ruflo 3.6.30 → 3.7.0-alpha.10

package/src/ruvocal/.claude-flow/logs/headless/testgaps_1777949771821_elw1j4_result.log

@@ -1,100 +0,0 @@
-[2026-05-05T02:58:33.227Z] RESULT
-============================================================
-{
-  "success": true,
-  "output": "Here is the full coverage gap analysis with test skeletons for each area.\n\n---\n\n## Test Coverage Gap Analysis\n\n### 1. `src/lib/APIClient.ts` — Zero test coverage\n\n**Untested:** `apiCall` (all branches), `handleResponse`, query param serialization, error body parsing fallback chain, ObjectId superjson registration.\n\n```typescript\n// src/lib/APIClient.spec.ts\nimport { describe, it, expect, vi, afterEach } from \"vitest\";\nimport { handleResponse, useAPIClient } from \"./APIClient\";\n\nconst mockFetch = (status: number, body: string | null, ok = status < 400) =>\n  vi.fn().mockResolvedValue({\n    ok,\n    status,\n    text: () => Promise.resolve(body ?? \"\"),\n    json: () => (body ? Promise.resolve(JSON.parse(body)) : Promise.reject(new Error(\"no body\"))),\n    statusText: \"Error\",\n  });\n\ndescribe(\"apiCall — success paths\", () => {\n  it(\"sends GET with no body\", async () => {\n    const fetch = mockFetch(200, '{\"json\":\"body\"}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client[\"public-config\"].get();\n    expect(fetch).toHaveBeenCalledWith(\n      expect.stringContaining(\"/api/v2/public-config\"),\n      expect.objectContaining({ method: \"GET\" })\n    );\n  });\n\n  it(\"attaches query params to GET URL\", async () => {\n    const fetch = mockFetch(200, '{\"x\":1}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client[\"public-config\"].get({ query: { page: 2, skip: undefined } });\n    const url = fetch.mock.calls[0][0] as string;\n    expect(url).toContain(\"page=2\");\n    expect(url).not.toContain(\"skip\");          // undefined values are omitted\n  });\n\n  it(\"returns null data on empty 200 body\", async () => {\n    const fetch = mockFetch(200, \"\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.settings.get();\n    expect(res.data).toBeNull();\n    expect(res.error).toBeNull();\n  });\n\n  it(\"serialises body as JSON for POST\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client.user.settings.post({ theme: \"dark\" });\n    const init = fetch.mock.calls[0][1] as RequestInit;\n    expect(init.headers).toMatchObject({ \"Content-Type\": \"application/json\" });\n    expect(JSON.parse(init.body as string)).toEqual({ theme: \"dark\" });\n  });\n});\n\ndescribe(\"apiCall — error paths\", () => {\n  it(\"returns error with JSON body on 4xx\", async () => {\n    const fetch = mockFetch(400, '{\"message\":\"bad request\"}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toEqual({ message: \"bad request\" });\n    expect(res.data).toBeNull();\n    expect(res.status).toBe(400);\n  });\n\n  it(\"falls back to text when error body is not JSON\", async () => {\n    const fetch = vi.fn().mockResolvedValue({\n      ok: false,\n      status: 500,\n      json: () => Promise.reject(new Error(\"not json\")),\n      text: () => Promise.resolve(\"Internal Server Error\"),\n      statusText: \"ISE\",\n    });\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toBe(\"Internal Server Error\");\n  });\n\n  it(\"falls back to statusText when text() also fails\", async () => {\n    const fetch = vi.fn().mockResolvedValue({\n      ok: false,\n      status: 503,\n      json: () => Promise.reject(new Error()),\n      text: () => Promise.reject(new Error()),\n      statusText: \"Service Unavailable\",\n    });\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toBe(\"Service Unavailable\");\n  });\n});\n\ndescribe(\"handleResponse\", () => {\n  it(\"returns null when data is null and no error\", () => {\n    expect(handleResponse({ data: null, error: null, status: 204 })).toBeNull();\n  });\n\n  it(\"throws when response contains an error\", () => {\n    expect(() =>\n      handleResponse({ data: null, error: { message: \"forbidden\" }, status: 403 })\n    ).toThrow();\n  });\n\n  it(\"parses superjson string data\", () => {\n    const payload = JSON.stringify({ json: { value: 42 }, meta: undefined });\n    expect(handleResponse({ data: payload, error: null, status: 200 })).toEqual({ value: 42 });\n  });\n});\n\ndescribe(\"useAPIClient — URL construction\", () => {\n  it(\"uses provided origin for SSR base URL\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://api.internal:4000\" });\n    await client.export.get();\n    expect(fetch.mock.calls[0][0]).toContain(\"http://api.internal:4000\");\n  });\n\n  it(\"builds nested conversation message endpoint\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client.conversations({ id: \"abc123\" }).message({ messageId: \"msg456\" }).get();\n    expect(fetch.mock.calls[0][0]).toContain(\"/conversations/abc123/message/msg456\");\n  });\n});\n```\n\n---\n\n### 2. `src/lib/actions/clickOutside.ts` — Zero test coverage\n\n**Untested:** click outside triggers callback, click inside does not, `update` replaces callback, `destroy` removes listener.\n\n```typescript\n// src/lib/actions/clickOutside.spec.ts\nimport { describe, it, expect, vi, beforeEach } from \"vitest\";\nimport { clickOutside } from \"./clickOutside\";\n\ndescribe(\"clickOutside action\", () => {\n  let element: HTMLDivElement;\n  let outsideElement: HTMLDivElement;\n  let callback: ReturnType<typeof vi.fn>;\n\n  beforeEach(() => {\n    document.body.innerHTML = \"\";\n    element = document.createElement(\"div\");\n    outsideElement = document.createElement(\"div\");\n    document.body.appendChild(element);\n    document.body.appendChild(outsideElement);\n    callback = vi.fn();\n  });\n\n  it(\"fires callback when clicking outside the element\", () => {\n    clickOutside(element, callback);\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).toHaveBeenCalledOnce();\n  });\n\n  it(\"does not fire callback when clicking inside the element\", () => {\n    clickOutside(element, callback);\n    element.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"does not fire when clicking the element itself\", () => {\n    clickOutside(element, callback);\n    const inner = document.createElement(\"span\");\n    element.appendChild(inner);\n    inner.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"update() replaces the callback\", () => {\n    const action = clickOutside(element, callback);\n    const newCallback = vi.fn();\n    action.update(newCallback);\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n    expect(newCallback).toHaveBeenCalledOnce();\n  });\n\n  it(\"destroy() stops all future callbacks\", () => {\n    const action = clickOutside(element, callback);\n    action.destroy();\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"handles multiple destroy() calls without error\", () => {\n    const action = clickOutside(element, callback);\n    expect(() => { action.destroy(); action.destroy(); }).not.toThrow();\n  });\n});\n```\n\n---\n\n### 3. `src/lib/buildPrompt.ts` — Zero test coverage\n\n**Untested:** system message replacement with preprompt, no system message scenario, truncation slicing, zero truncate parameter (no slicing).\n\n```typescript\n// src/lib/buildPrompt.spec.ts\nimport { describe, it, expect } from \"vitest\";\nimport { buildPrompt } from \"./buildPrompt\";\nimport type { BackendModel } from \"./server/models\";\n\nconst makeModel = (truncate?: number): BackendModel =>\n  ({\n    chatPromptRender: ({ messages, preprompt }: { messages: unknown[]; preprompt?: string }) =>\n      messages.map((m: any) => `${m.role}:${m.content}`).join(\" \"),\n    parameters: truncate !== undefined ? { truncate } : undefined,\n  } as unknown as BackendModel);\n\ndescribe(\"buildPrompt\", () => {\n  it(\"replaces system message content with preprompt when first message is system\", async () => {\n    const model = makeModel(1000);\n    const messages = [\n      { from: \"system\" as const, content: \"old system prompt\" },\n      { from: \"user\" as const, content: \"hello\" },\n    ];\n    const result = await buildPrompt({ messages, model, preprompt: \"new system prompt\" });\n    expect(result).toContain(\"new system prompt\");\n    expect(result).not.toContain(\"old system prompt\");\n  });\n\n  it(\"does not replace content when first message is not system\", async () => {\n    const model = makeModel(1000);\n    const messages = [{ from: \"user\" as const, content: \"hello\" }];\n    await buildPrompt({ messages, model, preprompt: \"some preprompt\" });\n    // original content unchanged\n    expect(messages[0].content).toBe(\"hello\");\n  });\n\n  it(\"does not replace content when preprompt is undefined\", async () => {\n    const model = makeModel(1000);\n    const messages = [{ from: \"system\" as const, content: \"original\" }];\n    await buildPrompt({ messages, model, preprompt: undefined });\n    expect(messages[0].content).toBe(\"original\");\n  });\n\n  it(\"truncates to the last N words when truncate is set\", async () => {\n    const model = makeModel(3);\n    const messages = [{ from: \"user\" as const, content: \"one two three four five\" }];\n    const result = await buildPrompt({ messages, model });\n    const wordCount = result.trim().split(/\\s+/).length;\n    expect(wordCount).toBeLessThanOrEqual(3);\n  });\n\n  it(\"returns full prompt when truncate is 0 (no slicing)\", async () => {\n    const model = makeModel(0);\n    const messages = [{ from: \"user\" as const, content: \"word1 word2 word3\" }];\n    const result = await buildPrompt({ messages, model });\n    // slice(0) returns empty array → join → empty string\n    expect(result).toBe(\"\");\n  });\n\n  it(\"returns full prompt when model has no truncate parameter\", async () => {\n    const model = makeModel(undefined);\n    const messages = [{ from: \"user\" as const, content: \"word1 word2 word3\" }];\n    const result = await buildPrompt({ messages, model });\n    expect(result).toContain(\"word1\");\n  });\n\n  it(\"maps message from to role field\", async () => {\n    const receivedMessages: unknown[] = [];\n    const model = {\n      chatPromptRender: ({ messages }: { messages: unknown[] }) => {\n        receivedMessages.push(...messages);\n        return \"\";\n      },\n      parameters: { truncate: 1000 },\n    } as unknown as BackendModel;\n    await buildPrompt({\n      messages: [{ from: \"assistant\" as const, content: \"hi\" }],\n      model,\n    });\n    expect((receivedMessages[0] as any).role).toBe(\"assistant\");\n  });\n});\n```\n\n---\n\n### 4. `src/lib/createShareLink.ts` — Zero test coverage\n\n**Untested:** 7-char ID shortcut path, successful API call, API failure with text body, API failure with empty body, URL prefix priority logic.\n\n```typescript\n// src/lib/createShareLink.spec.ts\nimport { describe, it, expect, vi, beforeEach } from \"vitest\";\n\n// Mock SvelteKit modules before importing\nvi.mock(\"$app/paths\", () => ({ base: \"\" }));\nvi.mock(\"$app/state\", () => ({\n  page: {\n    data: { publicConfig: { PUBLIC_SHARE_PREFIX: \"\", PUBLIC_ORIGIN: \"https://app.example.com\" } },\n    url: { origin: \"https://fallback.example.com\" },\n  },\n}));\n\nimport { createShareLink } from \"./createShareLink\";\n\ndescribe(\"createShareLink\", () => {\n  beforeEach(() => {\n    vi.resetAllMocks();\n  });\n\n  it(\"returns share URL directly for 7-char id without fetching\", async () => {\n    const fetchSpy = vi.spyOn(globalThis, \"fetch\");\n    const url = await createShareLink(\"abc1234\");\n    expect(fetchSpy).not.toHaveBeenCalled();\n    expect(url).toBe(\"https://app.example.com/r/abc1234\");\n  });\n\n  it(\"calls the share endpoint for non-7-char ids\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: true,\n      json: () => Promise.resolve({ shareId: \"xyz9876\" }),\n    } as Response);\n    const url = await createShareLink(\"longconversationid\");\n    expect(url).toBe(\"https://app.example.com/r/xyz9876\");\n  });\n\n  it(\"throws when the share endpoint returns non-ok with a text body\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: false,\n      text: () => Promise.resolve(\"Conversation not found\"),\n    } as unknown as Response);\n    await expect(createShareLink(\"longconversationid\")).rejects.toThrow(\"Conversation not found\");\n  });\n\n  it(\"throws generic message when error body is empty\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: false,\n      text: () => Promise.resolve(\"\"),\n    } as unknown as Response);\n    await expect(createShareLink(\"longconversationid\")).rejects.toThrow(\n      \"Failed to create share link\"\n    );\n  });\n\n  it(\"uses PUBLIC_SHARE_PREFIX when set\", async () => {\n    const { page } = await import(\"$app/state\");\n    (page.data.publicConfig as any).PUBLIC_SHARE_PREFIX = \"https://cdn.share.example.com\";\n    const url = await createShareLink(\"abc1234\");\n    expect(url).toStartWith(\"https://cdn.share.example.com\");\n    (page.data.publicConfig as any).PUBLIC_SHARE_PREFIX = \"\";\n  });\n});\n```\n\n---\n\n### 5. `src/lib/migrations/lock.ts` — Gaps in existing tests\n\nThe existing suite covers the happy path and concurrent acquisition. Missing:\n\n| Gap | Why it matters |\n|---|---|\n| `releaseLock` with mismatched `lockId` | Should not delete the wrong lock |\n| `refreshLock` on a non-existent lock | Returns `false` — not asserted anywhere |\n| `isDBLocked` with a different key | Isolation between semaphore keys |\n| `releaseLock` when lock already released | Should be idempotent |\n\n```typescript\n// Add to src/lib/migrations/migrations.spec.ts (inside the describe block)\n\nit(\"releaseLock does not delete lock held by different id\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  const fakeId = new ObjectId();\n  await releaseLock(Semaphores.TEST_MIGRATION, fakeId);   // wrong id\n  expect(await isDBLocked(Semaphores.TEST_MIGRATION)).toBe(true);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);    // cleanup\n});\n\nit(\"refreshLock returns false when lock does not exist\", async () => {\n  const fakeId = new ObjectId();\n  const result = await refreshLock(Semaphores.TEST_MIGRATION, fakeId);\n  expect(result).toBe(false);\n});\n\nit(\"isDBLocked is key-scoped — one key locked does not affect another\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  expect(await isDBLocked(\"other-key\")).toBe(false);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);\n});\n\nit(\"releaseLock is idempotent — releasing twice does not throw\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);\n  await expect(releaseLock(Semaphores.TEST_MIGRATION, lockId)).resolves.not.toThrow();\n});\n```\n\n---\n\n### 6. `src/lib/migrations/migrations.ts` — Zero test coverage for `checkAndRunMigrations`\n\n**Untested:** duplicate GUID detection, lock contention wait-loop, `runEveryTime`, `runForHuggingChat` guards, migration failure recording, lock refresh interval, lock release on completion.\n\n```typescript\n// src/lib/migrations/checkAndRunMigrations.spec.ts\nimport { beforeEach, describe, expect, it, vi } from \"vitest\";\nimport type { Database } from \"$lib/server/database\";\nimport { Semaphores } from \"$lib/types/Semaphore\";\nimport ObjectId from \"bson-objectid\";\n\n// Stubs for all side-effecting modules\nvi.mock(\"./lock\");\nvi.mock(\"$lib/server/logger\", () => ({ logger: { debug: vi.fn(), error: vi.fn() } }));\nvi.mock(\"$lib/server/config\", () => ({ config: { isHuggingChat: false } }));\n\nimport * as lockModule from \"./lock\";\nimport { checkAndRunMigrations } from \"./migrations\";\n\nconst makeDb = (results: unknown[] = []) => ({\n  getCollections: () => ({\n    migrationResults: {\n      find: () => ({ toArray: () => Promise.resolve(results) }),\n      updateOne: vi.fn().mockResolvedValue({}),\n    },\n  }),\n});\n\nvi.mock(\"$lib/server/database\", () => ({\n  Database: { getInstance: vi.fn() },\n}));\n\nimport { Database } from \"$lib/server/database\";\n\ndescribe(\"checkAndRunMigrations\", () => {\n  beforeEach(() => {\n    vi.clearAllMocks();\n    vi.mocked(Database.getInstance).mockResolvedValue(makeDb() as unknown as Database);\n    vi.mocked(lockModule.acquireLock).mockResolvedValue(new ObjectId());\n    vi.mocked(lockModule.releaseLock).mockResolvedValue(undefined);\n    vi.mocked(lockModule.isDBLocked).mockResolvedValue(false);\n    vi.mocked(lockModule.refreshLock).mockResolvedValue(true);\n  });\n\n  it(\"throws when duplicate migration GUIDs exist\", async () => {\n    // Override routines to inject duplicates — easiest with vi.doMock inside test\n    await expect(async () => {\n      vi.doMock(\"./routines\", () => {\n        const id = new ObjectId();\n        return { migrations: [{ _id: id, name: \"dup\", up: vi.fn() }, { _id: id, name: \"dup2\", up: vi.fn() }] };\n      });\n      const { checkAndRunMigrations: fn } = await import(\"./migrations?dup=1\");\n      await fn();\n    }).rejects.toThrow(\"Duplicate migration GUIDs found\");\n  });\n\n  it(\"waits for DB unlock when lock is already held\", async () => {\n    vi.mocked(lockModule.acquireLock).mockResolvedValueOnce(false);\n    // isDBLocked returns true once, then false to exit the while loop\n    vi.mocked(lockModule.isDBLocked)\n      .mockResolvedValueOnce(true)\n      .mockResolvedValueOnce(false);\n    await checkAndRunMigrations();\n    expect(lockModule.isDBLocked).toHaveBeenCalledWith(Semaphores.MIGRATION);\n  });\n\n  it(\"skips migration already in results\", async () => {\n    const id = new ObjectId();\n    vi.mocked(Database.getInstance).mockResolvedValue(\n      makeDb([{ _id: id, name: \"done\", status: \"success\" }]) as unknown as Database\n    );\n    const upFn = vi.fn().mockResolvedValue(true);\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"done\", up: upFn, runEveryTime: false }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?skip=1\");\n    await fn();\n    expect(upFn).not.toHaveBeenCalled();\n  });\n\n  it(\"records failure status when migration throws\", async () => {\n    const id = new ObjectId();\n    const updateOne = vi.fn().mockResolvedValue({});\n    vi.mocked(Database.getInstance).mockResolvedValue({\n      getCollections: () => ({\n        migrationResults: { find: () => ({ toArray: () => Promise.resolve([]) }), updateOne },\n      }),\n    } as unknown as Database);\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"failing\", up: vi.fn().mockRejectedValue(new Error(\"boom\")) }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?fail=1\");\n    await fn();\n    const lastCall = updateOne.mock.calls.at(-1)?.[1].$set;\n    expect(lastCall?.status).toBe(\"failure\");\n  });\n\n  it(\"skips runForHuggingChat=only migration when not HuggingChat\", async () => {\n    const { config } = await import(\"$lib/server/config\");\n    (config as any).isHuggingChat = false;\n    const upFn = vi.fn().mockResolvedValue(true);\n    const id = new ObjectId();\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"hc-only\", up: upFn, runForHuggingChat: \"only\" }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?hconly=1\");\n    await fn();\n    expect(upFn).not.toHaveBeenCalled();\n  });\n\n  it(\"releases lock and clears interval after all migrations run\", async () => {\n    vi.useFakeTimers();\n    await checkAndRunMigrations();\n    vi.useRealTimers();\n    expect(lockModule.releaseLock).toHaveBeenCalledWith(\n      Semaphores.MIGRATION,\n      expect.any(ObjectId)\n    );\n  });\n});\n```\n\n---\n\n### 7. `src/lib/constants/rvagentPresets.ts` — Utility functions untested\n\n**Untested:** `getPresetById`, `buildPresetUrl`, `buildPresetCliCommand`.\n\n```typescript\n// src/lib/constants/rvagentPresets.spec.ts\nimport { describe, it, expect } from \"vitest\";\nimport {\n  getPresetById,\n  buildPresetUrl,\n  buildPresetCliCommand,\n  RVAGENT_PRESETS,\n} from \"./rvagentPresets\";\n\ndescribe(\"getPresetById\", () => {\n  it(\"returns the matching preset\", () => {\n    const preset = getPresetById(\"all-tools\");\n    expect(preset).toBeDefined();\n    expect(preset?.id).toBe(\"all-tools\");\n  });\n\n  it(\"returns undefined for an unknown id\", () => {\n    expect(getPresetById(\"nonexistent\")).toBeUndefined();\n  });\n\n  it(\"all preset IDs in RVAGENT_PRESETS are findable\", () => {\n    for (const p of RVAGENT_PRESETS) {\n      expect(getPresetById(p.id)).toBe(p);\n    }\n  });\n});\n\ndescribe(\"buildPresetUrl\", () => {\n  it(\"uses preset defaultPort when no port override is given\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset)).toBe(`http://localhost:${preset.defaultPort}/sse`);\n  });\n\n  it(\"uses the overridden port\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset, \"localhost\", 9999)).toBe(\"http://localhost:9999/sse\");\n  });\n\n  it(\"uses custom host\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset, \"192.168.1.10\")).toContain(\"192.168.1.10\");\n  });\n});\n\ndescribe(\"buildPresetCliCommand\", () => {\n  it(\"uses --all flag for the all-tools preset\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(\"--all\");\n    expect(cmd).not.toContain(\"--groups\");\n  });\n\n  it(\"uses --groups for presets with specific tool groups\", () => {\n    const preset = getPresetById(\"file-shell\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(\"--groups file,shell\");\n    expect(cmd).not.toContain(\"--all\");\n  });\n\n  it(\"uses custom port in the command\", () => {\n    const preset = getPresetById(\"memory-agent\")!;\n    const cmd = buildPresetCliCommand(preset, 8888);\n    expect(cmd).toContain(\"--port 8888\");\n  });\n\n  it(\"falls back to defaultPort in the command when no port given\", () => {\n    const preset = getPresetById(\"memory-agent\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(`--port ${preset.defaultPort}`);\n  });\n});\n```\n\n---\n\n### 8. `src/lib/components/chat/MarkdownRenderer.svelte.test.ts` — Edge case gaps\n\n**Missing:** XSS via `javascript:` links, empty content, bold/italic inside lists, tables, image rendering, multiple code blocks with language labels.\n\n```typescript\n// Add to existing MarkdownRenderer.svelte.test.ts\n\ndescribe(\"MarkdownRenderer — security\", () => {\n  it(\"strips javascript: href from links\", () => {\n    const { baseElement } = render(MarkdownRenderer, {\n      content: \"[click me](javascript:alert(1))\",\n    });\n    const anchor = baseElement.querySelector(\"a\");\n    expect(anchor?.getAttribute(\"href\")).not.toContain(\"javascript:\");\n  });\n\n  it(\"renders empty content without crashing\", () => {\n    expect(() => render(MarkdownRenderer, { content: \"\" })).not.toThrow();\n  });\n});\n\ndescribe(\"MarkdownRenderer — tables\", () => {\n  it(\"renders a markdown table\", () => {\n    const md = \"| A | B |\\n|---|---|\\n| 1 | 2 |\";\n    const { baseElement } = render(MarkdownRenderer, { content: md });\n    expect(baseElement.querySelector(\"table\")).toBeTruthy();\n    expect(baseElement.querySelector(\"thead\")).toBeTruthy();\n    expect(baseElement.querySelector(\"tbody\")).toBeTruthy();\n  });\n});\n\ndescribe(\"MarkdownRenderer — nested formatting\", () => {\n  it(\"renders bold inside a list item\", () => {\n    const { baseElement } = render(MarkdownRenderer, { content: \"- **bold item**\" });\n    const strong = baseElement.querySelector(\"strong\");\n    expect(strong).toBeTruthy();\n    expect(strong?.textContent).toBe(\"bold item\");\n  });\n\n  it(\"renders multiple fenced code blocks with language labels\", () => {\n    const md = \"```ts\\nconst x = 1;\\n```\\n\\n```py\\nprint('hi')\\n```\";\n    const { baseElement } = render(MarkdownRenderer, { content: md });\n    const codeBlocks = baseElement.querySelectorAll(\"code\");\n    expect(codeBlocks.length).toBeGreaterThanOrEqual(2);\n  });\n});\n\ndescribe(\"MarkdownRenderer — images\", () => {\n  it(\"renders an image with alt text\", () => {\n    const { baseElement } = render(MarkdownRenderer, {\n      content: \"![Alt text](https://example.com/img.png)\",\n    });\n    const img = baseElement.querySelector(\"img\");\n    expect(img).toBeTruthy();\n    expect(img?.getAttribute(\"alt\")).toBe(\"Alt text\");\n  });\n});\n```\n\n---\n\n### Summary of Gaps\n\n| File | Coverage | Priority gaps |\n|---|---|---|\n| `APIClient.ts` | None | Error fallback chain, empty body, query filtering, `handleResponse` |\n| `clickOutside.ts` | None | All branches: outside, inside, nested, update, destroy |\n| `buildPrompt.ts` | None | Preprompt replacement, truncation edge cases (0, undefined) |\n| `createShareLink.ts` | None | 7-char shortcut, API failure, prefix priority |\n| `lock.ts` | Partial | `refreshLock(false)`, mismatched lockId, key isolation |\n| `migrations.ts` | None | Duplicate GUID, lock contention, `runEveryTime`, HuggingChat guard, failure recording |\n| `rvagentPresets.ts` | None | All three exported functions |\n| `MarkdownRenderer` | Partial | XSS links, empty content, tables, images, nested formatting |\n",
-  "parsedOutput": {
-    "sections": [
-      {
-        "title": "Test Coverage Gap Analysis",
-        "content": "\n",
-        "level": 2
-      },
-      {
-        "title": "1. `src/lib/APIClient.ts` — Zero test coverage",
-        "content": "\n**Untested:** `apiCall` (all branches), `handleResponse`, query param serialization, error body parsing fallback chain, ObjectId superjson registration.\n\n```typescript\n// src/lib/APIClient.spec.ts\nimport { describe, it, expect, vi, afterEach } from \"vitest\";\nimport { handleResponse, useAPIClient } from \"./APIClient\";\n\nconst mockFetch = (status: number, body: string | null, ok = status < 400) =>\n  vi.fn().mockResolvedValue({\n    ok,\n    status,\n    text: () => Promise.resolve(body ?? \"\"),\n    json: () => (body ? Promise.resolve(JSON.parse(body)) : Promise.reject(new Error(\"no body\"))),\n    statusText: \"Error\",\n  });\n\ndescribe(\"apiCall — success paths\", () => {\n  it(\"sends GET with no body\", async () => {\n    const fetch = mockFetch(200, '{\"json\":\"body\"}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client[\"public-config\"].get();\n    expect(fetch).toHaveBeenCalledWith(\n      expect.stringContaining(\"/api/v2/public-config\"),\n      expect.objectContaining({ method: \"GET\" })\n    );\n  });\n\n  it(\"attaches query params to GET URL\", async () => {\n    const fetch = mockFetch(200, '{\"x\":1}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client[\"public-config\"].get({ query: { page: 2, skip: undefined } });\n    const url = fetch.mock.calls[0][0] as string;\n    expect(url).toContain(\"page=2\");\n    expect(url).not.toContain(\"skip\");          // undefined values are omitted\n  });\n\n  it(\"returns null data on empty 200 body\", async () => {\n    const fetch = mockFetch(200, \"\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.settings.get();\n    expect(res.data).toBeNull();\n    expect(res.error).toBeNull();\n  });\n\n  it(\"serialises body as JSON for POST\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client.user.settings.post({ theme: \"dark\" });\n    const init = fetch.mock.calls[0][1] as RequestInit;\n    expect(init.headers).toMatchObject({ \"Content-Type\": \"application/json\" });\n    expect(JSON.parse(init.body as string)).toEqual({ theme: \"dark\" });\n  });\n});\n\ndescribe(\"apiCall — error paths\", () => {\n  it(\"returns error with JSON body on 4xx\", async () => {\n    const fetch = mockFetch(400, '{\"message\":\"bad request\"}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toEqual({ message: \"bad request\" });\n    expect(res.data).toBeNull();\n    expect(res.status).toBe(400);\n  });\n\n  it(\"falls back to text when error body is not JSON\", async () => {\n    const fetch = vi.fn().mockResolvedValue({\n      ok: false,\n      status: 500,\n      json: () => Promise.reject(new Error(\"not json\")),\n      text: () => Promise.resolve(\"Internal Server Error\"),\n      statusText: \"ISE\",\n    });\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toBe(\"Internal Server Error\");\n  });\n\n  it(\"falls back to statusText when text() also fails\", async () => {\n    const fetch = vi.fn().mockResolvedValue({\n      ok: false,\n      status: 503,\n      json: () => Promise.reject(new Error()),\n      text: () => Promise.reject(new Error()),\n      statusText: \"Service Unavailable\",\n    });\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toBe(\"Service Unavailable\");\n  });\n});\n\ndescribe(\"handleResponse\", () => {\n  it(\"returns null when data is null and no error\", () => {\n    expect(handleResponse({ data: null, error: null, status: 204 })).toBeNull();\n  });\n\n  it(\"throws when response contains an error\", () => {\n    expect(() =>\n      handleResponse({ data: null, error: { message: \"forbidden\" }, status: 403 })\n    ).toThrow();\n  });\n\n  it(\"parses superjson string data\", () => {\n    const payload = JSON.stringify({ json: { value: 42 }, meta: undefined });\n    expect(handleResponse({ data: payload, error: null, status: 200 })).toEqual({ value: 42 });\n  });\n});\n\ndescribe(\"useAPIClient — URL construction\", () => {\n  it(\"uses provided origin for SSR base URL\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://api.internal:4000\" });\n    await client.export.get();\n    expect(fetch.mock.calls[0][0]).toContain(\"http://api.internal:4000\");\n  });\n\n  it(\"builds nested conversation message endpoint\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client.conversations({ id: \"abc123\" }).message({ messageId: \"msg456\" }).get();\n    expect(fetch.mock.calls[0][0]).toContain(\"/conversations/abc123/message/msg456\");\n  });\n});\n```\n\n---\n\n",
-        "level": 3
-      },
-      {
-        "title": "2. `src/lib/actions/clickOutside.ts` — Zero test coverage",
-        "content": "\n**Untested:** click outside triggers callback, click inside does not, `update` replaces callback, `destroy` removes listener.\n\n```typescript\n// src/lib/actions/clickOutside.spec.ts\nimport { describe, it, expect, vi, beforeEach } from \"vitest\";\nimport { clickOutside } from \"./clickOutside\";\n\ndescribe(\"clickOutside action\", () => {\n  let element: HTMLDivElement;\n  let outsideElement: HTMLDivElement;\n  let callback: ReturnType<typeof vi.fn>;\n\n  beforeEach(() => {\n    document.body.innerHTML = \"\";\n    element = document.createElement(\"div\");\n    outsideElement = document.createElement(\"div\");\n    document.body.appendChild(element);\n    document.body.appendChild(outsideElement);\n    callback = vi.fn();\n  });\n\n  it(\"fires callback when clicking outside the element\", () => {\n    clickOutside(element, callback);\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).toHaveBeenCalledOnce();\n  });\n\n  it(\"does not fire callback when clicking inside the element\", () => {\n    clickOutside(element, callback);\n    element.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"does not fire when clicking the element itself\", () => {\n    clickOutside(element, callback);\n    const inner = document.createElement(\"span\");\n    element.appendChild(inner);\n    inner.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"update() replaces the callback\", () => {\n    const action = clickOutside(element, callback);\n    const newCallback = vi.fn();\n    action.update(newCallback);\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n    expect(newCallback).toHaveBeenCalledOnce();\n  });\n\n  it(\"destroy() stops all future callbacks\", () => {\n    const action = clickOutside(element, callback);\n    action.destroy();\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"handles multiple destroy() calls without error\", () => {\n    const action = clickOutside(element, callback);\n    expect(() => { action.destroy(); action.destroy(); }).not.toThrow();\n  });\n});\n```\n\n---\n\n",
-        "level": 3
-      },
-      {
-        "title": "3. `src/lib/buildPrompt.ts` — Zero test coverage",
-        "content": "\n**Untested:** system message replacement with preprompt, no system message scenario, truncation slicing, zero truncate parameter (no slicing).\n\n```typescript\n// src/lib/buildPrompt.spec.ts\nimport { describe, it, expect } from \"vitest\";\nimport { buildPrompt } from \"./buildPrompt\";\nimport type { BackendModel } from \"./server/models\";\n\nconst makeModel = (truncate?: number): BackendModel =>\n  ({\n    chatPromptRender: ({ messages, preprompt }: { messages: unknown[]; preprompt?: string }) =>\n      messages.map((m: any) => `${m.role}:${m.content}`).join(\" \"),\n    parameters: truncate !== undefined ? { truncate } : undefined,\n  } as unknown as BackendModel);\n\ndescribe(\"buildPrompt\", () => {\n  it(\"replaces system message content with preprompt when first message is system\", async () => {\n    const model = makeModel(1000);\n    const messages = [\n      { from: \"system\" as const, content: \"old system prompt\" },\n      { from: \"user\" as const, content: \"hello\" },\n    ];\n    const result = await buildPrompt({ messages, model, preprompt: \"new system prompt\" });\n    expect(result).toContain(\"new system prompt\");\n    expect(result).not.toContain(\"old system prompt\");\n  });\n\n  it(\"does not replace content when first message is not system\", async () => {\n    const model = makeModel(1000);\n    const messages = [{ from: \"user\" as const, content: \"hello\" }];\n    await buildPrompt({ messages, model, preprompt: \"some preprompt\" });\n    // original content unchanged\n    expect(messages[0].content).toBe(\"hello\");\n  });\n\n  it(\"does not replace content when preprompt is undefined\", async () => {\n    const model = makeModel(1000);\n    const messages = [{ from: \"system\" as const, content: \"original\" }];\n    await buildPrompt({ messages, model, preprompt: undefined });\n    expect(messages[0].content).toBe(\"original\");\n  });\n\n  it(\"truncates to the last N words when truncate is set\", async () => {\n    const model = makeModel(3);\n    const messages = [{ from: \"user\" as const, content: \"one two three four five\" }];\n    const result = await buildPrompt({ messages, model });\n    const wordCount = result.trim().split(/\\s+/).length;\n    expect(wordCount).toBeLessThanOrEqual(3);\n  });\n\n  it(\"returns full prompt when truncate is 0 (no slicing)\", async () => {\n    const model = makeModel(0);\n    const messages = [{ from: \"user\" as const, content: \"word1 word2 word3\" }];\n    const result = await buildPrompt({ messages, model });\n    // slice(0) returns empty array → join → empty string\n    expect(result).toBe(\"\");\n  });\n\n  it(\"returns full prompt when model has no truncate parameter\", async () => {\n    const model = makeModel(undefined);\n    const messages = [{ from: \"user\" as const, content: \"word1 word2 word3\" }];\n    const result = await buildPrompt({ messages, model });\n    expect(result).toContain(\"word1\");\n  });\n\n  it(\"maps message from to role field\", async () => {\n    const receivedMessages: unknown[] = [];\n    const model = {\n      chatPromptRender: ({ messages }: { messages: unknown[] }) => {\n        receivedMessages.push(...messages);\n        return \"\";\n      },\n      parameters: { truncate: 1000 },\n    } as unknown as BackendModel;\n    await buildPrompt({\n      messages: [{ from: \"assistant\" as const, content: \"hi\" }],\n      model,\n    });\n    expect((receivedMessages[0] as any).role).toBe(\"assistant\");\n  });\n});\n```\n\n---\n\n",
-        "level": 3
-      },
-      {
-        "title": "4. `src/lib/createShareLink.ts` — Zero test coverage",
-        "content": "\n**Untested:** 7-char ID shortcut path, successful API call, API failure with text body, API failure with empty body, URL prefix priority logic.\n\n```typescript\n// src/lib/createShareLink.spec.ts\nimport { describe, it, expect, vi, beforeEach } from \"vitest\";\n\n// Mock SvelteKit modules before importing\nvi.mock(\"$app/paths\", () => ({ base: \"\" }));\nvi.mock(\"$app/state\", () => ({\n  page: {\n    data: { publicConfig: { PUBLIC_SHARE_PREFIX: \"\", PUBLIC_ORIGIN: \"https://app.example.com\" } },\n    url: { origin: \"https://fallback.example.com\" },\n  },\n}));\n\nimport { createShareLink } from \"./createShareLink\";\n\ndescribe(\"createShareLink\", () => {\n  beforeEach(() => {\n    vi.resetAllMocks();\n  });\n\n  it(\"returns share URL directly for 7-char id without fetching\", async () => {\n    const fetchSpy = vi.spyOn(globalThis, \"fetch\");\n    const url = await createShareLink(\"abc1234\");\n    expect(fetchSpy).not.toHaveBeenCalled();\n    expect(url).toBe(\"https://app.example.com/r/abc1234\");\n  });\n\n  it(\"calls the share endpoint for non-7-char ids\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: true,\n      json: () => Promise.resolve({ shareId: \"xyz9876\" }),\n    } as Response);\n    const url = await createShareLink(\"longconversationid\");\n    expect(url).toBe(\"https://app.example.com/r/xyz9876\");\n  });\n\n  it(\"throws when the share endpoint returns non-ok with a text body\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: false,\n      text: () => Promise.resolve(\"Conversation not found\"),\n    } as unknown as Response);\n    await expect(createShareLink(\"longconversationid\")).rejects.toThrow(\"Conversation not found\");\n  });\n\n  it(\"throws generic message when error body is empty\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: false,\n      text: () => Promise.resolve(\"\"),\n    } as unknown as Response);\n    await expect(createShareLink(\"longconversationid\")).rejects.toThrow(\n      \"Failed to create share link\"\n    );\n  });\n\n  it(\"uses PUBLIC_SHARE_PREFIX when set\", async () => {\n    const { page } = await import(\"$app/state\");\n    (page.data.publicConfig as any).PUBLIC_SHARE_PREFIX = \"https://cdn.share.example.com\";\n    const url = await createShareLink(\"abc1234\");\n    expect(url).toStartWith(\"https://cdn.share.example.com\");\n    (page.data.publicConfig as any).PUBLIC_SHARE_PREFIX = \"\";\n  });\n});\n```\n\n---\n\n",
-        "level": 3
-      },
-      {
-        "title": "5. `src/lib/migrations/lock.ts` — Gaps in existing tests",
-        "content": "\nThe existing suite covers the happy path and concurrent acquisition. Missing:\n\n| Gap | Why it matters |\n|---|---|\n| `releaseLock` with mismatched `lockId` | Should not delete the wrong lock |\n| `refreshLock` on a non-existent lock | Returns `false` — not asserted anywhere |\n| `isDBLocked` with a different key | Isolation between semaphore keys |\n| `releaseLock` when lock already released | Should be idempotent |\n\n```typescript\n// Add to src/lib/migrations/migrations.spec.ts (inside the describe block)\n\nit(\"releaseLock does not delete lock held by different id\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  const fakeId = new ObjectId();\n  await releaseLock(Semaphores.TEST_MIGRATION, fakeId);   // wrong id\n  expect(await isDBLocked(Semaphores.TEST_MIGRATION)).toBe(true);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);    // cleanup\n});\n\nit(\"refreshLock returns false when lock does not exist\", async () => {\n  const fakeId = new ObjectId();\n  const result = await refreshLock(Semaphores.TEST_MIGRATION, fakeId);\n  expect(result).toBe(false);\n});\n\nit(\"isDBLocked is key-scoped — one key locked does not affect another\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  expect(await isDBLocked(\"other-key\")).toBe(false);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);\n});\n\nit(\"releaseLock is idempotent — releasing twice does not throw\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);\n  await expect(releaseLock(Semaphores.TEST_MIGRATION, lockId)).resolves.not.toThrow();\n});\n```\n\n---\n\n",
-        "level": 3
-      },
-      {
-        "title": "6. `src/lib/migrations/migrations.ts` — Zero test coverage for `checkAndRunMigrations`",
-        "content": "\n**Untested:** duplicate GUID detection, lock contention wait-loop, `runEveryTime`, `runForHuggingChat` guards, migration failure recording, lock refresh interval, lock release on completion.\n\n```typescript\n// src/lib/migrations/checkAndRunMigrations.spec.ts\nimport { beforeEach, describe, expect, it, vi } from \"vitest\";\nimport type { Database } from \"$lib/server/database\";\nimport { Semaphores } from \"$lib/types/Semaphore\";\nimport ObjectId from \"bson-objectid\";\n\n// Stubs for all side-effecting modules\nvi.mock(\"./lock\");\nvi.mock(\"$lib/server/logger\", () => ({ logger: { debug: vi.fn(), error: vi.fn() } }));\nvi.mock(\"$lib/server/config\", () => ({ config: { isHuggingChat: false } }));\n\nimport * as lockModule from \"./lock\";\nimport { checkAndRunMigrations } from \"./migrations\";\n\nconst makeDb = (results: unknown[] = []) => ({\n  getCollections: () => ({\n    migrationResults: {\n      find: () => ({ toArray: () => Promise.resolve(results) }),\n      updateOne: vi.fn().mockResolvedValue({}),\n    },\n  }),\n});\n\nvi.mock(\"$lib/server/database\", () => ({\n  Database: { getInstance: vi.fn() },\n}));\n\nimport { Database } from \"$lib/server/database\";\n\ndescribe(\"checkAndRunMigrations\", () => {\n  beforeEach(() => {\n    vi.clearAllMocks();\n    vi.mocked(Database.getInstance).mockResolvedValue(makeDb() as unknown as Database);\n    vi.mocked(lockModule.acquireLock).mockResolvedValue(new ObjectId());\n    vi.mocked(lockModule.releaseLock).mockResolvedValue(undefined);\n    vi.mocked(lockModule.isDBLocked).mockResolvedValue(false);\n    vi.mocked(lockModule.refreshLock).mockResolvedValue(true);\n  });\n\n  it(\"throws when duplicate migration GUIDs exist\", async () => {\n    // Override routines to inject duplicates — easiest with vi.doMock inside test\n    await expect(async () => {\n      vi.doMock(\"./routines\", () => {\n        const id = new ObjectId();\n        return { migrations: [{ _id: id, name: \"dup\", up: vi.fn() }, { _id: id, name: \"dup2\", up: vi.fn() }] };\n      });\n      const { checkAndRunMigrations: fn } = await import(\"./migrations?dup=1\");\n      await fn();\n    }).rejects.toThrow(\"Duplicate migration GUIDs found\");\n  });\n\n  it(\"waits for DB unlock when lock is already held\", async () => {\n    vi.mocked(lockModule.acquireLock).mockResolvedValueOnce(false);\n    // isDBLocked returns true once, then false to exit the while loop\n    vi.mocked(lockModule.isDBLocked)\n      .mockResolvedValueOnce(true)\n      .mockResolvedValueOnce(false);\n    await checkAndRunMigrations();\n    expect(lockModule.isDBLocked).toHaveBeenCalledWith(Semaphores.MIGRATION);\n  });\n\n  it(\"skips migration already in results\", async () => {\n    const id = new ObjectId();\n    vi.mocked(Database.getInstance).mockResolvedValue(\n      makeDb([{ _id: id, name: \"done\", status: \"success\" }]) as unknown as Database\n    );\n    const upFn = vi.fn().mockResolvedValue(true);\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"done\", up: upFn, runEveryTime: false }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?skip=1\");\n    await fn();\n    expect(upFn).not.toHaveBeenCalled();\n  });\n\n  it(\"records failure status when migration throws\", async () => {\n    const id = new ObjectId();\n    const updateOne = vi.fn().mockResolvedValue({});\n    vi.mocked(Database.getInstance).mockResolvedValue({\n      getCollections: () => ({\n        migrationResults: { find: () => ({ toArray: () => Promise.resolve([]) }), updateOne },\n      }),\n    } as unknown as Database);\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"failing\", up: vi.fn().mockRejectedValue(new Error(\"boom\")) }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?fail=1\");\n    await fn();\n    const lastCall = updateOne.mock.calls.at(-1)?.[1].$set;\n    expect(lastCall?.status).toBe(\"failure\");\n  });\n\n  it(\"skips runForHuggingChat=only migration when not HuggingChat\", async () => {\n    const { config } = await import(\"$lib/server/config\");\n    (config as any).isHuggingChat = false;\n    const upFn = vi.fn().mockResolvedValue(true);\n    const id = new ObjectId();\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"hc-only\", up: upFn, runForHuggingChat: \"only\" }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?hconly=1\");\n    await fn();\n    expect(upFn).not.toHaveBeenCalled();\n  });\n\n  it(\"releases lock and clears interval after all migrations run\", async () => {\n    vi.useFakeTimers();\n    await checkAndRunMigrations();\n    vi.useRealTimers();\n    expect(lockModule.releaseLock).toHaveBeenCalledWith(\n      Semaphores.MIGRATION,\n      expect.any(ObjectId)\n    );\n  });\n});\n```\n\n---\n\n",
-        "level": 3
-      },
-      {
-        "title": "7. `src/lib/constants/rvagentPresets.ts` — Utility functions untested",
-        "content": "\n**Untested:** `getPresetById`, `buildPresetUrl`, `buildPresetCliCommand`.\n\n```typescript\n// src/lib/constants/rvagentPresets.spec.ts\nimport { describe, it, expect } from \"vitest\";\nimport {\n  getPresetById,\n  buildPresetUrl,\n  buildPresetCliCommand,\n  RVAGENT_PRESETS,\n} from \"./rvagentPresets\";\n\ndescribe(\"getPresetById\", () => {\n  it(\"returns the matching preset\", () => {\n    const preset = getPresetById(\"all-tools\");\n    expect(preset).toBeDefined();\n    expect(preset?.id).toBe(\"all-tools\");\n  });\n\n  it(\"returns undefined for an unknown id\", () => {\n    expect(getPresetById(\"nonexistent\")).toBeUndefined();\n  });\n\n  it(\"all preset IDs in RVAGENT_PRESETS are findable\", () => {\n    for (const p of RVAGENT_PRESETS) {\n      expect(getPresetById(p.id)).toBe(p);\n    }\n  });\n});\n\ndescribe(\"buildPresetUrl\", () => {\n  it(\"uses preset defaultPort when no port override is given\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset)).toBe(`http://localhost:${preset.defaultPort}/sse`);\n  });\n\n  it(\"uses the overridden port\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset, \"localhost\", 9999)).toBe(\"http://localhost:9999/sse\");\n  });\n\n  it(\"uses custom host\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset, \"192.168.1.10\")).toContain(\"192.168.1.10\");\n  });\n});\n\ndescribe(\"buildPresetCliCommand\", () => {\n  it(\"uses --all flag for the all-tools preset\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(\"--all\");\n    expect(cmd).not.toContain(\"--groups\");\n  });\n\n  it(\"uses --groups for presets with specific tool groups\", () => {\n    const preset = getPresetById(\"file-shell\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(\"--groups file,shell\");\n    expect(cmd).not.toContain(\"--all\");\n  });\n\n  it(\"uses custom port in the command\", () => {\n    const preset = getPresetById(\"memory-agent\")!;\n    const cmd = buildPresetCliCommand(preset, 8888);\n    expect(cmd).toContain(\"--port 8888\");\n  });\n\n  it(\"falls back to defaultPort in the command when no port given\", () => {\n    const preset = getPresetById(\"memory-agent\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(`--port ${preset.defaultPort}`);\n  });\n});\n```\n\n---\n\n",
-        "level": 3
-      },
-      {
-        "title": "8. `src/lib/components/chat/MarkdownRenderer.svelte.test.ts` — Edge case gaps",
-        "content": "\n**Missing:** XSS via `javascript:` links, empty content, bold/italic inside lists, tables, image rendering, multiple code blocks with language labels.\n\n```typescript\n// Add to existing MarkdownRenderer.svelte.test.ts\n\ndescribe(\"MarkdownRenderer — security\", () => {\n  it(\"strips javascript: href from links\", () => {\n    const { baseElement } = render(MarkdownRenderer, {\n      content: \"[click me](javascript:alert(1))\",\n    });\n    const anchor = baseElement.querySelector(\"a\");\n    expect(anchor?.getAttribute(\"href\")).not.toContain(\"javascript:\");\n  });\n\n  it(\"renders empty content without crashing\", () => {\n    expect(() => render(MarkdownRenderer, { content: \"\" })).not.toThrow();\n  });\n});\n\ndescribe(\"MarkdownRenderer — tables\", () => {\n  it(\"renders a markdown table\", () => {\n    const md = \"| A | B |\\n|---|---|\\n| 1 | 2 |\";\n    const { baseElement } = render(MarkdownRenderer, { content: md });\n    expect(baseElement.querySelector(\"table\")).toBeTruthy();\n    expect(baseElement.querySelector(\"thead\")).toBeTruthy();\n    expect(baseElement.querySelector(\"tbody\")).toBeTruthy();\n  });\n});\n\ndescribe(\"MarkdownRenderer — nested formatting\", () => {\n  it(\"renders bold inside a list item\", () => {\n    const { baseElement } = render(MarkdownRenderer, { content: \"- **bold item**\" });\n    const strong = baseElement.querySelector(\"strong\");\n    expect(strong).toBeTruthy();\n    expect(strong?.textContent).toBe(\"bold item\");\n  });\n\n  it(\"renders multiple fenced code blocks with language labels\", () => {\n    const md = \"```ts\\nconst x = 1;\\n```\\n\\n```py\\nprint('hi')\\n```\";\n    const { baseElement } = render(MarkdownRenderer, { content: md });\n    const codeBlocks = baseElement.querySelectorAll(\"code\");\n    expect(codeBlocks.length).toBeGreaterThanOrEqual(2);\n  });\n});\n\ndescribe(\"MarkdownRenderer — images\", () => {\n  it(\"renders an image with alt text\", () => {\n    const { baseElement } = render(MarkdownRenderer, {\n      content: \"![Alt text](https://example.com/img.png)\",\n    });\n    const img = baseElement.querySelector(\"img\");\n    expect(img).toBeTruthy();\n    expect(img?.getAttribute(\"alt\")).toBe(\"Alt text\");\n  });\n});\n```\n\n---\n\n",
-        "level": 3
-      },
-      {
-        "title": "Summary of Gaps",
-        "content": "| File | Coverage | Priority gaps |\n|---|---|---|\n| `APIClient.ts` | None | Error fallback chain, empty body, query filtering, `handleResponse` |\n| `clickOutside.ts` | None | All branches: outside, inside, nested, update, destroy |\n| `buildPrompt.ts` | None | Preprompt replacement, truncation edge cases (0, undefined) |\n| `createShareLink.ts` | None | 7-char shortcut, API failure, prefix priority |\n| `lock.ts` | Partial | `refreshLock(false)`, mismatched lockId, key isolation |\n| `migrations.ts` | None | Duplicate GUID, lock contention, `runEveryTime`, HuggingChat guard, failure recording |\n| `rvagentPresets.ts` | None | All three exported functions |\n| `MarkdownRenderer` | Partial | XSS links, empty content, tables, images, nested formatting |",
-        "level": 3
-      }
-    ],
-    "codeBlocks": [
-      {
-        "language": "typescript",
-        "code": "// src/lib/APIClient.spec.ts\nimport { describe, it, expect, vi, afterEach } from \"vitest\";\nimport { handleResponse, useAPIClient } from \"./APIClient\";\n\nconst mockFetch = (status: number, body: string | null, ok = status < 400) =>\n  vi.fn().mockResolvedValue({\n    ok,\n    status,\n    text: () => Promise.resolve(body ?? \"\"),\n    json: () => (body ? Promise.resolve(JSON.parse(body)) : Promise.reject(new Error(\"no body\"))),\n    statusText: \"Error\",\n  });\n\ndescribe(\"apiCall — success paths\", () => {\n  it(\"sends GET with no body\", async () => {\n    const fetch = mockFetch(200, '{\"json\":\"body\"}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client[\"public-config\"].get();\n    expect(fetch).toHaveBeenCalledWith(\n      expect.stringContaining(\"/api/v2/public-config\"),\n      expect.objectContaining({ method: \"GET\" })\n    );\n  });\n\n  it(\"attaches query params to GET URL\", async () => {\n    const fetch = mockFetch(200, '{\"x\":1}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client[\"public-config\"].get({ query: { page: 2, skip: undefined } });\n    const url = fetch.mock.calls[0][0] as string;\n    expect(url).toContain(\"page=2\");\n    expect(url).not.toContain(\"skip\");          // undefined values are omitted\n  });\n\n  it(\"returns null data on empty 200 body\", async () => {\n    const fetch = mockFetch(200, \"\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.settings.get();\n    expect(res.data).toBeNull();\n    expect(res.error).toBeNull();\n  });\n\n  it(\"serialises body as JSON for POST\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client.user.settings.post({ theme: \"dark\" });\n    const init = fetch.mock.calls[0][1] as RequestInit;\n    expect(init.headers).toMatchObject({ \"Content-Type\": \"application/json\" });\n    expect(JSON.parse(init.body as string)).toEqual({ theme: \"dark\" });\n  });\n});\n\ndescribe(\"apiCall — error paths\", () => {\n  it(\"returns error with JSON body on 4xx\", async () => {\n    const fetch = mockFetch(400, '{\"message\":\"bad request\"}');\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toEqual({ message: \"bad request\" });\n    expect(res.data).toBeNull();\n    expect(res.status).toBe(400);\n  });\n\n  it(\"falls back to text when error body is not JSON\", async () => {\n    const fetch = vi.fn().mockResolvedValue({\n      ok: false,\n      status: 500,\n      json: () => Promise.reject(new Error(\"not json\")),\n      text: () => Promise.resolve(\"Internal Server Error\"),\n      statusText: \"ISE\",\n    });\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toBe(\"Internal Server Error\");\n  });\n\n  it(\"falls back to statusText when text() also fails\", async () => {\n    const fetch = vi.fn().mockResolvedValue({\n      ok: false,\n      status: 503,\n      json: () => Promise.reject(new Error()),\n      text: () => Promise.reject(new Error()),\n      statusText: \"Service Unavailable\",\n    });\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    const res = await client.user.get();\n    expect(res.error).toBe(\"Service Unavailable\");\n  });\n});\n\ndescribe(\"handleResponse\", () => {\n  it(\"returns null when data is null and no error\", () => {\n    expect(handleResponse({ data: null, error: null, status: 204 })).toBeNull();\n  });\n\n  it(\"throws when response contains an error\", () => {\n    expect(() =>\n      handleResponse({ data: null, error: { message: \"forbidden\" }, status: 403 })\n    ).toThrow();\n  });\n\n  it(\"parses superjson string data\", () => {\n    const payload = JSON.stringify({ json: { value: 42 }, meta: undefined });\n    expect(handleResponse({ data: payload, error: null, status: 200 })).toEqual({ value: 42 });\n  });\n});\n\ndescribe(\"useAPIClient — URL construction\", () => {\n  it(\"uses provided origin for SSR base URL\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://api.internal:4000\" });\n    await client.export.get();\n    expect(fetch.mock.calls[0][0]).toContain(\"http://api.internal:4000\");\n  });\n\n  it(\"builds nested conversation message endpoint\", async () => {\n    const fetch = mockFetch(200, \"null\");\n    const client = useAPIClient({ fetch, origin: \"http://localhost\" });\n    await client.conversations({ id: \"abc123\" }).message({ messageId: \"msg456\" }).get();\n    expect(fetch.mock.calls[0][0]).toContain(\"/conversations/abc123/message/msg456\");\n  });\n});"
-      },
-      {
-        "language": "typescript",
-        "code": "// src/lib/actions/clickOutside.spec.ts\nimport { describe, it, expect, vi, beforeEach } from \"vitest\";\nimport { clickOutside } from \"./clickOutside\";\n\ndescribe(\"clickOutside action\", () => {\n  let element: HTMLDivElement;\n  let outsideElement: HTMLDivElement;\n  let callback: ReturnType<typeof vi.fn>;\n\n  beforeEach(() => {\n    document.body.innerHTML = \"\";\n    element = document.createElement(\"div\");\n    outsideElement = document.createElement(\"div\");\n    document.body.appendChild(element);\n    document.body.appendChild(outsideElement);\n    callback = vi.fn();\n  });\n\n  it(\"fires callback when clicking outside the element\", () => {\n    clickOutside(element, callback);\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).toHaveBeenCalledOnce();\n  });\n\n  it(\"does not fire callback when clicking inside the element\", () => {\n    clickOutside(element, callback);\n    element.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"does not fire when clicking the element itself\", () => {\n    clickOutside(element, callback);\n    const inner = document.createElement(\"span\");\n    element.appendChild(inner);\n    inner.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"update() replaces the callback\", () => {\n    const action = clickOutside(element, callback);\n    const newCallback = vi.fn();\n    action.update(newCallback);\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n    expect(newCallback).toHaveBeenCalledOnce();\n  });\n\n  it(\"destroy() stops all future callbacks\", () => {\n    const action = clickOutside(element, callback);\n    action.destroy();\n    outsideElement.dispatchEvent(new MouseEvent(\"click\", { bubbles: true }));\n    expect(callback).not.toHaveBeenCalled();\n  });\n\n  it(\"handles multiple destroy() calls without error\", () => {\n    const action = clickOutside(element, callback);\n    expect(() => { action.destroy(); action.destroy(); }).not.toThrow();\n  });\n});"
-      },
-      {
-        "language": "typescript",
-        "code": "// src/lib/buildPrompt.spec.ts\nimport { describe, it, expect } from \"vitest\";\nimport { buildPrompt } from \"./buildPrompt\";\nimport type { BackendModel } from \"./server/models\";\n\nconst makeModel = (truncate?: number): BackendModel =>\n  ({\n    chatPromptRender: ({ messages, preprompt }: { messages: unknown[]; preprompt?: string }) =>\n      messages.map((m: any) => `${m.role}:${m.content}`).join(\" \"),\n    parameters: truncate !== undefined ? { truncate } : undefined,\n  } as unknown as BackendModel);\n\ndescribe(\"buildPrompt\", () => {\n  it(\"replaces system message content with preprompt when first message is system\", async () => {\n    const model = makeModel(1000);\n    const messages = [\n      { from: \"system\" as const, content: \"old system prompt\" },\n      { from: \"user\" as const, content: \"hello\" },\n    ];\n    const result = await buildPrompt({ messages, model, preprompt: \"new system prompt\" });\n    expect(result).toContain(\"new system prompt\");\n    expect(result).not.toContain(\"old system prompt\");\n  });\n\n  it(\"does not replace content when first message is not system\", async () => {\n    const model = makeModel(1000);\n    const messages = [{ from: \"user\" as const, content: \"hello\" }];\n    await buildPrompt({ messages, model, preprompt: \"some preprompt\" });\n    // original content unchanged\n    expect(messages[0].content).toBe(\"hello\");\n  });\n\n  it(\"does not replace content when preprompt is undefined\", async () => {\n    const model = makeModel(1000);\n    const messages = [{ from: \"system\" as const, content: \"original\" }];\n    await buildPrompt({ messages, model, preprompt: undefined });\n    expect(messages[0].content).toBe(\"original\");\n  });\n\n  it(\"truncates to the last N words when truncate is set\", async () => {\n    const model = makeModel(3);\n    const messages = [{ from: \"user\" as const, content: \"one two three four five\" }];\n    const result = await buildPrompt({ messages, model });\n    const wordCount = result.trim().split(/\\s+/).length;\n    expect(wordCount).toBeLessThanOrEqual(3);\n  });\n\n  it(\"returns full prompt when truncate is 0 (no slicing)\", async () => {\n    const model = makeModel(0);\n    const messages = [{ from: \"user\" as const, content: \"word1 word2 word3\" }];\n    const result = await buildPrompt({ messages, model });\n    // slice(0) returns empty array → join → empty string\n    expect(result).toBe(\"\");\n  });\n\n  it(\"returns full prompt when model has no truncate parameter\", async () => {\n    const model = makeModel(undefined);\n    const messages = [{ from: \"user\" as const, content: \"word1 word2 word3\" }];\n    const result = await buildPrompt({ messages, model });\n    expect(result).toContain(\"word1\");\n  });\n\n  it(\"maps message from to role field\", async () => {\n    const receivedMessages: unknown[] = [];\n    const model = {\n      chatPromptRender: ({ messages }: { messages: unknown[] }) => {\n        receivedMessages.push(...messages);\n        return \"\";\n      },\n      parameters: { truncate: 1000 },\n    } as unknown as BackendModel;\n    await buildPrompt({\n      messages: [{ from: \"assistant\" as const, content: \"hi\" }],\n      model,\n    });\n    expect((receivedMessages[0] as any).role).toBe(\"assistant\");\n  });\n});"
-      },
-      {
-        "language": "typescript",
-        "code": "// src/lib/createShareLink.spec.ts\nimport { describe, it, expect, vi, beforeEach } from \"vitest\";\n\n// Mock SvelteKit modules before importing\nvi.mock(\"$app/paths\", () => ({ base: \"\" }));\nvi.mock(\"$app/state\", () => ({\n  page: {\n    data: { publicConfig: { PUBLIC_SHARE_PREFIX: \"\", PUBLIC_ORIGIN: \"https://app.example.com\" } },\n    url: { origin: \"https://fallback.example.com\" },\n  },\n}));\n\nimport { createShareLink } from \"./createShareLink\";\n\ndescribe(\"createShareLink\", () => {\n  beforeEach(() => {\n    vi.resetAllMocks();\n  });\n\n  it(\"returns share URL directly for 7-char id without fetching\", async () => {\n    const fetchSpy = vi.spyOn(globalThis, \"fetch\");\n    const url = await createShareLink(\"abc1234\");\n    expect(fetchSpy).not.toHaveBeenCalled();\n    expect(url).toBe(\"https://app.example.com/r/abc1234\");\n  });\n\n  it(\"calls the share endpoint for non-7-char ids\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: true,\n      json: () => Promise.resolve({ shareId: \"xyz9876\" }),\n    } as Response);\n    const url = await createShareLink(\"longconversationid\");\n    expect(url).toBe(\"https://app.example.com/r/xyz9876\");\n  });\n\n  it(\"throws when the share endpoint returns non-ok with a text body\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: false,\n      text: () => Promise.resolve(\"Conversation not found\"),\n    } as unknown as Response);\n    await expect(createShareLink(\"longconversationid\")).rejects.toThrow(\"Conversation not found\");\n  });\n\n  it(\"throws generic message when error body is empty\", async () => {\n    vi.spyOn(globalThis, \"fetch\").mockResolvedValueOnce({\n      ok: false,\n      text: () => Promise.resolve(\"\"),\n    } as unknown as Response);\n    await expect(createShareLink(\"longconversationid\")).rejects.toThrow(\n      \"Failed to create share link\"\n    );\n  });\n\n  it(\"uses PUBLIC_SHARE_PREFIX when set\", async () => {\n    const { page } = await import(\"$app/state\");\n    (page.data.publicConfig as any).PUBLIC_SHARE_PREFIX = \"https://cdn.share.example.com\";\n    const url = await createShareLink(\"abc1234\");\n    expect(url).toStartWith(\"https://cdn.share.example.com\");\n    (page.data.publicConfig as any).PUBLIC_SHARE_PREFIX = \"\";\n  });\n});"
-      },
-      {
-        "language": "typescript",
-        "code": "// Add to src/lib/migrations/migrations.spec.ts (inside the describe block)\n\nit(\"releaseLock does not delete lock held by different id\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  const fakeId = new ObjectId();\n  await releaseLock(Semaphores.TEST_MIGRATION, fakeId);   // wrong id\n  expect(await isDBLocked(Semaphores.TEST_MIGRATION)).toBe(true);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);    // cleanup\n});\n\nit(\"refreshLock returns false when lock does not exist\", async () => {\n  const fakeId = new ObjectId();\n  const result = await refreshLock(Semaphores.TEST_MIGRATION, fakeId);\n  expect(result).toBe(false);\n});\n\nit(\"isDBLocked is key-scoped — one key locked does not affect another\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  expect(await isDBLocked(\"other-key\")).toBe(false);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);\n});\n\nit(\"releaseLock is idempotent — releasing twice does not throw\", async () => {\n  const lockId = await acquireLock(Semaphores.TEST_MIGRATION);\n  assert(lockId);\n  await releaseLock(Semaphores.TEST_MIGRATION, lockId);\n  await expect(releaseLock(Semaphores.TEST_MIGRATION, lockId)).resolves.not.toThrow();\n});"
-      },
-      {
-        "language": "typescript",
-        "code": "// src/lib/migrations/checkAndRunMigrations.spec.ts\nimport { beforeEach, describe, expect, it, vi } from \"vitest\";\nimport type { Database } from \"$lib/server/database\";\nimport { Semaphores } from \"$lib/types/Semaphore\";\nimport ObjectId from \"bson-objectid\";\n\n// Stubs for all side-effecting modules\nvi.mock(\"./lock\");\nvi.mock(\"$lib/server/logger\", () => ({ logger: { debug: vi.fn(), error: vi.fn() } }));\nvi.mock(\"$lib/server/config\", () => ({ config: { isHuggingChat: false } }));\n\nimport * as lockModule from \"./lock\";\nimport { checkAndRunMigrations } from \"./migrations\";\n\nconst makeDb = (results: unknown[] = []) => ({\n  getCollections: () => ({\n    migrationResults: {\n      find: () => ({ toArray: () => Promise.resolve(results) }),\n      updateOne: vi.fn().mockResolvedValue({}),\n    },\n  }),\n});\n\nvi.mock(\"$lib/server/database\", () => ({\n  Database: { getInstance: vi.fn() },\n}));\n\nimport { Database } from \"$lib/server/database\";\n\ndescribe(\"checkAndRunMigrations\", () => {\n  beforeEach(() => {\n    vi.clearAllMocks();\n    vi.mocked(Database.getInstance).mockResolvedValue(makeDb() as unknown as Database);\n    vi.mocked(lockModule.acquireLock).mockResolvedValue(new ObjectId());\n    vi.mocked(lockModule.releaseLock).mockResolvedValue(undefined);\n    vi.mocked(lockModule.isDBLocked).mockResolvedValue(false);\n    vi.mocked(lockModule.refreshLock).mockResolvedValue(true);\n  });\n\n  it(\"throws when duplicate migration GUIDs exist\", async () => {\n    // Override routines to inject duplicates — easiest with vi.doMock inside test\n    await expect(async () => {\n      vi.doMock(\"./routines\", () => {\n        const id = new ObjectId();\n        return { migrations: [{ _id: id, name: \"dup\", up: vi.fn() }, { _id: id, name: \"dup2\", up: vi.fn() }] };\n      });\n      const { checkAndRunMigrations: fn } = await import(\"./migrations?dup=1\");\n      await fn();\n    }).rejects.toThrow(\"Duplicate migration GUIDs found\");\n  });\n\n  it(\"waits for DB unlock when lock is already held\", async () => {\n    vi.mocked(lockModule.acquireLock).mockResolvedValueOnce(false);\n    // isDBLocked returns true once, then false to exit the while loop\n    vi.mocked(lockModule.isDBLocked)\n      .mockResolvedValueOnce(true)\n      .mockResolvedValueOnce(false);\n    await checkAndRunMigrations();\n    expect(lockModule.isDBLocked).toHaveBeenCalledWith(Semaphores.MIGRATION);\n  });\n\n  it(\"skips migration already in results\", async () => {\n    const id = new ObjectId();\n    vi.mocked(Database.getInstance).mockResolvedValue(\n      makeDb([{ _id: id, name: \"done\", status: \"success\" }]) as unknown as Database\n    );\n    const upFn = vi.fn().mockResolvedValue(true);\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"done\", up: upFn, runEveryTime: false }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?skip=1\");\n    await fn();\n    expect(upFn).not.toHaveBeenCalled();\n  });\n\n  it(\"records failure status when migration throws\", async () => {\n    const id = new ObjectId();\n    const updateOne = vi.fn().mockResolvedValue({});\n    vi.mocked(Database.getInstance).mockResolvedValue({\n      getCollections: () => ({\n        migrationResults: { find: () => ({ toArray: () => Promise.resolve([]) }), updateOne },\n      }),\n    } as unknown as Database);\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"failing\", up: vi.fn().mockRejectedValue(new Error(\"boom\")) }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?fail=1\");\n    await fn();\n    const lastCall = updateOne.mock.calls.at(-1)?.[1].$set;\n    expect(lastCall?.status).toBe(\"failure\");\n  });\n\n  it(\"skips runForHuggingChat=only migration when not HuggingChat\", async () => {\n    const { config } = await import(\"$lib/server/config\");\n    (config as any).isHuggingChat = false;\n    const upFn = vi.fn().mockResolvedValue(true);\n    const id = new ObjectId();\n    vi.doMock(\"./routines\", () => ({\n      migrations: [{ _id: id, name: \"hc-only\", up: upFn, runForHuggingChat: \"only\" }],\n    }));\n    const { checkAndRunMigrations: fn } = await import(\"./migrations?hconly=1\");\n    await fn();\n    expect(upFn).not.toHaveBeenCalled();\n  });\n\n  it(\"releases lock and clears interval after all migrations run\", async () => {\n    vi.useFakeTimers();\n    await checkAndRunMigrations();\n    vi.useRealTimers();\n    expect(lockModule.releaseLock).toHaveBeenCalledWith(\n      Semaphores.MIGRATION,\n      expect.any(ObjectId)\n    );\n  });\n});"
-      },
-      {
-        "language": "typescript",
-        "code": "// src/lib/constants/rvagentPresets.spec.ts\nimport { describe, it, expect } from \"vitest\";\nimport {\n  getPresetById,\n  buildPresetUrl,\n  buildPresetCliCommand,\n  RVAGENT_PRESETS,\n} from \"./rvagentPresets\";\n\ndescribe(\"getPresetById\", () => {\n  it(\"returns the matching preset\", () => {\n    const preset = getPresetById(\"all-tools\");\n    expect(preset).toBeDefined();\n    expect(preset?.id).toBe(\"all-tools\");\n  });\n\n  it(\"returns undefined for an unknown id\", () => {\n    expect(getPresetById(\"nonexistent\")).toBeUndefined();\n  });\n\n  it(\"all preset IDs in RVAGENT_PRESETS are findable\", () => {\n    for (const p of RVAGENT_PRESETS) {\n      expect(getPresetById(p.id)).toBe(p);\n    }\n  });\n});\n\ndescribe(\"buildPresetUrl\", () => {\n  it(\"uses preset defaultPort when no port override is given\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset)).toBe(`http://localhost:${preset.defaultPort}/sse`);\n  });\n\n  it(\"uses the overridden port\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset, \"localhost\", 9999)).toBe(\"http://localhost:9999/sse\");\n  });\n\n  it(\"uses custom host\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    expect(buildPresetUrl(preset, \"192.168.1.10\")).toContain(\"192.168.1.10\");\n  });\n});\n\ndescribe(\"buildPresetCliCommand\", () => {\n  it(\"uses --all flag for the all-tools preset\", () => {\n    const preset = getPresetById(\"all-tools\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(\"--all\");\n    expect(cmd).not.toContain(\"--groups\");\n  });\n\n  it(\"uses --groups for presets with specific tool groups\", () => {\n    const preset = getPresetById(\"file-shell\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(\"--groups file,shell\");\n    expect(cmd).not.toContain(\"--all\");\n  });\n\n  it(\"uses custom port in the command\", () => {\n    const preset = getPresetById(\"memory-agent\")!;\n    const cmd = buildPresetCliCommand(preset, 8888);\n    expect(cmd).toContain(\"--port 8888\");\n  });\n\n  it(\"falls back to defaultPort in the command when no port given\", () => {\n    const preset = getPresetById(\"memory-agent\")!;\n    const cmd = buildPresetCliCommand(preset);\n    expect(cmd).toContain(`--port ${preset.defaultPort}`);\n  });\n});"
-      },
-      {
-        "language": "typescript",
-        "code": "// Add to existing MarkdownRenderer.svelte.test.ts\n\ndescribe(\"MarkdownRenderer — security\", () => {\n  it(\"strips javascript: href from links\", () => {\n    const { baseElement } = render(MarkdownRenderer, {\n      content: \"[click me](javascript:alert(1))\",\n    });\n    const anchor = baseElement.querySelector(\"a\");\n    expect(anchor?.getAttribute(\"href\")).not.toContain(\"javascript:\");\n  });\n\n  it(\"renders empty content without crashing\", () => {\n    expect(() => render(MarkdownRenderer, { content: \"\" })).not.toThrow();\n  });\n});\n\ndescribe(\"MarkdownRenderer — tables\", () => {\n  it(\"renders a markdown table\", () => {\n    const md = \"| A | B |\\n|---|---|\\n| 1 | 2 |\";\n    const { baseElement } = render(MarkdownRenderer, { content: md });\n    expect(baseElement.querySelector(\"table\")).toBeTruthy();\n    expect(baseElement.querySelector(\"thead\")).toBeTruthy();\n    expect(baseElement.querySelector(\"tbody\")).toBeTruthy();\n  });\n});\n\ndescribe(\"MarkdownRenderer — nested formatting\", () => {\n  it(\"renders bold inside a list item\", () => {\n    const { baseElement } = render(MarkdownRenderer, { content: \"- **bold item**\" });\n    const strong = baseElement.querySelector(\"strong\");\n    expect(strong).toBeTruthy();\n    expect(strong?.textContent).toBe(\"bold item\");\n  });\n\n  it(\"renders multiple fenced code blocks with language labels\", () => {\n    const md = \""
-      }
-    ]
-  },
-  "durationMs": 141406,
-  "model": "sonnet",
-  "sandboxMode": "permissive",
-  "workerType": "testgaps",
-  "timestamp": "2026-05-05T02:58:33.227Z",
-  "executionId": "testgaps_1777949771821_elw1j4"
-}

package/src/ruvocal/.claude-flow/metrics/codebase-map.json

@@ -1,11 +0,0 @@
-{
-  "timestamp": "2026-05-05T02:48:11.838Z",
-  "projectRoot": "/Users/cohen/Projects/ruflo/ruflo/src/ruvocal",
-  "structure": {
-    "hasPackageJson": true,
-    "hasTsConfig": true,
-    "hasClaudeConfig": true,
-    "hasClaudeFlow": true
-  },
-  "scannedAt": 1777949291838
-}

package/src/ruvocal/.claude-flow/metrics/consolidation.json

@@ -1,6 +0,0 @@
-{
-  "timestamp": "2026-05-05T02:54:11.820Z",
-  "patternsConsolidated": 0,
-  "memoryCleaned": 0,
-  "duplicatesRemoved": 0
-}

package/src/ruvocal/.claude-flow/neural/stats.json

@@ -1,6 +0,0 @@
-{
-  "trajectoriesRecorded": 0,
-  "patternsLearned": 0,
-  "signalsProcessed": 0,
-  "lastAdaptation": null
-}

package/src/ruvocal/.claude-flow/sessions/current.json

@@ -1,13 +0,0 @@
-{
-  "id": "session-1777949290618",
-  "startedAt": "2026-05-05T02:48:10.618Z",
-  "platform": "darwin",
-  "cwd": "/Users/cohen/Projects/ruflo/ruflo/src/ruvocal",
-  "context": {},
-  "metrics": {
-    "edits": 0,
-    "commands": 0,
-    "tasks": 0,
-    "errors": 0
-  }
-}

package/src/ruvocal/.env

@@ -1,194 +0,0 @@
-# Use .env.local to change these variables
-# DO NOT EDIT THIS FILE WITH SENSITIVE DATA
-
-### Models ###
-# Models are sourced exclusively from an OpenAI-compatible base URL.
-# Example: https://router.huggingface.co/v1
-OPENAI_BASE_URL=https://router.huggingface.co/v1
-
-# Canonical auth token for any OpenAI-compatible provider
-OPENAI_API_KEY=#your provider API key (works for HF router, OpenAI, LM Studio, etc.). 
-# When set to true, user token will be used for inference calls
-USE_USER_TOKEN=false
-# Automatically redirect to oauth login page if user is not logged in, when set to "true"
-AUTOMATIC_LOGIN=false
-
-### PostgreSQL (RuVector) ###
-DATABASE_URL=#postgresql://ruvocal:password@localhost:5432/ruvocal
-# Legacy MongoDB vars (unused — kept for reference)
-# MONGODB_URL=
-# MONGODB_DB_NAME=chat-ui
-# MONGODB_DIRECT_CONNECTION=false
-
-
-## Public app configuration ##
-PUBLIC_APP_NAME=ChatUI # name used as title throughout the app
-PUBLIC_APP_ASSETS=chatui # used to find logos & favicons in static/$PUBLIC_APP_ASSETS
-PUBLIC_APP_DESCRIPTION="Making the community's best AI chat models available to everyone."# description used throughout the app
-PUBLIC_ORIGIN=
-PUBLIC_SHARE_PREFIX=
-PUBLIC_GOOGLE_ANALYTICS_ID=
-PUBLIC_PLAUSIBLE_SCRIPT_URL=
-PUBLIC_APPLE_APP_ID=
-
-COUPLE_SESSION_WITH_COOKIE_NAME=
-# when OPEN_ID is configured, users are required to login after the welcome modal
-OPENID_CLIENT_ID="" # You can set to "__CIMD__" for automatic oauth app creation when deployed, see https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/
-OPENID_CLIENT_SECRET=
-OPENID_SCOPES="openid profile inference-api read-mcp read-billing"
-USE_USER_TOKEN=
-AUTOMATIC_LOGIN=# if true authentication is required on all routes
-
-### Local Storage ###
-MONGO_STORAGE_PATH= # where is the db folder stored
-
-## Models overrides
-MODELS=
-
-## Task model
-# Optional: set to the model id/name from the `${OPENAI_BASE_URL}/models` list
-# to use for internal tasks (title summarization, etc). If not set, the current model will be used
-TASK_MODEL=
-
-# Arch router (OpenAI-compatible) endpoint base URL used for route selection
-# Example: https://api.openai.com/v1 or your hosted Arch endpoint
-LLM_ROUTER_ARCH_BASE_URL=
-
-## LLM Router Configuration
-# Path to routes policy (JSON array). Required when the router is enabled; must point to a valid JSON file.
-LLM_ROUTER_ROUTES_PATH=
-
-# Model used at the Arch router endpoint for selection
-LLM_ROUTER_ARCH_MODEL=
-
-# Fallback behavior
-# Route to map "other" to (must exist in routes file)
-LLM_ROUTER_OTHER_ROUTE=casual_conversation
-# Model to call if the Arch selection fails entirely
-LLM_ROUTER_FALLBACK_MODEL=
-# Arch selection timeout in milliseconds (default 10000)
-LLM_ROUTER_ARCH_TIMEOUT_MS=10000
-# Maximum length (in characters) for assistant messages sent to router for route selection (default 500)
-LLM_ROUTER_MAX_ASSISTANT_LENGTH=500
-# Maximum length (in characters) for previous user messages sent to router (latest user message not trimmed, default 400)
-LLM_ROUTER_MAX_PREV_USER_LENGTH=400
-
-# Enable router multimodal handling (set to true to allow image inputs via router)
-LLM_ROUTER_ENABLE_MULTIMODAL=
-# Required when LLM_ROUTER_ENABLE_MULTIMODAL=true: id or name of the multimodal model to use for image requests
-LLM_ROUTER_MULTIMODAL_MODEL=
-
-# Enable router tool support (set to true to allow tool calling via router)
-LLM_ROUTER_ENABLE_TOOLS=
-# Required when tools are active: id or name of the model to use for MCP tool calls.
-LLM_ROUTER_TOOLS_MODEL=
-
-# Router UI overrides (client-visible)
-# Public display name for the router entry in the model list. Defaults to "Omni".
-PUBLIC_LLM_ROUTER_DISPLAY_NAME=Omni
-# Optional: public logo URL for the router entry. If unset, the UI shows a Carbon icon.
-PUBLIC_LLM_ROUTER_LOGO_URL=
-# Public alias id used for the virtual router model (Omni). Defaults to "omni".
-PUBLIC_LLM_ROUTER_ALIAS_ID=omni
-
-### Transcription ###
-# Voice-to-text transcription using Whisper models
-# If set, enables the microphone button in the chat input
-# Example: openai/whisper-large-v3-turbo
-TRANSCRIPTION_MODEL=
-# Optional: Base URL for transcription API (defaults to HF inference)
-# Default: https://router.huggingface.co/hf-inference/models
-TRANSCRIPTION_BASE_URL=
-
-### Authentication ###
-# Parameters to enable open id login
-OPENID_CONFIG=
-# if it's defined, only these emails will be allowed to use login
-ALLOWED_USER_EMAILS=[]
-# If it's defined, users with emails matching these domains will also be allowed to use login
-ALLOWED_USER_DOMAINS=[]
-# valid alternative redirect URLs for OAuth, used for HuggingChat apps
-ALTERNATIVE_REDIRECT_URLS=[] 
-### Cookies
-# name of the cookie used to store the session
-COOKIE_NAME=hf-chat
-# If the value of this cookie changes, the session is destroyed. Useful if chat-ui is deployed on a subpath
-# of your domain, and you want chat ui sessions to reset if the user's auth changes
-COUPLE_SESSION_WITH_COOKIE_NAME=
-# specify secure behaviour for cookies 
-COOKIE_SAMESITE=# can be "lax", "strict", "none" or left empty
-COOKIE_SECURE=# set to true to only allow cookies over https
-TRUSTED_EMAIL_HEADER=# header to use to get the user email, only use if you know what you are doing
-
-### Admin stuff ###
-ADMIN_CLI_LOGIN=true # set to false to disable the CLI login
-ADMIN_TOKEN=#We recommend leaving this empty, you can get the token from the terminal.
-
-### Feature Flags ###
-LLM_SUMMARIZATION=true # generate conversation titles with LLMs
- 
-ALLOW_IFRAME=true # Allow the app to be embedded in an iframe
-
-# Base servers list (JSON array). Example: MCP_SERVERS=[{"name": "Web Search (Exa)", "url": "https://mcp.exa.ai/mcp"}, {"name": "Hugging Face", "url": "https://hf.co/mcp"}]
-MCP_SERVERS=
-# When true, forward the logged-in user's Hugging Face access token
-MCP_FORWARD_HF_USER_TOKEN=
-# Exa API key (injected at runtime into mcp.exa.ai URLs as ?exaApiKey=)
-EXA_API_KEY=
-# Timeout in milliseconds for MCP tool calls (default: 120000 = 2 minutes)
-MCP_TOOL_TIMEOUT_MS=
-ENABLE_DATA_EXPORT=true
-
-### Rate limits ### 
-# See `src/lib/server/usageLimits.ts`
-# {
-#   conversations: number, # how many conversations
-#   messages: number, # how many messages in a conversation
-#   assistants: number, # how many assistants
-#   messageLength: number, # how long can a message be before we cut it off
-#   messagesPerMinute: number, # how many messages per minute
-#   tools: number # how many tools
-# }
-USAGE_LIMITS={}
-
-### HuggingFace specific ###
-## Feature flag & admin settings
-# Used for setting early access & admin flags to users
-HF_ORG_ADMIN=
-HF_ORG_EARLY_ACCESS=
-WEBHOOK_URL_REPORT_ASSISTANT=#provide slack webhook url to get notified for reports/feature requests
-
-
-### Metrics ###
-METRICS_ENABLED=false
-METRICS_PORT=5565
-LOG_LEVEL=info
-
-
-### Parquet export ###
-# Not in use anymore but useful to export conversations to a parquet file as a HuggingFace dataset
-PARQUET_EXPORT_DATASET=
-PARQUET_EXPORT_HF_TOKEN=
-ADMIN_API_SECRET=# secret to admin API calls, like computing usage stats or exporting parquet data
-
-### Config ###
-ENABLE_CONFIG_MANAGER=true
-
-### Docker build variables ### 
-# These values cannot be updated at runtime
-# They need to be passed when building the docker image
-# See https://github.com/huggingface/chat-ui/main/.github/workflows/deploy-prod.yml#L44-L47
-APP_BASE="" # base path of the app, e.g. /chat, left blank as default
-### Body size limit for SvelteKit https://svelte.dev/docs/kit/adapter-node#Environment-variables-BODY_SIZE_LIMIT
-BODY_SIZE_LIMIT=15728640
-PUBLIC_COMMIT_SHA=
-
-### LEGACY parameters
-ALLOW_INSECURE_COOKIES=false # LEGACY! Use COOKIE_SECURE and COOKIE_SAMESITE instead
-PARQUET_EXPORT_SECRET=#DEPRECATED, use ADMIN_API_SECRET instead
-RATE_LIMIT= # /!\ DEPRECATED definition of messages per minute. Use USAGE_LIMITS.messagesPerMinute instead
-OPENID_NAME_CLAIM="name" # Change to "username" for some providers that do not provide name
-OPENID_PROVIDER_URL=https://huggingface.co # for Google, use https://accounts.google.com
-OPENID_TOLERANCE=
-OPENID_RESOURCE=
-EXPOSE_API=# deprecated, API is now always exposed

package/src/ruvocal/.env.ci

@@ -1 +0,0 @@
-MONGODB_URL=mongodb://localhost:27017/

package/src/ruvocal/.swarm/hnsw.metadata.json

@@ -1 +0,0 @@
-[["entry_1777949290707_anh69v",{"id":"entry_1777949290707_anh69v","key":"-","namespace":"security_analysis","content":"name: RuVector Security Analysis\ndescription: Completed security audit of ruvector codebase\ntype: project\n---"}],["entry_1777949290871_wdj3j",{"id":"entry_1777949290871_wdj3j","key":"date-2026-04-02","namespace":"security_analysis","content":"Completed comprehensive security analysis of the ruvector npm package codebase across all critical components including CLI, MCP server, and core modules.\n\n**Key Findings:**\n- No hardcoded secrets or API keys detected\n- Good input validation in place for shell commands\n- Path validation is implemented with comprehensive checks\n- Most critical vulnerabilities mitigated through sanitization\n\n**Critical Issues:** 0\n**High Issues:** 2  \n**Medium Issues:** 3\n**Low Issues:** 2\n**Risk Score:** 28/100\n\n"}],["entry_1777949290886_afbl64",{"id":"entry_1777949290886_afbl64","key":"regtest","namespace":"sessions","content":"Session started: regtest"}],["entry_1777949290893_kfjdu",{"id":"entry_1777949290893_kfjdu","key":"test-123","namespace":"tasks","content":"Task completed: test-123"}],["entry_1777949290900_soy8c9",{"id":"entry_1777949290900_soy8c9","key":"test-fix-1","namespace":"tasks","content":"Task completed: test-fix-1"}],["entry_1777949290907_ardoho",{"id":"entry_1777949290907_ardoho","key":"verify-1686-fix","namespace":"tasks","content":"Task completed: Verify dbPath persistence fix increments metrics counts (agent: hooks-tester)"}],["entry_1777949290915_o6ppnq",{"id":"entry_1777949290915_o6ppnq","key":"verify-test-session","namespace":"sessions","content":"Session started: verify-test-session"}],["entry_1777949290922_kdxhgs",{"id":"entry_1777949290922_kdxhgs","key":"test-verify-001","namespace":"tasks","content":"Task completed: test-verify-001"}]]