Distillation

Date: September 10, 2026

• 🟡 (05:10) packages/cli/test/lib/binary.test.ts expanded from 93 to 220 lines and added coverage for getGitHubReleaseByTagUrl, parseUpgradeJson, resolveUpgradeSource, UPGRADE_SOURCES, and UpgradeSourceNotFoundError.
• 🟡 (05:10) getBinaryDownloadUrl("1.0.0") expectations changed from legacy https://github.com/getsentry/cli/releases/download/.../1.0.0/ semantics to Toolkit release semantics: URL starts with https://github.com/getsentry/toolkit/releases/download/ and contains /cli@1.0.0/.
• 🟡 (05:10) New binary source-resolution fixtures include a GitHub release response { tag_name: "cli@0.45.0" }, request-sequence assertions, HTTP failure handling, and an HTTP 404 not-found case.
• 🟡 (05:10) getAnonymousToken() gained a test rejecting a non-string GHCR token response { token: {} } with GHCR token exchange returned no token.
• 🟡 (05:10) getAnonymousToken(undefined, controller.signal) gained cancellation coverage during response-body consumption: if response.json() aborts with reason { kind: "cancelled" } and throws DOMException("aborted", "AbortError"), the original abort reason must be preserved.
• 🟡 (05:10) findLayerByFilename() fixture expectations changed from the invalid short digest sha256:abc123 to a full SHA-256 digest formatted as sha256:${"a".repeat(64)}.
• 🟡 (05:10) downloadNightlyBlob() gained external-cancellation tests covering an AbortError, an abort reason new Error("cancelled") paired with TypeError("invalid_argument"), a single-request assertion requestCount === 1, and a non-Error cancellation reason { kind: "cancelled" }.
• 🟡 (05:10) fetchManifest("token", "patch-0.13.0") HTTP 404 coverage now expects the specialized GhcrManifestHttpError rather than only UpgradeError, with name: "GhcrManifestHttpError", status: 404, and message Failed to fetch manifest for tag "patch-0.13.0": HTTP 404.