llng-mcp 0.1.0

package/dist/__tests__/integration/api-mode.test.js

@@ -0,0 +1,199 @@
+import { describe, it, expect, beforeAll } from "vitest";
+const BASE_URL = process.env.LLNG_TEST_URL || "http://localhost:19876";
+describe("API Transport Integration", () => {
+    let available = false;
+    let sessionCookie = "";
+    async function authenticate() {
+        try {
+            // First, get the login form to extract CSRF token
+            const formResp = await fetch(`${BASE_URL}/`, {
+                headers: {
+                    Host: "auth.example.com",
+                },
+            });
+            if (!formResp.ok) {
+                console.log("Failed to fetch login form:", formResp.status);
+                return null;
+            }
+            const html = await formResp.text();
+            // Extract CSRF token from the form
+            const tokenMatch = html.match(/name="token"\s+value="([^"]+)"/);
+            if (!tokenMatch) {
+                console.log("No CSRF token found in login form");
+                return null;
+            }
+            const token = tokenMatch[1];
+            if (!token) {
+                console.log("CSRF token is empty");
+                return null;
+            }
+            // Authenticate to portal as dwho/dwho (default demo user)
+            const resp = await fetch(`${BASE_URL}/`, {
+                method: "POST",
+                headers: {
+                    Host: "auth.example.com",
+                    "Content-Type": "application/x-www-form-urlencoded",
+                },
+                body: `user=dwho&password=dwho&token=${token}`,
+                redirect: "manual", // Don't follow redirects
+            });
+            // Should get 302 redirect with session cookie
+            if (resp.status !== 302 && resp.status !== 200) {
+                console.log("Auth failed with status:", resp.status);
+                return null;
+            }
+            // Extract lemonldap cookie
+            const setCookie = resp.headers.get("set-cookie");
+            if (!setCookie) {
+                console.log("No set-cookie header received");
+                return null;
+            }
+            const match = setCookie.match(/lemonldap=([^;]+)/);
+            if (!match) {
+                console.log("No lemonldap cookie found in:", setCookie);
+                return null;
+            }
+            return match[1];
+        }
+        catch (e) {
+            console.log("Authentication error:", e instanceof Error ? e.message : String(e));
+            return null;
+        }
+    }
+    beforeAll(async () => {
+        // Check if LLNG portal is available and authenticate
+        try {
+            const resp = await fetch(`${BASE_URL}/`, {
+                headers: {
+                    Host: "auth.example.com",
+                },
+            });
+            if (!resp.ok && resp.status !== 302) {
+                available = false;
+                return;
+            }
+            // Try to authenticate
+            const cookie = await authenticate();
+            if (cookie) {
+                sessionCookie = cookie;
+                available = true;
+            }
+            else {
+                available = false;
+            }
+        }
+        catch {
+            available = false;
+        }
+    });
+    it("should detect LLNG portal availability", () => {
+        if (!available) {
+            console.log("LLNG portal not available or auth failed - skipping API tests");
+        }
+        // Don't fail - just report availability
+    });
+    it("should access portal login page", async () => {
+        if (!available)
+            return;
+        try {
+            const resp = await fetch(`${BASE_URL}/`, {
+                headers: {
+                    Host: "auth.example.com",
+                },
+            });
+            expect(resp.ok).toBe(true);
+            const html = await resp.text();
+            // Should contain login form
+            expect(html).toContain("lemonldap-ng");
+        }
+        catch (e) {
+            console.log("Portal access failed:", e instanceof Error ? e.message : String(e));
+            throw e;
+        }
+    });
+    it("should authenticate as demo user", async () => {
+        if (!available)
+            return;
+        expect(sessionCookie).toBeTruthy();
+        expect(sessionCookie.length).toBeGreaterThan(0);
+    });
+    it("should access manager API with session cookie", async () => {
+        if (!available)
+            return;
+        try {
+            const resp = await fetch(`${BASE_URL}/confs/latest`, {
+                headers: {
+                    Host: "manager.example.com",
+                    Cookie: `lemonldap=${sessionCookie}`,
+                },
+            });
+            // Manager API requires specific group membership (e.g., "timelords" group)
+            // The demo user dwho might not have manager permissions by default
+            if (resp.status === 403) {
+                console.log("Manager API returned 403 - user lacks required permissions (expected for demo user)");
+                return; // Skip test gracefully
+            }
+            if (!resp.ok) {
+                const text = await resp.text();
+                console.log("Manager API response:", resp.status, text);
+                throw new Error(`Manager API returned ${resp.status}`);
+            }
+            const config = await resp.json();
+            // Should have cfgNum
+            expect(config.cfgNum).toBeDefined();
+            const cfgNum = typeof config.cfgNum === "string" ? parseInt(config.cfgNum) : config.cfgNum;
+            expect(cfgNum).toBeGreaterThan(0);
+            // Should have basic config keys
+            expect(config.portal).toBeDefined();
+            expect(config.domain).toBeDefined();
+        }
+        catch (e) {
+            console.log("Manager API access failed:", e instanceof Error ? e.message : String(e));
+            throw e;
+        }
+    });
+    it("should access manager REST API endpoints", async () => {
+        if (!available)
+            return;
+        try {
+            // Test accessing configuration list
+            const resp = await fetch(`${BASE_URL}/confs`, {
+                headers: {
+                    Host: "manager.example.com",
+                    Cookie: `lemonldap=${sessionCookie}`,
+                },
+            });
+            // Manager REST API also requires permissions
+            if (resp.status === 403) {
+                console.log("REST API returned 403 - user lacks required permissions (expected for demo user)");
+                return;
+            }
+            if (!resp.ok) {
+                const text = await resp.text();
+                console.log("REST API response:", resp.status, text);
+                // Don't fail - might not be available in all deployments
+                return;
+            }
+            const data = await resp.json();
+            expect(Array.isArray(data) || typeof data === "object").toBe(true);
+        }
+        catch (e) {
+            console.log("REST API access failed:", e instanceof Error ? e.message : String(e));
+            // Don't fail - REST API might not be enabled
+        }
+    });
+    it("should demonstrate that manager API requires authorization", async () => {
+        if (!available)
+            return;
+        // Document the authorization requirements for the manager API
+        // In a real deployment, you would need:
+        // 1. A user account with manager permissions (e.g., member of "timelords" group)
+        // 2. Proper session cookie after authentication
+        // 3. Correct Host header for the manager vhost
+        //
+        // For testing purposes, SSH transport via docker exec is more reliable
+        // since CLI commands bypass web-based authorization checks
+        console.log('Manager API requires group membership (e.g., inGroup("timelords")) or specific user access');
+    });
+});
+//# sourceMappingURL=api-mode.test.js.map

package/dist/__tests__/integration/api-mode.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-mode.test.js","sourceRoot":"","sources":["../../../src/__tests__/integration/api-mode.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEzD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,wBAAwB,CAAC;AAEvE,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,aAAa,GAAG,EAAE,CAAC;IAEvB,KAAK,UAAU,YAAY;QACzB,IAAI,CAAC;YACH,kDAAkD;YAClD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,EAAE;gBAC3C,OAAO,EAAE;oBACP,IAAI,EAAE,kBAAkB;iBACzB;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5D,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,mCAAmC;YACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAChE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;gBACjD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;gBACnC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,0DAA0D;YAC1D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,IAAI,EAAE,kBAAkB;oBACxB,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,iCAAiC,KAAK,EAAE;gBAC9C,QAAQ,EAAE,QAAQ,EAAE,yBAAyB;aAC9C,CAAC,CAAC;YAEH,8CAA8C;YAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,2BAA2B;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;gBAC7C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACnD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,SAAS,CAAC,CAAC;gBACxD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACjF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,qDAAqD;QACrD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,EAAE;gBACvC,OAAO,EAAE;oBACP,IAAI,EAAE,kBAAkB;iBACzB;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACpC,SAAS,GAAG,KAAK,CAAC;gBAClB,OAAO;YACT,CAAC;YAED,sBAAsB;YACtB,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;YACpC,IAAI,MAAM,EAAE,CAAC;gBACX,aAAa,GAAG,MAAM,CAAC;gBACvB,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAC/E,CAAC;QACD,wCAAwC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,EAAE;gBACvC,OAAO,EAAE;oBACP,IAAI,EAAE,kBAAkB;iBACzB;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAE/B,4BAA4B;YAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACjF,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,eAAe,EAAE;gBACnD,OAAO,EAAE;oBACP,IAAI,EAAE,qBAAqB;oBAC3B,MAAM,EAAE,aAAa,aAAa,EAAE;iBACrC;aACF,CAAC,CAAC;YAEH,2EAA2E;YAC3E,mEAAmE;YACnE,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CACT,qFAAqF,CACtF,CAAC;gBACF,OAAO,CAAC,uBAAuB;YACjC,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAEjC,qBAAqB;YACrB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC3F,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAElC,gCAAgC;YAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACtF,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,IAAI,CAAC;YACH,oCAAoC;YACpC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,QAAQ,EAAE;gBAC5C,OAAO,EAAE;oBACP,IAAI,EAAE,qBAAqB;oBAC3B,MAAM,EAAE,aAAa,aAAa,EAAE;iBACrC;aACF,CAAC,CAAC;YAEH,6CAA6C;YAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CACT,kFAAkF,CACnF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACrD,yDAAyD;gBACzD,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACnF,6CAA6C;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,8DAA8D;QAC9D,wCAAwC;QACxC,iFAAiF;QACjF,gDAAgD;QAChD,+CAA+C;QAC/C,EAAE;QACF,uEAAuE;QACvE,2DAA2D;QAC3D,OAAO,CAAC,GAAG,CACT,4FAA4F,CAC7F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/integration/oidc-rp.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/integration/oidc-rp.test.js

@@ -0,0 +1,120 @@
+import { describe, it, expect, beforeAll, afterAll } from "vitest";
+import { execSync } from "child_process";
+describe("OIDC RP Integration (via docker exec)", () => {
+    let available = false;
+    let containerName = "";
+    function dockerExec(cmd) {
+        return execSync(`docker exec ${containerName} ${cmd}`, {
+            encoding: "utf-8",
+            stdio: ["pipe", "pipe", "ignore"], // capture stdout, ignore stderr
+        }).trim();
+    }
+    function dockerBash(script) {
+        return dockerExec(`bash -c '${script.replace(/'/g, "'\\''")}'`);
+    }
+    beforeAll(async () => {
+        // Detect container name dynamically
+        try {
+            const output = execSync(`docker ps --filter ancestor=yadd/lemonldap-ng-full --format '{{.Names}}'`, { encoding: "utf-8" });
+            const name = output.trim().split("\n")[0];
+            if (name) {
+                containerName = name;
+                available = true;
+            }
+        }
+        catch {
+            available = false;
+        }
+        if (!available)
+            return;
+        // Set up OIDC RP configuration
+        try {
+            // Add hosts entry for auth.example.com
+            dockerBash("echo '127.0.0.1 auth.example.com' >> /etc/hosts");
+            // Enable OIDC issuer
+            dockerBash("lemonldap-ng-cli -yes 1 set issuerDBOpenIDConnectActivation 1 2>/dev/null");
+            // Generate signing keys
+            dockerBash("/usr/share/lemonldap-ng/bin/rotateOidcKeys 2>/dev/null");
+            // Create RP via CLI merge
+            const rpConfig = JSON.stringify({
+                oidcRPMetaDataOptions: {
+                    "integ-test-rp": {
+                        oidcRPMetaDataOptionsClientID: "integ-test-client",
+                        oidcRPMetaDataOptionsRedirectUris: "http://localhost/callback",
+                        oidcRPMetaDataOptionsPublic: 1,
+                        oidcRPMetaDataOptionsBypassConsent: 1,
+                        oidcRPMetaDataOptionsIDTokenSignAlg: "RS256",
+                    },
+                },
+                oidcRPMetaDataExportedVars: {
+                    "integ-test-rp": {
+                        name: "cn",
+                        preferred_username: "uid",
+                        email: "mail",
+                    },
+                },
+            });
+            dockerBash(`echo '${rpConfig.replace(/'/g, "'\\''")}' | lemonldap-ng-cli -yes 1 merge - 2>/dev/null`);
+        }
+        catch (e) {
+            console.log("OIDC setup failed:", e instanceof Error ? e.message : String(e));
+            available = false;
+        }
+    });
+    afterAll(async () => {
+        if (!available)
+            return;
+        // Cleanup: remove RP configuration
+        try {
+            dockerBash("lemonldap-ng-cli -yes 1 delKey oidcRPMetaDataOptions integ-test-rp 2>/dev/null");
+            dockerBash("lemonldap-ng-cli -yes 1 delKey oidcRPMetaDataExportedVars integ-test-rp 2>/dev/null");
+        }
+        catch (e) {
+            console.log("OIDC cleanup failed:", e instanceof Error ? e.message : String(e));
+        }
+    });
+    it("should detect Docker container availability", () => {
+        if (!available) {
+            console.log("LLNG container not available - skipping integration tests");
+        }
+        // Don't fail - just report availability
+    });
+    it("should add OIDC RP and verify config", async () => {
+        if (!available)
+            return;
+        try {
+            const output = dockerBash("lemonldap-ng-cli -yes 1 get oidcRPMetaDataOptions/integ-test-rp 2>/dev/null");
+            // Verify the RP contains required fields
+            expect(output).toContain("oidcRPMetaDataOptionsClientID");
+            expect(output).toContain("oidcRPMetaDataOptionsIDTokenSignAlg");
+        }
+        catch (e) {
+            console.log("OIDC RP verification failed:", e instanceof Error ? e.message : String(e));
+            throw e;
+        }
+    });
+    it("should complete full OIDC flow via llng CLI", async () => {
+        if (!available)
+            return;
+        try {
+            const flowScript = `
+        rm -f /root/.cache/llng-cookies && mkdir -p /root/.cache && \
+        llng --llng-url http://auth.example.com --login dwho --password dwho \
+          --client-id integ-test-client --pkce --redirect-uri "http://localhost/callback" \
+          user_info
+      `;
+            const output = dockerBash(flowScript);
+            // Parse JSON output and verify user info
+            const userInfo = JSON.parse(output);
+            expect(userInfo.sub).toBe("dwho");
+            expect(userInfo.email).toBe("dwho@badwolf.org");
+            expect(userInfo.name).toBe("Doctor Who");
+            expect(userInfo.preferred_username).toBe("dwho");
+        }
+        catch (e) {
+            console.log("OIDC flow failed:", e instanceof Error ? e.message : String(e));
+            throw e;
+        }
+    });
+});
+//# sourceMappingURL=oidc-rp.test.js.map

package/dist/__tests__/integration/oidc-rp.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-rp.test.js","sourceRoot":"","sources":["../../../src/__tests__/integration/oidc-rp.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,aAAa,GAAG,EAAE,CAAC;IAEvB,SAAS,UAAU,CAAC,GAAW;QAC7B,OAAO,QAAQ,CAAC,eAAe,aAAa,IAAI,GAAG,EAAE,EAAE;YACrD,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,gCAAgC;SACpE,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAED,SAAS,UAAU,CAAC,MAAc;QAChC,OAAO,UAAU,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,oCAAoC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CACrB,0EAA0E,EAC1E,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,IAAI,EAAE,CAAC;gBACT,aAAa,GAAG,IAAI,CAAC;gBACrB,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,+BAA+B;QAC/B,IAAI,CAAC;YACH,uCAAuC;YACvC,UAAU,CAAC,iDAAiD,CAAC,CAAC;YAE9D,qBAAqB;YACrB,UAAU,CAAC,2EAA2E,CAAC,CAAC;YAExF,wBAAwB;YACxB,UAAU,CAAC,wDAAwD,CAAC,CAAC;YAErE,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC9B,qBAAqB,EAAE;oBACrB,eAAe,EAAE;wBACf,6BAA6B,EAAE,mBAAmB;wBAClD,iCAAiC,EAAE,2BAA2B;wBAC9D,2BAA2B,EAAE,CAAC;wBAC9B,kCAAkC,EAAE,CAAC;wBACrC,mCAAmC,EAAE,OAAO;qBAC7C;iBACF;gBACD,0BAA0B,EAAE;oBAC1B,eAAe,EAAE;wBACf,IAAI,EAAE,IAAI;wBACV,kBAAkB,EAAE,KAAK;wBACzB,KAAK,EAAE,MAAM;qBACd;iBACF;aACF,CAAC,CAAC;YACH,UAAU,CACR,SAAS,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,iDAAiD,CAC1F,CAAC;QACJ,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,mCAAmC;QACnC,IAAI,CAAC;YACH,UAAU,CAAC,gFAAgF,CAAC,CAAC;YAC7F,UAAU,CACR,qFAAqF,CACtF,CAAC;QACJ,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QAC3E,CAAC;QACD,wCAAwC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CACvB,6EAA6E,CAC9E,CAAC;YAEF,yCAAyC;YACzC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;YAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACxF,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG;;;;;OAKlB,CAAC;YAEF,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;YAEtC,yCAAyC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAChD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACzC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/integration/ssh-mode.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/integration/ssh-mode.test.js

@@ -0,0 +1,101 @@
+import { describe, it, expect, beforeAll } from "vitest";
+import { execSync } from "child_process";
+describe("SSH Transport Integration (via docker exec)", () => {
+    let available = false;
+    let containerName = "";
+    function dockerExec(cmd) {
+        return execSync(`docker exec ${containerName} ${cmd}`, {
+            encoding: "utf-8",
+            stdio: ["pipe", "pipe", "ignore"], // capture stdout, ignore stderr
+        }).trim();
+    }
+    beforeAll(async () => {
+        // Detect container name dynamically
+        try {
+            const output = execSync(`docker ps --filter ancestor=yadd/lemonldap-ng-full --format '{{.Names}}'`, { encoding: "utf-8" });
+            const name = output.trim().split("\n")[0];
+            if (name) {
+                containerName = name;
+                available = true;
+            }
+        }
+        catch {
+            available = false;
+        }
+    });
+    it("should detect Docker container availability", () => {
+        if (!available) {
+            console.log("LLNG container not available - skipping integration tests");
+        }
+        // Don't fail - just report availability
+    });
+    it("should get config info via info command", async () => {
+        if (!available)
+            return;
+        try {
+            const output = dockerExec("lemonldap-ng-cli info");
+            // Parse text output - expect lines like "Num      : 1"
+            expect(output).toContain("Num");
+            expect(output).toContain("Author");
+            expect(output).toMatch(/Num\s+:\s+\d+/);
+        }
+        catch (e) {
+            console.log("CLI info failed:", e instanceof Error ? e.message : String(e));
+            throw e;
+        }
+    });
+    it("should get config values via get command", async () => {
+        if (!available)
+            return;
+        try {
+            const output = dockerExec("lemonldap-ng-cli get portal domain");
+            // Parse "key = value" lines
+            const lines = output.split("\n");
+            expect(lines.length).toBeGreaterThan(0);
+            // Should contain portal and domain values
+            expect(output).toMatch(/portal\s+=\s+\S+/);
+            expect(output).toMatch(/domain\s+=\s+\S+/);
+        }
+        catch (e) {
+            console.log("CLI get failed:", e instanceof Error ? e.message : String(e));
+            throw e;
+        }
+    });
+    it("should export config via save command", async () => {
+        if (!available)
+            return;
+        try {
+            const output = dockerExec("lemonldap-ng-cli save");
+            // save outputs JSON to stdout
+            const config = JSON.parse(output);
+            expect(config.cfgNum).toBeDefined();
+            // cfgNum might be a string or number
+            const cfgNum = typeof config.cfgNum === "string" ? parseInt(config.cfgNum) : config.cfgNum;
+            expect(cfgNum).toBeGreaterThan(0);
+        }
+        catch (e) {
+            console.log("CLI save failed:", e instanceof Error ? e.message : String(e));
+            throw e;
+        }
+    });
+    it.skip("should set config value via set command (requires interactive confirmation)", () => {
+        // The CLI 'set' command requires interactive confirmation
+        // and does not work non-interactively.
+    });
+    it("should search sessions via lemonldap-ng-sessions", async () => {
+        if (!available)
+            return;
+        try {
+            // lemonldap-ng-sessions search returns JSON array (might be empty)
+            const output = dockerExec("lemonldap-ng-sessions search");
+            // Parse JSON - should be an array
+            const sessions = JSON.parse(output);
+            expect(Array.isArray(sessions)).toBe(true);
+        }
+        catch (e) {
+            console.log("Sessions CLI failed:", e instanceof Error ? e.message : String(e));
+            throw e;
+        }
+    });
+});
+//# sourceMappingURL=ssh-mode.test.js.map

package/dist/__tests__/integration/ssh-mode.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-mode.test.js","sourceRoot":"","sources":["../../../src/__tests__/integration/ssh-mode.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,aAAa,GAAG,EAAE,CAAC;IAEvB,SAAS,UAAU,CAAC,GAAW;QAC7B,OAAO,QAAQ,CAAC,eAAe,aAAa,IAAI,GAAG,EAAE,EAAE;YACrD,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,gCAAgC;SACpE,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAED,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,oCAAoC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CACrB,0EAA0E,EAC1E,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,IAAI,EAAE,CAAC;gBACT,aAAa,GAAG,IAAI,CAAC;gBACrB,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QAC3E,CAAC;QACD,wCAAwC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,uBAAuB,CAAC,CAAC;YAEnD,uDAAuD;YACvD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,oCAAoC,CAAC,CAAC;YAEhE,4BAA4B;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAExC,0CAA0C;YAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3E,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,uBAAuB,CAAC,CAAC;YAEnD,8BAA8B;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YAEpC,qCAAqC;YACrC,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC3F,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,6EAA6E,EAAE,GAAG,EAAE;QAC1F,0DAA0D;QAC1D,uCAAuC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,IAAI,CAAC;YACH,mEAAmE;YACnE,MAAM,MAAM,GAAG,UAAU,CAAC,8BAA8B,CAAC,CAAC;YAE1D,kCAAkC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChF,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/k8s-transport.test.d.ts

@@ -0,0 +1 @@
+export {};