test: delete obsolete presentation and helper suites

[Astro-Han]

Summary

Continue the aggressive cleanup from #2462 by deleting obsolete tests, orphaned prompt fixtures, and dead test-only APIs across Desktop, Core, Headless, UI, CLI, Computer Use, Runtime, and Runtime Host.

The branch changes 110 files with 13 additions and 8,343 deletions (net -8,330). Removed coverage is dominated by:

• CSS, geometry, markup, localization, copy, animation, and terminal-display assertions
• duplicated parser, renderer alias, provider-matrix, source-string, and fixture-wiring pins
• obsolete Headless prompt experiments and two test-only prompt assets
• small schema/default-value smokes already covered by higher-level contracts or workflows
• 55 entire test files and 2 obsolete prompt assets, plus further partial-suite trimming

Focused validation found one runtime-loaded Harbor config that the static scan had misclassified as orphaned. That active asset was restored; only its source-string mirror test remains deleted.

Knip exposed and this PR also removes:

• CLI _detectColorLevelForTesting
• three unused Headless A/B fixture builders
• unused Headless isTaskRunLocator

Why this is safe

Unique coverage alone was not treated as a retention reason. The retained suite still protects the active product contracts whose failure cost matches test maintenance: authorization, secrets, persistence, recovery, fail-closed protocols, dependency patches, and external-process lifecycle.

Explicitly retained guards

• every dependency patch guard named by patches/README.md: AI SDK tool-call tracking, Astryx List accessible naming, grouped diff counts, new-message reset behavior, and blank UA-CH platform fallback
• credential and secret redaction, including streamed output and persisted provider errors
• permission escalation, authorization URLs, prompt-injection/authority boundaries, and sandbox takeover
• persistence, deletion, recovery, storage-root authority, and session lifecycle gates
• Linux sandbox capability enforcement used by CI
• fail-closed protocol validation and lifecycle gates that prevent irreversible external actions, process leaks, or stale ownership

Verification

• git diff --check origin/main...HEAD — passed
• npm run format:check / npm run format — passed
• npm run lint — passed
• affected workspace typechecks for Desktop, Core, Headless, UI, CLI, Runtime, Computer Use, and Runtime Host — passed
• npx knip compared with the clean root checkout — no new findings; four existing unused Headless exports are gone
• focused Core tests — 7 passed
• focused Headless tests — 89 passed, 1 intentionally skipped; Harbor adapter rerun after restoring its active config — 26 passed, 1 intentionally skipped
• focused UI tests — 37 passed
• focused CLI tests — 270 passed
• focused Runtime tests — 19 passed
• focused Computer Use tests — 100 passed
• focused Runtime Host protocol tests — 46 passed
• focused Desktop main tests — 58 passed in the latest pass
• full repository tests and full Playwright E2E were intentionally not run locally; GitHub CI owns full coverage

CI

All triggered checks passed on the expanded third-pass diff:

• typecheck
• test_workspaces
• test_headless
• test_runtime_host
• e2e_shard (1/2) and e2e_shard (2/2)
• aggregate test and e2e gates
• alignment_audit
• windows_baseline (non-blocking)

storybook was correctly skipped because this PR does not change stories.

Review focus

Residual risk is intentionally concentrated in presentation regressions, exact helper formatting, provider-list drift, and small cross-platform/toolchain display behavior. Active dependency configs and all explicit security, authority, persistence, recovery, protocol, sandbox, and process-lifecycle guards remain.

[Astro-Han]

Summary

Continue the aggressive cleanup from #2462 by deleting obsolete tests, orphaned prompt fixtures, and dead test-only APIs across Desktop, Core, Headless, UI, CLI, Computer Use, Runtime, and Runtime Host.

The branch changes 110 files with 13 additions and 8,343 deletions (net -8,330). Removed coverage is dominated by:

• CSS, geometry, markup, localization, copy, animation, and terminal-display assertions
• duplicated parser, renderer alias, provider-matrix, source-string, and fixture-wiring pins
• obsolete Headless prompt experiments and two test-only prompt assets
• small schema/default-value smokes already covered by higher-level contracts or workflows
• 55 entire test files and 2 obsolete prompt assets, plus further partial-suite trimming

Focused validation found one runtime-loaded Harbor config that the static scan had misclassified as orphaned. That active asset was restored; only its source-string mirror test remains deleted.

Knip exposed and this PR also removes:

• CLI _detectColorLevelForTesting
• three unused Headless A/B fixture builders
• unused Headless isTaskRunLocator

Why this is safe

Unique coverage alone was not treated as a retention reason. The retained suite still protects the active product contracts whose failure cost matches test maintenance: authorization, secrets, persistence, recovery, fail-closed protocols, dependency patches, and external-process lifecycle.

Explicitly retained guards

• every dependency patch guard named by patches/README.md: AI SDK tool-call tracking, Astryx List accessible naming, grouped diff counts, new-message reset behavior, and blank UA-CH platform fallback
• credential and secret redaction, including streamed output and persisted provider errors
• permission escalation, authorization URLs, prompt-injection/authority boundaries, and sandbox takeover
• persistence, deletion, recovery, storage-root authority, and session lifecycle gates
• Linux sandbox capability enforcement used by CI
• fail-closed protocol validation and lifecycle gates that prevent irreversible external actions, process leaks, or stale ownership

Verification

• git diff --check origin/main...HEAD — passed
• npm run format:check / npm run format — passed
• npm run lint — passed
• affected workspace typechecks for Desktop, Core, Headless, UI, CLI, Runtime, Computer Use, and Runtime Host — passed
• npx knip compared with the clean root checkout — no new findings; four existing unused Headless exports are gone
• focused Core tests — 7 passed
• focused Headless tests — 89 passed, 1 intentionally skipped; Harbor adapter rerun after restoring its active config — 26 passed, 1 intentionally skipped
• focused UI tests — 37 passed
• focused CLI tests — 270 passed
• focused Runtime tests — 19 passed
• focused Computer Use tests — 100 passed
• focused Runtime Host protocol tests — 46 passed
• focused Desktop main tests — 58 passed in the latest pass
• full repository tests and full Playwright E2E were intentionally not run locally; GitHub CI owns full coverage

CI

All triggered checks passed on the expanded third-pass diff:

• typecheck
• test_workspaces
• test_headless
• test_runtime_host
• e2e_shard (1/2) and e2e_shard (2/2)
• aggregate test and e2e gates
• alignment_audit
• windows_baseline (non-blocking)

storybook was correctly skipped because this PR does not change stories.

Review focus

Residual risk is intentionally concentrated in presentation regressions, exact helper formatting, provider-list drift, and small cross-platform/toolchain display behavior. Active dependency configs and all explicit security, authority, persistence, recovery, protocol, sandbox, and process-lifecycle guards remain.

[Astro-Han]

Summary

Continue the aggressive cleanup from #2462 by deleting obsolete tests, orphaned prompt fixtures, and dead test-only APIs across Desktop, Core, Headless, UI, CLI, Computer Use, Runtime, and Runtime Host.

The branch changes 110 files with 13 additions and 8,343 deletions (net -8,330). Removed coverage is dominated by:

• CSS, geometry, markup, localization, copy, animation, and terminal-display assertions
• duplicated parser, renderer alias, provider-matrix, source-string, and fixture-wiring pins
• obsolete Headless prompt experiments and two test-only prompt assets
• small schema/default-value smokes already covered by higher-level contracts or workflows
• 55 entire test files and 2 obsolete prompt assets, plus further partial-suite trimming

Focused validation found one runtime-loaded Harbor config that the static scan had misclassified as orphaned. That active asset was restored; only its source-string mirror test remains deleted.

Knip exposed and this PR also removes:

• CLI _detectColorLevelForTesting
• three unused Headless A/B fixture builders
• unused Headless isTaskRunLocator

Why this is safe

Unique coverage alone was not treated as a retention reason. The retained suite still protects the active product contracts whose failure cost matches test maintenance: authorization, secrets, persistence, recovery, fail-closed protocols, dependency patches, and external-process lifecycle.

Explicitly retained guards

• every dependency patch guard named by patches/README.md: AI SDK tool-call tracking, Astryx List accessible naming, grouped diff counts, new-message reset behavior, and blank UA-CH platform fallback
• credential and secret redaction, including streamed output and persisted provider errors
• permission escalation, authorization URLs, prompt-injection/authority boundaries, and sandbox takeover
• persistence, deletion, recovery, storage-root authority, and session lifecycle gates
• Linux sandbox capability enforcement used by CI
• fail-closed protocol validation and lifecycle gates that prevent irreversible external actions, process leaks, or stale ownership

Verification

• git diff --check origin/main...HEAD — passed
• npm run format:check / npm run format — passed
• npm run lint — passed
• affected workspace typechecks for Desktop, Core, Headless, UI, CLI, Runtime, Computer Use, and Runtime Host — passed
• npx knip compared with the clean root checkout — no new findings; four existing unused Headless exports are gone
• focused Core tests — 7 passed
• focused Headless tests — 89 passed, 1 intentionally skipped; Harbor adapter rerun after restoring its active config — 26 passed, 1 intentionally skipped
• focused UI tests — 37 passed
• focused CLI tests — 270 passed
• focused Runtime tests — 19 passed
• focused Computer Use tests — 100 passed
• focused Runtime Host protocol tests — 46 passed
• focused Desktop main tests — 58 passed in the latest pass
• full repository tests and full Playwright E2E were intentionally not run locally; GitHub CI owns full coverage

CI

All triggered checks passed on the expanded third-pass diff:

• typecheck
• test_workspaces
• test_headless
• test_runtime_host
• e2e_shard (1/2) and e2e_shard (2/2)
• aggregate test and e2e gates
• alignment_audit
• windows_baseline (non-blocking)

storybook was correctly skipped because this PR does not change stories.

Review focus

Residual risk is intentionally concentrated in presentation regressions, exact helper formatting, provider-list drift, and small cross-platform/toolchain display behavior. Active dependency configs and all explicit security, authority, persistence, recovery, protocol, sandbox, and process-lifecycle guards remain.

[Astro-Han]

Summary

Continue the aggressive cleanup from #2462 by deleting obsolete tests, orphaned prompt fixtures, and dead test-only APIs across Desktop, Core, Headless, UI, CLI, Computer Use, Runtime, and Runtime Host.

The branch changes 110 files with 13 additions and 8,343 deletions (net -8,330). Removed coverage is dominated by:

• CSS, geometry, markup, localization, copy, animation, and terminal-display assertions
• duplicated parser, renderer alias, provider-matrix, source-string, and fixture-wiring pins
• obsolete Headless prompt experiments and two test-only prompt assets
• small schema/default-value smokes already covered by higher-level contracts or workflows
• 55 entire test files and 2 obsolete prompt assets, plus further partial-suite trimming

Focused validation found one runtime-loaded Harbor config that the static scan had misclassified as orphaned. That active asset was restored; only its source-string mirror test remains deleted.

Knip exposed and this PR also removes:

• CLI _detectColorLevelForTesting
• three unused Headless A/B fixture builders
• unused Headless isTaskRunLocator

Why this is safe

Unique coverage alone was not treated as a retention reason. The retained suite still protects the active product contracts whose failure cost matches test maintenance: authorization, secrets, persistence, recovery, fail-closed protocols, dependency patches, and external-process lifecycle.

Explicitly retained guards

• every dependency patch guard named by patches/README.md: AI SDK tool-call tracking, Astryx List accessible naming, grouped diff counts, new-message reset behavior, and blank UA-CH platform fallback
• credential and secret redaction, including streamed output and persisted provider errors
• permission escalation, authorization URLs, prompt-injection/authority boundaries, and sandbox takeover
• persistence, deletion, recovery, storage-root authority, and session lifecycle gates
• Linux sandbox capability enforcement used by CI
• fail-closed protocol validation and lifecycle gates that prevent irreversible external actions, process leaks, or stale ownership

Verification

• git diff --check origin/main...HEAD — passed
• npm run format:check / npm run format — passed
• npm run lint — passed
• affected workspace typechecks for Desktop, Core, Headless, UI, CLI, Runtime, Computer Use, and Runtime Host — passed
• npx knip compared with the clean root checkout — no new findings; four existing unused Headless exports are gone
• focused Core tests — 7 passed
• focused Headless tests — 89 passed, 1 intentionally skipped; Harbor adapter rerun after restoring its active config — 26 passed, 1 intentionally skipped
• focused UI tests — 37 passed
• focused CLI tests — 270 passed
• focused Runtime tests — 19 passed
• focused Computer Use tests — 100 passed
• focused Runtime Host protocol tests — 46 passed
• focused Desktop main tests — 58 passed in the latest pass
• full repository tests and full Playwright E2E were intentionally not run locally; GitHub CI owns full coverage

CI

All triggered checks passed on the expanded third-pass diff:

• typecheck
• test_workspaces
• test_headless
• test_runtime_host
• e2e_shard (1/2) and e2e_shard (2/2)
• aggregate test and e2e gates
• alignment_audit
• windows_baseline (non-blocking)

storybook was correctly skipped because this PR does not change stories.

Review focus

Residual risk is intentionally concentrated in presentation regressions, exact helper formatting, provider-list drift, and small cross-platform/toolchain display behavior. Active dependency configs and all explicit security, authority, persistence, recovery, protocol, sandbox, and process-lifecycle guards remain.

[Astro-Han]

Summary

Continue the aggressive cleanup from #2462 by deleting obsolete tests, orphaned prompt fixtures, and dead test-only APIs across Desktop, Core, Headless, UI, CLI, Computer Use, Runtime, and Runtime Host.

The branch changes 110 files with 13 additions and 8,343 deletions (net -8,330). Removed coverage is dominated by:

• CSS, geometry, markup, localization, copy, animation, and terminal-display assertions
• duplicated parser, renderer alias, provider-matrix, source-string, and fixture-wiring pins
• obsolete Headless prompt experiments and two test-only prompt assets
• small schema/default-value smokes already covered by higher-level contracts or workflows
• 55 entire test files and 2 obsolete prompt assets, plus further partial-suite trimming

Focused validation found one runtime-loaded Harbor config that the static scan had misclassified as orphaned. That active asset was restored; only its source-string mirror test remains deleted.

Knip exposed and this PR also removes:

• CLI _detectColorLevelForTesting
• three unused Headless A/B fixture builders
• unused Headless isTaskRunLocator

Why this is safe

Unique coverage alone was not treated as a retention reason. The retained suite still protects the active product contracts whose failure cost matches test maintenance: authorization, secrets, persistence, recovery, fail-closed protocols, dependency patches, and external-process lifecycle.

Explicitly retained guards

• every dependency patch guard named by patches/README.md: AI SDK tool-call tracking, Astryx List accessible naming, grouped diff counts, new-message reset behavior, and blank UA-CH platform fallback
• credential and secret redaction, including streamed output and persisted provider errors
• permission escalation, authorization URLs, prompt-injection/authority boundaries, and sandbox takeover
• persistence, deletion, recovery, storage-root authority, and session lifecycle gates
• Linux sandbox capability enforcement used by CI
• fail-closed protocol validation and lifecycle gates that prevent irreversible external actions, process leaks, or stale ownership

Verification

• git diff --check origin/main...HEAD — passed
• npm run format:check / npm run format — passed
• npm run lint — passed
• affected workspace typechecks for Desktop, Core, Headless, UI, CLI, Runtime, Computer Use, and Runtime Host — passed
• npx knip compared with the clean root checkout — no new findings; four existing unused Headless exports are gone
• focused Core tests — 7 passed
• focused Headless tests — 89 passed, 1 intentionally skipped; Harbor adapter rerun after restoring its active config — 26 passed, 1 intentionally skipped
• focused UI tests — 37 passed
• focused CLI tests — 270 passed
• focused Runtime tests — 19 passed
• focused Computer Use tests — 100 passed
• focused Runtime Host protocol tests — 46 passed
• focused Desktop main tests — 58 passed in the latest pass
• full repository tests and full Playwright E2E were intentionally not run locally; GitHub CI owns full coverage

CI

All triggered checks passed on the expanded third-pass diff:

• typecheck
• test_workspaces
• test_headless
• test_runtime_host
• e2e_shard (1/2) and e2e_shard (2/2)
• aggregate test and e2e gates
• alignment_audit
• windows_baseline (non-blocking)

storybook was correctly skipped because this PR does not change stories.

Review focus

Residual risk is intentionally concentrated in presentation regressions, exact helper formatting, provider-list drift, and small cross-platform/toolchain display behavior. Active dependency configs and all explicit security, authority, persistence, recovery, protocol, sandbox, and process-lifecycle guards remain.

[Astro-Han]

Summary

Continue the aggressive cleanup from #2462 by deleting obsolete tests, orphaned prompt fixtures, and dead test-only APIs across Desktop, Core, Headless, UI, CLI, Computer Use, Runtime, and Runtime Host.

The branch changes 110 files with 13 additions and 8,343 deletions (net -8,330). Removed coverage is dominated by:

• CSS, geometry, markup, localization, copy, animation, and terminal-display assertions
• duplicated parser, renderer alias, provider-matrix, source-string, and fixture-wiring pins
• obsolete Headless prompt experiments and two test-only prompt assets
• small schema/default-value smokes already covered by higher-level contracts or workflows
• 55 entire test files and 2 obsolete prompt assets, plus further partial-suite trimming

Focused validation found one runtime-loaded Harbor config that the static scan had misclassified as orphaned. That active asset was restored; only its source-string mirror test remains deleted.

Knip exposed and this PR also removes:

• CLI _detectColorLevelForTesting
• three unused Headless A/B fixture builders
• unused Headless isTaskRunLocator

Why this is safe

Unique coverage alone was not treated as a retention reason. The retained suite still protects the active product contracts whose failure cost matches test maintenance: authorization, secrets, persistence, recovery, fail-closed protocols, dependency patches, and external-process lifecycle.

Explicitly retained guards

• every dependency patch guard named by patches/README.md: AI SDK tool-call tracking, Astryx List accessible naming, grouped diff counts, new-message reset behavior, and blank UA-CH platform fallback
• credential and secret redaction, including streamed output and persisted provider errors
• permission escalation, authorization URLs, prompt-injection/authority boundaries, and sandbox takeover
• persistence, deletion, recovery, storage-root authority, and session lifecycle gates
• Linux sandbox capability enforcement used by CI
• fail-closed protocol validation and lifecycle gates that prevent irreversible external actions, process leaks, or stale ownership

Verification

• git diff --check origin/main...HEAD — passed
• npm run format:check / npm run format — passed
• npm run lint — passed
• affected workspace typechecks for Desktop, Core, Headless, UI, CLI, Runtime, Computer Use, and Runtime Host — passed
• npx knip compared with the clean root checkout — no new findings; four existing unused Headless exports are gone
• focused Core tests — 7 passed
• focused Headless tests — 89 passed, 1 intentionally skipped; Harbor adapter rerun after restoring its active config — 26 passed, 1 intentionally skipped
• focused UI tests — 37 passed
• focused CLI tests — 270 passed
• focused Runtime tests — 19 passed
• focused Computer Use tests — 100 passed
• focused Runtime Host protocol tests — 46 passed
• focused Desktop main tests — 58 passed in the latest pass
• full repository tests and full Playwright E2E were intentionally not run locally; GitHub CI owns full coverage

CI

All triggered checks passed on the expanded third-pass diff:

• typecheck
• test_workspaces
• test_headless
• test_runtime_host
• e2e_shard (1/2) and e2e_shard (2/2)
• aggregate test and e2e gates
• alignment_audit
• windows_baseline (non-blocking)

storybook was correctly skipped because this PR does not change stories.

Review focus

Residual risk is intentionally concentrated in presentation regressions, exact helper formatting, provider-list drift, and small cross-platform/toolchain display behavior. Active dependency configs and all explicit security, authority, persistence, recovery, protocol, sandbox, and process-lifecycle guards remain.

[Astro-Han]

Summary

Continue the aggressive cleanup from #2462 by deleting obsolete tests, orphaned prompt fixtures, and dead test-only APIs across Desktop, Core, Headless, UI, CLI, Computer Use, Runtime, and Runtime Host.

The branch changes 110 files with 13 additions and 8,343 deletions (net -8,330). Removed coverage is dominated by:

• CSS, geometry, markup, localization, copy, animation, and terminal-display assertions
• duplicated parser, renderer alias, provider-matrix, source-string, and fixture-wiring pins
• obsolete Headless prompt experiments and two test-only prompt assets
• small schema/default-value smokes already covered by higher-level contracts or workflows
• 55 entire test files and 2 obsolete prompt assets, plus further partial-suite trimming

Focused validation found one runtime-loaded Harbor config that the static scan had misclassified as orphaned. That active asset was restored; only its source-string mirror test remains deleted.

Knip exposed and this PR also removes:

• CLI _detectColorLevelForTesting
• three unused Headless A/B fixture builders
• unused Headless isTaskRunLocator

Why this is safe

Unique coverage alone was not treated as a retention reason. The retained suite still protects the active product contracts whose failure cost matches test maintenance: authorization, secrets, persistence, recovery, fail-closed protocols, dependency patches, and external-process lifecycle.

Explicitly retained guards

• every dependency patch guard named by patches/README.md: AI SDK tool-call tracking, Astryx List accessible naming, grouped diff counts, new-message reset behavior, and blank UA-CH platform fallback
• credential and secret redaction, including streamed output and persisted provider errors
• permission escalation, authorization URLs, prompt-injection/authority boundaries, and sandbox takeover
• persistence, deletion, recovery, storage-root authority, and session lifecycle gates
• Linux sandbox capability enforcement used by CI
• fail-closed protocol validation and lifecycle gates that prevent irreversible external actions, process leaks, or stale ownership

Verification

• git diff --check origin/main...HEAD — passed
• npm run format:check / npm run format — passed
• npm run lint — passed
• affected workspace typechecks for Desktop, Core, Headless, UI, CLI, Runtime, Computer Use, and Runtime Host — passed
• npx knip compared with the clean root checkout — no new findings; four existing unused Headless exports are gone
• focused Core tests — 7 passed
• focused Headless tests — 89 passed, 1 intentionally skipped; Harbor adapter rerun after restoring its active config — 26 passed, 1 intentionally skipped
• focused UI tests — 37 passed
• focused CLI tests — 270 passed
• focused Runtime tests — 19 passed
• focused Computer Use tests — 100 passed
• focused Runtime Host protocol tests — 46 passed
• focused Desktop main tests — 58 passed in the latest pass
• full repository tests and full Playwright E2E were intentionally not run locally; GitHub CI owns full coverage

CI

All triggered checks passed on the expanded third-pass diff:

• typecheck
• test_workspaces
• test_headless
• test_runtime_host
• e2e_shard (1/2) and e2e_shard (2/2)
• aggregate test and e2e gates
• alignment_audit
• windows_baseline (non-blocking)

storybook was correctly skipped because this PR does not change stories.

Review focus

Residual risk is intentionally concentrated in presentation regressions, exact helper formatting, provider-list drift, and small cross-platform/toolchain display behavior. Active dependency configs and all explicit security, authority, persistence, recovery, protocol, sandbox, and process-lifecycle guards remain.

[Astro-Han]

Summary

Continue the aggressive cleanup from #2462 by deleting obsolete tests, orphaned prompt fixtures, and dead test-only APIs across Desktop, Core, Headless, UI, CLI, Computer Use, Runtime, and Runtime Host.

The branch changes 110 files with 13 additions and 8,343 deletions (net -8,330). Removed coverage is dominated by:

• CSS, geometry, markup, localization, copy, animation, and terminal-display assertions
• duplicated parser, renderer alias, provider-matrix, source-string, and fixture-wiring pins
• obsolete Headless prompt experiments and two test-only prompt assets
• small schema/default-value smokes already covered by higher-level contracts or workflows
• 55 entire test files and 2 obsolete prompt assets, plus further partial-suite trimming

Focused validation found one runtime-loaded Harbor config that the static scan had misclassified as orphaned. That active asset was restored; only its source-string mirror test remains deleted.

Knip exposed and this PR also removes:

• CLI _detectColorLevelForTesting
• three unused Headless A/B fixture builders
• unused Headless isTaskRunLocator

Why this is safe

Unique coverage alone was not treated as a retention reason. The retained suite still protects the active product contracts whose failure cost matches test maintenance: authorization, secrets, persistence, recovery, fail-closed protocols, dependency patches, and external-process lifecycle.

Explicitly retained guards

• every dependency patch guard named by patches/README.md: AI SDK tool-call tracking, Astryx List accessible naming, grouped diff counts, new-message reset behavior, and blank UA-CH platform fallback
• credential and secret redaction, including streamed output and persisted provider errors
• permission escalation, authorization URLs, prompt-injection/authority boundaries, and sandbox takeover
• persistence, deletion, recovery, storage-root authority, and session lifecycle gates
• Linux sandbox capability enforcement used by CI
• fail-closed protocol validation and lifecycle gates that prevent irreversible external actions, process leaks, or stale ownership

Verification

• git diff --check origin/main...HEAD — passed
• npm run format:check / npm run format — passed
• npm run lint — passed
• affected workspace typechecks for Desktop, Core, Headless, UI, CLI, Runtime, Computer Use, and Runtime Host — passed
• npx knip compared with the clean root checkout — no new findings; four existing unused Headless exports are gone
• focused Core tests — 7 passed
• focused Headless tests — 89 passed, 1 intentionally skipped; Harbor adapter rerun after restoring its active config — 26 passed, 1 intentionally skipped
• focused UI tests — 37 passed
• focused CLI tests — 270 passed
• focused Runtime tests — 19 passed
• focused Computer Use tests — 100 passed
• focused Runtime Host protocol tests — 46 passed
• focused Desktop main tests — 58 passed in the latest pass
• full repository tests and full Playwright E2E were intentionally not run locally; GitHub CI owns full coverage

CI

All triggered checks passed on the expanded third-pass diff:

• typecheck
• test_workspaces
• test_headless
• test_runtime_host
• e2e_shard (1/2) and e2e_shard (2/2)
• aggregate test and e2e gates
• alignment_audit
• windows_baseline (non-blocking)

storybook was correctly skipped because this PR does not change stories.

Review focus

Residual risk is intentionally concentrated in presentation regressions, exact helper formatting, provider-list drift, and small cross-platform/toolchain display behavior. Active dependency configs and all explicit security, authority, persistence, recovery, protocol, sandbox, and process-lifecycle guards remain.