From dbb056c9c60b9e7018c8af971be812f0d82ad020 Mon Sep 17 00:00:00 2001
From: Guillaume ARM <trapcodien@gmail.com>
Date: Sun, 14 Jun 2026 19:45:40 +0200
Subject: [PATCH] chore(env): generate sandbox test password

---
 .env.test         | 3 ++-
 just/install.just | 4 ++--
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.env.test b/.env.test
index fe85439..f30be14 100644
--- a/.env.test
+++ b/.env.test
@@ -4,6 +4,7 @@ TRAP_CCLIBS_TEST_TIMEOUT_SECONDS=3
 # Dedicated `just test-timeout` fixture timings.
 TRAP_CCLIBS_TEST_TIMEOUT_WATCHDOG_SECONDS=1
 
-# Test placeholder. The real value is generated in `.env` on first `just install`,
+# Test placeholders. The real values are generated in `.env` on first `just install`,
 # or after `just clean` / `just reinstall`.
 OPENCODE_SERVER_PASSWORD=redacted
+SANDBOX_PASSWORD=redacted
diff --git a/just/install.just b/just/install.just
index b393029..b8931a9 100644
--- a/just/install.just
+++ b/just/install.just
@@ -32,8 +32,8 @@ generate-env:
     password="$(openssl rand -hex 32)"
     while IFS= read -r line || [ -n "$line" ]; do
         case "$line" in
-            OPENCODE_SERVER_PASSWORD=*)
-                printf '%s\n' "OPENCODE_SERVER_PASSWORD=$password"
+            OPENCODE_SERVER_PASSWORD=*|SANDBOX_PASSWORD=*)
+                printf '%s\n' "${line%%=*}=$password"
                 ;;
             *)
                 printf '%s\n' "$line"