test: cover FME rollout prompt, governance CRUD scopes, infra deep link fallbacks

[cursor]

Description

Adds regression tests for recently merged production paths that lacked coverage:

• tests/prompts/feature-flag-rollout.test.ts — dual-mode scope validation for the FME rollout prompt (feat: [FME-17249]: FME dual-mode Harness-native scope migration #806): rejects missing/partial scope (orgId-only and projectId-only), verifies legacy workspace_id vs Harness-native org_id/project_id interpolation, and surfaces the NYI caveat for native mode.
• tests/registry/governance.test.ts — extends multi-scope coverage beyond list to get/create/update/delete for policy and policy_set at account/org/project scope (feat: allow account and org scope for OPA policies and policy sets #819), including symmetric get-at-org and delete-at-account/org cases.
• tests/registry/infrastructure.test.ts — deep-link fallbacks when environmentRef is nested or only available via query param (feat: [AIPLAT-1334]: Point infrastructure openInHarness at environment Infrastructure section #809), plus update-path nested environmentRef aliasing.

Risky behavior now covered

1. Agents invoking the rollout prompt without valid scope get a clear error instead of generating broken MCP call instructions.
2. Account/org scoped OPA policy CRUD no longer relies solely on list-path tests — write and delete paths are pinned across all scopes.
3. Infrastructure openInHarness links stay correct when API responses omit top-level environmentRef or nest it under infrastructure.

Test files added/updated

• tests/prompts/feature-flag-rollout.test.ts (new)
• tests/registry/governance.test.ts (extended)
• tests/registry/infrastructure.test.ts (extended)

Why these tests materially reduce regression risk

These paths sit on shared registry dispatch and prompt wiring with high agent blast radius. Scope mis-resolution or broken deep links fail silently in production but are cheap to assert in unit tests.

Validation

pnpm test tests/prompts/feature-flag-rollout.test.ts tests/registry/governance.test.ts tests/registry/infrastructure.test.ts
# 86 tests passed

Type of Change

• Bug fix
• New feature
• Refactor
• Documentation
• Other — test coverage

Checklist

• pnpm test passes (targeted files)
• pnpm typecheck passes
• pnpm build passes
• pnpm standards:check passes
• pnpm docs:check passes

  

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[thisrohangupta]

Closing as stale after #838: this branch still retains the removed native-rollout NYI expectation. #842 and #845 carry the current post-#838 coverage.