test(objectql): align install/duplicate tests with #2540 durable persistence

Two objectql protocol tests asserted the pre-#2540 behavior:

- installPackage used to SKIP sys_packages persistence for versionless
  manifests (the {id,name} shape the builder/Setup create), so base
  packages vanished on restart (#2532). It now defaults version to
  '0.1.0' and persists. Test updated to expect persistence with the
  defaulted version.

- duplicatePackage used to do a bare registry.installPackage write and
  keep the source scope. It now routes through installPackage (so the
  copy also lands in sys_packages) and strips scope (a duplicate must be
  a writable base, not inherit the source's read-only scope). Test
  updated to assert the routed call + scope stripped.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: os-zhuang

packages/objectql/src/protocol-install-package.test.ts

@@ -81,14 +81,20 @@ describe('protocol.installPackage (ADR-0033 consolidation)', () => {
     warn.mockRestore();
   });
 
-  it('skips persistence when the manifest has no version (cannot key sys_packages)', async () => {
+  it('persists a versionless manifest with a defaulted version (#2540: base packages must survive restart)', async () => {
+    // Builder/Setup create base packages as bare { id, name } with no version.
+    // Pre-#2540 these were skipped for persistence and vanished on restart (#2532).
+    // Now installPackage defaults version to '0.1.0' so they key into sys_packages.
     const publish = vi.fn(async () => ({ success: true }));
     const { protocol, registry } = makeProtocol({ pkgSvc: { publish } });
     const manifest = { id: 'app.nov', name: 'NoVer', type: 'application' };
 
     await protocol.installPackage({ manifest } as never);
 
     expect(registry.installPackage).toHaveBeenCalledOnce();
-    expect(publish).not.toHaveBeenCalled();
+    expect(publish).toHaveBeenCalledTimes(1);
+    expect((publish.mock.calls[0] as unknown[])[0]).toMatchObject({
+      manifest: { id: 'app.nov', version: '0.1.0' },
+    });
   });
 });

packages/objectql/src/protocol-package-lifecycle.test.ts

@@ -145,10 +145,16 @@ describe('protocol.duplicatePackage (ADR-0070 D4)', () => {
             sourcePackageId: 'app.iojn', targetPackageId: 'app.iojn2', targetNamespace: 'iojn2',
         });
 
-        // target package installed as a writable copy (new id + namespace, scope kept)
-        expect(installPackage).toHaveBeenCalledWith(
-            expect.objectContaining({ id: 'app.iojn2', namespace: 'iojn2', scope: 'environment' }),
-        );
+        // #2540: the copy routes through installPackage (not a bare registry
+        // write) so it ALSO lands in sys_packages and survives a restart. And
+        // the copy is SCOPE-LESS on purpose — the source carries scope
+        // 'environment', but branding that onto the duplicate would make it
+        // read-only in the writability heuristics; a duplicate must be a
+        // writable base.
+        expect(installPackage).toHaveBeenCalledTimes(1);
+        const dupManifest = (installPackage as any).mock.calls[0][0];
+        expect(dupManifest).toMatchObject({ id: 'app.iojn2', namespace: 'iojn2' });
+        expect(dupManifest.scope).toBeUndefined();
 
         const calls = (saveMetaItem as any).mock.calls.map((c: any) => c[0]);
         const ticket = calls.find((c: any) => c.name === 'iojn2_repair_ticket');