Disambiguate internal test-helper exports across six modules

src/cli.test.ts

@@ -21,7 +21,7 @@ import * as cliModule from './cli';
 import {
   resolveCopilotApiKey,
   resolveCopilotApiRouting,
-  testHelpers as copilotApiResolverTestHelpers,
+  copilotApiResolverTestHelpers,
 } from './copilot-api-resolver';
 import { redactSecrets } from './redact-secrets';
 

src/container-lifecycle.ts

@@ -466,4 +466,4 @@ function resetAgentExternallyKilled(): void {
 
 /** @internal Exposed only for unit tests — not part of the public API. */
 // ts-prune-ignore-next
-export const testHelpers = { isAgentExternallyKilled, resetAgentExternallyKilled };
+export const containerLifecycleTestHelpers = { isAgentExternallyKilled, resetAgentExternallyKilled };

src/copilot-api-resolver.test.ts

@@ -1,13 +1,13 @@
 import {
   resolveCopilotApiKey,
   resolveCopilotApiRouting,
-  testHelpers,
+  copilotApiResolverTestHelpers,
 } from './copilot-api-resolver';
 
 const {
   deriveCopilotApiTargetFromProviderBaseUrl,
   deriveCopilotApiBasePathFromProviderBaseUrl,
-} = testHelpers;
+} = copilotApiResolverTestHelpers;
 
 describe('resolveCopilotApiKey', () => {
   it('should return COPILOT_API_KEY when set', () => {

src/copilot-api-resolver.ts

@@ -85,7 +85,7 @@ export function resolveCopilotApiRouting(
 
 /** @internal Exposed only for unit tests — not part of the public API. */
 // ts-prune-ignore-next
-export const testHelpers = {
+export const copilotApiResolverTestHelpers = {
   deriveCopilotApiTargetFromProviderBaseUrl,
   deriveCopilotApiBasePathFromProviderBaseUrl,
 };

src/docker-manager-lifecycle.test.ts

@@ -1,5 +1,5 @@
 import { startContainers, runAgentCommand, fastKillAgentContainer, setAwfDockerHost, stopContainers, getLocalDockerEnv } from './docker-manager';
-import { testHelpers as lifecycleTestHelpers } from './container-lifecycle';
+import { containerLifecycleTestHelpers } from './container-lifecycle';
 import { AGENT_CONTAINER_NAME } from './constants';
 import { logger } from './logger';
 import * as fs from 'fs';
@@ -371,7 +371,7 @@ describe('docker-manager lifecycle', () => {
   describe('fastKillAgentContainer', () => {
     beforeEach(() => {
       jest.clearAllMocks();
-      lifecycleTestHelpers.resetAgentExternallyKilled();
+      containerLifecycleTestHelpers.resetAgentExternallyKilled();
     });
 
     it('should call docker stop with default 3-second timeout', async () => {
@@ -407,16 +407,16 @@ describe('docker-manager lifecycle', () => {
     it('should set the externally-killed flag', async () => {
       mockExecaFn.mockResolvedValueOnce({ stdout: '', stderr: '', exitCode: 0 } as any);
 
-      expect(lifecycleTestHelpers.isAgentExternallyKilled()).toBe(false);
+      expect(containerLifecycleTestHelpers.isAgentExternallyKilled()).toBe(false);
       await fastKillAgentContainer();
-      expect(lifecycleTestHelpers.isAgentExternallyKilled()).toBe(true);
+      expect(containerLifecycleTestHelpers.isAgentExternallyKilled()).toBe(true);
     });
 
     it('should set the externally-killed flag even when docker stop fails', async () => {
       mockExecaFn.mockRejectedValueOnce(new Error('docker not found'));
 
       await fastKillAgentContainer();
-      expect(lifecycleTestHelpers.isAgentExternallyKilled()).toBe(true);
+      expect(containerLifecycleTestHelpers.isAgentExternallyKilled()).toBe(true);
     });
   });
 
@@ -512,7 +512,7 @@ describe('docker-manager lifecycle', () => {
     beforeEach(() => {
       testDir = fs.mkdtempSync(path.join(os.tmpdir(), 'awf-test-'));
       jest.clearAllMocks();
-      lifecycleTestHelpers.resetAgentExternallyKilled();
+      containerLifecycleTestHelpers.resetAgentExternallyKilled();
     });
 
     afterEach(() => {

src/docker-manager-utils.test.ts

@@ -1,5 +1,5 @@
 import {
-  testHelpers,
+  hostEnvTestHelpers,
   getSafeHostUid,
   getSafeHostGid,
   getRealUserHome,
@@ -33,31 +33,31 @@ describe('docker-manager utilities', () => {
   describe('subnetsOverlap', () => {
 
     it('should detect overlapping subnets with same CIDR', () => {
-      expect(testHelpers.subnetsOverlap('172.30.0.0/24', '172.30.0.0/24')).toBe(true);
+      expect(hostEnvTestHelpers.subnetsOverlap('172.30.0.0/24', '172.30.0.0/24')).toBe(true);
     });
 
     it('should detect non-overlapping subnets', () => {
-      expect(testHelpers.subnetsOverlap('172.30.0.0/24', '172.31.0.0/24')).toBe(false);
-      expect(testHelpers.subnetsOverlap('192.168.1.0/24', '192.168.2.0/24')).toBe(false);
+      expect(hostEnvTestHelpers.subnetsOverlap('172.30.0.0/24', '172.31.0.0/24')).toBe(false);
+      expect(hostEnvTestHelpers.subnetsOverlap('192.168.1.0/24', '192.168.2.0/24')).toBe(false);
     });
 
     it('should detect when smaller subnet is inside larger subnet', () => {
-      expect(testHelpers.subnetsOverlap('172.16.0.0/16', '172.16.5.0/24')).toBe(true);
-      expect(testHelpers.subnetsOverlap('172.16.5.0/24', '172.16.0.0/16')).toBe(true);
+      expect(hostEnvTestHelpers.subnetsOverlap('172.16.0.0/16', '172.16.5.0/24')).toBe(true);
+      expect(hostEnvTestHelpers.subnetsOverlap('172.16.5.0/24', '172.16.0.0/16')).toBe(true);
     });
 
     it('should detect partial overlap', () => {
-      expect(testHelpers.subnetsOverlap('172.30.0.0/23', '172.30.1.0/24')).toBe(true);
+      expect(hostEnvTestHelpers.subnetsOverlap('172.30.0.0/23', '172.30.1.0/24')).toBe(true);
     });
 
     it('should handle Docker default bridge network', () => {
-      expect(testHelpers.subnetsOverlap('172.17.0.0/16', '172.17.5.0/24')).toBe(true);
-      expect(testHelpers.subnetsOverlap('172.17.0.0/16', '172.18.0.0/16')).toBe(false);
+      expect(hostEnvTestHelpers.subnetsOverlap('172.17.0.0/16', '172.17.5.0/24')).toBe(true);
+      expect(hostEnvTestHelpers.subnetsOverlap('172.17.0.0/16', '172.18.0.0/16')).toBe(false);
     });
 
     it('should handle /32 (single host) networks', () => {
-      expect(testHelpers.subnetsOverlap('192.168.1.1/32', '192.168.1.1/32')).toBe(true);
-      expect(testHelpers.subnetsOverlap('192.168.1.1/32', '192.168.1.2/32')).toBe(false);
+      expect(hostEnvTestHelpers.subnetsOverlap('192.168.1.1/32', '192.168.1.1/32')).toBe(true);
+      expect(hostEnvTestHelpers.subnetsOverlap('192.168.1.1/32', '192.168.1.2/32')).toBe(false);
     });
   });
 

src/host-env.ts

@@ -49,7 +49,7 @@ function subnetsOverlap(subnet1: string, subnet2: string): boolean {
 
 /** @internal Exposed only for unit tests — not part of the public API. */
 // ts-prune-ignore-next
-export const testHelpers = { subnetsOverlap };
+export const hostEnvTestHelpers = { subnetsOverlap };
 
 /**
  * SSL configuration for Docker Compose (when SSL Bump is enabled)

src/host-iptables-cleanup.test.ts

@@ -1,9 +1,9 @@
 import { execaResult, mockedExeca, setupHostIptablesTestSuite } from './test-helpers/host-iptables-test-setup';
 import { cleanupHostIptables, setupHostIptables } from './host-iptables';
-import { testHelpers } from './host-iptables-shared';
+import { iptablesSharedTestHelpers } from './host-iptables-shared';
 
 describe('host-iptables (cleanup)', () => {
-  setupHostIptablesTestSuite(testHelpers.resetIpv6State);
+  setupHostIptablesTestSuite(iptablesSharedTestHelpers.resetIpv6State);
 
   describe('cleanupHostIptables', () => {
     it('should flush and delete both FW_WRAPPER and FW_WRAPPER_V6 chains', async () => {

src/host-iptables-doh.test.ts

@@ -1,9 +1,9 @@
 import { execaResult, mockedExeca, setupHostIptablesTestSuite } from './test-helpers/host-iptables-test-setup';
 import { setupHostIptables } from './host-iptables';
-import { testHelpers } from './host-iptables-shared';
+import { iptablesSharedTestHelpers } from './host-iptables-shared';
 
 describe('host-iptables (doh)', () => {
-  setupHostIptablesTestSuite(testHelpers.resetIpv6State);
+  setupHostIptablesTestSuite(iptablesSharedTestHelpers.resetIpv6State);
 
   describe('setupHostIptables with DoH proxy', () => {
     it('should add HTTPS ACCEPT rule for DoH proxy when dohProxyIp is provided', async () => {

src/host-iptables-host-access.test.ts

@@ -1,9 +1,9 @@
 import { mockedExeca, setupDefaultIptablesMocks, setupHostIptablesTestSuite } from './test-helpers/host-iptables-test-setup';
 import { HostAccessConfig, setupHostIptables } from './host-iptables';
-import { testHelpers } from './host-iptables-shared';
+import { iptablesSharedTestHelpers } from './host-iptables-shared';
 
 describe('host-iptables (host access)', () => {
-  setupHostIptablesTestSuite(testHelpers.resetIpv6State);
+  setupHostIptablesTestSuite(iptablesSharedTestHelpers.resetIpv6State);
 
   describe('setupHostIptables with host access', () => {
     it('should add gateway ACCEPT rules when hostAccess is enabled', async () => {

src/host-iptables-network.test.ts

@@ -1,12 +1,12 @@
 import { execaResult, mockedExeca, setupHostIptablesTestSuite } from './test-helpers/host-iptables-test-setup';
-import { testHelpers as networkTestHelpers } from './host-iptables-network';
+import { iptablesNetworkTestHelpers } from './host-iptables-network';
 import { ensureFirewallNetwork } from './host-iptables';
-import { testHelpers } from './host-iptables-shared';
+import { iptablesSharedTestHelpers } from './host-iptables-shared';
 
-const { cleanupFirewallNetwork } = networkTestHelpers;
+const { cleanupFirewallNetwork } = iptablesNetworkTestHelpers;
 
 describe('host-iptables (network)', () => {
-  setupHostIptablesTestSuite(testHelpers.resetIpv6State);
+  setupHostIptablesTestSuite(iptablesSharedTestHelpers.resetIpv6State);
 
   describe('ensureFirewallNetwork', () => {
     it('should return network config when network already exists', async () => {

src/host-iptables-network.ts

@@ -64,4 +64,4 @@ async function cleanupFirewallNetwork(): Promise<void> {
 }
 
 /** @internal Exposed for testing only */
-export const testHelpers = { cleanupFirewallNetwork };
+export const iptablesNetworkTestHelpers = { cleanupFirewallNetwork };

src/host-iptables-setup.test.ts

@@ -2,13 +2,13 @@ import { API_PROXY_PORTS } from './types';
 import { execaError, execaResult, mockedExeca, setupDefaultIptablesMocks, setupHostIptablesTestSuite } from './test-helpers/host-iptables-test-setup';
 import { isValidPortSpec } from './host-iptables-rules';
 import { setupHostIptables } from './host-iptables';
-import { testHelpers } from './host-iptables-shared';
+import { iptablesSharedTestHelpers } from './host-iptables-shared';
 
 // setupHostIptables intentionally allows the inclusive min:max API proxy port window.
 const apiProxyPortRange = `${Math.min(...Object.values(API_PROXY_PORTS))}:${Math.max(...Object.values(API_PROXY_PORTS))}`;
 
 describe('host-iptables (setup)', () => {
-  setupHostIptablesTestSuite(testHelpers.resetIpv6State);
+  setupHostIptablesTestSuite(iptablesSharedTestHelpers.resetIpv6State);
 
   describe('setupHostIptables', () => {
     it('should throw error if iptables permission denied', async () => {

src/host-iptables-shared.test.ts

@@ -7,12 +7,12 @@ import {
   getDockerBridgeGateway,
   getNetworkBridgeName,
   isIp6tablesAvailable,
-  testHelpers,
+  iptablesSharedTestHelpers,
 } from './host-iptables-shared';
 import { logger } from './logger';
 
 describe('host-iptables-shared', () => {
-  setupHostIptablesTestSuite(testHelpers.resetIpv6State);
+  setupHostIptablesTestSuite(iptablesSharedTestHelpers.resetIpv6State);
 
   describe('cleanupChain', () => {
     it('removes matching DOCKER-USER references in reverse order before deleting the chain', async () => {

src/host-iptables-shared.ts

@@ -24,7 +24,7 @@ function resetIpv6State(): void {
 
 /** @internal Exposed only for unit tests — not part of the public API. */
 // ts-prune-ignore-next
-export const testHelpers = { resetIpv6State };
+export const iptablesSharedTestHelpers = { resetIpv6State };
 
 /**
  * Gets the bridge interface name for the firewall network

src/logs/log-discovery.test.ts

@@ -8,7 +8,7 @@ import * as os from 'os';
 import {
   discoverLogSources,
   selectMostRecent,
-  testHelpers,
+  logDiscoveryTestHelpers,
   validateSource,
   listLogSources,
 } from './log-discovery';
@@ -42,7 +42,7 @@ describe('log-discovery', () => {
     it('should return true when container is running', async () => {
       mockedExeca.mockResolvedValue({ stdout: 'awf-squid', stderr: '' } as never);
 
-      const result = await testHelpers.isContainerRunning('awf-squid');
+      const result = await logDiscoveryTestHelpers.isContainerRunning('awf-squid');
 
       expect(result).toBe(true);
       expect(mockedExeca).toHaveBeenCalledWith('docker', [
@@ -57,23 +57,23 @@ describe('log-discovery', () => {
     it('should return false when container is not running', async () => {
       mockedExeca.mockResolvedValue({ stdout: '', stderr: '' } as never);
 
-      const result = await testHelpers.isContainerRunning('awf-squid');
+      const result = await logDiscoveryTestHelpers.isContainerRunning('awf-squid');
 
       expect(result).toBe(false);
     });
 
     it('should return false when container name does not match exactly', async () => {
       mockedExeca.mockResolvedValue({ stdout: 'awf-squid-old', stderr: '' } as never);
 
-      const result = await testHelpers.isContainerRunning('awf-squid');
+      const result = await logDiscoveryTestHelpers.isContainerRunning('awf-squid');
 
       expect(result).toBe(false);
     });
 
     it('should return false when docker command fails', async () => {
       mockedExeca.mockRejectedValue(new Error('Docker not available'));
 
-      const result = await testHelpers.isContainerRunning('awf-squid');
+      const result = await logDiscoveryTestHelpers.isContainerRunning('awf-squid');
 
       expect(result).toBe(false);
     });

src/logs/log-discovery.ts

@@ -165,7 +165,7 @@ async function isContainerRunning(containerName: string): Promise<boolean> {
 
 /** @internal Exposed only for unit tests — not part of the public API. */
 // ts-prune-ignore-next
-export const testHelpers = { isContainerRunning };
+export const logDiscoveryTestHelpers = { isContainerRunning };
 
 /**
  * Validates and creates a LogSource from a user-specified path or "running" keyword