cli_test.v

1module tests23import os4import time56const root = @VMODROOT7const binary = os.join_path(root, 'build', 'koh3')89struct Result {10mut:11	code int12	out  string13	err  string14}1516fn testsuite_begin() {17	os.mkdir_all(os.join_path(root, 'build')) or { panic(err) }18	build := os.execute('v -o ${q(binary)} ${q(os.join_path(root, 'src', 'koh3.v'))}')19	if build.exit_code != 0 {20		panic('could not build koh3: ${build.output}')21	}22}2324fn q(s string) string {25	return "'${s.replace("'", "'\\''")}'"26}2728fn temp_repo(name string) string {29	dir := os.join_path(os.temp_dir(), 'koh3-cli-${name}-${time.now().unix_nano()}')30	os.mkdir_all(dir) or { panic(err) }31	return dir32}3334fn run(repo string, args ...string) Result {35	home := temp_repo('home')36	defer { os.rmdir_all(home) or {} }37	return run_home(repo, home, ...args)38}3940fn run_home(repo string, home string, args ...string) Result {41	stamp := '${os.getpid()}-${time.now().unix_nano()}'42	base := os.join_path(os.temp_dir(), 'koh3-cli-${stamp}')43	out_path := '${base}.out'44	err_path := '${base}.err'45	code_path := '${base}.code'46	mut command := 'HOME=${q(home)} ${q(binary)}'47	for arg in args {48		command += ' ${q(arg)}'49	}50	shell := 'cd ${q(repo)} && ${command} </dev/null >${q(out_path)} 2>${q(err_path)}; printf "%s" \$? >${q(code_path)}'51	result := os.execute(shell)52	if result.exit_code != 0 {53		panic('could not run test command: ${result.output}')54	}55	code := os.read_file(code_path) or { panic(err) }56	out := os.read_file(out_path) or { '' }57	err := os.read_file(err_path) or { '' }58	os.rm(out_path) or {}59	os.rm(err_path) or {}60	os.rm(code_path) or {}61	return Result{62		code: code.int()63		out:  out64		err:  err65	}66}6768fn init_repo(repo string) {69	r := run(repo, 'init')70	assert r.code == 071	assert os.exists(os.join_path(repo, '.koh'))72	assert os.exists(os.join_path(repo, '.kohignore'))73}7475fn write(repo string, path string, text string) {76	full := os.join_path(repo, path)77	os.mkdir_all(os.dir(full)) or { panic(err) }78	os.write_file(full, text) or { panic(err) }79}8081fn read_json_has(text string, key string) {82	if !text.contains(key) {83		panic('missing JSON key ${key}: ${text}')84	}85}8687fn test_init_and_usage() {88	dir := temp_repo('init')89	defer { os.rmdir_all(dir) or {} }90	r := run(dir, 'init', '--json')91	assert r.code == 092	read_json_has(r.out, 'repo')93	read_json_has(r.out, 'ignore_created')94	assert run(dir, 'init').code == 195	assert run(dir, 'unknown-command').code == 296	assert run(dir, 'unknown-command').err.contains('unknown command')97	// An agent asking for JSON gets JSON for a usage mistake too, exit 2.98	for args in [['unknown-command', '--json'], ['save', '--json'], ['save', 'x', '--nope', '--json']] {99		r2 := run(dir, ...args)100		assert r2.code == 2101		assert r2.out == ''102		assert r2.err.starts_with('{"error":'), r2.err103	}104}105106// The help screen is commands and plain words: every flag lives in `koh man`.107// this_platform is the platform name for the machine the tests run on, so a108// build test does not depend on which machine that is.109fn this_platform() string {110	machine := os.uname().machine111	arch := if machine in ['arm64', 'aarch64'] { 'aarch64' } else { 'x86_64' }112	return '${os.user_os()}-${arch}'113}114115// `koh build` builds with `koh.build`: the version and platform fill the output116// path, and each artifact is printed with its size.117fn test_build_builds_the_named_platforms() {118	dir := temp_repo('build_ok')119	defer { os.rmdir_all(dir) or {} }120	init_repo(dir)121	host := this_platform()122	write(dir, 'VERSION', '1.2.3\n')123	write(dir, 'koh.build', 'command = mkdir -p out && printf built > out/demo-1.2.3-${host}124output = out/demo-{version}-{platform}125platforms = ${host}126')127	one := run(dir, 'build')128	assert one.code == 0, one.err129	assert one.out.contains('version 1.2.3')130	assert one.out.contains('out/demo-1.2.3-${host}')131	assert os.exists(os.join_path(dir, 'out/demo-1.2.3-${host}'))132133	// --platform picks one, --all takes every platform the file names.134	write(dir, 'koh.build', 'command = mkdir -p out && printf m > out/demo-macos-aarch64 && printf l > out/demo-linux-aarch64135output = out/demo-{platform}136platforms = macos-aarch64, linux-aarch64137')138	all := run(dir, 'build', '--all', '--json')139	assert all.code == 0, all.err140	assert all.out.contains('"platform":"macos-aarch64"')141	assert all.out.contains('"platform":"linux-aarch64"')142	assert os.exists(os.join_path(dir, 'out/demo-linux-aarch64'))143	picked := run(dir, 'build', '--platform', 'linux-aarch64')144	assert picked.code == 0, picked.err145	assert picked.out.contains('out/demo-linux-aarch64')146	assert !picked.out.contains('out/demo-macos-aarch64')147}148149// The item's exit check, as a test: `koh build` builds Koh 3 itself with the150// real toolchain, in a copy, and the binary it produces runs.151// `koh update` refuses a command line that cannot be answered: JSON cannot carry152// the question, and a stray argument is a mistake. Both are settled before any153// source is read, so no network is needed here.154fn test_update_refuses_a_command_line_it_cannot_answer() {155	dir := temp_repo('update_args')156	defer { os.rmdir_all(dir) or {} }157	init_repo(dir)158	json_without_yes := run(dir, 'update', '--json')159	assert json_without_yes.code == 2160	assert json_without_yes.err.contains('needs --yes')161	assert run(dir, 'update', 'extra').code == 2162}163164fn test_build_builds_koh_itself() {165	dir := temp_repo('selfbuild')166	defer { os.rmdir_all(dir) or {} }167	// Only what a build reads: the copy needs no history and no archive.168	for item in ['src', 'vendor', 'docs', 'v.mod', 'VERSION'] {169		os.cp_all(os.join_path(root, item), os.join_path(dir, item), true) or { panic(err) }170	}171	write(dir, 'koh.build', 'command = mkdir -p zig-out/bin && v -o zig-out/bin/koh3 src/koh3.v172output = zig-out/bin/koh3173platforms = ${this_platform()}174')175	init_repo(dir)176	built := run(dir, 'build')177	assert built.code == 0, built.err178	assert built.out.contains('zig-out/bin/koh3')179	fresh := os.join_path(dir, 'zig-out/bin/koh3')180	assert os.exists(fresh)181	version := os.read_file(os.join_path(dir, 'VERSION'))!.trim_space()182	assert os.execute('${q(fresh)} --version').output.trim_space() == 'koh ${version}'183}184185fn test_build_refuses_what_it_cannot_do() {186	dir := temp_repo('build_bad')187	defer { os.rmdir_all(dir) or {} }188	init_repo(dir)189	missing := run(dir, 'build')190	assert missing.code == 1191	assert missing.err.contains('koh.build')192193	write(dir, 'koh.build', 'command = true194output = out/demo195platforms = macos-aarch64196')197	no_version := run(dir, 'build')198	assert no_version.code == 1199	assert no_version.err.contains('VERSION')200201	write(dir, 'VERSION', '1.2.3\n')202	not_listed := run(dir, 'build', '--platform', 'linux-aarch64')203	assert not_listed.code == 1204	assert not_listed.err.contains('does not build for')205206	unknown := run(dir, 'build', '--platform', 'amiga')207	assert unknown.code == 1208	assert unknown.err.contains('amiga')209210	both := run(dir, 'build', '--all', '--platform', 'macos-aarch64')211	assert both.code == 2212	assert both.err.contains('cannot be combined')213214	write(dir, 'koh.build', 'command = true215output = out/demo216platforms = macos-aarch64, amiga217')218	bad_platform := run(dir, 'build')219	assert bad_platform.code == 1220	assert bad_platform.err.contains('amiga')221222	write(dir, 'koh.build', 'command = sh -c \'echo "no toolchain" >&2; exit 1\'223output = out/demo224platforms = ${this_platform()}225')226	failed := run(dir, 'build')227	assert failed.code == 1228	assert failed.err.contains('no toolchain')229}230231fn test_the_help_screen_lists_commands_and_no_flags() {232	dir := temp_repo('help')233	defer { os.rmdir_all(dir) or {} }234	help := run(dir, '--help')235	assert help.code == 0236	names := ['save', 'checkpoint', 'status', 'view', 'diff', 'undo', 'revert', 'load', 'offer',237		'steal']238	for name in names {239		assert help.out.contains('  ${name} '), name240	}241	assert help.out.contains('koh man <command>')242	// No flag text anywhere on the screen.243	assert !help.out.contains('--'), help.out244	lines := help.out.split_into_lines()245	for line in lines {246		assert line.runes().len <= 80, line247	}248	// Each command has its own paragraph, a blank line above it.249	for name in names {250		for i, line in lines {251			if line.starts_with('  ${name} ') {252				assert i > 0 && lines[i - 1] == '', line253			}254		}255	}256	// A bare `koh` keeps its stream and exit code; `-h` shows the same screen.257	bare := run(dir)258	assert bare.code == 2259	assert bare.out == ''260	assert bare.err.contains('koh man <command>')261	short := run(dir, '-h')262	assert short.code == 0263	assert short.out == help.out264}265266// Colour on the screen follows NO_COLOR, as it does everywhere else.267fn test_the_help_screen_has_no_colour_when_it_is_off() {268	dir := temp_repo('help_plain')269	defer { os.rmdir_all(dir) or {} }270	home := temp_repo('help_plain_home')271	defer { os.rmdir_all(home) or {} }272	out_path := os.join_path(os.temp_dir(), 'koh3-help-${os.getpid()}-${time.now().unix_nano()}')273	defer { os.rm(out_path) or {} }274	code := os.system('cd ${q(dir)} && HOME=${q(home)} NO_COLOR=1 ${q(binary)} --help > ${q(out_path)}')275	assert code == 0276	text := os.read_file(out_path) or { panic(err) }277	assert !text.contains('\x1b'), text278	assert text.contains('  save        snapshot your work')279}280281// The binary embeds VERSION while saves bump v.mod; they drifted once.282fn test_version_matches_the_manifest() {283	dir := temp_repo('version')284	defer { os.rmdir_all(dir) or {} }285	version := run(dir, '--version').out.trim_space().all_after('koh ')286	manifest := os.read_file(os.join_path(root, 'v.mod')) or { panic(err) }287	assert manifest.contains("version: '${version}'"), version288}289290fn test_save_checkpoint_and_status() {291	dir := temp_repo('save')292	defer { os.rmdir_all(dir) or {} }293	init_repo(dir)294	write(dir, 'tracked.txt', 'one\n')295	r := run(dir, 'save', 'first message', '--agent', 'agent-7', '--session', 'session-a', '--json')296	assert r.code == 0297	for key in ['id', 'parent', 'message', 'created_at', 'machine', 'is_checkpoint', 'agent', 'session',298		'files', 'size_bytes'] {299		read_json_has(r.out, key)300	}301	assert r.out.contains('"message":"first message"')302	assert r.out.contains('"agent":"agent-7"')303	assert r.out.contains('"session":"session-a"')304	assert r.out.contains('"is_checkpoint":false')305	assert run(dir, 'save', 'again').code == 1306	assert run(dir, 'save', 'again').err.contains('nothing has changed since the last save')307	assert run(dir, 'save').code == 2308	assert run(dir, 'save', 'x', '--bogus').code == 2309	cp := run(dir, 'checkpoint', 'still first', '--json')310	assert cp.code == 0311	assert cp.out.contains('"is_checkpoint":true')312	assert cp.out.contains('"parent":')313	clean := run(dir, 'status')314	assert clean.code == 0315	assert clean.out.contains('no changes')316	write(dir, 'tracked.txt', 'two\n')317	write(dir, 'new.txt', 'new\n')318	os.rm(os.join_path(dir, 'tracked.txt')) or { panic(err) }319	write(dir, '.kohignore', '*.log\n')320	status := run(dir, 'status')321	assert status.code == 0322	assert status.out.contains('+')323	assert status.out.contains('~') || status.out.contains('-')324	assert status.out.contains('added')325	js := run(dir, 'status', '--json')326	assert js.code == 0327	for key in ['head_id', 'head_msg', 'dirty', 'modified', 'added', 'deleted', 'ignore_changed',328		'saves', 'size_bytes', 'head_flagged'] {329		read_json_has(js.out, key)330	}331	assert js.out.contains('"ignore_changed":true')332	// What the shell prompt shows: saves on the line, the .koh size, the flag.333	assert js.out.contains('"saves":2')334	assert js.out.contains('"size_bytes":${os.file_size(os.join_path(dir, '.koh'))}')335	assert js.out.contains('"head_flagged":false')336	head := js.out.all_after('"head_id":"').all_before('"')337	assert run(dir, 'flag', head, '--reason', 'bad').code == 0338	assert run(dir, 'status', '--json').out.contains('"head_flagged":true')339}340341fn test_status_requires_repo_and_ignore_rules() {342	dir := temp_repo('status')343	defer { os.rmdir_all(dir) or {} }344	assert run(dir, 'status').code == 1345	init_repo(dir)346	write(dir, '.kohignore', '*.log\nbuild/\n')347	write(dir, 'keep.txt', 'keep\n')348	write(dir, 'ignored.log', 'ignore\n')349	write(dir, 'build/output.txt', 'ignore\n')350	assert run(dir, 'save', 'keep').code == 0351	assert run(dir, 'status').out.contains('no changes')352	assert !run(dir, 'status').out.contains('ignored.log')353	assert !run(dir, 'status').out.contains('build/output.txt')354	assert !run(dir, 'status').out.contains('LOG.md')355}356357// LOG.md is a convenience written after the save commits. If it cannot be358// written, the save still happened, and an agent that retried on a failure359// would only be told nothing had changed.360fn test_a_save_succeeds_when_log_md_cannot_be_written() {361	dir := temp_repo('logmd')362	defer { os.rmdir_all(dir) or {} }363	init_repo(dir)364	os.mkdir_all(os.join_path(dir, 'LOG.md')) or { panic(err) }365	write(dir, 'a.txt', 'one\n')366	r := run(dir, 'save', 'first', '--json')367	assert r.code == 0368	assert r.out.starts_with('{')369	assert r.err.contains('LOG.md')370	assert run(dir, 'view', '--json').out.contains('"message":"first"')371}372373// A folder of ignored files can sit where a restored file should go. Koh374// never touches ignored files, so the restore must stop and say so, not drop375// the file inside the folder under a temporary name.376fn test_a_restore_refuses_a_folder_of_ignored_files_in_the_way() {377	dir := temp_repo('dir-in-way')378	defer { os.rmdir_all(dir) or {} }379	init_repo(dir)380	write(dir, 'out', 'a file\n')381	first := run(dir, 'save', 'out is a file', '--json').out.all_after('"id":"')[..12]382	os.rm(os.join_path(dir, 'out')) or { panic(err) }383	write(dir, 'out/build.log', 'ignored\n')384	assert run(dir, 'save', 'out is gone').code == 0385	r := run(dir, 'load', first, '--yes')386	assert r.code == 1387	assert r.err.contains('out')388	assert os.ls(os.join_path(dir, 'out'))! == ['build.log']389}390391// Koh never follows a symlink, so a folder replaced by a link to somewhere392// else is not the repo's to write into: restoring through it would overwrite393// files outside the repo. The refusal comes before anything is recorded.394fn test_a_restore_never_writes_through_a_symlinked_folder() {395	dir := temp_repo('link-in-way')396	outside := temp_repo('link-target')397	defer {398		os.rmdir_all(dir) or {}399		os.rmdir_all(outside) or {}400	}401	init_repo(dir)402	write(dir, 'docs/a.md', 'saved\n')403	first := run(dir, 'save', 'docs', '--json').out.all_after('"id":"')[..12]404	os.rmdir_all(os.join_path(dir, 'docs')) or { panic(err) }405	write(outside, 'a.md', 'precious\n')406	os.symlink(outside, os.join_path(dir, 'docs')) or { panic(err) }407	assert run(dir, 'save', 'docs is a link now').code == 0408	head := run(dir, 'status', '--json').out409	r := run(dir, 'load', first, '--yes')410	assert r.code == 1411	assert r.err.contains('docs')412	assert os.read_file(os.join_path(outside, 'a.md'))! == 'precious\n'413	assert run(dir, 'status', '--json').out == head414}415416// A restore records its save first, then writes files. When the writing stops417// part way, the half-written tree is not somebody's work: saving it would418// record (and offer) a tree that undoes changes nobody asked to undo. Every419// command that would build on it points at revert, which finishes the job.420fn test_a_restore_cut_short_points_at_revert() {421	dir := temp_repo('cut-short')422	defer {423		os.chmod(os.join_path(dir, 'zz'), 0o755) or {}424		os.rmdir_all(dir) or {}425	}426	init_repo(dir)427	write(dir, 'zero', '0\n')428	assert run(dir, 'save', 'zero').code == 0429	write(dir, 'a.txt', 'v1\n')430	write(dir, 'zz/f', 'v1\n')431	assert run(dir, 'save', 'first').code == 0432	write(dir, 'a.txt', 'v2\n')433	write(dir, 'zz/f', 'v2\n')434	assert run(dir, 'save', 'second').code == 0435	// a.txt is written, then the read-only folder stops the restore: the436	// tree is genuinely half one save and half the other.437	os.chmod(os.join_path(dir, 'zz'), 0o555)!438	stopped := run(dir, 'undo', '--yes')439	assert stopped.code == 1440	assert stopped.err.contains('koh revert')441	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'v1\n'442	assert os.read_file(os.join_path(dir, 'zz/f'))! == 'v2\n'443	// Even a status that cannot read the tree says what happened.444	os.chmod(os.join_path(dir, 'zz'), 0o000)!445	assert run(dir, 'status').err.contains('koh revert')446	os.chmod(os.join_path(dir, 'zz'), 0o755)!447448	assert run(dir, 'status', '--json').out.contains('"restore_unfinished":true')449	for args in [['save', 'half'], ['checkpoint', 'half'], ['undo', '--yes']] {450		r := run(dir, ...args)451		assert r.code == 1452		assert r.err.contains('koh revert')453	}454	assert run(dir, 'revert', '--yes').code == 0455	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'v1\n'456	assert os.read_file(os.join_path(dir, 'zz/f'))! == 'v1\n'457	assert run(dir, 'status', '--json').out.contains('"restore_unfinished":false')458	write(dir, 'a.txt', 'v3\n')459	assert run(dir, 'save', 'carry on').code == 0460}461462// Doctor clears peek folders left from earlier days, never one somebody may463// be reading right now.464fn test_doctor_sweeps_only_old_peek_folders() {465	dir := temp_repo('peek-sweep')466	// V's temp_dir is /tmp on macOS whatever TMPDIR says, so these live in467	// the real temp directory under names no save could have.468	fresh := os.join_path(os.temp_dir(), 'koh-peek-fresh${os.getpid()}')469	old := os.join_path(os.temp_dir(), 'koh-peek-old${os.getpid()}')470	defer {471		os.rmdir_all(dir) or {}472		os.rmdir_all(fresh) or {}473		os.rmdir_all(old) or {}474	}475	init_repo(dir)476	write(dir, 'a.txt', 'one\n')477	assert run(dir, 'save', 'one').code == 0478	os.mkdir_all(fresh) or { panic(err) }479	os.mkdir_all(old) or { panic(err) }480	two_days_ago := time.now().unix() - 2 * 86400481	os.utime(old, two_days_ago, two_days_ago) or { panic(err) }482	assert run(dir, 'doctor', '--json').code == 0483	assert os.exists(fresh)484	assert !os.exists(old)485}486487// A file saved long ago and ignored since holds work no save has. Loading the488// old save must not write over it; the document says a restore never touches489// ignored files.490fn test_a_restore_never_overwrites_an_ignored_file() {491	dir := temp_repo('ignored-restore')492	defer { os.rmdir_all(dir) or {} }493	init_repo(dir)494	write(dir, '.env', 'KEY=saved long ago\n')495	first := run(dir, 'save', 'with env', '--json').out.all_after('"id":"')[..12]496	write(dir, '.kohignore', '.env\n')497	assert run(dir, 'save', 'ignore env').code == 0498	write(dir, '.env', 'KEY=never saved\n')499	assert run(dir, 'load', first, '--yes').code == 0500	assert os.read_file(os.join_path(dir, '.env'))! == 'KEY=never saved\n'501502	// Where the ignored file is missing, the restore still brings it back.503	other := temp_repo('ignored-restore-missing')504	defer { os.rmdir_all(other) or {} }505	init_repo(other)506	write(other, '.env', 'KEY=saved long ago\n')507	again := run(other, 'save', 'with env', '--json').out.all_after('"id":"')[..12]508	write(other, '.kohignore', '.env\n')509	assert run(other, 'save', 'ignore env').code == 0510	os.rm(os.join_path(other, '.env')) or { panic(err) }511	assert run(other, 'load', again, '--yes').code == 0512	assert os.read_file(os.join_path(other, '.env'))! == 'KEY=saved long ago\n'513}514515// A going-back preview lists paths only. Running diff(1) per file to draw it516// cost 27 s for 5,000 changed files, so it must not run diff at all.517fn test_a_going_back_preview_does_not_run_diff() {518	dir := temp_repo('preview-nodiff')519	home := temp_repo('preview-nodiff-home')520	defer {521		os.rmdir_all(dir) or {}522		os.rmdir_all(home) or {}523	}524	init_repo(dir)525	write(dir, 'a.txt', 'one\n')526	assert run_home(dir, home, 'save', 'one').code == 0527	write(dir, 'a.txt', 'two\n')528	assert run_home(dir, home, 'save', 'two').code == 0529	fake := os.join_path(home, 'bin')530	os.mkdir_all(fake) or { panic(err) }531	marker := os.join_path(home, 'diff-ran')532	os.write_file(os.join_path(fake, 'diff'), '#!/bin/sh\ntouch ${q(marker)}\nexit 2\n') or {533		panic(err)534	}535	os.chmod(os.join_path(fake, 'diff'), 0o755) or { panic(err) }536	assert run_home_with_path(dir, home, fake, 'undo', '--yes').code == 0537	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'538	assert !os.exists(marker)539}540541// A restore rewrites only what differs. Rewriting every file resets every542// mtime, so the next status has to hash the whole tree again.543fn test_a_restore_leaves_unchanged_files_alone() {544	dir := temp_repo('restore-skip')545	defer { os.rmdir_all(dir) or {} }546	init_repo(dir)547	write(dir, 'a.txt', 'one\n')548	write(dir, 'same.txt', 'never changes\n')549	assert run(dir, 'save', 'one').code == 0550	write(dir, 'a.txt', 'two\n')551	assert run(dir, 'save', 'two').code == 0552	long_ago := i64(1700000000)553	os.utime(os.join_path(dir, 'same.txt'), long_ago, long_ago) or { panic(err) }554	assert run(dir, 'undo', '--yes').code == 0555	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'556	assert os.file_last_mod_unix(os.join_path(dir, 'same.txt')) == long_ago557}558559// `save` records the executable bit, so `status` has to see it too, or a560// chmod would be invisible until it turned up in a save.561fn test_status_sees_an_executable_bit_change() {562	dir := temp_repo('chmod')563	defer { os.rmdir_all(dir) or {} }564	init_repo(dir)565	write(dir, 'run.sh', 'echo hi\n')566	assert run(dir, 'save', 'script').code == 0567	os.chmod(os.join_path(dir, 'run.sh'), 0o755) or { panic(err) }568	status := run(dir, 'status', '--json')569	assert status.out.contains('"dirty":true')570	assert status.out.contains('"modified":["run.sh"]')571}572573fn test_view_and_diff() {574	dir := temp_repo('history')575	defer { os.rmdir_all(dir) or {} }576	init_repo(dir)577	write(dir, 'a.txt', 'one\n')578	first := run(dir, 'save', 'one', '--session', 'alpha', '--json')579	id1 := first.out.all_after('"id":"')[..12]580	write(dir, 'a.txt', 'two\n')581	second := run(dir, 'save', 'two', '--session', 'beta', '--json')582	id2 := second.out.all_after('"id":"')[..12]583	cp := run(dir, 'checkpoint', 'checkpoint', '--json')584	assert cp.code == 0585	printed := run(dir, 'view')586	assert printed.code == 0587	assert printed.out.contains('▸')588	assert printed.out.contains('◐')589	lj := run(dir, 'view', '--json')590	assert lj.code == 0591	assert lj.out.contains('"head_id"')592	assert lj.out.contains('"saves"')593	assert run(dir, 'view', '--since', 'today').out.contains('two')594	session := run(dir, 'view', '--session', 'alpha')595	assert session.out.contains('one')596	assert !session.out.contains('two')597	assert run(dir, 'view', '--since', '9999-01-01').out.contains('no saves in that range')598	write(dir, 'a.txt', 'three\n')599	d := run(dir, 'diff')600	assert d.code == 0601	assert d.out.contains('--- a/')602	assert d.out.contains('+++ b/')603	assert run(dir, 'diff', id1).code == 0604	assert run(dir, 'diff', id1, id2).code == 0605	dj := run(dir, 'diff', '--json')606	assert dj.code == 0607	assert dj.out.contains('"from"')608	assert dj.out.contains('"to"')609	assert dj.out.contains('"files"')610	assert dj.out.contains('"change":"modified"')611	assert run(dir, 'diff', 'not-a-real-id').code == 1612	assert run(dir, 'diff', id1, id2, 'third').code == 1613	write(dir, 'blob.bin', '\x00\x01\x02')614	diff_binary := run(dir, 'diff', '--json')615	assert diff_binary.out.contains('"binary":true')616	assert diff_binary.out.contains('Binary files differ')617}618619fn test_undo_revert_and_load() {620	dir := temp_repo('restore')621	defer { os.rmdir_all(dir) or {} }622	init_repo(dir)623	write(dir, 'a.txt', 'one\n')624	one := run(dir, 'save', 'one', '--json').out625	id1 := one.all_after('"id":"')[..12]626	write(dir, 'a.txt', 'two\n')627	write(dir, 'gone.txt', 'gone\n')628	second := run(dir, 'save', 'two', '--json').out629	id2 := second.all_after('"id":"')[..12]630	write(dir, 'a.txt', 'three\n')631	third := run(dir, 'save', 'three', '--json').out632	id3 := third.all_after('"id":"')[..12]633	// Unsaved work — here a file never saved — blocks every going-back but634	// revert, as in Koh 2: a restore must never overwrite what only the disk has.635	write(dir, 'never.txt', 'keep me\n')636	view_before := run(dir, 'view').out637	for args in [['undo', '--yes'], ['load', id1, '--yes'], ['pluck', id2, '--yes']] {638		blocked := run(dir, ...args)639		assert blocked.code == 1640		assert blocked.err.contains('unsaved changes')641	}642	assert run(dir, 'view').out == view_before643	os.rm(os.join_path(dir, 'never.txt')) or { panic(err) }644	write(dir, 'a.txt', 'edited, never saved\n')645	assert run(dir, 'undo', '--yes').err.contains('unsaved changes')646	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'edited, never saved\n'647	write(dir, 'a.txt', 'three\n')648	os.rm(os.join_path(dir, 'gone.txt')) or { panic(err) }649	assert run(dir, 'load', id1, '--yes').err.contains('unsaved changes')650	write(dir, 'gone.txt', 'gone\n')651	undo := run(dir, 'undo', '--yes', '--json')652	assert undo.code == 0653	if !undo.out.contains(id2) {654		panic('undo JSON did not name ${id2}: ${undo.out}')655	}656	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'657	assert os.exists(os.join_path(dir, 'gone.txt'))658	assert run(dir, 'load', id3, '--yes').code == 0659	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'three\n'660	assert run(dir, 'undo', '2', '--yes').code == 0661	assert run(dir, 'load', id2, '--yes').code == 0662	assert run(dir, 'undo', '99', '--yes').err.contains('nothing before')663	write(dir, 'a.txt', 'dirty\n')664	before := run(dir, 'view')665	refuse := run(dir, 'revert')666	assert refuse.code == 1667	assert refuse.err.contains('needs --yes when not interactive')668	assert run(dir, 'view').out == before.out669	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'dirty\n'670	write(dir, 'untracked.txt', 'remove\n')671	rv := run(dir, 'revert', '--yes', '--json')672	assert rv.code == 0673	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'674	assert !os.exists(os.join_path(dir, 'untracked.txt'))675	// The way back to the discarded work is named, not left to be found.676	kept := rv.out.all_after('"checkpoint":"')[..12]677	assert run(dir, 'load', kept, '--yes').code == 0678	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'dirty\n'679	assert os.read_file(os.join_path(dir, 'untracked.txt'))! == 'remove\n'680	write(dir, 'a.txt', 'dirty again\n')681	assert run(dir, 'revert', '--yes').out.contains('koh load ')682	assert run(dir, 'revert', '--yes').out.contains('working tree already matches')683	assert run(dir, 'load', '--checkpoint', '--yes').code == 0684	assert run(dir, 'load', id2, '--json').code == 1685	assert run(dir, 'load', id2, '--json').err.contains('error')686	assert run(dir, 'load').code == 2687	assert run(dir, 'load', 'unknown-id', '--yes').code == 1688}689690fn test_flag_and_flagged_view() {691	dir := temp_repo('flag')692	defer { os.rmdir_all(dir) or {} }693	init_repo(dir)694	write(dir, 'flag.txt', 'one\n')695	saved := run(dir, 'save', 'flag me', '--json')696	id := saved.out.all_after('"id":"')[..12]697	flagged := run(dir, 'flag', id, '--reason', 'unsafe', '--json')698	assert flagged.code == 0699	assert flagged.out.contains('"flagged":true')700	assert flagged.out.contains('"reason":"unsafe"')701	list := run(dir, 'flag', '--json')702	assert list.code == 0703	assert list.out.contains(id)704	assert list.out.contains('unsafe')705	assert run(dir, 'view').out.contains('⚑')706	assert run(dir, 'flag', '--clear', id).code == 0707	assert run(dir, 'flag').out.contains('nothing is flagged')708	assert run(dir, 'flag', 'unknown-id').code == 1709	assert run(dir, 'flag').code == 0710}711712fn test_pluck_forward_reverse_dry_run_and_conflict() {713	dir := temp_repo('pluck')714	defer { os.rmdir_all(dir) or {} }715	init_repo(dir)716	write(dir, 'a.txt', 'one\n')717	first := run(dir, 'save', 'one', '--json').out718	id1 := first.all_after('"id":"')[..12]719	write(dir, 'a.txt', 'two\n')720	second := run(dir, 'save', 'two', '--json').out721	id2 := second.all_after('"id":"')[..12]722	assert run(dir, 'load', id1, '--yes').code == 0723	dry := run(dir, 'pluck', id2, '--dry-run')724	assert dry.code == 0725	assert dry.out.contains('a.txt')726	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'727	assert run(dir, 'pluck', id2, '--yes').code == 0728	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'729	assert run(dir, 'pluck', '--reverse', id2, '--yes').code == 0730	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'731	write(dir, 'a.txt', 'different\n')732	assert run(dir, 'pluck', id2, '--dry-run').code == 1733	assert run(dir, 'save', 'different').code == 0734	conflict := run(dir, 'pluck', id2, '--yes')735	assert conflict.code == 1736	assert conflict.err.contains('a.txt')737	assert run(dir, 'pluck').code == 2738	assert run(dir, 'pluck', 'unknown-id').code == 1739}740741fn test_peek_and_doctor() {742	dir := temp_repo('peek-doctor')743	defer { os.rmdir_all(dir) or {} }744	init_repo(dir)745	write(dir, 'peek.txt', 'peek me\n')746	assert run(dir, 'save', 'peekable').code == 0747	id := run(dir, 'view', '--json').out.all_after('"id":"')[..12]748	before_view := run(dir, 'view', '--json').out749	peek := run(dir, 'peek', id, '--json')750	assert peek.code == 0751	peek_path := peek.out.all_after('"path":"').before('"')752	assert peek.out.contains('"id":"${id}"')753	assert os.read_file(os.join_path(peek_path, 'peek.txt'))! == 'peek me\n'754	assert run(dir, 'status').out.contains('no changes')755	assert run(dir, 'view', '--json').out == before_view756	assert run(dir, 'peek').code == 2757	assert run(dir, 'peek', 'unknown-id').code == 1758	backup := os.join_path(dir, 'doctor.backup')759	healthy := run(dir, 'doctor')760	assert healthy.code == 0761	assert healthy.out.contains('is sound')762	report := run(dir, 'doctor', '--json')763	assert report.code == 0764	for key in ['problems', 'objects', 'saves', 'checkpoints', 'cached_files', 'peek_folders_removed',765		'backup'] {766		read_json_has(report.out, key)767	}768	backed := run(dir, 'doctor', '--backup', backup)769	assert backed.code == 0770	assert os.exists(backup)771	assert backed.out.contains(backup)772	assert run(dir, 'doctor', '--backup', backup).code == 1773	assert run(dir, 'peek', id, '--json').code == 0774	// A peek made today is left for whoever is reading it.775	kept := run(dir, 'doctor', '--json')776	assert kept.code == 0777	assert os.exists(peek_path)778	os.rmdir_all(peek_path) or {}779}780781fn test_strip_refuses_without_terminal() {782	dir := temp_repo('strip')783	defer { os.rmdir_all(dir) or {} }784	init_repo(dir)785	write(dir, 'secret.txt', 'keep\n')786	assert run(dir, 'save', 'secret').code == 0787	before_view := run(dir, 'view', '--json').out788	refused := run(dir, 'strip', 'secret.txt')789	assert refused.code == 1790	assert refused.err.contains('needs a terminal')791	assert run(dir, 'view', '--json').out == before_view792	assert os.read_file(os.join_path(dir, 'secret.txt'))! == 'keep\n'793	assert run(dir, 'view', '--json').out.contains('secret')794}795796// `koh view` is the one way into the history: the whole line by default,797// checkpoints alone with the flag, and the two lists never overlap.798fn test_view_shows_the_line_and_checkpoints_apart() {799	dir := temp_repo('view')800	defer { os.rmdir_all(dir) or {} }801	init_repo(dir)802	write(dir, 'view.txt', 'one\n')803	assert run(dir, 'save', 'plain save').code == 0804	assert run(dir, 'checkpoint', 'checkpoint save').code == 0805	line := run(dir, 'view')806	assert line.code == 0807	assert line.out.contains('plain save')808	assert line.out.contains('checkpoint save')809	checkpoints := run(dir, 'view', '--checkpoints')810	assert checkpoints.code == 0811	assert checkpoints.out.contains('checkpoint save')812	assert !checkpoints.out.contains('plain save')813	json_line := run(dir, 'view', '--json')814	assert json_line.code == 0815	assert json_line.out.contains('"is_checkpoint":false')816	assert json_line.out.contains('"is_checkpoint":true')817	json_checkpoints := run(dir, 'view', '--checkpoints', '--json')818	assert json_checkpoints.code == 0819	assert json_checkpoints.out.contains('"is_checkpoint":true')820	assert !json_checkpoints.out.contains('"is_checkpoint":false')821	// `view` takes no arguments, so a stray one is a usage error, and the names822	// it replaced are gone rather than hidden: the diagnostic says which.823	assert run(dir, 'view', 'extra').code == 2824	for gone in ['log', 'saves', 'checkpoints'] {825		refused := run(dir, gone)826		assert refused.code == 2827		assert refused.err.contains('unknown command "${gone}"')828	}829	// Every save is on the whole line exactly once, as the JSON says.830	assert line.out.split_into_lines().len == json_line.out.count('"id":"')831}832833fn test_remote_configuration_is_isolated_and_atomic() {834	dir := temp_repo('remote')835	home := temp_repo('remote-home')836	defer {837		os.rmdir_all(dir) or {}838		os.rmdir_all(home) or {}839	}840	empty := run_home(dir, home, 'remote', '--json')841	assert empty.code == 0842	assert empty.out.contains('"configured":false')843	target := os.join_path(home, 'remote-store')844	set := run_home(dir, home, 'remote', 'folder', target)845	assert set.code == 0846	assert os.is_dir(target)847	state := run_home(dir, home, 'remote', '--json')848	assert state.code == 0849	assert state.out.contains('"kind":"folder"')850	assert state.out.contains(target)851	assert run_home(dir, home, 'remote', 's3', 'http://127.0.0.1:1', 'bucket', 'region').code == 1852	assert run_home(dir, home, 'remote', '--json').out.contains(target)853	assert run_home(dir, home, 'remote', 's3', 'http://127.0.0.1:1', 'bucket', 'region').err.contains('KOH_ACCESS_KEY')854	assert run_home(dir, home, 'remote', '--forget').code == 0855	assert run_home(dir, home, 'remote', '--json').out.contains('"configured":false')856}857858// The files under ~/.config/koh can be written by hand instead of by859// `koh remote`, and are then read the same way.860fn test_remote_written_by_hand() {861	dir := temp_repo('remote-by-hand')862	home := temp_repo('remote-by-hand-home')863	defer {864		os.rmdir_all(dir) or {}865		os.rmdir_all(home) or {}866	}867	config := os.join_path(home, '.config', 'koh')868	os.mkdir_all(config) or { panic(err) }869	target := os.join_path(home, 'remote-store')870	os.mkdir_all(target) or { panic(err) }871	os.write_file(os.join_path(config, 'remote'), 'kind = folder\npath = ${target}\n') or {872		panic(err)873	}874	assert run_home(dir, home, 'init').code == 0875	os.write_file(os.join_path(dir, 'a.txt'), 'a\n') or { panic(err) }876	assert run_home(dir, home, 'save', 'first').code == 0877	offered := run_home(dir, home, 'offer', '--json')878	assert offered.code == 0879	assert offered.out.contains('"head"')880881	// Keys anyone else can read are refused before they are ever sent.882	os.write_file(os.join_path(config, 'remote'), 'kind=s3\nendpoint=http://127.0.0.1:1\nbucket=b\nregion=r\n') or {883		panic(err)884	}885	credentials := os.join_path(config, 'credentials')886	os.write_file(credentials, 'access_key=AK\nsecret_key=SK\n') or { panic(err) }887	os.chmod(credentials, 0o644) or { panic(err) }888	loose := run_home(dir, home, 'offer')889	assert loose.code == 1890	assert loose.err.contains('chmod 600')891892	// A setting koh cannot read is replaced by setting the remote again.893	os.write_file(os.join_path(config, 'remote'), 'kind=ftp\n') or { panic(err) }894	unreadable := run_home(dir, home, 'offer')895	assert unreadable.code == 1896	assert unreadable.err.contains('not readable')897	assert run_home(dir, home, 'remote', 'folder', target).code == 0898	assert run_home(dir, home, 'offer').code == 0899}900901// A clone belongs to the repo it was stolen from, whatever its folder is902// called later: renaming it must not start a second repo on the remote.903fn test_a_renamed_clone_keeps_offering_to_its_repo() {904	syncroot := temp_repo('rename-clone')905	home := temp_repo('rename-clone-home')906	defer {907		os.rmdir_all(syncroot) or {}908		os.rmdir_all(home) or {}909	}910	remote := os.join_path(syncroot, 'remote')911	a := os.join_path(syncroot, 'A', 'proj')912	b_parent := os.join_path(syncroot, 'B')913	os.mkdir_all(a) or { panic(err) }914	os.mkdir_all(b_parent) or { panic(err) }915	init_repo(a)916	write(a, 'a.txt', 'from A\n')917	assert run_home(a, home, 'remote', 'folder', remote).code == 0918	assert run_home(a, home, 'save', 'A first').code == 0919	assert run_home(b_parent, home, 'steal', 'proj').code == 0920	renamed := os.join_path(b_parent, 'renamed')921	os.mv(os.join_path(b_parent, 'proj'), renamed) or { panic(err) }922	write(renamed, 'b.txt', 'from B\n')923	assert run_home(renamed, home, 'save', 'B first').code == 0924	assert !os.exists(os.join_path(remote, 'renamed'))925	assert run_home(a, home, 'steal').code == 0926	assert os.read_file(os.join_path(a, 'b.txt'))! == 'from B\n'927}928929// A damaged object on the remote stops a clone, names the object, and leaves930// no half-made folder that would make the retry refuse.931fn test_clone_of_a_damaged_remote_leaves_nothing() {932	syncroot := temp_repo('damaged')933	home := temp_repo('damaged-home')934	defer {935		os.rmdir_all(syncroot) or {}936		os.rmdir_all(home) or {}937	}938	remote := os.join_path(syncroot, 'remote')939	a := os.join_path(syncroot, 'A', 'proj')940	b_parent := os.join_path(syncroot, 'B')941	os.mkdir_all(a) or { panic(err) }942	os.mkdir_all(b_parent) or { panic(err) }943	init_repo(a)944	write(a, 'a.txt', 'from A\n')945	assert run_home(a, home, 'remote', 'folder', remote).code == 0946	assert run_home(a, home, 'save', 'A first').code == 0947	objects := os.join_path(remote, 'proj', 'objects')948	for name in os.ls(objects) or { panic(err) } {949		os.chmod(os.join_path(objects, name), 0o644) or {}950		os.write_file(os.join_path(objects, name), 'junk') or { panic(err) }951	}952	clone := run_home(b_parent, home, 'steal', 'proj')953	assert clone.code == 1954	assert clone.err.contains('is damaged')955	assert !os.exists(os.join_path(b_parent, 'proj'))956}957958fn test_offer_steal_folder_remote() {959	syncroot := temp_repo('sync')960	home := temp_repo('sync-home')961	defer {962		os.rmdir_all(syncroot) or {}963		os.rmdir_all(home) or {}964	}965	remote := os.join_path(syncroot, 'remote')966	a := os.join_path(syncroot, 'A', 'proj')967	b_parent := os.join_path(syncroot, 'B')968	os.mkdir_all(a) or { panic(err) }969	os.mkdir_all(b_parent) or { panic(err) }970	init_repo(a)971	write(a, 'a.txt', 'from A\n')972	assert run_home(a, home, 'remote', 'folder', remote).code == 0973	assert run_home(a, home, 'save', 'A first').code == 0974	clone := run_home(b_parent, home, 'steal', 'proj')975	assert clone.code == 0976	b := os.join_path(b_parent, 'proj')977	assert os.read_file(os.join_path(b, 'a.txt'))! == 'from A\n'978	write(b, 'b.txt', 'from B\n')979	assert run_home(b, home, 'save', 'B first').code == 0980	write(a, 'a2.txt', 'second\n')981	assert run_home(a, home, 'save', 'A second').code == 0982	assert run_home(a, home, 'steal').code == 0983	assert os.exists(os.join_path(a, 'b.txt'))984	assert run_home(b_parent, home, 'steal', '--list').out.contains('proj')985	write(a, 'clash.txt', 'base\n')986	assert run_home(a, home, 'save', 'clash base').code == 0987	assert run_home(b, home, 'steal').code == 0988	write(a, 'clash.txt', 'A version\n')989	assert run_home(a, home, 'save', 'A clash').code == 0990	write(b, 'clash.txt', 'B version\n')991	assert run_home(b, home, 'save', 'B clash').code == 0992	refused := run_home(b, home, 'steal')993	assert refused.code == 1994	assert refused.err.contains('--mine') || refused.err.contains('--theirs')995	b_head := run_home(b, home, 'status', '--json').out.all_after('"head_id":"')[..12]996	theirs := run_home(b, home, 'steal', '--theirs', '--json')997	assert theirs.code == 0998	// The pre-combine tree is off the line now; the way back must be named,999	// or an agent without the history view cannot find it.1000	assert theirs.out.contains('"previous_head":"${b_head}"')1001	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'A version\n'1002	assert run_home(b, home, 'load', b_head, '--yes').code == 01003	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'B version\n'1004	assert run_home(b, home, 'load', theirs.out.all_after('"head":"')[..12], '--yes').code == 01005	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'A version\n'1006	write(a, 'clash.txt', 'A second\n')1007	assert run_home(a, home, 'save', 'A second clash').code == 01008	write(b, 'clash.txt', 'B second\n')1009	assert run_home(b, home, 'save', 'B second clash').code == 01010	assert run_home(b, home, 'steal', '--mine').code == 01011	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'B second\n'1012	assert run_home(b, home, 'view').out.contains('combine: kept mine for')1013}10141015// A clone brings in the whole history, flags included; both output forms must1016// say which saves came in flagged, and why.1017fn test_a_clone_reports_flagged_saves() {1018	syncroot := temp_repo('clone-flags')1019	home := temp_repo('clone-flags-home')1020	defer {1021		os.rmdir_all(syncroot) or {}1022		os.rmdir_all(home) or {}1023	}1024	a := os.join_path(syncroot, 'A', 'proj')1025	os.mkdir_all(a) or { panic(err) }1026	init_repo(a)1027	assert run_home(a, home, 'remote', 'folder', os.join_path(syncroot, 'remote')).code == 01028	write(a, 'a.txt', 'one\n')1029	id := run_home(a, home, 'save', 'risky', '--json').out.all_after('"id":"')[..12]1030	assert run_home(a, home, 'flag', id, '--reason', 'broke the build').code == 01031	assert run_home(a, home, 'offer').code == 01032	for name in ['B', 'C'] {1033		os.mkdir_all(os.join_path(syncroot, name)) or { panic(err) }1034	}1035	json_clone := run_home(os.join_path(syncroot, 'B'), home, 'steal', 'proj', '--json')1036	assert json_clone.code == 01037	assert json_clone.out.contains('"flagged":["${id}"]')1038	text_clone := run_home(os.join_path(syncroot, 'C'), home, 'steal', 'proj')1039	assert text_clone.code == 01040	assert text_clone.out.contains('[${id}] came in flagged — broke the build')1041}10421043// A folder remote on a disk or share that is not mounted is simply not there.1044// Creating it would put the saves in a stand-in folder the other machine never1045// sees; the offer must say what is wrong instead.1046fn test_an_unmounted_folder_remote_is_not_recreated() {1047	syncroot := temp_repo('unmounted')1048	home := temp_repo('unmounted-home')1049	defer {1050		os.rmdir_all(syncroot) or {}1051		os.rmdir_all(home) or {}1052	}1053	mount := os.join_path(syncroot, 'nas')1054	remote := os.join_path(mount, 'koh')1055	a := os.join_path(syncroot, 'proj')1056	os.mkdir_all(a) or { panic(err) }1057	init_repo(a)1058	assert run_home(a, home, 'remote', 'folder', remote).code == 01059	write(a, 'a.txt', 'one\n')1060	assert run_home(a, home, 'save', 'first').code == 01061	os.rename(mount, os.join_path(syncroot, 'nas-unplugged')) or { panic(err) }1062	os.mkdir(mount) or { panic(err) }1063	offered := run_home(a, home, 'offer')1064	assert offered.code == 11065	assert offered.err.contains('mounted')1066	assert !os.exists(remote)1067	write(a, 'a.txt', 'two\n')1068	saved := run_home(a, home, 'save', 'second')1069	assert saved.code == 01070	assert saved.out.contains('mounted')1071	assert !os.exists(remote)1072}10731074fn test_man_and_koh2_handoff() {1075	dir := temp_repo('man')1076	home := temp_repo('man-home')1077	defer {1078		os.rmdir_all(dir) or {}1079		os.rmdir_all(home) or {}1080	}1081	whole := run_home(dir, home, 'man')1082	assert whole.code == 01083	assert whole.out.contains('NAME')1084	assert whole.out.contains('COMMANDS')1085	assert !whole.out.contains('\x1b') && !whole.out.contains('◆')1086	strip := run_home(dir, home, 'man', 'strip')1087	assert strip.code == 01088	assert strip.out.contains('strip')1089	assert !strip.out.contains('koh save ')1090	steal := run_home(dir, home, 'man', 'steal').out1091	assert steal.starts_with('    koh steal') && steal.contains('koh steal my-project')1092	assert run_home(dir, home, 'man', 'init').out.trim_space() == "koh init\n        Create `.koh` here, and a starter `.kohignore` if there isn't one."1093	assert run_home(dir, home, 'man', 'nonsense').code == 21094	legacy := temp_repo('legacy')1095	defer { os.rmdir_all(legacy) or {} }1096	os.mkdir_all(os.join_path(legacy, '.koh')) or { panic(err) }1097	fake := os.join_path(home, 'bin')1098	os.mkdir_all(fake) or { panic(err) }1099	fake_koh := os.join_path(fake, 'koh2')1100	os.write_file(fake_koh, '#!/bin/sh\nprintf "handoff:%s\\n" "$*"\nexit 7\n') or { panic(err) }1101	os.chmod(fake_koh, 0o755) or { panic(err) }1102	handoff := run_home_with_path(legacy, home, fake, 'status', '--json')1103	assert handoff.code == 71104	assert handoff.out.contains('handoff:status --json')1105	// One notice line, on stderr, so koh2's own output stays as it was.1106	assert handoff.err.contains('Koh 2 repo')1107	assert handoff.err.trim_space().split_into_lines().len == 11108	assert handoff.out.trim_space() == 'handoff:status --json'1109}11101111fn run_home_with_path(repo string, home string, bin_dir string, args ...string) Result {1112	stamp := '${os.getpid()}-${time.now().unix_nano()}'1113	base := os.join_path(os.temp_dir(), 'koh3-cli-${stamp}')1114	out_path := '${base}.out'1115	err_path := '${base}.err'1116	code_path := '${base}.code'1117	mut command := 'HOME=${q(home)} PATH=${q(bin_dir + ':' + os.getenv('PATH'))} ${q(binary)}'1118	for arg in args {1119		command += ' ${q(arg)}'1120	}1121	shell := 'cd ${q(repo)} && ${command} </dev/null >${q(out_path)} 2>${q(err_path)}; printf "%s" \$? >${q(code_path)}'1122	result := os.execute(shell)1123	if result.exit_code != 0 {1124		panic('could not run test command: ${result.output}')1125	}1126	code := os.read_file(code_path) or { panic(err) }1127	out := os.read_file(out_path) or { '' }1128	err := os.read_file(err_path) or { '' }1129	os.rm(out_path) or {}1130	os.rm(err_path) or {}1131	os.rm(code_path) or {}1132	return Result{1133		code: code.int()1134		out:  out1135		err:  err1136	}1137}11381139// --- migration -------------------------------------------------------------11401141fn koh2_binary() string {1142	return os.find_abs_path_of_executable('koh') or { '' }1143}11441145// run_koh2 runs the Koh 2 binary in a fixture; its own output is not under1146// test here.1147fn run_koh2(dir string, command string) {1148	os.execute('cd ${q(dir)} && ${command} >/dev/null 2>&1')1149}11501151fn save_ids(dir string) []string {1152	mut ids := []string{}1153	for name in os.ls(os.join_path(dir, '.koh', 'snapshots')) or { []string{} } {1154		if name.ends_with('.json') {1155			ids << name.trim_right('.json')1156		}1157	}1158	ids.sort()1159	return ids1160}11611162fn test_migrate_converts_a_koh2_repo_and_keeps_every_save() {1163	koh2 := koh2_binary()1164	if koh2 == '' {1165		println('skipping the migration tests: koh (Koh 2) is not on PATH')1166		return1167	}1168	dir := temp_repo('migrate')1169	defer { os.rmdir_all(dir) or {} }1170	home := temp_repo('migrate-home')1171	defer { os.rmdir_all(home) or {} }1172	run_koh2(dir, '${q(koh2)} init')1173	// One file large enough to be an object, one small enough to be inlined.1174	write(dir, 'code.txt', 'x'.repeat(700))1175	write(dir, 'tiny.txt', 'tiny\n')1176	run_koh2(dir, '${q(koh2)} save "first save"')1177	run_koh2(dir, '${q(koh2)} checkpoint "before something"')1178	write(dir, 'code.txt', 'y'.repeat(700))1179	run_koh2(dir, '${q(koh2)} save "second save"')1180	original := save_ids(dir)1181	assert original.len == 311821183	report := run_home(dir, home, 'migrate')1184	assert report.code == 01185	assert report.out.contains('migrated 3 saves')1186	// The swap: `.koh` is a file, the old data is archived, nothing is staging.1187	assert os.is_file(os.join_path(dir, '.koh'))1188	assert os.is_dir(os.join_path(dir, '.koh-v2'))1189	assert os.is_file(os.join_path(dir, '.kohignore'))1190	assert !os.exists(os.join_path(dir, '.koh-migrate'))11911192	// Every save kept its original ID, and the new repo is sound.1193	listed := run_home(dir, home, 'view', '--json')1194	assert listed.code == 01195	for id in original {1196		assert listed.out.contains(id)1197	}1198	assert run_home(dir, home, 'doctor').code == 01199	assert run_home(dir, home, 'status').code == 012001201	// Migrating again has nothing to convert.1202	assert run_home(dir, home, 'migrate').code == 11203}12041205fn test_migrate_refuses_a_tree_that_does_not_match_the_last_save() {1206	koh2 := koh2_binary()1207	if koh2 == '' {1208		return1209	}1210	dir := temp_repo('migrate-dirty')1211	defer { os.rmdir_all(dir) or {} }1212	home := temp_repo('migrate-dirty-home')1213	defer { os.rmdir_all(home) or {} }1214	run_koh2(dir, '${q(koh2)} init')1215	write(dir, 'code.txt', 'x'.repeat(700))1216	run_koh2(dir, '${q(koh2)} save "only save"')1217	write(dir, 'code.txt', 'unsaved change\n')12181219	refused := run_home(dir, home, 'migrate')1220	assert refused.code == 11221	assert refused.err.contains('save with koh2 first')1222	// Nothing moved: still Koh 2, no archive, no staging file.1223	assert os.is_dir(os.join_path(dir, '.koh'))1224	assert !os.exists(os.join_path(dir, '.koh-v2'))1225	assert !os.exists(os.join_path(dir, '.koh-migrate'))1226}12271228// Koh 2 never saved a root `.kohconfig`, root `.kohignore.<remote>` rules or1229// `*.bundle` files, so a clean Koh 2 repo may hold them. Most real repos have1230// a `.kohconfig`; migrate must not call them unsaved work.1231fn test_migrate_passes_over_the_files_koh2_never_saved() {1232	koh2 := koh2_binary()1233	if koh2 == '' {1234		return1235	}1236	dir := temp_repo('migrate-koh2-ignores')1237	defer { os.rmdir_all(dir) or {} }1238	home := temp_repo('migrate-koh2-ignores-home')1239	defer { os.rmdir_all(home) or {} }1240	run_koh2(dir, '${q(koh2)} init')1241	write(dir, 'code.txt', 'x'.repeat(700))1242	run_koh2(dir, '${q(koh2)} save "only save"')1243	write(dir, '.kohconfig', 'stable_days = 14\n')1244	write(dir, '.kohignore.public', 'private/\n')1245	write(dir, 'lib/app.bundle', 'bundle\n')1246	write(dir, 'ios/Settings.bundle/Root.plist', 'settings\n')1247	// Koh 2 keeps saving a file under a folder pattern added later, where1248	// Koh 3 reads the same rule as covering the folder: the saved file is on1249	// disk and matches, so the tree is clean.1250	write(dir, 'native/t.dSYM/Info.plist', 'plist\n')1251	run_koh2(dir, '${q(koh2)} save --agent test --session test "add the dsym"')1252	// Koh 2 skips *.bundle even when its rules no longer list it.1253	ignore_path := os.join_path(dir, '.koh', 'ignore')1254	rules := os.read_file(ignore_path)!.split_into_lines().filter(it != '*.bundle')1255	os.write_file(ignore_path, rules.join('\n') + '\nnative/*.dSYM\n')!1256	// A saved file the walk skips still has to match what was saved.1257	write(dir, 'native/t.dSYM/Info.plist', 'changed\n')1258	changed := run_home(dir, home, 'migrate')1259	assert changed.code == 11260	assert changed.err.contains('native/t.dSYM/Info.plist does not match')1261	write(dir, 'native/t.dSYM/Info.plist', 'plist\n')1262	assert os.execute('cd ${q(dir)} && ${q(koh2)} status --json').output.contains('"dirty":false')12631264	migrated := run_home(dir, home, 'migrate')1265	assert migrated.code == 0, migrated.err1266	// They stay where they were, for the user to keep or delete.1267	assert os.read_file(os.join_path(dir, '.kohconfig'))! == 'stable_days = 14\n'1268}