cli_test.v

1module tests23import net4import net.http5import os6import time78const root = @VMODROOT9const binary = os.join_path(root, 'build', 'koh3')1011struct Result {12mut:13	code int14	out  string15	err  string16}1718fn testsuite_begin() {19	os.mkdir_all(os.join_path(root, 'build')) or { panic(err) }20	build := os.execute('v -o ${q(binary)} ${q(os.join_path(root, 'src', 'koh3.v'))}')21	if build.exit_code != 0 {22		panic('could not build koh3: ${build.output}')23	}24}2526fn q(s string) string {27	return "'${s.replace("'", "'\\''")}'"28}2930fn temp_repo(name string) string {31	dir := os.join_path(os.temp_dir(), 'koh3-cli-${name}-${time.now().unix_nano()}')32	os.mkdir_all(dir) or { panic(err) }33	return dir34}3536fn run(repo string, args ...string) Result {37	home := temp_repo('home')38	defer { os.rmdir_all(home) or {} }39	return run_home(repo, home, ...args)40}4142fn run_home(repo string, home string, args ...string) Result {43	stamp := '${os.getpid()}-${time.now().unix_nano()}'44	base := os.join_path(os.temp_dir(), 'koh3-cli-${stamp}')45	out_path := '${base}.out'46	err_path := '${base}.err'47	code_path := '${base}.code'48	mut command := 'HOME=${q(home)} ${q(binary)}'49	for arg in args {50		command += ' ${q(arg)}'51	}52	shell := 'cd ${q(repo)} && ${command} </dev/null >${q(out_path)} 2>${q(err_path)}; printf "%s" \$? >${q(code_path)}'53	result := os.execute(shell)54	if result.exit_code != 0 {55		panic('could not run test command: ${result.output}')56	}57	code := os.read_file(code_path) or { panic(err) }58	out := os.read_file(out_path) or { '' }59	err := os.read_file(err_path) or { '' }60	os.rm(out_path) or {}61	os.rm(err_path) or {}62	os.rm(code_path) or {}63	return Result{64		code: code.int()65		out:  out66		err:  err67	}68}6970fn run_pty_home(repo string, home string, answers []string, args ...string) Result {71	stamp := '${os.getpid()}-${time.now().unix_nano()}'72	transcript := os.join_path(os.temp_dir(), 'koh3-pty-${stamp}.txt')73	script_path := os.join_path(os.temp_dir(), 'koh3-pty-${stamp}.exp')74	defer {75		os.rm(transcript) or {}76		os.rm(script_path) or {}77	}78	mut script := 'log_file -noappend {${transcript}}\nset timeout 20\nspawn -noecho env {HOME=${home}} NO_COLOR=1 {${binary}}'79	for arg in args {80		script += ' {${arg}}'81	}82	script += '\n'83	for answer in answers {84		script += 'after 250\nsend -- "${answer}\\r"\n'85	}86	script += 'expect eof\nset status [wait]\nexit [lindex $status 3]\n'87	os.write_file(script_path, script) or { panic(err) }88	result := os.execute('cd ${q(repo)} && expect -f ${q(script_path)}')89	return Result{90		code: result.exit_code91		out:  os.read_file(transcript) or { '' }92		err:  result.output93	}94}9596fn init_repo(repo string) {97	r := run(repo, 'init')98	assert r.code == 099	assert os.exists(os.join_path(repo, '.koh'))100	assert os.exists(os.join_path(repo, '.kohignore'))101}102103fn write(repo string, path string, text string) {104	full := os.join_path(repo, path)105	os.mkdir_all(os.dir(full)) or { panic(err) }106	os.write_file(full, text) or { panic(err) }107}108109fn read_json_has(text string, key string) {110	if !text.contains(key) {111		panic('missing JSON key ${key}: ${text}')112	}113}114115fn test_init_and_usage() {116	dir := temp_repo('init')117	defer { os.rmdir_all(dir) or {} }118	r := run(dir, 'init', '--json')119	assert r.code == 0120	read_json_has(r.out, 'repo')121	read_json_has(r.out, 'ignore_created')122	assert run(dir, 'init').code == 1123	assert run(dir, 'unknown-command').code == 2124	assert run(dir, 'unknown-command').err.contains('unknown command')125	// An agent asking for JSON gets JSON for a usage mistake too, exit 2.126	for args in [['unknown-command', '--json'], ['save', '--json'], ['save', 'x', '--nope', '--json']] {127		r2 := run(dir, ...args)128		assert r2.code == 2129		assert r2.out == ''130		assert r2.err.starts_with('{"error":'), r2.err131	}132}133134// The help screen is commands and plain words: every flag lives in `koh man`.135// this_platform is the platform name for the machine the tests run on, so a136// build test does not depend on which machine that is.137fn this_platform() string {138	machine := os.uname().machine139	arch := if machine in ['arm64', 'aarch64'] { 'aarch64' } else { 'x86_64' }140	return '${os.user_os()}-${arch}'141}142143// `koh build` builds with `koh.build`: the version and platform fill the output144// path, and each artifact is printed with its size.145fn test_build_builds_the_named_platforms() {146	dir := temp_repo('build_ok')147	defer { os.rmdir_all(dir) or {} }148	init_repo(dir)149	host := this_platform()150	write(dir, 'VERSION', '1.2.3\n')151	write(dir, 'koh.build', 'command = mkdir -p out && printf built > out/demo-1.2.3-${host}152output = out/demo-{version}-{platform}153platforms = ${host}154')155	one := run(dir, 'build')156	assert one.code == 0, one.err157	assert one.out.contains('version 1.2.3')158	assert one.out.contains('out/demo-1.2.3-${host}')159	assert os.exists(os.join_path(dir, 'out/demo-1.2.3-${host}'))160161	// --platform picks one, --all takes every platform the file names.162	write(dir, 'koh.build', 'command = mkdir -p out && printf m > out/demo-macos-aarch64 && printf l > out/demo-linux-aarch64163output = out/demo-{platform}164platforms = macos-aarch64, linux-aarch64165')166	all := run(dir, 'build', '--all', '--json')167	assert all.code == 0, all.err168	assert all.out.contains('"platform":"macos-aarch64"')169	assert all.out.contains('"platform":"linux-aarch64"')170	assert os.exists(os.join_path(dir, 'out/demo-linux-aarch64'))171	picked := run(dir, 'build', '--platform', 'linux-aarch64')172	assert picked.code == 0, picked.err173	assert picked.out.contains('out/demo-linux-aarch64')174	assert !picked.out.contains('out/demo-macos-aarch64')175}176177// The item's exit check, as a test: `koh build` builds Koh 3 itself with the178// real toolchain, in a copy, and the binary it produces runs.179// `koh update` refuses a command line that cannot be answered: JSON cannot carry180// the question, and a stray argument is a mistake. Both are settled before any181// source is read, so no network is needed here.182fn test_update_refuses_a_command_line_it_cannot_answer() {183	dir := temp_repo('update_args')184	defer { os.rmdir_all(dir) or {} }185	init_repo(dir)186	json_without_yes := run(dir, 'update', '--json')187	assert json_without_yes.code == 2188	assert json_without_yes.err.contains('needs --yes')189	assert run(dir, 'update', 'extra').code == 2190}191192fn test_build_builds_koh_itself() {193	dir := temp_repo('selfbuild')194	defer { os.rmdir_all(dir) or {} }195	// Only what a build reads: the copy needs no history and no archive.196	for item in ['src', 'vendor', 'docs', 'v.mod', 'VERSION'] {197		os.cp_all(os.join_path(root, item), os.join_path(dir, item), true) or { panic(err) }198	}199	write(dir, 'koh.build', 'command = mkdir -p zig-out/bin && v -o zig-out/bin/koh3 src/koh3.v200output = zig-out/bin/koh3201platforms = ${this_platform()}202')203	init_repo(dir)204	built := run(dir, 'build')205	assert built.code == 0, built.err206	assert built.out.contains('zig-out/bin/koh3')207	fresh := os.join_path(dir, 'zig-out/bin/koh3')208	assert os.exists(fresh)209	version := os.read_file(os.join_path(dir, 'VERSION'))!.trim_space()210	assert os.execute('${q(fresh)} --version').output.trim_space() == 'koh ${version}'211}212213fn test_build_refuses_what_it_cannot_do() {214	dir := temp_repo('build_bad')215	defer { os.rmdir_all(dir) or {} }216	init_repo(dir)217	missing := run(dir, 'build')218	assert missing.code == 1219	assert missing.err.contains('koh.build')220221	write(dir, 'koh.build', 'command = true222output = out/demo223platforms = macos-aarch64224')225	no_version := run(dir, 'build')226	assert no_version.code == 1227	assert no_version.err.contains('VERSION')228229	write(dir, 'VERSION', '1.2.3\n')230	not_listed := run(dir, 'build', '--platform', 'linux-aarch64')231	assert not_listed.code == 1232	assert not_listed.err.contains('does not build for')233234	unknown := run(dir, 'build', '--platform', 'amiga')235	assert unknown.code == 1236	assert unknown.err.contains('amiga')237238	both := run(dir, 'build', '--all', '--platform', 'macos-aarch64')239	assert both.code == 2240	assert both.err.contains('cannot be combined')241242	write(dir, 'koh.build', 'command = true243output = out/demo244platforms = macos-aarch64, amiga245')246	bad_platform := run(dir, 'build')247	assert bad_platform.code == 1248	assert bad_platform.err.contains('amiga')249250	write(dir, 'koh.build', 'command = sh -c \'echo "no toolchain" >&2; exit 1\'251output = out/demo252platforms = ${this_platform()}253')254	failed := run(dir, 'build')255	assert failed.code == 1256	assert failed.err.contains('no toolchain')257}258259fn test_the_help_screen_lists_commands_and_no_flags() {260	dir := temp_repo('help')261	defer { os.rmdir_all(dir) or {} }262	help := run(dir, '--help')263	assert help.code == 0264	names := ['save', 'checkpoint', 'status', 'view', 'diff', 'undo', 'revert', 'load', 'offer',265		'steal']266	for name in names {267		assert help.out.contains('  ${name} '), name268	}269	assert help.out.contains('koh man <command>')270	// No flag text anywhere on the screen.271	assert !help.out.contains('--'), help.out272	lines := help.out.split_into_lines()273	for line in lines {274		assert line.runes().len <= 80, line275	}276	// Each command has its own paragraph, a blank line above it.277	for name in names {278		for i, line in lines {279			if line.starts_with('  ${name} ') {280				assert i > 0 && lines[i - 1] == '', line281			}282		}283	}284	// A bare `koh` keeps its stream and exit code; `-h` shows the same screen.285	bare := run(dir)286	assert bare.code == 2287	assert bare.out == ''288	assert bare.err.contains('koh man <command>')289	short := run(dir, '-h')290	assert short.code == 0291	assert short.out == help.out292}293294// Colour on the screen follows NO_COLOR, as it does everywhere else.295fn test_the_help_screen_has_no_colour_when_it_is_off() {296	dir := temp_repo('help_plain')297	defer { os.rmdir_all(dir) or {} }298	home := temp_repo('help_plain_home')299	defer { os.rmdir_all(home) or {} }300	out_path := os.join_path(os.temp_dir(), 'koh3-help-${os.getpid()}-${time.now().unix_nano()}')301	defer { os.rm(out_path) or {} }302	code := os.system('cd ${q(dir)} && HOME=${q(home)} NO_COLOR=1 ${q(binary)} --help > ${q(out_path)}')303	assert code == 0304	text := os.read_file(out_path) or { panic(err) }305	assert !text.contains('\x1b'), text306	assert text.contains('  save        snapshot your work')307}308309// The binary embeds VERSION while saves bump v.mod; they drifted once.310fn test_version_matches_the_manifest() {311	dir := temp_repo('version')312	defer { os.rmdir_all(dir) or {} }313	version := run(dir, '--version').out.trim_space().all_after('koh ')314	manifest := os.read_file(os.join_path(root, 'v.mod')) or { panic(err) }315	assert manifest.contains("version: '${version}'"), version316}317318fn test_save_checkpoint_and_status() {319	dir := temp_repo('save')320	defer { os.rmdir_all(dir) or {} }321	init_repo(dir)322	write(dir, 'tracked.txt', 'one\n')323	r := run(dir, 'save', 'first message', '--agent', 'agent-7', '--session', 'session-a', '--json')324	assert r.code == 0325	for key in ['id', 'parent', 'message', 'created_at', 'machine', 'is_checkpoint', 'agent', 'session',326		'files', 'size_bytes'] {327		read_json_has(r.out, key)328	}329	assert r.out.contains('"message":"first message"')330	assert r.out.contains('"agent":"agent-7"')331	assert r.out.contains('"session":"session-a"')332	assert r.out.contains('"is_checkpoint":false')333	assert run(dir, 'save', 'again').code == 1334	assert run(dir, 'save', 'again').err.contains('nothing has changed since the last save')335	assert run(dir, 'save').code == 2336	assert run(dir, 'save', 'x', '--bogus').code == 2337	cp := run(dir, 'checkpoint', 'still first', '--json')338	assert cp.code == 0339	assert cp.out.contains('"is_checkpoint":true')340	assert cp.out.contains('"parent":')341	clean := run(dir, 'status')342	assert clean.code == 0343	assert clean.out.contains('no changes')344	write(dir, 'tracked.txt', 'two\n')345	write(dir, 'new.txt', 'new\n')346	os.rm(os.join_path(dir, 'tracked.txt')) or { panic(err) }347	write(dir, '.kohignore', '*.log\n')348	status := run(dir, 'status')349	assert status.code == 0350	assert status.out.contains('+')351	assert status.out.contains('~') || status.out.contains('-')352	assert status.out.contains('added')353	js := run(dir, 'status', '--json')354	assert js.code == 0355	for key in ['head_id', 'head_msg', 'dirty', 'modified', 'added', 'deleted', 'ignore_changed',356		'saves', 'size_bytes', 'head_flagged'] {357		read_json_has(js.out, key)358	}359	assert js.out.contains('"ignore_changed":true')360	// What the shell prompt shows: saves on the line, the .koh size, the flag.361	assert js.out.contains('"saves":2')362	assert js.out.contains('"size_bytes":${os.file_size(os.join_path(dir, '.koh'))}')363	assert js.out.contains('"head_flagged":false')364	head := js.out.all_after('"head_id":"').all_before('"')365	assert run(dir, 'flag', head, '--reason', 'bad').code == 0366	assert run(dir, 'status', '--json').out.contains('"head_flagged":true')367}368369fn test_status_requires_repo_and_ignore_rules() {370	dir := temp_repo('status')371	defer { os.rmdir_all(dir) or {} }372	assert run(dir, 'status').code == 1373	init_repo(dir)374	write(dir, '.kohignore', '*.log\nbuild/\n')375	write(dir, 'keep.txt', 'keep\n')376	write(dir, 'ignored.log', 'ignore\n')377	write(dir, 'build/output.txt', 'ignore\n')378	assert run(dir, 'save', 'keep').code == 0379	assert run(dir, 'status').out.contains('no changes')380	assert !run(dir, 'status').out.contains('ignored.log')381	assert !run(dir, 'status').out.contains('build/output.txt')382	assert !run(dir, 'status').out.contains('LOG.md')383}384385// LOG.md is a convenience written after the save commits. If it cannot be386// written, the save still happened, and an agent that retried on a failure387// would only be told nothing had changed.388fn test_a_save_succeeds_when_log_md_cannot_be_written() {389	dir := temp_repo('logmd')390	defer { os.rmdir_all(dir) or {} }391	init_repo(dir)392	os.mkdir_all(os.join_path(dir, 'LOG.md')) or { panic(err) }393	write(dir, 'a.txt', 'one\n')394	r := run(dir, 'save', 'first', '--json')395	assert r.code == 0396	assert r.out.starts_with('{')397	assert r.err.contains('LOG.md')398	assert run(dir, 'view', '--json').out.contains('"message":"first"')399}400401// A folder of ignored files can sit where a restored file should go. Koh402// never touches ignored files, so the restore must stop and say so, not drop403// the file inside the folder under a temporary name.404fn test_a_restore_refuses_a_folder_of_ignored_files_in_the_way() {405	dir := temp_repo('dir-in-way')406	defer { os.rmdir_all(dir) or {} }407	init_repo(dir)408	write(dir, 'out', 'a file\n')409	first := run(dir, 'save', 'out is a file', '--json').out.all_after('"id":"')[..12]410	os.rm(os.join_path(dir, 'out')) or { panic(err) }411	write(dir, 'out/build.log', 'ignored\n')412	assert run(dir, 'save', 'out is gone').code == 0413	r := run(dir, 'load', first, '--yes')414	assert r.code == 1415	assert r.err.contains('out')416	assert os.ls(os.join_path(dir, 'out'))! == ['build.log']417}418419// Koh never follows a symlink, so a folder replaced by a link to somewhere420// else is not the repo's to write into: restoring through it would overwrite421// files outside the repo. The refusal comes before anything is recorded.422fn test_a_restore_never_writes_through_a_symlinked_folder() {423	dir := temp_repo('link-in-way')424	outside := temp_repo('link-target')425	defer {426		os.rmdir_all(dir) or {}427		os.rmdir_all(outside) or {}428	}429	init_repo(dir)430	write(dir, 'docs/a.md', 'saved\n')431	first := run(dir, 'save', 'docs', '--json').out.all_after('"id":"')[..12]432	os.rmdir_all(os.join_path(dir, 'docs')) or { panic(err) }433	write(outside, 'a.md', 'precious\n')434	os.symlink(outside, os.join_path(dir, 'docs')) or { panic(err) }435	assert run(dir, 'save', 'docs is a link now').code == 0436	head := run(dir, 'status', '--json').out437	r := run(dir, 'load', first, '--yes')438	assert r.code == 1439	assert r.err.contains('docs')440	assert os.read_file(os.join_path(outside, 'a.md'))! == 'precious\n'441	assert run(dir, 'status', '--json').out == head442}443444// A restore records its save first, then writes files. When the writing stops445// part way, the half-written tree is not somebody's work: saving it would446// record (and offer) a tree that undoes changes nobody asked to undo. Every447// command that would build on it points at revert, which finishes the job.448fn test_a_restore_cut_short_points_at_revert() {449	dir := temp_repo('cut-short')450	defer {451		os.chmod(os.join_path(dir, 'zz'), 0o755) or {}452		os.rmdir_all(dir) or {}453	}454	init_repo(dir)455	write(dir, 'zero', '0\n')456	assert run(dir, 'save', 'zero').code == 0457	write(dir, 'a.txt', 'v1\n')458	write(dir, 'zz/f', 'v1\n')459	assert run(dir, 'save', 'first').code == 0460	write(dir, 'a.txt', 'v2\n')461	write(dir, 'zz/f', 'v2\n')462	assert run(dir, 'save', 'second').code == 0463	// a.txt is written, then the read-only folder stops the restore: the464	// tree is genuinely half one save and half the other.465	os.chmod(os.join_path(dir, 'zz'), 0o555)!466	stopped := run(dir, 'undo', '--yes')467	assert stopped.code == 1468	assert stopped.err.contains('koh revert')469	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'v1\n'470	assert os.read_file(os.join_path(dir, 'zz/f'))! == 'v2\n'471	// Even a status that cannot read the tree says what happened.472	os.chmod(os.join_path(dir, 'zz'), 0o000)!473	assert run(dir, 'status').err.contains('koh revert')474	os.chmod(os.join_path(dir, 'zz'), 0o755)!475476	assert run(dir, 'status', '--json').out.contains('"restore_unfinished":true')477	for args in [['save', 'half'], ['checkpoint', 'half'], ['undo', '--yes']] {478		r := run(dir, ...args)479		assert r.code == 1480		assert r.err.contains('koh revert')481	}482	assert run(dir, 'revert', '--yes').code == 0483	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'v1\n'484	assert os.read_file(os.join_path(dir, 'zz/f'))! == 'v1\n'485	assert run(dir, 'status', '--json').out.contains('"restore_unfinished":false')486	write(dir, 'a.txt', 'v3\n')487	assert run(dir, 'save', 'carry on').code == 0488}489490// Doctor clears peek folders left from earlier days, never one somebody may491// be reading right now.492fn test_doctor_sweeps_only_old_peek_folders() {493	dir := temp_repo('peek-sweep')494	// V's temp_dir is /tmp on macOS whatever TMPDIR says, so these live in495	// the real temp directory under names no save could have.496	fresh := os.join_path(os.temp_dir(), 'koh-peek-fresh${os.getpid()}')497	old := os.join_path(os.temp_dir(), 'koh-peek-old${os.getpid()}')498	defer {499		os.rmdir_all(dir) or {}500		os.rmdir_all(fresh) or {}501		os.rmdir_all(old) or {}502	}503	init_repo(dir)504	write(dir, 'a.txt', 'one\n')505	assert run(dir, 'save', 'one').code == 0506	os.mkdir_all(fresh) or { panic(err) }507	os.mkdir_all(old) or { panic(err) }508	two_days_ago := time.now().unix() - 2 * 86400509	os.utime(old, two_days_ago, two_days_ago) or { panic(err) }510	assert run(dir, 'doctor', '--json').code == 0511	assert os.exists(fresh)512	assert !os.exists(old)513}514515// A file saved long ago and ignored since holds work no save has. Loading the516// old save must not write over it; the document says a restore never touches517// ignored files.518fn test_a_restore_never_overwrites_an_ignored_file() {519	dir := temp_repo('ignored-restore')520	defer { os.rmdir_all(dir) or {} }521	init_repo(dir)522	write(dir, '.env', 'KEY=saved long ago\n')523	first := run(dir, 'save', 'with env', '--json').out.all_after('"id":"')[..12]524	write(dir, '.kohignore', '.env\n')525	assert run(dir, 'save', 'ignore env').code == 0526	write(dir, '.env', 'KEY=never saved\n')527	assert run(dir, 'load', first, '--yes').code == 0528	assert os.read_file(os.join_path(dir, '.env'))! == 'KEY=never saved\n'529530	// Where the ignored file is missing, the restore still brings it back.531	other := temp_repo('ignored-restore-missing')532	defer { os.rmdir_all(other) or {} }533	init_repo(other)534	write(other, '.env', 'KEY=saved long ago\n')535	again := run(other, 'save', 'with env', '--json').out.all_after('"id":"')[..12]536	write(other, '.kohignore', '.env\n')537	assert run(other, 'save', 'ignore env').code == 0538	os.rm(os.join_path(other, '.env')) or { panic(err) }539	assert run(other, 'load', again, '--yes').code == 0540	assert os.read_file(os.join_path(other, '.env'))! == 'KEY=saved long ago\n'541}542543// A going-back preview lists paths only. Running diff(1) per file to draw it544// cost 27 s for 5,000 changed files, so it must not run diff at all.545fn test_a_going_back_preview_does_not_run_diff() {546	dir := temp_repo('preview-nodiff')547	home := temp_repo('preview-nodiff-home')548	defer {549		os.rmdir_all(dir) or {}550		os.rmdir_all(home) or {}551	}552	init_repo(dir)553	write(dir, 'a.txt', 'one\n')554	assert run_home(dir, home, 'save', 'one').code == 0555	write(dir, 'a.txt', 'two\n')556	assert run_home(dir, home, 'save', 'two').code == 0557	fake := os.join_path(home, 'bin')558	os.mkdir_all(fake) or { panic(err) }559	marker := os.join_path(home, 'diff-ran')560	os.write_file(os.join_path(fake, 'diff'), '#!/bin/sh\ntouch ${q(marker)}\nexit 2\n') or {561		panic(err)562	}563	os.chmod(os.join_path(fake, 'diff'), 0o755) or { panic(err) }564	assert run_home_with_path(dir, home, fake, 'undo', '--yes').code == 0565	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'566	assert !os.exists(marker)567}568569// A restore rewrites only what differs. Rewriting every file resets every570// mtime, so the next status has to hash the whole tree again.571fn test_a_restore_leaves_unchanged_files_alone() {572	dir := temp_repo('restore-skip')573	defer { os.rmdir_all(dir) or {} }574	init_repo(dir)575	write(dir, 'a.txt', 'one\n')576	write(dir, 'same.txt', 'never changes\n')577	assert run(dir, 'save', 'one').code == 0578	write(dir, 'a.txt', 'two\n')579	assert run(dir, 'save', 'two').code == 0580	long_ago := i64(1700000000)581	os.utime(os.join_path(dir, 'same.txt'), long_ago, long_ago) or { panic(err) }582	assert run(dir, 'undo', '--yes').code == 0583	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'584	assert os.file_last_mod_unix(os.join_path(dir, 'same.txt')) == long_ago585}586587// `save` records the executable bit, so `status` has to see it too, or a588// chmod would be invisible until it turned up in a save.589fn test_status_sees_an_executable_bit_change() {590	dir := temp_repo('chmod')591	defer { os.rmdir_all(dir) or {} }592	init_repo(dir)593	write(dir, 'run.sh', 'echo hi\n')594	assert run(dir, 'save', 'script').code == 0595	os.chmod(os.join_path(dir, 'run.sh'), 0o755) or { panic(err) }596	status := run(dir, 'status', '--json')597	assert status.out.contains('"dirty":true')598	assert status.out.contains('"modified":["run.sh"]')599}600601fn test_view_and_diff() {602	dir := temp_repo('history')603	defer { os.rmdir_all(dir) or {} }604	init_repo(dir)605	write(dir, 'a.txt', 'one\n')606	first := run(dir, 'save', 'one', '--session', 'alpha', '--json')607	id1 := first.out.all_after('"id":"')[..12]608	write(dir, 'a.txt', 'two\n')609	second := run(dir, 'save', 'two', '--session', 'beta', '--json')610	id2 := second.out.all_after('"id":"')[..12]611	cp := run(dir, 'checkpoint', 'checkpoint', '--json')612	assert cp.code == 0613	printed := run(dir, 'view')614	assert printed.code == 0615	assert printed.out.contains('▸')616	assert printed.out.contains('◐')617	lj := run(dir, 'view', '--json')618	assert lj.code == 0619	assert lj.out.contains('"head_id"')620	assert lj.out.contains('"saves"')621	assert run(dir, 'view', '--since', 'today').out.contains('two')622	session := run(dir, 'view', '--session', 'alpha')623	assert session.out.contains('one')624	assert !session.out.contains('two')625	assert run(dir, 'view', '--since', '9999-01-01').out.contains('no saves in that range')626	write(dir, 'a.txt', 'three\n')627	d := run(dir, 'diff')628	assert d.code == 0629	assert d.out.contains('--- a/')630	assert d.out.contains('+++ b/')631	assert run(dir, 'diff', id1).code == 0632	assert run(dir, 'diff', id1, id2).code == 0633	dj := run(dir, 'diff', '--json')634	assert dj.code == 0635	assert dj.out.contains('"from"')636	assert dj.out.contains('"to"')637	assert dj.out.contains('"files"')638	assert dj.out.contains('"change":"modified"')639	assert run(dir, 'diff', 'not-a-real-id').code == 1640	assert run(dir, 'diff', id1, id2, 'third').code == 1641	write(dir, 'blob.bin', '\x00\x01\x02')642	diff_binary := run(dir, 'diff', '--json')643	assert diff_binary.out.contains('"binary":true')644	assert diff_binary.out.contains('Binary files differ')645}646647fn test_undo_revert_and_load() {648	dir := temp_repo('restore')649	defer { os.rmdir_all(dir) or {} }650	init_repo(dir)651	write(dir, 'a.txt', 'one\n')652	one := run(dir, 'save', 'one', '--json').out653	id1 := one.all_after('"id":"')[..12]654	write(dir, 'a.txt', 'two\n')655	write(dir, 'gone.txt', 'gone\n')656	second := run(dir, 'save', 'two', '--json').out657	id2 := second.all_after('"id":"')[..12]658	write(dir, 'a.txt', 'three\n')659	third := run(dir, 'save', 'three', '--json').out660	id3 := third.all_after('"id":"')[..12]661	// Unsaved work — here a file never saved — blocks every going-back but662	// revert, as in Koh 2: a restore must never overwrite what only the disk has.663	write(dir, 'never.txt', 'keep me\n')664	view_before := run(dir, 'view').out665	for args in [['undo', '--yes'], ['load', id1, '--yes'], ['pluck', id2, '--yes']] {666		blocked := run(dir, ...args)667		assert blocked.code == 1668		assert blocked.err.contains('unsaved changes')669	}670	assert run(dir, 'view').out == view_before671	os.rm(os.join_path(dir, 'never.txt')) or { panic(err) }672	write(dir, 'a.txt', 'edited, never saved\n')673	assert run(dir, 'undo', '--yes').err.contains('unsaved changes')674	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'edited, never saved\n'675	write(dir, 'a.txt', 'three\n')676	os.rm(os.join_path(dir, 'gone.txt')) or { panic(err) }677	assert run(dir, 'load', id1, '--yes').err.contains('unsaved changes')678	write(dir, 'gone.txt', 'gone\n')679	undo := run(dir, 'undo', '--yes', '--json')680	assert undo.code == 0681	if !undo.out.contains(id2) {682		panic('undo JSON did not name ${id2}: ${undo.out}')683	}684	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'685	assert os.exists(os.join_path(dir, 'gone.txt'))686	assert run(dir, 'load', id3, '--yes').code == 0687	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'three\n'688	assert run(dir, 'undo', '2', '--yes').code == 0689	assert run(dir, 'load', id2, '--yes').code == 0690	assert run(dir, 'undo', '99', '--yes').err.contains('nothing before')691	write(dir, 'a.txt', 'dirty\n')692	before := run(dir, 'view')693	refuse := run(dir, 'revert')694	assert refuse.code == 1695	assert refuse.err.contains('needs --yes when not interactive')696	assert run(dir, 'view').out == before.out697	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'dirty\n'698	write(dir, 'untracked.txt', 'remove\n')699	rv := run(dir, 'revert', '--yes', '--json')700	assert rv.code == 0701	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'702	assert !os.exists(os.join_path(dir, 'untracked.txt'))703	// The way back to the discarded work is named, not left to be found.704	kept := rv.out.all_after('"checkpoint":"')[..12]705	assert run(dir, 'load', kept, '--yes').code == 0706	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'dirty\n'707	assert os.read_file(os.join_path(dir, 'untracked.txt'))! == 'remove\n'708	write(dir, 'a.txt', 'dirty again\n')709	assert run(dir, 'revert', '--yes').out.contains('koh load ')710	assert run(dir, 'revert', '--yes').out.contains('working tree already matches')711	assert run(dir, 'load', '--checkpoint', '--yes').code == 0712	assert run(dir, 'load', id2, '--json').code == 1713	assert run(dir, 'load', id2, '--json').err.contains('error')714	assert run(dir, 'load').code == 2715	assert run(dir, 'load', 'unknown-id', '--yes').code == 1716}717718fn test_flag_and_flagged_view() {719	dir := temp_repo('flag')720	defer { os.rmdir_all(dir) or {} }721	init_repo(dir)722	write(dir, 'flag.txt', 'one\n')723	saved := run(dir, 'save', 'flag me', '--json')724	id := saved.out.all_after('"id":"')[..12]725	flagged := run(dir, 'flag', id, '--reason', 'unsafe', '--json')726	assert flagged.code == 0727	assert flagged.out.contains('"flagged":true')728	assert flagged.out.contains('"reason":"unsafe"')729	list := run(dir, 'flag', '--json')730	assert list.code == 0731	assert list.out.contains(id)732	assert list.out.contains('unsafe')733	assert run(dir, 'view').out.contains('⚑')734	assert run(dir, 'flag', '--clear', id).code == 0735	assert run(dir, 'flag').out.contains('nothing is flagged')736	assert run(dir, 'flag', 'unknown-id').code == 1737	assert run(dir, 'flag').code == 0738}739740fn test_pluck_forward_reverse_dry_run_and_conflict() {741	dir := temp_repo('pluck')742	defer { os.rmdir_all(dir) or {} }743	init_repo(dir)744	write(dir, 'a.txt', 'one\n')745	first := run(dir, 'save', 'one', '--json').out746	id1 := first.all_after('"id":"')[..12]747	write(dir, 'a.txt', 'two\n')748	second := run(dir, 'save', 'two', '--json').out749	id2 := second.all_after('"id":"')[..12]750	assert run(dir, 'load', id1, '--yes').code == 0751	dry := run(dir, 'pluck', id2, '--dry-run')752	assert dry.code == 0753	assert dry.out.contains('a.txt')754	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'755	assert run(dir, 'pluck', id2, '--yes').code == 0756	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'757	assert run(dir, 'pluck', '--reverse', id2, '--yes').code == 0758	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'759	write(dir, 'a.txt', 'different\n')760	assert run(dir, 'pluck', id2, '--dry-run').code == 1761	assert run(dir, 'save', 'different').code == 0762	conflict := run(dir, 'pluck', id2, '--yes')763	assert conflict.code == 1764	assert conflict.err.contains('a.txt')765	assert run(dir, 'pluck').code == 2766	assert run(dir, 'pluck', 'unknown-id').code == 1767}768769fn test_peek_and_doctor() {770	dir := temp_repo('peek-doctor')771	defer { os.rmdir_all(dir) or {} }772	init_repo(dir)773	write(dir, 'peek.txt', 'peek me\n')774	assert run(dir, 'save', 'peekable').code == 0775	id := run(dir, 'view', '--json').out.all_after('"id":"')[..12]776	before_view := run(dir, 'view', '--json').out777	peek := run(dir, 'peek', id, '--json')778	assert peek.code == 0779	peek_path := peek.out.all_after('"path":"').before('"')780	assert peek.out.contains('"id":"${id}"')781	assert os.read_file(os.join_path(peek_path, 'peek.txt'))! == 'peek me\n'782	assert run(dir, 'status').out.contains('no changes')783	assert run(dir, 'view', '--json').out == before_view784	assert run(dir, 'peek').code == 2785	assert run(dir, 'peek', 'unknown-id').code == 1786	backup := os.join_path(dir, 'doctor.backup')787	healthy := run(dir, 'doctor')788	assert healthy.code == 0789	assert healthy.out.contains('is sound')790	report := run(dir, 'doctor', '--json')791	assert report.code == 0792	for key in ['problems', 'objects', 'saves', 'checkpoints', 'cached_files', 'peek_folders_removed',793		'backup'] {794		read_json_has(report.out, key)795	}796	backed := run(dir, 'doctor', '--backup', backup)797	assert backed.code == 0798	assert os.exists(backup)799	assert backed.out.contains(backup)800	assert run(dir, 'doctor', '--backup', backup).code == 1801	assert run(dir, 'peek', id, '--json').code == 0802	// A peek made today is left for whoever is reading it.803	kept := run(dir, 'doctor', '--json')804	assert kept.code == 0805	assert os.exists(peek_path)806	os.rmdir_all(peek_path) or {}807}808809fn test_strip_refuses_without_terminal() {810	dir := temp_repo('strip')811	defer { os.rmdir_all(dir) or {} }812	init_repo(dir)813	write(dir, 'secret.txt', 'keep\n')814	assert run(dir, 'save', 'secret').code == 0815	before_view := run(dir, 'view', '--json').out816	refused := run(dir, 'strip', 'secret.txt')817	assert refused.code == 1818	assert refused.err.contains('needs a terminal')819	assert run(dir, 'view', '--json').out == before_view820	assert os.read_file(os.join_path(dir, 'secret.txt'))! == 'keep\n'821	assert run(dir, 'view', '--json').out.contains('secret')822}823824// `koh view` is the one way into the history: the whole line by default,825// checkpoints alone with the flag, and the two lists never overlap.826fn test_view_shows_the_line_and_checkpoints_apart() {827	dir := temp_repo('view')828	defer { os.rmdir_all(dir) or {} }829	init_repo(dir)830	write(dir, 'view.txt', 'one\n')831	assert run(dir, 'save', 'plain save').code == 0832	assert run(dir, 'checkpoint', 'checkpoint save').code == 0833	line := run(dir, 'view')834	assert line.code == 0835	assert line.out.contains('plain save')836	assert line.out.contains('checkpoint save')837	checkpoints := run(dir, 'view', '--checkpoints')838	assert checkpoints.code == 0839	assert checkpoints.out.contains('checkpoint save')840	assert !checkpoints.out.contains('plain save')841	json_line := run(dir, 'view', '--json')842	assert json_line.code == 0843	assert json_line.out.contains('"is_checkpoint":false')844	assert json_line.out.contains('"is_checkpoint":true')845	json_checkpoints := run(dir, 'view', '--checkpoints', '--json')846	assert json_checkpoints.code == 0847	assert json_checkpoints.out.contains('"is_checkpoint":true')848	assert !json_checkpoints.out.contains('"is_checkpoint":false')849	// `view` takes no arguments, so a stray one is a usage error, and the names850	// it replaced are gone rather than hidden: the diagnostic says which.851	assert run(dir, 'view', 'extra').code == 2852	for gone in ['log', 'saves', 'checkpoints'] {853		refused := run(dir, gone)854		assert refused.code == 2855		assert refused.err.contains('unknown command "${gone}"')856	}857	// Every save is on the whole line exactly once, as the JSON says.858	assert line.out.split_into_lines().len == json_line.out.count('"id":"')859}860861fn test_remote_configuration_is_isolated_and_atomic() {862	dir := temp_repo('remote')863	home := temp_repo('remote-home')864	defer {865		os.rmdir_all(dir) or {}866		os.rmdir_all(home) or {}867	}868	empty := run_home(dir, home, 'remote', '--json')869	assert empty.code == 0870	assert empty.out.contains('"configured":false')871	target := os.join_path(home, 'remote-store')872	set := run_home(dir, home, 'remote', 'folder', target)873	assert set.code == 0874	assert os.is_dir(target)875	state := run_home(dir, home, 'remote', '--json')876	assert state.code == 0877	assert state.out.contains('"kind":"folder"')878	assert state.out.contains(target)879	assert run_home(dir, home, 'remote', 's3', 'http://127.0.0.1:1', 'bucket', 'region').code == 1880	assert run_home(dir, home, 'remote', '--json').out.contains(target)881	assert run_home(dir, home, 'remote', 's3', 'http://127.0.0.1:1', 'bucket', 'region').err.contains('KOH_ACCESS_KEY')882	assert run_home(dir, home, 'remote', '--forget').code == 0883	assert run_home(dir, home, 'remote', '--json').out.contains('"configured":false')884}885886// The files under ~/.config/koh can be written by hand instead of by887// `koh remote`, and are then read the same way.888fn test_remote_written_by_hand() {889	dir := temp_repo('remote-by-hand')890	home := temp_repo('remote-by-hand-home')891	defer {892		os.rmdir_all(dir) or {}893		os.rmdir_all(home) or {}894	}895	config := os.join_path(home, '.config', 'koh')896	os.mkdir_all(config) or { panic(err) }897	target := os.join_path(home, 'remote-store')898	os.mkdir_all(target) or { panic(err) }899	os.write_file(os.join_path(config, 'remote'), 'kind = folder\npath = ${target}\n') or {900		panic(err)901	}902	assert run_home(dir, home, 'init').code == 0903	os.write_file(os.join_path(dir, 'a.txt'), 'a\n') or { panic(err) }904	assert run_home(dir, home, 'save', 'first').code == 0905	offered := run_home(dir, home, 'offer', '--json')906	assert offered.code == 0907	assert offered.out.contains('"head"')908909	// Keys anyone else can read are refused before they are ever sent.910	os.write_file(os.join_path(config, 'remote'), 'kind=s3\nendpoint=http://127.0.0.1:1\nbucket=b\nregion=r\n') or {911		panic(err)912	}913	credentials := os.join_path(config, 'credentials')914	os.write_file(credentials, 'access_key=AK\nsecret_key=SK\n') or { panic(err) }915	os.chmod(credentials, 0o644) or { panic(err) }916	loose := run_home(dir, home, 'offer')917	assert loose.code == 1918	assert loose.err.contains('chmod 600')919920	// A setting koh cannot read is replaced by setting the remote again.921	os.write_file(os.join_path(config, 'remote'), 'kind=ftp\n') or { panic(err) }922	unreadable := run_home(dir, home, 'offer')923	assert unreadable.code == 1924	assert unreadable.err.contains('not readable')925	assert run_home(dir, home, 'remote', 'folder', target).code == 0926	assert run_home(dir, home, 'offer').code == 0927}928929// A clone belongs to the repo it was stolen from, whatever its folder is930// called later: renaming it must not start a second repo on the remote.931fn test_a_renamed_clone_keeps_offering_to_its_repo() {932	syncroot := temp_repo('rename-clone')933	home := temp_repo('rename-clone-home')934	defer {935		os.rmdir_all(syncroot) or {}936		os.rmdir_all(home) or {}937	}938	remote := os.join_path(syncroot, 'remote')939	a := os.join_path(syncroot, 'A', 'proj')940	b_parent := os.join_path(syncroot, 'B')941	os.mkdir_all(a) or { panic(err) }942	os.mkdir_all(b_parent) or { panic(err) }943	init_repo(a)944	write(a, 'a.txt', 'from A\n')945	assert run_home(a, home, 'remote', 'folder', remote).code == 0946	assert run_home(a, home, 'save', 'A first').code == 0947	assert run_home(b_parent, home, 'steal', 'proj').code == 0948	renamed := os.join_path(b_parent, 'renamed')949	os.mv(os.join_path(b_parent, 'proj'), renamed) or { panic(err) }950	write(renamed, 'b.txt', 'from B\n')951	assert run_home(renamed, home, 'save', 'B first').code == 0952	assert !os.exists(os.join_path(remote, 'renamed'))953	assert run_home(a, home, 'steal').code == 0954	assert os.read_file(os.join_path(a, 'b.txt'))! == 'from B\n'955}956957// A damaged object on the remote stops a clone, names the object, and leaves958// no half-made folder that would make the retry refuse.959fn test_clone_of_a_damaged_remote_leaves_nothing() {960	syncroot := temp_repo('damaged')961	home := temp_repo('damaged-home')962	defer {963		os.rmdir_all(syncroot) or {}964		os.rmdir_all(home) or {}965	}966	remote := os.join_path(syncroot, 'remote')967	a := os.join_path(syncroot, 'A', 'proj')968	b_parent := os.join_path(syncroot, 'B')969	os.mkdir_all(a) or { panic(err) }970	os.mkdir_all(b_parent) or { panic(err) }971	init_repo(a)972	write(a, 'a.txt', 'from A\n')973	assert run_home(a, home, 'remote', 'folder', remote).code == 0974	assert run_home(a, home, 'save', 'A first').code == 0975	objects := os.join_path(remote, 'proj', 'objects')976	for name in os.ls(objects) or { panic(err) } {977		os.chmod(os.join_path(objects, name), 0o644) or {}978		os.write_file(os.join_path(objects, name), 'junk') or { panic(err) }979	}980	clone := run_home(b_parent, home, 'steal', 'proj')981	assert clone.code == 1982	assert clone.err.contains('is damaged')983	assert !os.exists(os.join_path(b_parent, 'proj'))984}985986fn test_offer_steal_folder_remote() {987	syncroot := temp_repo('sync')988	home := temp_repo('sync-home')989	defer {990		os.rmdir_all(syncroot) or {}991		os.rmdir_all(home) or {}992	}993	remote := os.join_path(syncroot, 'remote')994	a := os.join_path(syncroot, 'A', 'proj')995	b_parent := os.join_path(syncroot, 'B')996	os.mkdir_all(a) or { panic(err) }997	os.mkdir_all(b_parent) or { panic(err) }998	init_repo(a)999	write(a, 'a.txt', 'from A\n')1000	assert run_home(a, home, 'remote', 'folder', remote).code == 01001	assert run_home(a, home, 'save', 'A first').code == 01002	clone := run_home(b_parent, home, 'steal', 'proj')1003	assert clone.code == 01004	b := os.join_path(b_parent, 'proj')1005	assert os.read_file(os.join_path(b, 'a.txt'))! == 'from A\n'1006	write(b, 'b.txt', 'from B\n')1007	assert run_home(b, home, 'save', 'B first').code == 01008	write(a, 'a2.txt', 'second\n')1009	assert run_home(a, home, 'save', 'A second').code == 01010	assert run_home(a, home, 'steal').code == 01011	assert os.exists(os.join_path(a, 'b.txt'))1012	assert run_home(b_parent, home, 'steal', '--list').out.contains('proj')1013	write(a, 'clash.txt', 'base\n')1014	assert run_home(a, home, 'save', 'clash base').code == 01015	assert run_home(b, home, 'steal').code == 01016	write(a, 'clash.txt', 'A version\n')1017	assert run_home(a, home, 'save', 'A clash').code == 01018	write(b, 'clash.txt', 'B version\n')1019	assert run_home(b, home, 'save', 'B clash').code == 01020	refused := run_home(b, home, 'steal')1021	assert refused.code == 11022	assert refused.err.contains('--mine') || refused.err.contains('--theirs')1023	b_head := run_home(b, home, 'status', '--json').out.all_after('"head_id":"')[..12]1024	theirs := run_home(b, home, 'steal', '--theirs', '--json')1025	assert theirs.code == 01026	// The pre-combine tree is off the line now; the way back must be named,1027	// or an agent without the history view cannot find it.1028	assert theirs.out.contains('"previous_head":"${b_head}"')1029	assert theirs.out.contains('"kept_versions":["clash.txt:${b_head}"]')1030	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'A version\n'1031	assert run_home(b, home, 'load', b_head, '--yes').code == 01032	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'B version\n'1033	assert run_home(b, home, 'load', theirs.out.all_after('"head":"')[..12], '--yes').code == 01034	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'A version\n'1035	write(a, 'clash.txt', 'A second\n')1036	assert run_home(a, home, 'save', 'A second clash').code == 01037	write(b, 'clash.txt', 'B second\n')1038	assert run_home(b, home, 'save', 'B second clash').code == 01039	assert run_home(b, home, 'steal', '--mine').code == 01040	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'B second\n'1041	assert run_home(b, home, 'view').out.contains('combine: kept mine for')1042}10431044fn test_guided_steal_walks_the_terminal_and_can_cancel() {1045	syncroot := temp_repo('guided-steal')1046	home := temp_repo('guided-steal-home')1047	defer {1048		os.rmdir_all(syncroot) or {}1049		os.rmdir_all(home) or {}1050	}1051	remote := os.join_path(syncroot, 'remote')1052	a := os.join_path(syncroot, 'A', 'proj')1053	b_parent := os.join_path(syncroot, 'B')1054	os.mkdir_all(a) or { panic(err) }1055	os.mkdir_all(b_parent) or { panic(err) }1056	init_repo(a)1057	write(a, 'clash.txt', 'base\n')1058	write(a, 'other.txt', 'base\n')1059	write(a, 'same.txt', 'base\n')1060	write(a, 'remote-only.txt', 'base\n')1061	write(a, 'local-only.txt', 'base\n')1062	assert run_home(a, home, 'remote', 'folder', remote).code == 01063	assert run_home(a, home, 'save', 'base').code == 01064	assert run_home(b_parent, home, 'steal', 'proj').code == 01065	b := os.join_path(b_parent, 'proj')10661067	write(b, 'dirty.txt', 'mine\n')1068	before := run_home(b, home, 'status', '--json').out1069	quit := run_pty_home(b, home, ['q'], 'steal')1070	assert quit.out.contains('you have 1 unsaved file')1071	assert quit.out.contains('dirty.txt')1072	assert run_home(b, home, 'status', '--json').out == before1073	checkpoint := run_pty_home(b, home, ['c'], 'steal')1074	assert checkpoint.code == 0, checkpoint.err1075	assert run_home(b, home, 'view', '--checkpoints').out.contains('before steal')10761077	assert run_home(a, home, 'steal').code == 01078	write(a, 'forward.txt', 'new\n')1079	assert run_home(a, home, 'save', 'fast forward').code == 01080	forward := run_pty_home(b, home, []string{}, 'steal')1081	assert forward.out.contains('proj is up to date · 1 new save')1082	assert forward.out.split_into_lines().filter(it.trim_space() != '').len == 11083	write(a, 'clash.txt', 'remote\n')1084	write(a, 'other.txt', 'remote\n')1085	write(a, 'same.txt', 'identical\n')1086	write(a, 'remote-only.txt', 'remote\n')1087	assert run_home(a, home, 'save', 'remote change').code == 01088	write(b, 'clash.txt', 'mine\n')1089	write(b, 'other.txt', 'mine\n')1090	write(b, 'same.txt', 'identical\n')1091	write(b, 'local-only.txt', 'mine\n')1092	assert run_home(b, home, 'save', 'local change').code == 01093	local_head := run_home(b, home, 'status', '--json').out.all_after('"head_id":"')[..12]1094	cancel := run_pty_home(b, home, ['m', 'b', 't', 't', 'n'], 'steal')1095	assert cancel.out.contains('both moved since')1096	assert cancel.out.contains('5 files changed')1097	assert cancel.out.contains('2 combine by themselves')1098	assert cancel.out.contains('1 changed the same way')1099	assert cancel.out.contains('2 need you')1100	assert cancel.out.contains('ready to combine')1101	assert run_home(b, home, 'status', '--json').out.contains('"head_id":"${local_head}"')1102	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'mine\n'11031104	done := run_pty_home(b, home, ['y'], 'steal', '--theirs')1105	assert done.out.contains('combined · offered to proj')1106	assert done.out.contains('to load') || done.out.contains('koh load')1107	assert done.out.contains('your clash.txt is in ${local_head}')1108	assert !done.out.contains('\x1b')1109	for line in done.out.split_into_lines() {1110		assert line.runes().len <= 80, line1111	}1112}11131114// A clone brings in the whole history, flags included; both output forms must1115// say which saves came in flagged, and why.1116fn test_a_clone_reports_flagged_saves() {1117	syncroot := temp_repo('clone-flags')1118	home := temp_repo('clone-flags-home')1119	defer {1120		os.rmdir_all(syncroot) or {}1121		os.rmdir_all(home) or {}1122	}1123	a := os.join_path(syncroot, 'A', 'proj')1124	os.mkdir_all(a) or { panic(err) }1125	init_repo(a)1126	assert run_home(a, home, 'remote', 'folder', os.join_path(syncroot, 'remote')).code == 01127	write(a, 'a.txt', 'one\n')1128	id := run_home(a, home, 'save', 'risky', '--json').out.all_after('"id":"')[..12]1129	assert run_home(a, home, 'flag', id, '--reason', 'broke the build').code == 01130	assert run_home(a, home, 'offer').code == 01131	for name in ['B', 'C'] {1132		os.mkdir_all(os.join_path(syncroot, name)) or { panic(err) }1133	}1134	json_clone := run_home(os.join_path(syncroot, 'B'), home, 'steal', 'proj', '--json')1135	assert json_clone.code == 01136	assert json_clone.out.contains('"flagged":["${id}"]')1137	text_clone := run_home(os.join_path(syncroot, 'C'), home, 'steal', 'proj')1138	assert text_clone.code == 01139	assert text_clone.out.contains('[${id}] came in flagged — broke the build')1140}11411142// A folder remote on a disk or share that is not mounted is simply not there.1143// Creating it would put the saves in a stand-in folder the other machine never1144// sees; the offer must say what is wrong instead.1145fn test_an_unmounted_folder_remote_is_not_recreated() {1146	syncroot := temp_repo('unmounted')1147	home := temp_repo('unmounted-home')1148	defer {1149		os.rmdir_all(syncroot) or {}1150		os.rmdir_all(home) or {}1151	}1152	mount := os.join_path(syncroot, 'nas')1153	remote := os.join_path(mount, 'koh')1154	a := os.join_path(syncroot, 'proj')1155	os.mkdir_all(a) or { panic(err) }1156	init_repo(a)1157	assert run_home(a, home, 'remote', 'folder', remote).code == 01158	write(a, 'a.txt', 'one\n')1159	assert run_home(a, home, 'save', 'first').code == 01160	os.rename(mount, os.join_path(syncroot, 'nas-unplugged')) or { panic(err) }1161	os.mkdir(mount) or { panic(err) }1162	offered := run_home(a, home, 'offer')1163	assert offered.code == 11164	assert offered.err.contains('mounted')1165	assert !os.exists(remote)1166	write(a, 'a.txt', 'two\n')1167	saved := run_home(a, home, 'save', 'second')1168	assert saved.code == 01169	assert saved.out.contains('mounted')1170	assert !os.exists(remote)1171}11721173fn test_man_and_koh2_handoff() {1174	dir := temp_repo('man')1175	home := temp_repo('man-home')1176	defer {1177		os.rmdir_all(dir) or {}1178		os.rmdir_all(home) or {}1179	}1180	whole := run_home(dir, home, 'man')1181	assert whole.code == 01182	assert whole.out.contains('NAME')1183	assert whole.out.contains('COMMANDS')1184	assert !whole.out.contains('\x1b') && !whole.out.contains('◆')1185	strip := run_home(dir, home, 'man', 'strip')1186	assert strip.code == 01187	assert strip.out.contains('strip')1188	assert !strip.out.contains('koh save ')1189	steal := run_home(dir, home, 'man', 'steal').out1190	assert steal.starts_with('    koh steal') && steal.contains('koh steal my-project')1191	assert run_home(dir, home, 'man', 'init').out.trim_space() == "koh init\n        Create `.koh` here, and a starter `.kohignore` if there isn't one."1192	assert run_home(dir, home, 'man', 'nonsense').code == 21193	legacy := temp_repo('legacy')1194	defer { os.rmdir_all(legacy) or {} }1195	os.mkdir_all(os.join_path(legacy, '.koh')) or { panic(err) }1196	fake := os.join_path(home, 'bin')1197	os.mkdir_all(fake) or { panic(err) }1198	fake_koh := os.join_path(fake, 'koh2')1199	os.write_file(fake_koh, '#!/bin/sh\nprintf "handoff:%s\\n" "$*"\nexit 7\n') or { panic(err) }1200	os.chmod(fake_koh, 0o755) or { panic(err) }1201	handoff := run_home_with_path(legacy, home, fake, 'status', '--json')1202	assert handoff.code == 71203	assert handoff.out.contains('handoff:status --json')1204	// One notice line, on stderr, so koh2's own output stays as it was.1205	assert handoff.err.contains('Koh 2 repo')1206	assert handoff.err.trim_space().split_into_lines().len == 11207	assert handoff.out.trim_space() == 'handoff:status --json'1208}12091210fn run_home_with_path(repo string, home string, bin_dir string, args ...string) Result {1211	stamp := '${os.getpid()}-${time.now().unix_nano()}'1212	base := os.join_path(os.temp_dir(), 'koh3-cli-${stamp}')1213	out_path := '${base}.out'1214	err_path := '${base}.err'1215	code_path := '${base}.code'1216	mut command := 'HOME=${q(home)} PATH=${q(bin_dir + ':' + os.getenv('PATH'))} ${q(binary)}'1217	for arg in args {1218		command += ' ${q(arg)}'1219	}1220	shell := 'cd ${q(repo)} && ${command} </dev/null >${q(out_path)} 2>${q(err_path)}; printf "%s" \$? >${q(code_path)}'1221	result := os.execute(shell)1222	if result.exit_code != 0 {1223		panic('could not run test command: ${result.output}')1224	}1225	code := os.read_file(code_path) or { panic(err) }1226	out := os.read_file(out_path) or { '' }1227	err := os.read_file(err_path) or { '' }1228	os.rm(out_path) or {}1229	os.rm(err_path) or {}1230	os.rm(code_path) or {}1231	return Result{1232		code: code.int()1233		out:  out1234		err:  err1235	}1236}12371238// --- migration -------------------------------------------------------------12391240fn koh2_binary() string {1241	return os.find_abs_path_of_executable('koh') or { '' }1242}12431244// run_koh2 runs the Koh 2 binary in a fixture; its own output is not under1245// test here.1246fn run_koh2(dir string, command string) {1247	os.execute('cd ${q(dir)} && ${command} >/dev/null 2>&1')1248}12491250fn save_ids(dir string) []string {1251	mut ids := []string{}1252	for name in os.ls(os.join_path(dir, '.koh', 'snapshots')) or { []string{} } {1253		if name.ends_with('.json') {1254			ids << name.trim_right('.json')1255		}1256	}1257	ids.sort()1258	return ids1259}12601261fn test_migrate_converts_a_koh2_repo_and_keeps_every_save() {1262	koh2 := koh2_binary()1263	if koh2 == '' {1264		println('skipping the migration tests: koh (Koh 2) is not on PATH')1265		return1266	}1267	dir := temp_repo('migrate')1268	defer { os.rmdir_all(dir) or {} }1269	home := temp_repo('migrate-home')1270	defer { os.rmdir_all(home) or {} }1271	run_koh2(dir, '${q(koh2)} init')1272	// One file large enough to be an object, one small enough to be inlined.1273	write(dir, 'code.txt', 'x'.repeat(700))1274	write(dir, 'tiny.txt', 'tiny\n')1275	run_koh2(dir, '${q(koh2)} save "first save"')1276	run_koh2(dir, '${q(koh2)} checkpoint "before something"')1277	write(dir, 'code.txt', 'y'.repeat(700))1278	run_koh2(dir, '${q(koh2)} save "second save"')1279	original := save_ids(dir)1280	assert original.len == 312811282	report := run_home(dir, home, 'migrate')1283	assert report.code == 01284	assert report.out.contains('migrated 3 saves')1285	// The swap: `.koh` is a file, the old data is archived, nothing is staging.1286	assert os.is_file(os.join_path(dir, '.koh'))1287	assert os.is_dir(os.join_path(dir, '.koh-v2'))1288	assert os.is_file(os.join_path(dir, '.kohignore'))1289	assert !os.exists(os.join_path(dir, '.koh-migrate'))12901291	// Every save kept its original ID, and the new repo is sound.1292	listed := run_home(dir, home, 'view', '--json')1293	assert listed.code == 01294	for id in original {1295		assert listed.out.contains(id)1296	}1297	assert run_home(dir, home, 'doctor').code == 01298	assert run_home(dir, home, 'status').code == 012991300	// Migrating again has nothing to convert.1301	assert run_home(dir, home, 'migrate').code == 11302}13031304fn test_migrate_refuses_a_tree_that_does_not_match_the_last_save() {1305	koh2 := koh2_binary()1306	if koh2 == '' {1307		return1308	}1309	dir := temp_repo('migrate-dirty')1310	defer { os.rmdir_all(dir) or {} }1311	home := temp_repo('migrate-dirty-home')1312	defer { os.rmdir_all(home) or {} }1313	run_koh2(dir, '${q(koh2)} init')1314	write(dir, 'code.txt', 'x'.repeat(700))1315	run_koh2(dir, '${q(koh2)} save "only save"')1316	write(dir, 'code.txt', 'unsaved change\n')13171318	refused := run_home(dir, home, 'migrate')1319	assert refused.code == 11320	assert refused.err.contains('save with koh2 first')1321	// Nothing moved: still Koh 2, no archive, no staging file.1322	assert os.is_dir(os.join_path(dir, '.koh'))1323	assert !os.exists(os.join_path(dir, '.koh-v2'))1324	assert !os.exists(os.join_path(dir, '.koh-migrate'))1325}13261327// Koh 2 never saved a root `.kohconfig`, root `.kohignore.<remote>` rules or1328// `*.bundle` files, so a clean Koh 2 repo may hold them. Most real repos have1329// a `.kohconfig`; migrate must not call them unsaved work.1330fn test_migrate_passes_over_the_files_koh2_never_saved() {1331	koh2 := koh2_binary()1332	if koh2 == '' {1333		return1334	}1335	dir := temp_repo('migrate-koh2-ignores')1336	defer { os.rmdir_all(dir) or {} }1337	home := temp_repo('migrate-koh2-ignores-home')1338	defer { os.rmdir_all(home) or {} }1339	run_koh2(dir, '${q(koh2)} init')1340	write(dir, 'code.txt', 'x'.repeat(700))1341	run_koh2(dir, '${q(koh2)} save "only save"')1342	write(dir, '.kohconfig', 'stable_days = 14\n')1343	write(dir, '.kohignore.public', 'private/\n')1344	write(dir, 'lib/app.bundle', 'bundle\n')1345	write(dir, 'ios/Settings.bundle/Root.plist', 'settings\n')1346	// Koh 2 keeps saving a file under a folder pattern added later, where1347	// Koh 3 reads the same rule as covering the folder: the saved file is on1348	// disk and matches, so the tree is clean.1349	write(dir, 'native/t.dSYM/Info.plist', 'plist\n')1350	run_koh2(dir, '${q(koh2)} save --agent test --session test "add the dsym"')1351	// Koh 2 skips *.bundle even when its rules no longer list it.1352	ignore_path := os.join_path(dir, '.koh', 'ignore')1353	rules := os.read_file(ignore_path)!.split_into_lines().filter(it != '*.bundle')1354	os.write_file(ignore_path, rules.join('\n') + '\nnative/*.dSYM\n')!1355	// A saved file the walk skips still has to match what was saved.1356	write(dir, 'native/t.dSYM/Info.plist', 'changed\n')1357	changed := run_home(dir, home, 'migrate')1358	assert changed.code == 11359	assert changed.err.contains('native/t.dSYM/Info.plist does not match')1360	write(dir, 'native/t.dSYM/Info.plist', 'plist\n')1361	assert os.execute('cd ${q(dir)} && ${q(koh2)} status --json').output.contains('"dirty":false')13621363	migrated := run_home(dir, home, 'migrate')1364	assert migrated.code == 0, migrated.err1365	// They stay where they were, for the user to keep or delete.1366	assert os.read_file(os.join_path(dir, '.kohconfig'))! == 'stable_days = 14\n'1367}13681369struct FakeKepr {1370	no_access bool1371	// One reply the redemption must cope with: '500', 'garbage' or 'incomplete'.1372	fail string1373	// When set, /api/connect answers 307 here instead of a code reply.1374	redirect_to string1375mut:1376	objects map[string][]u81377	// What the client asked for. A map, because the server holds its own copy of this struct.1378	seen map[string]string1379}13801381fn (mut h FakeKepr) handle(req http.Request) http.Response {1382	if req.method == .post && req.url == '/api/connect' {1383		h.seen['code'] = req.data1384		if h.redirect_to != '' {1385			return http.Response{1386				status_code: 3071387				status_msg:  'Temporary Redirect'1388				header:      http.new_header(1389					key:   .location1390					value: h.redirect_to1391				)1392			}1393		}1394		if h.fail == '500' {1395			return http.Response{ status_code: 500, status_msg: 'Internal Server Error' }1396		}1397		if h.fail == 'garbage' {1398			return http.Response{ status_code: 200, status_msg: 'OK', body: 'not json at all' }1399		}1400		if h.fail == 'incomplete' {1401			return http.Response{ status_code: 200, status_msg: 'OK', body: '{"endpoint":"http://x","bucket":"","region":"","access_key_id":"","secret_access_key":""}' }1402		}1403		if req.data == 'code=good' && !h.no_access {1404			return http.Response{ status_code: 200, status_msg: 'OK', body: '{"endpoint":"http://${req.header.get_custom('Host', http.HeaderQueryConfig{}) or { '' }}","bucket":"bucket","region":"test","access_key_id":"access","secret_access_key":"secret"}' }1405		}1406		return http.Response{ status_code: 404, status_msg: 'Not Found', body: '{"error":"no_code","message":"no code"}' }1407	}1408	if req.method == .get && req.url.starts_with('/connect') {1409		h.seen['connect'] = req.url1410		return http.Response{ status_code: if h.no_access { 404 } else { 302 }, status_msg: 'Found' }1411	}1412	key := req.url1413	if key.starts_with('/bucket/') {1414		match req.method {1415			.put {1416				if req.header.get_custom('If-None-Match', http.HeaderQueryConfig{}) or { '' } == '*' && key in h.objects {1417					return http.Response{ status_code: 412, status_msg: 'Precondition Failed' }1418				}1419				h.objects[key] = req.data.bytes()1420				return http.Response{ status_code: 200, status_msg: 'OK' }1421			}1422			.get {1423				if body := h.objects[key] {1424					return http.Response{1425						status_code: 2001426						status_msg:  'OK'1427						body:        body.bytestr()1428						header:      http.new_header(1429							key:   .etag1430							value: '"tag"'1431						)1432					}1433				}1434				return http.Response{ status_code: 404, status_msg: 'Not Found' }1435			}1436			.delete {1437				h.objects.delete(key)1438				return http.Response{ status_code: 204, status_msg: 'No Content' }1439			}1440			else {}1441		}1442	}1443	return http.Response{ status_code: 404, status_msg: 'Not Found' }1444}14451446fn start_fake_kepr(no_access bool, fail string, redirect_to string) !(int, &http.Server, &FakeKepr) {1447	for port in 19401 .. 19411 {1448		listener := net.listen_tcp(.ip, '127.0.0.1:${port}') or { continue }1449		fake := &FakeKepr{1450			no_access:   no_access1451			fail:        fail1452			redirect_to: redirect_to1453			seen:        map[string]string{}1454		}1455		mut server := &http.Server{1456			listener:             listener1457			handler:              fake1458			show_startup_message: false1459		}1460		spawn server.listen_and_serve()1461		server.wait_till_running()!1462		return port, server, fake1463	}1464	return error('no free fake Kepr port')1465}14661467// A slash makes an argument an address, so half an address is an error and never a repo name.1468fn test_steal_refuses_an_address_that_is_not_one() {1469	outside := temp_repo('steal-address')1470	home := temp_repo('steal-address-home')1471	defer { os.rmdir_all(outside) or {} }1472	defer { os.rmdir_all(home) or {} }1473	for bad in ['kepr.uk/', '/shipped', 'kepr.uk/'] {1474		refused := run_home(outside, home, 'steal', bad)1475		assert refused.code == 1, bad1476		assert refused.err.contains('is not <host>/<repo>'), '${bad}: ${refused.err}'1477	}1478	assert run_home(outside, home, 'steal', 'one', 'two').code == 21479	assert run_home(outside, home, 'steal', '--list', 'extra').code == 21480}14811482fn test_remote_kepr_saves_and_refuses_without_changes() {1483	repo := temp_repo('kepr')1484	home := temp_repo('kepr-home')1485	defer { os.rmdir_all(repo) or {} }1486	defer { os.rmdir_all(home) or {} }1487	init_repo(repo)1488	port, mut server, fake := start_fake_kepr(false, '', '')!1489	defer { server.stop() }1490	host := 'http://127.0.0.1:${port}'1491	// A trailing slash is the same host, and the saved line keeps the normalised form.1492	good := run_home(repo, home, 'remote', '${host}/', '--code', 'good')1493	assert good.code == 0, good.err1494	remote_path := os.join_path(home, '.config', 'koh', 'remote')1495	credentials_path := os.join_path(home, '.config', 'koh', 'credentials')1496	assert os.read_file(remote_path)! == '# written by koh remote — the remote for every repo on this machine\nkind=s3\nendpoint=${host}\nbucket=bucket\nregion=test\nkepr=${host}\n'1497	assert os.read_file(credentials_path)! == '# written by koh remote — keep this file private\naccess_key=access\nsecret_key=secret\n'1498	// The code went as a form field, and the connect page was never asked for: there was a code.1499	assert (fake.seen['code'] or { '' }) == 'code=good'1500	assert (fake.seen['connect'] or { '' }) == ''1501	// A refused code, a missing terminal and a wrong reply all leave both files as they were.1502	before := os.read_file(remote_path)!1503	before_keys := os.read_file(credentials_path)!1504	bad := run_home(repo, home, 'remote', host, '--code', 'bad')1505	assert bad.code == 11506	assert bad.err.contains('wrong or has expired')1507	// The 404 could also mean a Kepr that hands out nothing, so the connect page is asked for1508	// with this machine's name. (This machine's name holds no character needing an escape, so1509	// that part of the query cannot be exercised here.)1510	// `machine.name()` is `os.hostname() or { 'unknown' }`, so the query carries the same text.1511	assert (fake.seen['connect'] or { '' }).contains('machine=${os.hostname() or { 'unknown' }}')1512	no_terminal := run_home(repo, home, 'remote', host)1513	assert no_terminal.code == 11514	assert no_terminal.err.contains('needs a terminal')1515	assert os.read_file(remote_path)! == before1516	assert os.read_file(credentials_path)! == before_keys1517}15181519fn test_remote_kepr_refuses_hosts_that_are_not_hosts() {1520	repo := temp_repo('kepr-host')1521	home := temp_repo('kepr-host-home')1522	defer { os.rmdir_all(repo) or {} }1523	defer { os.rmdir_all(home) or {} }1524	init_repo(repo)1525	for host in ['kepr.uk/foo', 'https://kepr.uk?x=1', 'kepr.uk#frag', '[email protected]', 'kepr uk',1526		'http://127.0.0.1:1/foo', 'https://'] {1527		refused := run_home(repo, home, 'remote', host, '--code', 'good')1528		assert refused.code == 1, host1529		assert refused.err.contains('is not a Kepr address'), '${host}: ${refused.err}'1530	}1531	// The reply carries the bucket's secret key, so plain http is only for this machine's own Kepr.1532	for host in ['http://kepr.uk', 'http://10.0.0.2:3000', 'http://KEPR.uk:80'] {1533		refused := run_home(repo, home, 'remote', host, '--code', 'good')1534		assert refused.code == 1, host1535		assert refused.err.contains('needs https'), '${host}: ${refused.err}'1536		stolen := run_home(home, home, 'steal', '${host}/nina')1537		assert stolen.code == 1, host1538		assert stolen.err.contains('needs https'), '${host}: ${stolen.err}'1539	}1540	// --code belongs to the host form alone.1541	assert run_home(repo, home, 'remote', 's3', 'https://x', 'b', 'r', '--code', 'good').code == 21542	assert run_home(repo, home, 'remote', 'folder', '/tmp', '--code', 'good').code == 21543	assert run_home(repo, home, 'remote', '--code', 'good').code == 21544	assert !os.exists(os.join_path(home, '.config', 'koh', 'remote'))1545}15461547fn test_remote_kepr_refuses_what_is_not_a_code_reply() {1548	repo := temp_repo('kepr-reply')1549	home := temp_repo('kepr-reply-home')1550	defer { os.rmdir_all(repo) or {} }1551	defer { os.rmdir_all(home) or {} }1552	init_repo(repo)1553	remote_path := os.join_path(home, '.config', 'koh', 'remote')1554	for mode in ['500', 'garbage', 'incomplete'] {1555		port, mut server, _ := start_fake_kepr(false, mode, '')!1556		refused := run_home(repo, home, 'remote', 'http://127.0.0.1:${port}', '--code', 'good')1557		server.stop()1558		assert refused.code == 1, mode1559		assert refused.err.contains('nothing was changed'), '${mode}: ${refused.err}'1560		assert !os.exists(remote_path)1561	}1562	// A redirect would hand the code to wherever it points, so it is refused and never followed.1563	target_port, mut target, target_fake := start_fake_kepr(false, '', '')!1564	port, mut server, _ := start_fake_kepr(false, '', 'http://127.0.0.1:${target_port}/api/connect')!1565	redirected := run_home(repo, home, 'remote', 'http://127.0.0.1:${port}', '--code', 'good')1566	server.stop()1567	target.stop()1568	assert redirected.code == 11569	assert redirected.err.contains('refused the code')1570	assert target_fake.seen.len == 0, 'the code was forwarded: ${target_fake.seen}'1571	assert !os.exists(remote_path)1572}15731574// An unreachable Kepr is a refusal too, and the settings are still untouched.1575fn test_remote_kepr_that_cannot_be_reached_changes_nothing() {1576	repo := temp_repo('kepr-down')1577	home := temp_repo('kepr-down-home')1578	defer { os.rmdir_all(repo) or {} }1579	defer { os.rmdir_all(home) or {} }1580	init_repo(repo)1581	refused := run_home(repo, home, 'remote', 'http://127.0.0.1:1', '--code', 'good')1582	assert refused.code == 11583	assert refused.err.contains('could not reach Kepr')1584	assert !os.exists(os.join_path(home, '.config', 'koh', 'remote'))1585}15861587fn test_remote_kepr_without_bucket_access_is_explained() {1588	repo := temp_repo('kepr-no-access')1589	home := temp_repo('kepr-no-access-home')1590	defer { os.rmdir_all(repo) or {} }1591	defer { os.rmdir_all(home) or {} }1592	init_repo(repo)1593	port, mut server, _ := start_fake_kepr(true, '', '')!1594	defer { server.stop() }1595	r := run_home(repo, home, 'remote', 'http://127.0.0.1:${port}', '--code', 'bad')1596	assert r.code == 11597	assert r.err.contains("doesn't hand out bucket access")1598	assert !os.exists(os.join_path(home, '.config', 'koh', 'remote'))1599}