ruflo 3.10.46 → 3.11.0

package/src/ruvocal/.claude-flow/logs/headless/testgaps_1777949771821_elw1j4_result.log

@@ -0,0 +1,100 @@
+[2026-05-05T02:58:33.227Z] RESULT
+============================================================
+{
+  "success": true,
+  "output": "Here is the full coverage gap analysis with test skeletons for each area.\n\n---\n\n## Test Coverage Gap Analysis\n\n### 1. `src/lib/APIClient.ts` — Zero test coverage\n\n**Untested:** `apiCall` (all branches), `handleResponse`, query param serialization, error body parsing fallback chain, ObjectId superjson registration.\n\n```typescript\n// src/lib/APIClient.spec.ts\nimport { describe, it, expect, vi, afterEach } from \"vitest\";\nimport { handleResponse, useAPIClient } from \"./APIClient\";\n\nconst mockFetch = (status: number, body: string | null, ok = status < 400) =>\n  vi.fn().mockResolvedValue({\n    ok,\n    status,\n    text: () => Promise.resolve(body ?? \"\"),\n    json: () => (body ? Promise.resolve(JSON.parse(body)) : Promise.reject(new Error(\"no body\"))),\n    statusText: \"Error\",\n  });\n\ndescribe(\"apiCall — success paths\", () => {\n  it(\"sends GET with no body\", async () => {\n    const fetch = mockFetch(200, '{\"json\":\"body\"}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client[\"public-config\"].get();\n    expect(fetch).toHaveBeenCalledWith(\n      expect.stringContaining(\"/api/v2/public-config\"),\n      expect.objectContaining({ method: \"GET\" })\n    );\n  });\n\n  it(\"attaches query params to GET URL\", async () => {\n    const fetch = mockFetch(200, '{\"x\":1}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client[\"public-config\"].get({ query: { page: 2, skip: undefined } });\n    const url = fetch.mock.calls[0][0] as string;\n    expect(url).toContain(\"page=2\");\n    expect(url).not.toContain(\"skip\");          // undefined values are omitted\n  });\n\n  it(\"returns null data on empty 200 body\", async () => {\n    const fetch = mockFetch(200, \"\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.settings.get();\n    expect(res.data).toBeNull();\n    expect(res.error).toBeNull();\n  });\n\n  it(\"serialises body as JSON for POST\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client.user.settings.post({ theme: \"dark\" });\n    const init = fetch.mock.calls[0][1] as RequestInit;\n    expect(init.headers).toMatchObject({ \"Content-Type\": \"application/json\" });\n    expect(JSON.parse(init.body as string)).toEqual({ theme: \"dark\" });\n  });\n});\n\ndescribe(\"apiCall — error paths\", () => {\n  it(\"returns error with JSON body on 4xx\", async () => {\n    const fetch = mockFetch(400, '{\"message\":\"bad request\"}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toEqual({ message: \"bad request\" });\n    expect(res.data).toBeNull();\n    expect(res.status).toBe(400);\n  });\n\n  it(\"falls back to text when error body is not JSON\", async () => {\n    const fetch = vi.fn().mockResolvedValue({\n      ok: false,\n      status: 500,\n      json: () => Promise.reject(new Error(\"not json\")),\n      text: () => Promise.resolve(\"Internal Server Error\"),\n      statusText: \"ISE\",\n    });\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toBe(\"Internal Server Error\");\n  });\n\n  it(\"falls back to statusText when text() also fails\", async () => {\n    const fetch = vi.fn().mockResolvedValue({\n      ok: false,\n      status: 503,\n      json: () => Promise.reject(new Error()),\n      text: () => Promise.reject(new Error()),\n      statusText: \"Service Unavailable\",\n    });\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toBe(\"Service Unavailable\");\n  });\n});\n\ndescribe(\"handleResponse\", () => {\n  it(\"returns null when data is null and no error\", () => {\n    expect(handleResponse({ data: null, error: null, status: 204 })).toBeNull();\n  });\n\n  it(\"throws when response contains an error\", () => {\n    expect(() =>\n      handleResponse({ data: null, error: { message: \"forbidden\" }, status: 403 })\n    ).toThrow();\n  });\n\n  it(\"parses superjson string data\", () => {\n    const payload = JSON.stringify({ json: { value: 42 }, meta: undefined });\n    expect(handleResponse({ data: payload, error: null, status: 200 })).toEqual({ value: 42 });\n  });\n});\n\ndescribe(\"useAPIClient — URL construction\", () => {\n  it(\"uses provided origin for SSR base URL\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://api.internal:4000\" });\n    await client.export.get();\n    expect(fetch.mock.calls[0][0]).toContain(\"http://api.internal:4000\");\n  });\n\n  it(\"builds nested conversation message endpoint\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client.conversations({ id: \"abc123\" }).message({ messageId: \"msg456\" }).get();\n    expect(fetch.mock.calls[0][0]).toContain(\"/conversations/abc123/message/msg456\");\n  });\n});\n```\n\n---\n\n### 2. `src/lib/actions/clickOutside.ts` — Zero test coverage\n\n**Untested:** click outside triggers callback, click inside does not, `update` replaces callback, `destroy` removes listener.\n\n```typescript\n// src/lib/actions/clickOutside.spec.ts\nimport { describe, it, expect, vi, beforeEach } from \"vitest\";\nimport { clickOutside } from \"./clickOutside\";\n\ndescribe(\"clickOutside action\", () => {\n  let element: HTMLDivElement;\n  let outsideElement: HTMLDivElement;\n  let callback: ReturnType<typeof vi.fn>;\n\n  beforeEach(() => {\n    document.body.innerHTML = \"\";\n    element = document.createElement(\"div\");\n    outsideElement = document.createElement(\"div\");\n    document.body.appendChild(element);\n    document.body.appendChild(outsideElement);\n    callback = vi.fn();\n  });\n\n  it(\"fires callback when clicking outside the element\", () => {\n    clickOutside(element, callback);\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).toHaveBeenCalledOnce();\n  });\n\n  it(\"does not fire callback when clicking inside the element\", () => {\n    clickOutside(element, callback);\n    element.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"does not fire when clicking the element itself\", () => {\n    clickOutside(element, callback);\n    const inner = document.createElement(\"span\");\n    element.appendChild(inner);\n    inner.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"update() replaces the callback\", () => {\n    const action = clickOutside(element, callback);\n    const newCallback = vi.fn();\n    action.update(newCallback);\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n    expect(newCallback).toHaveBeenCalledOnce();\n  });\n\n  it(\"destroy() stops all future callbacks\", () => {\n    const action = clickOutside(element, callback);\n    action.destroy();\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"handles multiple destroy() calls without error\", () => {\n    const action = clickOutside(element, callback);\n    expect(() => { action.destroy(); action.destroy(); }).not.toThrow();\n  });\n});\n```\n\n---\n\n### 3. `src/lib/buildPrompt.ts` — Zero test coverage\n\n**Untested:** system message replacement with preprompt, no system message scenario, truncation slicing, zero truncate parameter (no slicing).\n\n```typescript\n// src/lib/buildPrompt.spec.ts\nimport { describe, it, expect } from \"vitest\";\nimport { buildPrompt } from \"./buildPrompt\";\nimport type { BackendModel } from \"./server/models\";\n\nconst makeModel = (truncate?: number): BackendModel =>\n  ({\n    chatPromptRender: ({ messages, preprompt }: { messages: unknown[]; preprompt?: string }) =>\n      messages.map((m: any) => `${m.role}:${m.content}`).join(\" \"),\n    parameters: truncate !== undefined ? { truncate } : undefined,\n  } as unknown as BackendModel);\n\ndescribe(\"buildPrompt\", () => {\n  it(\"replaces system message content with preprompt when first message is system\", async () => {\n    const model = makeModel(1000);\n    const messages = [\n      { from: \"system\" as const, content: \"old system prompt\" },\n      { from: \"user\" as const, content: \"hello\" },\n    ];\n    const result = await buildPrompt({ messages, model, preprompt: \"new system prompt\" });\n    expect(result).toContain(\"new system prompt\");\n    expect(result).not.toContain(\"old system prompt\");\n  });\n\n  it(\"does not replace content when first message is not system\", async () => {\n    const model = makeModel(1000);\n    const messages = [{ from: \"user\" as const, content: \"hello\" }];\n    await buildPrompt({ messages, model, preprompt: \"some preprompt\" });\n    // original content unchanged\n    expect(messages[0].content).toBe(\"hello\");\n  });\n\n  it(\"does not replace content when preprompt is undefined\", async () => {\n    const model = makeModel(1000);\n    const messages = [{ from: \"system\" as const, content: \"original\" }];\n    await buildPrompt({ messages, model, preprompt: undefined });\n    expect(messages[0].content).toBe(\"original\");\n  });\n\n  it(\"truncates to the last N words when truncate is set\", async () => {\n    const model = makeModel(3);\n    const messages = [{ from: \"user\" as const, content: \"one two three four five\" }];\n    const result = await buildPrompt({ messages, model });\n    const wordCount = result.trim().split(/\\s+/).length;\n    expect(wordCount).toBeLessThanOrEqual(3);\n  });\n\n  it(\"returns full prompt when truncate is 0 (no slicing)\", async () => {\n    const model = makeModel(0);\n    const messages = [{ from: \"user\" as const, content: \"word1 word2 word3\" }];\n    const result = await buildPrompt({ messages, model });\n    // slice(0) returns empty array → join → empty string\n    expect(result).toBe(\"\");\n  });\n\n  it(\"returns full prompt when model has no truncate parameter\", async () => {\n    const model = makeModel(undefined);\n    const messages = [{ from: \"user\" as const, content: \"word1 word2 word3\" }];\n    const result = await buildPrompt({ messages, model });\n    expect(result).toContain(\"word1\");\n  });\n\n  it(\"maps message from to role field\", async () => {\n    const receivedMessages: unknown[] = [];\n    const model = {\n      chatPromptRender: ({ messages }: { messages: unknown[] }) => {\n        receivedMessages.push(...messages);\n        return \"\";\n      },\n      parameters: { truncate: 1000 },\n    } as unknown as BackendModel;\n    await buildPrompt({\n      messages: [{ from: \"assistant\" as const, content: \"hi\" }],\n      model,\n    });\n    expect((receivedMessages[0] as any).role).toBe(\"assistant\");\n  });\n});\n```\n\n---\n\n### 4. `src/lib/createShareLink.ts` — Zero test coverage\n\n**Untested:** 7-char ID shortcut path, successful API call, API failure with text body, API failure with empty body, URL prefix priority logic.\n\n```typescript\n// src/lib/createShareLink.spec.ts\nimport { describe, it, expect, vi, beforeEach } from \"vitest\";\n\n// Mock SvelteKit modules before importing\nvi.mock(\"$app/paths\", () => ({ base: \"\" }));\nvi.mock(\"$app/state\", () => ({\n  page: {\n    data: { publicConfig: { PUBLIC_SHARE_PREFIX: \"\", PUBLIC_ORIGIN: \"https://app.example.com\" } },\n    url: { origin: \"https://fallback.example.com\" },\n  },\n}));\n\nimport { createShareLink } from \"./createShareLink\";\n\ndescribe(\"createShareLink\", () => {\n  beforeEach(() => {\n    vi.resetAllMocks();\n  });\n\n  it(\"returns share URL directly for 7-char id without fetching\", async () => {\n    const fetchSpy = vi.spyOn(globalThis, \"fetch\");\n    const url = await createShareLink(\"abc1234\");\n    expect(fetchSpy).not.toHaveBeenCalled();\n    expect(url).toBe(\"https://app.example.com/r/abc1234\");\n  });\n\n  it(\"calls the share endpoint for non-7-char ids\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: true,\n      json: () => Promise.resolve({ shareId: \"xyz9876\" }),\n    } as Response);\n    const url = await createShareLink(\"longconversationid\");\n    expect(url).toBe(\"https://app.example.com/r/xyz9876\");\n  });\n\n  it(\"throws when the share endpoint returns non-ok with a text body\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: false,\n      text: () => Promise.resolve(\"Conversation not found\"),\n    } as unknown as Response);\n    await expect(createShareLink(\"longconversationid\")).rejects.toThrow(\"Conversation not found\");\n  });\n\n  it(\"throws generic message when error body is empty\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: false,\n      text: () => Promise.resolve(\"\"),\n    } as unknown as Response);\n    await expect(createShareLink(\"longconversationid\")).rejects.toThrow(\n      \"Failed to create share link\"\n    );\n  });\n\n  it(\"uses PUBLIC_SHARE_PREFIX when set\", async () => {\n    const { page } = await import(\"$app/state\");\n    (page.data.publicConfig as any).PUBLIC_SHARE_PREFIX = \"https://cdn.share.example.com\";\n    const url = await createShareLink(\"abc1234\");\n    expect(url).toStartWith(\"https://cdn.share.example.com\");\n    (page.data.publicConfig as any).PUBLIC_SHARE_PREFIX = \"\";\n  });\n});\n```\n\n---\n\n### 5. `src/lib/migrations/lock.ts` — Gaps in existing tests\n\nThe existing suite covers the happy path and concurrent acquisition. Missing:\n\n| Gap | Why it matters |\n|---|---|\n| `releaseLock` with mismatched `lockId` | Should not delete the wrong lock |\n| `refreshLock` on a non-existent lock | Returns `false` — not asserted anywhere |\n| `isDBLocked` with a different key | Isolation between semaphore keys |\n| `releaseLock` when lock already released | Should be idempotent |\n\n```typescript\n// Add to src/lib/migrations/migrations.spec.ts (inside the describe block)\n\nit(\"releaseLock does not delete lock held by different id\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  const fakeId = new ObjectId();\n  await releaseLock(Semaphores.TEST_MIGRATION, fakeId);   // wrong id\n  expect(await isDBLocked(Semaphores.TEST_MIGRATION)).toBe(true);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);    // cleanup\n});\n\nit(\"refreshLock returns false when lock does not exist\", async () => {\n  const fakeId = new ObjectId();\n  const result = await refreshLock(Semaphores.TEST_MIGRATION, fakeId);\n  expect(result).toBe(false);\n});\n\nit(\"isDBLocked is key-scoped — one key locked does not affect another\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  expect(await isDBLocked(\"other-key\")).toBe(false);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);\n});\n\nit(\"releaseLock is idempotent — releasing twice does not throw\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);\n  await expect(releaseLock(Semaphores.TEST_MIGRATION, lockId)).resolves.not.toThrow();\n});\n```\n\n---\n\n### 6. `src/lib/migrations/migrations.ts` — Zero test coverage for `checkAndRunMigrations`\n\n**Untested:** duplicate GUID detection, lock contention wait-loop, `runEveryTime`, `runForHuggingChat` guards, migration failure recording, lock refresh interval, lock release on completion.\n\n```typescript\n// src/lib/migrations/checkAndRunMigrations.spec.ts\nimport { beforeEach, describe, expect, it, vi } from \"vitest\";\nimport type { Database } from \"$lib/server/database\";\nimport { Semaphores } from \"$lib/types/Semaphore\";\nimport ObjectId from \"bson-objectid\";\n\n// Stubs for all side-effecting modules\nvi.mock(\"./lock\");\nvi.mock(\"$lib/server/logger\", () => ({ logger: { debug: vi.fn(), error: vi.fn() } }));\nvi.mock(\"$lib/server/config\", () => ({ config: { isHuggingChat: false } }));\n\nimport * as lockModule from \"./lock\";\nimport { checkAndRunMigrations } from \"./migrations\";\n\nconst makeDb = (results: unknown[] = []) => ({\n  getCollections: () => ({\n    migrationResults: {\n      find: () => ({ toArray: () => Promise.resolve(results) }),\n      updateOne: vi.fn().mockResolvedValue({}),\n    },\n  }),\n});\n\nvi.mock(\"$lib/server/database\", () => ({\n  Database: { getInstance: vi.fn() },\n}));\n\nimport { Database } from \"$lib/server/database\";\n\ndescribe(\"checkAndRunMigrations\", () => {\n  beforeEach(() => {\n    vi.clearAllMocks();\n    vi.mocked(Database.getInstance).mockResolvedValue(makeDb() as unknown as Database);\n    vi.mocked(lockModule.acquireLock).mockResolvedValue(new ObjectId());\n    vi.mocked(lockModule.releaseLock).mockResolvedValue(undefined);\n    vi.mocked(lockModule.isDBLocked).mockResolvedValue(false);\n    vi.mocked(lockModule.refreshLock).mockResolvedValue(true);\n  });\n\n  it(\"throws when duplicate migration GUIDs exist\", async () => {\n    // Override routines to inject duplicates — easiest with vi.doMock inside test\n    await expect(async () => {\n      vi.doMock(\"./routines\", () => {\n        const id = new ObjectId();\n        return { migrations: [{ _id: id, name: \"dup\", up: vi.fn() }, { _id: id, name: \"dup2\", up: vi.fn() }] };\n      });\n      const { checkAndRunMigrations: fn } = await import(\"./migrations?dup=1\");\n      await fn();\n    }).rejects.toThrow(\"Duplicate migration GUIDs found\");\n  });\n\n  it(\"waits for DB unlock when lock is already held\", async () => {\n    vi.mocked(lockModule.acquireLock).mockResolvedValueOnce(false);\n    // isDBLocked returns true once, then false to exit the while loop\n    vi.mocked(lockModule.isDBLocked)\n      .mockResolvedValueOnce(true)\n      .mockResolvedValueOnce(false);\n    await checkAndRunMigrations();\n    expect(lockModule.isDBLocked).toHaveBeenCalledWith(Semaphores.MIGRATION);\n  });\n\n  it(\"skips migration already in results\", async () => {\n    const id = new ObjectId();\n    vi.mocked(Database.getInstance).mockResolvedValue(\n      makeDb([{ _id: id, name: \"done\", status: \"success\" }]) as unknown as Database\n    );\n    const upFn = vi.fn().mockResolvedValue(true);\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"done\", up: upFn, runEveryTime: false }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?skip=1\");\n    await fn();\n    expect(upFn).not.toHaveBeenCalled();\n  });\n\n  it(\"records failure status when migration throws\", async () => {\n    const id = new ObjectId();\n    const updateOne = vi.fn().mockResolvedValue({});\n    vi.mocked(Database.getInstance).mockResolvedValue({\n      getCollections: () => ({\n        migrationResults: { find: () => ({ toArray: () => Promise.resolve([]) }), updateOne },\n      }),\n    } as unknown as Database);\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"failing\", up: vi.fn().mockRejectedValue(new Error(\"boom\")) }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?fail=1\");\n    await fn();\n    const lastCall = updateOne.mock.calls.at(-1)?.[1].$set;\n    expect(lastCall?.status).toBe(\"failure\");\n  });\n\n  it(\"skips runForHuggingChat=only migration when not HuggingChat\", async () => {\n    const { config } = await import(\"$lib/server/config\");\n    (config as any).isHuggingChat = false;\n    const upFn = vi.fn().mockResolvedValue(true);\n    const id = new ObjectId();\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"hc-only\", up: upFn, runForHuggingChat: \"only\" }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?hconly=1\");\n    await fn();\n    expect(upFn).not.toHaveBeenCalled();\n  });\n\n  it(\"releases lock and clears interval after all migrations run\", async () => {\n    vi.useFakeTimers();\n    await checkAndRunMigrations();\n    vi.useRealTimers();\n    expect(lockModule.releaseLock).toHaveBeenCalledWith(\n      Semaphores.MIGRATION,\n      expect.any(ObjectId)\n    );\n  });\n});\n```\n\n---\n\n### 7. `src/lib/constants/rvagentPresets.ts` — Utility functions untested\n\n**Untested:** `getPresetById`, `buildPresetUrl`, `buildPresetCliCommand`.\n\n```typescript\n// src/lib/constants/rvagentPresets.spec.ts\nimport { describe, it, expect } from \"vitest\";\nimport {\n  getPresetById,\n  buildPresetUrl,\n  buildPresetCliCommand,\n  RVAGENT_PRESETS,\n} from \"./rvagentPresets\";\n\ndescribe(\"getPresetById\", () => {\n  it(\"returns the matching preset\", () => {\n    const preset = getPresetById(\"all-tools\");\n    expect(preset).toBeDefined();\n    expect(preset?.id).toBe(\"all-tools\");\n  });\n\n  it(\"returns undefined for an unknown id\", () => {\n    expect(getPresetById(\"nonexistent\")).toBeUndefined();\n  });\n\n  it(\"all preset IDs in RVAGENT_PRESETS are findable\", () => {\n    for (const p of RVAGENT_PRESETS) {\n      expect(getPresetById(p.id)).toBe(p);\n    }\n  });\n});\n\ndescribe(\"buildPresetUrl\", () => {\n  it(\"uses preset defaultPort when no port override is given\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset)).toBe(`http://localhost:${preset.defaultPort}/sse`);\n  });\n\n  it(\"uses the overridden port\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset, \"localhost\", 9999)).toBe(\"http://localhost:9999/sse\");\n  });\n\n  it(\"uses custom host\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset, \"192.168.1.10\")).toContain(\"192.168.1.10\");\n  });\n});\n\ndescribe(\"buildPresetCliCommand\", () => {\n  it(\"uses --all flag for the all-tools preset\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(\"--all\");\n    expect(cmd).not.toContain(\"--groups\");\n  });\n\n  it(\"uses --groups for presets with specific tool groups\", () => {\n    const preset = getPresetById(\"file-shell\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(\"--groups file,shell\");\n    expect(cmd).not.toContain(\"--all\");\n  });\n\n  it(\"uses custom port in the command\", () => {\n    const preset = getPresetById(\"memory-agent\")!;\n    const cmd = buildPresetCliCommand(preset, 8888);\n    expect(cmd).toContain(\"--port 8888\");\n  });\n\n  it(\"falls back to defaultPort in the command when no port given\", () => {\n    const preset = getPresetById(\"memory-agent\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(`--port ${preset.defaultPort}`);\n  });\n});\n```\n\n---\n\n### 8. `src/lib/components/chat/MarkdownRenderer.svelte.test.ts` — Edge case gaps\n\n**Missing:** XSS via `javascript:` links, empty content, bold/italic inside lists, tables, image rendering, multiple code blocks with language labels.\n\n```typescript\n// Add to existing MarkdownRenderer.svelte.test.ts\n\ndescribe(\"MarkdownRenderer — security\", () => {\n  it(\"strips javascript: href from links\", () => {\n    const { baseElement } = render(MarkdownRenderer, {\n      content: \"[click me](javascript:alert(1))\",\n    });\n    const anchor = baseElement.querySelector(\"a\");\n    expect(anchor?.getAttribute(\"href\")).not.toContain(\"javascript:\");\n  });\n\n  it(\"renders empty content without crashing\", () => {\n    expect(() => render(MarkdownRenderer, { content: \"\" })).not.toThrow();\n  });\n});\n\ndescribe(\"MarkdownRenderer — tables\", () => {\n  it(\"renders a markdown table\", () => {\n    const md = \"| A | B |\\n|---|---|\\n| 1 | 2 |\";\n    const { baseElement } = render(MarkdownRenderer, { content: md });\n    expect(baseElement.querySelector(\"table\")).toBeTruthy();\n    expect(baseElement.querySelector(\"thead\")).toBeTruthy();\n    expect(baseElement.querySelector(\"tbody\")).toBeTruthy();\n  });\n});\n\ndescribe(\"MarkdownRenderer — nested formatting\", () => {\n  it(\"renders bold inside a list item\", () => {\n    const { baseElement } = render(MarkdownRenderer, { content: \"- **bold item**\" });\n    const strong = baseElement.querySelector(\"strong\");\n    expect(strong).toBeTruthy();\n    expect(strong?.textContent).toBe(\"bold item\");\n  });\n\n  it(\"renders multiple fenced code blocks with language labels\", () => {\n    const md = \"```ts\\nconst x = 1;\\n```\\n\\n```py\\nprint('hi')\\n```\";\n    const { baseElement } = render(MarkdownRenderer, { content: md });\n    const codeBlocks = baseElement.querySelectorAll(\"code\");\n    expect(codeBlocks.length).toBeGreaterThanOrEqual(2);\n  });\n});\n\ndescribe(\"MarkdownRenderer — images\", () => {\n  it(\"renders an image with alt text\", () => {\n    const { baseElement } = render(MarkdownRenderer, {\n      content: \"![Alt text](https://example.com/img.png)\",\n    });\n    const img = baseElement.querySelector(\"img\");\n    expect(img).toBeTruthy();\n    expect(img?.getAttribute(\"alt\")).toBe(\"Alt text\");\n  });\n});\n```\n\n---\n\n### Summary of Gaps\n\n| File | Coverage | Priority gaps |\n|---|---|---|\n| `APIClient.ts` | None | Error fallback chain, empty body, query filtering, `handleResponse` |\n| `clickOutside.ts` | None | All branches: outside, inside, nested, update, destroy |\n| `buildPrompt.ts` | None | Preprompt replacement, truncation edge cases (0, undefined) |\n| `createShareLink.ts` | None | 7-char shortcut, API failure, prefix priority |\n| `lock.ts` | Partial | `refreshLock(false)`, mismatched lockId, key isolation |\n| `migrations.ts` | None | Duplicate GUID, lock contention, `runEveryTime`, HuggingChat guard, failure recording |\n| `rvagentPresets.ts` | None | All three exported functions |\n| `MarkdownRenderer` | Partial | XSS links, empty content, tables, images, nested formatting |\n",
+  "parsedOutput": {
+    "sections": [
+      {
+        "title": "Test Coverage Gap Analysis",
+        "content": "\n",
+        "level": 2
+      },
+      {
+        "title": "1. `src/lib/APIClient.ts` — Zero test coverage",
+        "content": "\n**Untested:** `apiCall` (all branches), `handleResponse`, query param serialization, error body parsing fallback chain, ObjectId superjson registration.\n\n```typescript\n// src/lib/APIClient.spec.ts\nimport { describe, it, expect, vi, afterEach } from \"vitest\";\nimport { handleResponse, useAPIClient } from \"./APIClient\";\n\nconst mockFetch = (status: number, body: string | null, ok = status < 400) =>\n  vi.fn().mockResolvedValue({\n    ok,\n    status,\n    text: () => Promise.resolve(body ?? \"\"),\n    json: () => (body ? Promise.resolve(JSON.parse(body)) : Promise.reject(new Error(\"no body\"))),\n    statusText: \"Error\",\n  });\n\ndescribe(\"apiCall — success paths\", () => {\n  it(\"sends GET with no body\", async () => {\n    const fetch = mockFetch(200, '{\"json\":\"body\"}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client[\"public-config\"].get();\n    expect(fetch).toHaveBeenCalledWith(\n      expect.stringContaining(\"/api/v2/public-config\"),\n      expect.objectContaining({ method: \"GET\" })\n    );\n  });\n\n  it(\"attaches query params to GET URL\", async () => {\n    const fetch = mockFetch(200, '{\"x\":1}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client[\"public-config\"].get({ query: { page: 2, skip: undefined } });\n    const url = fetch.mock.calls[0][0] as string;\n    expect(url).toContain(\"page=2\");\n    expect(url).not.toContain(\"skip\");          // undefined values are omitted\n  });\n\n  it(\"returns null data on empty 200 body\", async () => {\n    const fetch = mockFetch(200, \"\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.settings.get();\n    expect(res.data).toBeNull();\n    expect(res.error).toBeNull();\n  });\n\n  it(\"serialises body as JSON for POST\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client.user.settings.post({ theme: \"dark\" });\n    const init = fetch.mock.calls[0][1] as RequestInit;\n    expect(init.headers).toMatchObject({ \"Content-Type\": \"application/json\" });\n    expect(JSON.parse(init.body as string)).toEqual({ theme: \"dark\" });\n  });\n});\n\ndescribe(\"apiCall — error paths\", () => {\n  it(\"returns error with JSON body on 4xx\", async () => {\n    const fetch = mockFetch(400, '{\"message\":\"bad request\"}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toEqual({ message: \"bad request\" });\n    expect(res.data).toBeNull();\n    expect(res.status).toBe(400);\n  });\n\n  it(\"falls back to text when error body is not JSON\", async () => {\n    const fetch = vi.fn().mockResolvedValue({\n      ok: false,\n      status: 500,\n      json: () => Promise.reject(new Error(\"not json\")),\n      text: () => Promise.resolve(\"Internal Server Error\"),\n      statusText: \"ISE\",\n    });\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toBe(\"Internal Server Error\");\n  });\n\n  it(\"falls back to statusText when text() also fails\", async () => {\n    const fetch = vi.fn().mockResolvedValue({\n      ok: false,\n      status: 503,\n      json: () => Promise.reject(new Error()),\n      text: () => Promise.reject(new Error()),\n      statusText: \"Service Unavailable\",\n    });\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toBe(\"Service Unavailable\");\n  });\n});\n\ndescribe(\"handleResponse\", () => {\n  it(\"returns null when data is null and no error\", () => {\n    expect(handleResponse({ data: null, error: null, status: 204 })).toBeNull();\n  });\n\n  it(\"throws when response contains an error\", () => {\n    expect(() =>\n      handleResponse({ data: null, error: { message: \"forbidden\" }, status: 403 })\n    ).toThrow();\n  });\n\n  it(\"parses superjson string data\", () => {\n    const payload = JSON.stringify({ json: { value: 42 }, meta: undefined });\n    expect(handleResponse({ data: payload, error: null, status: 200 })).toEqual({ value: 42 });\n  });\n});\n\ndescribe(\"useAPIClient — URL construction\", () => {\n  it(\"uses provided origin for SSR base URL\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://api.internal:4000\" });\n    await client.export.get();\n    expect(fetch.mock.calls[0][0]).toContain(\"http://api.internal:4000\");\n  });\n\n  it(\"builds nested conversation message endpoint\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client.conversations({ id: \"abc123\" }).message({ messageId: \"msg456\" }).get();\n    expect(fetch.mock.calls[0][0]).toContain(\"/conversations/abc123/message/msg456\");\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "2. `src/lib/actions/clickOutside.ts` — Zero test coverage",
+        "content": "\n**Untested:** click outside triggers callback, click inside does not, `update` replaces callback, `destroy` removes listener.\n\n```typescript\n// src/lib/actions/clickOutside.spec.ts\nimport { describe, it, expect, vi, beforeEach } from \"vitest\";\nimport { clickOutside } from \"./clickOutside\";\n\ndescribe(\"clickOutside action\", () => {\n  let element: HTMLDivElement;\n  let outsideElement: HTMLDivElement;\n  let callback: ReturnType<typeof vi.fn>;\n\n  beforeEach(() => {\n    document.body.innerHTML = \"\";\n    element = document.createElement(\"div\");\n    outsideElement = document.createElement(\"div\");\n    document.body.appendChild(element);\n    document.body.appendChild(outsideElement);\n    callback = vi.fn();\n  });\n\n  it(\"fires callback when clicking outside the element\", () => {\n    clickOutside(element, callback);\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).toHaveBeenCalledOnce();\n  });\n\n  it(\"does not fire callback when clicking inside the element\", () => {\n    clickOutside(element, callback);\n    element.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"does not fire when clicking the element itself\", () => {\n    clickOutside(element, callback);\n    const inner = document.createElement(\"span\");\n    element.appendChild(inner);\n    inner.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"update() replaces the callback\", () => {\n    const action = clickOutside(element, callback);\n    const newCallback = vi.fn();\n    action.update(newCallback);\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n    expect(newCallback).toHaveBeenCalledOnce();\n  });\n\n  it(\"destroy() stops all future callbacks\", () => {\n    const action = clickOutside(element, callback);\n    action.destroy();\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"handles multiple destroy() calls without error\", () => {\n    const action = clickOutside(element, callback);\n    expect(() => { action.destroy(); action.destroy(); }).not.toThrow();\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "3. `src/lib/buildPrompt.ts` — Zero test coverage",
+        "content": "\n**Untested:** system message replacement with preprompt, no system message scenario, truncation slicing, zero truncate parameter (no slicing).\n\n```typescript\n// src/lib/buildPrompt.spec.ts\nimport { describe, it, expect } from \"vitest\";\nimport { buildPrompt } from \"./buildPrompt\";\nimport type { BackendModel } from \"./server/models\";\n\nconst makeModel = (truncate?: number): BackendModel =>\n  ({\n    chatPromptRender: ({ messages, preprompt }: { messages: unknown[]; preprompt?: string }) =>\n      messages.map((m: any) => `${m.role}:${m.content}`).join(\" \"),\n    parameters: truncate !== undefined ? { truncate } : undefined,\n  } as unknown as BackendModel);\n\ndescribe(\"buildPrompt\", () => {\n  it(\"replaces system message content with preprompt when first message is system\", async () => {\n    const model = makeModel(1000);\n    const messages = [\n      { from: \"system\" as const, content: \"old system prompt\" },\n      { from: \"user\" as const, content: \"hello\" },\n    ];\n    const result = await buildPrompt({ messages, model, preprompt: \"new system prompt\" });\n    expect(result).toContain(\"new system prompt\");\n    expect(result).not.toContain(\"old system prompt\");\n  });\n\n  it(\"does not replace content when first message is not system\", async () => {\n    const model = makeModel(1000);\n    const messages = [{ from: \"user\" as const, content: \"hello\" }];\n    await buildPrompt({ messages, model, preprompt: \"some preprompt\" });\n    // original content unchanged\n    expect(messages[0].content).toBe(\"hello\");\n  });\n\n  it(\"does not replace content when preprompt is undefined\", async () => {\n    const model = makeModel(1000);\n    const messages = [{ from: \"system\" as const, content: \"original\" }];\n    await buildPrompt({ messages, model, preprompt: undefined });\n    expect(messages[0].content).toBe(\"original\");\n  });\n\n  it(\"truncates to the last N words when truncate is set\", async () => {\n    const model = makeModel(3);\n    const messages = [{ from: \"user\" as const, content: \"one two three four five\" }];\n    const result = await buildPrompt({ messages, model });\n    const wordCount = result.trim().split(/\\s+/).length;\n    expect(wordCount).toBeLessThanOrEqual(3);\n  });\n\n  it(\"returns full prompt when truncate is 0 (no slicing)\", async () => {\n    const model = makeModel(0);\n    const messages = [{ from: \"user\" as const, content: \"word1 word2 word3\" }];\n    const result = await buildPrompt({ messages, model });\n    // slice(0) returns empty array → join → empty string\n    expect(result).toBe(\"\");\n  });\n\n  it(\"returns full prompt when model has no truncate parameter\", async () => {\n    const model = makeModel(undefined);\n    const messages = [{ from: \"user\" as const, content: \"word1 word2 word3\" }];\n    const result = await buildPrompt({ messages, model });\n    expect(result).toContain(\"word1\");\n  });\n\n  it(\"maps message from to role field\", async () => {\n    const receivedMessages: unknown[] = [];\n    const model = {\n      chatPromptRender: ({ messages }: { messages: unknown[] }) => {\n        receivedMessages.push(...messages);\n        return \"\";\n      },\n      parameters: { truncate: 1000 },\n    } as unknown as BackendModel;\n    await buildPrompt({\n      messages: [{ from: \"assistant\" as const, content: \"hi\" }],\n      model,\n    });\n    expect((receivedMessages[0] as any).role).toBe(\"assistant\");\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "4. `src/lib/createShareLink.ts` — Zero test coverage",
+        "content": "\n**Untested:** 7-char ID shortcut path, successful API call, API failure with text body, API failure with empty body, URL prefix priority logic.\n\n```typescript\n// src/lib/createShareLink.spec.ts\nimport { describe, it, expect, vi, beforeEach } from \"vitest\";\n\n// Mock SvelteKit modules before importing\nvi.mock(\"$app/paths\", () => ({ base: \"\" }));\nvi.mock(\"$app/state\", () => ({\n  page: {\n    data: { publicConfig: { PUBLIC_SHARE_PREFIX: \"\", PUBLIC_ORIGIN: \"https://app.example.com\" } },\n    url: { origin: \"https://fallback.example.com\" },\n  },\n}));\n\nimport { createShareLink } from \"./createShareLink\";\n\ndescribe(\"createShareLink\", () => {\n  beforeEach(() => {\n    vi.resetAllMocks();\n  });\n\n  it(\"returns share URL directly for 7-char id without fetching\", async () => {\n    const fetchSpy = vi.spyOn(globalThis, \"fetch\");\n    const url = await createShareLink(\"abc1234\");\n    expect(fetchSpy).not.toHaveBeenCalled();\n    expect(url).toBe(\"https://app.example.com/r/abc1234\");\n  });\n\n  it(\"calls the share endpoint for non-7-char ids\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: true,\n      json: () => Promise.resolve({ shareId: \"xyz9876\" }),\n    } as Response);\n    const url = await createShareLink(\"longconversationid\");\n    expect(url).toBe(\"https://app.example.com/r/xyz9876\");\n  });\n\n  it(\"throws when the share endpoint returns non-ok with a text body\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: false,\n      text: () => Promise.resolve(\"Conversation not found\"),\n    } as unknown as Response);\n    await expect(createShareLink(\"longconversationid\")).rejects.toThrow(\"Conversation not found\");\n  });\n\n  it(\"throws generic message when error body is empty\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: false,\n      text: () => Promise.resolve(\"\"),\n    } as unknown as Response);\n    await expect(createShareLink(\"longconversationid\")).rejects.toThrow(\n      \"Failed to create share link\"\n    );\n  });\n\n  it(\"uses PUBLIC_SHARE_PREFIX when set\", async () => {\n    const { page } = await import(\"$app/state\");\n    (page.data.publicConfig as any).PUBLIC_SHARE_PREFIX = \"https://cdn.share.example.com\";\n    const url = await createShareLink(\"abc1234\");\n    expect(url).toStartWith(\"https://cdn.share.example.com\");\n    (page.data.publicConfig as any).PUBLIC_SHARE_PREFIX = \"\";\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "5. `src/lib/migrations/lock.ts` — Gaps in existing tests",
+        "content": "\nThe existing suite covers the happy path and concurrent acquisition. Missing:\n\n| Gap | Why it matters |\n|---|---|\n| `releaseLock` with mismatched `lockId` | Should not delete the wrong lock |\n| `refreshLock` on a non-existent lock | Returns `false` — not asserted anywhere |\n| `isDBLocked` with a different key | Isolation between semaphore keys |\n| `releaseLock` when lock already released | Should be idempotent |\n\n```typescript\n// Add to src/lib/migrations/migrations.spec.ts (inside the describe block)\n\nit(\"releaseLock does not delete lock held by different id\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  const fakeId = new ObjectId();\n  await releaseLock(Semaphores.TEST_MIGRATION, fakeId);   // wrong id\n  expect(await isDBLocked(Semaphores.TEST_MIGRATION)).toBe(true);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);    // cleanup\n});\n\nit(\"refreshLock returns false when lock does not exist\", async () => {\n  const fakeId = new ObjectId();\n  const result = await refreshLock(Semaphores.TEST_MIGRATION, fakeId);\n  expect(result).toBe(false);\n});\n\nit(\"isDBLocked is key-scoped — one key locked does not affect another\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  expect(await isDBLocked(\"other-key\")).toBe(false);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);\n});\n\nit(\"releaseLock is idempotent — releasing twice does not throw\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);\n  await expect(releaseLock(Semaphores.TEST_MIGRATION, lockId)).resolves.not.toThrow();\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "6. `src/lib/migrations/migrations.ts` — Zero test coverage for `checkAndRunMigrations`",
+        "content": "\n**Untested:** duplicate GUID detection, lock contention wait-loop, `runEveryTime`, `runForHuggingChat` guards, migration failure recording, lock refresh interval, lock release on completion.\n\n```typescript\n// src/lib/migrations/checkAndRunMigrations.spec.ts\nimport { beforeEach, describe, expect, it, vi } from \"vitest\";\nimport type { Database } from \"$lib/server/database\";\nimport { Semaphores } from \"$lib/types/Semaphore\";\nimport ObjectId from \"bson-objectid\";\n\n// Stubs for all side-effecting modules\nvi.mock(\"./lock\");\nvi.mock(\"$lib/server/logger\", () => ({ logger: { debug: vi.fn(), error: vi.fn() } }));\nvi.mock(\"$lib/server/config\", () => ({ config: { isHuggingChat: false } }));\n\nimport * as lockModule from \"./lock\";\nimport { checkAndRunMigrations } from \"./migrations\";\n\nconst makeDb = (results: unknown[] = []) => ({\n  getCollections: () => ({\n    migrationResults: {\n      find: () => ({ toArray: () => Promise.resolve(results) }),\n      updateOne: vi.fn().mockResolvedValue({}),\n    },\n  }),\n});\n\nvi.mock(\"$lib/server/database\", () => ({\n  Database: { getInstance: vi.fn() },\n}));\n\nimport { Database } from \"$lib/server/database\";\n\ndescribe(\"checkAndRunMigrations\", () => {\n  beforeEach(() => {\n    vi.clearAllMocks();\n    vi.mocked(Database.getInstance).mockResolvedValue(makeDb() as unknown as Database);\n    vi.mocked(lockModule.acquireLock).mockResolvedValue(new ObjectId());\n    vi.mocked(lockModule.releaseLock).mockResolvedValue(undefined);\n    vi.mocked(lockModule.isDBLocked).mockResolvedValue(false);\n    vi.mocked(lockModule.refreshLock).mockResolvedValue(true);\n  });\n\n  it(\"throws when duplicate migration GUIDs exist\", async () => {\n    // Override routines to inject duplicates — easiest with vi.doMock inside test\n    await expect(async () => {\n      vi.doMock(\"./routines\", () => {\n        const id = new ObjectId();\n        return { migrations: [{ _id: id, name: \"dup\", up: vi.fn() }, { _id: id, name: \"dup2\", up: vi.fn() }] };\n      });\n      const { checkAndRunMigrations: fn } = await import(\"./migrations?dup=1\");\n      await fn();\n    }).rejects.toThrow(\"Duplicate migration GUIDs found\");\n  });\n\n  it(\"waits for DB unlock when lock is already held\", async () => {\n    vi.mocked(lockModule.acquireLock).mockResolvedValueOnce(false);\n    // isDBLocked returns true once, then false to exit the while loop\n    vi.mocked(lockModule.isDBLocked)\n      .mockResolvedValueOnce(true)\n      .mockResolvedValueOnce(false);\n    await checkAndRunMigrations();\n    expect(lockModule.isDBLocked).toHaveBeenCalledWith(Semaphores.MIGRATION);\n  });\n\n  it(\"skips migration already in results\", async () => {\n    const id = new ObjectId();\n    vi.mocked(Database.getInstance).mockResolvedValue(\n      makeDb([{ _id: id, name: \"done\", status: \"success\" }]) as unknown as Database\n    );\n    const upFn = vi.fn().mockResolvedValue(true);\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"done\", up: upFn, runEveryTime: false }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?skip=1\");\n    await fn();\n    expect(upFn).not.toHaveBeenCalled();\n  });\n\n  it(\"records failure status when migration throws\", async () => {\n    const id = new ObjectId();\n    const updateOne = vi.fn().mockResolvedValue({});\n    vi.mocked(Database.getInstance).mockResolvedValue({\n      getCollections: () => ({\n        migrationResults: { find: () => ({ toArray: () => Promise.resolve([]) }), updateOne },\n      }),\n    } as unknown as Database);\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"failing\", up: vi.fn().mockRejectedValue(new Error(\"boom\")) }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?fail=1\");\n    await fn();\n    const lastCall = updateOne.mock.calls.at(-1)?.[1].$set;\n    expect(lastCall?.status).toBe(\"failure\");\n  });\n\n  it(\"skips runForHuggingChat=only migration when not HuggingChat\", async () => {\n    const { config } = await import(\"$lib/server/config\");\n    (config as any).isHuggingChat = false;\n    const upFn = vi.fn().mockResolvedValue(true);\n    const id = new ObjectId();\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"hc-only\", up: upFn, runForHuggingChat: \"only\" }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?hconly=1\");\n    await fn();\n    expect(upFn).not.toHaveBeenCalled();\n  });\n\n  it(\"releases lock and clears interval after all migrations run\", async () => {\n    vi.useFakeTimers();\n    await checkAndRunMigrations();\n    vi.useRealTimers();\n    expect(lockModule.releaseLock).toHaveBeenCalledWith(\n      Semaphores.MIGRATION,\n      expect.any(ObjectId)\n    );\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "7. `src/lib/constants/rvagentPresets.ts` — Utility functions untested",
+        "content": "\n**Untested:** `getPresetById`, `buildPresetUrl`, `buildPresetCliCommand`.\n\n```typescript\n// src/lib/constants/rvagentPresets.spec.ts\nimport { describe, it, expect } from \"vitest\";\nimport {\n  getPresetById,\n  buildPresetUrl,\n  buildPresetCliCommand,\n  RVAGENT_PRESETS,\n} from \"./rvagentPresets\";\n\ndescribe(\"getPresetById\", () => {\n  it(\"returns the matching preset\", () => {\n    const preset = getPresetById(\"all-tools\");\n    expect(preset).toBeDefined();\n    expect(preset?.id).toBe(\"all-tools\");\n  });\n\n  it(\"returns undefined for an unknown id\", () => {\n    expect(getPresetById(\"nonexistent\")).toBeUndefined();\n  });\n\n  it(\"all preset IDs in RVAGENT_PRESETS are findable\", () => {\n    for (const p of RVAGENT_PRESETS) {\n      expect(getPresetById(p.id)).toBe(p);\n    }\n  });\n});\n\ndescribe(\"buildPresetUrl\", () => {\n  it(\"uses preset defaultPort when no port override is given\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset)).toBe(`http://localhost:${preset.defaultPort}/sse`);\n  });\n\n  it(\"uses the overridden port\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset, \"localhost\", 9999)).toBe(\"http://localhost:9999/sse\");\n  });\n\n  it(\"uses custom host\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset, \"192.168.1.10\")).toContain(\"192.168.1.10\");\n  });\n});\n\ndescribe(\"buildPresetCliCommand\", () => {\n  it(\"uses --all flag for the all-tools preset\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(\"--all\");\n    expect(cmd).not.toContain(\"--groups\");\n  });\n\n  it(\"uses --groups for presets with specific tool groups\", () => {\n    const preset = getPresetById(\"file-shell\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(\"--groups file,shell\");\n    expect(cmd).not.toContain(\"--all\");\n  });\n\n  it(\"uses custom port in the command\", () => {\n    const preset = getPresetById(\"memory-agent\")!;\n    const cmd = buildPresetCliCommand(preset, 8888);\n    expect(cmd).toContain(\"--port 8888\");\n  });\n\n  it(\"falls back to defaultPort in the command when no port given\", () => {\n    const preset = getPresetById(\"memory-agent\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(`--port ${preset.defaultPort}`);\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "8. `src/lib/components/chat/MarkdownRenderer.svelte.test.ts` — Edge case gaps",
+        "content": "\n**Missing:** XSS via `javascript:` links, empty content, bold/italic inside lists, tables, image rendering, multiple code blocks with language labels.\n\n```typescript\n// Add to existing MarkdownRenderer.svelte.test.ts\n\ndescribe(\"MarkdownRenderer — security\", () => {\n  it(\"strips javascript: href from links\", () => {\n    const { baseElement } = render(MarkdownRenderer, {\n      content: \"[click me](javascript:alert(1))\",\n    });\n    const anchor = baseElement.querySelector(\"a\");\n    expect(anchor?.getAttribute(\"href\")).not.toContain(\"javascript:\");\n  });\n\n  it(\"renders empty content without crashing\", () => {\n    expect(() => render(MarkdownRenderer, { content: \"\" })).not.toThrow();\n  });\n});\n\ndescribe(\"MarkdownRenderer — tables\", () => {\n  it(\"renders a markdown table\", () => {\n    const md = \"| A | B |\\n|---|---|\\n| 1 | 2 |\";\n    const { baseElement } = render(MarkdownRenderer, { content: md });\n    expect(baseElement.querySelector(\"table\")).toBeTruthy();\n    expect(baseElement.querySelector(\"thead\")).toBeTruthy();\n    expect(baseElement.querySelector(\"tbody\")).toBeTruthy();\n  });\n});\n\ndescribe(\"MarkdownRenderer — nested formatting\", () => {\n  it(\"renders bold inside a list item\", () => {\n    const { baseElement } = render(MarkdownRenderer, { content: \"- **bold item**\" });\n    const strong = baseElement.querySelector(\"strong\");\n    expect(strong).toBeTruthy();\n    expect(strong?.textContent).toBe(\"bold item\");\n  });\n\n  it(\"renders multiple fenced code blocks with language labels\", () => {\n    const md = \"```ts\\nconst x = 1;\\n```\\n\\n```py\\nprint('hi')\\n```\";\n    const { baseElement } = render(MarkdownRenderer, { content: md });\n    const codeBlocks = baseElement.querySelectorAll(\"code\");\n    expect(codeBlocks.length).toBeGreaterThanOrEqual(2);\n  });\n});\n\ndescribe(\"MarkdownRenderer — images\", () => {\n  it(\"renders an image with alt text\", () => {\n    const { baseElement } = render(MarkdownRenderer, {\n      content: \"![Alt text](https://example.com/img.png)\",\n    });\n    const img = baseElement.querySelector(\"img\");\n    expect(img).toBeTruthy();\n    expect(img?.getAttribute(\"alt\")).toBe(\"Alt text\");\n  });\n});\n```\n\n---\n\n",
+        "level": 3
+      },
+      {
+        "title": "Summary of Gaps",
+        "content": "| File | Coverage | Priority gaps |\n|---|---|---|\n| `APIClient.ts` | None | Error fallback chain, empty body, query filtering, `handleResponse` |\n| `clickOutside.ts` | None | All branches: outside, inside, nested, update, destroy |\n| `buildPrompt.ts` | None | Preprompt replacement, truncation edge cases (0, undefined) |\n| `createShareLink.ts` | None | 7-char shortcut, API failure, prefix priority |\n| `lock.ts` | Partial | `refreshLock(false)`, mismatched lockId, key isolation |\n| `migrations.ts` | None | Duplicate GUID, lock contention, `runEveryTime`, HuggingChat guard, failure recording |\n| `rvagentPresets.ts` | None | All three exported functions |\n| `MarkdownRenderer` | Partial | XSS links, empty content, tables, images, nested formatting |",
+        "level": 3
+      }
+    ],
+    "codeBlocks": [
+      {
+        "language": "typescript",
+        "code": "// src/lib/APIClient.spec.ts\nimport { describe, it, expect, vi, afterEach } from \"vitest\";\nimport { handleResponse, useAPIClient } from \"./APIClient\";\n\nconst mockFetch = (status: number, body: string | null, ok = status < 400) =>\n  vi.fn().mockResolvedValue({\n    ok,\n    status,\n    text: () => Promise.resolve(body ?? \"\"),\n    json: () => (body ? Promise.resolve(JSON.parse(body)) : Promise.reject(new Error(\"no body\"))),\n    statusText: \"Error\",\n  });\n\ndescribe(\"apiCall — success paths\", () => {\n  it(\"sends GET with no body\", async () => {\n    const fetch = mockFetch(200, '{\"json\":\"body\"}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client[\"public-config\"].get();\n    expect(fetch).toHaveBeenCalledWith(\n      expect.stringContaining(\"/api/v2/public-config\"),\n      expect.objectContaining({ method: \"GET\" })\n    );\n  });\n\n  it(\"attaches query params to GET URL\", async () => {\n    const fetch = mockFetch(200, '{\"x\":1}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client[\"public-config\"].get({ query: { page: 2, skip: undefined } });\n    const url = fetch.mock.calls[0][0] as string;\n    expect(url).toContain(\"page=2\");\n    expect(url).not.toContain(\"skip\");          // undefined values are omitted\n  });\n\n  it(\"returns null data on empty 200 body\", async () => {\n    const fetch = mockFetch(200, \"\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.settings.get();\n    expect(res.data).toBeNull();\n    expect(res.error).toBeNull();\n  });\n\n  it(\"serialises body as JSON for POST\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client.user.settings.post({ theme: \"dark\" });\n    const init = fetch.mock.calls[0][1] as RequestInit;\n    expect(init.headers).toMatchObject({ \"Content-Type\": \"application/json\" });\n    expect(JSON.parse(init.body as string)).toEqual({ theme: \"dark\" });\n  });\n});\n\ndescribe(\"apiCall — error paths\", () => {\n  it(\"returns error with JSON body on 4xx\", async () => {\n    const fetch = mockFetch(400, '{\"message\":\"bad request\"}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toEqual({ message: \"bad request\" });\n    expect(res.data).toBeNull();\n    expect(res.status).toBe(400);\n  });\n\n  it(\"falls back to text when error body is not JSON\", async () => {\n    const fetch = vi.fn().mockResolvedValue({\n      ok: false,\n      status: 500,\n      json: () => Promise.reject(new Error(\"not json\")),\n      text: () => Promise.resolve(\"Internal Server Error\"),\n      statusText: \"ISE\",\n    });\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toBe(\"Internal Server Error\");\n  });\n\n  it(\"falls back to statusText when text() also fails\", async () => {\n    const fetch = vi.fn().mockResolvedValue({\n      ok: false,\n      status: 503,\n      json: () => Promise.reject(new Error()),\n      text: () => Promise.reject(new Error()),\n      statusText: \"Service Unavailable\",\n    });\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toBe(\"Service Unavailable\");\n  });\n});\n\ndescribe(\"handleResponse\", () => {\n  it(\"returns null when data is null and no error\", () => {\n    expect(handleResponse({ data: null, error: null, status: 204 })).toBeNull();\n  });\n\n  it(\"throws when response contains an error\", () => {\n    expect(() =>\n      handleResponse({ data: null, error: { message: \"forbidden\" }, status: 403 })\n    ).toThrow();\n  });\n\n  it(\"parses superjson string data\", () => {\n    const payload = JSON.stringify({ json: { value: 42 }, meta: undefined });\n    expect(handleResponse({ data: payload, error: null, status: 200 })).toEqual({ value: 42 });\n  });\n});\n\ndescribe(\"useAPIClient — URL construction\", () => {\n  it(\"uses provided origin for SSR base URL\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://api.internal:4000\" });\n    await client.export.get();\n    expect(fetch.mock.calls[0][0]).toContain(\"http://api.internal:4000\");\n  });\n\n  it(\"builds nested conversation message endpoint\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client.conversations({ id: \"abc123\" }).message({ messageId: \"msg456\" }).get();\n    expect(fetch.mock.calls[0][0]).toContain(\"/conversations/abc123/message/msg456\");\n  });\n});"
+      },
+      {
+        "language": "typescript",
+        "code": "// src/lib/actions/clickOutside.spec.ts\nimport { describe, it, expect, vi, beforeEach } from \"vitest\";\nimport { clickOutside } from \"./clickOutside\";\n\ndescribe(\"clickOutside action\", () => {\n  let element: HTMLDivElement;\n  let outsideElement: HTMLDivElement;\n  let callback: ReturnType<typeof vi.fn>;\n\n  beforeEach(() => {\n    document.body.innerHTML = \"\";\n    element = document.createElement(\"div\");\n    outsideElement = document.createElement(\"div\");\n    document.body.appendChild(element);\n    document.body.appendChild(outsideElement);\n    callback = vi.fn();\n  });\n\n  it(\"fires callback when clicking outside the element\", () => {\n    clickOutside(element, callback);\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).toHaveBeenCalledOnce();\n  });\n\n  it(\"does not fire callback when clicking inside the element\", () => {\n    clickOutside(element, callback);\n    element.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"does not fire when clicking the element itself\", () => {\n    clickOutside(element, callback);\n    const inner = document.createElement(\"span\");\n    element.appendChild(inner);\n    inner.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"update() replaces the callback\", () => {\n    const action = clickOutside(element, callback);\n    const newCallback = vi.fn();\n    action.update(newCallback);\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n    expect(newCallback).toHaveBeenCalledOnce();\n  });\n\n  it(\"destroy() stops all future callbacks\", () => {\n    const action = clickOutside(element, callback);\n    action.destroy();\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"handles multiple destroy() calls without error\", () => {\n    const action = clickOutside(element, callback);\n    expect(() => { action.destroy(); action.destroy(); }).not.toThrow();\n  });\n});"
+      },
+      {
+        "language": "typescript",
+        "code": "// src/lib/buildPrompt.spec.ts\nimport { describe, it, expect } from \"vitest\";\nimport { buildPrompt } from \"./buildPrompt\";\nimport type { BackendModel } from \"./server/models\";\n\nconst makeModel = (truncate?: number): BackendModel =>\n  ({\n    chatPromptRender: ({ messages, preprompt }: { messages: unknown[]; preprompt?: string }) =>\n      messages.map((m: any) => `${m.role}:${m.content}`).join(\" \"),\n    parameters: truncate !== undefined ? { truncate } : undefined,\n  } as unknown as BackendModel);\n\ndescribe(\"buildPrompt\", () => {\n  it(\"replaces system message content with preprompt when first message is system\", async () => {\n    const model = makeModel(1000);\n    const messages = [\n      { from: \"system\" as const, content: \"old system prompt\" },\n      { from: \"user\" as const, content: \"hello\" },\n    ];\n    const result = await buildPrompt({ messages, model, preprompt: \"new system prompt\" });\n    expect(result).toContain(\"new system prompt\");\n    expect(result).not.toContain(\"old system prompt\");\n  });\n\n  it(\"does not replace content when first message is not system\", async () => {\n    const model = makeModel(1000);\n    const messages = [{ from: \"user\" as const, content: \"hello\" }];\n    await buildPrompt({ messages, model, preprompt: \"some preprompt\" });\n    // original content unchanged\n    expect(messages[0].content).toBe(\"hello\");\n  });\n\n  it(\"does not replace content when preprompt is undefined\", async () => {\n    const model = makeModel(1000);\n    const messages = [{ from: \"system\" as const, content: \"original\" }];\n    await buildPrompt({ messages, model, preprompt: undefined });\n    expect(messages[0].content).toBe(\"original\");\n  });\n\n  it(\"truncates to the last N words when truncate is set\", async () => {\n    const model = makeModel(3);\n    const messages = [{ from: \"user\" as const, content: \"one two three four five\" }];\n    const result = await buildPrompt({ messages, model });\n    const wordCount = result.trim().split(/\\s+/).length;\n    expect(wordCount).toBeLessThanOrEqual(3);\n  });\n\n  it(\"returns full prompt when truncate is 0 (no slicing)\", async () => {\n    const model = makeModel(0);\n    const messages = [{ from: \"user\" as const, content: \"word1 word2 word3\" }];\n    const result = await buildPrompt({ messages, model });\n    // slice(0) returns empty array → join → empty string\n    expect(result).toBe(\"\");\n  });\n\n  it(\"returns full prompt when model has no truncate parameter\", async () => {\n    const model = makeModel(undefined);\n    const messages = [{ from: \"user\" as const, content: \"word1 word2 word3\" }];\n    const result = await buildPrompt({ messages, model });\n    expect(result).toContain(\"word1\");\n  });\n\n  it(\"maps message from to role field\", async () => {\n    const receivedMessages: unknown[] = [];\n    const model = {\n      chatPromptRender: ({ messages }: { messages: unknown[] }) => {\n        receivedMessages.push(...messages);\n        return \"\";\n      },\n      parameters: { truncate: 1000 },\n    } as unknown as BackendModel;\n    await buildPrompt({\n      messages: [{ from: \"assistant\" as const, content: \"hi\" }],\n      model,\n    });\n    expect((receivedMessages[0] as any).role).toBe(\"assistant\");\n  });\n});"
+      },
+      {
+        "language": "typescript",
+        "code": "// src/lib/createShareLink.spec.ts\nimport { describe, it, expect, vi, beforeEach } from \"vitest\";\n\n// Mock SvelteKit modules before importing\nvi.mock(\"$app/paths\", () => ({ base: \"\" }));\nvi.mock(\"$app/state\", () => ({\n  page: {\n    data: { publicConfig: { PUBLIC_SHARE_PREFIX: \"\", PUBLIC_ORIGIN: \"https://app.example.com\" } },\n    url: { origin: \"https://fallback.example.com\" },\n  },\n}));\n\nimport { createShareLink } from \"./createShareLink\";\n\ndescribe(\"createShareLink\", () => {\n  beforeEach(() => {\n    vi.resetAllMocks();\n  });\n\n  it(\"returns share URL directly for 7-char id without fetching\", async () => {\n    const fetchSpy = vi.spyOn(globalThis, \"fetch\");\n    const url = await createShareLink(\"abc1234\");\n    expect(fetchSpy).not.toHaveBeenCalled();\n    expect(url).toBe(\"https://app.example.com/r/abc1234\");\n  });\n\n  it(\"calls the share endpoint for non-7-char ids\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: true,\n      json: () => Promise.resolve({ shareId: \"xyz9876\" }),\n    } as Response);\n    const url = await createShareLink(\"longconversationid\");\n    expect(url).toBe(\"https://app.example.com/r/xyz9876\");\n  });\n\n  it(\"throws when the share endpoint returns non-ok with a text body\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: false,\n      text: () => Promise.resolve(\"Conversation not found\"),\n    } as unknown as Response);\n    await expect(createShareLink(\"longconversationid\")).rejects.toThrow(\"Conversation not found\");\n  });\n\n  it(\"throws generic message when error body is empty\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: false,\n      text: () => Promise.resolve(\"\"),\n    } as unknown as Response);\n    await expect(createShareLink(\"longconversationid\")).rejects.toThrow(\n      \"Failed to create share link\"\n    );\n  });\n\n  it(\"uses PUBLIC_SHARE_PREFIX when set\", async () => {\n    const { page } = await import(\"$app/state\");\n    (page.data.publicConfig as any).PUBLIC_SHARE_PREFIX = \"https://cdn.share.example.com\";\n    const url = await createShareLink(\"abc1234\");\n    expect(url).toStartWith(\"https://cdn.share.example.com\");\n    (page.data.publicConfig as any).PUBLIC_SHARE_PREFIX = \"\";\n  });\n});"
+      },
+      {
+        "language": "typescript",
+        "code": "// Add to src/lib/migrations/migrations.spec.ts (inside the describe block)\n\nit(\"releaseLock does not delete lock held by different id\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  const fakeId = new ObjectId();\n  await releaseLock(Semaphores.TEST_MIGRATION, fakeId);   // wrong id\n  expect(await isDBLocked(Semaphores.TEST_MIGRATION)).toBe(true);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);    // cleanup\n});\n\nit(\"refreshLock returns false when lock does not exist\", async () => {\n  const fakeId = new ObjectId();\n  const result = await refreshLock(Semaphores.TEST_MIGRATION, fakeId);\n  expect(result).toBe(false);\n});\n\nit(\"isDBLocked is key-scoped — one key locked does not affect another\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  expect(await isDBLocked(\"other-key\")).toBe(false);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);\n});\n\nit(\"releaseLock is idempotent — releasing twice does not throw\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);\n  await expect(releaseLock(Semaphores.TEST_MIGRATION, lockId)).resolves.not.toThrow();\n});"
+      },
+      {
+        "language": "typescript",
+        "code": "// src/lib/migrations/checkAndRunMigrations.spec.ts\nimport { beforeEach, describe, expect, it, vi } from \"vitest\";\nimport type { Database } from \"$lib/server/database\";\nimport { Semaphores } from \"$lib/types/Semaphore\";\nimport ObjectId from \"bson-objectid\";\n\n// Stubs for all side-effecting modules\nvi.mock(\"./lock\");\nvi.mock(\"$lib/server/logger\", () => ({ logger: { debug: vi.fn(), error: vi.fn() } }));\nvi.mock(\"$lib/server/config\", () => ({ config: { isHuggingChat: false } }));\n\nimport * as lockModule from \"./lock\";\nimport { checkAndRunMigrations } from \"./migrations\";\n\nconst makeDb = (results: unknown[] = []) => ({\n  getCollections: () => ({\n    migrationResults: {\n      find: () => ({ toArray: () => Promise.resolve(results) }),\n      updateOne: vi.fn().mockResolvedValue({}),\n    },\n  }),\n});\n\nvi.mock(\"$lib/server/database\", () => ({\n  Database: { getInstance: vi.fn() },\n}));\n\nimport { Database } from \"$lib/server/database\";\n\ndescribe(\"checkAndRunMigrations\", () => {\n  beforeEach(() => {\n    vi.clearAllMocks();\n    vi.mocked(Database.getInstance).mockResolvedValue(makeDb() as unknown as Database);\n    vi.mocked(lockModule.acquireLock).mockResolvedValue(new ObjectId());\n    vi.mocked(lockModule.releaseLock).mockResolvedValue(undefined);\n    vi.mocked(lockModule.isDBLocked).mockResolvedValue(false);\n    vi.mocked(lockModule.refreshLock).mockResolvedValue(true);\n  });\n\n  it(\"throws when duplicate migration GUIDs exist\", async () => {\n    // Override routines to inject duplicates — easiest with vi.doMock inside test\n    await expect(async () => {\n      vi.doMock(\"./routines\", () => {\n        const id = new ObjectId();\n        return { migrations: [{ _id: id, name: \"dup\", up: vi.fn() }, { _id: id, name: \"dup2\", up: vi.fn() }] };\n      });\n      const { checkAndRunMigrations: fn } = await import(\"./migrations?dup=1\");\n      await fn();\n    }).rejects.toThrow(\"Duplicate migration GUIDs found\");\n  });\n\n  it(\"waits for DB unlock when lock is already held\", async () => {\n    vi.mocked(lockModule.acquireLock).mockResolvedValueOnce(false);\n    // isDBLocked returns true once, then false to exit the while loop\n    vi.mocked(lockModule.isDBLocked)\n      .mockResolvedValueOnce(true)\n      .mockResolvedValueOnce(false);\n    await checkAndRunMigrations();\n    expect(lockModule.isDBLocked).toHaveBeenCalledWith(Semaphores.MIGRATION);\n  });\n\n  it(\"skips migration already in results\", async () => {\n    const id = new ObjectId();\n    vi.mocked(Database.getInstance).mockResolvedValue(\n      makeDb([{ _id: id, name: \"done\", status: \"success\" }]) as unknown as Database\n    );\n    const upFn = vi.fn().mockResolvedValue(true);\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"done\", up: upFn, runEveryTime: false }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?skip=1\");\n    await fn();\n    expect(upFn).not.toHaveBeenCalled();\n  });\n\n  it(\"records failure status when migration throws\", async () => {\n    const id = new ObjectId();\n    const updateOne = vi.fn().mockResolvedValue({});\n    vi.mocked(Database.getInstance).mockResolvedValue({\n      getCollections: () => ({\n        migrationResults: { find: () => ({ toArray: () => Promise.resolve([]) }), updateOne },\n      }),\n    } as unknown as Database);\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"failing\", up: vi.fn().mockRejectedValue(new Error(\"boom\")) }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?fail=1\");\n    await fn();\n    const lastCall = updateOne.mock.calls.at(-1)?.[1].$set;\n    expect(lastCall?.status).toBe(\"failure\");\n  });\n\n  it(\"skips runForHuggingChat=only migration when not HuggingChat\", async () => {\n    const { config } = await import(\"$lib/server/config\");\n    (config as any).isHuggingChat = false;\n    const upFn = vi.fn().mockResolvedValue(true);\n    const id = new ObjectId();\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"hc-only\", up: upFn, runForHuggingChat: \"only\" }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?hconly=1\");\n    await fn();\n    expect(upFn).not.toHaveBeenCalled();\n  });\n\n  it(\"releases lock and clears interval after all migrations run\", async () => {\n    vi.useFakeTimers();\n    await checkAndRunMigrations();\n    vi.useRealTimers();\n    expect(lockModule.releaseLock).toHaveBeenCalledWith(\n      Semaphores.MIGRATION,\n      expect.any(ObjectId)\n    );\n  });\n});"
+      },
+      {
+        "language": "typescript",
+        "code": "// src/lib/constants/rvagentPresets.spec.ts\nimport { describe, it, expect } from \"vitest\";\nimport {\n  getPresetById,\n  buildPresetUrl,\n  buildPresetCliCommand,\n  RVAGENT_PRESETS,\n} from \"./rvagentPresets\";\n\ndescribe(\"getPresetById\", () => {\n  it(\"returns the matching preset\", () => {\n    const preset = getPresetById(\"all-tools\");\n    expect(preset).toBeDefined();\n    expect(preset?.id).toBe(\"all-tools\");\n  });\n\n  it(\"returns undefined for an unknown id\", () => {\n    expect(getPresetById(\"nonexistent\")).toBeUndefined();\n  });\n\n  it(\"all preset IDs in RVAGENT_PRESETS are findable\", () => {\n    for (const p of RVAGENT_PRESETS) {\n      expect(getPresetById(p.id)).toBe(p);\n    }\n  });\n});\n\ndescribe(\"buildPresetUrl\", () => {\n  it(\"uses preset defaultPort when no port override is given\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset)).toBe(`http://localhost:${preset.defaultPort}/sse`);\n  });\n\n  it(\"uses the overridden port\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset, \"localhost\", 9999)).toBe(\"http://localhost:9999/sse\");\n  });\n\n  it(\"uses custom host\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset, \"192.168.1.10\")).toContain(\"192.168.1.10\");\n  });\n});\n\ndescribe(\"buildPresetCliCommand\", () => {\n  it(\"uses --all flag for the all-tools preset\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(\"--all\");\n    expect(cmd).not.toContain(\"--groups\");\n  });\n\n  it(\"uses --groups for presets with specific tool groups\", () => {\n    const preset = getPresetById(\"file-shell\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(\"--groups file,shell\");\n    expect(cmd).not.toContain(\"--all\");\n  });\n\n  it(\"uses custom port in the command\", () => {\n    const preset = getPresetById(\"memory-agent\")!;\n    const cmd = buildPresetCliCommand(preset, 8888);\n    expect(cmd).toContain(\"--port 8888\");\n  });\n\n  it(\"falls back to defaultPort in the command when no port given\", () => {\n    const preset = getPresetById(\"memory-agent\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(`--port ${preset.defaultPort}`);\n  });\n});"
+      },
+      {
+        "language": "typescript",
+        "code": "// Add to existing MarkdownRenderer.svelte.test.ts\n\ndescribe(\"MarkdownRenderer — security\", () => {\n  it(\"strips javascript: href from links\", () => {\n    const { baseElement } = render(MarkdownRenderer, {\n      content: \"[click me](javascript:alert(1))\",\n    });\n    const anchor = baseElement.querySelector(\"a\");\n    expect(anchor?.getAttribute(\"href\")).not.toContain(\"javascript:\");\n  });\n\n  it(\"renders empty content without crashing\", () => {\n    expect(() => render(MarkdownRenderer, { content: \"\" })).not.toThrow();\n  });\n});\n\ndescribe(\"MarkdownRenderer — tables\", () => {\n  it(\"renders a markdown table\", () => {\n    const md = \"| A | B |\\n|---|---|\\n| 1 | 2 |\";\n    const { baseElement } = render(MarkdownRenderer, { content: md });\n    expect(baseElement.querySelector(\"table\")).toBeTruthy();\n    expect(baseElement.querySelector(\"thead\")).toBeTruthy();\n    expect(baseElement.querySelector(\"tbody\")).toBeTruthy();\n  });\n});\n\ndescribe(\"MarkdownRenderer — nested formatting\", () => {\n  it(\"renders bold inside a list item\", () => {\n    const { baseElement } = render(MarkdownRenderer, { content: \"- **bold item**\" });\n    const strong = baseElement.querySelector(\"strong\");\n    expect(strong).toBeTruthy();\n    expect(strong?.textContent).toBe(\"bold item\");\n  });\n\n  it(\"renders multiple fenced code blocks with language labels\", () => {\n    const md = \""
+      }
+    ]
+  },
+  "durationMs": 141406,
+  "model": "sonnet",
+  "sandboxMode": "permissive",
+  "workerType": "testgaps",
+  "timestamp": "2026-05-05T02:58:33.227Z",
+  "executionId": "testgaps_1777949771821_elw1j4"
+}

package/src/ruvocal/.claude-flow/metrics/codebase-map.json

@@ -0,0 +1,11 @@
+{
+  "timestamp": "2026-05-05T02:48:11.838Z",
+  "projectRoot": "/Users/cohen/Projects/ruflo/ruflo/src/ruvocal",
+  "structure": {
+    "hasPackageJson": true,
+    "hasTsConfig": true,
+    "hasClaudeConfig": true,
+    "hasClaudeFlow": true
+  },
+  "scannedAt": 1777949291838
+}

package/src/ruvocal/.claude-flow/metrics/consolidation.json

@@ -0,0 +1,6 @@
+{
+  "timestamp": "2026-05-05T02:54:11.820Z",
+  "patternsConsolidated": 0,
+  "memoryCleaned": 0,
+  "duplicatesRemoved": 0
+}

package/src/ruvocal/.claude-flow/neural/stats.json

@@ -0,0 +1,6 @@
+{
+  "trajectoriesRecorded": 0,
+  "patternsLearned": 0,
+  "signalsProcessed": 0,
+  "lastAdaptation": null
+}

package/src/ruvocal/.claude-flow/sessions/current.json

@@ -0,0 +1,13 @@
+{
+  "id": "session-1777949290618",
+  "startedAt": "2026-05-05T02:48:10.618Z",
+  "platform": "darwin",
+  "cwd": "/Users/cohen/Projects/ruflo/ruflo/src/ruvocal",
+  "context": {},
+  "metrics": {
+    "edits": 0,
+    "commands": 0,
+    "tasks": 0,
+    "errors": 0
+  }
+}

package/src/ruvocal/.devcontainer/Dockerfile

@@ -1,9 +1,9 @@
-FROM mcr.microsoft.com/devcontainers/typescript-node:1-22-bookworm
-
-# Install MongoDB tools (mongosh, mongorestore, mongodump) directly from MongoDB repository
-RUN curl -fsSL https://www.mongodb.org/static/pgp/server-8.0.asc | gpg --dearmor -o /usr/share/keyrings/mongodb-server-8.0.gpg && \
-    echo "deb [ signed-by=/usr/share/keyrings/mongodb-server-8.0.gpg ] http://repo.mongodb.org/apt/debian bookworm/mongodb-org/8.0 main" | tee /etc/apt/sources.list.d/mongodb-org-8.0.list && \
-    apt-get update && \
-    apt-get install -y mongodb-mongosh mongodb-database-tools vim && \
-    apt-get autoremove -y && \
-    rm -rf /var/lib/apt/lists/*
+FROM mcr.microsoft.com/devcontainers/typescript-node:1-22-bookworm
+
+# Install MongoDB tools (mongosh, mongorestore, mongodump) directly from MongoDB repository
+RUN curl -fsSL https://www.mongodb.org/static/pgp/server-8.0.asc | gpg --dearmor -o /usr/share/keyrings/mongodb-server-8.0.gpg && \
+    echo "deb [ signed-by=/usr/share/keyrings/mongodb-server-8.0.gpg ] http://repo.mongodb.org/apt/debian bookworm/mongodb-org/8.0 main" | tee /etc/apt/sources.list.d/mongodb-org-8.0.list && \
+    apt-get update && \
+    apt-get install -y mongodb-mongosh mongodb-database-tools vim && \
+    apt-get autoremove -y && \
+    rm -rf /var/lib/apt/lists/*

package/src/ruvocal/.devcontainer/devcontainer.json

@@ -1,36 +1,36 @@
-// For format details, see https://aka.ms/devcontainer.json. For config options, see the
-// README at: https://github.com/devcontainers/templates/tree/main/src/typescript-node
-{
-	"name": "Node.js & TypeScript",
-	// Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
-	"build": {
-		"dockerfile": "Dockerfile"
-	},
-
-	"customizations": {
-		"vscode": {
-			"extensions": ["esbenp.prettier-vscode", "dbaeumer.vscode-eslint", "svelte.svelte-vscode"]
-		}
-	},
-
-	"features": {
-		// Install docker in container
-		"ghcr.io/devcontainers/features/docker-in-docker:2": {
-			// Use proprietary docker engine. I get a timeout error when using the default moby engine and loading
-			// microsoft's PGP keys
-			"moby": false
-		}
-	}
-
-	// Use 'forwardPorts' to make a list of ports inside the container available locally.
-	// "forwardPorts": [],
-
-	// Use 'postCreateCommand' to run commands after the container is created.
-	// "postCreateCommand": "yarn install",
-
-	// Configure tool-specific properties.
-	// "customizations": {},
-
-	// Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
-	// "remoteUser": "root"
-}
+// For format details, see https://aka.ms/devcontainer.json. For config options, see the
+// README at: https://github.com/devcontainers/templates/tree/main/src/typescript-node
+{
+	"name": "Node.js & TypeScript",
+	// Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
+	"build": {
+		"dockerfile": "Dockerfile"
+	},
+
+	"customizations": {
+		"vscode": {
+			"extensions": ["esbenp.prettier-vscode", "dbaeumer.vscode-eslint", "svelte.svelte-vscode"]
+		}
+	},
+
+	"features": {
+		// Install docker in container
+		"ghcr.io/devcontainers/features/docker-in-docker:2": {
+			// Use proprietary docker engine. I get a timeout error when using the default moby engine and loading
+			// microsoft's PGP keys
+			"moby": false
+		}
+	}
+
+	// Use 'forwardPorts' to make a list of ports inside the container available locally.
+	// "forwardPorts": [],
+
+	// Use 'postCreateCommand' to run commands after the container is created.
+	// "postCreateCommand": "yarn install",
+
+	// Configure tool-specific properties.
+	// "customizations": {},
+
+	// Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
+	// "remoteUser": "root"
+}

package/src/ruvocal/.dockerignore

@@ -1,17 +1,17 @@
-Dockerfile
-.vscode/
-.idea
-.gitignore
-LICENSE
-README.md
-node_modules/
-.svelte-kit/
-.env*
-!.env
-.env.local
-db
-# NOTE: previously had `models/**` here to ignore a top-level placeholder
-# directory. Even when anchored (`/models/**`), Docker's pattern matcher
-# was eliding nested src/routes/api/v2/models/ and src/routes/models/
-# from the build context, producing prod images missing those routes.
+Dockerfile
+.vscode/
+.idea
+.gitignore
+LICENSE
+README.md
+node_modules/
+.svelte-kit/
+.env*
+!.env
+.env.local
+db
+# NOTE: previously had `models/**` here to ignore a top-level placeholder
+# directory. Even when anchored (`/models/**`), Docker's pattern matcher
+# was eliding nested src/routes/api/v2/models/ and src/routes/models/
+# from the build context, producing prod images missing those routes.
 # The placeholder dir is small (single .txt) — letting it through is fine.

package/src/ruvocal/.eslintignore

@@ -1,13 +1,13 @@
-.DS_Store
-node_modules
-/build
-/.svelte-kit
-/package
-.env
-.env.*
-!.env.example
-
-# Ignore files for PNPM, NPM and YARN
-pnpm-lock.yaml
-package-lock.json
-yarn.lock
+.DS_Store
+node_modules
+/build
+/.svelte-kit
+/package
+.env
+.env.*
+!.env.example
+
+# Ignore files for PNPM, NPM and YARN
+pnpm-lock.yaml
+package-lock.json
+yarn.lock

package/src/ruvocal/.eslintrc.cjs

@@ -1,45 +1,45 @@
-module.exports = {
-	root: true,
-	parser: "@typescript-eslint/parser",
-	extends: [
-		"eslint:recommended",
-		"plugin:@typescript-eslint/recommended",
-		"plugin:svelte/recommended",
-		"prettier",
-	],
-	plugins: ["@typescript-eslint"],
-	ignorePatterns: ["*.cjs"],
-	overrides: [
-		{
-			files: ["*.svelte"],
-			parser: "svelte-eslint-parser",
-			parserOptions: {
-				parser: "@typescript-eslint/parser",
-			},
-		},
-	],
-	parserOptions: {
-		sourceType: "module",
-		ecmaVersion: 2020,
-		extraFileExtensions: [".svelte"],
-	},
-	rules: {
-		"no-empty": "off",
-		"require-yield": "off",
-		"@typescript-eslint/no-explicit-any": "error",
-		"@typescript-eslint/no-non-null-assertion": "error",
-		"@typescript-eslint/no-unused-vars": [
-			// prevent variables with a _ prefix from being marked as unused
-			"error",
-			{
-				argsIgnorePattern: "^_",
-			},
-		],
-		"object-shorthand": ["error", "always"],
-	},
-	env: {
-		browser: true,
-		es2017: true,
-		node: true,
-	},
-};
+module.exports = {
+	root: true,
+	parser: "@typescript-eslint/parser",
+	extends: [
+		"eslint:recommended",
+		"plugin:@typescript-eslint/recommended",
+		"plugin:svelte/recommended",
+		"prettier",
+	],
+	plugins: ["@typescript-eslint"],
+	ignorePatterns: ["*.cjs"],
+	overrides: [
+		{
+			files: ["*.svelte"],
+			parser: "svelte-eslint-parser",
+			parserOptions: {
+				parser: "@typescript-eslint/parser",
+			},
+		},
+	],
+	parserOptions: {
+		sourceType: "module",
+		ecmaVersion: 2020,
+		extraFileExtensions: [".svelte"],
+	},
+	rules: {
+		"no-empty": "off",
+		"require-yield": "off",
+		"@typescript-eslint/no-explicit-any": "error",
+		"@typescript-eslint/no-non-null-assertion": "error",
+		"@typescript-eslint/no-unused-vars": [
+			// prevent variables with a _ prefix from being marked as unused
+			"error",
+			{
+				argsIgnorePattern: "^_",
+			},
+		],
+		"object-shorthand": ["error", "always"],
+	},
+	env: {
+		browser: true,
+		es2017: true,
+		node: true,
+	},
+};

package/src/ruvocal/.gcloudignore

@@ -1,18 +1,18 @@
-# gcloud builds submit upload filter.
-# Without this file, gcloud falls back to .gitignore, which has
-# `models/*` (line 16) — that excludes src/routes/api/v2/models/*
-# and src/routes/models/* from the build context, producing
-# production images missing those SvelteKit routes (root cause
-# of /api/v2/models 404 → /favicon 500 → / 500 in Cloud Run).
-
-.git/
-.gitignore
-.dockerignore
-.gcloudignore
-node_modules/
-.svelte-kit/
-build/
-.env.local
-.vscode/
-.idea/
-*.log
+# gcloud builds submit upload filter.
+# Without this file, gcloud falls back to .gitignore, which has
+# `models/*` (line 16) — that excludes src/routes/api/v2/models/*
+# and src/routes/models/* from the build context, producing
+# production images missing those SvelteKit routes (root cause
+# of /api/v2/models 404 → /favicon 500 → / 500 in Cloud Run).
+
+.git/
+.gitignore
+.dockerignore
+.gcloudignore
+node_modules/
+.svelte-kit/
+build/
+.env.local
+.vscode/
+.idea/
+*.log