chore: update smoke route and audit checks

Author: Shaw

packages/app/test/ui-smoke/apps-session-route-cases.ts

@@ -22,79 +22,79 @@ type DirectRouteCase =
 export const DIRECT_ROUTE_CASES: readonly DirectRouteCase[] = [
   {
     name: "lifeops app window",
-    path: "/apps/lifeops",
+    path: "/apps/lifeops?appWindow=1",
     selector: '[data-testid="lifeops-shell"]',
     timeoutMs: 90_000,
   },
   {
     name: "plugins app window",
-    path: "/apps/plugins",
+    path: "/apps/plugins?appWindow=1",
     readyChecks: [{ text: "Browser Workspace" }, { text: "AI Providers" }],
     timeoutMs: 90_000,
   },
   {
     name: "skills app window",
-    path: "/apps/skills",
+    path: "/apps/skills?appWindow=1",
     selector: '[data-testid="skills-shell"]',
     timeoutMs: 90_000,
   },
   {
     name: "fine tuning app window",
-    path: "/apps/fine-tuning",
+    path: "/apps/fine-tuning?appWindow=1",
     selector: '[data-testid="fine-tuning-view"]',
     timeoutMs: 90_000,
   },
   {
     name: "trajectories app window",
-    path: "/apps/trajectories",
+    path: "/apps/trajectories?appWindow=1",
     selector: '[data-testid="trajectories-view"]',
     timeoutMs: 90_000,
   },
   {
     name: "relationships app window",
-    path: "/apps/relationships",
+    path: "/apps/relationships?appWindow=1",
     selector: '[data-testid="relationships-view"]',
     timeoutMs: 90_000,
   },
   {
     name: "memories app window",
-    path: "/apps/memories",
+    path: "/apps/memories?appWindow=1",
     selector: '[data-testid="memory-viewer-view"]',
     timeoutMs: 90_000,
   },
   {
     name: "inventory app window",
-    path: "/apps/inventory",
+    path: "/apps/inventory?appWindow=1",
     selector: '[data-testid="wallet-shell"]',
     timeoutMs: 90_000,
   },
   {
     name: "runtime app window",
-    path: "/apps/runtime",
+    path: "/apps/runtime?appWindow=1",
     selector: '[data-testid="runtime-view"]',
     timeoutMs: 90_000,
   },
   {
     name: "database app window",
-    path: "/apps/database",
+    path: "/apps/database?appWindow=1",
     selector: '[data-testid="database-view"]',
     timeoutMs: 90_000,
   },
   {
     name: "elizamaker app window",
-    path: "/apps/elizamaker",
+    path: "/apps/elizamaker?appWindow=1",
     selector: '[data-testid="chat-composer-textarea"]',
     timeoutMs: 90_000,
   },
   {
     name: "logs app window",
-    path: "/apps/logs",
+    path: "/apps/logs?appWindow=1",
     selector: '[data-testid="logs-view"]',
     timeoutMs: 90_000,
   },
   {
     name: "tasks app window",
-    path: "/apps/tasks",
+    path: "/apps/tasks?appWindow=1",
     selector: '[data-testid="tasks-view"]',
     timeoutMs: 90_000,
   },

packages/scripts/audit-capability-router-live-ci.ts

@@ -203,31 +203,31 @@ export const checks: Check[] = [
   {
     name: "product connect persists redacted trust audit records",
     pattern:
-      /(?=[\s\S]*ELIZA_CAPABILITY_ROUTER_TRUST_AUDIT)(?=[\s\S]*appendTrustAuditRecord)(?=[\s\S]*readTrustAuditRecords)(?=[\s\S]*redactEndpoint\(audit\.endpoint\))(?=[\s\S]*trustDecisions:\s*audit\.sync\.trustDecisions)/,
+      /ELIZA_CAPABILITY_ROUTER_TRUST_AUDIT[\s\S]{0,500}appendTrustAuditRecord[\s\S]{0,300}readTrustAuditRecords[\s\S]*redactEndpoint\(audit\.endpoint\)[\s\S]{0,800}trustDecisions:\s*audit\.sync\.trustDecisions/,
     source: "remote-capability-routes",
     message:
       "product connect persistence must record redacted capability-router trust-audit records.",
   },
   {
     name: "remote adapter test covers redacted product trust audit records",
     pattern:
-      /(?=[\s\S]*ELIZA_CAPABILITY_ROUTER_TRUST_AUDIT)(?=[\s\S]*provider:\s*"direct")(?=[\s\S]*allowedModuleIds:\s*\["remote-demo"\])(?=[\s\S]*trustDecisions:[\s\S]*trusted:\s*true)(?=[\s\S]*JSON\.stringify\(trustAudit\)\)\.not\.toContain\("product-token"\))/,
+      /product-token[\s\S]{0,1200}allowedModuleIds:\s*\["remote-demo"\][\s\S]*ELIZA_CAPABILITY_ROUTER_TRUST_AUDIT[\s\S]{0,800}provider:\s*"direct"[\s\S]{0,500}allowedModuleIds:\s*\["remote-demo"\][\s\S]{0,500}trustDecisions:[\s\S]{0,500}trusted:\s*true[\s\S]{0,500}JSON\.stringify\(trustAudit\)\)\.not\.toContain\("product-token"\)/,
     source: "remote-plugin-adapter-test",
     message:
       "remote adapter tests must prove product connect persists trust audit records without bearer tokens.",
   },
   {
     name: "remote adapter test covers Cloud provision restart reopened view",
     pattern:
-      /(?=[\s\S]*reopens a persisted Cloud-provisioned remote view after restart)(?=[\s\S]*connectCloudSandbox:[\s\S]*mockResolvedValue)(?=[\s\S]*cloud-product-token)(?=[\s\S]*bootstrapRemoteCapabilityPlugins\(restartRuntime\))(?=[\s\S]*getView\("cloud\.restart\.view"\))(?=[\s\S]*\/api\/capability-router\/assets\/cloud-product\/cloud-product-plugin\/assets\/cloud-view\.js)(?=[\s\S]*plugin\.asset\.get)(?=[\s\S]*Bearer cloud-product-token)/,
+      /reopens a persisted Cloud-provisioned remote view after restart[\s\S]*connectCloudSandbox:\s*vi\.fn\(\)\.mockResolvedValue[\s\S]*cloud-product-token[\s\S]*bootstrapRemoteCapabilityPlugins\(restartRuntime\)[\s\S]*getView\("cloud\.restart\.view"\)[\s\S]*\/api\/capability-router\/assets\/cloud-product\/cloud-product-plugin\/assets\/cloud-view\.js[\s\S]*plugin\.asset\.get[\s\S]*Bearer cloud-product-token/,
     source: "remote-plugin-adapter-test",
     message:
       "remote adapter tests must prove Cloud provision persistence can restart, reopen the remote view, and fetch its bundle with the persisted token.",
   },
   {
     name: "remote adapter test covers signed provenance trust policy",
     pattern:
-      /(?=[\s\S]*requireSignedProvenance:\s*true)(?=[\s\S]*allowedProvenanceIssuers:\s*\["eliza-cloud-build"\])(?=[\s\S]*provenanceIssuer:\s*"eliza-cloud-build")(?=[\s\S]*reason:\s*"missing-provenance")(?=[\s\S]*reason:\s*"provenance-issuer-not-allowed")(?=[\s\S]*requireVerifiedProvenance:\s*true)(?=[\s\S]*trustedProvenancePublicKeys)(?=[\s\S]*reason:\s*"invalid-provenance-signature")(?=[\s\S]*reason:\s*"missing-provenance-public-key")(?=[\s\S]*requireProvenanceDigestMatch:\s*true)(?=[\s\S]*reason:\s*"invalid-provenance-digest")/,
+      /requireSignedProvenance:\s*true[\s\S]*allowedProvenanceIssuers:\s*\["eliza-cloud-build"\][\s\S]*provenanceIssuer:\s*"eliza-cloud-build"[\s\S]*reason:\s*"missing-provenance"[\s\S]*reason:\s*"provenance-issuer-not-allowed"[\s\S]*requireVerifiedProvenance:\s*true[\s\S]*trustedProvenancePublicKeys[\s\S]*reason:\s*"invalid-provenance-signature"[\s\S]*requireProvenanceDigestMatch:\s*true[\s\S]*reason:\s*"invalid-provenance-digest"[\s\S]*reason:\s*"missing-provenance-public-key"/,
     source: "remote-plugin-adapter-test",
     message:
       "remote adapter tests must prove trust policy can require signed provenance, allowlist provenance issuers, verify provenance signatures, and bind provenance digests to module contents.",