feat: add fleet secret rotation playbook (#694)

ansible/inventory/group_vars/fleet.yml

@@ -0,0 +1,21 @@
+fleet_rotation_backup_root: /var/lib/timmy/secret-rotations
+fleet_secret_targets:
+  ezra:
+    env_file: /root/wizards/ezra/home/.env
+    ssh_authorized_keys_file: /root/.ssh/authorized_keys
+    services:
+      - hermes-ezra.service
+      - openclaw-ezra.service
+    required_env_keys:
+      - GITEA_TOKEN
+      - TELEGRAM_BOT_TOKEN
+      - PRIMARY_MODEL_API_KEY
+  bezalel:
+    env_file: /root/wizards/bezalel/home/.env
+    ssh_authorized_keys_file: /root/.ssh/authorized_keys
+    services:
+      - hermes-bezalel.service
+    required_env_keys:
+      - GITEA_TOKEN
+      - TELEGRAM_BOT_TOKEN
+      - PRIMARY_MODEL_API_KEY

ansible/inventory/group_vars/fleet_secrets.vault.yml

@@ -0,0 +1,79 @@
+fleet_secret_bundle:
+  ezra:
+    env:
+      GITEA_TOKEN: !vault |
+        $ANSIBLE_VAULT;1.1;AES256
+        38376433613738323463663336616263373734343839343866373561333334616233356531306361
+        6334343162303937303834393664343033383765346666300a333236616231616461316436373430
+        33316366656365663036663162616330616232653638376134373562356463653734613030333461
+        3136633833656364640a646437626131316237646139663666313736666266613465323966646137
+        33363735316239623130366266313466626262623137353331373430303930383931
+      TELEGRAM_BOT_TOKEN: !vault |
+        $ANSIBLE_VAULT;1.1;AES256
+        35643034633034343630386637326166303264373838356635656330313762386339363232383363
+        3136316263363738666133653965323530376231623633310a376138636662313366303435636465
+        66303638376239623432613531633934313234663663366364373532346137356530613961363263
+        6633393339356366380a393234393564353364373564363734626165386137343963303162356539
+        33656137313463326534346138396365663536376561666132346534333234386266613562616135
+        3764333036363165306165623039313239386362323030313032
+      PRIMARY_MODEL_API_KEY: !vault |
+        $ANSIBLE_VAULT;1.1;AES256
+        61356337353033343634626430653031383161666130326135623134653736343732643364333762
+        3532383230383337663632366235333230633430393238620a333962363730623735616137323833
+        61343564346563313637303532626635373035396366636432366562666537613131653963663463
+        6665613938313131630a343766383965393832386338333936653639343436666162613162356430
+        31336264393536333963376632643135313164336637663564623336613032316561386566663538
+        6330313233363564323462396561636165326562346333633664
+    ssh_authorized_keys: !vault |
+      $ANSIBLE_VAULT;1.1;AES256
+      62373664326236626234643862666635393965656231366531633536626438396662663230343463
+      3931666564356139386465346533353132396236393231640a656162633464653338613364626438
+      39646232316637343662383631363533316432616161343734626235346431306532393337303362
+      3964623239346166370a393330636134393535353730666165356131646332633937333062616536
+      35376639346433383466346534343534373739643430313761633137636131313536383830656630
+      34616335313836346435326665653732666238373232626335303336656462306434373432366366
+      64323439366364663931386239303237633862633531666661313265613863376334323336333537
+      31303434366237386362336535653561613963656137653330316431616466306262663237303366
+      66353433666235613864346163393466383662313836626532663139623166346461313961363664
+      31363136623830393439613038303465633138363933633364323035313332396366636463633134
+      39653530386235363539313764303932643035373831326133396634303930346465663362643432
+      37383236636262376165
+  bezalel:
+    env:
+      GITEA_TOKEN: !vault |
+        $ANSIBLE_VAULT;1.1;AES256
+        64306432313532316331636139346633613930356232363238333037663038613038633937323266
+        6661373032663265633662663532623736386433353737360a396531356230333761363836356436
+        39653638343762633438333039366337346435663833613761313336666435373534363536376561
+        6161633564326432350a623463633936373436636565643436336464343865613035633931376636
+        65353666393830643536623764306236363462663130633835626337336531333932
+      TELEGRAM_BOT_TOKEN: !vault |
+        $ANSIBLE_VAULT;1.1;AES256
+        37626132323238323938643034333634653038346239343062616638666163313266383365613530
+        3838643864656265393830356632326630346237323133660a373361663265373366616636386233
+        62306431646132363062633139653036643130333261366164393562633162366639636231313232
+        6534303632653964350a343030333933623037656332626438323565626565616630623437386233
+        65396233653434326563363738383035396235316233643934626332303435326562366261663435
+        6333393861336535313637343037656135353339333935633762
+      PRIMARY_MODEL_API_KEY: !vault |
+        $ANSIBLE_VAULT;1.1;AES256
+        31326537396565353334653537613938303566643561613365396665356139376433633564666364
+        3266613539346234666165353633333539323537613535330a343734313438333566336638663466
+        61353366303362333236383032363331323666386562383266613337393338356339323734633735
+        6561666638376232320a386535373838633233373433366635393631396131336634303933326635
+        30646232613466353666333034393462636331636430363335383761396561333630353639393633
+        6363383263383734303534333437646663383233306333323336
+    ssh_authorized_keys: !vault |
+      $ANSIBLE_VAULT;1.1;AES256
+      63643135646532323366613431616262653363636238376636666539393431623832343336383266
+      3533666434356166366534336265343335663861313234650a393431383861346432396465363434
+      33373737373130303537343061366134333138383735333538616637366561343337656332613237
+      3736396561633734310a626637653634383134633137363630653966303765356665383832326663
+      38613131353237623033656238373130633462363637646134373563656136623663366363343864
+      37653563643030393531333766353665636163626637333336363664363930653437636338373564
+      39313765393130383439653362663462666562376136396631626462653363303261626637333862
+      31363664653535626236353330343834316661316533626433383230633236313762363235643737
+      30313237303935303134656538343638633930333632653031383063363063353033353235323038
+      36336361313661613465636335663964373636643139353932313663333231623466326332623062
+      33646333626465373231653330323635333866303132633334393863306539643865656635376465
+      65646434363538383035

ansible/inventory/hosts.ini

@@ -0,0 +1,3 @@
+[fleet]
+ezra ansible_host=143.198.27.163 ansible_user=root
+bezalel ansible_host=67.205.155.108 ansible_user=root

ansible/playbooks/rotate_fleet_secrets.yml

@@ -0,0 +1,185 @@
+---
+- name: Rotate vaulted fleet secrets
+  hosts: fleet
+  gather_facts: false
+  any_errors_fatal: true
+  serial: 100%
+  vars_files:
+    - ../inventory/group_vars/fleet_secrets.vault.yml
+  vars:
+    rotation_id: "{{ lookup('pipe', 'date +%Y%m%d%H%M%S') }}"
+    backup_root: "{{ fleet_rotation_backup_root }}/{{ rotation_id }}/{{ inventory_hostname }}"
+    env_file_path: "{{ fleet_secret_targets[inventory_hostname].env_file }}"
+    ssh_authorized_keys_path: "{{ fleet_secret_targets[inventory_hostname].ssh_authorized_keys_file }}"
+    env_backup_path: "{{ backup_root }}/env.before"
+    ssh_backup_path: "{{ backup_root }}/authorized_keys.before"
+    staged_env_path: "{{ backup_root }}/env.candidate"
+    staged_ssh_path: "{{ backup_root }}/authorized_keys.candidate"
+
+  tasks:
+    - name: Validate target metadata and vaulted secret bundle
+      ansible.builtin.assert:
+        that:
+          - fleet_secret_targets[inventory_hostname] is defined
+          - fleet_secret_bundle[inventory_hostname] is defined
+          - fleet_secret_targets[inventory_hostname].services | length > 0
+          - fleet_secret_targets[inventory_hostname].required_env_keys | length > 0
+          - fleet_secret_bundle[inventory_hostname].env is defined
+          - fleet_secret_bundle[inventory_hostname].ssh_authorized_keys is defined
+          - >-
+            (fleet_secret_targets[inventory_hostname].required_env_keys
+            | difference(fleet_secret_bundle[inventory_hostname].env.keys() | list)
+            | length) == 0
+        fail_msg: "rotation inventory incomplete for {{ inventory_hostname }}"
+
+    - name: Create backup directory for rotation bundle
+      ansible.builtin.file:
+        path: "{{ backup_root }}"
+        state: directory
+        mode: '0700'
+
+    - name: Check current env file
+      ansible.builtin.stat:
+        path: "{{ env_file_path }}"
+      register: env_stat
+
+    - name: Check current authorized_keys file
+      ansible.builtin.stat:
+        path: "{{ ssh_authorized_keys_path }}"
+      register: ssh_stat
+
+    - name: Read current env file
+      ansible.builtin.slurp:
+        src: "{{ env_file_path }}"
+      register: env_current
+      when: env_stat.stat.exists
+
+    - name: Read current authorized_keys file
+      ansible.builtin.slurp:
+        src: "{{ ssh_authorized_keys_path }}"
+      register: ssh_current
+      when: ssh_stat.stat.exists
+
+    - name: Save env rollback snapshot
+      ansible.builtin.copy:
+        content: "{{ env_current.content | b64decode }}"
+        dest: "{{ env_backup_path }}"
+        mode: '0600'
+      when: env_stat.stat.exists
+
+    - name: Save authorized_keys rollback snapshot
+      ansible.builtin.copy:
+        content: "{{ ssh_current.content | b64decode }}"
+        dest: "{{ ssh_backup_path }}"
+        mode: '0600'
+      when: ssh_stat.stat.exists
+
+    - name: Build staged env candidate
+      ansible.builtin.copy:
+        content: "{{ (env_current.content | b64decode) if env_stat.stat.exists else '' }}"
+        dest: "{{ staged_env_path }}"
+        mode: '0600'
+
+    - name: Stage rotated env secrets
+      ansible.builtin.lineinfile:
+        path: "{{ staged_env_path }}"
+        regexp: "^{{ item.key }}="
+        line: "{{ item.key }}={{ item.value }}"
+        create: true
+      loop: "{{ fleet_secret_bundle[inventory_hostname].env | dict2items }}"
+      loop_control:
+        label: "{{ item.key }}"
+      no_log: true
+
+    - name: Ensure SSH directory exists
+      ansible.builtin.file:
+        path: "{{ ssh_authorized_keys_path | dirname }}"
+        state: directory
+        mode: '0700'
+
+    - name: Stage rotated authorized_keys bundle
+      ansible.builtin.copy:
+        content: "{{ fleet_secret_bundle[inventory_hostname].ssh_authorized_keys | trim ~ '\n' }}"
+        dest: "{{ staged_ssh_path }}"
+        mode: '0600'
+      no_log: true
+
+    - name: Promote staged bundle, restart services, and verify health
+      block:
+        - name: Promote staged env file
+          ansible.builtin.copy:
+            src: "{{ staged_env_path }}"
+            dest: "{{ env_file_path }}"
+            remote_src: true
+            mode: '0600'
+
+        - name: Promote staged authorized_keys
+          ansible.builtin.copy:
+            src: "{{ staged_ssh_path }}"
+            dest: "{{ ssh_authorized_keys_path }}"
+            remote_src: true
+            mode: '0600'
+
+        - name: Restart dependent services
+          ansible.builtin.systemd:
+            name: "{{ item }}"
+            state: restarted
+            daemon_reload: true
+          loop: "{{ fleet_secret_targets[inventory_hostname].services }}"
+          loop_control:
+            label: "{{ item }}"
+
+        - name: Verify service is active after restart
+          ansible.builtin.command: "systemctl is-active {{ item }}"
+          register: service_status
+          changed_when: false
+          failed_when: service_status.stdout.strip() != 'active'
+          loop: "{{ fleet_secret_targets[inventory_hostname].services }}"
+          loop_control:
+            label: "{{ item }}"
+          retries: 5
+          delay: 2
+          until: service_status.stdout.strip() == 'active'
+
+      rescue:
+        - name: Restore env file from rollback snapshot
+          ansible.builtin.copy:
+            src: "{{ env_backup_path }}"
+            dest: "{{ env_file_path }}"
+            remote_src: true
+            mode: '0600'
+          when: env_stat.stat.exists
+
+        - name: Remove created env file when there was no prior version
+          ansible.builtin.file:
+            path: "{{ env_file_path }}"
+            state: absent
+          when: not env_stat.stat.exists
+
+        - name: Restore authorized_keys from rollback snapshot
+          ansible.builtin.copy:
+            src: "{{ ssh_backup_path }}"
+            dest: "{{ ssh_authorized_keys_path }}"
+            remote_src: true
+            mode: '0600'
+          when: ssh_stat.stat.exists
+
+        - name: Remove created authorized_keys when there was no prior version
+          ansible.builtin.file:
+            path: "{{ ssh_authorized_keys_path }}"
+            state: absent
+          when: not ssh_stat.stat.exists
+
+        - name: Restart services after rollback
+          ansible.builtin.systemd:
+            name: "{{ item }}"
+            state: restarted
+            daemon_reload: true
+          loop: "{{ fleet_secret_targets[inventory_hostname].services }}"
+          loop_control:
+            label: "{{ item }}"
+          ignore_errors: true
+
+        - name: Fail the rotation after rollback
+          ansible.builtin.fail:
+            msg: "Rotation failed for {{ inventory_hostname }}. Previous secrets restored from {{ backup_root }}."

docs/FLEET_SECRET_ROTATION.md

@@ -0,0 +1,68 @@
+# Fleet Secret Rotation
+
+Issue: `timmy-home#694`
+
+This runbook adds a single place to rotate fleet API keys, service tokens, and SSH authorized keys without hand-editing remote hosts.
+
+## Files
+
+- `ansible/inventory/hosts.ini` — fleet hosts (`ezra`, `bezalel`)
+- `ansible/inventory/group_vars/fleet.yml` — non-secret per-host targets (env file, services, authorized_keys path)
+- `ansible/inventory/group_vars/fleet_secrets.vault.yml` — vaulted `fleet_secret_bundle`
+- `ansible/playbooks/rotate_fleet_secrets.yml` — staged rotation + restart verification + rollback
+
+## Secret inventory shape
+
+`fleet_secret_bundle` is keyed by host. Each host carries the env secrets to rewrite plus the full `authorized_keys` payload to distribute.
+
+```yaml
+fleet_secret_bundle:
+  ezra:
+    env:
+      GITEA_TOKEN: !vault |
+        ...
+      TELEGRAM_BOT_TOKEN: !vault |
+        ...
+      PRIMARY_MODEL_API_KEY: !vault |
+        ...
+    ssh_authorized_keys: !vault |
+      ...
+```
+
+The committed vault file contains placeholder encrypted values only. Replace them with real rotated material before production use.
+
+## Rotate a new bundle
+
+From repo root:
+
+```bash
+cd ansible
+ansible-vault edit inventory/group_vars/fleet_secrets.vault.yml
+ansible-playbook -i inventory/hosts.ini playbooks/rotate_fleet_secrets.yml --ask-vault-pass
+```
+
+Or update one value at a time with `ansible-vault encrypt_string` and paste it into `fleet_secret_bundle`.
+
+## What the playbook does
+
+1. Validates that each host has a secret bundle and target metadata.
+2. Writes rollback snapshots under `/var/lib/timmy/secret-rotations/<rotation_id>/<host>/`.
+3. Stages a candidate `.env` file and candidate `authorized_keys` file before promotion.
+4. Promotes staged files into place.
+5. Restarts every declared dependent service.
+6. Verifies each service with `systemctl is-active`.
+7. If anything fails, restores the previous `.env` and `authorized_keys`, restarts services again, and aborts the run.
+
+## Rollback semantics
+
+Rollback is host-safe and automatic inside the playbook `rescue:` block.
+
+- Existing `.env` and `authorized_keys` files are restored from backup when they existed before rotation.
+- Newly created files are removed if the host had no prior version.
+- Service restart is retried after rollback so the node returns to the last-known-good bundle.
+
+## Operational notes
+
+- Keep `required_env_keys` in `ansible/inventory/group_vars/fleet.yml` aligned with each house's real runtime contract.
+- `ssh_authorized_keys` distributes public keys only. Rotate corresponding private keys out-of-band, then publish the new authorized key list through the vault.
+- Use one vault edit per rotation window so API keys, bot tokens, and SSH access move together.

docs/RUNBOOK_INDEX.md

@@ -9,6 +9,7 @@ Quick-reference index for common operational tasks across the Timmy Foundation i
 | Task | Location | Command/Procedure |
 |------|----------|-------------------|
 | Deploy fleet update | fleet-ops | `ansible-playbook playbooks/provision_and_deploy.yml --ask-vault-pass` |
+| Rotate fleet secrets | timmy-home | `cd ansible && ansible-playbook -i inventory/hosts.ini playbooks/rotate_fleet_secrets.yml --ask-vault-pass` |
 | Check fleet health | fleet-ops | `python3 scripts/fleet_readiness.py` |
 | Agent scorecard | fleet-ops | `python3 scripts/agent_scorecard.py` |
 | View fleet manifest | fleet-ops | `cat manifest.yaml` |

scripts/codebase_test_generator.py

@@ -1,290 +0,0 @@
-#!/usr/bin/env python3
-"""Codebase Test Generator — Fill Coverage Gaps (#667)."""
-
-import ast
-import os
-import sys
-import argparse
-from dataclasses import dataclass, field
-from pathlib import Path
-from typing import Dict, List, Optional, Set, Tuple
-
-
-@dataclass
-class FunctionInfo:
-    name: str
-    module_path: str
-    class_name: Optional[str] = None
-    lineno: int = 0
-    args: List[str] = field(default_factory=list)
-    is_async: bool = False
-    is_private: bool = False
-    is_property: bool = False
-    docstring: Optional[str] = None
-    has_return: bool = False
-    raises: List[str] = field(default_factory=list)
-    decorators: List[str] = field(default_factory=list)
-
-    @property
-    def qualified_name(self):
-        if self.class_name:
-            return f"{self.class_name}.{self.name}"
-        return self.name
-
-    @property
-    def test_name(self):
-        safe_mod = self.module_path.replace("/", "_").replace(".py", "").replace("-", "_")
-        safe_cls = self.class_name + "_" if self.class_name else ""
-        return f"test_{safe_mod}_{safe_cls}{self.name}"
-
-
-@dataclass
-class CoverageGap:
-    func: FunctionInfo
-    reason: str
-    test_priority: int
-
-
-class SourceAnalyzer(ast.NodeVisitor):
-    def __init__(self, module_path: str):
-        self.module_path = module_path
-        self.functions: List[FunctionInfo] = []
-        self._class_stack: List[str] = []
-
-    def visit_ClassDef(self, node):
-        self._class_stack.append(node.name)
-        self.generic_visit(node)
-        self._class_stack.pop()
-
-    def visit_FunctionDef(self, node):
-        self._collect(node, False)
-        self.generic_visit(node)
-
-    def visit_AsyncFunctionDef(self, node):
-        self._collect(node, True)
-        self.generic_visit(node)
-
-    def _collect(self, node, is_async):
-        cls = self._class_stack[-1] if self._class_stack else None
-        args = [a.arg for a in node.args.args if a.arg not in ("self", "cls")]
-        has_ret = any(isinstance(c, ast.Return) and c.value for c in ast.walk(node))
-        raises = []
-        for c in ast.walk(node):
-            if isinstance(c, ast.Raise) and c.exc:
-                if isinstance(c.exc, ast.Call) and isinstance(c.exc.func, ast.Name):
-                    raises.append(c.exc.func.id)
-        decos = []
-        for d in node.decorator_list:
-            if isinstance(d, ast.Name): decos.append(d.id)
-            elif isinstance(d, ast.Attribute): decos.append(d.attr)
-        self.functions.append(FunctionInfo(
-            name=node.name, module_path=self.module_path, class_name=cls,
-            lineno=node.lineno, args=args, is_async=is_async,
-            is_private=node.name.startswith("_") and not node.name.startswith("__"),
-            is_property="property" in decos,
-            docstring=ast.get_docstring(node), has_return=has_ret,
-            raises=raises, decorators=decos))
-
-
-def analyze_file(filepath, base_dir):
-    module_path = os.path.relpath(filepath, base_dir)
-    try:
-        with open(filepath, "r", errors="replace") as f:
-            tree = ast.parse(f.read(), filename=filepath)
-    except (SyntaxError, UnicodeDecodeError):
-        return []
-    a = SourceAnalyzer(module_path)
-    a.visit(tree)
-    return a.functions
-
-
-def find_source_files(source_dir):
-    exclude = {"__pycache__", ".git", "venv", ".venv", "node_modules", ".tox", "build", "dist"}
-    files = []
-    for root, dirs, fs in os.walk(source_dir):
-        dirs[:] = [d for d in dirs if d not in exclude and not d.startswith(".")]
-        for f in fs:
-            if f.endswith(".py") and f != "__init__.py" and not f.startswith("test_"):
-                files.append(os.path.join(root, f))
-    return sorted(files)
-
-
-def find_existing_tests(test_dir):
-    existing = set()
-    for root, dirs, fs in os.walk(test_dir):
-        for f in fs:
-            if f.startswith("test_") and f.endswith(".py"):
-                try:
-                    with open(os.path.join(root, f)) as fh:
-                        tree = ast.parse(fh.read())
-                    for node in ast.walk(tree):
-                        if isinstance(node, ast.FunctionDef) and node.name.startswith("test_"):
-                            existing.add(node.name)
-                except (SyntaxError, UnicodeDecodeError):
-                    pass
-    return existing
-
-
-def identify_gaps(functions, existing_tests):
-    gaps = []
-    for func in functions:
-        if func.name.startswith("__") and func.name != "__init__":
-            continue
-        covered = func.name in str(existing_tests)
-        if not covered:
-            pri = 3 if func.is_private else (1 if (func.raises or func.has_return) else 2)
-            gaps.append(CoverageGap(func=func, reason="no test found", test_priority=pri))
-    gaps.sort(key=lambda g: (g.test_priority, g.func.module_path, g.func.name))
-    return gaps
-
-
-def generate_test(gap):
-    func = gap.func
-    lines = []
-    lines.append(f"    # AUTO-GENERATED -- review before merging")
-    lines.append(f"    # Source: {func.module_path}:{func.lineno}")
-    lines.append(f"    # Function: {func.qualified_name}")
-    lines.append("")
-    mod_imp = func.module_path.replace("/", ".").replace("-", "_").replace(".py", "")
-
-    call_args = []
-    for a in func.args:
-        if a in ("self", "cls"): continue
-        if "path" in a or "file" in a or "dir" in a: call_args.append(f"{a}='/tmp/test'")
-        elif "name" in a: call_args.append(f"{a}='test'")
-        elif "id" in a or "key" in a: call_args.append(f"{a}='test_id'")
-        elif "message" in a or "text" in a: call_args.append(f"{a}='test msg'")
-        elif "count" in a or "num" in a or "size" in a: call_args.append(f"{a}=1")
-        elif "flag" in a or "enabled" in a or "verbose" in a: call_args.append(f"{a}=False")
-        else: call_args.append(f"{a}=None")
-    args_str = ", ".join(call_args)
-
-    if func.is_async:
-        lines.append("    @pytest.mark.asyncio")
-    lines.append(f"    def {func.test_name}(self):")
-    lines.append(f'        """Test {func.qualified_name} -- auto-generated."""')
-
-    if func.class_name:
-        lines.append(f"        try:")
-        lines.append(f"            from {mod_imp} import {func.class_name}")
-        if func.is_private:
-            lines.append(f"            pytest.skip('Private method')")
-        elif func.is_property:
-            lines.append(f"            obj = {func.class_name}()")
-            lines.append(f"            _ = obj.{func.name}")
-        else:
-            if func.raises:
-                lines.append(f"            with pytest.raises(({', '.join(func.raises)})):")
-                lines.append(f"                {func.class_name}().{func.name}({args_str})")
-            else:
-                lines.append(f"            obj = {func.class_name}()")
-                lines.append(f"            result = obj.{func.name}({args_str})")
-                if func.has_return:
-                    lines.append(f"            assert result is not None or result is None  # Placeholder")
-        lines.append(f"        except ImportError:")
-        lines.append(f"            pytest.skip('Module not importable')")
-    else:
-        lines.append(f"        try:")
-        lines.append(f"            from {mod_imp} import {func.name}")
-        if func.is_private:
-            lines.append(f"            pytest.skip('Private function')")
-        else:
-            if func.raises:
-                lines.append(f"            with pytest.raises(({', '.join(func.raises)})):")
-                lines.append(f"                {func.name}({args_str})")
-            else:
-                lines.append(f"            result = {func.name}({args_str})")
-                if func.has_return:
-                    lines.append(f"            assert result is not None or result is None  # Placeholder")
-        lines.append(f"        except ImportError:")
-        lines.append(f"            pytest.skip('Module not importable')")
-
-    return chr(10).join(lines)
-
-
-def generate_test_suite(gaps, max_tests=50):
-    by_module = {}
-    for gap in gaps[:max_tests]:
-        by_module.setdefault(gap.func.module_path, []).append(gap)
-
-    lines = []
-    lines.append('"""Auto-generated test suite -- Codebase Genome (#667).')
-    lines.append("")
-    lines.append("Generated by scripts/codebase_test_generator.py")
-    lines.append("Coverage gaps identified from AST analysis.")
-    lines.append("")
-    lines.append("These tests are starting points. Review before merging.")
-    lines.append('"""')
-    lines.append("")
-    lines.append("import pytest")
-    lines.append("from unittest.mock import MagicMock, patch")
-    lines.append("")
-    lines.append("")
-    lines.append("# AUTO-GENERATED -- DO NOT EDIT WITHOUT REVIEW")
-
-    for module, mgaps in sorted(by_module.items()):
-        safe = module.replace("/", "_").replace(".py", "").replace("-", "_")
-        cls_name = "".join(w.title() for w in safe.split("_"))
-        lines.append("")
-        lines.append(f"class Test{cls_name}Generated:")
-        lines.append(f'    """Auto-generated tests for {module}."""')
-        for gap in mgaps:
-            lines.append("")
-            lines.append(generate_test(gap))
-        lines.append("")
-
-    return chr(10).join(lines)
-
-
-def main():
-    parser = argparse.ArgumentParser(description="Codebase Test Generator")
-    parser.add_argument("--source", default=".")
-    parser.add_argument("--output", default="tests/test_genome_generated.py")
-    parser.add_argument("--max-tests", type=int, default=50)
-    parser.add_argument("--dry-run", action="store_true")
-    parser.add_argument("--include-private", action="store_true")
-    args = parser.parse_args()
-
-    source_dir = os.path.abspath(args.source)
-    test_dir = os.path.join(source_dir, "tests")
-
-    print(f"Scanning: {source_dir}")
-    source_files = find_source_files(source_dir)
-    print(f"Source files: {len(source_files)}")
-
-    all_funcs = []
-    for f in source_files:
-        all_funcs.extend(analyze_file(f, source_dir))
-    print(f"Functions/methods: {len(all_funcs)}")
-
-    existing = find_existing_tests(test_dir)
-    print(f"Existing tests: {len(existing)}")
-
-    gaps = identify_gaps(all_funcs, existing)
-    if not args.include_private:
-        gaps = [g for g in gaps if not g.func.is_private]
-    print(f"Coverage gaps: {len(gaps)}")
-
-    by_pri = {1: 0, 2: 0, 3: 0}
-    for g in gaps:
-        by_pri[g.test_priority] += 1
-    print(f"  High: {by_pri[1]}, Medium: {by_pri[2]}, Low: {by_pri[3]}")
-
-    if args.dry_run:
-        for g in gaps[:10]:
-            print(f"  {g.func.module_path}:{g.func.lineno} {g.func.qualified_name}")
-        return
-
-    if gaps:
-        content = generate_test_suite(gaps, max_tests=args.max-tests if hasattr(args, 'max-tests') else args.max_tests)
-        out = os.path.join(source_dir, args.output)
-        os.makedirs(os.path.dirname(out), exist_ok=True)
-        with open(out, "w") as f:
-            f.write(content)
-        print(f"Generated {min(len(gaps), args.max_tests)} tests -> {args.output}")
-    else:
-        print("No gaps found!")
-
-
-if __name__ == "__main__":
-    main()

tests/test_fleet_secret_rotation.py

@@ -0,0 +1,87 @@
+#!/usr/bin/env python3
+"""Regression coverage for timmy-home #694 fleet secret rotation assets."""
+
+from pathlib import Path
+import unittest
+
+import yaml
+
+
+ROOT = Path(__file__).resolve().parents[1]
+ANSIBLE_DIR = ROOT / "ansible"
+HOSTS_FILE = ANSIBLE_DIR / "inventory" / "hosts.ini"
+TARGETS_FILE = ANSIBLE_DIR / "inventory" / "group_vars" / "fleet.yml"
+SECRETS_FILE = ANSIBLE_DIR / "inventory" / "group_vars" / "fleet_secrets.vault.yml"
+PLAYBOOK_FILE = ANSIBLE_DIR / "playbooks" / "rotate_fleet_secrets.yml"
+DOC_FILE = ROOT / "docs" / "FLEET_SECRET_ROTATION.md"
+
+
+class TestFleetSecretRotation(unittest.TestCase):
+    def test_inventory_declares_each_host_target(self):
+        self.assertTrue(HOSTS_FILE.exists(), "missing ansible inventory hosts file")
+        self.assertTrue(TARGETS_FILE.exists(), "missing fleet target metadata")
+
+        hosts_text = HOSTS_FILE.read_text(encoding="utf-8")
+        self.assertIn("[fleet]", hosts_text)
+        self.assertIn("ezra", hosts_text)
+        self.assertIn("bezalel", hosts_text)
+
+        targets = yaml.safe_load(TARGETS_FILE.read_text(encoding="utf-8"))
+        self.assertIn("fleet_secret_targets", targets)
+
+        expected_env_files = {
+            "ezra": "/root/wizards/ezra/home/.env",
+            "bezalel": "/root/wizards/bezalel/home/.env",
+        }
+        for host, env_file in expected_env_files.items():
+            self.assertIn(host, targets["fleet_secret_targets"])
+            target = targets["fleet_secret_targets"][host]
+            self.assertEqual(target["env_file"], env_file)
+            self.assertEqual(target["ssh_authorized_keys_file"], "/root/.ssh/authorized_keys")
+            self.assertGreaterEqual(len(target["services"]), 1)
+            self.assertGreaterEqual(len(target["required_env_keys"]), 3)
+
+    def test_vault_file_contains_encrypted_secret_bundle_for_each_host(self):
+        self.assertTrue(SECRETS_FILE.exists(), "missing vaulted secrets inventory")
+        text = SECRETS_FILE.read_text(encoding="utf-8")
+        self.assertIn("fleet_secret_bundle:", text)
+        self.assertIn("$ANSIBLE_VAULT;1.1;AES256", text)
+        for host in ("ezra", "bezalel"):
+            self.assertIn(f"  {host}:", text)
+        self.assertGreaterEqual(text.count("!vault |"), 4)
+
+    def test_playbook_has_staging_verification_and_rollback(self):
+        self.assertTrue(PLAYBOOK_FILE.exists(), "missing rotation playbook")
+        text = PLAYBOOK_FILE.read_text(encoding="utf-8")
+        for snippet in (
+            "any_errors_fatal: true",
+            "vars_files:",
+            "fleet_secrets.vault.yml",
+            "backup_root",
+            "env_backup_path",
+            "ssh_backup_path",
+            "lineinfile:",
+            "copy:",
+            "systemd:",
+            "state: restarted",
+            "systemctl is-active",
+            "block:",
+            "rescue:",
+        ):
+            self.assertIn(snippet, text)
+
+    def test_docs_explain_rotation_command_and_rollback(self):
+        self.assertTrue(DOC_FILE.exists(), "missing fleet secret rotation docs")
+        text = DOC_FILE.read_text(encoding="utf-8")
+        for snippet in (
+            "ansible-playbook",
+            "--ask-vault-pass",
+            "rollback",
+            "authorized_keys",
+            "fleet_secret_bundle",
+        ):
+            self.assertIn(snippet, text)
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=2)

tests/test_genome_generated.py

@@ -1,737 +0,0 @@
-"""Auto-generated test suite -- Codebase Genome (#667).
-
-Generated by scripts/codebase_test_generator.py
-Coverage gaps identified from AST analysis.
-
-These tests are starting points. Review before merging.
-"""
-
-import pytest
-from unittest.mock import MagicMock, patch
-
-
-# AUTO-GENERATED -- DO NOT EDIT WITHOUT REVIEW
-
-class TestAngbandMcpServerGenerated:
-    """Auto-generated tests for angband/mcp_server.py."""
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:319
-    # Function: call_tool
-
-    @pytest.mark.asyncio
-    def test_angband_mcp_server_call_tool(self):
-        """Test call_tool -- auto-generated."""
-        try:
-            from angband.mcp_server import call_tool
-            result = call_tool(name='test', arguments=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:64
-    # Function: capture_screen
-
-    def test_angband_mcp_server_capture_screen(self):
-        """Test capture_screen -- auto-generated."""
-        try:
-            from angband.mcp_server import capture_screen
-            result = capture_screen(lines=None, session_name='test')
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:74
-    # Function: has_save
-
-    def test_angband_mcp_server_has_save(self):
-        """Test has_save -- auto-generated."""
-        try:
-            from angband.mcp_server import has_save
-            result = has_save(user=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:234
-    # Function: keypress
-
-    def test_angband_mcp_server_keypress(self):
-        """Test keypress -- auto-generated."""
-        try:
-            from angband.mcp_server import keypress
-            result = keypress(key='test_id', wait_ms=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:141
-    # Function: launch_game
-
-    def test_angband_mcp_server_launch_game(self):
-        """Test launch_game -- auto-generated."""
-        try:
-            from angband.mcp_server import launch_game
-            result = launch_game(user=None, new_game=None, continue_splash=None, width='test_id', height=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:253
-    # Function: list_tools
-
-    @pytest.mark.asyncio
-    def test_angband_mcp_server_list_tools(self):
-        """Test list_tools -- auto-generated."""
-        try:
-            from angband.mcp_server import list_tools
-            result = list_tools()
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:130
-    # Function: maybe_continue_splash
-
-    def test_angband_mcp_server_maybe_continue_splash(self):
-        """Test maybe_continue_splash -- auto-generated."""
-        try:
-            from angband.mcp_server import maybe_continue_splash
-            result = maybe_continue_splash(session_name='test')
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:226
-    # Function: observe
-
-    def test_angband_mcp_server_observe(self):
-        """Test observe -- auto-generated."""
-        try:
-            from angband.mcp_server import observe
-            result = observe(lines=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:57
-    # Function: pane_id
-
-    def test_angband_mcp_server_pane_id(self):
-        """Test pane_id -- auto-generated."""
-        try:
-            from angband.mcp_server import pane_id
-            result = pane_id(session_name='test')
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:108
-    # Function: send_key
-
-    def test_angband_mcp_server_send_key(self):
-        """Test send_key -- auto-generated."""
-        try:
-            from angband.mcp_server import send_key
-            with pytest.raises((RuntimeError)):
-                send_key(key='test_id', session_name='test')
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:123
-    # Function: send_text
-
-    def test_angband_mcp_server_send_text(self):
-        """Test send_text -- auto-generated."""
-        try:
-            from angband.mcp_server import send_text
-            with pytest.raises((RuntimeError)):
-                send_text(text='test msg', session_name='test')
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:53
-    # Function: session_exists
-
-    def test_angband_mcp_server_session_exists(self):
-        """Test session_exists -- auto-generated."""
-        try:
-            from angband.mcp_server import session_exists
-            result = session_exists(session_name='test')
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:203
-    # Function: stop_game
-
-    def test_angband_mcp_server_stop_game(self):
-        """Test stop_game -- auto-generated."""
-        try:
-            from angband.mcp_server import stop_game
-            result = stop_game()
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:46
-    # Function: tmux
-
-    def test_angband_mcp_server_tmux(self):
-        """Test tmux -- auto-generated."""
-        try:
-            from angband.mcp_server import tmux
-            with pytest.raises((RuntimeError)):
-                tmux(args=None, check=None)
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: angband/mcp_server.py:243
-    # Function: type_and_observe
-
-    def test_angband_mcp_server_type_and_observe(self):
-        """Test type_and_observe -- auto-generated."""
-        try:
-            from angband.mcp_server import type_and_observe
-            result = type_and_observe(text='test msg', wait_ms=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-
-class TestEvenniaTimmyWorldGameGenerated:
-    """Auto-generated tests for evennia/timmy_world/game.py."""
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/game.py:495
-    # Function: ActionSystem.get_available_actions
-
-    def test_evennia_timmy_world_game_ActionSystem_get_available_actions(self):
-        """Test ActionSystem.get_available_actions -- auto-generated."""
-        try:
-            from evennia.timmy_world.game import ActionSystem
-            obj = ActionSystem()
-            result = obj.get_available_actions(char_name='test', world=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/game.py:1485
-    # Function: PlayerInterface.get_available_actions
-
-    def test_evennia_timmy_world_game_PlayerInterface_get_available_actions(self):
-        """Test PlayerInterface.get_available_actions -- auto-generated."""
-        try:
-            from evennia.timmy_world.game import PlayerInterface
-            obj = PlayerInterface()
-            result = obj.get_available_actions()
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/game.py:55
-    # Function: get_narrative_phase
-
-    def test_evennia_timmy_world_game_get_narrative_phase(self):
-        """Test get_narrative_phase -- auto-generated."""
-        try:
-            from evennia.timmy_world.game import get_narrative_phase
-            result = get_narrative_phase(tick=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/game.py:65
-    # Function: get_phase_transition_event
-
-    def test_evennia_timmy_world_game_get_phase_transition_event(self):
-        """Test get_phase_transition_event -- auto-generated."""
-        try:
-            from evennia.timmy_world.game import get_phase_transition_event
-            result = get_phase_transition_event(old_phase=None, new_phase=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/game.py:347
-    # Function: World.get_room_desc
-
-    def test_evennia_timmy_world_game_World_get_room_desc(self):
-        """Test World.get_room_desc -- auto-generated."""
-        try:
-            from evennia.timmy_world.game import World
-            obj = World()
-            result = obj.get_room_desc(room_name='test', char_name='test')
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/game.py:1045
-    # Function: GameEngine.load_game
-
-    def test_evennia_timmy_world_game_GameEngine_load_game(self):
-        """Test GameEngine.load_game -- auto-generated."""
-        try:
-            from evennia.timmy_world.game import GameEngine
-            obj = GameEngine()
-            result = obj.load_game()
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/game.py:556
-    # Function: NPCAI.make_choice
-
-    def test_evennia_timmy_world_game_NPCAI_make_choice(self):
-        """Test NPCAI.make_choice -- auto-generated."""
-        try:
-            from evennia.timmy_world.game import NPCAI
-            obj = NPCAI()
-            result = obj.make_choice(char_name='test')
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/game.py:1454
-    # Function: GameEngine.play_turn
-
-    def test_evennia_timmy_world_game_GameEngine_play_turn(self):
-        """Test GameEngine.play_turn -- auto-generated."""
-        try:
-            from evennia.timmy_world.game import GameEngine
-            obj = GameEngine()
-            result = obj.play_turn(action=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/game.py:1076
-    # Function: GameEngine.run_tick
-
-    def test_evennia_timmy_world_game_GameEngine_run_tick(self):
-        """Test GameEngine.run_tick -- auto-generated."""
-        try:
-            from evennia.timmy_world.game import GameEngine
-            obj = GameEngine()
-            result = obj.run_tick(timmy_action=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-
-class TestEvenniaTimmyWorldServerConfWebPluginsGenerated:
-    """Auto-generated tests for evennia/timmy_world/server/conf/web_plugins.py."""
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/server/conf/web_plugins.py:31
-    # Function: at_webproxy_root_creation
-
-    def test_evennia_timmy_world_server_conf_web_plugins_at_webproxy_root_creation(self):
-        """Test at_webproxy_root_creation -- auto-generated."""
-        try:
-            from evennia.timmy_world.server.conf.web_plugins import at_webproxy_root_creation
-            result = at_webproxy_root_creation(web_root=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/server/conf/web_plugins.py:6
-    # Function: at_webserver_root_creation
-
-    def test_evennia_timmy_world_server_conf_web_plugins_at_webserver_root_creation(self):
-        """Test at_webserver_root_creation -- auto-generated."""
-        try:
-            from evennia.timmy_world.server.conf.web_plugins import at_webserver_root_creation
-            result = at_webserver_root_creation(web_root=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-
-class TestEvenniaTimmyWorldWorldGameGenerated:
-    """Auto-generated tests for evennia/timmy_world/world/game.py."""
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/world/game.py:400
-    # Function: ActionSystem.get_available_actions
-
-    def test_evennia_timmy_world_world_game_ActionSystem_get_available_actions(self):
-        """Test ActionSystem.get_available_actions -- auto-generated."""
-        try:
-            from evennia.timmy_world.world.game import ActionSystem
-            obj = ActionSystem()
-            result = obj.get_available_actions(char_name='test', world=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/world/game.py:1289
-    # Function: PlayerInterface.get_available_actions
-
-    def test_evennia_timmy_world_world_game_PlayerInterface_get_available_actions(self):
-        """Test PlayerInterface.get_available_actions -- auto-generated."""
-        try:
-            from evennia.timmy_world.world.game import PlayerInterface
-            obj = PlayerInterface()
-            result = obj.get_available_actions()
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/world/game.py:254
-    # Function: World.get_room_desc
-
-    def test_evennia_timmy_world_world_game_World_get_room_desc(self):
-        """Test World.get_room_desc -- auto-generated."""
-        try:
-            from evennia.timmy_world.world.game import World
-            obj = World()
-            result = obj.get_room_desc(room_name='test', char_name='test')
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/world/game.py:880
-    # Function: GameEngine.load_game
-
-    def test_evennia_timmy_world_world_game_GameEngine_load_game(self):
-        """Test GameEngine.load_game -- auto-generated."""
-        try:
-            from evennia.timmy_world.world.game import GameEngine
-            obj = GameEngine()
-            result = obj.load_game()
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/world/game.py:461
-    # Function: NPCAI.make_choice
-
-    def test_evennia_timmy_world_world_game_NPCAI_make_choice(self):
-        """Test NPCAI.make_choice -- auto-generated."""
-        try:
-            from evennia.timmy_world.world.game import NPCAI
-            obj = NPCAI()
-            result = obj.make_choice(char_name='test')
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/world/game.py:1258
-    # Function: GameEngine.play_turn
-
-    def test_evennia_timmy_world_world_game_GameEngine_play_turn(self):
-        """Test GameEngine.play_turn -- auto-generated."""
-        try:
-            from evennia.timmy_world.world.game import GameEngine
-            obj = GameEngine()
-            result = obj.play_turn(action=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/world/game.py:911
-    # Function: GameEngine.run_tick
-
-    def test_evennia_timmy_world_world_game_GameEngine_run_tick(self):
-        """Test GameEngine.run_tick -- auto-generated."""
-        try:
-            from evennia.timmy_world.world.game import GameEngine
-            obj = GameEngine()
-            result = obj.run_tick(timmy_action=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia/timmy_world/world/game.py:749
-    # Function: DialogueSystem.select
-
-    def test_evennia_timmy_world_world_game_DialogueSystem_select(self):
-        """Test DialogueSystem.select -- auto-generated."""
-        try:
-            from evennia.timmy_world.world.game import DialogueSystem
-            obj = DialogueSystem()
-            result = obj.select(char_name='test', listener=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-
-class TestEvenniaToolsLayoutGenerated:
-    """Auto-generated tests for evennia_tools/layout.py."""
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia_tools/layout.py:58
-    # Function: grouped_exits
-
-    def test_evennia_tools_layout_grouped_exits(self):
-        """Test grouped_exits -- auto-generated."""
-        try:
-            from evennia_tools.layout import grouped_exits
-            result = grouped_exits()
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia_tools/layout.py:54
-    # Function: room_keys
-
-    def test_evennia_tools_layout_room_keys(self):
-        """Test room_keys -- auto-generated."""
-        try:
-            from evennia_tools.layout import room_keys
-            result = room_keys()
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-
-class TestEvenniaToolsTelemetryGenerated:
-    """Auto-generated tests for evennia_tools/telemetry.py."""
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia_tools/telemetry.py:8
-    # Function: telemetry_dir
-
-    def test_evennia_tools_telemetry_telemetry_dir(self):
-        """Test telemetry_dir -- auto-generated."""
-        try:
-            from evennia_tools.telemetry import telemetry_dir
-            result = telemetry_dir(base_dir='/tmp/test')
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-
-class TestEvenniaToolsTrainingGenerated:
-    """Auto-generated tests for evennia_tools/training.py."""
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia_tools/training.py:18
-    # Function: example_eval_path
-
-    def test_evennia_tools_training_example_eval_path(self):
-        """Test example_eval_path -- auto-generated."""
-        try:
-            from evennia_tools.training import example_eval_path
-            result = example_eval_path(repo_root=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evennia_tools/training.py:14
-    # Function: example_trace_path
-
-    def test_evennia_tools_training_example_trace_path(self):
-        """Test example_trace_path -- auto-generated."""
-        try:
-            from evennia_tools.training import example_trace_path
-            result = example_trace_path(repo_root=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-
-class TestEvolutionBitcoinScripterGenerated:
-    """Auto-generated tests for evolution/bitcoin_scripter.py."""
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evolution/bitcoin_scripter.py:18
-    # Function: BitcoinScripter.generate_script
-
-    def test_evolution_bitcoin_scripter_BitcoinScripter_generate_script(self):
-        """Test BitcoinScripter.generate_script -- auto-generated."""
-        try:
-            from evolution.bitcoin_scripter import BitcoinScripter
-            obj = BitcoinScripter()
-            result = obj.generate_script(requirements=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-
-class TestEvolutionLightningClientGenerated:
-    """Auto-generated tests for evolution/lightning_client.py."""
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evolution/lightning_client.py:18
-    # Function: LightningClient.plan_payment_route
-
-    def test_evolution_lightning_client_LightningClient_plan_payment_route(self):
-        """Test LightningClient.plan_payment_route -- auto-generated."""
-        try:
-            from evolution.lightning_client import LightningClient
-            obj = LightningClient()
-            result = obj.plan_payment_route(destination=None, amount_sats=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-
-class TestEvolutionSovereignAccountantGenerated:
-    """Auto-generated tests for evolution/sovereign_accountant.py."""
-
-    # AUTO-GENERATED -- review before merging
-    # Source: evolution/sovereign_accountant.py:17
-    # Function: SovereignAccountant.generate_financial_report
-
-    def test_evolution_sovereign_accountant_SovereignAccountant_generate_financial_report(self):
-        """Test SovereignAccountant.generate_financial_report -- auto-generated."""
-        try:
-            from evolution.sovereign_accountant import SovereignAccountant
-            obj = SovereignAccountant()
-            result = obj.generate_financial_report(transaction_history=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-
-class TestInfrastructureTimmyBridgeClientTimmyClientGenerated:
-    """Auto-generated tests for infrastructure/timmy-bridge/client/timmy_client.py."""
-
-    # AUTO-GENERATED -- review before merging
-    # Source: infrastructure/timmy-bridge/client/timmy_client.py:108
-    # Function: TimmyClient.create_artifact
-
-    def test_infrastructure_timmy_bridge_client_timmy_client_TimmyClient_create_artifact(self):
-        """Test TimmyClient.create_artifact -- auto-generated."""
-        try:
-            from infrastructure.timmy_bridge.client.timmy_client import TimmyClient
-            obj = TimmyClient()
-            result = obj.create_artifact()
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: infrastructure/timmy-bridge/client/timmy_client.py:167
-    # Function: TimmyClient.create_event
-
-    def test_infrastructure_timmy_bridge_client_timmy_client_TimmyClient_create_event(self):
-        """Test TimmyClient.create_event -- auto-generated."""
-        try:
-            from infrastructure.timmy_bridge.client.timmy_client import TimmyClient
-            obj = TimmyClient()
-            result = obj.create_event(kind=None, content=None, tags=None)
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: infrastructure/timmy-bridge/client/timmy_client.py:74
-    # Function: TimmyClient.generate_observation
-
-    def test_infrastructure_timmy_bridge_client_timmy_client_TimmyClient_generate_observation(self):
-        """Test TimmyClient.generate_observation -- auto-generated."""
-        try:
-            from infrastructure.timmy_bridge.client.timmy_client import TimmyClient
-            obj = TimmyClient()
-            result = obj.generate_observation()
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-
-class TestInfrastructureTimmyBridgeMlxMlxIntegrationGenerated:
-    """Auto-generated tests for infrastructure/timmy-bridge/mlx/mlx_integration.py."""
-
-    # AUTO-GENERATED -- review before merging
-    # Source: infrastructure/timmy-bridge/mlx/mlx_integration.py:122
-    # Function: MLXInference.available
-
-    def test_infrastructure_timmy_bridge_mlx_mlx_integration_MLXInference_available(self):
-        """Test MLXInference.available -- auto-generated."""
-        try:
-            from infrastructure.timmy_bridge.mlx.mlx_integration import MLXInference
-            obj = MLXInference()
-            _ = obj.available
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: infrastructure/timmy-bridge/mlx/mlx_integration.py:125
-    # Function: MLXInference.get_stats
-
-    def test_infrastructure_timmy_bridge_mlx_mlx_integration_MLXInference_get_stats(self):
-        """Test MLXInference.get_stats -- auto-generated."""
-        try:
-            from infrastructure.timmy_bridge.mlx.mlx_integration import MLXInference
-            obj = MLXInference()
-            result = obj.get_stats()
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: infrastructure/timmy-bridge/mlx/mlx_integration.py:30
-    # Function: MLXInference.load_model
-
-    def test_infrastructure_timmy_bridge_mlx_mlx_integration_MLXInference_load_model(self):
-        """Test MLXInference.load_model -- auto-generated."""
-        try:
-            from infrastructure.timmy_bridge.mlx.mlx_integration import MLXInference
-            obj = MLXInference()
-            result = obj.load_model(model_path='/tmp/test')
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: infrastructure/timmy-bridge/mlx/mlx_integration.py:93
-    # Function: MLXInference.reflect
-
-    def test_infrastructure_timmy_bridge_mlx_mlx_integration_MLXInference_reflect(self):
-        """Test MLXInference.reflect -- auto-generated."""
-        try:
-            from infrastructure.timmy_bridge.mlx.mlx_integration import MLXInference
-            obj = MLXInference()
-            result = obj.reflect()
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')
-
-    # AUTO-GENERATED -- review before merging
-    # Source: infrastructure/timmy-bridge/mlx/mlx_integration.py:108
-    # Function: MLXInference.respond_to
-
-    def test_infrastructure_timmy_bridge_mlx_mlx_integration_MLXInference_respond_to(self):
-        """Test MLXInference.respond_to -- auto-generated."""
-        try:
-            from infrastructure.timmy_bridge.mlx.mlx_integration import MLXInference
-            obj = MLXInference()
-            result = obj.respond_to(message='test msg', context='test msg')
-            assert result is not None or result is None  # Placeholder
-        except ImportError:
-            pytest.skip('Module not importable')