test(cli): deepen live JSON assertions for orgs/projects list

The `--output-format json` live tests only asserted `JSON.parse` succeeded,
which proves "command exited and emitted JSON" but not platform correctness.
Assert real shape + state instead:

- orgs list: `organizations` is a non-empty array of `{ id, slug, name }`
  (the live token always belongs to at least one org).
- projects list: `projects` is an array, and when the runner provisioned a
  project (SUPABASE_LIVE_PROJECT_REF set) that ref appears in the listing —
  proving the JSON reflects real platform state.

Validated against a real supabox stack: 8 passed (the project-ref containment
assertion exercised with a provisioned project).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: avallete

apps/cli/src/legacy/commands/orgs/list/list.live.test.ts

@@ -22,21 +22,26 @@ describeLive("supabase orgs list (live)", () => {
     },
   );
 
-  test(
-    "emits machine-readable JSON with --output-format json",
-    { timeout: LIVE_TIMEOUT_MS },
-    async () => {
-      const { exitCode, stdout } = await runSupabaseLive([
-        "orgs",
-        "list",
-        "--output-format",
-        "json",
-      ]);
-      expect(exitCode).toBe(0);
-      // stdout must be payload-only valid JSON in json mode (no spinner/log noise).
-      expect(() => JSON.parse(stdout)).not.toThrow();
-    },
-  );
+  test("emits organizations as machine-readable JSON", { timeout: LIVE_TIMEOUT_MS }, async () => {
+    const { exitCode, stdout } = await runSupabaseLive(["orgs", "list", "--output-format", "json"]);
+    expect(exitCode).toBe(0);
+    // Payload-only JSON (no spinner/log noise) shaped like the Go CLI's
+    // { organizations: [{ id, slug, name }], message }. The live token always
+    // belongs to at least one org (supabox seeds one), so assert a real row —
+    // not merely that the output parses.
+    const parsed = JSON.parse(stdout) as {
+      organizations: Array<{ id: string; slug: string; name: string }>;
+    };
+    expect(Array.isArray(parsed.organizations)).toBe(true);
+    expect(parsed.organizations.length).toBeGreaterThan(0);
+    expect(parsed.organizations[0]).toEqual(
+      expect.objectContaining({
+        id: expect.any(String),
+        slug: expect.any(String),
+        name: expect.any(String),
+      }),
+    );
+  });
 
   // Negative path: a bad token must round-trip to the real Management API, come
   // back 401, and surface as a non-zero exit with the upstream "Unauthorized"

apps/cli/src/legacy/commands/projects/list/list.live.test.ts

@@ -1,6 +1,10 @@
 import { expect, test } from "vitest";
 
-import { describeLive, runSupabaseLive } from "../../../../../tests/helpers/live.ts";
+import {
+  describeLive,
+  liveProjectRef,
+  runSupabaseLive,
+} from "../../../../../tests/helpers/live.ts";
 
 const LIVE_TIMEOUT_MS = 60_000;
 
@@ -16,7 +20,7 @@ describeLive("supabase projects list (live)", () => {
   });
 
   test(
-    "emits machine-readable JSON with --output-format json",
+    "emits projects as machine-readable JSON, including the provisioned project",
     { timeout: LIVE_TIMEOUT_MS },
     async () => {
       const { exitCode, stdout } = await runSupabaseLive([
@@ -26,8 +30,17 @@ describeLive("supabase projects list (live)", () => {
         "json",
       ]);
       expect(exitCode).toBe(0);
-      // stdout must be payload-only valid JSON in json mode (no spinner/log noise).
-      expect(() => JSON.parse(stdout)).not.toThrow();
+      // Payload-only JSON shaped like { projects: [{ id, ref, name, status, … }], message }.
+      const parsed = JSON.parse(stdout) as {
+        projects: Array<{ id: string; ref: string; name: string }>;
+      };
+      expect(Array.isArray(parsed.projects)).toBe(true);
+      const ref = liveProjectRef();
+      if (ref) {
+        // When the runner provisioned a project, it must appear in the listing —
+        // proves the JSON reflects real platform state, not just valid syntax.
+        expect(parsed.projects.map((project) => project.ref)).toContain(ref);
+      }
     },
   );
 });