test(bundle): drive the prow-commands alias canonicalization and unsupported-command arms through dist/index.js

[hivecommons-hive]

Test Improvement

Adds __tests__/bundle/commandCanonicalization.test.ts (new file only; imports comment, helpersFor, repo, token from ./helpers, start from ./fakeGithub, runBundle from ./runBundle; no src/, dist/, helpers.ts or config change). Three issue_comment runs of the committed dist/index.js against fakeGithub reach the two prow-commands input arms of src/issueComment/handleIssueComment.ts no bundle suite drove:

run	arm	asserts
prow-commands: /remove-help, comment /help	canonicalCommand alias arm L86	exit 0, GET labels → POST issues/1/labels {help wanted}, then the configuration reads
prow-commands: /help /remove-help /HELP, comment /help	L86 + the Set dedup at L109	exit 0, exactly one label write
prow-commands: /foo_bar, comment /foo_bar	unsupported-command arm L150	exit 1, ::error::TypeError: error handling issue comment: Error: could not execute /foo_bar. May not be supported - please refer to docs, zero api calls

Evidence (main @ 3fc21f2, Node v26.10.0, vitest 5.0.3, @vitest/coverage-v8, npm run test:coverage:e2e):

• src/issueComment/handleIssueComment.ts e2e lines 93.90 % → 96.34 %, statements 94.04 % → 96.42 %, branches 86.27 % → 90.19 %. Remaining lines 45 (/meow, held test(bundle): drive /meow through dist/index.js against a stubbed cat api #244), 188 (held test(bundle): drive the configured hold and sweep sections through dist/index.js #293) and 207 (removeFixedLabels, held test(bundle): drive removeFixedLabels' no-op and failed-labels-read arms through dist/index.js #300) are each already claimed.
• Bundle suites overall: 77.90 % → 77.99 % lines, 70.82 % → 70.92 % branches.
• Unit: the file is already 100/100/100/100; unit and e2e figures are reported separately ([quality] the bundle e2e suite's coverage of src/ is never captured — runBundle.ts drops NODE_V8_COVERAGE and dist/ has no source map #235).

Disjoint from every open hold-gated bundle PR: #246 (/remove-help in the comment with /help configured, built-in /lifecycle), #343 (missing issue/pull number guards), #324 (command.ts Markdown guards), #242 (cron jobs input). None of them puts an alias or an unsupported name in the prow-commands input.

Verified locally: npx vitest run __tests__/bundle/commandCanonicalization.test.ts → 3 passed against the committed dist/index.js; npx eslint __tests__/bundle/commandCanonicalization.test.ts and npx tsc --noEmit clean.

Related Issue

Closes #356

---

Filed by quality agent (hold-gated mode). Human review required.

— hive: agent=quality backend=copilot model=claude-fable-5.1 copilot=1.0.88

[hivecommons-hive]

Important

Held for human review by the hive's ACMM level gate.

This PR was opened by the "quality" agent while Hive policy required a human checkpoint for that agent. Non-outreach agents are held at ACMM L3–L5; the outreach agent is always held because it publishes project-facing communication.

Hive will keep the hold label until a human removes it. Operators can make a deliberate one-off release during an ACMM level change with release_level_holds=true, but level changes never release this hold automatically.

[github-actions]

Please add a kind label with /kind failing-test or /kind cleanup.