONESTY);
-    expect(json).toHaveProperty("node");
-    expect(json).toHaveProperty("harnessProfiles");
-    expect(json).toHaveProperty("authTiers");
-    expect(json).toHaveProperty("subscription");
-    expect(json).toHaveProperty("apiKeyReadiness");
-    expect(json).toHaveProperty("providerAuth");
-    expect(json).toHaveProperty("localRuntime");
-    expect(json).toHaveProperty("profile");
-    expect(json).toHaveProperty("claudeCli");
-    expect(json).toHaveProperty("mcpServe");
-    expect(json).toHaveProperty("limits");
-    expect(json).toHaveProperty("lastProviderError");
-    expect(JSON.stringify(json)).not.toMatch(/sk-[a-zA-Z0-9]/);
-  });
-
-  it("offrouter doctor --json reports config warnings, profile allow, command paths, and readiness without secrets", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-doctor-"));
-    const secretDir = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-sk-test-secret-value-123456-"),
-    );
-    try {
-      const binDir = join(secretDir, "bin");
-      await mkdir(binDir);
-      const claudePath = join(binDir, "claude");
-      const offrouterPath = join(binDir, "offrouter");
-      await writeFile(claudePath, "#!/bin/sh\nexit 0\n", "utf8");
-      await writeFile(offrouterPath, "#!/bin/sh\nexit 0\n", "utf8");
-      await chmod(claudePath, 0o755);
-      await chmod(offrouterPath, 0o755);
-      await writeFile(
-        join(home, "config.toml"),
-        [
-          'allowlisted_profiles = ["claude-personal"]',
-          "unexpected_root_key = true",
-          "[providers.anthropic]",
-          "enabled = true",
-          'unknown_provider_key = "warn"',
-          "",
-        ].join("\n"),
-        "utf8",
-      );
-
-      const { code, stdout } = await capture(
-        ["doctor", "--profile", "claude-personal", "--json"],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          PATH: binDir,
-          OLLAMA_HOST: "http://127.0.0.1:11434",
-          ANTHROPIC_API_KEY: "sk-test-secret-value-123456",
-        },
-      );
-      expect(code).toBe(0);
-      const json = JSON.parse(stdout) as {
-        node: {
-          version: string;
-          engineRequirement: string;
-          satisfiesEngine: boolean;
-        };
-        config: {
-          valid: boolean;
-          warnings: number;
-          warningDetails: Array<{ path: string; message: string }>;
-          providersConfigured: string[];
-        };
-        profile: {
-          profile: string;
-          allowed: boolean;
-          status: string;
-          denials: Array<{ code: string }>;
-          routeReadiness: { needsConfiguration: boolean };
-        };
-        claudeCli: { available: boolean; path: string | null };
-        mcpServe: { available: boolean; path: string | null };
-        providerAuth: {
-          ready: boolean;
-          envPresent: string[];
-          configuredProviders: string[];
-        };
-        localRuntime: { ready: boolean };
-      };
-
-      expect(json.node.version).toMatch(/^v\d+\.\d+\.\d+/);
-      expect(json.node.engineRequirement).toBe(">=22");
-      expect(json.node.satisfiesEngine).toBe(true);
-      expect(json.config.valid).toBe(true);
-      expect(json.config.warnings).toBeGreaterThanOrEqual(2);
-      expect(json.config.warningDetails).toEqual(
-        expect.arrayContaining([
-          expect.objectContaining({ path: "unexpected_root_key" }),
-          expect.objectContaining({
-            path: "providers.anthropic.unknown_provider_key",
-          }),
-        ]),
-      );
-      expect(json.config.providersConfigured).toEqual(["anthropic"]);
-      expect(json.profile.profile).toBe("claude-personal");
-      expect(json.profile.allowed).toBe(true);
-      expect(json.profile.status).toBe("allowed");
-      expect(json.profile.denials).toEqual([]);
-      expect(json.profile.routeReadiness.needsConfiguration).toBe(true);
-      expect(json.claudeCli.available).toBe(true);
-      expect(json.claudeCli.path).toContain("[REDACTED]");
-      expect(json.mcpServe.available).toBe(true);
-      expect(json.mcpServe.path).toContain("[REDACTED]");
-      expect(json.providerAuth.ready).toBe(true);
-      expect(json.providerAuth.envPresent).toEqual(["ANTHROPIC_API_KEY"]);
-      expect(json.providerAuth.configuredProviders).toEqual(["anthropic"]);
-      expect(json.localRuntime.ready).toBe(true);
-      expect(stdout).not.toContain("sk-test-secret-value-123456");
-    } finally {
-      await rm(home, { recursive: true, force: true });
-      await rm(secretDir, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter doctor --json reports selected profile denial", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-doctor-deny-"));
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["claude-work"]\n',
-        "utf8",
-      );
-      const { code, stdout } = await capture(
-        ["doctor", "--profile", "claude-work", "--json"],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-        },
-      );
-      expect(code).toBe(0);
-      const json = JSON.parse(stdout) as {
-        profile: {
-          allowed: boolean;
-          status: string;
-          denials: Array<{ code: string; id: string }>;
-        };
-      };
-      expect(json.profile.allowed).toBe(false);
-      expect(json.profile.status).toBe("denied");
-      expect(json.profile.denials).toContainEqual(
-        expect.objectContaining({
-          code: "work_profile_denied",
-          id: "claude-work",
-        }),
-      );
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter doctor --json denies work-like staging ids even when allowlisted", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-doctor-deny-staging-"),
-    );
-    try {
-      // Allowlisted on purpose: work-like ids must still be denied by default.
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["claude-work-staging"]\n',
-        "utf8",
-      );
-      const { code, stdout } = await capture(
-        ["doctor", "--profile", "claude-work-staging", "--json"],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-        },
-      );
-      expect(code).toBe(0);
-      const json = JSON.parse(stdout) as {
-        profile: {
-          allowed: boolean;
-          status: string;
-          denials: Array<{ code: string; id: string }>;
-        };
-      };
-      expect(json.profile.allowed).toBe(false);
-      expect(json.profile.status).toBe("denied");
-      expect(json.profile.denials).toContainEqual(
-        expect.objectContaining({
-          code: "work_profile_denied",
-          id: "claude-work-staging",
-        }),
-      );
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter doctor --json reports current CLI entrypoint as MCP fallback", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-doctor-entrypoint-home-"),
-    );
-    const entryRoot = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-doctor-entrypoint-"),
-    );
-    const previousArgv1 = process.argv[1];
-    try {
-      const entryDir = join(entryRoot, "packages", "cli", "dist");
-      await mkdir(entryDir, { recursive: true });
-      const entryPoint = join(entryDir, "index.js");
-      await writeFile(entryPoint, "#!/usr/bin/env node\n", "utf8");
-      process.argv[1] = entryPoint;
-
-      const { code, stdout } = await capture(["doctor", "--json"], {
-        ...process.env,
-        OFFROUTER_HOME: home,
-        PATH: "/definitely-no-offrouter-here",
-      });
-      expect(code).toBe(0);
-      const json = JSON.parse(stdout) as {
-        mcpServe: {
-          available: boolean;
-          command: string;
-          path: string | null;
-        };
-      };
-      expect(json.mcpServe.available).toBe(true);
-      expect(json.mcpServe.command).toContain("mcp serve");
-      expect(json.mcpServe.path).toBe(entryPoint);
-    } finally {
-      process.argv[1] = previousArgv1;
-      await rm(home, { recursive: true, force: true });
-      await rm(entryRoot, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter doctor human output reports diagnostics without secrets", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-doctor-human-"));
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        ["unexpected_root_key = true", ""].join("\n"),
-        "utf8",
-      );
-      const { code, stdout } = await capture(
-        ["doctor", "--profile", "claude-work"],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          ANTHROPIC_API_KEY: "sk-test-secret-value-123456",
-        },
-      );
-      expect(code).toBe(0);
-      expect(stdout).toContain(HONESTY);
-      expect(stdout).toMatch(/Node:/);
-      expect(stdout).toMatch(/Config: valid/);
-      expect(stdout).toMatch(/warnings: 1/);
-      expect(stdout).toMatch(/Selected profile: claude-work/);
-      expect(stdout).toMatch(/denied/);
-      expect(stdout).toMatch(/Claude CLI:/);
-      expect(stdout).toMatch(/MCP serve:/);
-      expect(stdout).toMatch(/Provider auth:/);
-      expect(stdout).toMatch(/Local runtime:/);
-      expect(stdout).not.toContain("sk-test-secret-value-123456");
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter doctor --json never prints API key values", async () => {
-    const { code, stdout } = await capture(["doctor", "--json"], {
-      ...process.env,
-      OFFROUTER_HOME: "/tmp/offrouter-cli-test-empty",
-      ANTHROPIC_API_KEY: "sk-test-secret-value",
-    });
-    expect(code).toBe(0);
-    const json = JSON.parse(stdout) as {
-      apiKeyReadiness: { envPresent: string[] };
-    };
-    expect(json.apiKeyReadiness.envPresent).toContain("ANTHROPIC_API_KEY");
-    expect(stdout).not.toContain("sk-test-secret-value");
-  });
-
-  it("offrouter doctor --json surfaces invalid config instead of hiding it", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-bad-config-"));
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        "allowlisted_profiles = [",
-        "utf8",
-      );
-      const { code, stdout } = await capture(["doctor", "--json"], {
-        ...process.env,
-        OFFROUTER_HOME: home,
-      });
-      expect(code).toBe(0);
-      const json = JSON.parse(stdout) as {
-        configError: { message: string } | null;
-      };
-      expect(json.configError?.message.toLowerCase()).toContain("invalid");
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter init --dry-run --json shows readiness without writing config", async () => {
-    const home = "/tmp/offrouter-cli-init-dry-run";
-    const { code, stdout } = await capture(["init", "--dry-run", "--json"], {
-      ...process.env,
-      OFFROUTER_HOME: home,
-    });
-    expect(code).toBe(0);
-    const json = JSON.parse(stdout) as {
-      dryRun: boolean;
-      wroteConfig: boolean;
-      honesty: string;
-      detection: Record<string, unknown>;
-    };
-    expect(json.dryRun).toBe(true);
-    expect(json.wroteConfig).toBe(false);
-    expect(json.honesty).toBe(HONESTY);
-    expect(json.detection).toHaveProperty("harnessProfiles");
-    expect(json.detection).toHaveProperty("subscription");
-    expect(json.detection).toHaveProperty("apiKeyReadiness");
-    expect(json.detection).toHaveProperty("localRuntime");
-    expect(json.detection).toHaveProperty("authTiers");
-    expect(json.detection).toHaveProperty("limits");
-    expect(json.detection).toHaveProperty("lastProviderError");
-  });
-
-  it("offrouter status --providers --json includes provider-facing diagnostics", async () => {
-    const { code, stdout } = await capture(["status", "--providers", "--json"]);
-    expect(code).toBe(0);
-    const json = JSON.parse(stdout) as Record<string, unknown>;
-    expect(json.honesty).toBe(HONESTY);
-    expect(json).toHaveProperty("providers");
-    expect(json).toHaveProperty("harnessProfiles");
-    expect(json).toHaveProperty("authTiers");
-    expect(json).toHaveProperty("subscription");
-    expect(json).toHaveProperty("apiKeyReadiness");
-    expect(json).toHaveProperty("localRuntime");
-    expect(json).toHaveProperty("limits");
-    expect(json).toHaveProperty("lastProviderError");
-  });
-
-  it('offrouter route explain "explain this repo" --profile claude-personal', async () => {
-    const { code, stdout } = await capture([
-      "route",
-      "explain",
-      "explain this repo",
-      "--profile",
-      "claude-personal",
-    ]);
-    expect(code).toBe(0);
-    expect(stdout.length).toBeGreaterThan(0);
-    // Incomplete setup or policy should be explained, not silent success with a fake route.
-    expect(stdout.toLowerCase()).toMatch(
-      /configur|no provider|allowlist|cannot route|blocked|needs configuration|denied|setup/i,
-    );
-    expect(stdout.toLowerCase()).toContain("setup incomplete");
-  });
-
-  it("offrouter route explain --json marks empty personal setup as needsConfiguration", async () => {
-    const { code, stdout } = await capture([
-      "route",
-      "explain",
-      "explain this repo",
-      "--profile",
-      "claude-personal",
-      "--json",
-    ]);
-    expect(code).toBe(0);
-    const json = JSON.parse(stdout) as {
-      blocked: boolean;
-      needsConfiguration: boolean;
-      setupIncomplete: boolean;
-      reason: string;
-    };
-    expect(json.blocked).toBe(true);
-    expect(json.needsConfiguration).toBe(true);
-    expect(json.setupIncomplete).toBe(true);
-    expect(json.reason).toMatch(/configuration|no_candidate/i);
-  });
-
-  it("offrouter route explain --json keeps allowlisted personal profiles in setup-incomplete state", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-allowlisted-"));
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["claude-personal"]\n',
-        "utf8",
-      );
-      const { code, stdout } = await capture(
-        [
-          "route",
-          "explain",
-          "explain this repo",
-          "--profile",
-          "claude-personal",
-          "--json",
-        ],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-        },
-      );
-      expect(code).toBe(0);
-      const json = JSON.parse(stdout) as {
-        blocked: boolean;
-        needsConfiguration: boolean;
-        setupIncomplete: boolean;
-        policyDenials: Array<{ code: string }>;
-      };
-      expect(json.blocked).toBe(true);
-      expect(json.needsConfiguration).toBe(true);
-      expect(json.setupIncomplete).toBe(true);
-      expect(json.policyDenials).not.toContainEqual(
-        expect.objectContaining({ code: "project_untrusted" }),
-      );
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it('offrouter route explain "explain this repo" --profile claude-work', async () => {
-    const { code, stdout } = await capture([
-      "route",
-      "explain",
-      "explain this repo",
-      "--profile",
-      "claude-work",
-    ]);
-    expect(code).toBe(0);
-    expect(stdout.toLowerCase()).toMatch(
-      /work|denied|blocked|not allowlisted|policy/i,
-    );
-    expect(stdout.toLowerCase()).not.toContain("setup incomplete");
-  });
-
-  it("offrouter route explain --json hard-blocks work profiles", async () => {
-    const { code, stdout } = await capture([
-      "route",
-      "explain",
-      "explain this repo",
-      "--profile",
-      "claude-work",
-      "--json",
-    ]);
-    expect(code).toBe(0);
-    const json = JSON.parse(stdout) as {
-      blocked: boolean;
-      needsConfiguration: boolean;
-      setupIncomplete: boolean;
-      policyDenials: Array<{ code: string }>;
-    };
-    expect(json.blocked).toBe(true);
-    expect(json.needsConfiguration).toBe(false);
-    expect(json.setupIncomplete).toBe(false);
-    expect(json.policyDenials).toContainEqual(
-      expect.objectContaining({ code: "work_profile_denied" }),
-    );
-  });
-
-  it("offrouter route explain --json hard-blocks work-like staging profiles", async () => {
-    const { code, stdout } = await capture([
-      "route",
-      "explain",
-      "explain this repo",
-      "--profile",
-      "claude-work-staging",
-      "--json",
-    ]);
-    expect(code).toBe(0);
-    const json = JSON.parse(stdout) as {
-      blocked: boolean;
-      needsConfiguration: boolean;
-      setupIncomplete: boolean;
-      policyDenials: Array<{ code: string }>;
-    };
-    expect(json.blocked).toBe(true);
-    expect(json.needsConfiguration).toBe(false);
-    expect(json.setupIncomplete).toBe(false);
-    expect(json.policyDenials).toContainEqual(
-      expect.objectContaining({ code: "work_profile_denied" }),
-    );
-  });
-
-  it("offrouter models --json lists catalog shape without secrets", async () => {
-    const { code, stdout } = await capture(["models", "--json"]);
-    expect(code).toBe(0);
-    const json = JSON.parse(stdout) as { models: unknown[] };
-    expect(Array.isArray(json.models)).toBe(true);
-    expect(stdout).not.toMatch(/sk-[a-zA-Z0-9]/);
-  });
-
-  it("offrouter install claude --profile claude-personal --dry-run plans profile-scoped files only", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-install-"));
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["claude-personal"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "claude-profiles");
-      const { code, stdout, stderr } = await capture(
-        [
-          "install",
-          "claude",
-          "--profile",
-          "claude-personal",
-          "--dry-run",
-          "--json",
-        ],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-          OFFROUTER_CLAUDE_PROFILES_DIR: profilesRoot,
-        },
-      );
-      expect(code).toBe(0);
-      expect(stderr).toBe("");
-      const json = JSON.parse(stdout) as {
-        honesty: string;
-        dryRun: boolean;
-        results: Array<{
-          ok: boolean;
-          profile: string;
-          dryRun: boolean;
-          profileDir: string;
-          changes: Array<{ relativePath: string; kind: string }>;
-        }>;
-      };
-      expect(json.honesty).toBe(HONESTY);
-      expect(json.dryRun).toBe(true);
-      expect(json.results).toHaveLength(1);
-      const result = json.results[0]!;
-      expect(result.ok).toBe(true);
-      expect(result.profile).toBe("claude-personal");
-      expect(result.profileDir).toBe(join(profilesRoot, "claude-personal"));
-      expect(
-        result.changes.some((c) =>
-          c.relativePath.includes("skills/offrouter"),
-        ),
-      ).toBe(true);
-      // Dry-run must not create the profile skills tree.
-      const { access } = await import("node:fs/promises");
-      const { constants } = await import("node:fs");
-      await expect(
-        access(join(profilesRoot, "claude-personal"), constants.F_OK),
-      ).rejects.toBeTruthy();
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter uninstall claude --profile claude-personal rolls back install state", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-uninstall-"));
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["claude-personal"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "claude-profiles");
-      const env = {
-        ...process.env,
-        OFFROUTER_HOME: home,
-        HOME: home,
-        OFFROUTER_CLAUDE_PROFILES_DIR: profilesRoot,
-      };
-
-      const install = await capture(
-        ["install", "claude", "--profile", "claude-personal", "--json"],
-        env,
-      );
-      expect(install.code).toBe(0);
-
-      const hookPath = join(
-        profilesRoot,
-        "claude-personal",
-        "skills",
-        "offrouter",
-        "hooks",
-        "hooks.json",
-      );
-      const { readFile, access } = await import("node:fs/promises");
-      const { constants } = await import("node:fs");
-      const hooks = await readFile(hookPath, "utf8");
-      expect(hooks).toContain("OFFROUTER_PROFILE=claude-personal");
-
-      const uninstall = await capture(
-        ["uninstall", "claude", "--profile", "claude-personal", "--json"],
-        env,
-      );
-      expect(uninstall.code).toBe(0);
-      const json = JSON.parse(uninstall.stdout) as {
-        results: Array<{ ok: boolean; profile: string }>;
-      };
-      expect(json.results[0]?.ok).toBe(true);
-      expect(json.results[0]?.profile).toBe("claude-personal");
-      await expect(access(hookPath, constants.F_OK)).rejects.toBeTruthy();
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter install claude --all-personal skips bare global claude profile", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-install-all-"));
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["claude", "claude-personal", "claude-work"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "claude-profiles");
-      const { code, stdout, stderr } = await capture(
-        ["install", "claude", "--all-personal", "--dry-run", "--json"],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-          OFFROUTER_CLAUDE_PROFILES_DIR: profilesRoot,
-        },
-      );
-      expect(code).toBe(0);
-      expect(stderr).toBe("");
-      const json = JSON.parse(stdout) as {
-        results: Array<{ profile: string; ok: boolean }>;
-      };
-      expect(json.results.map((r) => r.profile)).toEqual(["claude-personal"]);
-      expect(json.results.every((r) => r.ok)).toBe(true);
-      expect(json.results.map((r) => r.profile)).not.toContain("claude");
-      expect(json.results.map((r) => r.profile)).not.toContain("claude-work");
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter install rejects --all-personal combined with --profile", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-install-both-"));
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["claude-personal"]\n',
-        "utf8",
-      );
-      const { code, stdout, stderr } = await capture(
-        [
-          "install",
-          "claude",
-          "--all-personal",
-          "--profile",
-          "claude-personal",
-          "--dry-run",
-          "--json",
-        ],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-        },
-      );
-      expect(code).not.toBe(0);
-      const combined = `${stdout}\n${stderr}`;
-      expect(combined.toLowerCase()).toMatch(
-        /either|--profile|--all-personal|not both/,
-      );
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter uninstall rejects --all-personal combined with --profile", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-uninstall-both-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["claude-personal"]\n',
-        "utf8",
-      );
-      const { code, stdout, stderr } = await capture(
-        [
-          "uninstall",
-          "claude",
-          "--all-personal",
-          "--profile",
-          "claude-personal",
-          "--json",
-        ],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-        },
-      );
-      expect(code).not.toBe(0);
-      const combined = `${stdout}\n${stderr}`;
-      expect(combined.toLowerCase()).toMatch(
-        /either|--profile|--all-personal|not both/,
-      );
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter install denies work-like ids such as claude-work-staging even if allowlisted", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-install-work-staging-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["claude-work-staging"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "claude-profiles");
-      const { code, stdout } = await capture(
-        [
-          "install",
-          "claude",
-          "--profile",
-          "claude-work-staging",
-          "--dry-run",
-          "--json",
-        ],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-          OFFROUTER_CLAUDE_PROFILES_DIR: profilesRoot,
-        },
-      );
-      expect(code).not.toBe(0);
-      const json = JSON.parse(stdout) as {
-        results?: Array<{ ok: boolean; errorCode?: string; message?: string }>;
-        error?: { message?: string };
-      };
-      if (json.results?.[0]) {
-        expect(json.results[0].ok).toBe(false);
-        expect(json.results[0].errorCode).toBe("work_profile_denied");
-      } else {
-        expect(String(json.error?.message ?? "").toLowerCase()).toMatch(
-          /work|denied/,
-        );
-      }
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter uninstall claude --all-personal exits nonzero on invalid install state", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-uninstall-all-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["claude-personal"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "claude-profiles");
-      const env = {
-        ...process.env,
-        OFFROUTER_HOME: home,
-        HOME: home,
-        OFFROUTER_CLAUDE_PROFILES_DIR: profilesRoot,
-      };
-
-      const install = await capture(
-        ["install", "claude", "--profile", "claude-personal", "--json"],
-        env,
-      );
-      expect(install.code).toBe(0);
-
-      const statePath = join(
-        profilesRoot,
-        "claude-personal",
-        ".offrouter",
-        "claude-install-state.json",
-      );
-      await writeFile(statePath, "{not valid json", "utf8");
-
-      const uninstall = await capture(
-        ["uninstall", "claude", "--all-personal", "--json"],
-        env,
-      );
-      expect(uninstall.code).not.toBe(0);
-      const json = JSON.parse(uninstall.stdout) as {
-        results: Array<{ ok: boolean; errorCode?: string }>;
-      };
-      expect(json.results[0]?.ok).toBe(false);
-      expect(json.results[0]?.errorCode).toBe("invalid_install_state");
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter install codex --profile codex-personal --dry-run --json plans profile-scoped config.toml", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-install-codex-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["codex-personal"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "codex-profiles");
-      const { code, stdout, stderr } = await capture(
-        [
-          "install",
-          "codex",
-          "--profile",
-          "codex-personal",
-          "--dry-run",
-          "--json",
-        ],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-          OFFROUTER_CODEX_PROFILES_DIR: profilesRoot,
-        },
-      );
-      expect(code).toBe(0);
-      expect(stderr).toBe("");
-      const json = JSON.parse(stdout) as {
-        honesty: string;
-        dryRun: boolean;
-        results: Array<{
-          ok: boolean;
-          profile: string;
-          profileDir: string;
-          changes: Array<{ relativePath: string; kind: string }>;
-        }>;
-      };
-      expect(json.honesty).toBe(CODEX_HONESTY);
-      expect(json.dryRun).toBe(true);
-      expect(json.results).toHaveLength(1);
-      const result = json.results[0]!;
-      expect(result.ok).toBe(true);
-      expect(result.profile).toBe("codex-personal");
-      expect(result.profileDir).toBe(join(profilesRoot, "codex-personal"));
-      expect(result.changes.some((c) => c.relativePath === "config.toml")).toBe(
-        true,
-      );
-      // Dry-run must not create the profile directory.
-      const { access } = await import("node:fs/promises");
-      const { constants } = await import("node:fs");
-      await expect(
-        access(join(profilesRoot, "codex-personal"), constants.F_OK),
-      ).rejects.toBeTruthy();
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter install codex --all-personal --dry-run --json skips bare global codex", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-install-codex-all-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["codex", "codex-personal", "codex-work"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "codex-profiles");
-      const { code, stdout, stderr } = await capture(
-        ["install", "codex", "--all-personal", "--dry-run", "--json"],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-          OFFROUTER_CODEX_PROFILES_DIR: profilesRoot,
-        },
-      );
-      expect(code).toBe(0);
-      expect(stderr).toBe("");
-      const json = JSON.parse(stdout) as {
-        results: Array<{ profile: string; ok: boolean }>;
-      };
-      expect(json.results.map((r) => r.profile)).toEqual(["codex-personal"]);
-      expect(json.results.every((r) => r.ok)).toBe(true);
-      expect(json.results.map((r) => r.profile)).not.toContain("codex");
-      expect(json.results.map((r) => r.profile)).not.toContain("codex-work");
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter uninstall codex --profile codex-personal rolls back install state", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-uninstall-codex-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["codex-personal"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "codex-profiles");
-      const env = {
-        ...process.env,
-        OFFROUTER_HOME: home,
-        HOME: home,
-        OFFROUTER_CODEX_PROFILES_DIR: profilesRoot,
-      };
-
-      const installOut = await capture(
-        ["install", "codex", "--profile", "codex-personal", "--json"],
-        env,
-      );
-      expect(installOut.code).toBe(0);
-
-      const configPath = join(profilesRoot, "codex-personal", "config.toml");
-      const { readFile, access } = await import("node:fs/promises");
-      const { constants } = await import("node:fs");
-      const configRaw = await readFile(configPath, "utf8");
-      expect(configRaw).toContain("[mcp_servers.offrouter]");
-
-      const uninstall = await capture(
-        ["uninstall", "codex", "--profile", "codex-personal", "--json"],
-        env,
-      );
-      expect(uninstall.code).toBe(0);
-      const json = JSON.parse(uninstall.stdout) as {
-        results: Array<{ ok: boolean; profile: string }>;
-      };
-      expect(json.results[0]?.ok).toBe(true);
-      expect(json.results[0]?.profile).toBe("codex-personal");
-      await expect(access(configPath, constants.F_OK)).rejects.toBeTruthy();
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter install codex denies work-like ids such as codex-work-staging even if allowlisted", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-install-codex-work-staging-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["codex-work-staging"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "codex-profiles");
-      const { code, stdout } = await capture(
-        [
-          "install",
-          "codex",
-          "--profile",
-          "codex-work-staging",
-          "--dry-run",
-          "--json",
-        ],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-          OFFROUTER_CODEX_PROFILES_DIR: profilesRoot,
-        },
-      );
-      expect(code).not.toBe(0);
-      const json = JSON.parse(stdout) as {
-        results?: Array<{ ok: boolean; errorCode?: string; message?: string }>;
-        error?: { message?: string };
-      };
-      if (json.results?.[0]) {
-        expect(json.results[0].ok).toBe(false);
-        expect(json.results[0].errorCode).toBe("work_profile_denied");
-      } else {
-        expect(String(json.error?.message ?? "").toLowerCase()).toMatch(
-          /work|denied/,
-        );
-      }
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter install gemini --profile gemini-personal --dry-run --json plans profile-scoped settings.json", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-install-gemini-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["gemini-personal"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "gemini-profiles");
-      const { code, stdout, stderr } = await capture(
-        [
-          "install",
-          "gemini",
-          "--profile",
-          "gemini-personal",
-          "--dry-run",
-          "--json",
-        ],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-          OFFROUTER_GEMINI_PROFILES_DIR: profilesRoot,
-        },
-      );
-      expect(code).toBe(0);
-      expect(stderr).toBe("");
-      const json = JSON.parse(stdout) as {
-        honesty: string;
-        dryRun: boolean;
-        results: Array<{
-          ok: boolean;
-          profile: string;
-          profileDir: string;
-          changes: Array<{ relativePath: string; kind: string }>;
-        }>;
-      };
-      expect(json.honesty).toBe(GEMINI_HONESTY);
-      expect(json.dryRun).toBe(true);
-      expect(json.results).toHaveLength(1);
-      const result = json.results[0]!;
-      expect(result.ok).toBe(true);
-      expect(result.profile).toBe("gemini-personal");
-      expect(result.profileDir).toBe(join(profilesRoot, "gemini-personal"));
-      expect(
-        result.changes.some((c) => c.relativePath === "settings.json"),
-      ).toBe(true);
-      // Dry-run must not create the profile directory.
-      const { access } = await import("node:fs/promises");
-      const { constants } = await import("node:fs");
-      await expect(
-        access(join(profilesRoot, "gemini-personal"), constants.F_OK),
-      ).rejects.toBeTruthy();
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter install gemini --all-personal --dry-run --json skips bare global gemini", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-install-gemini-all-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["gemini", "gemini-personal", "gemini-work"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "gemini-profiles");
-      const { code, stdout, stderr } = await capture(
-        ["install", "gemini", "--all-personal", "--dry-run", "--json"],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-          OFFROUTER_GEMINI_PROFILES_DIR: profilesRoot,
-        },
-      );
-      expect(code).toBe(0);
-      expect(stderr).toBe("");
-      const json = JSON.parse(stdout) as {
-        results: Array<{ profile: string; ok: boolean }>;
-      };
-      expect(json.results.map((r) => r.profile)).toEqual(["gemini-personal"]);
-      expect(json.results.every((r) => r.ok)).toBe(true);
-      expect(json.results.map((r) => r.profile)).not.toContain("gemini");
-      expect(json.results.map((r) => r.profile)).not.toContain("gemini-work");
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter uninstall gemini --profile gemini-personal rolls back install state", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-uninstall-gemini-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["gemini-personal"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "gemini-profiles");
-      const env = {
-        ...process.env,
-        OFFROUTER_HOME: home,
-        HOME: home,
-        OFFROUTER_GEMINI_PROFILES_DIR: profilesRoot,
-      };
-
-      const installOut = await capture(
-        ["install", "gemini", "--profile", "gemini-personal", "--json"],
-        env,
-      );
-      expect(installOut.code).toBe(0);
-
-      const configPath = join(profilesRoot, "gemini-personal", "settings.json");
-      const { readFile, access } = await import("node:fs/promises");
-      const { constants } = await import("node:fs");
-      const configRaw = await readFile(configPath, "utf8");
-      const parsed = JSON.parse(configRaw) as {
-        mcpServers: Record<string, { command: string }>;
-      };
-      expect(parsed.mcpServers.offrouter).toBeDefined();
-      expect(parsed.mcpServers.offrouter.command).toBe("offrouter");
-
-      const uninstall = await capture(
-        ["uninstall", "gemini", "--profile", "gemini-personal", "--json"],
-        env,
-      );
-      expect(uninstall.code).toBe(0);
-      const json = JSON.parse(uninstall.stdout) as {
-        results: Array<{ ok: boolean; profile: string }>;
-      };
-      expect(json.results[0]?.ok).toBe(true);
-      expect(json.results[0]?.profile).toBe("gemini-personal");
-      // The install created settings.json from scratch, so rollback removes it.
-      await expect(access(configPath, constants.F_OK)).rejects.toBeTruthy();
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter install gemini denies work-like ids such as gemini-work-staging even if allowlisted", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-install-gemini-work-staging-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["gemini-work-staging"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "gemini-profiles");
-      const { code, stdout } = await capture(
-        [
-          "install",
-          "gemini",
-          "--profile",
-          "gemini-work-staging",
-          "--dry-run",
-          "--json",
-        ],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-          OFFROUTER_GEMINI_PROFILES_DIR: profilesRoot,
-        },
-      );
-      expect(code).not.toBe(0);
-      const json = JSON.parse(stdout) as {
-        results?: Array<{ ok: boolean; errorCode?: string; message?: string }>;
-        error?: { message?: string };
-      };
-      if (json.results?.[0]) {
-        expect(json.results[0].ok).toBe(false);
-        expect(json.results[0].errorCode).toBe("work_profile_denied");
-      } else {
-        expect(String(json.error?.message ?? "").toLowerCase()).toMatch(
-          /work|denied/,
-        );
-      }
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter install grok --profile grok-personal --dry-run --json plans profile-scoped config.toml", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-install-grok-"));
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["grok-personal"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "grok-profiles");
-      const { code, stdout, stderr } = await capture(
-        [
-          "install",
-          "grok",
-          "--profile",
-          "grok-personal",
-          "--dry-run",
-          "--json",
-        ],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-          OFFROUTER_GROK_PROFILES_DIR: profilesRoot,
-        },
-      );
-      expect(code).toBe(0);
-      expect(stderr).toBe("");
-      const json = JSON.parse(stdout) as {
-        honesty: string;
-        dryRun: boolean;
-        results: Array<{
-          ok: boolean;
-          profile: string;
-          profileDir: string;
-          changes: Array<{ relativePath: string; kind: string }>;
-        }>;
-      };
-      expect(json.honesty).toBe(GROK_HONESTY);
-      expect(json.dryRun).toBe(true);
-      expect(json.results).toHaveLength(1);
-      const result = json.results[0]!;
-      expect(result.ok).toBe(true);
-      expect(result.profile).toBe("grok-personal");
-      expect(result.profileDir).toBe(join(profilesRoot, "grok-personal"));
-      expect(result.changes.some((c) => c.relativePath === "config.toml")).toBe(
-        true,
-      );
-      // Dry-run must not create the profile directory.
-      const { access } = await import("node:fs/promises");
-      const { constants } = await import("node:fs");
-      await expect(
-        access(join(profilesRoot, "grok-personal"), constants.F_OK),
-      ).rejects.toBeTruthy();
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter install grok --all-personal --dry-run --json skips bare global grok", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-install-grok-all-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["grok", "grok-personal", "grok-work"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "grok-profiles");
-      const { code, stdout, stderr } = await capture(
-        ["install", "grok", "--all-personal", "--dry-run", "--json"],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-          OFFROUTER_GROK_PROFILES_DIR: profilesRoot,
-        },
-      );
-      expect(code).toBe(0);
-      expect(stderr).toBe("");
-      const json = JSON.parse(stdout) as {
-        results: Array<{ profile: string; ok: boolean }>;
-      };
-      expect(json.results.map((r) => r.profile)).toEqual(["grok-personal"]);
-      expect(json.results.every((r) => r.ok)).toBe(true);
-      expect(json.results.map((r) => r.profile)).not.toContain("grok");
-      expect(json.results.map((r) => r.profile)).not.toContain("grok-work");
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter uninstall grok --profile grok-personal rolls back install state", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-uninstall-grok-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["grok-personal"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "grok-profiles");
-      const env = {
-        ...process.env,
-        OFFROUTER_HOME: home,
-        HOME: home,
-        OFFROUTER_GROK_PROFILES_DIR: profilesRoot,
-      };
-
-      const installOut = await capture(
-        ["install", "grok", "--profile", "grok-personal", "--json"],
-        env,
-      );
-      expect(installOut.code).toBe(0);
-
-      const configPath = join(profilesRoot, "grok-personal", "config.toml");
-      const { readFile, access } = await import("node:fs/promises");
-      const { constants } = await import("node:fs");
-      const configRaw = await readFile(configPath, "utf8");
-      expect(configRaw).toContain("[mcp_servers.offrouter]");
-      expect(configRaw).toContain('command = "offrouter"');
-
-      const uninstall = await capture(
-        ["uninstall", "grok", "--profile", "grok-personal", "--json"],
-        env,
-      );
-      expect(uninstall.code).toBe(0);
-      const json = JSON.parse(uninstall.stdout) as {
-        results: Array<{ ok: boolean; profile: string }>;
-      };
-      expect(json.results[0]?.ok).toBe(true);
-      expect(json.results[0]?.profile).toBe("grok-personal");
-      // The install created config.toml from scratch, so rollback removes it.
-      await expect(access(configPath, constants.F_OK)).rejects.toBeTruthy();
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter install grok denies work-like ids such as grok-work-staging even if allowlisted", async () => {
-    const home = await mkdtemp(
-      join(tmpdir(), "offrouter-cli-install-grok-work-staging-"),
-    );
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        'allowlisted_profiles = ["grok-work-staging"]\n',
-        "utf8",
-      );
-      const profilesRoot = join(home, "grok-profiles");
-      const { code, stdout } = await capture(
-        [
-          "install",
-          "grok",
-          "--profile",
-          "grok-work-staging",
-          "--dry-run",
-          "--json",
-        ],
-        {
-          ...process.env,
-          OFFROUTER_HOME: home,
-          HOME: home,
-          OFFROUTER_GROK_PROFILES_DIR: profilesRoot,
-        },
-      );
-      expect(code).not.toBe(0);
-      const json = JSON.parse(stdout) as {
-        results?: Array<{ ok: boolean; errorCode?: string; message?: string }>;
-        error?: { message?: string };
-      };
-      if (json.results?.[0]) {
-        expect(json.results[0].ok).toBe(false);
-        expect(json.results[0].errorCode).toBe("work_profile_denied");
-      } else {
-        expect(String(json.error?.message ?? "").toLowerCase()).toMatch(
-          /work|denied/,
-        );
-      }
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter update --help shows update command", async () => {
-    const { code, stdout } = await capture(["update", "--help"]);
-    expect(code).toBe(0);
-    expect(stdout).toMatch(/fetch|update|model catalog|cache/i);
-  });
-
-  it("offrouter update --json --dry-run returns JSON without network", async () => {
-    const originalFetch = globalThis.fetch;
-    const mockFamilies = [
-      {
-        providerId: "test-provider",
-        modelId: "test-model",
-        family: "test-family",
-      },
-    ];
-    const mockResponse = new Response(
-      JSON.stringify({
-        version: 1,
-        generatedAt: "2025-01-01T00:00:00.000Z",
-        families: mockFamilies,
-      }),
-      { status: 200, headers: { "content-type": "application/json" } },
-    );
-    try {
-      vi.stubGlobal("fetch", vi.fn().mockResolvedValue(mockResponse));
-
-      const { code, stdout } = await capture([
-        "update",
-        "--json",
-        "--dry-run",
-      ]);
-      expect(code).toBe(0);
-      const json = JSON.parse(stdout) as {
-        source: string;
-        fetchedAt: string;
-        familyCount: number;
-        dryRun: boolean;
-      };
-      expect(json.source).toBe("network");
-      expect(json.familyCount).toBe(1);
-      expect(json.dryRun).toBe(true);
-    } finally {
-      globalThis.fetch = originalFetch;
-    }
-  });
-
-  it("offrouter models --json includes builtin models without secrets", async () => {
-    const { code, stdout } = await capture(["models", "--json"]);
-    expect(code).toBe(0);
-    const json = JSON.parse(stdout) as {
-      models: Array<{ providerId: string; modelId: string; source: string }>;
-      builtinCount: number;
-      cachedCount: number;
-      configCount: number;
-    };
-    expect(Array.isArray(json.models)).toBe(true);
-    expect(json.builtinCount).toBeGreaterThan(0);
-    expect(json.models.every((m) => ["builtin", "cached", "config"].includes(m.source))).toBe(true);
-    // All builtin models have real modelIds, not "*"
-    const builtinModels = json.models.filter((m) => m.source === "builtin");
-    expect(builtinModels.length).toBeGreaterThan(0);
-    expect(builtinModels.every((m) => m.modelId !== "*")).toBe(true);
-    expect(stdout).not.toMatch(/sk-[a-zA-Z0-9]/);
-  });
-
-  it("offrouter models human output shows counts", async () => {
-    const { code, stdout } = await capture(["models"]);
-    expect(code).toBe(0);
-    expect(stdout).toMatch(/Built-in: \d+ models/);
-    expect(stdout).toMatch(/Cached: \d+ models/);
-    expect(stdout).toMatch(/Config providers: \d+/);
-  });
-
-  it("unknown command exits nonzero", async () => {
-    const { code, stderr } = await capture(["not-a-real-command"]);
-    expect(code).not.toBe(0);
-    expect(stderr.length + code).toBeGreaterThan(0);
-  });
-
-  it("createProgram returns a Commander program", () => {
-    const program = createProgram();
-    expect(program.name()).toBe("offrouter");
-  });
-
-  it("offrouter status --providers --json shows real quotaRemaining from FileUsageStore", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-status-usage-"));
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        [
-          'allowlisted_profiles = ["claude-personal"]',
-          "",
-          "[providers.anthropic]",
-          "enabled = true",
-          'accounts = [{ id = "my-account" }]',
-          "",
-        ].join("\n"),
-        "utf8",
-      );
-      const usageStore = new FileUsageStore({
-        filePath: join(home, "state", "usage.json"),
-      });
-      await usageStore.recordUsage("anthropic", "my-account", {
-        used: 85,
-        limit: 100,
-      });
-
-      const { code, stdout } = await capture(
-        ["status", "--providers", "--json"],
-        { ...process.env, OFFROUTER_HOME: home },
-      );
-      expect(code).toBe(0);
-      const json = JSON.parse(stdout) as {
-        providers: Array<{ accounts: Array<{ quotaRemaining: number | null }> }>;
-      };
-      const account = json.providers?.[0]?.accounts?.[0];
-      expect(account).toBeDefined();
-      expect(account!.quotaRemaining).toBe(15);
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter doctor --json includes nearLimitWarnings when accounts are near-limit", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-doctor-near-"));
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        [
-          'allowlisted_profiles = ["claude-personal"]',
-          "",
-          "[providers.anthropic]",
-          "enabled = true",
-          'accounts = [{ id = "my-account" }]',
-          "",
-        ].join("\n"),
-        "utf8",
-      );
-      const usageStore = new FileUsageStore({
-        filePath: join(home, "state", "usage.json"),
-      });
-      await usageStore.recordUsage("anthropic", "my-account", {
-        used: 90,
-        limit: 100,
-      });
-
-      const { code, stdout } = await capture(
-        ["doctor", "--profile", "claude-personal", "--json"],
-        { ...process.env, OFFROUTER_HOME: home },
-      );
-      expect(code).toBe(0);
-      const json = JSON.parse(stdout) as {
-        nearLimitWarnings?: string[];
-        accounts: Array<{ nearLimit: boolean | null }>;
-      };
-      expect(json.nearLimitWarnings).toBeDefined();
-      expect(json.nearLimitWarnings!.length).toBeGreaterThan(0);
-      expect(json.nearLimitWarnings![0]).toMatch(/near its limit/i);
-      expect(json.accounts?.[0]?.nearLimit).toBe(true);
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-
-  it("offrouter route explain --json includes nearLimitWarning when an account is near-limit", async () => {
-    const home = await mkdtemp(join(tmpdir(), "offrouter-cli-route-near-"));
-    try {
-      await writeFile(
-        join(home, "config.toml"),
-        [
-          'allowlisted_profiles = ["claude-personal"]',
-          "",
-          "[providers.anthropic]",
-          "enabled = true",
-          'accounts = [{ id = "my-account" }]',
-          "",
-        ].join("\n"),
-        "utf8",
-      );
-      const usageStore = new FileUsageStore({
-        filePath: join(home, "state", "usage.json"),
-      });
-      await usageStore.recordUsage("anthropic", "my-account", {
-        used: 95,
-        limit: 100,
-      });
-
-      const { code, stdout } = await capture(
-        [
-          "route",
-          "explain",
-          "explain this repo",
-          "--profile",
-          "claude-personal",
-          "--json",
-        ],
-        { ...process.env, OFFROUTER_HOME: home },
-      );
-      expect(code).toBe(0);
-      const json = JSON.parse(stdout) as {
-        nearLimitWarning?: string;
-        blocked: boolean;
-      };
-      // The route is blocked (no candidates), but the warning should be present.
-      expect(json.nearLimitWarning).toBeDefined();
-      expect(json.nearLimitWarning).toMatch(/near its limit/i);
-    } finally {
-      await rm(home, { recursive: true, force: true });
-    }
-  });
-});