cli_test.v

1module tests23import os4import time56const root = @VMODROOT7const binary = os.join_path(root, 'build', 'koh3')89struct Result {10mut:11	code int12	out  string13	err  string14}1516fn testsuite_begin() {17	os.mkdir_all(os.join_path(root, 'build')) or { panic(err) }18	build := os.execute('v -o ${q(binary)} ${q(os.join_path(root, 'src', 'koh3.v'))}')19	if build.exit_code != 0 {20		panic('could not build koh3: ${build.output}')21	}22}2324fn q(s string) string {25	return "'${s.replace("'", "'\\''")}'"26}2728fn temp_repo(name string) string {29	dir := os.join_path(os.temp_dir(), 'koh3-cli-${name}-${time.now().unix_nano()}')30	os.mkdir_all(dir) or { panic(err) }31	return dir32}3334fn run(repo string, args ...string) Result {35	home := temp_repo('home')36	defer { os.rmdir_all(home) or {} }37	return run_home(repo, home, ...args)38}3940fn run_home(repo string, home string, args ...string) Result {41	stamp := '${os.getpid()}-${time.now().unix_nano()}'42	base := os.join_path(os.temp_dir(), 'koh3-cli-${stamp}')43	out_path := '${base}.out'44	err_path := '${base}.err'45	code_path := '${base}.code'46	mut command := 'HOME=${q(home)} ${q(binary)}'47	for arg in args {48		command += ' ${q(arg)}'49	}50	shell := 'cd ${q(repo)} && ${command} </dev/null >${q(out_path)} 2>${q(err_path)}; printf "%s" \$? >${q(code_path)}'51	result := os.execute(shell)52	if result.exit_code != 0 {53		panic('could not run test command: ${result.output}')54	}55	code := os.read_file(code_path) or { panic(err) }56	out := os.read_file(out_path) or { '' }57	err := os.read_file(err_path) or { '' }58	os.rm(out_path) or {}59	os.rm(err_path) or {}60	os.rm(code_path) or {}61	return Result{62		code: code.int()63		out:  out64		err:  err65	}66}6768fn init_repo(repo string) {69	r := run(repo, 'init')70	assert r.code == 071	assert os.exists(os.join_path(repo, '.koh'))72	assert os.exists(os.join_path(repo, '.kohignore'))73}7475fn write(repo string, path string, text string) {76	full := os.join_path(repo, path)77	os.mkdir_all(os.dir(full)) or { panic(err) }78	os.write_file(full, text) or { panic(err) }79}8081fn read_json_has(text string, key string) {82	if !text.contains(key) {83		panic('missing JSON key ${key}: ${text}')84	}85}8687fn test_init_and_usage() {88	dir := temp_repo('init')89	defer { os.rmdir_all(dir) or {} }90	r := run(dir, 'init', '--json')91	assert r.code == 092	read_json_has(r.out, 'repo')93	read_json_has(r.out, 'ignore_created')94	assert run(dir, 'init').code == 195	assert run(dir, 'unknown-command').code == 296	assert run(dir, 'unknown-command').err.contains('unknown command')97	// An agent asking for JSON gets JSON for a usage mistake too, exit 2.98	for args in [['unknown-command', '--json'], ['save', '--json'], ['save', 'x', '--nope', '--json']] {99		r2 := run(dir, ...args)100		assert r2.code == 2101		assert r2.out == ''102		assert r2.err.starts_with('{"error":'), r2.err103	}104}105106// The help screen is commands and plain words: every flag lives in `koh man`.107// this_platform is the platform name for the machine the tests run on, so a108// build test does not depend on which machine that is.109fn this_platform() string {110	machine := os.uname().machine111	arch := if machine in ['arm64', 'aarch64'] { 'aarch64' } else { 'x86_64' }112	return '${os.user_os()}-${arch}'113}114115// `koh build` builds with `koh.build`: the version and platform fill the output116// path, and each artifact is printed with its size.117fn test_build_builds_the_named_platforms() {118	dir := temp_repo('build_ok')119	defer { os.rmdir_all(dir) or {} }120	init_repo(dir)121	host := this_platform()122	write(dir, 'VERSION', '1.2.3\n')123	write(dir, 'koh.build', 'command = mkdir -p out && printf built > out/demo-1.2.3-${host}124output = out/demo-{version}-{platform}125platforms = ${host}126')127	one := run(dir, 'build')128	assert one.code == 0, one.err129	assert one.out.contains('version 1.2.3')130	assert one.out.contains('out/demo-1.2.3-${host}')131	assert os.exists(os.join_path(dir, 'out/demo-1.2.3-${host}'))132133	// --platform picks one, --all takes every platform the file names.134	write(dir, 'koh.build', 'command = mkdir -p out && printf m > out/demo-macos-aarch64 && printf l > out/demo-linux-aarch64135output = out/demo-{platform}136platforms = macos-aarch64, linux-aarch64137')138	all := run(dir, 'build', '--all', '--json')139	assert all.code == 0, all.err140	assert all.out.contains('"platform":"macos-aarch64"')141	assert all.out.contains('"platform":"linux-aarch64"')142	assert os.exists(os.join_path(dir, 'out/demo-linux-aarch64'))143	picked := run(dir, 'build', '--platform', 'linux-aarch64')144	assert picked.code == 0, picked.err145	assert picked.out.contains('out/demo-linux-aarch64')146	assert !picked.out.contains('out/demo-macos-aarch64')147}148149fn test_build_refuses_what_it_cannot_do() {150	dir := temp_repo('build_bad')151	defer { os.rmdir_all(dir) or {} }152	init_repo(dir)153	missing := run(dir, 'build')154	assert missing.code == 1155	assert missing.err.contains('koh.build')156157	write(dir, 'koh.build', 'command = true158output = out/demo159platforms = macos-aarch64160')161	no_version := run(dir, 'build')162	assert no_version.code == 1163	assert no_version.err.contains('VERSION')164165	write(dir, 'VERSION', '1.2.3\n')166	not_listed := run(dir, 'build', '--platform', 'linux-aarch64')167	assert not_listed.code == 1168	assert not_listed.err.contains('does not build for')169170	unknown := run(dir, 'build', '--platform', 'amiga')171	assert unknown.code == 1172	assert unknown.err.contains('amiga')173174	both := run(dir, 'build', '--all', '--platform', 'macos-aarch64')175	assert both.code == 2176	assert both.err.contains('cannot be combined')177178	write(dir, 'koh.build', 'command = true179output = out/demo180platforms = macos-aarch64, amiga181')182	bad_platform := run(dir, 'build')183	assert bad_platform.code == 1184	assert bad_platform.err.contains('amiga')185186	write(dir, 'koh.build', 'command = sh -c \'echo "no toolchain" >&2; exit 1\'187output = out/demo188platforms = ${this_platform()}189')190	failed := run(dir, 'build')191	assert failed.code == 1192	assert failed.err.contains('no toolchain')193}194195fn test_the_help_screen_lists_commands_and_no_flags() {196	dir := temp_repo('help')197	defer { os.rmdir_all(dir) or {} }198	help := run(dir, '--help')199	assert help.code == 0200	for name in ['save', 'checkpoint', 'status', 'log', 'diff', 'undo', 'revert', 'load', 'offer',201		'steal'] {202		assert help.out.contains('  ${name} '), name203	}204	assert help.out.contains('koh man <command>')205	// No flag text anywhere on the screen.206	assert !help.out.contains('--'), help.out207	for line in help.out.split_into_lines() {208		assert line.runes().len <= 80, line209	}210	// A bare `koh` keeps its stream and exit code; `-h` shows the same screen.211	bare := run(dir)212	assert bare.code == 2213	assert bare.out == ''214	assert bare.err.contains('koh man <command>')215	short := run(dir, '-h')216	assert short.code == 0217	assert short.out == help.out218}219220// Colour on the screen follows NO_COLOR, as it does everywhere else.221fn test_the_help_screen_has_no_colour_when_it_is_off() {222	dir := temp_repo('help_plain')223	defer { os.rmdir_all(dir) or {} }224	home := temp_repo('help_plain_home')225	defer { os.rmdir_all(home) or {} }226	out_path := os.join_path(os.temp_dir(), 'koh3-help-${os.getpid()}-${time.now().unix_nano()}')227	defer { os.rm(out_path) or {} }228	code := os.system('cd ${q(dir)} && HOME=${q(home)} NO_COLOR=1 ${q(binary)} --help > ${q(out_path)}')229	assert code == 0230	text := os.read_file(out_path) or { panic(err) }231	assert !text.contains('\x1b'), text232	assert text.contains('  save        snapshot your work')233}234235// The binary embeds VERSION while saves bump v.mod; they drifted once.236fn test_version_matches_the_manifest() {237	dir := temp_repo('version')238	defer { os.rmdir_all(dir) or {} }239	version := run(dir, '--version').out.trim_space().all_after('koh ')240	manifest := os.read_file(os.join_path(root, 'v.mod')) or { panic(err) }241	assert manifest.contains("version: '${version}'"), version242}243244fn test_save_checkpoint_and_status() {245	dir := temp_repo('save')246	defer { os.rmdir_all(dir) or {} }247	init_repo(dir)248	write(dir, 'tracked.txt', 'one\n')249	r := run(dir, 'save', 'first message', '--agent', 'agent-7', '--session', 'session-a', '--json')250	assert r.code == 0251	for key in ['id', 'parent', 'message', 'created_at', 'machine', 'is_checkpoint', 'agent', 'session',252		'files', 'size_bytes'] {253		read_json_has(r.out, key)254	}255	assert r.out.contains('"message":"first message"')256	assert r.out.contains('"agent":"agent-7"')257	assert r.out.contains('"session":"session-a"')258	assert r.out.contains('"is_checkpoint":false')259	assert run(dir, 'save', 'again').code == 1260	assert run(dir, 'save', 'again').err.contains('nothing has changed since the last save')261	assert run(dir, 'save').code == 2262	assert run(dir, 'save', 'x', '--bogus').code == 2263	cp := run(dir, 'checkpoint', 'still first', '--json')264	assert cp.code == 0265	assert cp.out.contains('"is_checkpoint":true')266	assert cp.out.contains('"parent":')267	clean := run(dir, 'status')268	assert clean.code == 0269	assert clean.out.contains('no changes')270	write(dir, 'tracked.txt', 'two\n')271	write(dir, 'new.txt', 'new\n')272	os.rm(os.join_path(dir, 'tracked.txt')) or { panic(err) }273	write(dir, '.kohignore', '*.log\n')274	status := run(dir, 'status')275	assert status.code == 0276	assert status.out.contains('+')277	assert status.out.contains('~') || status.out.contains('-')278	assert status.out.contains('added')279	js := run(dir, 'status', '--json')280	assert js.code == 0281	for key in ['head_id', 'head_msg', 'dirty', 'modified', 'added', 'deleted', 'ignore_changed',282		'saves', 'size_bytes', 'head_flagged'] {283		read_json_has(js.out, key)284	}285	assert js.out.contains('"ignore_changed":true')286	// What the shell prompt shows: saves on the line, the .koh size, the flag.287	assert js.out.contains('"saves":2')288	assert js.out.contains('"size_bytes":${os.file_size(os.join_path(dir, '.koh'))}')289	assert js.out.contains('"head_flagged":false')290	head := js.out.all_after('"head_id":"').all_before('"')291	assert run(dir, 'flag', head, '--reason', 'bad').code == 0292	assert run(dir, 'status', '--json').out.contains('"head_flagged":true')293}294295fn test_status_requires_repo_and_ignore_rules() {296	dir := temp_repo('status')297	defer { os.rmdir_all(dir) or {} }298	assert run(dir, 'status').code == 1299	init_repo(dir)300	write(dir, '.kohignore', '*.log\nbuild/\n')301	write(dir, 'keep.txt', 'keep\n')302	write(dir, 'ignored.log', 'ignore\n')303	write(dir, 'build/output.txt', 'ignore\n')304	assert run(dir, 'save', 'keep').code == 0305	assert run(dir, 'status').out.contains('no changes')306	assert !run(dir, 'status').out.contains('ignored.log')307	assert !run(dir, 'status').out.contains('build/output.txt')308	assert !run(dir, 'status').out.contains('LOG.md')309}310311// LOG.md is a convenience written after the save commits. If it cannot be312// written, the save still happened, and an agent that retried on a failure313// would only be told nothing had changed.314fn test_a_save_succeeds_when_log_md_cannot_be_written() {315	dir := temp_repo('logmd')316	defer { os.rmdir_all(dir) or {} }317	init_repo(dir)318	os.mkdir_all(os.join_path(dir, 'LOG.md')) or { panic(err) }319	write(dir, 'a.txt', 'one\n')320	r := run(dir, 'save', 'first', '--json')321	assert r.code == 0322	assert r.out.starts_with('{')323	assert r.err.contains('LOG.md')324	assert run(dir, 'log', '--json').out.contains('"message":"first"')325}326327// A folder of ignored files can sit where a restored file should go. Koh328// never touches ignored files, so the restore must stop and say so, not drop329// the file inside the folder under a temporary name.330fn test_a_restore_refuses_a_folder_of_ignored_files_in_the_way() {331	dir := temp_repo('dir-in-way')332	defer { os.rmdir_all(dir) or {} }333	init_repo(dir)334	write(dir, 'out', 'a file\n')335	first := run(dir, 'save', 'out is a file', '--json').out.all_after('"id":"')[..12]336	os.rm(os.join_path(dir, 'out')) or { panic(err) }337	write(dir, 'out/build.log', 'ignored\n')338	assert run(dir, 'save', 'out is gone').code == 0339	r := run(dir, 'load', first, '--yes')340	assert r.code == 1341	assert r.err.contains('out')342	assert os.ls(os.join_path(dir, 'out'))! == ['build.log']343}344345// Koh never follows a symlink, so a folder replaced by a link to somewhere346// else is not the repo's to write into: restoring through it would overwrite347// files outside the repo. The refusal comes before anything is recorded.348fn test_a_restore_never_writes_through_a_symlinked_folder() {349	dir := temp_repo('link-in-way')350	outside := temp_repo('link-target')351	defer {352		os.rmdir_all(dir) or {}353		os.rmdir_all(outside) or {}354	}355	init_repo(dir)356	write(dir, 'docs/a.md', 'saved\n')357	first := run(dir, 'save', 'docs', '--json').out.all_after('"id":"')[..12]358	os.rmdir_all(os.join_path(dir, 'docs')) or { panic(err) }359	write(outside, 'a.md', 'precious\n')360	os.symlink(outside, os.join_path(dir, 'docs')) or { panic(err) }361	assert run(dir, 'save', 'docs is a link now').code == 0362	head := run(dir, 'status', '--json').out363	r := run(dir, 'load', first, '--yes')364	assert r.code == 1365	assert r.err.contains('docs')366	assert os.read_file(os.join_path(outside, 'a.md'))! == 'precious\n'367	assert run(dir, 'status', '--json').out == head368}369370// A restore records its save first, then writes files. When the writing stops371// part way, the half-written tree is not somebody's work: saving it would372// record (and offer) a tree that undoes changes nobody asked to undo. Every373// command that would build on it points at revert, which finishes the job.374fn test_a_restore_cut_short_points_at_revert() {375	dir := temp_repo('cut-short')376	defer {377		os.chmod(os.join_path(dir, 'zz'), 0o755) or {}378		os.rmdir_all(dir) or {}379	}380	init_repo(dir)381	write(dir, 'zero', '0\n')382	assert run(dir, 'save', 'zero').code == 0383	write(dir, 'a.txt', 'v1\n')384	write(dir, 'zz/f', 'v1\n')385	assert run(dir, 'save', 'first').code == 0386	write(dir, 'a.txt', 'v2\n')387	write(dir, 'zz/f', 'v2\n')388	assert run(dir, 'save', 'second').code == 0389	// a.txt is written, then the read-only folder stops the restore: the390	// tree is genuinely half one save and half the other.391	os.chmod(os.join_path(dir, 'zz'), 0o555)!392	stopped := run(dir, 'undo', '--yes')393	assert stopped.code == 1394	assert stopped.err.contains('koh revert')395	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'v1\n'396	assert os.read_file(os.join_path(dir, 'zz/f'))! == 'v2\n'397	// Even a status that cannot read the tree says what happened.398	os.chmod(os.join_path(dir, 'zz'), 0o000)!399	assert run(dir, 'status').err.contains('koh revert')400	os.chmod(os.join_path(dir, 'zz'), 0o755)!401402	assert run(dir, 'status', '--json').out.contains('"restore_unfinished":true')403	for args in [['save', 'half'], ['checkpoint', 'half'], ['undo', '--yes']] {404		r := run(dir, ...args)405		assert r.code == 1406		assert r.err.contains('koh revert')407	}408	assert run(dir, 'revert', '--yes').code == 0409	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'v1\n'410	assert os.read_file(os.join_path(dir, 'zz/f'))! == 'v1\n'411	assert run(dir, 'status', '--json').out.contains('"restore_unfinished":false')412	write(dir, 'a.txt', 'v3\n')413	assert run(dir, 'save', 'carry on').code == 0414}415416// Doctor clears peek folders left from earlier days, never one somebody may417// be reading right now.418fn test_doctor_sweeps_only_old_peek_folders() {419	dir := temp_repo('peek-sweep')420	// V's temp_dir is /tmp on macOS whatever TMPDIR says, so these live in421	// the real temp directory under names no save could have.422	fresh := os.join_path(os.temp_dir(), 'koh-peek-fresh${os.getpid()}')423	old := os.join_path(os.temp_dir(), 'koh-peek-old${os.getpid()}')424	defer {425		os.rmdir_all(dir) or {}426		os.rmdir_all(fresh) or {}427		os.rmdir_all(old) or {}428	}429	init_repo(dir)430	write(dir, 'a.txt', 'one\n')431	assert run(dir, 'save', 'one').code == 0432	os.mkdir_all(fresh) or { panic(err) }433	os.mkdir_all(old) or { panic(err) }434	two_days_ago := time.now().unix() - 2 * 86400435	os.utime(old, two_days_ago, two_days_ago) or { panic(err) }436	assert run(dir, 'doctor', '--json').code == 0437	assert os.exists(fresh)438	assert !os.exists(old)439}440441// A file saved long ago and ignored since holds work no save has. Loading the442// old save must not write over it; the document says a restore never touches443// ignored files.444fn test_a_restore_never_overwrites_an_ignored_file() {445	dir := temp_repo('ignored-restore')446	defer { os.rmdir_all(dir) or {} }447	init_repo(dir)448	write(dir, '.env', 'KEY=saved long ago\n')449	first := run(dir, 'save', 'with env', '--json').out.all_after('"id":"')[..12]450	write(dir, '.kohignore', '.env\n')451	assert run(dir, 'save', 'ignore env').code == 0452	write(dir, '.env', 'KEY=never saved\n')453	assert run(dir, 'load', first, '--yes').code == 0454	assert os.read_file(os.join_path(dir, '.env'))! == 'KEY=never saved\n'455456	// Where the ignored file is missing, the restore still brings it back.457	other := temp_repo('ignored-restore-missing')458	defer { os.rmdir_all(other) or {} }459	init_repo(other)460	write(other, '.env', 'KEY=saved long ago\n')461	again := run(other, 'save', 'with env', '--json').out.all_after('"id":"')[..12]462	write(other, '.kohignore', '.env\n')463	assert run(other, 'save', 'ignore env').code == 0464	os.rm(os.join_path(other, '.env')) or { panic(err) }465	assert run(other, 'load', again, '--yes').code == 0466	assert os.read_file(os.join_path(other, '.env'))! == 'KEY=saved long ago\n'467}468469// A going-back preview lists paths only. Running diff(1) per file to draw it470// cost 27 s for 5,000 changed files, so it must not run diff at all.471fn test_a_going_back_preview_does_not_run_diff() {472	dir := temp_repo('preview-nodiff')473	home := temp_repo('preview-nodiff-home')474	defer {475		os.rmdir_all(dir) or {}476		os.rmdir_all(home) or {}477	}478	init_repo(dir)479	write(dir, 'a.txt', 'one\n')480	assert run_home(dir, home, 'save', 'one').code == 0481	write(dir, 'a.txt', 'two\n')482	assert run_home(dir, home, 'save', 'two').code == 0483	fake := os.join_path(home, 'bin')484	os.mkdir_all(fake) or { panic(err) }485	marker := os.join_path(home, 'diff-ran')486	os.write_file(os.join_path(fake, 'diff'), '#!/bin/sh\ntouch ${q(marker)}\nexit 2\n') or {487		panic(err)488	}489	os.chmod(os.join_path(fake, 'diff'), 0o755) or { panic(err) }490	assert run_home_with_path(dir, home, fake, 'undo', '--yes').code == 0491	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'492	assert !os.exists(marker)493}494495// A restore rewrites only what differs. Rewriting every file resets every496// mtime, so the next status has to hash the whole tree again.497fn test_a_restore_leaves_unchanged_files_alone() {498	dir := temp_repo('restore-skip')499	defer { os.rmdir_all(dir) or {} }500	init_repo(dir)501	write(dir, 'a.txt', 'one\n')502	write(dir, 'same.txt', 'never changes\n')503	assert run(dir, 'save', 'one').code == 0504	write(dir, 'a.txt', 'two\n')505	assert run(dir, 'save', 'two').code == 0506	long_ago := i64(1700000000)507	os.utime(os.join_path(dir, 'same.txt'), long_ago, long_ago) or { panic(err) }508	assert run(dir, 'undo', '--yes').code == 0509	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'510	assert os.file_last_mod_unix(os.join_path(dir, 'same.txt')) == long_ago511}512513// `save` records the executable bit, so `status` has to see it too, or a514// chmod would be invisible until it turned up in a save.515fn test_status_sees_an_executable_bit_change() {516	dir := temp_repo('chmod')517	defer { os.rmdir_all(dir) or {} }518	init_repo(dir)519	write(dir, 'run.sh', 'echo hi\n')520	assert run(dir, 'save', 'script').code == 0521	os.chmod(os.join_path(dir, 'run.sh'), 0o755) or { panic(err) }522	status := run(dir, 'status', '--json')523	assert status.out.contains('"dirty":true')524	assert status.out.contains('"modified":["run.sh"]')525}526527fn test_log_and_diff() {528	dir := temp_repo('history')529	defer { os.rmdir_all(dir) or {} }530	init_repo(dir)531	write(dir, 'a.txt', 'one\n')532	first := run(dir, 'save', 'one', '--session', 'alpha', '--json')533	id1 := first.out.all_after('"id":"')[..12]534	write(dir, 'a.txt', 'two\n')535	second := run(dir, 'save', 'two', '--session', 'beta', '--json')536	id2 := second.out.all_after('"id":"')[..12]537	cp := run(dir, 'checkpoint', 'checkpoint', '--json')538	assert cp.code == 0539	log := run(dir, 'log')540	assert log.code == 0541	assert log.out.contains('▸')542	assert log.out.contains('◐')543	lj := run(dir, 'log', '--json')544	assert lj.code == 0545	assert lj.out.contains('"head_id"')546	assert lj.out.contains('"saves"')547	assert run(dir, 'log', '--since', 'today').out.contains('two')548	session := run(dir, 'log', '--session', 'alpha')549	assert session.out.contains('one')550	assert !session.out.contains('two')551	write(dir, 'a.txt', 'three\n')552	d := run(dir, 'diff')553	assert d.code == 0554	assert d.out.contains('--- a/')555	assert d.out.contains('+++ b/')556	assert run(dir, 'diff', id1).code == 0557	assert run(dir, 'diff', id1, id2).code == 0558	dj := run(dir, 'diff', '--json')559	assert dj.code == 0560	assert dj.out.contains('"from"')561	assert dj.out.contains('"to"')562	assert dj.out.contains('"files"')563	assert dj.out.contains('"change":"modified"')564	assert run(dir, 'diff', 'not-a-real-id').code == 1565	assert run(dir, 'diff', id1, id2, 'third').code == 1566	write(dir, 'blob.bin', '\x00\x01\x02')567	diff_binary := run(dir, 'diff', '--json')568	assert diff_binary.out.contains('"binary":true')569	assert diff_binary.out.contains('Binary files differ')570}571572fn test_undo_revert_and_load() {573	dir := temp_repo('restore')574	defer { os.rmdir_all(dir) or {} }575	init_repo(dir)576	write(dir, 'a.txt', 'one\n')577	one := run(dir, 'save', 'one', '--json').out578	id1 := one.all_after('"id":"')[..12]579	write(dir, 'a.txt', 'two\n')580	write(dir, 'gone.txt', 'gone\n')581	second := run(dir, 'save', 'two', '--json').out582	id2 := second.all_after('"id":"')[..12]583	write(dir, 'a.txt', 'three\n')584	third := run(dir, 'save', 'three', '--json').out585	id3 := third.all_after('"id":"')[..12]586	// Unsaved work — here a file never saved — blocks every going-back but587	// revert, as in Koh 2: a restore must never overwrite what only the disk has.588	write(dir, 'never.txt', 'keep me\n')589	log_before := run(dir, 'log').out590	for args in [['undo', '--yes'], ['load', id1, '--yes'], ['pluck', id2, '--yes']] {591		blocked := run(dir, ...args)592		assert blocked.code == 1593		assert blocked.err.contains('unsaved changes')594	}595	assert run(dir, 'log').out == log_before596	os.rm(os.join_path(dir, 'never.txt')) or { panic(err) }597	write(dir, 'a.txt', 'edited, never saved\n')598	assert run(dir, 'undo', '--yes').err.contains('unsaved changes')599	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'edited, never saved\n'600	write(dir, 'a.txt', 'three\n')601	os.rm(os.join_path(dir, 'gone.txt')) or { panic(err) }602	assert run(dir, 'load', id1, '--yes').err.contains('unsaved changes')603	write(dir, 'gone.txt', 'gone\n')604	undo := run(dir, 'undo', '--yes', '--json')605	assert undo.code == 0606	if !undo.out.contains(id2) {607		panic('undo JSON did not name ${id2}: ${undo.out}')608	}609	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'610	assert os.exists(os.join_path(dir, 'gone.txt'))611	assert run(dir, 'load', id3, '--yes').code == 0612	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'three\n'613	assert run(dir, 'undo', '2', '--yes').code == 0614	assert run(dir, 'load', id2, '--yes').code == 0615	assert run(dir, 'undo', '99', '--yes').err.contains('nothing before')616	write(dir, 'a.txt', 'dirty\n')617	before := run(dir, 'log')618	refuse := run(dir, 'revert')619	assert refuse.code == 1620	assert refuse.err.contains('needs --yes when not interactive')621	assert run(dir, 'log').out == before.out622	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'dirty\n'623	write(dir, 'untracked.txt', 'remove\n')624	rv := run(dir, 'revert', '--yes', '--json')625	assert rv.code == 0626	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'627	assert !os.exists(os.join_path(dir, 'untracked.txt'))628	// The way back to the discarded work is named, not left to be found.629	kept := rv.out.all_after('"checkpoint":"')[..12]630	assert run(dir, 'load', kept, '--yes').code == 0631	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'dirty\n'632	assert os.read_file(os.join_path(dir, 'untracked.txt'))! == 'remove\n'633	write(dir, 'a.txt', 'dirty again\n')634	assert run(dir, 'revert', '--yes').out.contains('koh load ')635	assert run(dir, 'revert', '--yes').out.contains('working tree already matches')636	assert run(dir, 'load', '--checkpoint', '--yes').code == 0637	assert run(dir, 'load', id2, '--json').code == 1638	assert run(dir, 'load', id2, '--json').err.contains('error')639	assert run(dir, 'load').code == 2640	assert run(dir, 'load', 'unknown-id', '--yes').code == 1641}642643fn test_flag_and_flagged_log() {644	dir := temp_repo('flag')645	defer { os.rmdir_all(dir) or {} }646	init_repo(dir)647	write(dir, 'flag.txt', 'one\n')648	saved := run(dir, 'save', 'flag me', '--json')649	id := saved.out.all_after('"id":"')[..12]650	flagged := run(dir, 'flag', id, '--reason', 'unsafe', '--json')651	assert flagged.code == 0652	assert flagged.out.contains('"flagged":true')653	assert flagged.out.contains('"reason":"unsafe"')654	list := run(dir, 'flag', '--json')655	assert list.code == 0656	assert list.out.contains(id)657	assert list.out.contains('unsafe')658	assert run(dir, 'log').out.contains('⚑')659	assert run(dir, 'flag', '--clear', id).code == 0660	assert run(dir, 'flag').out.contains('nothing is flagged')661	assert run(dir, 'flag', 'unknown-id').code == 1662	assert run(dir, 'flag').code == 0663}664665fn test_pluck_forward_reverse_dry_run_and_conflict() {666	dir := temp_repo('pluck')667	defer { os.rmdir_all(dir) or {} }668	init_repo(dir)669	write(dir, 'a.txt', 'one\n')670	first := run(dir, 'save', 'one', '--json').out671	id1 := first.all_after('"id":"')[..12]672	write(dir, 'a.txt', 'two\n')673	second := run(dir, 'save', 'two', '--json').out674	id2 := second.all_after('"id":"')[..12]675	assert run(dir, 'load', id1, '--yes').code == 0676	dry := run(dir, 'pluck', id2, '--dry-run')677	assert dry.code == 0678	assert dry.out.contains('a.txt')679	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'680	assert run(dir, 'pluck', id2, '--yes').code == 0681	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'682	assert run(dir, 'pluck', '--reverse', id2, '--yes').code == 0683	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'684	write(dir, 'a.txt', 'different\n')685	assert run(dir, 'pluck', id2, '--dry-run').code == 1686	assert run(dir, 'save', 'different').code == 0687	conflict := run(dir, 'pluck', id2, '--yes')688	assert conflict.code == 1689	assert conflict.err.contains('a.txt')690	assert run(dir, 'pluck').code == 2691	assert run(dir, 'pluck', 'unknown-id').code == 1692}693694fn test_peek_and_doctor() {695	dir := temp_repo('peek-doctor')696	defer { os.rmdir_all(dir) or {} }697	init_repo(dir)698	write(dir, 'peek.txt', 'peek me\n')699	assert run(dir, 'save', 'peekable').code == 0700	id := run(dir, 'log', '--json').out.all_after('"id":"')[..12]701	before_log := run(dir, 'log', '--json').out702	peek := run(dir, 'peek', id, '--json')703	assert peek.code == 0704	peek_path := peek.out.all_after('"path":"').before('"')705	assert peek.out.contains('"id":"${id}"')706	assert os.read_file(os.join_path(peek_path, 'peek.txt'))! == 'peek me\n'707	assert run(dir, 'status').out.contains('no changes')708	assert run(dir, 'log', '--json').out == before_log709	assert run(dir, 'peek').code == 2710	assert run(dir, 'peek', 'unknown-id').code == 1711	backup := os.join_path(dir, 'doctor.backup')712	healthy := run(dir, 'doctor')713	assert healthy.code == 0714	assert healthy.out.contains('is sound')715	report := run(dir, 'doctor', '--json')716	assert report.code == 0717	for key in ['problems', 'objects', 'saves', 'checkpoints', 'cached_files', 'peek_folders_removed',718		'backup'] {719		read_json_has(report.out, key)720	}721	backed := run(dir, 'doctor', '--backup', backup)722	assert backed.code == 0723	assert os.exists(backup)724	assert backed.out.contains(backup)725	assert run(dir, 'doctor', '--backup', backup).code == 1726	assert run(dir, 'peek', id, '--json').code == 0727	// A peek made today is left for whoever is reading it.728	kept := run(dir, 'doctor', '--json')729	assert kept.code == 0730	assert os.exists(peek_path)731	os.rmdir_all(peek_path) or {}732}733734fn test_strip_refuses_without_terminal() {735	dir := temp_repo('strip')736	defer { os.rmdir_all(dir) or {} }737	init_repo(dir)738	write(dir, 'secret.txt', 'keep\n')739	assert run(dir, 'save', 'secret').code == 0740	before_log := run(dir, 'log', '--json').out741	refused := run(dir, 'strip', 'secret.txt')742	assert refused.code == 1743	assert refused.err.contains('needs a terminal')744	assert run(dir, 'log', '--json').out == before_log745	assert os.read_file(os.join_path(dir, 'secret.txt'))! == 'keep\n'746	assert run(dir, 'log', '--json').out.contains('secret')747}748749fn test_saves_and_checkpoints_aliases() {750	dir := temp_repo('aliases')751	defer { os.rmdir_all(dir) or {} }752	init_repo(dir)753	write(dir, 'alias.txt', 'one\n')754	assert run(dir, 'save', 'plain save').code == 0755	assert run(dir, 'checkpoint', 'checkpoint save').code == 0756	saves := run(dir, 'saves')757	assert saves.code == 0758	assert saves.out.contains('plain save')759	// The two lists never overlap, on a terminal or piped.760	assert !saves.out.contains('checkpoint save')761	checkpoints := run(dir, 'checkpoints')762	assert checkpoints.code == 0763	assert checkpoints.out.contains('checkpoint save')764	assert !checkpoints.out.contains('plain save')765	json_saves := run(dir, 'saves', '--json')766	assert json_saves.code == 0767	assert json_saves.out.contains('"is_checkpoint":false')768	assert !json_saves.out.contains('"is_checkpoint":true')769	json_result := run(dir, 'checkpoints', '--json')770	assert json_result.code == 0771	assert json_result.out.contains('"head_id"')772	assert json_result.out.contains('"saves"')773	assert json_result.out.contains('"is_checkpoint":true')774	assert !json_result.out.contains('"is_checkpoint":false')775	// `log` stays the whole line, checkpoints and all.776	assert run(dir, 'log').out.contains('checkpoint save')777}778779fn test_remote_configuration_is_isolated_and_atomic() {780	dir := temp_repo('remote')781	home := temp_repo('remote-home')782	defer {783		os.rmdir_all(dir) or {}784		os.rmdir_all(home) or {}785	}786	empty := run_home(dir, home, 'remote', '--json')787	assert empty.code == 0788	assert empty.out.contains('"configured":false')789	target := os.join_path(home, 'remote-store')790	set := run_home(dir, home, 'remote', 'folder', target)791	assert set.code == 0792	assert os.is_dir(target)793	state := run_home(dir, home, 'remote', '--json')794	assert state.code == 0795	assert state.out.contains('"kind":"folder"')796	assert state.out.contains(target)797	assert run_home(dir, home, 'remote', 's3', 'http://127.0.0.1:1', 'bucket', 'region').code == 1798	assert run_home(dir, home, 'remote', '--json').out.contains(target)799	assert run_home(dir, home, 'remote', 's3', 'http://127.0.0.1:1', 'bucket', 'region').err.contains('KOH_ACCESS_KEY')800	assert run_home(dir, home, 'remote', '--forget').code == 0801	assert run_home(dir, home, 'remote', '--json').out.contains('"configured":false')802}803804// The files under ~/.config/koh can be written by hand instead of by805// `koh remote`, and are then read the same way.806fn test_remote_written_by_hand() {807	dir := temp_repo('remote-by-hand')808	home := temp_repo('remote-by-hand-home')809	defer {810		os.rmdir_all(dir) or {}811		os.rmdir_all(home) or {}812	}813	config := os.join_path(home, '.config', 'koh')814	os.mkdir_all(config) or { panic(err) }815	target := os.join_path(home, 'remote-store')816	os.mkdir_all(target) or { panic(err) }817	os.write_file(os.join_path(config, 'remote'), 'kind = folder\npath = ${target}\n') or {818		panic(err)819	}820	assert run_home(dir, home, 'init').code == 0821	os.write_file(os.join_path(dir, 'a.txt'), 'a\n') or { panic(err) }822	assert run_home(dir, home, 'save', 'first').code == 0823	offered := run_home(dir, home, 'offer', '--json')824	assert offered.code == 0825	assert offered.out.contains('"head"')826827	// Keys anyone else can read are refused before they are ever sent.828	os.write_file(os.join_path(config, 'remote'), 'kind=s3\nendpoint=http://127.0.0.1:1\nbucket=b\nregion=r\n') or {829		panic(err)830	}831	credentials := os.join_path(config, 'credentials')832	os.write_file(credentials, 'access_key=AK\nsecret_key=SK\n') or { panic(err) }833	os.chmod(credentials, 0o644) or { panic(err) }834	loose := run_home(dir, home, 'offer')835	assert loose.code == 1836	assert loose.err.contains('chmod 600')837838	// A setting koh cannot read is replaced by setting the remote again.839	os.write_file(os.join_path(config, 'remote'), 'kind=ftp\n') or { panic(err) }840	unreadable := run_home(dir, home, 'offer')841	assert unreadable.code == 1842	assert unreadable.err.contains('not readable')843	assert run_home(dir, home, 'remote', 'folder', target).code == 0844	assert run_home(dir, home, 'offer').code == 0845}846847// A clone belongs to the repo it was stolen from, whatever its folder is848// called later: renaming it must not start a second repo on the remote.849fn test_a_renamed_clone_keeps_offering_to_its_repo() {850	syncroot := temp_repo('rename-clone')851	home := temp_repo('rename-clone-home')852	defer {853		os.rmdir_all(syncroot) or {}854		os.rmdir_all(home) or {}855	}856	remote := os.join_path(syncroot, 'remote')857	a := os.join_path(syncroot, 'A', 'proj')858	b_parent := os.join_path(syncroot, 'B')859	os.mkdir_all(a) or { panic(err) }860	os.mkdir_all(b_parent) or { panic(err) }861	init_repo(a)862	write(a, 'a.txt', 'from A\n')863	assert run_home(a, home, 'remote', 'folder', remote).code == 0864	assert run_home(a, home, 'save', 'A first').code == 0865	assert run_home(b_parent, home, 'steal', 'proj').code == 0866	renamed := os.join_path(b_parent, 'renamed')867	os.mv(os.join_path(b_parent, 'proj'), renamed) or { panic(err) }868	write(renamed, 'b.txt', 'from B\n')869	assert run_home(renamed, home, 'save', 'B first').code == 0870	assert !os.exists(os.join_path(remote, 'renamed'))871	assert run_home(a, home, 'steal').code == 0872	assert os.read_file(os.join_path(a, 'b.txt'))! == 'from B\n'873}874875// A damaged object on the remote stops a clone, names the object, and leaves876// no half-made folder that would make the retry refuse.877fn test_clone_of_a_damaged_remote_leaves_nothing() {878	syncroot := temp_repo('damaged')879	home := temp_repo('damaged-home')880	defer {881		os.rmdir_all(syncroot) or {}882		os.rmdir_all(home) or {}883	}884	remote := os.join_path(syncroot, 'remote')885	a := os.join_path(syncroot, 'A', 'proj')886	b_parent := os.join_path(syncroot, 'B')887	os.mkdir_all(a) or { panic(err) }888	os.mkdir_all(b_parent) or { panic(err) }889	init_repo(a)890	write(a, 'a.txt', 'from A\n')891	assert run_home(a, home, 'remote', 'folder', remote).code == 0892	assert run_home(a, home, 'save', 'A first').code == 0893	objects := os.join_path(remote, 'proj', 'objects')894	for name in os.ls(objects) or { panic(err) } {895		os.chmod(os.join_path(objects, name), 0o644) or {}896		os.write_file(os.join_path(objects, name), 'junk') or { panic(err) }897	}898	clone := run_home(b_parent, home, 'steal', 'proj')899	assert clone.code == 1900	assert clone.err.contains('is damaged')901	assert !os.exists(os.join_path(b_parent, 'proj'))902}903904fn test_offer_steal_folder_remote() {905	syncroot := temp_repo('sync')906	home := temp_repo('sync-home')907	defer {908		os.rmdir_all(syncroot) or {}909		os.rmdir_all(home) or {}910	}911	remote := os.join_path(syncroot, 'remote')912	a := os.join_path(syncroot, 'A', 'proj')913	b_parent := os.join_path(syncroot, 'B')914	os.mkdir_all(a) or { panic(err) }915	os.mkdir_all(b_parent) or { panic(err) }916	init_repo(a)917	write(a, 'a.txt', 'from A\n')918	assert run_home(a, home, 'remote', 'folder', remote).code == 0919	assert run_home(a, home, 'save', 'A first').code == 0920	clone := run_home(b_parent, home, 'steal', 'proj')921	assert clone.code == 0922	b := os.join_path(b_parent, 'proj')923	assert os.read_file(os.join_path(b, 'a.txt'))! == 'from A\n'924	write(b, 'b.txt', 'from B\n')925	assert run_home(b, home, 'save', 'B first').code == 0926	write(a, 'a2.txt', 'second\n')927	assert run_home(a, home, 'save', 'A second').code == 0928	assert run_home(a, home, 'steal').code == 0929	assert os.exists(os.join_path(a, 'b.txt'))930	assert run_home(b_parent, home, 'steal', '--list').out.contains('proj')931	write(a, 'clash.txt', 'base\n')932	assert run_home(a, home, 'save', 'clash base').code == 0933	assert run_home(b, home, 'steal').code == 0934	write(a, 'clash.txt', 'A version\n')935	assert run_home(a, home, 'save', 'A clash').code == 0936	write(b, 'clash.txt', 'B version\n')937	assert run_home(b, home, 'save', 'B clash').code == 0938	refused := run_home(b, home, 'steal')939	assert refused.code == 1940	assert refused.err.contains('--mine') || refused.err.contains('--theirs')941	b_head := run_home(b, home, 'status', '--json').out.all_after('"head_id":"')[..12]942	theirs := run_home(b, home, 'steal', '--theirs', '--json')943	assert theirs.code == 0944	// The pre-combine tree is off the line now; the way back must be named,945	// or an agent without the history view cannot find it.946	assert theirs.out.contains('"previous_head":"${b_head}"')947	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'A version\n'948	assert run_home(b, home, 'load', b_head, '--yes').code == 0949	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'B version\n'950	assert run_home(b, home, 'load', theirs.out.all_after('"head":"')[..12], '--yes').code == 0951	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'A version\n'952	write(a, 'clash.txt', 'A second\n')953	assert run_home(a, home, 'save', 'A second clash').code == 0954	write(b, 'clash.txt', 'B second\n')955	assert run_home(b, home, 'save', 'B second clash').code == 0956	assert run_home(b, home, 'steal', '--mine').code == 0957	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'B second\n'958	assert run_home(b, home, 'log').out.contains('combine: kept mine for')959}960961// A clone brings in the whole history, flags included; both output forms must962// say which saves came in flagged, and why.963fn test_a_clone_reports_flagged_saves() {964	syncroot := temp_repo('clone-flags')965	home := temp_repo('clone-flags-home')966	defer {967		os.rmdir_all(syncroot) or {}968		os.rmdir_all(home) or {}969	}970	a := os.join_path(syncroot, 'A', 'proj')971	os.mkdir_all(a) or { panic(err) }972	init_repo(a)973	assert run_home(a, home, 'remote', 'folder', os.join_path(syncroot, 'remote')).code == 0974	write(a, 'a.txt', 'one\n')975	id := run_home(a, home, 'save', 'risky', '--json').out.all_after('"id":"')[..12]976	assert run_home(a, home, 'flag', id, '--reason', 'broke the build').code == 0977	assert run_home(a, home, 'offer').code == 0978	for name in ['B', 'C'] {979		os.mkdir_all(os.join_path(syncroot, name)) or { panic(err) }980	}981	json_clone := run_home(os.join_path(syncroot, 'B'), home, 'steal', 'proj', '--json')982	assert json_clone.code == 0983	assert json_clone.out.contains('"flagged":["${id}"]')984	text_clone := run_home(os.join_path(syncroot, 'C'), home, 'steal', 'proj')985	assert text_clone.code == 0986	assert text_clone.out.contains('[${id}] came in flagged — broke the build')987}988989// A folder remote on a disk or share that is not mounted is simply not there.990// Creating it would put the saves in a stand-in folder the other machine never991// sees; the offer must say what is wrong instead.992fn test_an_unmounted_folder_remote_is_not_recreated() {993	syncroot := temp_repo('unmounted')994	home := temp_repo('unmounted-home')995	defer {996		os.rmdir_all(syncroot) or {}997		os.rmdir_all(home) or {}998	}999	mount := os.join_path(syncroot, 'nas')1000	remote := os.join_path(mount, 'koh')1001	a := os.join_path(syncroot, 'proj')1002	os.mkdir_all(a) or { panic(err) }1003	init_repo(a)1004	assert run_home(a, home, 'remote', 'folder', remote).code == 01005	write(a, 'a.txt', 'one\n')1006	assert run_home(a, home, 'save', 'first').code == 01007	os.rename(mount, os.join_path(syncroot, 'nas-unplugged')) or { panic(err) }1008	os.mkdir(mount) or { panic(err) }1009	offered := run_home(a, home, 'offer')1010	assert offered.code == 11011	assert offered.err.contains('mounted')1012	assert !os.exists(remote)1013	write(a, 'a.txt', 'two\n')1014	saved := run_home(a, home, 'save', 'second')1015	assert saved.code == 01016	assert saved.out.contains('mounted')1017	assert !os.exists(remote)1018}10191020fn test_man_and_koh2_handoff() {1021	dir := temp_repo('man')1022	home := temp_repo('man-home')1023	defer {1024		os.rmdir_all(dir) or {}1025		os.rmdir_all(home) or {}1026	}1027	whole := run_home(dir, home, 'man')1028	assert whole.code == 01029	assert whole.out.contains('NAME')1030	assert whole.out.contains('COMMANDS')1031	assert !whole.out.contains('\x1b') && !whole.out.contains('◆')1032	strip := run_home(dir, home, 'man', 'strip')1033	assert strip.code == 01034	assert strip.out.contains('strip')1035	assert !strip.out.contains('koh save ')1036	steal := run_home(dir, home, 'man', 'steal').out1037	assert steal.starts_with('    koh steal') && steal.contains('koh steal my-project')1038	assert run_home(dir, home, 'man', 'init').out.trim_space() == "koh init\n        Create `.koh` here, and a starter `.kohignore` if there isn't one."1039	assert run_home(dir, home, 'man', 'nonsense').code == 21040	legacy := temp_repo('legacy')1041	defer { os.rmdir_all(legacy) or {} }1042	os.mkdir_all(os.join_path(legacy, '.koh')) or { panic(err) }1043	fake := os.join_path(home, 'bin')1044	os.mkdir_all(fake) or { panic(err) }1045	fake_koh := os.join_path(fake, 'koh2')1046	os.write_file(fake_koh, '#!/bin/sh\nprintf "handoff:%s\\n" "$*"\nexit 7\n') or { panic(err) }1047	os.chmod(fake_koh, 0o755) or { panic(err) }1048	handoff := run_home_with_path(legacy, home, fake, 'status', '--json')1049	assert handoff.code == 71050	assert handoff.out.contains('handoff:status --json')1051	// One notice line, on stderr, so koh2's own output stays as it was.1052	assert handoff.err.contains('Koh 2 repo')1053	assert handoff.err.trim_space().split_into_lines().len == 11054	assert handoff.out.trim_space() == 'handoff:status --json'1055}10561057fn run_home_with_path(repo string, home string, bin_dir string, args ...string) Result {1058	stamp := '${os.getpid()}-${time.now().unix_nano()}'1059	base := os.join_path(os.temp_dir(), 'koh3-cli-${stamp}')1060	out_path := '${base}.out'1061	err_path := '${base}.err'1062	code_path := '${base}.code'1063	mut command := 'HOME=${q(home)} PATH=${q(bin_dir + ':' + os.getenv('PATH'))} ${q(binary)}'1064	for arg in args {1065		command += ' ${q(arg)}'1066	}1067	shell := 'cd ${q(repo)} && ${command} </dev/null >${q(out_path)} 2>${q(err_path)}; printf "%s" \$? >${q(code_path)}'1068	result := os.execute(shell)1069	if result.exit_code != 0 {1070		panic('could not run test command: ${result.output}')1071	}1072	code := os.read_file(code_path) or { panic(err) }1073	out := os.read_file(out_path) or { '' }1074	err := os.read_file(err_path) or { '' }1075	os.rm(out_path) or {}1076	os.rm(err_path) or {}1077	os.rm(code_path) or {}1078	return Result{1079		code: code.int()1080		out:  out1081		err:  err1082	}1083}10841085// --- migration -------------------------------------------------------------10861087fn koh2_binary() string {1088	return os.find_abs_path_of_executable('koh') or { '' }1089}10901091// run_koh2 runs the Koh 2 binary in a fixture; its own output is not under1092// test here.1093fn run_koh2(dir string, command string) {1094	os.execute('cd ${q(dir)} && ${command} >/dev/null 2>&1')1095}10961097fn save_ids(dir string) []string {1098	mut ids := []string{}1099	for name in os.ls(os.join_path(dir, '.koh', 'snapshots')) or { []string{} } {1100		if name.ends_with('.json') {1101			ids << name.trim_right('.json')1102		}1103	}1104	ids.sort()1105	return ids1106}11071108fn test_migrate_converts_a_koh2_repo_and_keeps_every_save() {1109	koh2 := koh2_binary()1110	if koh2 == '' {1111		println('skipping the migration tests: koh (Koh 2) is not on PATH')1112		return1113	}1114	dir := temp_repo('migrate')1115	defer { os.rmdir_all(dir) or {} }1116	home := temp_repo('migrate-home')1117	defer { os.rmdir_all(home) or {} }1118	run_koh2(dir, '${q(koh2)} init')1119	// One file large enough to be an object, one small enough to be inlined.1120	write(dir, 'code.txt', 'x'.repeat(700))1121	write(dir, 'tiny.txt', 'tiny\n')1122	run_koh2(dir, '${q(koh2)} save "first save"')1123	run_koh2(dir, '${q(koh2)} checkpoint "before something"')1124	write(dir, 'code.txt', 'y'.repeat(700))1125	run_koh2(dir, '${q(koh2)} save "second save"')1126	original := save_ids(dir)1127	assert original.len == 311281129	report := run_home(dir, home, 'migrate')1130	assert report.code == 01131	assert report.out.contains('migrated 3 saves')1132	// The swap: `.koh` is a file, the old data is archived, nothing is staging.1133	assert os.is_file(os.join_path(dir, '.koh'))1134	assert os.is_dir(os.join_path(dir, '.koh-v2'))1135	assert os.is_file(os.join_path(dir, '.kohignore'))1136	assert !os.exists(os.join_path(dir, '.koh-migrate'))11371138	// Every save kept its original ID, and the new repo is sound.1139	logged := run_home(dir, home, 'log', '--json')1140	assert logged.code == 01141	for id in original {1142		assert logged.out.contains(id)1143	}1144	assert run_home(dir, home, 'doctor').code == 01145	assert run_home(dir, home, 'status').code == 011461147	// Migrating again has nothing to convert.1148	assert run_home(dir, home, 'migrate').code == 11149}11501151fn test_migrate_refuses_a_tree_that_does_not_match_the_last_save() {1152	koh2 := koh2_binary()1153	if koh2 == '' {1154		return1155	}1156	dir := temp_repo('migrate-dirty')1157	defer { os.rmdir_all(dir) or {} }1158	home := temp_repo('migrate-dirty-home')1159	defer { os.rmdir_all(home) or {} }1160	run_koh2(dir, '${q(koh2)} init')1161	write(dir, 'code.txt', 'x'.repeat(700))1162	run_koh2(dir, '${q(koh2)} save "only save"')1163	write(dir, 'code.txt', 'unsaved change\n')11641165	refused := run_home(dir, home, 'migrate')1166	assert refused.code == 11167	assert refused.err.contains('save with koh2 first')1168	// Nothing moved: still Koh 2, no archive, no staging file.1169	assert os.is_dir(os.join_path(dir, '.koh'))1170	assert !os.exists(os.join_path(dir, '.koh-v2'))1171	assert !os.exists(os.join_path(dir, '.koh-migrate'))1172}11731174// Koh 2 never saved a root `.kohconfig`, root `.kohignore.<remote>` rules or1175// `*.bundle` files, so a clean Koh 2 repo may hold them. Most real repos have1176// a `.kohconfig`; migrate must not call them unsaved work.1177fn test_migrate_passes_over_the_files_koh2_never_saved() {1178	koh2 := koh2_binary()1179	if koh2 == '' {1180		return1181	}1182	dir := temp_repo('migrate-koh2-ignores')1183	defer { os.rmdir_all(dir) or {} }1184	home := temp_repo('migrate-koh2-ignores-home')1185	defer { os.rmdir_all(home) or {} }1186	run_koh2(dir, '${q(koh2)} init')1187	write(dir, 'code.txt', 'x'.repeat(700))1188	run_koh2(dir, '${q(koh2)} save "only save"')1189	write(dir, '.kohconfig', 'stable_days = 14\n')1190	write(dir, '.kohignore.public', 'private/\n')1191	write(dir, 'lib/app.bundle', 'bundle\n')1192	write(dir, 'ios/Settings.bundle/Root.plist', 'settings\n')1193	// Koh 2 keeps saving a file under a folder pattern added later, where1194	// Koh 3 reads the same rule as covering the folder: the saved file is on1195	// disk and matches, so the tree is clean.1196	write(dir, 'native/t.dSYM/Info.plist', 'plist\n')1197	run_koh2(dir, '${q(koh2)} save --agent test --session test "add the dsym"')1198	// Koh 2 skips *.bundle even when its rules no longer list it.1199	ignore_path := os.join_path(dir, '.koh', 'ignore')1200	rules := os.read_file(ignore_path)!.split_into_lines().filter(it != '*.bundle')1201	os.write_file(ignore_path, rules.join('\n') + '\nnative/*.dSYM\n')!1202	// A saved file the walk skips still has to match what was saved.1203	write(dir, 'native/t.dSYM/Info.plist', 'changed\n')1204	changed := run_home(dir, home, 'migrate')1205	assert changed.code == 11206	assert changed.err.contains('native/t.dSYM/Info.plist does not match')1207	write(dir, 'native/t.dSYM/Info.plist', 'plist\n')1208	assert os.execute('cd ${q(dir)} && ${q(koh2)} status --json').output.contains('"dirty":false')12091210	migrated := run_home(dir, home, 'migrate')1211	assert migrated.code == 0, migrated.err1212	// They stay where they were, for the user to keep or delete.1213	assert os.read_file(os.join_path(dir, '.kohconfig'))! == 'stable_days = 14\n'1214}