smol-symphony 0.2.0 → 0.3.0

package/dist/tests/core/extract.test.js

@@ -0,0 +1,139 @@
+// Pure unit tests for src/core/credential/extract.ts — no mocks (every export is
+// pure). Covers the main decision branches: claude shapes, codex ChatGPT-OAuth vs
+// API-key (and the host-only-refresh invariant: refresh_token is never read), JWT
+// exp decoding (incl. a multibyte UTF-8 payload through the atob path), and expiry
+// coercion.
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { extractClaudeToken, extractCodexToken, codexEnvFallback, decodeJwtExpMs, coerceExpiresAtMs, } from '../../src/core/credential/extract.js';
+// Fixtures generated from a `{alg:"none"}` header + the noted payload.
+const JWT_VALID = 'eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJleHAiOjE3MDAwMDAwMDAsInN1YiI6IngifQ.sig'; // exp=1700000000
+const JWT_NOEXP = 'eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJ4In0.sig';
+const JWT_STREXP = 'eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJleHAiOiJzb29uIn0.sig'; // exp="soon"
+const JWT_UTF8 = 'eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJleHAiOjE3MDAwMDAwMDAsIm5hbWUiOiJjYWbDqeKAlOKckyJ9.sig'; // multibyte payload, exp=1700000000
+// ── extractClaudeToken ───────────────────────────────────────────────────────
+test('extractClaudeToken: reads the nested claudeAiOauth bundle', () => {
+    const info = extractClaudeToken({
+        claudeAiOauth: { accessToken: 'sk-live', expiresAt: 1234 },
+    });
+    assert.deepEqual(info, { accessToken: 'sk-live', expiresAtMs: 1234 });
+});
+test('extractClaudeToken: tolerates flat top-level fields', () => {
+    const info = extractClaudeToken({ accessToken: 'flat-tok', expiresAt: 9999 });
+    assert.deepEqual(info, { accessToken: 'flat-tok', expiresAtMs: 9999 });
+});
+test('extractClaudeToken: missing/empty token -> null', () => {
+    assert.equal(extractClaudeToken({ claudeAiOauth: { accessToken: '' } }), null);
+    assert.equal(extractClaudeToken({ claudeAiOauth: {} }), null);
+    assert.equal(extractClaudeToken({}), null);
+    assert.equal(extractClaudeToken(null), null);
+    assert.equal(extractClaudeToken('nope'), null);
+});
+test('extractClaudeToken: unparseable expiresAt -> expiresAtMs null but token kept', () => {
+    const info = extractClaudeToken({ accessToken: 't', expiresAt: { not: 'a date' } });
+    assert.deepEqual(info, { accessToken: 't', expiresAtMs: null });
+});
+// ── extractCodexToken ────────────────────────────────────────────────────────
+test('extractCodexToken: ChatGPT-OAuth token -> chatgptOAuth=true + JWT exp + account id', () => {
+    const info = extractCodexToken({
+        tokens: { access_token: JWT_VALID, account_id: 'acct-1', refresh_token: 'SECRET' },
+    });
+    assert.equal(info?.accessToken, JWT_VALID);
+    assert.equal(info?.chatgptOAuth, true);
+    assert.equal(info?.chatgptAccountId, 'acct-1');
+    assert.equal(info?.expiresAtMs, 1700000000 * 1000);
+});
+test('extractCodexToken: NEVER reads refresh_token (host-only-refresh invariant)', () => {
+    // The refresh token is present but must never surface in the returned TokenInfo.
+    const info = extractCodexToken({
+        tokens: { access_token: JWT_VALID, refresh_token: 'rt_SECRET_must_not_leak' },
+    });
+    assert.equal(info?.accessToken, JWT_VALID);
+    assert.equal(JSON.stringify(info).includes('rt_SECRET_must_not_leak'), false);
+});
+test('extractCodexToken: non-JWT OAuth access token -> expiresAtMs null (degrades safely)', () => {
+    const info = extractCodexToken({ tokens: { access_token: 'opaque-not-a-jwt' } });
+    assert.deepEqual(info, {
+        accessToken: 'opaque-not-a-jwt',
+        expiresAtMs: null,
+        chatgptOAuth: true,
+        chatgptAccountId: null,
+    });
+});
+test('extractCodexToken: no OAuth token -> falls back to OPENAI_API_KEY (API-key route)', () => {
+    const info = extractCodexToken({ OPENAI_API_KEY: 'sk-apikey' });
+    // API key: no chatgptOAuth flag, expiry null (API keys do not expire).
+    assert.deepEqual(info, { accessToken: 'sk-apikey', expiresAtMs: null });
+});
+test('extractCodexToken: empty tokens.access_token falls through to API key', () => {
+    const info = extractCodexToken({
+        tokens: { access_token: '' },
+        OPENAI_API_KEY: 'sk-fallback',
+    });
+    assert.deepEqual(info, { accessToken: 'sk-fallback', expiresAtMs: null });
+});
+test('extractCodexToken: nothing usable -> null', () => {
+    assert.equal(extractCodexToken({}), null);
+    assert.equal(extractCodexToken({ tokens: {} }), null);
+    assert.equal(extractCodexToken({ tokens: 'bad', OPENAI_API_KEY: '' }), null);
+    assert.equal(extractCodexToken(null), null);
+    assert.equal(extractCodexToken([1, 2, 3]), null);
+});
+// ── codexEnvFallback ─────────────────────────────────────────────────────────
+test('codexEnvFallback: OPENAI_API_KEY in env -> API-key TokenInfo', () => {
+    assert.deepEqual(codexEnvFallback({ OPENAI_API_KEY: 'envkey' }), {
+        accessToken: 'envkey',
+        expiresAtMs: null,
+    });
+});
+test('codexEnvFallback: absent/empty -> null', () => {
+    assert.equal(codexEnvFallback({}), null);
+    assert.equal(codexEnvFallback({ OPENAI_API_KEY: '' }), null);
+    assert.equal(codexEnvFallback({ OPENAI_API_KEY: undefined }), null);
+});
+// ── decodeJwtExpMs ───────────────────────────────────────────────────────────
+test('decodeJwtExpMs: well-formed JWT -> exp seconds * 1000', () => {
+    assert.equal(decodeJwtExpMs(JWT_VALID), 1700000000 * 1000);
+});
+test('decodeJwtExpMs: payload with multibyte UTF-8 still decodes the exp', () => {
+    // Exercises the base64url -> atob -> UTF-8 reinterpretation path on a payload
+    // containing non-ASCII bytes (é, em-dash, check mark).
+    assert.equal(decodeJwtExpMs(JWT_UTF8), 1700000000 * 1000);
+});
+test('decodeJwtExpMs: wrong segment count -> null', () => {
+    assert.equal(decodeJwtExpMs('only.two'), null);
+    assert.equal(decodeJwtExpMs('a.b.c.d'), null);
+    assert.equal(decodeJwtExpMs('singlestring'), null);
+});
+test('decodeJwtExpMs: empty payload segment -> null', () => {
+    assert.equal(decodeJwtExpMs('header..sig'), null);
+});
+test('decodeJwtExpMs: non-numeric / missing exp -> null', () => {
+    assert.equal(decodeJwtExpMs(JWT_NOEXP), null);
+    assert.equal(decodeJwtExpMs(JWT_STREXP), null);
+});
+test('decodeJwtExpMs: payload not valid base64/JSON -> null', () => {
+    // '@@@' is not valid base64 content; must degrade to null, not throw.
+    assert.equal(decodeJwtExpMs('h.@@@.s'), null);
+    // Valid base64 of a non-object ("5") -> null.
+    assert.equal(decodeJwtExpMs('h.NQ.s'), null);
+});
+// ── coerceExpiresAtMs ────────────────────────────────────────────────────────
+test('coerceExpiresAtMs: finite number passes through', () => {
+    assert.equal(coerceExpiresAtMs(1717000000000), 1717000000000);
+    assert.equal(coerceExpiresAtMs(0), 0);
+});
+test('coerceExpiresAtMs: numeric string parsed as a number', () => {
+    assert.equal(coerceExpiresAtMs('1717000000000'), 1717000000000);
+});
+test('coerceExpiresAtMs: ISO date string parsed via Date.parse', () => {
+    assert.equal(coerceExpiresAtMs('2024-01-01T00:00:00Z'), Date.parse('2024-01-01T00:00:00Z'));
+});
+test('coerceExpiresAtMs: non-finite / non-coercible -> null', () => {
+    assert.equal(coerceExpiresAtMs(Infinity), null);
+    assert.equal(coerceExpiresAtMs(NaN), null);
+    assert.equal(coerceExpiresAtMs('not-a-date'), null);
+    assert.equal(coerceExpiresAtMs(null), null);
+    assert.equal(coerceExpiresAtMs({}), null);
+});
+//# sourceMappingURL=extract.test.js.map

package/dist/tests/core/extract.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.test.js","sourceRoot":"","sources":["../../../tests/core/extract.test.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,kFAAkF;AAClF,kFAAkF;AAClF,mFAAmF;AACnF,YAAY;AACZ,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAExC,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,sCAAsC,CAAC;AAE9C,uEAAuE;AACvE,MAAM,SAAS,GACb,gFAAgF,CAAC,CAAC,iBAAiB;AACrG,MAAM,SAAS,GAAG,yDAAyD,CAAC;AAC5E,MAAM,UAAU,GAAG,6DAA6D,CAAC,CAAC,aAAa;AAC/F,MAAM,QAAQ,GACZ,8FAA8F,CAAC,CAAC,oCAAoC;AAEtI,gFAAgF;AAEhF,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAC9B,aAAa,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE;KAC3D,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AACxE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;IAC/D,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC3D,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/E,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,GAAG,EAAE;IACxF,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpF,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAI,CAAC,oFAAoF,EAAE,GAAG,EAAE;IAC9F,MAAM,IAAI,GAAG,iBAAiB,CAAC;QAC7B,MAAM,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE;KACnF,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,GAAG,IAAI,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4EAA4E,EAAE,GAAG,EAAE;IACtF,iFAAiF;IACjF,MAAM,IAAI,GAAG,iBAAiB,CAAC;QAC7B,MAAM,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,yBAAyB,EAAE;KAC9E,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,KAAK,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qFAAqF,EAAE,GAAG,EAAE;IAC/F,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACjF,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;QACrB,WAAW,EAAE,kBAAkB;QAC/B,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mFAAmF,EAAE,GAAG,EAAE;IAC7F,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;IAChE,uEAAuE;IACvE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACjF,MAAM,IAAI,GAAG,iBAAiB,CAAC;QAC7B,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC5B,cAAc,EAAE,aAAa;KAC9B,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACrD,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,EAAE;QAC/D,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;IAClD,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,8EAA8E;IAC9E,uDAAuD;IACvD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;IACvD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,sEAAsE;IACtE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,8CAA8C;IAC9C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC3D,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACpE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC"}

package/dist/tests/core/fake-creds.test.js

@@ -0,0 +1,134 @@
+// Pure unit tests for src/core/credential/fake-creds.ts.
+//
+// The functions under test are pure (data -> data), so no mocks: we pass plain
+// data and assert on the returned GondolinFakeCreds / GuestCredFile[] / config
+// JSON. Covers the main decision branches:
+//   - the adapter switch in buildGondolinFakeCreds (claude / codex);
+//   - the placeholder staged VERBATIM as the bearer (exact-match egress);
+//   - the env map always { [secretName]: placeholder };
+//   - claude identity present vs. absent (1 vs. 2 files);
+//   - codex completeness fields + the defense-in-depth UUID/auth_mode/ISO guards
+//     (a token-shaped accountId / bad authMode / bad lastRefresh are OMITTED);
+//   - file mode is 0600 on every staged file.
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { buildGondolinFakeCreds, buildClaudeFiles, buildCodexFiles, validAccountId, } from '../../src/core/credential/fake-creds.js';
+const CLAUDE_PLACEHOLDER = 'PLACEHOLDER-claude-bearer-0123456789';
+const CODEX_PLACEHOLDER = 'eyJhbGciOiJSUzI1NiJ9.PLACEHOLDER.codex';
+const VALID_ACCOUNT_ID = '11111111-2222-3333-4444-555555555555';
+function byPath(files, guestPath) {
+    const f = files.find((x) => x.guestPath === guestPath);
+    assert.ok(f, `expected a staged file at ${guestPath}`);
+    return f;
+}
+function baseInput(over) {
+    return {
+        adapter: 'claude',
+        placeholder: CLAUDE_PLACEHOLDER,
+        secretName: 'ANTHROPIC_AUTH_TOKEN',
+        claudeIdentity: null,
+        codexIdentity: null,
+        ...over,
+    };
+}
+// ---------------------------------------------------------------------------
+// env: always single-entry { [secretName]: placeholder }.
+// ---------------------------------------------------------------------------
+test('env is always { [secretName]: placeholder } for every adapter', () => {
+    const claude = buildGondolinFakeCreds(baseInput({ adapter: 'claude', secretName: 'ANTHROPIC_AUTH_TOKEN', placeholder: CLAUDE_PLACEHOLDER }));
+    assert.deepEqual(claude.env, { ANTHROPIC_AUTH_TOKEN: CLAUDE_PLACEHOLDER });
+    const codex = buildGondolinFakeCreds(baseInput({ adapter: 'codex', secretName: 'CODEX_AUTH', placeholder: CODEX_PLACEHOLDER }));
+    assert.deepEqual(codex.env, { CODEX_AUTH: CODEX_PLACEHOLDER });
+});
+// ---------------------------------------------------------------------------
+// claude branch.
+// ---------------------------------------------------------------------------
+test('claude: no identity -> only .credentials.json, placeholder verbatim, junk refresh, far-future expiry', () => {
+    const { files } = buildGondolinFakeCreds(baseInput({ adapter: 'claude' }));
+    assert.equal(files.length, 1);
+    const creds = byPath(files, '/root/.claude/.credentials.json');
+    assert.equal(creds.mode, 0o600);
+    const parsed = JSON.parse(creds.content);
+    // Placeholder staged VERBATIM (exact-match egress substitution).
+    assert.equal(parsed.claudeAiOauth.accessToken, CLAUDE_PLACEHOLDER);
+    assert.equal(parsed.claudeAiOauth.refreshToken, 'JUNK-PLACEHOLDER-REFRESH-not-a-real-token');
+    assert.equal(parsed.claudeAiOauth.expiresAt, 4_102_444_800_000);
+});
+test('claude: identity present -> also stages scrubbed ~/.claude.json with oauthAccount UUIDs only', () => {
+    const files = buildClaudeFiles(CLAUDE_PLACEHOLDER, {
+        accountUuid: 'acct-uuid',
+        organizationUuid: 'org-uuid',
+    });
+    assert.equal(files.length, 2);
+    const config = byPath(files, '/root/.claude.json');
+    assert.equal(config.mode, 0o600);
+    const parsed = JSON.parse(config.content);
+    assert.equal(parsed.hasCompletedOnboarding, true);
+    assert.deepEqual(parsed.oauthAccount, { accountUuid: 'acct-uuid', organizationUuid: 'org-uuid' });
+    assert.deepEqual(parsed.projects, {});
+    // No token anywhere in the identity file.
+    assert.ok(!config.content.includes(CLAUDE_PLACEHOLDER));
+});
+// ---------------------------------------------------------------------------
+// codex branch.
+// ---------------------------------------------------------------------------
+test('codex: complete identity -> all completeness fields present, placeholder as access+id token', () => {
+    const files = buildCodexFiles(CODEX_PLACEHOLDER, {
+        accountId: VALID_ACCOUNT_ID,
+        authMode: 'chatgpt',
+        lastRefresh: '2026-06-01T00:00:00Z',
+    });
+    assert.equal(files.length, 1);
+    const auth = byPath(files, '/root/.codex/auth.json');
+    assert.equal(auth.mode, 0o600);
+    const parsed = JSON.parse(auth.content);
+    assert.equal(parsed.OPENAI_API_KEY, null);
+    assert.equal(parsed.auth_mode, 'chatgpt');
+    assert.equal(parsed.last_refresh, '2026-06-01T00:00:00Z');
+    assert.equal(parsed.tokens.access_token, CODEX_PLACEHOLDER);
+    assert.equal(parsed.tokens.id_token, CODEX_PLACEHOLDER);
+    assert.equal(parsed.tokens.refresh_token, 'JUNK-PLACEHOLDER-REFRESH-not-a-real-token');
+    assert.equal(parsed.tokens.account_id, VALID_ACCOUNT_ID);
+});
+test('codex: null identity -> OPENAI_API_KEY+tokens only, no account_id/auth_mode/last_refresh', () => {
+    const files = buildCodexFiles(CODEX_PLACEHOLDER, null);
+    const auth = byPath(files, '/root/.codex/auth.json');
+    const parsed = JSON.parse(auth.content);
+    assert.equal(parsed.OPENAI_API_KEY, null);
+    assert.ok(!('auth_mode' in parsed));
+    assert.ok(!('last_refresh' in parsed));
+    assert.ok(!('account_id' in parsed.tokens));
+    // Bearer placeholder still staged verbatim.
+    assert.equal(parsed.tokens.access_token, CODEX_PLACEHOLDER);
+});
+test('codex defense-in-depth: token-shaped accountId / bad authMode / bad lastRefresh are OMITTED', () => {
+    const files = buildCodexFiles(CODEX_PLACEHOLDER, {
+        accountId: 'sk-not-a-uuid-but-token-shaped', // not a UUID -> omitted
+        authMode: 'bogus-mode', // not in the closed set -> omitted
+        lastRefresh: 'definitely not an iso timestamp with spaces', // fails ISO shape -> omitted
+    });
+    const auth = byPath(files, '/root/.codex/auth.json');
+    const parsed = JSON.parse(auth.content);
+    assert.ok(!('account_id' in parsed.tokens), 'token-shaped accountId must be omitted');
+    assert.ok(!('auth_mode' in parsed), 'unknown authMode must be omitted');
+    assert.ok(!('last_refresh' in parsed), 'malformed lastRefresh must be omitted');
+});
+test('validAccountId: UUID passes, token-shaped values are rejected', () => {
+    assert.equal(validAccountId(VALID_ACCOUNT_ID), VALID_ACCOUNT_ID);
+    assert.equal(validAccountId('sk-abc123'), null);
+    assert.equal(validAccountId('eyJhbGciOiJ.jwt.token'), null);
+    assert.equal(validAccountId(null), null);
+});
+// ---------------------------------------------------------------------------
+// dispatch: buildGondolinFakeCreds routes to the right builder.
+// ---------------------------------------------------------------------------
+test('buildGondolinFakeCreds claude routes with identity from the input struct', () => {
+    const { files } = buildGondolinFakeCreds(baseInput({
+        adapter: 'claude',
+        claudeIdentity: { accountUuid: 'a', organizationUuid: 'o' },
+    }));
+    assert.equal(files.length, 2);
+    byPath(files, '/root/.claude/.credentials.json');
+    byPath(files, '/root/.claude.json');
+});
+//# sourceMappingURL=fake-creds.test.js.map

package/dist/tests/core/fake-creds.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-creds.test.js","sourceRoot":"","sources":["../../../tests/core/fake-creds.test.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,2CAA2C;AAC3C,qEAAqE;AACrE,0EAA0E;AAC1E,wDAAwD;AACxD,0DAA0D;AAC1D,iFAAiF;AACjF,+EAA+E;AAC/E,8CAA8C;AAE9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAMxC,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,cAAc,GACf,MAAM,yCAAyC,CAAC;AAEjD,MAAM,kBAAkB,GAAG,sCAAsC,CAAC;AAClE,MAAM,iBAAiB,GAAG,wCAAwC,CAAC;AACnE,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;AAEhE,SAAS,MAAM,CAAC,KAAsB,EAAE,SAAiB;IACvD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,6BAA6B,SAAS,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,IAAiC;IAClD,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kBAAkB;QAC/B,UAAU,EAAE,sBAAsB;QAClC,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;QACnB,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,MAAM,GAAG,sBAAsB,CACnC,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,sBAAsB,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CACtG,CAAC;IACF,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAE3E,MAAM,KAAK,GAAG,sBAAsB,CAClC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAC1F,CAAC;IACF,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,IAAI,CAAC,sGAAsG,EAAE,GAAG,EAAE;IAChH,MAAM,EAAE,KAAK,EAAE,GAAG,sBAAsB,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAEtC,CAAC;IACF,iEAAiE;IACjE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,2CAA2C,CAAC,CAAC;IAC7F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8FAA8F,EAAE,GAAG,EAAE;IACxG,MAAM,KAAK,GAAG,gBAAgB,CAAC,kBAAkB,EAAE;QACjD,WAAW,EAAE,WAAW;QACxB,gBAAgB,EAAE,UAAU;KAC7B,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAIvC,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;IAClG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACtC,0CAA0C;IAC1C,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,IAAI,CAAC,6FAA6F,EAAE,GAAG,EAAE;IACvG,MAAM,KAAK,GAAG,eAAe,CAAC,iBAAiB,EAAE;QAC/C,SAAS,EAAE,gBAAgB;QAC3B,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,sBAAsB;KACpC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAKrC,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,2CAA2C,CAAC,CAAC;IACvF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0FAA0F,EAAE,GAAG,EAAE;IACpG,MAAM,KAAK,GAAG,eAAe,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAErC,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,4CAA4C;IAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6FAA6F,EAAE,GAAG,EAAE;IACvG,MAAM,KAAK,GAAG,eAAe,CAAC,iBAAiB,EAAE;QAC/C,SAAS,EAAE,gCAAgC,EAAE,wBAAwB;QACrE,QAAQ,EAAE,YAAY,EAAE,mCAAmC;QAC3D,WAAW,EAAE,6CAA6C,EAAE,6BAA6B;KAC1F,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAErC,CAAC;IACF,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,wCAAwC,CAAC,CAAC;IACtF,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,EAAE,kCAAkC,CAAC,CAAC;IACxE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,EAAE,uCAAuC,CAAC,CAAC;AAClF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,uBAAuB,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,gEAAgE;AAChE,8EAA8E;AAE9E,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,MAAM,EAAE,KAAK,EAAE,GAAG,sBAAsB,CACtC,SAAS,CAAC;QACR,OAAO,EAAE,QAAQ;QACjB,cAAc,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE;KAC5D,CAAC,CACH,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC"}

package/dist/tests/core/file.test.js

@@ -0,0 +1,197 @@
+// Pure unit tests for the issue-file serializer core. No mocks — the function
+// is total + synchronous; we feed plain data and assert on the returned value.
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { composeIssueFile, } from '../../src/core/issue/file.js';
+const NOW = '2026-06-02T12:00:00.000Z';
+function baseInput(overrides = {}) {
+    return {
+        trackerRoot: '/tmp/tracker',
+        state: 'Todo',
+        title: 'Fix the thing',
+        existingIdentifiers: new Set(),
+        nowIso: NOW,
+        ...overrides,
+    };
+}
+function expectOk(r) {
+    assert.equal(r.ok, true, 'expected ok result');
+    if (!r.ok)
+        throw new Error('unreachable');
+    return r.result;
+}
+function expectErr(r) {
+    assert.equal(r.ok, false, 'expected error result');
+    if (r.ok)
+        throw new Error('unreachable');
+    return r.error;
+}
+// ── numeric next-id picking (no explicit identifier) ────────────────────────
+test('no identifier + empty set → picks "1"', () => {
+    const res = expectOk(composeIssueFile(baseInput()));
+    assert.equal(res.identifier, '1');
+    assert.equal(res.state, 'Todo');
+    assert.equal(res.path, '/tmp/tracker/Todo/1.md');
+});
+test('no identifier + set {1,2} → picks first free "3"', () => {
+    const res = expectOk(composeIssueFile(baseInput({ existingIdentifiers: new Set(['1', '2']) })));
+    assert.equal(res.identifier, '3');
+    assert.equal(res.path, '/tmp/tracker/Todo/3.md');
+});
+test('no identifier ignores non-numeric (slug) ids when picking', () => {
+    const res = expectOk(composeIssueFile(baseInput({ existingIdentifiers: new Set(['add-changelog', 'some-slug']) })));
+    // Slug files are inert — "1" is still free.
+    assert.equal(res.identifier, '1');
+});
+test('no identifier + gap {1,3} → picks "2"', () => {
+    const res = expectOk(composeIssueFile(baseInput({ existingIdentifiers: new Set(['1', '3']) })));
+    assert.equal(res.identifier, '2');
+});
+// ── explicit identifier sanitize + collision ───────────────────────────────
+test('explicit identifier is sanitized (illegal chars → "_")', () => {
+    const res = expectOk(composeIssueFile(baseInput({ identifier: 'my issue/name!' })));
+    assert.equal(res.identifier, 'my_issue_name_');
+    assert.equal(res.path, '/tmp/tracker/Todo/my_issue_name_.md');
+});
+test('explicit identifier preserving allowed chars [A-Za-z0-9._-]', () => {
+    const res = expectOk(composeIssueFile(baseInput({ identifier: 'Feature_42.v-1' })));
+    assert.equal(res.identifier, 'Feature_42.v-1');
+});
+test('explicit identifier trims surrounding whitespace', () => {
+    const res = expectOk(composeIssueFile(baseInput({ identifier: '  bug-7  ' })));
+    assert.equal(res.identifier, 'bug-7');
+});
+test('all-illegal explicit identifier sanitizes to underscores (NOT empty_identifier)', () => {
+    // Every illegal char becomes "_", so sanitize can never yield "" for a
+    // non-blank trimmed input. The empty_identifier branch is preserved from the
+    // original for fidelity but is effectively unreachable via this path: '@@@'
+    // → '___', a valid (non-empty) identifier.
+    const res = expectOk(composeIssueFile(baseInput({ identifier: '@@@' })));
+    assert.equal(res.identifier, '___');
+    assert.equal(res.path, '/tmp/tracker/Todo/___.md');
+});
+test('blank/whitespace identifier falls through to numeric pick (not error)', () => {
+    const res = expectOk(composeIssueFile(baseInput({ identifier: '   ' })));
+    assert.equal(res.identifier, '1');
+});
+test('explicit identifier already present → identifier_exists error', () => {
+    const err = expectErr(composeIssueFile(baseInput({
+        identifier: 'bug-7',
+        existingIdentifiers: new Set(['bug-7']),
+    })));
+    assert.equal(err.code, 'identifier_exists');
+    if (err.code === 'identifier_exists') {
+        assert.equal(err.identifier, 'bug-7');
+        assert.equal(err.path, '/tmp/tracker/Todo/bug-7.md');
+        assert.match(err.message, /already exists/);
+    }
+});
+test('explicit identifier collision compares the SANITIZED form', () => {
+    // "bug 7" sanitizes to "bug_7"; a pre-existing "bug_7" must collide.
+    const err = expectErr(composeIssueFile(baseInput({
+        identifier: 'bug 7',
+        existingIdentifiers: new Set(['bug_7']),
+    })));
+    assert.equal(err.code, 'identifier_exists');
+});
+// ── front matter rendering ──────────────────────────────────────────────────
+test('renders standard front matter in declaration order with JSON-quoted strings', () => {
+    const res = expectOk(composeIssueFile(baseInput({ identifier: '1' })));
+    const expectedFm = [
+        '---',
+        'id: "1"',
+        'identifier: "1"',
+        'title: "Fix the thing"',
+        `created_at: ${JSON.stringify(NOW)}`,
+        `updated_at: ${JSON.stringify(NOW)}`,
+        '---',
+        '',
+    ].join('\n');
+    assert.equal(res.content, expectedFm);
+});
+test('priority (number) is rendered unquoted; null/undefined omitted', () => {
+    const withPrio = expectOk(composeIssueFile(baseInput({ identifier: '1', priority: 3 })));
+    assert.match(withPrio.content, /\npriority: 3\n/);
+    const nullPrio = expectOk(composeIssueFile(baseInput({ identifier: '1', priority: null })));
+    assert.doesNotMatch(nullPrio.content, /priority:/);
+    const noPrio = expectOk(composeIssueFile(baseInput({ identifier: '1' })));
+    assert.doesNotMatch(noPrio.content, /priority:/);
+});
+test('labels and blocked_by render as JSON arrays only when non-empty', () => {
+    const res = expectOk(composeIssueFile(baseInput({ identifier: '1', labels: ['a', 'b'], blocked_by: ['5'] })));
+    assert.match(res.content, /\nlabels: \["a", "b"\]\n/);
+    assert.match(res.content, /\nblocked_by: \["5"\]\n/);
+    const empty = expectOk(composeIssueFile(baseInput({ identifier: '1', labels: [], blocked_by: [] })));
+    assert.doesNotMatch(empty.content, /labels:/);
+    assert.doesNotMatch(empty.content, /blocked_by:/);
+});
+test('extra_front_matter (propose_issue provenance) is appended after standard set', () => {
+    const res = expectOk(composeIssueFile(baseInput({
+        identifier: '1',
+        extra_front_matter: { proposed_by: '42', proposed_at: NOW, dup: true },
+    })));
+    assert.match(res.content, /\nproposed_by: "42"\n/);
+    assert.match(res.content, new RegExp(`\\nproposed_at: ${JSON.stringify(NOW)}\\n`));
+    assert.match(res.content, /\ndup: true\n/);
+    // Appended AFTER updated_at.
+    const idxUpdated = res.content.indexOf('updated_at:');
+    const idxProposed = res.content.indexOf('proposed_by:');
+    assert.ok(idxUpdated < idxProposed, 'extras must come after standard set');
+});
+test('extra_front_matter can override a standard key', () => {
+    const res = expectOk(composeIssueFile(baseInput({ identifier: '1', title: 'orig', extra_front_matter: { title: 'override' } })));
+    // Single title line, with the override value (Object key reuse preserves position).
+    const titleLines = res.content.split('\n').filter((l) => l.startsWith('title:'));
+    assert.equal(titleLines.length, 1);
+    assert.equal(titleLines[0], 'title: "override"');
+});
+// ── body composition ─────────────────────────────────────────────────────────
+test('description body is trimmed and appended with a trailing newline', () => {
+    const res = expectOk(composeIssueFile(baseInput({ identifier: '1', description: '  hello world  ' })));
+    // Front matter ends `...---\n` (the trailing '' element adds one newline after
+    // the closing fence), then the trimmed body + a final newline — no blank line
+    // between the fence and the body, matching the original serializer.
+    assert.ok(res.content.endsWith('---\nhello world\n'), res.content);
+});
+test('blank description produces no body (front matter only)', () => {
+    const res = expectOk(composeIssueFile(baseInput({ identifier: '1', description: '   ' })));
+    assert.ok(res.content.endsWith('---\n'), res.content);
+    // Nothing after the closing fence.
+    const afterFence = res.content.slice(res.content.lastIndexOf('---\n') + 4);
+    assert.equal(afterFence, '');
+});
+// ── emitted effect ───────────────────────────────────────────────────────────
+test('returns exactly one tracker.write_issue Effect carrying the inputs', () => {
+    const res = expectOk(composeIssueFile(baseInput({
+        identifier: 'bug 7',
+        description: 'body',
+        priority: 2,
+        labels: ['x'],
+        blocked_by: ['9'],
+        extra_front_matter: { proposed_by: '1' },
+    })));
+    assert.equal(res.effects.length, 1);
+    const eff = res.effects[0];
+    assert.equal(eff?.family, 'tracker');
+    if (eff?.family === 'tracker' && eff.kind === 'write_issue') {
+        assert.equal(eff.trackerRoot, '/tmp/tracker');
+        assert.equal(eff.state, 'Todo');
+        assert.equal(eff.title, 'Fix the thing');
+        // Effect carries the SANITIZED identifier (matches the chosen id).
+        assert.equal(eff.identifier, 'bug_7');
+        assert.equal(eff.identifier, res.identifier);
+        assert.equal(eff.description, 'body');
+        assert.equal(eff.priority, 2);
+        assert.deepEqual(eff.labels, ['x']);
+        assert.deepEqual(eff.blocked_by, ['9']);
+        assert.deepEqual(eff.extraFrontMatter, { proposed_by: '1' });
+    }
+    else {
+        assert.fail('expected tracker.write_issue effect');
+    }
+});
+test('path is POSIX-joined and collapses a trailing slash on the root', () => {
+    const res = expectOk(composeIssueFile(baseInput({ trackerRoot: '/tmp/tracker/', identifier: '1' })));
+    assert.equal(res.path, '/tmp/tracker/Todo/1.md');
+});
+//# sourceMappingURL=file.test.js.map

package/dist/tests/core/file.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.test.js","sourceRoot":"","sources":["../../../tests/core/file.test.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAE/E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAExC,OAAO,EACL,gBAAgB,GAEjB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,GAAG,GAAG,0BAA0B,CAAC;AAEvC,SAAS,SAAS,CAAC,YAA4C,EAAE;IAC/D,OAAO;QACL,WAAW,EAAE,cAAc;QAC3B,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,eAAe;QACtB,mBAAmB,EAAE,IAAI,GAAG,EAAU;QACtC,MAAM,EAAE,GAAG;QACX,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,CAAsC;IACtD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,CAAsC;IACvD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,uBAAuB,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC,KAAK,CAAC;AACjB,CAAC;AAED,+EAA+E;AAE/E,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,MAAM,GAAG,GAAG,QAAQ,CAClB,gBAAgB,CAAC,SAAS,CAAC,EAAE,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAC1E,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,GAAG,GAAG,QAAQ,CAClB,gBAAgB,CACd,SAAS,CAAC,EAAE,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAC5E,CACF,CAAC;IACF,4CAA4C;IAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACjD,MAAM,GAAG,GAAG,QAAQ,CAClB,gBAAgB,CAAC,SAAS,CAAC,EAAE,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAC1E,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAE9E,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;IAClE,MAAM,GAAG,GAAG,QAAQ,CAClB,gBAAgB,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAC9D,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,GAAG,GAAG,QAAQ,CAClB,gBAAgB,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAC9D,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iFAAiF,EAAE,GAAG,EAAE;IAC3F,uEAAuE;IACvE,6EAA6E;IAC7E,4EAA4E;IAC5E,2CAA2C;IAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACjF,MAAM,GAAG,GAAG,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,GAAG,GAAG,SAAS,CACnB,gBAAgB,CACd,SAAS,CAAC;QACR,UAAU,EAAE,OAAO;QACnB,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;KACxC,CAAC,CACH,CACF,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,qEAAqE;IACrE,MAAM,GAAG,GAAG,SAAS,CACnB,gBAAgB,CACd,SAAS,CAAC;QACR,UAAU,EAAE,OAAO;QACnB,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;KACxC,CAAC,CACH,CACF,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAE/E,IAAI,CAAC,6EAA6E,EAAE,GAAG,EAAE;IACvF,MAAM,GAAG,GAAG,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG;QACjB,KAAK;QACL,SAAS;QACT,iBAAiB;QACjB,wBAAwB;QACxB,eAAe,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;QACpC,eAAe,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;QACpC,KAAK;QACL,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEnD,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,GAAG,GAAG,QAAQ,CAClB,gBAAgB,CACd,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CACtE,CACF,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAErD,MAAM,KAAK,GAAG,QAAQ,CACpB,gBAAgB,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAC7E,CAAC;IACF,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,GAAG,EAAE;IACxF,MAAM,GAAG,GAAG,QAAQ,CAClB,gBAAgB,CACd,SAAS,CAAC;QACR,UAAU,EAAE,GAAG;QACf,kBAAkB,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;KACvE,CAAC,CACH,CACF,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACnF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC3C,6BAA6B;IAC7B,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,CAAC,EAAE,CAAC,UAAU,GAAG,WAAW,EAAE,qCAAqC,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,GAAG,GAAG,QAAQ,CAClB,gBAAgB,CACd,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CACzF,CACF,CAAC;IACF,oFAAoF;IACpF,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;IAC5E,MAAM,GAAG,GAAG,QAAQ,CAClB,gBAAgB,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC,CACjF,CAAC;IACF,+EAA+E;IAC/E,8EAA8E;IAC9E,oEAAoE;IACpE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;IAClE,MAAM,GAAG,GAAG,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACtD,mCAAmC;IACnC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,GAAG,GAAG,QAAQ,CAClB,gBAAgB,CACd,SAAS,CAAC;QACR,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,MAAM;QACnB,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,CAAC,GAAG,CAAC;QACb,UAAU,EAAE,CAAC,GAAG,CAAC;QACjB,kBAAkB,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE;KACzC,CAAC,CACH,CACF,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACrC,IAAI,GAAG,EAAE,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QACzC,mEAAmE;QACnE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,GAAG,GAAG,QAAQ,CAClB,gBAAgB,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAC/E,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC"}

package/dist/tests/core/git-result.test.js

@@ -0,0 +1,113 @@
+// Pure unit tests for the git push / gh PR-create result classifiers (§4a). These
+// were stranded inline in the IO effect-interpreter; pinned here so the rejection
+// regex + PR-number parse can't silently drift from the behavior they replaced.
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { classifyPushResult, parsePrNumberFromUrl, isWorkflowScopeDecline, describeHandoffFailure, } from '../../src/core/git/result.js';
+function result(over) {
+    return { ran: true, exit_code: 0, signal: null, timed_out: false, stdout: '', stderr: '', ...over };
+}
+// ─── classifyPushResult ──────────────────────────────────────────────────────
+test('classifyPushResult: exit 0 is clean and never non-fast-forward', () => {
+    assert.deepEqual(classifyPushResult(result({ exit_code: 0 })), { clean: true, nonFastForward: false });
+    // Even if the (successful) output happens to contain the word "rejected", a
+    // clean push is never flagged NFF.
+    assert.deepEqual(classifyPushResult(result({ exit_code: 0, stderr: 'remote: rejected nothing' })), { clean: true, nonFastForward: false });
+});
+test('classifyPushResult: a non-fast-forward rejection is flagged from stderr', () => {
+    const r = result({
+        exit_code: 1,
+        stderr: ' ! [rejected]        main -> main (non-fast-forward)\nerror: failed to push some refs',
+    });
+    assert.deepEqual(classifyPushResult(r), { clean: false, nonFastForward: true });
+});
+test('classifyPushResult: each git phrasing of the rejection matches', () => {
+    for (const phrase of ['non-fast-forward', 'fetch first', '(non-fast-forward)', 'Updates were rejected']) {
+        const r = classifyPushResult(result({ exit_code: 1, stderr: phrase }));
+        assert.equal(r.nonFastForward, true, `phrase "${phrase}" should be NFF`);
+    }
+});
+test('classifyPushResult: a non-NFF failure is not flagged (clean=false, NFF=false)', () => {
+    const r = result({ exit_code: 128, stderr: 'fatal: repository not found' });
+    assert.deepEqual(classifyPushResult(r), { clean: false, nonFastForward: false });
+});
+test('classifyPushResult: a server-side [remote rejected] decline is NOT non-fast-forward (227)', () => {
+    // The 227 case: GitHub declines a `.github/workflows/` edit because the PAT
+    // lacks `workflow` scope. The message contains the bare word "rejected", which
+    // the old regex false-positived into NFF recovery (its fetch then masked this
+    // real reason with "couldn't find remote ref"). It must now classify NOT NFF so
+    // the push fails fast with this actionable stderr.
+    const r = result({
+        exit_code: 1,
+        stderr: ' ! [remote rejected] agent/224 -> agent/224 (refusing to allow a Personal Access Token ' +
+            'to create or update workflow `.github/workflows/release.yml` without `workflow` scope)\n' +
+            'error: failed to push some refs',
+    });
+    assert.deepEqual(classifyPushResult(r), { clean: false, nonFastForward: false });
+});
+test('classifyPushResult: a (push declined …) pre-receive decline is NOT non-fast-forward', () => {
+    const r = result({
+        exit_code: 1,
+        stderr: ' ! [remote rejected] agent/224 -> agent/224 (push declined due to repository rule violations)',
+    });
+    assert.deepEqual(classifyPushResult(r), { clean: false, nonFastForward: false });
+});
+test('classifyPushResult: matches across the combined stdout+stderr', () => {
+    // The original tested `${stdout}\n${stderr}`; a phrase split or living on stdout
+    // still matches.
+    const r = classifyPushResult(result({ exit_code: 1, stdout: 'hint: fetch first', stderr: '' }));
+    assert.equal(r.nonFastForward, true);
+});
+// ─── parsePrNumberFromUrl ────────────────────────────────────────────────────
+test('parsePrNumberFromUrl: takes the last line and parses /pull/<n>', () => {
+    // gh prints a couple of progress lines then the URL as the final line.
+    const stdout = '\nCreating pull request for feat into main\nhttps://github.com/o/r/pull/4321\n';
+    assert.deepEqual(parsePrNumberFromUrl(stdout), { number: 4321, url: 'https://github.com/o/r/pull/4321' });
+});
+test('parsePrNumberFromUrl: a single-line URL parses', () => {
+    assert.deepEqual(parsePrNumberFromUrl('https://github.com/o/r/pull/7'), {
+        number: 7,
+        url: 'https://github.com/o/r/pull/7',
+    });
+});
+test('parsePrNumberFromUrl: a URL with no /pull/<n> surfaces the URL with number 0', () => {
+    assert.deepEqual(parsePrNumberFromUrl('https://github.com/o/r'), { number: 0, url: 'https://github.com/o/r' });
+});
+test('parsePrNumberFromUrl: empty stdout yields number 0 and empty url', () => {
+    assert.deepEqual(parsePrNumberFromUrl(''), { number: 0, url: '' });
+    assert.deepEqual(parsePrNumberFromUrl('   \n  \n'), { number: 0, url: '' });
+});
+// ─── isWorkflowScopeDecline / describeHandoffFailure (issue 235) ──────────────
+const WORKFLOW_DECLINE = ' ! [remote rejected] agent/235 -> agent/235 (refusing to allow a Personal Access Token ' +
+    'to create or update workflow `.github/workflows/ci.yml` without `workflow` scope)\n' +
+    'error: failed to push some refs';
+test('isWorkflowScopeDecline: the GitHub workflow-scope server-side decline matches', () => {
+    assert.equal(isWorkflowScopeDecline(WORKFLOW_DECLINE), true);
+    // The trailing "without `workflow` scope" clause alone is enough.
+    assert.equal(isWorkflowScopeDecline('push declined: missing `workflow` scope'), true);
+    // An OAuth-app variant of the same refusal.
+    assert.equal(isWorkflowScopeDecline('refusing to allow an OAuth App to create or update workflow `x.yml`'), true);
+});
+test('isWorkflowScopeDecline: a non-fast-forward / generic failure does NOT match', () => {
+    assert.equal(isWorkflowScopeDecline(' ! [rejected] main -> main (non-fast-forward)'), false);
+    assert.equal(isWorkflowScopeDecline('fatal: unable to access ... Connection timed out'), false);
+    // A bare branch-protection decline (no workflow scope) is a different handoff
+    // failure and is left to pass through unchanged.
+    assert.equal(isWorkflowScopeDecline('push declined due to repository rule violations'), false);
+});
+test('describeHandoffFailure: a workflow-scope decline is rewritten to "manual SSH push required", keeping the raw error', () => {
+    const out = describeHandoffFailure(WORKFLOW_DECLINE);
+    assert.ok(out.startsWith('manual SSH push required'), 'leads with the actionable instruction');
+    assert.ok(out.includes('Workflows:write'), 'names the missing permission');
+    assert.ok(out.includes('.github/workflows/'), 'names the triggering path');
+    assert.ok(out.includes(WORKFLOW_DECLINE), 'appends the original git error verbatim');
+});
+test('describeHandoffFailure: a non-workflow reason passes through unchanged', () => {
+    const nff = ' ! [rejected] main -> main (non-fast-forward)';
+    assert.equal(describeHandoffFailure(nff), nff);
+});
+test('describeHandoffFailure: idempotent — an already-rewritten reason is not double-wrapped', () => {
+    const once = describeHandoffFailure(WORKFLOW_DECLINE);
+    assert.equal(describeHandoffFailure(once), once);
+});
+//# sourceMappingURL=git-result.test.js.map