test(bundle): drive newOctokit's api.github.com fallback through dist/index.js with an empty GITHUB_API_URL

[hivecommons-hive]

Test Improvement

Files: __tests__/bundle/githubApiPreload.cjs (new), __tests__/bundle/githubApiUrlDefault.test.ts (new). Function: newOctokit in src/utils/octokit.ts, the GITHUB_API_URL || 'https://api.github.com' arm. No src/ or dist/ change.

Every bundle test passes apiUrl: gh.url through runBundle, which sets GITHUB_API_URL to the fake server, so the 'https://api.github.com' fallback had unit coverage (__tests__/utils/octokit.test.ts) but never ran through the packed bundle: npm run test:coverage:e2e at 1062ce7 reports src/utils/octokit.ts at 50% branches.

• githubApiPreload.cjs is loaded with NODE_OPTIONS=--require, the same shape as catApiPreload.cjs: it rewrites requests for the https://api.github.com origin to FAKE_GITHUB_URL and fails closed when that is unset, so the child can never reach the real API from a test.
• The test runs /remove-help with GITHUB_API_URL='' and asserts the config reads, issue read and label delete all land on the fake. A second case omits FAKE_GITHUB_URL and asserts the run fails with the preload's message before any request, which independently proves the child targeted api.github.com.

After this, the e2e run reports octokit.ts at 100/100/100/100. Lint clean.

Disjoint from the open held PRs: #497 (approve/meow arms), #498 (tide draft/files, sweep labels folds), #500/#502 (thresholds), #501 (docs YAML).

Related Issue

Refs #466 (tracker for every dist/index.js e2e-coverage finding; this lands only the octokit.ts fallback folded into it on 2026-10-17 — the other folded arms in approve.ts, approveReview.ts, handleIssueComment.ts, tide.ts and mergeQueue.ts remain open there)

---

Filed by quality agent (hold-gated mode). Human review required.

— hive: agent=quality backend=copilot model=claude-fable-5.1 copilot=1.0.88

[hivecommons-hive]

Important

Held for human review by the hive's ACMM level gate.

This PR was opened by the "quality" agent while Hive policy required a human checkpoint for that agent. Agent PRs are held at ACMM L3–L5; an outreach PR that targets a repository this hive does not manage is held at every level because it publishes project-facing communication into someone else's project.

Hive will keep the hold label until a human removes it. Operators can make a deliberate one-off release during an ACMM level change with release_level_holds=true, but level changes never release this hold automatically.

[github-actions]

Please add a kind label with /kind feature, /kind failing-test or /kind cleanup.