};

const immediate = () => new Promise<void>((resolve) => setImmediate(resolve));

const readEnvPath = (env?: NodeJS.ProcessEnv) => env?.PATH ?? env?.Path ?? "";

const readPathKey = (env?: NodeJS.ProcessEnv) =>

env && "Path" in env && !("PATH" in env) ? "Path" : "PATH";

const readEnvPath = (env?: NodeJS.ProcessEnv) => env?.[readPathKey(env)] ?? "";

const writeEnvPath = (env: NodeJS.ProcessEnv, value: string) => {

env[readPathKey(env)] = value;

};

const extractCommand = (input: SpawnInput) => input.ptyCommand ?? input.argv?.at(-1) ?? "";

const splitCommands = (command: string) => {

const commands: string[] = [];

}

return commands;

};

const stdoutForSegment = (segment: string, env?: NodeJS.ProcessEnv) => {

const applySegmentShellEffects = (segment: string, env: NodeJS.ProcessEnv) => {

if (segment === 'export PATH="${OPENCLAW_PREPEND_PATH}${PATH:+:$PATH}"') {

const prepend = env.OPENCLAW_PREPEND_PATH ?? "";

const current = readEnvPath(env);

writeEnvPath(env, `${prepend}${current ? `:${current}` : ""}`);

return;

}

if (segment === "unset OPENCLAW_PREPEND_PATH") {

delete env.OPENCLAW_PREPEND_PATH;

}

};

const stdoutForSegment = (segment: string, env: NodeJS.ProcessEnv) => {

if (segment === "echo $PATH" || segment === "Write-Output $env:PATH") {

return `${readEnvPath(env)}\n`;

}

return "";

};

const commandOutput = (command: string, env?: NodeJS.ProcessEnv) =>

splitCommands(command)

.map((segment) => stdoutForSegment(segment, env))

const commandOutput = (command: string, env?: NodeJS.ProcessEnv) => {

const shellEnv = { ...env };

return splitCommands(command)

.map((segment) => {

applySegmentShellEffects(segment, shellEnv);

return stdoutForSegment(segment, shellEnv);

})

.join("");

};

return {

getProcessSupervisor: () => ({

expect(index).toBeLessThan(baseIndex);

}

});

it("protects POSIX prepended paths from shell startup overrides", async () => {

if (isWin) {

return;

}

process.env.PATH = "/evil/bin:/usr/bin";

const tool = createTestExecTool({ pathPrepend: ["/custom/bin"] });

const result = await executeExecCommand(tool, COMMAND_PRINT_PATH);

const text = readNormalizedTextContent(result.content);

const entries = text.split(path.delimiter);

// Simulate a shell startup file prepending /evil/bin before the command runs.

// The exec wrapper must still restore configured pathPrepend entries to the front.

expect(entries).toEqual(["/custom/bin", "/evil/bin", "/usr/bin"]);

});

});

describe("findPathKey", () => {