PR #23430 runtime verification
main: 5ef56853ef1854da50bc1909c6c0a32700f2cb13
original PR: d26da87f97436955a22bc0c79c4579ef258d2bd3
fixed PR: 237c53672cf3cf0b4de8965b3bb2420694aac3c4

Browser: repository Playwright 1.60.0, /usr/bin/google-chrome, real dev web client.
Created project /home/user/t3code through Add project > Local folder; selected Codex gpt-6.1-sol and sent read-only verification turns.
Provider executed node --input-type=module -e importing the actual semver.ts in the respective checkout. Real provider log confirmed command execution and completed agent messages. The JSON below was also reproduced directly with node. These calls exercise the helper through an agent command, not a real hyphenated release update advisory.

Inputs:
normalize: normalizeSemverVersion("20-alpha-1")
parse: parseSemver("1.2.3-alpha-1.2")
hyphens: compareSemverVersions("1.2.3-alpha-1", "1.2.3-alpha-2")
numeric: compareSemverVersions("1.2.3-alpha-1.2", "1.2.3-alpha-1.10")
stable: compareSemverVersions("1.2.3", "1.2.4")
prerelease: compareSemverVersions("1.2.3-beta.1", "1.2.3")
metadata: compareSemverVersions("1.2.3-alpha.1+build-2", "1.2.3-alpha.1+build-3")

main:
{
  "normalize": "20.0.0-alpha",
  "parse": {
    "major": 1,
    "minor": 2,
    "patch": 3,
    "prerelease": [
      "alpha"
    ]
  },
  "hyphens": 0,
  "numeric": 0,
  "stable": -1,
  "prerelease": -1,
  "metadata": 0
}

original PR:
{
  "normalize": "20.0.0-alpha-1",
  "parse": {
    "major": 1,
    "minor": 2,
    "patch": 3,
    "prerelease": [
      "alpha-1",
      "2"
    ]
  },
  "hyphens": -1,
  "numeric": -8,
  "stable": -1,
  "prerelease": -1,
  "metadata": -1
}

fixed PR:
{
  "normalize": "20.0.0-alpha-1",
  "parse": {
    "major": 1,
    "minor": 2,
    "patch": 3,
    "prerelease": [
      "alpha-1",
      "2"
    ]
  },
  "hyphens": -1,
  "numeric": -8,
  "stable": -1,
  "prerelease": -1,
  "metadata": 0
}


Neighboring real client flow: Settings > Providers > Refresh provider status > Update available. Installed real Codex 0.164.0 remained Available, latest real registry release 0.166.0 appeared in advisory. No provider binary or registry response was replaced.

Blacksmith: new metadata assertion failed with expected 0 / received -1 before fix. Fixed semver 9, codex catalog 2, maintenance resolver 52 tests passed. check:changed HEAD passed format, lint, knip, typecheck (28 packages), semver tests. Used HEAD because worker snapshot is shallow; both PR-changed files were checked, with all dependents.

Not exercised: actual second-hyphen provider release update/catalog decision; desktop, native mobile, remote/relay/SSH and other provider runtimes.