@m2-ai/lattice-cli 0.0.0-stage → 0.8.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (743) hide show
  1. package/DISCLOSURE +1 -0
  2. package/README.md +118 -2
  3. package/bundles/expo-mobile/.agents/skills/lattice-feature-handoff/SKILL.md +31 -0
  4. package/bundles/expo-mobile/.agents/skills/lattice-release-manager/SKILL.md +29 -0
  5. package/bundles/expo-mobile/.agents/skills/lattice-verify/SKILL.md +27 -0
  6. package/bundles/expo-mobile/.claude/agents/lattice-feature-agent.md +10 -0
  7. package/bundles/expo-mobile/.claude/agents/lattice-release-manager.md +9 -0
  8. package/bundles/expo-mobile/.claude/hooks/README.md +9 -0
  9. package/bundles/expo-mobile/.claude/hooks/pre-commit-verify.mjs +10 -0
  10. package/bundles/expo-mobile/.claude/hooks/pre-tool-use.mjs +51 -0
  11. package/bundles/expo-mobile/.claude/rules/lattice-core.md +20 -0
  12. package/bundles/expo-mobile/.claude/settings.json +38 -0
  13. package/bundles/expo-mobile/.claude/skills/lattice-verify/SKILL.md +27 -0
  14. package/bundles/expo-mobile/.codex/agents/lattice-feature-agent.toml +9 -0
  15. package/bundles/expo-mobile/.codex/agents/lattice-release-manager.toml +9 -0
  16. package/bundles/expo-mobile/.cursor/mcp.json +34 -0
  17. package/bundles/expo-mobile/.cursor/rules/lattice-core.mdc +35 -0
  18. package/bundles/expo-mobile/.cursor/rules.md +94 -0
  19. package/bundles/expo-mobile/.env.example +19 -0
  20. package/bundles/expo-mobile/.github/PULL_REQUEST_TEMPLATE.md +42 -0
  21. package/bundles/expo-mobile/.github/agents/lattice-feature-agent.agent.md +7 -0
  22. package/bundles/expo-mobile/.github/agents/lattice-release-manager.agent.md +7 -0
  23. package/bundles/expo-mobile/.github/copilot-instructions.md +37 -0
  24. package/bundles/expo-mobile/.github/instructions/lattice-core.instructions.md +11 -0
  25. package/bundles/expo-mobile/.github/workflows/ci.yml +26 -0
  26. package/bundles/expo-mobile/.gitmessage +24 -0
  27. package/bundles/expo-mobile/.lattice/config.json +9 -0
  28. package/bundles/expo-mobile/.lattice/dependency-security.json +91 -0
  29. package/bundles/expo-mobile/.lattice/prompts/01-feature.md +36 -0
  30. package/bundles/expo-mobile/.lattice/prompts/02-bugfix.md +32 -0
  31. package/bundles/expo-mobile/.lattice/prompts/03-refactor.md +30 -0
  32. package/bundles/expo-mobile/.lattice/prompts/04-test.md +31 -0
  33. package/bundles/expo-mobile/.lattice/prompts/05-polish.md +38 -0
  34. package/bundles/expo-mobile/.lattice/prompts/06-security.md +32 -0
  35. package/bundles/expo-mobile/.lattice/release-workflow.json +55 -0
  36. package/bundles/expo-mobile/.lattice/schemas/feature-handoff.schema.json +264 -0
  37. package/bundles/expo-mobile/.lattice/templates/feature-handoff.json +52 -0
  38. package/bundles/expo-mobile/.mcp.json +35 -0
  39. package/bundles/expo-mobile/AGENTS.md +58 -0
  40. package/bundles/expo-mobile/CLAUDE.md +75 -0
  41. package/bundles/expo-mobile/PROJECT_GUIDE.md +299 -0
  42. package/bundles/expo-mobile/README.md +39 -0
  43. package/bundles/expo-mobile/__tests__/home.test.tsx +22 -0
  44. package/bundles/expo-mobile/app/_layout.tsx +20 -0
  45. package/bundles/expo-mobile/app/index.tsx +72 -0
  46. package/bundles/expo-mobile/app.json +33 -0
  47. package/bundles/expo-mobile/components/ui/Button.tsx +75 -0
  48. package/bundles/expo-mobile/components/ui/Input.tsx +50 -0
  49. package/bundles/expo-mobile/components/ui/index.ts +2 -0
  50. package/bundles/expo-mobile/docs/LATTICE_RELEASE_WORKFLOW.md +53 -0
  51. package/bundles/expo-mobile/docs/rules/codex.md +62 -0
  52. package/bundles/expo-mobile/eslint.config.js +7 -0
  53. package/bundles/expo-mobile/lib/supabase/client.ts +22 -0
  54. package/bundles/expo-mobile/lib/supabase/realtime.ts +10 -0
  55. package/bundles/expo-mobile/lib/supabase/storage.ts +6 -0
  56. package/bundles/expo-mobile/package.json +65 -0
  57. package/bundles/expo-mobile/plugins/with-lattice-commons-io.cjs +42 -0
  58. package/bundles/expo-mobile/prompts/01-feature-implementation.md +48 -0
  59. package/bundles/expo-mobile/prompts/02-bug-fix.md +43 -0
  60. package/bundles/expo-mobile/prompts/03-safe-refactor.md +38 -0
  61. package/bundles/expo-mobile/prompts/04-test-first.md +41 -0
  62. package/bundles/expo-mobile/prompts/05-ui-polish.md +44 -0
  63. package/bundles/expo-mobile/prompts/06-security-review.md +39 -0
  64. package/bundles/expo-mobile/prompts/quality.md +143 -0
  65. package/bundles/expo-mobile/supabase/migrations/001_initial_schema.sql +66 -0
  66. package/bundles/expo-mobile/tsconfig.json +21 -0
  67. package/bundles/expo-mobile/types/database.types.ts +76 -0
  68. package/bundles/expo-mobile/vendor/m2ai-braces-3.0.3-m2ai.1.tar +0 -0
  69. package/bundles/expo-supabase/.agents/skills/lattice-feature-handoff/SKILL.md +31 -0
  70. package/bundles/expo-supabase/.agents/skills/lattice-release-manager/SKILL.md +29 -0
  71. package/bundles/expo-supabase/.agents/skills/lattice-verify/SKILL.md +27 -0
  72. package/bundles/expo-supabase/.claude/agents/lattice-feature-agent.md +10 -0
  73. package/bundles/expo-supabase/.claude/agents/lattice-release-manager.md +9 -0
  74. package/bundles/expo-supabase/.claude/hooks/README.md +9 -0
  75. package/bundles/expo-supabase/.claude/hooks/pre-commit-verify.mjs +10 -0
  76. package/bundles/expo-supabase/.claude/hooks/pre-tool-use.mjs +51 -0
  77. package/bundles/expo-supabase/.claude/rules/lattice-core.md +20 -0
  78. package/bundles/expo-supabase/.claude/settings.json +38 -0
  79. package/bundles/expo-supabase/.claude/skills/lattice-verify/SKILL.md +27 -0
  80. package/bundles/expo-supabase/.codex/agents/lattice-feature-agent.toml +9 -0
  81. package/bundles/expo-supabase/.codex/agents/lattice-release-manager.toml +9 -0
  82. package/bundles/expo-supabase/.cursor/mcp.json +34 -0
  83. package/bundles/expo-supabase/.cursor/rules/lattice-core.mdc +35 -0
  84. package/bundles/expo-supabase/.cursor/rules.md +94 -0
  85. package/bundles/expo-supabase/.env.example +12 -0
  86. package/bundles/expo-supabase/.github/PULL_REQUEST_TEMPLATE.md +42 -0
  87. package/bundles/expo-supabase/.github/agents/lattice-feature-agent.agent.md +7 -0
  88. package/bundles/expo-supabase/.github/agents/lattice-release-manager.agent.md +7 -0
  89. package/bundles/expo-supabase/.github/copilot-instructions.md +37 -0
  90. package/bundles/expo-supabase/.github/instructions/lattice-core.instructions.md +11 -0
  91. package/bundles/expo-supabase/.github/workflows/ci.yml +26 -0
  92. package/bundles/expo-supabase/.gitmessage +24 -0
  93. package/bundles/expo-supabase/.lattice/config.json +9 -0
  94. package/bundles/expo-supabase/.lattice/dependency-security.json +91 -0
  95. package/bundles/expo-supabase/.lattice/prompts/01-feature.md +36 -0
  96. package/bundles/expo-supabase/.lattice/prompts/02-bugfix.md +32 -0
  97. package/bundles/expo-supabase/.lattice/prompts/03-refactor.md +30 -0
  98. package/bundles/expo-supabase/.lattice/prompts/04-test.md +31 -0
  99. package/bundles/expo-supabase/.lattice/prompts/05-polish.md +38 -0
  100. package/bundles/expo-supabase/.lattice/prompts/06-security.md +32 -0
  101. package/bundles/expo-supabase/.lattice/release-workflow.json +55 -0
  102. package/bundles/expo-supabase/.lattice/schemas/feature-handoff.schema.json +264 -0
  103. package/bundles/expo-supabase/.lattice/templates/feature-handoff.json +52 -0
  104. package/bundles/expo-supabase/.mcp.json +35 -0
  105. package/bundles/expo-supabase/AGENTS.md +58 -0
  106. package/bundles/expo-supabase/CLAUDE.md +75 -0
  107. package/bundles/expo-supabase/PROJECT_GUIDE.md +201 -0
  108. package/bundles/expo-supabase/README.md +38 -0
  109. package/bundles/expo-supabase/__tests__/home.test.tsx +22 -0
  110. package/bundles/expo-supabase/app/_layout.tsx +14 -0
  111. package/bundles/expo-supabase/app/index.tsx +72 -0
  112. package/bundles/expo-supabase/app.json +33 -0
  113. package/bundles/expo-supabase/components/ui/Button.tsx +75 -0
  114. package/bundles/expo-supabase/components/ui/Input.tsx +50 -0
  115. package/bundles/expo-supabase/components/ui/index.ts +2 -0
  116. package/bundles/expo-supabase/docs/LATTICE_RELEASE_WORKFLOW.md +53 -0
  117. package/bundles/expo-supabase/docs/rules/codex.md +62 -0
  118. package/bundles/expo-supabase/eslint.config.js +7 -0
  119. package/bundles/expo-supabase/lib/supabase/client.ts +22 -0
  120. package/bundles/expo-supabase/lib/supabase/realtime.ts +10 -0
  121. package/bundles/expo-supabase/lib/supabase/storage.ts +6 -0
  122. package/bundles/expo-supabase/package.json +60 -0
  123. package/bundles/expo-supabase/plugins/with-lattice-commons-io.cjs +42 -0
  124. package/bundles/expo-supabase/prompts/01-feature-implementation.md +8 -0
  125. package/bundles/expo-supabase/prompts/02-bug-fix.md +9 -0
  126. package/bundles/expo-supabase/prompts/03-safe-refactor.md +8 -0
  127. package/bundles/expo-supabase/prompts/04-test-first.md +7 -0
  128. package/bundles/expo-supabase/prompts/05-ui-polish.md +7 -0
  129. package/bundles/expo-supabase/prompts/06-security-review.md +7 -0
  130. package/bundles/expo-supabase/prompts/quality.md +143 -0
  131. package/bundles/expo-supabase/supabase/migrations/001_initial_schema.sql +66 -0
  132. package/bundles/expo-supabase/tsconfig.json +21 -0
  133. package/bundles/expo-supabase/types/database.types.ts +76 -0
  134. package/bundles/expo-supabase/vendor/m2ai-braces-3.0.3-m2ai.1.tar +0 -0
  135. package/bundles/nextjs-landing/.agents/skills/lattice-feature-handoff/SKILL.md +31 -0
  136. package/bundles/nextjs-landing/.agents/skills/lattice-release-manager/SKILL.md +29 -0
  137. package/bundles/nextjs-landing/.agents/skills/lattice-verify/SKILL.md +27 -0
  138. package/bundles/nextjs-landing/.claude/agents/lattice-feature-agent.md +10 -0
  139. package/bundles/nextjs-landing/.claude/agents/lattice-release-manager.md +9 -0
  140. package/bundles/nextjs-landing/.claude/hooks/README.md +9 -0
  141. package/bundles/nextjs-landing/.claude/hooks/pre-commit-verify.mjs +10 -0
  142. package/bundles/nextjs-landing/.claude/hooks/pre-tool-use.mjs +51 -0
  143. package/bundles/nextjs-landing/.claude/rules/lattice-core.md +20 -0
  144. package/bundles/nextjs-landing/.claude/settings.json +38 -0
  145. package/bundles/nextjs-landing/.claude/skills/lattice-verify/SKILL.md +27 -0
  146. package/bundles/nextjs-landing/.codex/agents/lattice-feature-agent.toml +9 -0
  147. package/bundles/nextjs-landing/.codex/agents/lattice-release-manager.toml +9 -0
  148. package/bundles/nextjs-landing/.cursor/mcp.json +34 -0
  149. package/bundles/nextjs-landing/.cursor/rules/lattice-core.mdc +35 -0
  150. package/bundles/nextjs-landing/.cursor/rules.md +95 -0
  151. package/bundles/nextjs-landing/.env.example +24 -0
  152. package/bundles/nextjs-landing/.github/PULL_REQUEST_TEMPLATE.md +42 -0
  153. package/bundles/nextjs-landing/.github/agents/lattice-feature-agent.agent.md +7 -0
  154. package/bundles/nextjs-landing/.github/agents/lattice-release-manager.agent.md +7 -0
  155. package/bundles/nextjs-landing/.github/copilot-instructions.md +37 -0
  156. package/bundles/nextjs-landing/.github/instructions/lattice-core.instructions.md +11 -0
  157. package/bundles/nextjs-landing/.github/workflows/ci.yml +26 -0
  158. package/bundles/nextjs-landing/.gitmessage +24 -0
  159. package/bundles/nextjs-landing/.lattice/config.json +9 -0
  160. package/bundles/nextjs-landing/.lattice/dependency-security.json +46 -0
  161. package/bundles/nextjs-landing/.lattice/prompts/01-feature.md +36 -0
  162. package/bundles/nextjs-landing/.lattice/prompts/02-bugfix.md +32 -0
  163. package/bundles/nextjs-landing/.lattice/prompts/03-refactor.md +30 -0
  164. package/bundles/nextjs-landing/.lattice/prompts/04-test.md +31 -0
  165. package/bundles/nextjs-landing/.lattice/prompts/05-polish.md +38 -0
  166. package/bundles/nextjs-landing/.lattice/prompts/06-security.md +32 -0
  167. package/bundles/nextjs-landing/.lattice/release-workflow.json +55 -0
  168. package/bundles/nextjs-landing/.lattice/schemas/feature-handoff.schema.json +264 -0
  169. package/bundles/nextjs-landing/.lattice/templates/feature-handoff.json +52 -0
  170. package/bundles/nextjs-landing/.mcp.json +35 -0
  171. package/bundles/nextjs-landing/AGENTS.md +58 -0
  172. package/bundles/nextjs-landing/CLAUDE.md +76 -0
  173. package/bundles/nextjs-landing/PROJECT_GUIDE.md +216 -0
  174. package/bundles/nextjs-landing/README.md +39 -0
  175. package/bundles/nextjs-landing/app/api/example/[id]/route.ts +34 -0
  176. package/bundles/nextjs-landing/app/api/example/route.ts +24 -0
  177. package/bundles/nextjs-landing/app/api/health/route.ts +8 -0
  178. package/bundles/nextjs-landing/app/global-error.tsx +17 -0
  179. package/bundles/nextjs-landing/app/globals.css +55 -0
  180. package/bundles/nextjs-landing/app/layout.tsx +22 -0
  181. package/bundles/nextjs-landing/app/page.tsx +42 -0
  182. package/bundles/nextjs-landing/components/ui/button.tsx +39 -0
  183. package/bundles/nextjs-landing/components/ui/card.tsx +53 -0
  184. package/bundles/nextjs-landing/components/ui/index.ts +4 -0
  185. package/bundles/nextjs-landing/components/ui/input.tsx +23 -0
  186. package/bundles/nextjs-landing/components/ui/spinner.tsx +22 -0
  187. package/bundles/nextjs-landing/docs/LATTICE_RELEASE_WORKFLOW.md +53 -0
  188. package/bundles/nextjs-landing/docs/rules/codex.md +62 -0
  189. package/bundles/nextjs-landing/eslint.config.mjs +16 -0
  190. package/bundles/nextjs-landing/instrumentation-client.ts +30 -0
  191. package/bundles/nextjs-landing/instrumentation.ts +12 -0
  192. package/bundles/nextjs-landing/jest.config.mjs +16 -0
  193. package/bundles/nextjs-landing/jest.setup.js +1 -0
  194. package/bundles/nextjs-landing/lib/utils.ts +6 -0
  195. package/bundles/nextjs-landing/next-env.d.ts +5 -0
  196. package/bundles/nextjs-landing/next.config.ts +15 -0
  197. package/bundles/nextjs-landing/package.json +48 -0
  198. package/bundles/nextjs-landing/postcss.config.mjs +7 -0
  199. package/bundles/nextjs-landing/prompts/01-feature-implementation.md +9 -0
  200. package/bundles/nextjs-landing/prompts/02-bug-fix.md +10 -0
  201. package/bundles/nextjs-landing/prompts/03-safe-refactor.md +8 -0
  202. package/bundles/nextjs-landing/prompts/04-test-first.md +8 -0
  203. package/bundles/nextjs-landing/prompts/05-ui-polish.md +8 -0
  204. package/bundles/nextjs-landing/prompts/06-security-review.md +7 -0
  205. package/bundles/nextjs-landing/prompts/quality.md +269 -0
  206. package/bundles/nextjs-landing/sentry.edge.config.ts +15 -0
  207. package/bundles/nextjs-landing/sentry.server.config.ts +15 -0
  208. package/bundles/nextjs-landing/tsconfig.json +42 -0
  209. package/bundles/nextjs-landing/vendor/m2ai-braces-3.0.3-m2ai.1.tar +0 -0
  210. package/bundles/nextjs-saas/.agents/skills/lattice-feature-handoff/SKILL.md +31 -0
  211. package/bundles/nextjs-saas/.agents/skills/lattice-release-manager/SKILL.md +29 -0
  212. package/bundles/nextjs-saas/.agents/skills/lattice-verify/SKILL.md +27 -0
  213. package/bundles/nextjs-saas/.claude/agents/lattice-feature-agent.md +10 -0
  214. package/bundles/nextjs-saas/.claude/agents/lattice-release-manager.md +9 -0
  215. package/bundles/nextjs-saas/.claude/hooks/README.md +9 -0
  216. package/bundles/nextjs-saas/.claude/hooks/pre-commit-verify.mjs +10 -0
  217. package/bundles/nextjs-saas/.claude/hooks/pre-tool-use.mjs +51 -0
  218. package/bundles/nextjs-saas/.claude/rules/lattice-core.md +20 -0
  219. package/bundles/nextjs-saas/.claude/settings.json +38 -0
  220. package/bundles/nextjs-saas/.claude/skills/lattice-verify/SKILL.md +27 -0
  221. package/bundles/nextjs-saas/.codex/agents/lattice-feature-agent.toml +9 -0
  222. package/bundles/nextjs-saas/.codex/agents/lattice-release-manager.toml +9 -0
  223. package/bundles/nextjs-saas/.cursor/mcp.json +34 -0
  224. package/bundles/nextjs-saas/.cursor/rules/lattice-core.mdc +35 -0
  225. package/bundles/nextjs-saas/.cursor/rules.md +95 -0
  226. package/bundles/nextjs-saas/.env.example +48 -0
  227. package/bundles/nextjs-saas/.github/PULL_REQUEST_TEMPLATE.md +42 -0
  228. package/bundles/nextjs-saas/.github/agents/lattice-feature-agent.agent.md +7 -0
  229. package/bundles/nextjs-saas/.github/agents/lattice-release-manager.agent.md +7 -0
  230. package/bundles/nextjs-saas/.github/copilot-instructions.md +37 -0
  231. package/bundles/nextjs-saas/.github/instructions/lattice-core.instructions.md +11 -0
  232. package/bundles/nextjs-saas/.github/workflows/ci.yml +26 -0
  233. package/bundles/nextjs-saas/.gitmessage +24 -0
  234. package/bundles/nextjs-saas/.lattice/config.json +9 -0
  235. package/bundles/nextjs-saas/.lattice/dependency-security.json +46 -0
  236. package/bundles/nextjs-saas/.lattice/prompts/01-feature.md +36 -0
  237. package/bundles/nextjs-saas/.lattice/prompts/02-bugfix.md +32 -0
  238. package/bundles/nextjs-saas/.lattice/prompts/03-refactor.md +30 -0
  239. package/bundles/nextjs-saas/.lattice/prompts/04-test.md +31 -0
  240. package/bundles/nextjs-saas/.lattice/prompts/05-polish.md +38 -0
  241. package/bundles/nextjs-saas/.lattice/prompts/06-security.md +32 -0
  242. package/bundles/nextjs-saas/.lattice/prompts/quality.md +269 -0
  243. package/bundles/nextjs-saas/.lattice/release-workflow.json +55 -0
  244. package/bundles/nextjs-saas/.lattice/schemas/feature-handoff.schema.json +264 -0
  245. package/bundles/nextjs-saas/.lattice/templates/feature-handoff.json +52 -0
  246. package/bundles/nextjs-saas/.mcp.json +35 -0
  247. package/bundles/nextjs-saas/AGENTS.md +58 -0
  248. package/bundles/nextjs-saas/CLAUDE.md +76 -0
  249. package/bundles/nextjs-saas/PROJECT_GUIDE.md +279 -0
  250. package/bundles/nextjs-saas/README.md +42 -0
  251. package/bundles/nextjs-saas/app/(auth)/forgot-password/page.tsx +101 -0
  252. package/bundles/nextjs-saas/app/(auth)/layout.tsx +7 -0
  253. package/bundles/nextjs-saas/app/(auth)/login/page.tsx +108 -0
  254. package/bundles/nextjs-saas/app/(auth)/reset-password/page.tsx +135 -0
  255. package/bundles/nextjs-saas/app/(auth)/signup/page.tsx +144 -0
  256. package/bundles/nextjs-saas/app/(dashboard)/dashboard/page.tsx +80 -0
  257. package/bundles/nextjs-saas/app/(dashboard)/layout.tsx +49 -0
  258. package/bundles/nextjs-saas/app/api/billing/checkout/route.ts +47 -0
  259. package/bundles/nextjs-saas/app/api/billing/portal/route.ts +29 -0
  260. package/bundles/nextjs-saas/app/api/example/[id]/route.ts +93 -0
  261. package/bundles/nextjs-saas/app/api/example/route.ts +61 -0
  262. package/bundles/nextjs-saas/app/api/health/route.ts +8 -0
  263. package/bundles/nextjs-saas/app/api/stripe/webhook/route.ts +57 -0
  264. package/bundles/nextjs-saas/app/api/user/route.ts +49 -0
  265. package/bundles/nextjs-saas/app/auth/callback/route.ts +16 -0
  266. package/bundles/nextjs-saas/app/auth/signout/route.ts +10 -0
  267. package/bundles/nextjs-saas/app/global-error.tsx +17 -0
  268. package/bundles/nextjs-saas/app/globals.css +55 -0
  269. package/bundles/nextjs-saas/app/layout.tsx +22 -0
  270. package/bundles/nextjs-saas/app/page.tsx +84 -0
  271. package/bundles/nextjs-saas/components/ui/button.tsx +39 -0
  272. package/bundles/nextjs-saas/components/ui/card.tsx +53 -0
  273. package/bundles/nextjs-saas/components/ui/index.ts +4 -0
  274. package/bundles/nextjs-saas/components/ui/input.tsx +23 -0
  275. package/bundles/nextjs-saas/components/ui/spinner.tsx +22 -0
  276. package/bundles/nextjs-saas/docs/LATTICE_RELEASE_WORKFLOW.md +53 -0
  277. package/bundles/nextjs-saas/docs/rules/codex.md +62 -0
  278. package/bundles/nextjs-saas/eslint.config.mjs +16 -0
  279. package/bundles/nextjs-saas/instrumentation-client.ts +30 -0
  280. package/bundles/nextjs-saas/instrumentation.ts +12 -0
  281. package/bundles/nextjs-saas/jest.config.mjs +16 -0
  282. package/bundles/nextjs-saas/jest.setup.js +1 -0
  283. package/bundles/nextjs-saas/lib/auth/password-recovery.ts +94 -0
  284. package/bundles/nextjs-saas/lib/stripe.ts +10 -0
  285. package/bundles/nextjs-saas/lib/supabase/admin.ts +14 -0
  286. package/bundles/nextjs-saas/lib/supabase/client.ts +8 -0
  287. package/bundles/nextjs-saas/lib/supabase/server.ts +27 -0
  288. package/bundles/nextjs-saas/lib/utils.ts +6 -0
  289. package/bundles/nextjs-saas/next-env.d.ts +5 -0
  290. package/bundles/nextjs-saas/next.config.ts +15 -0
  291. package/bundles/nextjs-saas/package.json +50 -0
  292. package/bundles/nextjs-saas/postcss.config.mjs +7 -0
  293. package/bundles/nextjs-saas/prompts/01-feature-implementation.md +92 -0
  294. package/bundles/nextjs-saas/prompts/02-bug-fix.md +78 -0
  295. package/bundles/nextjs-saas/prompts/03-safe-refactor.md +82 -0
  296. package/bundles/nextjs-saas/prompts/04-test-first.md +80 -0
  297. package/bundles/nextjs-saas/prompts/05-ui-polish.md +82 -0
  298. package/bundles/nextjs-saas/prompts/06-security-review.md +74 -0
  299. package/bundles/nextjs-saas/proxy.ts +61 -0
  300. package/bundles/nextjs-saas/sentry.edge.config.ts +15 -0
  301. package/bundles/nextjs-saas/sentry.server.config.ts +15 -0
  302. package/bundles/nextjs-saas/supabase/migrations/001_initial_schema.sql +66 -0
  303. package/bundles/nextjs-saas/supabase/migrations/002_billing.sql +17 -0
  304. package/bundles/nextjs-saas/tsconfig.json +42 -0
  305. package/bundles/nextjs-saas/types/database.types.ts +76 -0
  306. package/bundles/nextjs-saas/vendor/m2ai-braces-3.0.3-m2ai.1.tar +0 -0
  307. package/bundles/nextjs-trpc/.agents/skills/lattice-feature-handoff/SKILL.md +31 -0
  308. package/bundles/nextjs-trpc/.agents/skills/lattice-release-manager/SKILL.md +29 -0
  309. package/bundles/nextjs-trpc/.agents/skills/lattice-verify/SKILL.md +27 -0
  310. package/bundles/nextjs-trpc/.claude/agents/lattice-feature-agent.md +10 -0
  311. package/bundles/nextjs-trpc/.claude/agents/lattice-release-manager.md +9 -0
  312. package/bundles/nextjs-trpc/.claude/hooks/README.md +9 -0
  313. package/bundles/nextjs-trpc/.claude/hooks/pre-commit-verify.mjs +10 -0
  314. package/bundles/nextjs-trpc/.claude/hooks/pre-tool-use.mjs +51 -0
  315. package/bundles/nextjs-trpc/.claude/rules/lattice-core.md +20 -0
  316. package/bundles/nextjs-trpc/.claude/settings.json +38 -0
  317. package/bundles/nextjs-trpc/.claude/skills/lattice-verify/SKILL.md +27 -0
  318. package/bundles/nextjs-trpc/.codex/agents/lattice-feature-agent.toml +9 -0
  319. package/bundles/nextjs-trpc/.codex/agents/lattice-release-manager.toml +9 -0
  320. package/bundles/nextjs-trpc/.cursor/mcp.json +34 -0
  321. package/bundles/nextjs-trpc/.cursor/rules/lattice-core.mdc +35 -0
  322. package/bundles/nextjs-trpc/.cursor/rules.md +95 -0
  323. package/bundles/nextjs-trpc/.env.example +21 -0
  324. package/bundles/nextjs-trpc/.github/PULL_REQUEST_TEMPLATE.md +42 -0
  325. package/bundles/nextjs-trpc/.github/agents/lattice-feature-agent.agent.md +7 -0
  326. package/bundles/nextjs-trpc/.github/agents/lattice-release-manager.agent.md +7 -0
  327. package/bundles/nextjs-trpc/.github/copilot-instructions.md +37 -0
  328. package/bundles/nextjs-trpc/.github/instructions/lattice-core.instructions.md +11 -0
  329. package/bundles/nextjs-trpc/.github/workflows/ci.yml +26 -0
  330. package/bundles/nextjs-trpc/.gitmessage +24 -0
  331. package/bundles/nextjs-trpc/.lattice/config.json +9 -0
  332. package/bundles/nextjs-trpc/.lattice/dependency-security.json +46 -0
  333. package/bundles/nextjs-trpc/.lattice/prompts/01-feature.md +36 -0
  334. package/bundles/nextjs-trpc/.lattice/prompts/02-bugfix.md +32 -0
  335. package/bundles/nextjs-trpc/.lattice/prompts/03-refactor.md +30 -0
  336. package/bundles/nextjs-trpc/.lattice/prompts/04-test.md +31 -0
  337. package/bundles/nextjs-trpc/.lattice/prompts/05-polish.md +38 -0
  338. package/bundles/nextjs-trpc/.lattice/prompts/06-security.md +32 -0
  339. package/bundles/nextjs-trpc/.lattice/release-workflow.json +55 -0
  340. package/bundles/nextjs-trpc/.lattice/schemas/feature-handoff.schema.json +264 -0
  341. package/bundles/nextjs-trpc/.lattice/templates/feature-handoff.json +52 -0
  342. package/bundles/nextjs-trpc/.mcp.json +35 -0
  343. package/bundles/nextjs-trpc/AGENTS.md +58 -0
  344. package/bundles/nextjs-trpc/CLAUDE.md +76 -0
  345. package/bundles/nextjs-trpc/PROJECT_GUIDE.md +187 -0
  346. package/bundles/nextjs-trpc/README.md +49 -0
  347. package/bundles/nextjs-trpc/app/api/trpc/[trpc]/route.ts +12 -0
  348. package/bundles/nextjs-trpc/app/global-error.tsx +17 -0
  349. package/bundles/nextjs-trpc/app/globals.css +55 -0
  350. package/bundles/nextjs-trpc/app/layout.tsx +19 -0
  351. package/bundles/nextjs-trpc/app/page.tsx +16 -0
  352. package/bundles/nextjs-trpc/app/providers.tsx +24 -0
  353. package/bundles/nextjs-trpc/components/ui/button.tsx +39 -0
  354. package/bundles/nextjs-trpc/components/ui/card.tsx +53 -0
  355. package/bundles/nextjs-trpc/components/ui/index.ts +4 -0
  356. package/bundles/nextjs-trpc/components/ui/input.tsx +23 -0
  357. package/bundles/nextjs-trpc/components/ui/spinner.tsx +22 -0
  358. package/bundles/nextjs-trpc/components/user-list.tsx +17 -0
  359. package/bundles/nextjs-trpc/docs/LATTICE_RELEASE_WORKFLOW.md +53 -0
  360. package/bundles/nextjs-trpc/docs/rules/codex.md +62 -0
  361. package/bundles/nextjs-trpc/eslint.config.mjs +16 -0
  362. package/bundles/nextjs-trpc/instrumentation-client.ts +20 -0
  363. package/bundles/nextjs-trpc/instrumentation.ts +12 -0
  364. package/bundles/nextjs-trpc/jest.config.mjs +16 -0
  365. package/bundles/nextjs-trpc/jest.setup.js +1 -0
  366. package/bundles/nextjs-trpc/lib/db.ts +17 -0
  367. package/bundles/nextjs-trpc/lib/trpc/react.tsx +7 -0
  368. package/bundles/nextjs-trpc/lib/utils.ts +6 -0
  369. package/bundles/nextjs-trpc/next-env.d.ts +5 -0
  370. package/bundles/nextjs-trpc/next.config.ts +15 -0
  371. package/bundles/nextjs-trpc/package.json +62 -0
  372. package/bundles/nextjs-trpc/postcss.config.mjs +7 -0
  373. package/bundles/nextjs-trpc/prisma/schema.prisma +41 -0
  374. package/bundles/nextjs-trpc/prisma.config.ts +10 -0
  375. package/bundles/nextjs-trpc/prompts/01-feature-implementation.md +9 -0
  376. package/bundles/nextjs-trpc/prompts/02-bug-fix.md +9 -0
  377. package/bundles/nextjs-trpc/prompts/03-safe-refactor.md +8 -0
  378. package/bundles/nextjs-trpc/prompts/04-test-first.md +8 -0
  379. package/bundles/nextjs-trpc/prompts/05-ui-polish.md +7 -0
  380. package/bundles/nextjs-trpc/prompts/06-security-review.md +7 -0
  381. package/bundles/nextjs-trpc/prompts/quality.md +269 -0
  382. package/bundles/nextjs-trpc/sentry.edge.config.ts +15 -0
  383. package/bundles/nextjs-trpc/sentry.server.config.ts +15 -0
  384. package/bundles/nextjs-trpc/server/routers/_app.test.ts +60 -0
  385. package/bundles/nextjs-trpc/server/routers/_app.ts +25 -0
  386. package/bundles/nextjs-trpc/server/trpc.ts +12 -0
  387. package/bundles/nextjs-trpc/tsconfig.json +42 -0
  388. package/bundles/nextjs-trpc/vendor/m2ai-braces-3.0.3-m2ai.1.tar +0 -0
  389. package/dist/agent-install-session.d.ts +17 -0
  390. package/dist/agent-install-session.d.ts.map +1 -0
  391. package/dist/agent-install-session.js +106 -0
  392. package/dist/agent-install-session.js.map +1 -0
  393. package/dist/agent-install-session.test.d.ts +2 -0
  394. package/dist/agent-install-session.test.d.ts.map +1 -0
  395. package/dist/agent-install-session.test.js +62 -0
  396. package/dist/agent-install-session.test.js.map +1 -0
  397. package/dist/agent-install.d.ts +41 -0
  398. package/dist/agent-install.d.ts.map +1 -0
  399. package/dist/agent-install.js +42 -0
  400. package/dist/agent-install.js.map +1 -0
  401. package/dist/agent-install.test.d.ts +2 -0
  402. package/dist/agent-install.test.d.ts.map +1 -0
  403. package/dist/agent-install.test.js +58 -0
  404. package/dist/agent-install.test.js.map +1 -0
  405. package/dist/apply-merge.test.d.ts +2 -0
  406. package/dist/apply-merge.test.d.ts.map +1 -0
  407. package/dist/apply-merge.test.js +123 -0
  408. package/dist/apply-merge.test.js.map +1 -0
  409. package/dist/bundle-download.d.ts +23 -0
  410. package/dist/bundle-download.d.ts.map +1 -0
  411. package/dist/bundle-download.js +180 -0
  412. package/dist/bundle-download.js.map +1 -0
  413. package/dist/bundle-download.test.d.ts +2 -0
  414. package/dist/bundle-download.test.d.ts.map +1 -0
  415. package/dist/bundle-download.test.js +200 -0
  416. package/dist/bundle-download.test.js.map +1 -0
  417. package/dist/bundle-rollback.test.d.ts +2 -0
  418. package/dist/bundle-rollback.test.d.ts.map +1 -0
  419. package/dist/bundle-rollback.test.js +127 -0
  420. package/dist/bundle-rollback.test.js.map +1 -0
  421. package/dist/bundle-scaffold.test.d.ts +2 -0
  422. package/dist/bundle-scaffold.test.d.ts.map +1 -0
  423. package/dist/bundle-scaffold.test.js +105 -0
  424. package/dist/bundle-scaffold.test.js.map +1 -0
  425. package/dist/commands.d.ts +132 -0
  426. package/dist/commands.d.ts.map +1 -0
  427. package/dist/commands.js +2012 -0
  428. package/dist/commands.js.map +1 -0
  429. package/dist/credential-store.d.ts +27 -0
  430. package/dist/credential-store.d.ts.map +1 -0
  431. package/dist/credential-store.js +48 -0
  432. package/dist/credential-store.js.map +1 -0
  433. package/dist/credential-store.test.d.ts +2 -0
  434. package/dist/credential-store.test.d.ts.map +1 -0
  435. package/dist/credential-store.test.js +80 -0
  436. package/dist/credential-store.test.js.map +1 -0
  437. package/dist/delivered-project-files.d.ts +31 -0
  438. package/dist/delivered-project-files.d.ts.map +1 -0
  439. package/dist/delivered-project-files.js +158 -0
  440. package/dist/delivered-project-files.js.map +1 -0
  441. package/dist/delivered-project-files.test.d.ts +2 -0
  442. package/dist/delivered-project-files.test.d.ts.map +1 -0
  443. package/dist/delivered-project-files.test.js +107 -0
  444. package/dist/delivered-project-files.test.js.map +1 -0
  445. package/dist/doctor-agents.test.d.ts +2 -0
  446. package/dist/doctor-agents.test.d.ts.map +1 -0
  447. package/dist/doctor-agents.test.js +65 -0
  448. package/dist/doctor-agents.test.js.map +1 -0
  449. package/dist/hermes-install.d.ts +102 -0
  450. package/dist/hermes-install.d.ts.map +1 -0
  451. package/dist/hermes-install.js +641 -0
  452. package/dist/hermes-install.js.map +1 -0
  453. package/dist/hermes-install.test.d.ts +2 -0
  454. package/dist/hermes-install.test.d.ts.map +1 -0
  455. package/dist/hermes-install.test.js +866 -0
  456. package/dist/hermes-install.test.js.map +1 -0
  457. package/dist/index.d.ts +115 -0
  458. package/dist/index.d.ts.map +1 -0
  459. package/dist/index.js +5311 -0
  460. package/dist/index.js.map +1 -0
  461. package/dist/openclaw-install.d.ts +67 -0
  462. package/dist/openclaw-install.d.ts.map +1 -0
  463. package/dist/openclaw-install.js +358 -0
  464. package/dist/openclaw-install.js.map +1 -0
  465. package/dist/openclaw-install.test.d.ts +2 -0
  466. package/dist/openclaw-install.test.d.ts.map +1 -0
  467. package/dist/openclaw-install.test.js +296 -0
  468. package/dist/openclaw-install.test.js.map +1 -0
  469. package/dist/password-recovery-bundle.test.d.ts +2 -0
  470. package/dist/password-recovery-bundle.test.d.ts.map +1 -0
  471. package/dist/password-recovery-bundle.test.js +132 -0
  472. package/dist/password-recovery-bundle.test.js.map +1 -0
  473. package/dist/project-bundle-env.d.ts +19 -0
  474. package/dist/project-bundle-env.d.ts.map +1 -0
  475. package/dist/project-bundle-env.js +111 -0
  476. package/dist/project-bundle-env.js.map +1 -0
  477. package/dist/project-bundle-env.test.d.ts +2 -0
  478. package/dist/project-bundle-env.test.d.ts.map +1 -0
  479. package/dist/project-bundle-env.test.js +93 -0
  480. package/dist/project-bundle-env.test.js.map +1 -0
  481. package/dist/project-path-confinement.test.d.ts +2 -0
  482. package/dist/project-path-confinement.test.d.ts.map +1 -0
  483. package/dist/project-path-confinement.test.js +222 -0
  484. package/dist/project-path-confinement.test.js.map +1 -0
  485. package/dist/security/api.d.ts +18 -0
  486. package/dist/security/api.d.ts.map +1 -0
  487. package/dist/security/api.js +238 -0
  488. package/dist/security/api.js.map +1 -0
  489. package/dist/security/api.test.d.ts +2 -0
  490. package/dist/security/api.test.d.ts.map +1 -0
  491. package/dist/security/api.test.js +220 -0
  492. package/dist/security/api.test.js.map +1 -0
  493. package/dist/security/artifact.d.ts +10 -0
  494. package/dist/security/artifact.d.ts.map +1 -0
  495. package/dist/security/artifact.js +283 -0
  496. package/dist/security/artifact.js.map +1 -0
  497. package/dist/security/artifact.test.d.ts +2 -0
  498. package/dist/security/artifact.test.d.ts.map +1 -0
  499. package/dist/security/artifact.test.js +229 -0
  500. package/dist/security/artifact.test.js.map +1 -0
  501. package/dist/security/commands.d.ts +42 -0
  502. package/dist/security/commands.d.ts.map +1 -0
  503. package/dist/security/commands.js +825 -0
  504. package/dist/security/commands.js.map +1 -0
  505. package/dist/security/commands.test.d.ts +2 -0
  506. package/dist/security/commands.test.d.ts.map +1 -0
  507. package/dist/security/commands.test.js +1051 -0
  508. package/dist/security/commands.test.js.map +1 -0
  509. package/dist/security/connection.d.ts +19 -0
  510. package/dist/security/connection.d.ts.map +1 -0
  511. package/dist/security/connection.js +145 -0
  512. package/dist/security/connection.js.map +1 -0
  513. package/dist/security/connection.test.d.ts +2 -0
  514. package/dist/security/connection.test.d.ts.map +1 -0
  515. package/dist/security/connection.test.js +62 -0
  516. package/dist/security/connection.test.js.map +1 -0
  517. package/dist/security/index-routing.test.d.ts +2 -0
  518. package/dist/security/index-routing.test.d.ts.map +1 -0
  519. package/dist/security/index-routing.test.js +169 -0
  520. package/dist/security/index-routing.test.js.map +1 -0
  521. package/dist/security/journal.d.ts +26 -0
  522. package/dist/security/journal.d.ts.map +1 -0
  523. package/dist/security/journal.js +441 -0
  524. package/dist/security/journal.js.map +1 -0
  525. package/dist/security/journal.test.d.ts +2 -0
  526. package/dist/security/journal.test.d.ts.map +1 -0
  527. package/dist/security/journal.test.js +226 -0
  528. package/dist/security/journal.test.js.map +1 -0
  529. package/dist/security/package-verifier.d.ts +15 -0
  530. package/dist/security/package-verifier.d.ts.map +1 -0
  531. package/dist/security/package-verifier.js +65 -0
  532. package/dist/security/package-verifier.js.map +1 -0
  533. package/dist/security/package-verifier.test.d.ts +2 -0
  534. package/dist/security/package-verifier.test.d.ts.map +1 -0
  535. package/dist/security/package-verifier.test.js +57 -0
  536. package/dist/security/package-verifier.test.js.map +1 -0
  537. package/dist/security/runtime.d.ts +43 -0
  538. package/dist/security/runtime.d.ts.map +1 -0
  539. package/dist/security/runtime.js +81 -0
  540. package/dist/security/runtime.js.map +1 -0
  541. package/dist/security/runtime.test.d.ts +2 -0
  542. package/dist/security/runtime.test.d.ts.map +1 -0
  543. package/dist/security/runtime.test.js +88 -0
  544. package/dist/security/runtime.test.js.map +1 -0
  545. package/dist/security/types.d.ts +169 -0
  546. package/dist/security/types.d.ts.map +1 -0
  547. package/dist/security/types.js +3 -0
  548. package/dist/security/types.js.map +1 -0
  549. package/dist/security-runtime/LICENSE +202 -0
  550. package/dist/security-runtime/NOTICE +16 -0
  551. package/dist/security-runtime/artifact-manifest.json +960 -0
  552. package/dist/security-runtime/bin/vsg.mjs +5 -0
  553. package/dist/security-runtime/lattice-catalog.json +176585 -0
  554. package/dist/security-runtime/lattice-runtime.mjs +90 -0
  555. package/dist/security-runtime/licensing/candidates/apache-source-license-evidence.json +478 -0
  556. package/dist/security-runtime/licensing/candidates/betterleaks-generic-api-key.json +76 -0
  557. package/dist/security-runtime/licensing/candidates/betterleaks-jwt.json +74 -0
  558. package/dist/security-runtime/licensing/candidates/blackberry-additional-source-declaration-evidence.json +276 -0
  559. package/dist/security-runtime/licensing/candidates/blackberry-source-declaration-evidence.json +369 -0
  560. package/dist/security-runtime/licensing/candidates/cado-source-declaration-evidence.json +283 -0
  561. package/dist/security-runtime/licensing/candidates/commercial-rule-candidate.json +280 -0
  562. package/dist/security-runtime/licensing/candidates/commercial-runtime-release.json +389 -0
  563. package/dist/security-runtime/licensing/candidates/data-feed-evidence.json +259 -0
  564. package/dist/security-runtime/licensing/candidates/gitlab-sast-rule-identities.json +178 -0
  565. package/dist/security-runtime/licensing/candidates/gitlab-sast-source-evidence.json +1824 -0
  566. package/dist/security-runtime/licensing/candidates/gitlab-sast-source-notice-bundle.json +45 -0
  567. package/dist/security-runtime/licensing/candidates/malpedia-source-license-evidence.json +41 -0
  568. package/dist/security-runtime/licensing/candidates/rule-license-evidence.json +376 -0
  569. package/dist/security-runtime/licensing/candidates/runner-image-composition.json +1500 -0
  570. package/dist/security-runtime/licensing/candidates/selected-runtime-coverage.json +91 -0
  571. package/dist/security-runtime/licensing/candidates/yara-forge-20260927.json +58502 -0
  572. package/dist/security-runtime/licensing/commercial-components.json +379 -0
  573. package/dist/security-runtime/licensing/notices/betterleaks-1.9.0-MIT.txt +21 -0
  574. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/28a9529c7d0bb4dc51f4bf5c116a3d16ef247a052f7591466768ddf563fd1cf5.txt +428 -0
  575. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/33acf42afdd03163d75fe856cb431e70710e0b5deede3362e6d1c4697cfe1c6a.txt +28 -0
  576. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986.txt +674 -0
  577. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/4fecb8fcaf80fd9a6315bca5225ee43377015b46a0459c2925495be885cab19a.txt +21 -0
  578. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/811515f8723aa4007de2fbb75a364127fdec51cda534b87a7ea8f2fef2f96dd7.txt +24 -0
  579. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/814442c3987a2c0411171ad8ad43118e8c08f85c9c5d1dcdecc9787c7ca8689b.txt +664 -0
  580. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/8a959b2413d0c83ca1b3ce9153076c649abf2e4bbfebbb493fb24c2074a1eb8a.txt +38 -0
  581. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/995182e185856186fbbe49f150409ae026aa4cda7e94f83c6ed737cbb77fa9c7.txt +23 -0
  582. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/9b8e1305e46d1dd4011b6ed933c9f6223e08c9c4625001c5fd75a34fa930f616.txt +202 -0
  583. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/a01f1a28424bfe7f49a23d339a01847cfa9ace3864d5e7295051772a4bae2271.txt +38 -0
  584. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/a5681bf9b05db14d86776930017c647ad9e6e56ff6bbcfdf21e5848288dfaf1b.txt +165 -0
  585. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/a5b8bd9ae96c630bbf229d61c5c5def20274e00be39abfd2fab4d7879ceab462.txt +24 -0
  586. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/ada32b3747ce108d5e8bab7918af94abbd03f2fe2a46304f74c6333bbfd914ed.txt +8 -0
  587. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4.txt +201 -0
  588. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/c738ae413cf561f174e34f6961f8ca458aae2369a73640dda6234c629b98bcc4.txt +2732 -0
  589. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/ce41c9a2c986277f7f9ab146a2195c1888a5d8da062e22d7c9c88666bb7c38cd.txt +17 -0
  590. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/d5f4c36a0528e01cfdd9e4fc60879201d3af49b41c520200643d321fe53da5f9.txt +17 -0
  591. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/e08c368ccd455f85c7fb9e04830e730f26e9dbb5c0f77bc88e09a5b0cb37df5b.txt +38 -0
  592. package/dist/security-runtime/licensing/notices/candidate-sources/sha256/e9efb2f7daf11bb6379c06c16b870dddcecc4a10f8704bb8aad807529c8b3c97.txt +8 -0
  593. package/dist/security-runtime/licensing/notices/gitleaks-generic-origin-782f3104-MIT.txt +21 -0
  594. package/dist/security-runtime/package.json +17 -0
  595. package/dist/security-runtime/playbook/README.md +76 -0
  596. package/dist/security-runtime/playbook/access-control.md +56 -0
  597. package/dist/security-runtime/playbook/ai-features.md +53 -0
  598. package/dist/security-runtime/playbook/desktop-python.md +59 -0
  599. package/dist/security-runtime/playbook/input-handling.md +59 -0
  600. package/dist/security-runtime/playbook/mobile-expo.md +59 -0
  601. package/dist/security-runtime/playbook/payments.md +53 -0
  602. package/dist/security-runtime/playbook/privacy-account-recovery.md +59 -0
  603. package/dist/security-runtime/playbook/secrets-config.md +47 -0
  604. package/dist/security-runtime/playbook/supabase.md +48 -0
  605. package/dist/security-runtime/playbook/supply-chain.md +62 -0
  606. package/dist/security-runtime/playbook/webhooks-integrations.md +52 -0
  607. package/dist/security-runtime/rules/vsg-ai-key-in-client.yaml +41 -0
  608. package/dist/security-runtime/rules/vsg-ai-output-raw-html.yaml +35 -0
  609. package/dist/security-runtime/rules/vsg-angular-sanitizer-bypass.yaml +23 -0
  610. package/dist/security-runtime/rules/vsg-expo-token-in-asyncstorage.yaml +22 -0
  611. package/dist/security-runtime/rules/vsg-flask-public-bind.yaml +32 -0
  612. package/dist/security-runtime/rules/vsg-nextjs-action-write-no-auth.yaml +144 -0
  613. package/dist/security-runtime/rules/vsg-nextjs-inline-action-write-no-auth.yaml +161 -0
  614. package/dist/security-runtime/rules/vsg-nextjs-route-write-no-auth.yaml +193 -0
  615. package/dist/security-runtime/rules/vsg-nosql-where-injection.yaml +36 -0
  616. package/dist/security-runtime/rules/vsg-python-pickle-load.yaml +26 -0
  617. package/dist/security-runtime/rules/vsg-python-requests-verify-false.yaml +34 -0
  618. package/dist/security-runtime/rules/vsg-python-subprocess-shell.yaml +23 -0
  619. package/dist/security-runtime/rules/vsg-stripe-client-price.yaml +51 -0
  620. package/dist/security-runtime/rules/vsg-stripe-webhook-no-signature.yaml +31 -0
  621. package/dist/security-runtime/rules/vsg-stripe-webhook-pages-no-signature.yaml +51 -0
  622. package/dist/security-runtime/rules/vsg-supabase-service-role-in-client.yaml +27 -0
  623. package/dist/security-runtime/rules/vsg-supabase-service-role-public-env.yaml +24 -0
  624. package/dist/security-runtime/rules/vsg-xml-external-entities.yaml +19 -0
  625. package/dist/security-runtime/src/agent/brief.mjs +95 -0
  626. package/dist/security-runtime/src/agent/discover.mjs +108 -0
  627. package/dist/security-runtime/src/agent/exec.mjs +64 -0
  628. package/dist/security-runtime/src/agent/ingest.mjs +213 -0
  629. package/dist/security-runtime/src/agent/report.mjs +94 -0
  630. package/dist/security-runtime/src/agent/schema.mjs +62 -0
  631. package/dist/security-runtime/src/agent/tokenize.mjs +38 -0
  632. package/dist/security-runtime/src/checks/README.md +8 -0
  633. package/dist/security-runtime/src/checks/_lib/gitfiles.mjs +35 -0
  634. package/dist/security-runtime/src/checks/_lib/lockfiles.mjs +135 -0
  635. package/dist/security-runtime/src/checks/_lib/osv.mjs +6 -0
  636. package/dist/security-runtime/src/checks/_lib/secrets.mjs +381 -0
  637. package/dist/security-runtime/src/checks/_lib/targets.mjs +79 -0
  638. package/dist/security-runtime/src/checks/agent-review/index.mjs +52 -0
  639. package/dist/security-runtime/src/checks/agent-surface/config.mjs +223 -0
  640. package/dist/security-runtime/src/checks/agent-surface/index.mjs +113 -0
  641. package/dist/security-runtime/src/checks/agent-surface/instructions.mjs +87 -0
  642. package/dist/security-runtime/src/checks/agent-surface/patterns.mjs +68 -0
  643. package/dist/security-runtime/src/checks/agent-surface/unicode.mjs +88 -0
  644. package/dist/security-runtime/src/checks/code/auth-helpers.mjs +659 -0
  645. package/dist/security-runtime/src/checks/code/index.mjs +617 -0
  646. package/dist/security-runtime/src/checks/code/opengrep-container.mjs +85 -0
  647. package/dist/security-runtime/src/checks/code/opengrep-runner.mjs +86 -0
  648. package/dist/security-runtime/src/checks/code/selected-opengrep-runner.mjs +112 -0
  649. package/dist/security-runtime/src/checks/dep-change/guarddog.mjs +142 -0
  650. package/dist/security-runtime/src/checks/dep-change/index.mjs +316 -0
  651. package/dist/security-runtime/src/checks/dep-change/registries.mjs +199 -0
  652. package/dist/security-runtime/src/checks/deps-vuln/index.mjs +305 -0
  653. package/dist/security-runtime/src/checks/desktop-config/index.mjs +112 -0
  654. package/dist/security-runtime/src/checks/dns-mail/index.mjs +71 -0
  655. package/dist/security-runtime/src/checks/iac/index.mjs +83 -0
  656. package/dist/security-runtime/src/checks/install-posture/index.mjs +123 -0
  657. package/dist/security-runtime/src/checks/licenses/index.mjs +143 -0
  658. package/dist/security-runtime/src/checks/live-basic/index.mjs +77 -0
  659. package/dist/security-runtime/src/checks/live-js-secrets/index.mjs +100 -0
  660. package/dist/security-runtime/src/checks/malware/clamav.mjs +17 -0
  661. package/dist/security-runtime/src/checks/malware/defender.mjs +43 -0
  662. package/dist/security-runtime/src/checks/malware/index.mjs +186 -0
  663. package/dist/security-runtime/src/checks/malware/targets.mjs +147 -0
  664. package/dist/security-runtime/src/checks/malware/yara-runner.mjs +201 -0
  665. package/dist/security-runtime/src/checks/malware/yara.mjs +124 -0
  666. package/dist/security-runtime/src/checks/mobile-config/index.mjs +173 -0
  667. package/dist/security-runtime/src/checks/mobile-config/mobsf.mjs +105 -0
  668. package/dist/security-runtime/src/checks/posture/index.mjs +133 -0
  669. package/dist/security-runtime/src/checks/project-scripts/index.mjs +187 -0
  670. package/dist/security-runtime/src/checks/sbom/index.mjs +98 -0
  671. package/dist/security-runtime/src/checks/secrets-build/index.mjs +63 -0
  672. package/dist/security-runtime/src/checks/secrets-history/index.mjs +112 -0
  673. package/dist/security-runtime/src/checks/secrets-tree/env.mjs +120 -0
  674. package/dist/security-runtime/src/checks/secrets-tree/index.mjs +73 -0
  675. package/dist/security-runtime/src/checks/supabase-static/index.mjs +240 -0
  676. package/dist/security-runtime/src/checks/supabase-static/sql.mjs +557 -0
  677. package/dist/security-runtime/src/checks/workflows/index.mjs +93 -0
  678. package/dist/security-runtime/src/cli/deep.mjs +13 -0
  679. package/dist/security-runtime/src/cli/doctor.mjs +82 -0
  680. package/dist/security-runtime/src/cli/index.mjs +60 -0
  681. package/dist/security-runtime/src/cli/live-common.mjs +27 -0
  682. package/dist/security-runtime/src/cli/parse.mjs +56 -0
  683. package/dist/security-runtime/src/cli/portfolio.mjs +34 -0
  684. package/dist/security-runtime/src/cli/release.mjs +28 -0
  685. package/dist/security-runtime/src/cli/report.mjs +18 -0
  686. package/dist/security-runtime/src/cli/run-common.mjs +54 -0
  687. package/dist/security-runtime/src/cli/scan.mjs +12 -0
  688. package/dist/security-runtime/src/cli/setup.mjs +59 -0
  689. package/dist/security-runtime/src/cli/url.mjs +38 -0
  690. package/dist/security-runtime/src/core/accept.mjs +141 -0
  691. package/dist/security-runtime/src/core/archive.mjs +114 -0
  692. package/dist/security-runtime/src/core/base-ref.mjs +43 -0
  693. package/dist/security-runtime/src/core/checks.mjs +39 -0
  694. package/dist/security-runtime/src/core/detect.mjs +90 -0
  695. package/dist/security-runtime/src/core/errors.mjs +5 -0
  696. package/dist/security-runtime/src/core/fetch.mjs +139 -0
  697. package/dist/security-runtime/src/core/findings.mjs +177 -0
  698. package/dist/security-runtime/src/core/gate.mjs +131 -0
  699. package/dist/security-runtime/src/core/installer.mjs +255 -0
  700. package/dist/security-runtime/src/core/lock.mjs +38 -0
  701. package/dist/security-runtime/src/core/nested.mjs +107 -0
  702. package/dist/security-runtime/src/core/paths.mjs +20 -0
  703. package/dist/security-runtime/src/core/pipeline.mjs +196 -0
  704. package/dist/security-runtime/src/core/registry.mjs +81 -0
  705. package/dist/security-runtime/src/core/report.mjs +128 -0
  706. package/dist/security-runtime/src/core/runner.mjs +86 -0
  707. package/dist/security-runtime/src/core/sarif.mjs +141 -0
  708. package/dist/security-runtime/src/lattice/artifact.mjs +1201 -0
  709. package/dist/security-runtime/src/lattice/execution.mjs +45 -0
  710. package/dist/security-runtime/src/lattice/export.mjs +215 -0
  711. package/dist/security-runtime/src/lattice/provenance.mjs +70 -0
  712. package/dist/security-runtime/src/lattice/runtime.mjs +158 -0
  713. package/dist/security-runtime/src/lattice/selected-runtime.mjs +189 -0
  714. package/dist/security-runtime/src/lattice/source-acquirer.mjs +51 -0
  715. package/dist/security-runtime/src/lattice/source-fetcher.mjs +88 -0
  716. package/dist/security-runtime/src/lattice/transport.mjs +232 -0
  717. package/dist/security-runtime/src/live/analyze.mjs +101 -0
  718. package/dist/security-runtime/src/live/exposure.mjs +79 -0
  719. package/dist/security-runtime/src/live/secrets.mjs +31 -0
  720. package/dist/security-runtime/src/live/session.mjs +98 -0
  721. package/dist/security-runtime/src/live/targets.mjs +81 -0
  722. package/dist/security-runtime/src/portfolio/index.mjs +116 -0
  723. package/dist/security-runtime/tools/registry/betterleaks.json +29 -0
  724. package/dist/security-runtime/tools/registry/guarddog.json +9 -0
  725. package/dist/security-runtime/tools/registry/mobsf.json +10 -0
  726. package/dist/security-runtime/tools/registry/opengrep.json +28 -0
  727. package/dist/security-runtime/tools/registry/osv-scanner.json +14 -0
  728. package/dist/security-runtime/tools/registry/semgrep-rules.json +21 -0
  729. package/dist/security-runtime/tools/registry/trivy.json +30 -0
  730. package/dist/security-runtime/tools/registry/yara-forge-exclusions.json +14 -0
  731. package/dist/security-runtime/tools/registry/yara-forge.json +22 -0
  732. package/dist/security-runtime/tools/registry/yara-runner.json +10 -0
  733. package/dist/security-runtime/tools/registry/yara-x.json +24 -0
  734. package/dist/security-runtime/tools/registry/zizmor.json +30 -0
  735. package/dist/spinner.d.ts +16 -0
  736. package/dist/spinner.d.ts.map +1 -0
  737. package/dist/spinner.js +72 -0
  738. package/dist/spinner.js.map +1 -0
  739. package/dist/verify.test.d.ts +2 -0
  740. package/dist/verify.test.d.ts.map +1 -0
  741. package/dist/verify.test.js +98 -0
  742. package/dist/verify.test.js.map +1 -0
  743. package/package.json +73 -4
@@ -0,0 +1,296 @@
1
+ "use strict";
2
+ var __importDefault = (this && this.__importDefault) || function (mod) {
3
+ return (mod && mod.__esModule) ? mod : { "default": mod };
4
+ };
5
+ Object.defineProperty(exports, "__esModule", { value: true });
6
+ const strict_1 = __importDefault(require("node:assert/strict"));
7
+ const node_fs_1 = require("node:fs");
8
+ const node_os_1 = require("node:os");
9
+ const node_path_1 = require("node:path");
10
+ const node_test_1 = __importDefault(require("node:test"));
11
+ const openclaw_install_js_1 = require("./openclaw-install.js");
12
+ function manifest(files = {
13
+ 'SOUL.md': '# New soul',
14
+ 'OPENCLAW_CONFIG_PATCH.json5': '{ agents: {} }',
15
+ }) {
16
+ return {
17
+ schemaVersion: 1,
18
+ project: {
19
+ id: 'project-123',
20
+ shortId: 'abcd1234',
21
+ name: 'Scout',
22
+ createdAt: '2026-07-11T12:00:00.000Z',
23
+ },
24
+ install: {
25
+ productType: 'openclaw',
26
+ openclawVersion: '2026.6.11',
27
+ workspaceFiles: files,
28
+ setupOrder: Object.keys(files),
29
+ configPatchFile: 'OPENCLAW_CONFIG_PATCH.json5',
30
+ selectedChannels: ['telegram'],
31
+ agentName: 'Scout',
32
+ },
33
+ };
34
+ }
35
+ function runtime(homeDir, failLabel) {
36
+ const calls = [];
37
+ const value = {
38
+ homeDir,
39
+ nodeVersion: '24.15.0',
40
+ now: () => new Date('2026-07-11T12:00:00.000Z'),
41
+ log: () => undefined,
42
+ run(command, args) {
43
+ calls.push({ command, args });
44
+ if (command === 'openclaw' && args[0] === '--version')
45
+ return { status: 1 };
46
+ if (failLabel && args.join(' ').includes(failLabel))
47
+ return { status: 1 };
48
+ return { status: 0 };
49
+ },
50
+ };
51
+ return { value, calls };
52
+ }
53
+ (0, node_test_1.default)('dry run reports the plan without changing the filesystem', async () => {
54
+ const home = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-openclaw-dry-'));
55
+ const fake = runtime(home);
56
+ try {
57
+ const receipt = await (0, openclaw_install_js_1.installOpenClaw)(manifest(), { dryRun: true }, fake.value);
58
+ strict_1.default.equal(receipt.dryRun, true);
59
+ strict_1.default.equal(fake.calls.length, 0);
60
+ await strict_1.default.rejects(node_fs_1.promises.access((0, node_path_1.join)(home, '.openclaw')), /ENOENT/);
61
+ }
62
+ finally {
63
+ await node_fs_1.promises.rm(home, { recursive: true, force: true });
64
+ }
65
+ });
66
+ (0, node_test_1.default)('installs, writes the bundle in order, and validates OpenClaw', async () => {
67
+ const home = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-openclaw-ok-'));
68
+ const workspace = (0, node_path_1.join)(home, 'workspace');
69
+ const fake = runtime(home);
70
+ try {
71
+ await node_fs_1.promises.mkdir(workspace, { recursive: true });
72
+ await node_fs_1.promises.writeFile((0, node_path_1.join)(workspace, 'SOUL.md'), '# Old soul');
73
+ const receipt = await (0, openclaw_install_js_1.installOpenClaw)(manifest(), { workspace, skipOnboarding: true }, fake.value);
74
+ strict_1.default.equal(await node_fs_1.promises.readFile((0, node_path_1.join)(workspace, 'SOUL.md'), 'utf8'), '# New soul');
75
+ strict_1.default.ok(receipt.backupDirectory);
76
+ strict_1.default.equal(await node_fs_1.promises.readFile((0, node_path_1.join)(receipt.backupDirectory, 'workspace', 'SOUL.md'), 'utf8'), '# Old soul');
77
+ strict_1.default.ok(fake.calls.some((call) => call.command === 'npm' && call.args.includes('openclaw@2026.6.11')));
78
+ strict_1.default.ok(fake.calls.some((call) => call.args.join(' ') === 'config validate'));
79
+ strict_1.default.ok(fake.calls.some((call) => call.args.join(' ') === 'doctor --fix --yes'));
80
+ strict_1.default.ok(fake.calls.some((call) => call.args.join(' ') === 'gateway status --require-rpc'));
81
+ }
82
+ finally {
83
+ await node_fs_1.promises.rm(home, { recursive: true, force: true });
84
+ }
85
+ });
86
+ (0, node_test_1.default)('keeps an already installed matching pinned OpenClaw release', async () => {
87
+ const home = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-openclaw-existing-'));
88
+ const fake = runtime(home);
89
+ fake.value.run = (command, args) => {
90
+ fake.calls.push({ command, args });
91
+ if (command === 'openclaw' && args[0] === '--version') {
92
+ return { status: 0, stdout: 'OpenClaw 2026.6.11' };
93
+ }
94
+ return { status: 0 };
95
+ };
96
+ try {
97
+ await (0, openclaw_install_js_1.installOpenClaw)(manifest(), { skipOnboarding: true }, fake.value);
98
+ strict_1.default.equal(fake.calls.some((call) => call.command === 'npm'), false);
99
+ }
100
+ finally {
101
+ await node_fs_1.promises.rm(home, { recursive: true, force: true });
102
+ }
103
+ });
104
+ (0, node_test_1.default)('continues to npm acquisition when the initial Windows runtime probe cannot resolve OpenClaw', async () => {
105
+ const home = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-openclaw-missing-runtime-'));
106
+ const fake = runtime(home);
107
+ fake.value.run = (command, args) => {
108
+ fake.calls.push({ command, args });
109
+ if (command === 'openclaw' && args[0] === '--version') {
110
+ throw new Error('OpenClaw JavaScript entry point could not be resolved on Windows.');
111
+ }
112
+ return { status: 0 };
113
+ };
114
+ try {
115
+ await (0, openclaw_install_js_1.installOpenClaw)(manifest(), { skipOnboarding: true }, fake.value);
116
+ strict_1.default.ok(fake.calls.some((call) => call.command === 'npm' && call.args.join(' ') === 'install --global openclaw@2026.6.11'));
117
+ strict_1.default.ok(fake.calls.some((call) => call.args.join(' ') === 'config validate'));
118
+ }
119
+ finally {
120
+ await node_fs_1.promises.rm(home, { recursive: true, force: true });
121
+ }
122
+ });
123
+ (0, node_test_1.default)('restores overwritten and newly created files after a hard failure', async () => {
124
+ const home = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-openclaw-rollback-'));
125
+ const workspace = (0, node_path_1.join)(home, 'workspace');
126
+ const fake = runtime(home, 'config validate');
127
+ try {
128
+ await node_fs_1.promises.mkdir(workspace, { recursive: true });
129
+ await node_fs_1.promises.writeFile((0, node_path_1.join)(workspace, 'SOUL.md'), '# Original');
130
+ await strict_1.default.rejects((0, openclaw_install_js_1.installOpenClaw)(manifest(), { workspace, skipOnboarding: true }, fake.value), /Lattice-owned workspace files and the OpenClaw config were restored.*Runtime installation.*gateway or service changes are not automatically reverted/);
131
+ strict_1.default.equal(await node_fs_1.promises.readFile((0, node_path_1.join)(workspace, 'SOUL.md'), 'utf8'), '# Original');
132
+ await strict_1.default.rejects(node_fs_1.promises.access((0, node_path_1.join)(workspace, 'OPENCLAW_CONFIG_PATCH.json5')), /ENOENT/);
133
+ }
134
+ finally {
135
+ await node_fs_1.promises.rm(home, { recursive: true, force: true });
136
+ }
137
+ });
138
+ (0, node_test_1.default)('rejects unsafe workspace paths and incomplete unattended setup', async () => {
139
+ const home = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-openclaw-invalid-'));
140
+ const fake = runtime(home);
141
+ try {
142
+ await strict_1.default.rejects((0, openclaw_install_js_1.installOpenClaw)(manifest({
143
+ '../escape.md': 'bad',
144
+ 'OPENCLAW_CONFIG_PATCH.json5': '{}',
145
+ }), {}, fake.value), /Unsafe workspace file path/);
146
+ await strict_1.default.rejects((0, openclaw_install_js_1.installOpenClaw)(manifest(), { nonInteractive: true }, fake.value), /requires --accept-risk/);
147
+ await strict_1.default.rejects((0, openclaw_install_js_1.installOpenClaw)({ ...manifest(), project: { ...manifest().project, id: '../escape' } }, {}, fake.value), /invalid project ID/);
148
+ }
149
+ finally {
150
+ await node_fs_1.promises.rm(home, { recursive: true, force: true });
151
+ }
152
+ });
153
+ (0, node_test_1.default)('enforces the Node.js ranges supported by the pinned OpenClaw package', async () => {
154
+ const home = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-openclaw-node-'));
155
+ try {
156
+ for (const version of ['22.22.2', '23.11.0', '24.14.9', '25.8.0']) {
157
+ const fake = runtime(home);
158
+ fake.value.nodeVersion = version;
159
+ await strict_1.default.rejects((0, openclaw_install_js_1.installOpenClaw)(manifest(), { dryRun: true }, fake.value), /requires Node\.js 22\.22\.3\+/);
160
+ }
161
+ for (const version of ['22.22.3', '24.15.0', '25.9.0', '26.0.0']) {
162
+ const fake = runtime(home);
163
+ fake.value.nodeVersion = version;
164
+ await strict_1.default.doesNotReject((0, openclaw_install_js_1.installOpenClaw)(manifest(), { dryRun: true }, fake.value));
165
+ }
166
+ }
167
+ finally {
168
+ await node_fs_1.promises.rm(home, { recursive: true, force: true });
169
+ }
170
+ });
171
+ (0, node_test_1.default)('retries gateway RPC health while the new daemon starts', async () => {
172
+ const home = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-openclaw-gateway-'));
173
+ const fake = runtime(home);
174
+ let gatewayAttempts = 0;
175
+ fake.value.run = (command, args) => {
176
+ fake.calls.push({ command, args });
177
+ if (command === 'openclaw' && args[0] === '--version')
178
+ return { status: 1 };
179
+ if (args.join(' ') === 'gateway status --require-rpc') {
180
+ gatewayAttempts += 1;
181
+ return { status: gatewayAttempts < 3 ? 1 : 0 };
182
+ }
183
+ return { status: 0 };
184
+ };
185
+ fake.value.sleep = async () => undefined;
186
+ try {
187
+ await (0, openclaw_install_js_1.installOpenClaw)(manifest(), { skipOnboarding: true }, fake.value);
188
+ strict_1.default.equal(gatewayAttempts, 3);
189
+ }
190
+ finally {
191
+ await node_fs_1.promises.rm(home, { recursive: true, force: true });
192
+ }
193
+ });
194
+ (0, node_test_1.default)('rejects unsupported Node before any current OpenClaw install or file write', async () => {
195
+ const home = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-openclaw-current-node-'));
196
+ const current = manifest();
197
+ current.install.openclawVersion = '2026.10.4';
198
+ try {
199
+ for (const version of ['22.23.3', '24.15.9', '25.10.0', '26.0.0', '24.16.0-rc.1']) {
200
+ const fake = runtime(home);
201
+ fake.value.nodeVersion = version;
202
+ await strict_1.default.rejects((0, openclaw_install_js_1.installOpenClaw)(current, { dryRun: true }, fake.value), /requires Node\.js 24\.16\+/);
203
+ strict_1.default.equal(fake.calls.length, 0);
204
+ await strict_1.default.rejects(node_fs_1.promises.access((0, node_path_1.join)(home, '.openclaw')), /ENOENT/);
205
+ }
206
+ for (const version of ['24.16.0', '24.22.0', '26.1.0', '26.12.0', '27.0.0']) {
207
+ const fake = runtime(home);
208
+ fake.value.nodeVersion = version;
209
+ await strict_1.default.doesNotReject((0, openclaw_install_js_1.installOpenClaw)(current, { dryRun: true }, fake.value));
210
+ }
211
+ const unpinned = manifest();
212
+ unpinned.install.openclawVersion = null;
213
+ const unsupported = runtime(home);
214
+ unsupported.value.nodeVersion = '22.23.3';
215
+ await strict_1.default.rejects((0, openclaw_install_js_1.installOpenClaw)(unpinned, { dryRun: true }, unsupported.value), /requires Node\.js 24\.16\+/);
216
+ }
217
+ finally {
218
+ await node_fs_1.promises.rm(home, { recursive: true, force: true });
219
+ }
220
+ });
221
+ (0, node_test_1.default)('validates the current runtime without taking exclusive gateway ownership', async () => {
222
+ const home = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-openclaw-current-doctor-'));
223
+ const current = manifest();
224
+ current.install.openclawVersion = '2026.10.4';
225
+ const fake = runtime(home);
226
+ fake.value.nodeVersion = '24.22.0';
227
+ try {
228
+ await (0, openclaw_install_js_1.installOpenClaw)(current, { skipOnboarding: true }, fake.value);
229
+ strict_1.default.ok(fake.calls.some(call => call.args.join(' ') === 'doctor --lint --severity-min error'));
230
+ strict_1.default.equal(fake.calls.some(call => call.args.includes('--fix')), false);
231
+ }
232
+ finally {
233
+ await node_fs_1.promises.rm(home, { recursive: true, force: true });
234
+ }
235
+ });
236
+ (0, node_test_1.default)('resolves the OpenClaw JavaScript bin instead of a Windows npm cmd shim', async () => {
237
+ const root = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-openclaw-command-'));
238
+ const prefix = (0, node_path_1.join)(root, 'npm-prefix');
239
+ const packageRoot = (0, node_path_1.join)(prefix, 'node_modules', 'openclaw');
240
+ const binPath = (0, node_path_1.join)(packageRoot, 'dist', 'index.js');
241
+ try {
242
+ await node_fs_1.promises.mkdir((0, node_path_1.join)(packageRoot, 'dist'), { recursive: true });
243
+ await node_fs_1.promises.writeFile((0, node_path_1.join)(packageRoot, 'package.json'), JSON.stringify({
244
+ name: 'openclaw',
245
+ version: '2026.10.4',
246
+ bin: { openclaw: 'dist/index.js' },
247
+ }));
248
+ await node_fs_1.promises.writeFile(binPath, '#!/usr/bin/env node\n');
249
+ await node_fs_1.promises.writeFile((0, node_path_1.join)(prefix, 'openclaw.cmd'), '@echo off\r\n');
250
+ const invocation = (0, openclaw_install_js_1.resolveOpenClawInvocation)(['config', 'validate'], {
251
+ platform: 'win32',
252
+ execPath: 'C:\\node\\node.exe',
253
+ cwd: root,
254
+ env: { PATH: prefix, NPM_CONFIG_PREFIX: prefix },
255
+ });
256
+ strict_1.default.equal(invocation.command, 'C:\\node\\node.exe');
257
+ strict_1.default.deepEqual(invocation.args, [binPath, 'config', 'validate']);
258
+ strict_1.default.equal(invocation.command.endsWith('.cmd'), false);
259
+ }
260
+ finally {
261
+ await node_fs_1.promises.rm(root, { recursive: true, force: true });
262
+ }
263
+ });
264
+ (0, node_test_1.default)('resolves a project-local OpenClaw package from its node_modules bin directory', async () => {
265
+ const root = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-openclaw-local-command-'));
266
+ const packageRoot = (0, node_path_1.join)(root, 'node_modules', 'openclaw');
267
+ const binPath = (0, node_path_1.join)(packageRoot, 'openclaw.mjs');
268
+ try {
269
+ await node_fs_1.promises.mkdir(packageRoot, { recursive: true });
270
+ await node_fs_1.promises.mkdir((0, node_path_1.join)(root, 'node_modules', '.bin'), { recursive: true });
271
+ await node_fs_1.promises.writeFile((0, node_path_1.join)(packageRoot, 'package.json'), JSON.stringify({
272
+ name: 'openclaw',
273
+ bin: 'openclaw.mjs',
274
+ }));
275
+ await node_fs_1.promises.writeFile(binPath, '#!/usr/bin/env node\n');
276
+ const invocation = (0, openclaw_install_js_1.resolveOpenClawInvocation)(['--version'], {
277
+ platform: 'win32',
278
+ execPath: 'node.exe',
279
+ cwd: root,
280
+ env: { Path: (0, node_path_1.join)(root, 'node_modules', '.bin') },
281
+ });
282
+ strict_1.default.deepEqual(invocation, { command: 'node.exe', args: [binPath, '--version'] });
283
+ }
284
+ finally {
285
+ await node_fs_1.promises.rm(root, { recursive: true, force: true });
286
+ }
287
+ });
288
+ (0, node_test_1.default)('fails closed when Windows has only an unresolvable command shim', () => {
289
+ strict_1.default.throws(() => (0, openclaw_install_js_1.resolveOpenClawInvocation)(['--version'], {
290
+ platform: 'win32',
291
+ execPath: 'node.exe',
292
+ cwd: (0, node_path_1.join)((0, node_os_1.tmpdir)(), 'missing-openclaw-package'),
293
+ env: { PATH: (0, node_path_1.join)((0, node_os_1.tmpdir)(), 'missing-openclaw-prefix') },
294
+ }), /JavaScript entry point could not be resolved on Windows/);
295
+ });
296
+ //# sourceMappingURL=openclaw-install.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"openclaw-install.test.js","sourceRoot":"","sources":["../src/openclaw-install.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,qCAAyC;AACzC,qCAAiC;AACjC,yCAAiC;AACjC,0DAA6B;AAC7B,+DAK+B;AAE/B,SAAS,QAAQ,CAAC,QAAgC;IAChD,SAAS,EAAE,YAAY;IACvB,6BAA6B,EAAE,gBAAgB;CAChD;IACC,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE;YACP,EAAE,EAAE,aAAa;YACjB,OAAO,EAAE,UAAU;YACnB,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,0BAA0B;SACtC;QACD,OAAO,EAAE;YACP,WAAW,EAAE,UAAU;YACvB,eAAe,EAAE,WAAW;YAC5B,cAAc,EAAE,KAAK;YACrB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YAC9B,eAAe,EAAE,6BAA6B;YAC9C,gBAAgB,EAAE,CAAC,UAAU,CAAC;YAC9B,SAAS,EAAE,OAAO;SACnB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,SAAkB;IAClD,MAAM,KAAK,GAA+C,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAqB;QAC9B,OAAO;QACP,WAAW,EAAE,SAAS;QACtB,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC;QAC/C,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS;QACpB,GAAG,CAAC,OAAO,EAAE,IAAI;YACf,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9B,IAAI,OAAO,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW;gBAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YAC5E,IAAI,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YAC1E,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,IAAA,mBAAI,EAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAA,qCAAe,EAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChF,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrE,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;IAC9E,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC;QAE7D,MAAM,OAAO,GAAG,MAAM,IAAA,qCAAe,EAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnG,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;QAClF,gBAAM,CAAC,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACnC,gBAAM,CAAC,KAAK,CACV,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAA,gBAAI,EAAC,OAAO,CAAC,eAAgB,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,EACjF,YAAY,CACb,CAAC;QACF,gBAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACzG,gBAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAC;QAChF,gBAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,oBAAoB,CAAC,CAAC,CAAC;QACnF,gBAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,8BAA8B,CAAC,CAAC,CAAC;IAC/F,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;QACjC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,IAAI,OAAO,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YACtD,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACvB,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAA,qCAAe,EAAC,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;IAC7G,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,mCAAmC,CAAC,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;QACjC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,IAAI,OAAO,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACvB,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAA,qCAAe,EAAC,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,gBAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,qCAAqC,CACxF,CAAC,CAAC;QACH,gBAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAC;IAClF,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC;QAE7D,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,qCAAe,EAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAC5E,sJAAsJ,CACvJ,CAAC;QACF,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;QAClF,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5F,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;IAChF,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,qCAAe,EAAC,QAAQ,CAAC;YACvB,cAAc,EAAE,KAAK;YACrB,6BAA6B,EAAE,IAAI;SACpC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EACnB,4BAA4B,CAC7B,CAAC;QACF,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,qCAAe,EAAC,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EACjE,wBAAwB,CACzB,CAAC;QACF,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,qCAAe,EAAC,EAAE,GAAG,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EACvG,oBAAoB,CACrB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACtF,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC;YACjC,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,qCAAe,EAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EACzD,+BAA+B,CAChC,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC;YACjC,MAAM,gBAAM,CAAC,aAAa,CACxB,IAAA,qCAAe,EAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;IACxE,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;QACjC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,IAAI,OAAO,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC5E,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,8BAA8B,EAAE,CAAC;YACtD,eAAe,IAAI,CAAC,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACvB,CAAC,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;IAEzC,IAAI,CAAC;QACH,MAAM,IAAA,qCAAe,EAAC,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,gBAAM,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IACnC,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;IAC5F,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,gCAAgC,CAAC,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC;IAC3B,OAAO,CAAC,OAAO,CAAC,eAAe,GAAG,WAAW,CAAC;IAC9C,IAAI,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC;YACjC,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qCAAe,EAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,4BAA4B,CAAC,CAAC;YAC3G,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACnC,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC;YACjC,MAAM,gBAAM,CAAC,aAAa,CAAC,IAAA,qCAAe,EAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,EAAE,CAAC;QAC5B,QAAQ,CAAC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;QACxC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,WAAW,CAAC,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;QAC1C,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qCAAe,EAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACrH,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,kCAAkC,CAAC,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC;IAC3B,OAAO,CAAC,OAAO,CAAC,eAAe,GAAG,WAAW,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,IAAA,qCAAe,EAAC,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,gBAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,oCAAoC,CAAC,CAAC,CAAC;QACjG,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,MAAM,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,WAAW,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACnE,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,WAAW;YACpB,GAAG,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE;SACnC,CAAC,CAAC,CAAC;QACJ,MAAM,kBAAE,CAAC,SAAS,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QACrD,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,cAAc,CAAC,EAAE,eAAe,CAAC,CAAC;QAElE,MAAM,UAAU,GAAG,IAAA,+CAAyB,EAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE;YACnE,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,oBAAoB;YAC9B,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE;SACjD,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QACvD,gBAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;QACnE,gBAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;IAC/F,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,iCAAiC,CAAC,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,WAAW,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACnE,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,cAAc;SACpB,CAAC,CAAC,CAAC;QACJ,MAAM,kBAAE,CAAC,SAAS,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAA,+CAAyB,EAAC,CAAC,WAAW,CAAC,EAAE;YAC1D,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,UAAU;YACpB,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,EAAE,IAAI,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE;SAClD,CAAC,CAAC;QACH,gBAAM,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,gBAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,IAAA,+CAAyB,EAAC,CAAC,WAAW,CAAC,EAAE;QAC7C,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,UAAU;QACpB,GAAG,EAAE,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,0BAA0B,CAAC;QAC/C,GAAG,EAAE,EAAE,IAAI,EAAE,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,yBAAyB,CAAC,EAAE;KACzD,CAAC,EACF,yDAAyD,CAC1D,CAAC;AACJ,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=password-recovery-bundle.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"password-recovery-bundle.test.d.ts","sourceRoot":"","sources":["../src/password-recovery-bundle.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,132 @@
1
+ "use strict";
2
+ var __importDefault = (this && this.__importDefault) || function (mod) {
3
+ return (mod && mod.__esModule) ? mod : { "default": mod };
4
+ };
5
+ Object.defineProperty(exports, "__esModule", { value: true });
6
+ const strict_1 = __importDefault(require("node:assert/strict"));
7
+ const node_fs_1 = require("node:fs");
8
+ const node_path_1 = require("node:path");
9
+ const node_test_1 = __importDefault(require("node:test"));
10
+ const node_url_1 = require("node:url");
11
+ const typescript_1 = require("typescript");
12
+ const cliRoot = (0, node_path_1.resolve)(__dirname, '..');
13
+ const canonicalRoot = (0, node_path_1.resolve)(cliRoot, '..', 'bundles', 'nextjs-saas');
14
+ const packagedRoot = (0, node_path_1.join)(cliRoot, 'bundles', 'nextjs-saas');
15
+ const changedPaths = [
16
+ (0, node_path_1.join)('app', '(auth)', 'forgot-password', 'page.tsx'),
17
+ (0, node_path_1.join)('app', '(auth)', 'reset-password', 'page.tsx'),
18
+ (0, node_path_1.join)('app', 'auth', 'callback', 'route.ts'),
19
+ (0, node_path_1.join)('lib', 'auth', 'password-recovery.ts'),
20
+ ];
21
+ async function loadRecoveryModule() {
22
+ const moduleUrl = (0, node_url_1.pathToFileURL)((0, node_path_1.join)(canonicalRoot, 'lib', 'auth', 'password-recovery.ts')).href;
23
+ return await import(moduleUrl);
24
+ }
25
+ (0, node_test_1.default)('canonical and packaged password-recovery files are byte-identical and routes are complete', () => {
26
+ for (const relativePath of changedPaths) {
27
+ const canonicalSource = (0, node_fs_1.readFileSync)((0, node_path_1.join)(canonicalRoot, relativePath), 'utf8');
28
+ strict_1.default.deepEqual(Buffer.from(canonicalSource), (0, node_fs_1.readFileSync)((0, node_path_1.join)(packagedRoot, relativePath)), `${relativePath} drifted between canonical and packaged bundles`);
29
+ const transpiled = (0, typescript_1.transpileModule)(canonicalSource, {
30
+ fileName: relativePath,
31
+ reportDiagnostics: true,
32
+ compilerOptions: { jsx: typescript_1.JsxEmit.ReactJSX, module: typescript_1.ModuleKind.ESNext, target: typescript_1.ScriptTarget.ES2022 },
33
+ });
34
+ strict_1.default.deepEqual(transpiled.diagnostics || [], [], `${relativePath} has TypeScript parse diagnostics`);
35
+ }
36
+ const forgot = (0, node_fs_1.readFileSync)((0, node_path_1.join)(canonicalRoot, 'app', '(auth)', 'forgot-password', 'page.tsx'), 'utf8');
37
+ const callback = (0, node_fs_1.readFileSync)((0, node_path_1.join)(canonicalRoot, 'app', 'auth', 'callback', 'route.ts'), 'utf8');
38
+ const reset = (0, node_fs_1.readFileSync)((0, node_path_1.join)(canonicalRoot, 'app', '(auth)', 'reset-password', 'page.tsx'), 'utf8');
39
+ strict_1.default.match(forgot, /\/auth\/callback\?next=\/reset-password/);
40
+ strict_1.default.match(callback, /resolveAuthCallbackRedirectPath\(code, requestedNext/);
41
+ strict_1.default.match(callback, /exchangeCodeForSession\(authCode\)/);
42
+ strict_1.default.match(reset, /hasValidPasswordRecoverySession/);
43
+ strict_1.default.match(reset, /hasPasswordRecoveryCallbackError\(window\.location\.search\)/);
44
+ strict_1.default.match(reset, /updateRecoveredPassword/);
45
+ strict_1.default.match(reset, /autoComplete="new-password"/);
46
+ });
47
+ (0, node_test_1.default)('recovered password update requires a valid session and matching passwords', async () => {
48
+ const recovery = await loadRecoveryModule();
49
+ const updates = [];
50
+ const auth = {
51
+ async getUser() { return { data: { user: { id: 'fixture-user' } }, error: null }; },
52
+ async updateUser(attributes) {
53
+ updates.push(attributes);
54
+ return { error: null };
55
+ },
56
+ };
57
+ strict_1.default.deepEqual(await recovery.updateRecoveredPassword(auth, 'new-password', 'different-password'), {
58
+ ok: false,
59
+ reason: 'mismatch',
60
+ message: 'Passwords do not match.',
61
+ });
62
+ strict_1.default.equal(updates.length, 0);
63
+ strict_1.default.deepEqual(await recovery.updateRecoveredPassword(auth, 'new-password', 'new-password'), { ok: true });
64
+ strict_1.default.deepEqual(updates, [{ password: 'new-password' }]);
65
+ });
66
+ (0, node_test_1.default)('expired sessions and provider failures return bounded recovery errors', async () => {
67
+ const recovery = await loadRecoveryModule();
68
+ let updateCalled = false;
69
+ const expired = {
70
+ async getUser() { return { data: { user: null }, error: { message: 'expired fixture session' } }; },
71
+ async updateUser() { updateCalled = true; return { error: null }; },
72
+ };
73
+ const invalidResult = await recovery.updateRecoveredPassword(expired, 'new-password', 'new-password');
74
+ strict_1.default.equal(invalidResult.ok, false);
75
+ strict_1.default.equal(invalidResult.reason, 'invalid-session');
76
+ strict_1.default.match(invalidResult.message || '', /invalid or expired/);
77
+ strict_1.default.equal(updateCalled, false);
78
+ const failing = {
79
+ async getUser() { return { data: { user: { id: 'fixture-user' } }, error: null }; },
80
+ async updateUser() { return { error: { message: 'synthetic provider detail' } }; },
81
+ };
82
+ const failureResult = await recovery.updateRecoveredPassword(failing, 'new-password', 'new-password');
83
+ strict_1.default.equal(failureResult.ok, false);
84
+ strict_1.default.equal(failureResult.reason, 'update-failed');
85
+ strict_1.default.doesNotMatch(failureResult.message || '', /synthetic provider detail/);
86
+ });
87
+ (0, node_test_1.default)('recovery callback permits only local redirect paths', async () => {
88
+ const recovery = await loadRecoveryModule();
89
+ strict_1.default.equal(recovery.safeInternalRedirectPath('/reset-password'), '/reset-password');
90
+ strict_1.default.equal(recovery.safeInternalRedirectPath('/reset-password?from=email'), '/reset-password?from=email');
91
+ strict_1.default.equal(recovery.safeInternalRedirectPath('https://evil.example/reset'), '/dashboard');
92
+ strict_1.default.equal(recovery.safeInternalRedirectPath('//evil.example/reset'), '/dashboard');
93
+ strict_1.default.equal(recovery.safeInternalRedirectPath('/\\evil.example/reset'), '/dashboard');
94
+ });
95
+ (0, node_test_1.default)('recovery callback failure is bounded to the exact normalized recovery pathname', async () => {
96
+ const recovery = await loadRecoveryModule();
97
+ strict_1.default.equal(recovery.isPasswordRecoveryRedirectPath('/reset-password'), true);
98
+ strict_1.default.equal(recovery.isPasswordRecoveryRedirectPath('/reset-password?from=email'), true);
99
+ strict_1.default.equal(recovery.isPasswordRecoveryRedirectPath('/reset-password-evil'), false);
100
+ strict_1.default.equal(recovery.isPasswordRecoveryRedirectPath('https://evil.example/reset-password'), false);
101
+ strict_1.default.equal(recovery.authCallbackFailureRedirectPath('/reset-password?from=email'), '/reset-password?recovery_error=1');
102
+ strict_1.default.equal(recovery.authCallbackFailureRedirectPath('/dashboard'), '/login?error=auth_callback_failed');
103
+ strict_1.default.equal(recovery.authCallbackFailureRedirectPath('https://evil.example/reset-password'), '/login?error=auth_callback_failed');
104
+ });
105
+ (0, node_test_1.default)('auth callback resolves missing codes, exchange failures, and successful safe redirects', async () => {
106
+ const recovery = await loadRecoveryModule();
107
+ let exchanges = 0;
108
+ const exchange = async (code) => {
109
+ exchanges += 1;
110
+ return { error: code === 'valid-code' ? null : { message: 'synthetic provider detail' } };
111
+ };
112
+ strict_1.default.equal(await recovery.resolveAuthCallbackRedirectPath(null, '/reset-password', exchange), '/reset-password?recovery_error=1');
113
+ strict_1.default.equal(exchanges, 0, 'missing callback codes must not call the provider');
114
+ strict_1.default.equal(await recovery.resolveAuthCallbackRedirectPath('expired-code', '/reset-password', exchange), '/reset-password?recovery_error=1');
115
+ strict_1.default.equal(await recovery.resolveAuthCallbackRedirectPath('expired-code', '/dashboard', exchange), '/login?error=auth_callback_failed');
116
+ strict_1.default.equal(await recovery.resolveAuthCallbackRedirectPath('valid-code', '/reset-password?from=email', exchange), '/reset-password?from=email');
117
+ strict_1.default.equal(await recovery.resolveAuthCallbackRedirectPath('valid-code', 'https://evil.example/reset-password', exchange), '/dashboard');
118
+ });
119
+ (0, node_test_1.default)('generic recovery callback errors invalidate the reset page before session checks', async () => {
120
+ const recovery = await loadRecoveryModule();
121
+ const resetSource = (0, node_fs_1.readFileSync)((0, node_path_1.join)(canonicalRoot, 'app', '(auth)', 'reset-password', 'page.tsx'), 'utf8');
122
+ const errorCheck = resetSource.indexOf('hasPasswordRecoveryCallbackError(window.location.search)');
123
+ const authClientCreation = resetSource.indexOf('hasValidPasswordRecoverySession(createClient().auth)');
124
+ strict_1.default.equal(recovery.hasPasswordRecoveryCallbackError('?recovery_error=1'), true);
125
+ strict_1.default.equal(recovery.hasPasswordRecoveryCallbackError('?recovery_error=0'), false);
126
+ strict_1.default.equal(recovery.hasPasswordRecoveryCallbackError('?error=otp_expired'), false);
127
+ strict_1.default.ok(errorCheck >= 0, 'reset page must inspect the generic recovery callback flag');
128
+ strict_1.default.match(resetSource, /\? Promise\.resolve\(false\)\s*: hasValidPasswordRecoverySession\(createClient\(\)\.auth\)/);
129
+ strict_1.default.ok(authClientCreation > errorCheck, 'reset page must reject callback errors without creating or checking an auth client');
130
+ strict_1.default.doesNotMatch(resetSource, /if \(hasPasswordRecoveryCallbackError[\s\S]*?setStatus\("invalid"\)/);
131
+ });
132
+ //# sourceMappingURL=password-recovery-bundle.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"password-recovery-bundle.test.js","sourceRoot":"","sources":["../src/password-recovery-bundle.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,qCAAuC;AACvC,yCAA0C;AAC1C,0DAA6B;AAC7B,uCAAyC;AACzC,2CAAgF;AAsBhF,MAAM,OAAO,GAAG,IAAA,mBAAO,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACzC,MAAM,aAAa,GAAG,IAAA,mBAAO,EAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AACvE,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAC7D,MAAM,YAAY,GAAG;IACnB,IAAA,gBAAI,EAAC,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,UAAU,CAAC;IACpD,IAAA,gBAAI,EAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC;IACnD,IAAA,gBAAI,EAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC;IAC3C,IAAA,gBAAI,EAAC,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC;CAC5C,CAAC;AAEF,KAAK,UAAU,kBAAkB;IAC/B,MAAM,SAAS,GAAG,IAAA,wBAAa,EAAC,IAAA,gBAAI,EAAC,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;IACjG,OAAO,MAAM,MAAM,CAAC,SAAS,CAA8B,CAAC;AAC9D,CAAC;AAED,IAAA,mBAAI,EAAC,2FAA2F,EAAE,GAAG,EAAE;IACrG,KAAK,MAAM,YAAY,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,eAAe,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,aAAa,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAChF,gBAAM,CAAC,SAAS,CACd,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAC5B,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,YAAY,EAAE,YAAY,CAAC,CAAC,EAC9C,GAAG,YAAY,iDAAiD,CACjE,CAAC;QACF,MAAM,UAAU,GAAG,IAAA,4BAAe,EAAC,eAAe,EAAE;YAClD,QAAQ,EAAE,YAAY;YACtB,iBAAiB,EAAE,IAAI;YACvB,eAAe,EAAE,EAAE,GAAG,EAAE,oBAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,uBAAU,CAAC,MAAM,EAAE,MAAM,EAAE,yBAAY,CAAC,MAAM,EAAE;SACnG,CAAC,CAAC;QACH,gBAAM,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,YAAY,mCAAmC,CAAC,CAAC;IACzG,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IACzG,MAAM,QAAQ,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IACvG,gBAAM,CAAC,KAAK,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC;IAChE,gBAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,sDAAsD,CAAC,CAAC;IAC/E,gBAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAC;IAC7D,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IACvD,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,8DAA8D,CAAC,CAAC;IACpF,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;IAC/C,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;IAC3F,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG;QACX,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACnF,KAAK,CAAC,UAAU,CAAC,UAAgC;YAC/C,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;KACF,CAAC;IAEF,gBAAM,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,uBAAuB,CAAC,IAAI,EAAE,cAAc,EAAE,oBAAoB,CAAC,EAAE;QACnG,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,yBAAyB;KACnC,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEhC,gBAAM,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,uBAAuB,CAAC,IAAI,EAAE,cAAc,EAAE,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7G,gBAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;IACvF,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC5C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC,CAAC;QACnG,KAAK,CAAC,UAAU,KAAK,YAAY,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;KACpE,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,uBAAuB,CAAC,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IACtG,gBAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACtC,gBAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,gBAAM,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,IAAI,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAChE,gBAAM,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACnF,KAAK,CAAC,UAAU,KAAK,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,CAAC,CAAC,CAAC;KACnF,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,uBAAuB,CAAC,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IACtG,gBAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACtC,gBAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACpD,gBAAM,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,IAAI,EAAE,EAAE,2BAA2B,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;IACrE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC5C,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACtF,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,4BAA4B,CAAC,EAAE,4BAA4B,CAAC,CAAC;IAC5G,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,4BAA4B,CAAC,EAAE,YAAY,CAAC,CAAC;IAC5F,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,YAAY,CAAC,CAAC;IACtF,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,uBAAuB,CAAC,EAAE,YAAY,CAAC,CAAC;AACzF,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAE5C,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,8BAA8B,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/E,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,8BAA8B,CAAC,4BAA4B,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1F,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,8BAA8B,CAAC,sBAAsB,CAAC,EAAE,KAAK,CAAC,CAAC;IACrF,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,8BAA8B,CAAC,qCAAqC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpG,gBAAM,CAAC,KAAK,CACV,QAAQ,CAAC,+BAA+B,CAAC,4BAA4B,CAAC,EACtE,kCAAkC,CACnC,CAAC;IACF,gBAAM,CAAC,KAAK,CACV,QAAQ,CAAC,+BAA+B,CAAC,YAAY,CAAC,EACtD,mCAAmC,CACpC,CAAC;IACF,gBAAM,CAAC,KAAK,CACV,QAAQ,CAAC,+BAA+B,CAAC,qCAAqC,CAAC,EAC/E,mCAAmC,CACpC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;IACxG,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC5C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QACtC,SAAS,IAAI,CAAC,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,CAAC;IAC5F,CAAC,CAAC;IAEF,gBAAM,CAAC,KAAK,CACV,MAAM,QAAQ,CAAC,+BAA+B,CAAC,IAAI,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EACjF,kCAAkC,CACnC,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,mDAAmD,CAAC,CAAC;IAEhF,gBAAM,CAAC,KAAK,CACV,MAAM,QAAQ,CAAC,+BAA+B,CAAC,cAAc,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAC3F,kCAAkC,CACnC,CAAC;IACF,gBAAM,CAAC,KAAK,CACV,MAAM,QAAQ,CAAC,+BAA+B,CAAC,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAC,EACtF,mCAAmC,CACpC,CAAC;IACF,gBAAM,CAAC,KAAK,CACV,MAAM,QAAQ,CAAC,+BAA+B,CAAC,YAAY,EAAE,4BAA4B,EAAE,QAAQ,CAAC,EACpG,4BAA4B,CAC7B,CAAC;IACF,gBAAM,CAAC,KAAK,CACV,MAAM,QAAQ,CAAC,+BAA+B,CAAC,YAAY,EAAE,qCAAqC,EAAE,QAAQ,CAAC,EAC7G,YAAY,CACb,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;IAClG,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7G,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC;IACnG,MAAM,kBAAkB,GAAG,WAAW,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC;IAEvG,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,gCAAgC,CAAC,mBAAmB,CAAC,EAAE,IAAI,CAAC,CAAC;IACnF,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,gCAAgC,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,CAAC;IACpF,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,gCAAgC,CAAC,oBAAoB,CAAC,EAAE,KAAK,CAAC,CAAC;IACrF,gBAAM,CAAC,EAAE,CAAC,UAAU,IAAI,CAAC,EAAE,4DAA4D,CAAC,CAAC;IACzF,gBAAM,CAAC,KAAK,CAAC,WAAW,EAAE,4FAA4F,CAAC,CAAC;IACxH,gBAAM,CAAC,EAAE,CAAC,kBAAkB,GAAG,UAAU,EAAE,oFAAoF,CAAC,CAAC;IACjI,gBAAM,CAAC,YAAY,CAAC,WAAW,EAAE,qEAAqE,CAAC,CAAC;AAC1G,CAAC,CAAC,CAAC"}
@@ -0,0 +1,19 @@
1
+ export interface EnvVariableSpec {
2
+ name: string;
3
+ comment?: string;
4
+ group?: string;
5
+ example?: string;
6
+ }
7
+ export type BundleEnvVariable = string | EnvVariableSpec | {
8
+ key?: unknown;
9
+ description?: unknown;
10
+ defaultValue?: unknown;
11
+ group?: unknown;
12
+ name?: unknown;
13
+ comment?: unknown;
14
+ example?: unknown;
15
+ };
16
+ export declare function normalizeProjectBundleEnvVariables(input: unknown): EnvVariableSpec[];
17
+ export declare function renderEnvExampleFile(specs: EnvVariableSpec[]): string;
18
+ export declare function renderEnvLocalFile(specs: EnvVariableSpec[]): string;
19
+ //# sourceMappingURL=project-bundle-env.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"project-bundle-env.d.ts","sourceRoot":"","sources":["../src/project-bundle-env.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,eAAe,GACf;IACE,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAqEN,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,EAAE,CAsBpF;AA4CD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,MAAM,CAIrE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,MAAM,CASnE"}
@@ -0,0 +1,111 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.normalizeProjectBundleEnvVariables = normalizeProjectBundleEnvVariables;
4
+ exports.renderEnvExampleFile = renderEnvExampleFile;
5
+ exports.renderEnvLocalFile = renderEnvLocalFile;
6
+ function cleanString(value) {
7
+ return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;
8
+ }
9
+ function createEnvVariableSpec(input) {
10
+ const spec = { name: input.name };
11
+ if (input.comment) {
12
+ spec.comment = input.comment;
13
+ }
14
+ if (input.group) {
15
+ spec.group = input.group;
16
+ }
17
+ if (input.example) {
18
+ spec.example = input.example;
19
+ }
20
+ return spec;
21
+ }
22
+ function toEnvVariableSpec(value) {
23
+ if (typeof value === 'string' && value.trim().length > 0) {
24
+ return { name: value.trim() };
25
+ }
26
+ if (!value || typeof value !== 'object') {
27
+ return null;
28
+ }
29
+ const candidate = value;
30
+ const name = cleanString(candidate.name) ?? cleanString(candidate.key);
31
+ if (!name) {
32
+ return null;
33
+ }
34
+ return createEnvVariableSpec({
35
+ name,
36
+ comment: cleanString(candidate.comment) ?? cleanString(candidate.description),
37
+ group: cleanString(candidate.group),
38
+ example: cleanString(candidate.example) ?? cleanString(candidate.defaultValue),
39
+ });
40
+ }
41
+ function trimTrailingBlanks(lines) {
42
+ const trimmed = [...lines];
43
+ while (trimmed.length > 0 && trimmed[trimmed.length - 1] === '') {
44
+ trimmed.pop();
45
+ }
46
+ return trimmed;
47
+ }
48
+ function normalizeProjectBundleEnvVariables(input) {
49
+ if (!Array.isArray(input)) {
50
+ return [];
51
+ }
52
+ const envVariables = new Map();
53
+ for (const value of input) {
54
+ const spec = toEnvVariableSpec(value);
55
+ if (!spec) {
56
+ continue;
57
+ }
58
+ const existing = envVariables.get(spec.name);
59
+ envVariables.set(spec.name, createEnvVariableSpec({
60
+ name: spec.name,
61
+ comment: existing?.comment ?? spec.comment,
62
+ group: existing?.group ?? spec.group,
63
+ example: existing?.example ?? spec.example,
64
+ }));
65
+ }
66
+ return Array.from(envVariables.values());
67
+ }
68
+ function renderEnvFile(specs, options) {
69
+ const normalized = normalizeProjectBundleEnvVariables(specs);
70
+ const lines = [...options.headerLines];
71
+ if (normalized.length === 0) {
72
+ return `${trimTrailingBlanks(lines).join('\n')}\n`;
73
+ }
74
+ let currentGroup;
75
+ normalized.forEach((spec, index) => {
76
+ if (spec.group && spec.group !== currentGroup) {
77
+ if (lines[lines.length - 1] !== '') {
78
+ lines.push('');
79
+ }
80
+ lines.push(`# ${spec.group}`);
81
+ currentGroup = spec.group;
82
+ }
83
+ if (spec.comment) {
84
+ lines.push(`# ${spec.comment}`);
85
+ }
86
+ if (options.blankValues && spec.example) {
87
+ lines.push(`# Example: ${spec.example}`);
88
+ }
89
+ lines.push(`${spec.name}=${options.blankValues ? '' : spec.example ?? ''}`);
90
+ if (index < normalized.length - 1) {
91
+ lines.push('');
92
+ }
93
+ });
94
+ return `${trimTrailingBlanks(lines).join('\n')}\n`;
95
+ }
96
+ function renderEnvExampleFile(specs) {
97
+ return renderEnvFile(specs, {
98
+ headerLines: ['# Environment variables', ''],
99
+ });
100
+ }
101
+ function renderEnvLocalFile(specs) {
102
+ return renderEnvFile(specs, {
103
+ headerLines: [
104
+ '# Copy from .env.example and fill in your values',
105
+ '# DO NOT commit this file to git',
106
+ '',
107
+ ],
108
+ blankValues: true,
109
+ });
110
+ }
111
+ //# sourceMappingURL=project-bundle-env.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"project-bundle-env.js","sourceRoot":"","sources":["../src/project-bundle-env.ts"],"names":[],"mappings":";;AAuFA,gFAsBC;AA4CD,oDAIC;AAED,gDASC;AApJD,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC;AAED,SAAS,qBAAqB,CAAC,KAK9B;IACC,MAAM,IAAI,GAAoB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAEnD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC/B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAwB;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,KAQjB,CAAC;IAEF,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACvE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,qBAAqB,CAAC;QAC3B,IAAI;QACJ,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC;QAC7E,KAAK,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC;QACnC,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC;KAC/E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAe;IACzC,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAChE,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,kCAAkC,CAAC,KAAc;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAA2B,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAA0B,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC;YAChD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO;YAC1C,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK;YACpC,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO;SAC3C,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CACpB,KAAwB,EACxB,OAGC;IAED,MAAM,UAAU,GAAG,kCAAkC,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAEvC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACrD,CAAC;IAED,IAAI,YAAgC,CAAC;IACrC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACjC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9B,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC;QAC5B,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;QAE5E,IAAI,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAwB;IAC3D,OAAO,aAAa,CAAC,KAAK,EAAE;QAC1B,WAAW,EAAE,CAAC,yBAAyB,EAAE,EAAE,CAAC;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAAwB;IACzD,OAAO,aAAa,CAAC,KAAK,EAAE;QAC1B,WAAW,EAAE;YACX,kDAAkD;YAClD,kCAAkC;YAClC,EAAE;SACH;QACD,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;AACL,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=project-bundle-env.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"project-bundle-env.test.d.ts","sourceRoot":"","sources":["../src/project-bundle-env.test.ts"],"names":[],"mappings":""}