cli_test.v

1module tests23import os4import time56const root = @VMODROOT7const binary = os.join_path(root, 'build', 'koh3')89struct Result {10mut:11	code int12	out  string13	err  string14}1516fn testsuite_begin() {17	os.mkdir_all(os.join_path(root, 'build')) or { panic(err) }18	build := os.execute('v -o ${q(binary)} ${q(os.join_path(root, 'src', 'koh3.v'))}')19	if build.exit_code != 0 {20		panic('could not build koh3: ${build.output}')21	}22}2324fn q(s string) string {25	return "'${s.replace("'", "'\\''")}'"26}2728fn temp_repo(name string) string {29	dir := os.join_path(os.temp_dir(), 'koh3-cli-${name}-${time.now().unix_nano()}')30	os.mkdir_all(dir) or { panic(err) }31	return dir32}3334fn run(repo string, args ...string) Result {35	home := temp_repo('home')36	defer { os.rmdir_all(home) or {} }37	return run_home(repo, home, ...args)38}3940fn run_home(repo string, home string, args ...string) Result {41	stamp := '${os.getpid()}-${time.now().unix_nano()}'42	base := os.join_path(os.temp_dir(), 'koh3-cli-${stamp}')43	out_path := '${base}.out'44	err_path := '${base}.err'45	code_path := '${base}.code'46	mut command := 'HOME=${q(home)} ${q(binary)}'47	for arg in args {48		command += ' ${q(arg)}'49	}50	shell := 'cd ${q(repo)} && ${command} </dev/null >${q(out_path)} 2>${q(err_path)}; printf "%s" \$? >${q(code_path)}'51	result := os.execute(shell)52	if result.exit_code != 0 {53		panic('could not run test command: ${result.output}')54	}55	code := os.read_file(code_path) or { panic(err) }56	out := os.read_file(out_path) or { '' }57	err := os.read_file(err_path) or { '' }58	os.rm(out_path) or {}59	os.rm(err_path) or {}60	os.rm(code_path) or {}61	return Result{62		code: code.int()63		out:  out64		err:  err65	}66}6768fn init_repo(repo string) {69	r := run(repo, 'init')70	assert r.code == 071	assert os.exists(os.join_path(repo, '.koh'))72	assert os.exists(os.join_path(repo, '.kohignore'))73}7475fn write(repo string, path string, text string) {76	full := os.join_path(repo, path)77	os.mkdir_all(os.dir(full)) or { panic(err) }78	os.write_file(full, text) or { panic(err) }79}8081fn read_json_has(text string, key string) {82	if !text.contains(key) {83		panic('missing JSON key ${key}: ${text}')84	}85}8687fn test_init_and_usage() {88	dir := temp_repo('init')89	defer { os.rmdir_all(dir) or {} }90	r := run(dir, 'init', '--json')91	assert r.code == 092	read_json_has(r.out, 'repo')93	read_json_has(r.out, 'ignore_created')94	assert run(dir, 'init').code == 195	assert run(dir, 'unknown-command').code == 296	assert run(dir, 'unknown-command').err.contains('unknown command')97	// An agent asking for JSON gets JSON for a usage mistake too, exit 2.98	for args in [['unknown-command', '--json'], ['save', '--json'], ['save', 'x', '--nope', '--json']] {99		r2 := run(dir, ...args)100		assert r2.code == 2101		assert r2.out == ''102		assert r2.err.starts_with('{"error":'), r2.err103	}104}105106// The help screen is commands and plain words: every flag lives in `koh man`.107// this_platform is the platform name for the machine the tests run on, so a108// build test does not depend on which machine that is.109fn this_platform() string {110	machine := os.uname().machine111	arch := if machine in ['arm64', 'aarch64'] { 'aarch64' } else { 'x86_64' }112	return '${os.user_os()}-${arch}'113}114115// `koh build` builds with `koh.build`: the version and platform fill the output116// path, and each artifact is printed with its size.117fn test_build_builds_the_named_platforms() {118	dir := temp_repo('build_ok')119	defer { os.rmdir_all(dir) or {} }120	init_repo(dir)121	host := this_platform()122	write(dir, 'VERSION', '1.2.3\n')123	write(dir, 'koh.build', 'command = mkdir -p out && printf built > out/demo-1.2.3-${host}124output = out/demo-{version}-{platform}125platforms = ${host}126')127	one := run(dir, 'build')128	assert one.code == 0, one.err129	assert one.out.contains('version 1.2.3')130	assert one.out.contains('out/demo-1.2.3-${host}')131	assert os.exists(os.join_path(dir, 'out/demo-1.2.3-${host}'))132133	// --platform picks one, --all takes every platform the file names.134	write(dir, 'koh.build', 'command = mkdir -p out && printf m > out/demo-macos-aarch64 && printf l > out/demo-linux-aarch64135output = out/demo-{platform}136platforms = macos-aarch64, linux-aarch64137')138	all := run(dir, 'build', '--all', '--json')139	assert all.code == 0, all.err140	assert all.out.contains('"platform":"macos-aarch64"')141	assert all.out.contains('"platform":"linux-aarch64"')142	assert os.exists(os.join_path(dir, 'out/demo-linux-aarch64'))143	picked := run(dir, 'build', '--platform', 'linux-aarch64')144	assert picked.code == 0, picked.err145	assert picked.out.contains('out/demo-linux-aarch64')146	assert !picked.out.contains('out/demo-macos-aarch64')147}148149// The item's exit check, as a test: `koh build` builds Koh 3 itself with the150// real toolchain, in a copy, and the binary it produces runs.151fn test_build_builds_koh_itself() {152	dir := temp_repo('selfbuild')153	defer { os.rmdir_all(dir) or {} }154	// Only what a build reads: the copy needs no history and no archive.155	for item in ['src', 'vendor', 'docs', 'v.mod', 'VERSION'] {156		os.cp_all(os.join_path(root, item), os.join_path(dir, item), true) or { panic(err) }157	}158	write(dir, 'koh.build', 'command = mkdir -p zig-out/bin && v -o zig-out/bin/koh3 src/koh3.v159output = zig-out/bin/koh3160platforms = ${this_platform()}161')162	init_repo(dir)163	built := run(dir, 'build')164	assert built.code == 0, built.err165	assert built.out.contains('zig-out/bin/koh3')166	fresh := os.join_path(dir, 'zig-out/bin/koh3')167	assert os.exists(fresh)168	version := os.read_file(os.join_path(dir, 'VERSION'))!.trim_space()169	assert os.execute('${q(fresh)} --version').output.trim_space() == 'koh ${version}'170}171172fn test_build_refuses_what_it_cannot_do() {173	dir := temp_repo('build_bad')174	defer { os.rmdir_all(dir) or {} }175	init_repo(dir)176	missing := run(dir, 'build')177	assert missing.code == 1178	assert missing.err.contains('koh.build')179180	write(dir, 'koh.build', 'command = true181output = out/demo182platforms = macos-aarch64183')184	no_version := run(dir, 'build')185	assert no_version.code == 1186	assert no_version.err.contains('VERSION')187188	write(dir, 'VERSION', '1.2.3\n')189	not_listed := run(dir, 'build', '--platform', 'linux-aarch64')190	assert not_listed.code == 1191	assert not_listed.err.contains('does not build for')192193	unknown := run(dir, 'build', '--platform', 'amiga')194	assert unknown.code == 1195	assert unknown.err.contains('amiga')196197	both := run(dir, 'build', '--all', '--platform', 'macos-aarch64')198	assert both.code == 2199	assert both.err.contains('cannot be combined')200201	write(dir, 'koh.build', 'command = true202output = out/demo203platforms = macos-aarch64, amiga204')205	bad_platform := run(dir, 'build')206	assert bad_platform.code == 1207	assert bad_platform.err.contains('amiga')208209	write(dir, 'koh.build', 'command = sh -c \'echo "no toolchain" >&2; exit 1\'210output = out/demo211platforms = ${this_platform()}212')213	failed := run(dir, 'build')214	assert failed.code == 1215	assert failed.err.contains('no toolchain')216}217218fn test_the_help_screen_lists_commands_and_no_flags() {219	dir := temp_repo('help')220	defer { os.rmdir_all(dir) or {} }221	help := run(dir, '--help')222	assert help.code == 0223	for name in ['save', 'checkpoint', 'status', 'log', 'diff', 'undo', 'revert', 'load', 'offer',224		'steal'] {225		assert help.out.contains('  ${name} '), name226	}227	assert help.out.contains('koh man <command>')228	// No flag text anywhere on the screen.229	assert !help.out.contains('--'), help.out230	for line in help.out.split_into_lines() {231		assert line.runes().len <= 80, line232	}233	// A bare `koh` keeps its stream and exit code; `-h` shows the same screen.234	bare := run(dir)235	assert bare.code == 2236	assert bare.out == ''237	assert bare.err.contains('koh man <command>')238	short := run(dir, '-h')239	assert short.code == 0240	assert short.out == help.out241}242243// Colour on the screen follows NO_COLOR, as it does everywhere else.244fn test_the_help_screen_has_no_colour_when_it_is_off() {245	dir := temp_repo('help_plain')246	defer { os.rmdir_all(dir) or {} }247	home := temp_repo('help_plain_home')248	defer { os.rmdir_all(home) or {} }249	out_path := os.join_path(os.temp_dir(), 'koh3-help-${os.getpid()}-${time.now().unix_nano()}')250	defer { os.rm(out_path) or {} }251	code := os.system('cd ${q(dir)} && HOME=${q(home)} NO_COLOR=1 ${q(binary)} --help > ${q(out_path)}')252	assert code == 0253	text := os.read_file(out_path) or { panic(err) }254	assert !text.contains('\x1b'), text255	assert text.contains('  save        snapshot your work')256}257258// The binary embeds VERSION while saves bump v.mod; they drifted once.259fn test_version_matches_the_manifest() {260	dir := temp_repo('version')261	defer { os.rmdir_all(dir) or {} }262	version := run(dir, '--version').out.trim_space().all_after('koh ')263	manifest := os.read_file(os.join_path(root, 'v.mod')) or { panic(err) }264	assert manifest.contains("version: '${version}'"), version265}266267fn test_save_checkpoint_and_status() {268	dir := temp_repo('save')269	defer { os.rmdir_all(dir) or {} }270	init_repo(dir)271	write(dir, 'tracked.txt', 'one\n')272	r := run(dir, 'save', 'first message', '--agent', 'agent-7', '--session', 'session-a', '--json')273	assert r.code == 0274	for key in ['id', 'parent', 'message', 'created_at', 'machine', 'is_checkpoint', 'agent', 'session',275		'files', 'size_bytes'] {276		read_json_has(r.out, key)277	}278	assert r.out.contains('"message":"first message"')279	assert r.out.contains('"agent":"agent-7"')280	assert r.out.contains('"session":"session-a"')281	assert r.out.contains('"is_checkpoint":false')282	assert run(dir, 'save', 'again').code == 1283	assert run(dir, 'save', 'again').err.contains('nothing has changed since the last save')284	assert run(dir, 'save').code == 2285	assert run(dir, 'save', 'x', '--bogus').code == 2286	cp := run(dir, 'checkpoint', 'still first', '--json')287	assert cp.code == 0288	assert cp.out.contains('"is_checkpoint":true')289	assert cp.out.contains('"parent":')290	clean := run(dir, 'status')291	assert clean.code == 0292	assert clean.out.contains('no changes')293	write(dir, 'tracked.txt', 'two\n')294	write(dir, 'new.txt', 'new\n')295	os.rm(os.join_path(dir, 'tracked.txt')) or { panic(err) }296	write(dir, '.kohignore', '*.log\n')297	status := run(dir, 'status')298	assert status.code == 0299	assert status.out.contains('+')300	assert status.out.contains('~') || status.out.contains('-')301	assert status.out.contains('added')302	js := run(dir, 'status', '--json')303	assert js.code == 0304	for key in ['head_id', 'head_msg', 'dirty', 'modified', 'added', 'deleted', 'ignore_changed',305		'saves', 'size_bytes', 'head_flagged'] {306		read_json_has(js.out, key)307	}308	assert js.out.contains('"ignore_changed":true')309	// What the shell prompt shows: saves on the line, the .koh size, the flag.310	assert js.out.contains('"saves":2')311	assert js.out.contains('"size_bytes":${os.file_size(os.join_path(dir, '.koh'))}')312	assert js.out.contains('"head_flagged":false')313	head := js.out.all_after('"head_id":"').all_before('"')314	assert run(dir, 'flag', head, '--reason', 'bad').code == 0315	assert run(dir, 'status', '--json').out.contains('"head_flagged":true')316}317318fn test_status_requires_repo_and_ignore_rules() {319	dir := temp_repo('status')320	defer { os.rmdir_all(dir) or {} }321	assert run(dir, 'status').code == 1322	init_repo(dir)323	write(dir, '.kohignore', '*.log\nbuild/\n')324	write(dir, 'keep.txt', 'keep\n')325	write(dir, 'ignored.log', 'ignore\n')326	write(dir, 'build/output.txt', 'ignore\n')327	assert run(dir, 'save', 'keep').code == 0328	assert run(dir, 'status').out.contains('no changes')329	assert !run(dir, 'status').out.contains('ignored.log')330	assert !run(dir, 'status').out.contains('build/output.txt')331	assert !run(dir, 'status').out.contains('LOG.md')332}333334// LOG.md is a convenience written after the save commits. If it cannot be335// written, the save still happened, and an agent that retried on a failure336// would only be told nothing had changed.337fn test_a_save_succeeds_when_log_md_cannot_be_written() {338	dir := temp_repo('logmd')339	defer { os.rmdir_all(dir) or {} }340	init_repo(dir)341	os.mkdir_all(os.join_path(dir, 'LOG.md')) or { panic(err) }342	write(dir, 'a.txt', 'one\n')343	r := run(dir, 'save', 'first', '--json')344	assert r.code == 0345	assert r.out.starts_with('{')346	assert r.err.contains('LOG.md')347	assert run(dir, 'log', '--json').out.contains('"message":"first"')348}349350// A folder of ignored files can sit where a restored file should go. Koh351// never touches ignored files, so the restore must stop and say so, not drop352// the file inside the folder under a temporary name.353fn test_a_restore_refuses_a_folder_of_ignored_files_in_the_way() {354	dir := temp_repo('dir-in-way')355	defer { os.rmdir_all(dir) or {} }356	init_repo(dir)357	write(dir, 'out', 'a file\n')358	first := run(dir, 'save', 'out is a file', '--json').out.all_after('"id":"')[..12]359	os.rm(os.join_path(dir, 'out')) or { panic(err) }360	write(dir, 'out/build.log', 'ignored\n')361	assert run(dir, 'save', 'out is gone').code == 0362	r := run(dir, 'load', first, '--yes')363	assert r.code == 1364	assert r.err.contains('out')365	assert os.ls(os.join_path(dir, 'out'))! == ['build.log']366}367368// Koh never follows a symlink, so a folder replaced by a link to somewhere369// else is not the repo's to write into: restoring through it would overwrite370// files outside the repo. The refusal comes before anything is recorded.371fn test_a_restore_never_writes_through_a_symlinked_folder() {372	dir := temp_repo('link-in-way')373	outside := temp_repo('link-target')374	defer {375		os.rmdir_all(dir) or {}376		os.rmdir_all(outside) or {}377	}378	init_repo(dir)379	write(dir, 'docs/a.md', 'saved\n')380	first := run(dir, 'save', 'docs', '--json').out.all_after('"id":"')[..12]381	os.rmdir_all(os.join_path(dir, 'docs')) or { panic(err) }382	write(outside, 'a.md', 'precious\n')383	os.symlink(outside, os.join_path(dir, 'docs')) or { panic(err) }384	assert run(dir, 'save', 'docs is a link now').code == 0385	head := run(dir, 'status', '--json').out386	r := run(dir, 'load', first, '--yes')387	assert r.code == 1388	assert r.err.contains('docs')389	assert os.read_file(os.join_path(outside, 'a.md'))! == 'precious\n'390	assert run(dir, 'status', '--json').out == head391}392393// A restore records its save first, then writes files. When the writing stops394// part way, the half-written tree is not somebody's work: saving it would395// record (and offer) a tree that undoes changes nobody asked to undo. Every396// command that would build on it points at revert, which finishes the job.397fn test_a_restore_cut_short_points_at_revert() {398	dir := temp_repo('cut-short')399	defer {400		os.chmod(os.join_path(dir, 'zz'), 0o755) or {}401		os.rmdir_all(dir) or {}402	}403	init_repo(dir)404	write(dir, 'zero', '0\n')405	assert run(dir, 'save', 'zero').code == 0406	write(dir, 'a.txt', 'v1\n')407	write(dir, 'zz/f', 'v1\n')408	assert run(dir, 'save', 'first').code == 0409	write(dir, 'a.txt', 'v2\n')410	write(dir, 'zz/f', 'v2\n')411	assert run(dir, 'save', 'second').code == 0412	// a.txt is written, then the read-only folder stops the restore: the413	// tree is genuinely half one save and half the other.414	os.chmod(os.join_path(dir, 'zz'), 0o555)!415	stopped := run(dir, 'undo', '--yes')416	assert stopped.code == 1417	assert stopped.err.contains('koh revert')418	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'v1\n'419	assert os.read_file(os.join_path(dir, 'zz/f'))! == 'v2\n'420	// Even a status that cannot read the tree says what happened.421	os.chmod(os.join_path(dir, 'zz'), 0o000)!422	assert run(dir, 'status').err.contains('koh revert')423	os.chmod(os.join_path(dir, 'zz'), 0o755)!424425	assert run(dir, 'status', '--json').out.contains('"restore_unfinished":true')426	for args in [['save', 'half'], ['checkpoint', 'half'], ['undo', '--yes']] {427		r := run(dir, ...args)428		assert r.code == 1429		assert r.err.contains('koh revert')430	}431	assert run(dir, 'revert', '--yes').code == 0432	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'v1\n'433	assert os.read_file(os.join_path(dir, 'zz/f'))! == 'v1\n'434	assert run(dir, 'status', '--json').out.contains('"restore_unfinished":false')435	write(dir, 'a.txt', 'v3\n')436	assert run(dir, 'save', 'carry on').code == 0437}438439// Doctor clears peek folders left from earlier days, never one somebody may440// be reading right now.441fn test_doctor_sweeps_only_old_peek_folders() {442	dir := temp_repo('peek-sweep')443	// V's temp_dir is /tmp on macOS whatever TMPDIR says, so these live in444	// the real temp directory under names no save could have.445	fresh := os.join_path(os.temp_dir(), 'koh-peek-fresh${os.getpid()}')446	old := os.join_path(os.temp_dir(), 'koh-peek-old${os.getpid()}')447	defer {448		os.rmdir_all(dir) or {}449		os.rmdir_all(fresh) or {}450		os.rmdir_all(old) or {}451	}452	init_repo(dir)453	write(dir, 'a.txt', 'one\n')454	assert run(dir, 'save', 'one').code == 0455	os.mkdir_all(fresh) or { panic(err) }456	os.mkdir_all(old) or { panic(err) }457	two_days_ago := time.now().unix() - 2 * 86400458	os.utime(old, two_days_ago, two_days_ago) or { panic(err) }459	assert run(dir, 'doctor', '--json').code == 0460	assert os.exists(fresh)461	assert !os.exists(old)462}463464// A file saved long ago and ignored since holds work no save has. Loading the465// old save must not write over it; the document says a restore never touches466// ignored files.467fn test_a_restore_never_overwrites_an_ignored_file() {468	dir := temp_repo('ignored-restore')469	defer { os.rmdir_all(dir) or {} }470	init_repo(dir)471	write(dir, '.env', 'KEY=saved long ago\n')472	first := run(dir, 'save', 'with env', '--json').out.all_after('"id":"')[..12]473	write(dir, '.kohignore', '.env\n')474	assert run(dir, 'save', 'ignore env').code == 0475	write(dir, '.env', 'KEY=never saved\n')476	assert run(dir, 'load', first, '--yes').code == 0477	assert os.read_file(os.join_path(dir, '.env'))! == 'KEY=never saved\n'478479	// Where the ignored file is missing, the restore still brings it back.480	other := temp_repo('ignored-restore-missing')481	defer { os.rmdir_all(other) or {} }482	init_repo(other)483	write(other, '.env', 'KEY=saved long ago\n')484	again := run(other, 'save', 'with env', '--json').out.all_after('"id":"')[..12]485	write(other, '.kohignore', '.env\n')486	assert run(other, 'save', 'ignore env').code == 0487	os.rm(os.join_path(other, '.env')) or { panic(err) }488	assert run(other, 'load', again, '--yes').code == 0489	assert os.read_file(os.join_path(other, '.env'))! == 'KEY=saved long ago\n'490}491492// A going-back preview lists paths only. Running diff(1) per file to draw it493// cost 27 s for 5,000 changed files, so it must not run diff at all.494fn test_a_going_back_preview_does_not_run_diff() {495	dir := temp_repo('preview-nodiff')496	home := temp_repo('preview-nodiff-home')497	defer {498		os.rmdir_all(dir) or {}499		os.rmdir_all(home) or {}500	}501	init_repo(dir)502	write(dir, 'a.txt', 'one\n')503	assert run_home(dir, home, 'save', 'one').code == 0504	write(dir, 'a.txt', 'two\n')505	assert run_home(dir, home, 'save', 'two').code == 0506	fake := os.join_path(home, 'bin')507	os.mkdir_all(fake) or { panic(err) }508	marker := os.join_path(home, 'diff-ran')509	os.write_file(os.join_path(fake, 'diff'), '#!/bin/sh\ntouch ${q(marker)}\nexit 2\n') or {510		panic(err)511	}512	os.chmod(os.join_path(fake, 'diff'), 0o755) or { panic(err) }513	assert run_home_with_path(dir, home, fake, 'undo', '--yes').code == 0514	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'515	assert !os.exists(marker)516}517518// A restore rewrites only what differs. Rewriting every file resets every519// mtime, so the next status has to hash the whole tree again.520fn test_a_restore_leaves_unchanged_files_alone() {521	dir := temp_repo('restore-skip')522	defer { os.rmdir_all(dir) or {} }523	init_repo(dir)524	write(dir, 'a.txt', 'one\n')525	write(dir, 'same.txt', 'never changes\n')526	assert run(dir, 'save', 'one').code == 0527	write(dir, 'a.txt', 'two\n')528	assert run(dir, 'save', 'two').code == 0529	long_ago := i64(1700000000)530	os.utime(os.join_path(dir, 'same.txt'), long_ago, long_ago) or { panic(err) }531	assert run(dir, 'undo', '--yes').code == 0532	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'533	assert os.file_last_mod_unix(os.join_path(dir, 'same.txt')) == long_ago534}535536// `save` records the executable bit, so `status` has to see it too, or a537// chmod would be invisible until it turned up in a save.538fn test_status_sees_an_executable_bit_change() {539	dir := temp_repo('chmod')540	defer { os.rmdir_all(dir) or {} }541	init_repo(dir)542	write(dir, 'run.sh', 'echo hi\n')543	assert run(dir, 'save', 'script').code == 0544	os.chmod(os.join_path(dir, 'run.sh'), 0o755) or { panic(err) }545	status := run(dir, 'status', '--json')546	assert status.out.contains('"dirty":true')547	assert status.out.contains('"modified":["run.sh"]')548}549550fn test_log_and_diff() {551	dir := temp_repo('history')552	defer { os.rmdir_all(dir) or {} }553	init_repo(dir)554	write(dir, 'a.txt', 'one\n')555	first := run(dir, 'save', 'one', '--session', 'alpha', '--json')556	id1 := first.out.all_after('"id":"')[..12]557	write(dir, 'a.txt', 'two\n')558	second := run(dir, 'save', 'two', '--session', 'beta', '--json')559	id2 := second.out.all_after('"id":"')[..12]560	cp := run(dir, 'checkpoint', 'checkpoint', '--json')561	assert cp.code == 0562	log := run(dir, 'log')563	assert log.code == 0564	assert log.out.contains('▸')565	assert log.out.contains('◐')566	lj := run(dir, 'log', '--json')567	assert lj.code == 0568	assert lj.out.contains('"head_id"')569	assert lj.out.contains('"saves"')570	assert run(dir, 'log', '--since', 'today').out.contains('two')571	session := run(dir, 'log', '--session', 'alpha')572	assert session.out.contains('one')573	assert !session.out.contains('two')574	write(dir, 'a.txt', 'three\n')575	d := run(dir, 'diff')576	assert d.code == 0577	assert d.out.contains('--- a/')578	assert d.out.contains('+++ b/')579	assert run(dir, 'diff', id1).code == 0580	assert run(dir, 'diff', id1, id2).code == 0581	dj := run(dir, 'diff', '--json')582	assert dj.code == 0583	assert dj.out.contains('"from"')584	assert dj.out.contains('"to"')585	assert dj.out.contains('"files"')586	assert dj.out.contains('"change":"modified"')587	assert run(dir, 'diff', 'not-a-real-id').code == 1588	assert run(dir, 'diff', id1, id2, 'third').code == 1589	write(dir, 'blob.bin', '\x00\x01\x02')590	diff_binary := run(dir, 'diff', '--json')591	assert diff_binary.out.contains('"binary":true')592	assert diff_binary.out.contains('Binary files differ')593}594595fn test_undo_revert_and_load() {596	dir := temp_repo('restore')597	defer { os.rmdir_all(dir) or {} }598	init_repo(dir)599	write(dir, 'a.txt', 'one\n')600	one := run(dir, 'save', 'one', '--json').out601	id1 := one.all_after('"id":"')[..12]602	write(dir, 'a.txt', 'two\n')603	write(dir, 'gone.txt', 'gone\n')604	second := run(dir, 'save', 'two', '--json').out605	id2 := second.all_after('"id":"')[..12]606	write(dir, 'a.txt', 'three\n')607	third := run(dir, 'save', 'three', '--json').out608	id3 := third.all_after('"id":"')[..12]609	// Unsaved work — here a file never saved — blocks every going-back but610	// revert, as in Koh 2: a restore must never overwrite what only the disk has.611	write(dir, 'never.txt', 'keep me\n')612	log_before := run(dir, 'log').out613	for args in [['undo', '--yes'], ['load', id1, '--yes'], ['pluck', id2, '--yes']] {614		blocked := run(dir, ...args)615		assert blocked.code == 1616		assert blocked.err.contains('unsaved changes')617	}618	assert run(dir, 'log').out == log_before619	os.rm(os.join_path(dir, 'never.txt')) or { panic(err) }620	write(dir, 'a.txt', 'edited, never saved\n')621	assert run(dir, 'undo', '--yes').err.contains('unsaved changes')622	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'edited, never saved\n'623	write(dir, 'a.txt', 'three\n')624	os.rm(os.join_path(dir, 'gone.txt')) or { panic(err) }625	assert run(dir, 'load', id1, '--yes').err.contains('unsaved changes')626	write(dir, 'gone.txt', 'gone\n')627	undo := run(dir, 'undo', '--yes', '--json')628	assert undo.code == 0629	if !undo.out.contains(id2) {630		panic('undo JSON did not name ${id2}: ${undo.out}')631	}632	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'633	assert os.exists(os.join_path(dir, 'gone.txt'))634	assert run(dir, 'load', id3, '--yes').code == 0635	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'three\n'636	assert run(dir, 'undo', '2', '--yes').code == 0637	assert run(dir, 'load', id2, '--yes').code == 0638	assert run(dir, 'undo', '99', '--yes').err.contains('nothing before')639	write(dir, 'a.txt', 'dirty\n')640	before := run(dir, 'log')641	refuse := run(dir, 'revert')642	assert refuse.code == 1643	assert refuse.err.contains('needs --yes when not interactive')644	assert run(dir, 'log').out == before.out645	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'dirty\n'646	write(dir, 'untracked.txt', 'remove\n')647	rv := run(dir, 'revert', '--yes', '--json')648	assert rv.code == 0649	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'650	assert !os.exists(os.join_path(dir, 'untracked.txt'))651	// The way back to the discarded work is named, not left to be found.652	kept := rv.out.all_after('"checkpoint":"')[..12]653	assert run(dir, 'load', kept, '--yes').code == 0654	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'dirty\n'655	assert os.read_file(os.join_path(dir, 'untracked.txt'))! == 'remove\n'656	write(dir, 'a.txt', 'dirty again\n')657	assert run(dir, 'revert', '--yes').out.contains('koh load ')658	assert run(dir, 'revert', '--yes').out.contains('working tree already matches')659	assert run(dir, 'load', '--checkpoint', '--yes').code == 0660	assert run(dir, 'load', id2, '--json').code == 1661	assert run(dir, 'load', id2, '--json').err.contains('error')662	assert run(dir, 'load').code == 2663	assert run(dir, 'load', 'unknown-id', '--yes').code == 1664}665666fn test_flag_and_flagged_log() {667	dir := temp_repo('flag')668	defer { os.rmdir_all(dir) or {} }669	init_repo(dir)670	write(dir, 'flag.txt', 'one\n')671	saved := run(dir, 'save', 'flag me', '--json')672	id := saved.out.all_after('"id":"')[..12]673	flagged := run(dir, 'flag', id, '--reason', 'unsafe', '--json')674	assert flagged.code == 0675	assert flagged.out.contains('"flagged":true')676	assert flagged.out.contains('"reason":"unsafe"')677	list := run(dir, 'flag', '--json')678	assert list.code == 0679	assert list.out.contains(id)680	assert list.out.contains('unsafe')681	assert run(dir, 'log').out.contains('⚑')682	assert run(dir, 'flag', '--clear', id).code == 0683	assert run(dir, 'flag').out.contains('nothing is flagged')684	assert run(dir, 'flag', 'unknown-id').code == 1685	assert run(dir, 'flag').code == 0686}687688fn test_pluck_forward_reverse_dry_run_and_conflict() {689	dir := temp_repo('pluck')690	defer { os.rmdir_all(dir) or {} }691	init_repo(dir)692	write(dir, 'a.txt', 'one\n')693	first := run(dir, 'save', 'one', '--json').out694	id1 := first.all_after('"id":"')[..12]695	write(dir, 'a.txt', 'two\n')696	second := run(dir, 'save', 'two', '--json').out697	id2 := second.all_after('"id":"')[..12]698	assert run(dir, 'load', id1, '--yes').code == 0699	dry := run(dir, 'pluck', id2, '--dry-run')700	assert dry.code == 0701	assert dry.out.contains('a.txt')702	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'703	assert run(dir, 'pluck', id2, '--yes').code == 0704	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'705	assert run(dir, 'pluck', '--reverse', id2, '--yes').code == 0706	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'707	write(dir, 'a.txt', 'different\n')708	assert run(dir, 'pluck', id2, '--dry-run').code == 1709	assert run(dir, 'save', 'different').code == 0710	conflict := run(dir, 'pluck', id2, '--yes')711	assert conflict.code == 1712	assert conflict.err.contains('a.txt')713	assert run(dir, 'pluck').code == 2714	assert run(dir, 'pluck', 'unknown-id').code == 1715}716717fn test_peek_and_doctor() {718	dir := temp_repo('peek-doctor')719	defer { os.rmdir_all(dir) or {} }720	init_repo(dir)721	write(dir, 'peek.txt', 'peek me\n')722	assert run(dir, 'save', 'peekable').code == 0723	id := run(dir, 'log', '--json').out.all_after('"id":"')[..12]724	before_log := run(dir, 'log', '--json').out725	peek := run(dir, 'peek', id, '--json')726	assert peek.code == 0727	peek_path := peek.out.all_after('"path":"').before('"')728	assert peek.out.contains('"id":"${id}"')729	assert os.read_file(os.join_path(peek_path, 'peek.txt'))! == 'peek me\n'730	assert run(dir, 'status').out.contains('no changes')731	assert run(dir, 'log', '--json').out == before_log732	assert run(dir, 'peek').code == 2733	assert run(dir, 'peek', 'unknown-id').code == 1734	backup := os.join_path(dir, 'doctor.backup')735	healthy := run(dir, 'doctor')736	assert healthy.code == 0737	assert healthy.out.contains('is sound')738	report := run(dir, 'doctor', '--json')739	assert report.code == 0740	for key in ['problems', 'objects', 'saves', 'checkpoints', 'cached_files', 'peek_folders_removed',741		'backup'] {742		read_json_has(report.out, key)743	}744	backed := run(dir, 'doctor', '--backup', backup)745	assert backed.code == 0746	assert os.exists(backup)747	assert backed.out.contains(backup)748	assert run(dir, 'doctor', '--backup', backup).code == 1749	assert run(dir, 'peek', id, '--json').code == 0750	// A peek made today is left for whoever is reading it.751	kept := run(dir, 'doctor', '--json')752	assert kept.code == 0753	assert os.exists(peek_path)754	os.rmdir_all(peek_path) or {}755}756757fn test_strip_refuses_without_terminal() {758	dir := temp_repo('strip')759	defer { os.rmdir_all(dir) or {} }760	init_repo(dir)761	write(dir, 'secret.txt', 'keep\n')762	assert run(dir, 'save', 'secret').code == 0763	before_log := run(dir, 'log', '--json').out764	refused := run(dir, 'strip', 'secret.txt')765	assert refused.code == 1766	assert refused.err.contains('needs a terminal')767	assert run(dir, 'log', '--json').out == before_log768	assert os.read_file(os.join_path(dir, 'secret.txt'))! == 'keep\n'769	assert run(dir, 'log', '--json').out.contains('secret')770}771772fn test_saves_and_checkpoints_aliases() {773	dir := temp_repo('aliases')774	defer { os.rmdir_all(dir) or {} }775	init_repo(dir)776	write(dir, 'alias.txt', 'one\n')777	assert run(dir, 'save', 'plain save').code == 0778	assert run(dir, 'checkpoint', 'checkpoint save').code == 0779	saves := run(dir, 'saves')780	assert saves.code == 0781	assert saves.out.contains('plain save')782	// The two lists never overlap, on a terminal or piped.783	assert !saves.out.contains('checkpoint save')784	checkpoints := run(dir, 'checkpoints')785	assert checkpoints.code == 0786	assert checkpoints.out.contains('checkpoint save')787	assert !checkpoints.out.contains('plain save')788	json_saves := run(dir, 'saves', '--json')789	assert json_saves.code == 0790	assert json_saves.out.contains('"is_checkpoint":false')791	assert !json_saves.out.contains('"is_checkpoint":true')792	json_result := run(dir, 'checkpoints', '--json')793	assert json_result.code == 0794	assert json_result.out.contains('"head_id"')795	assert json_result.out.contains('"saves"')796	assert json_result.out.contains('"is_checkpoint":true')797	assert !json_result.out.contains('"is_checkpoint":false')798	// `log` stays the whole line, checkpoints and all.799	assert run(dir, 'log').out.contains('checkpoint save')800}801802// Publishing refuses what it cannot do before it builds anything, and a real803// publish writes the layout §11.2 names. The command lines are checked first:804// a mistake there is a usage error, not a refusal.805fn test_offer_builds_refuses_bad_command_lines_and_a_dirty_tree() {806	dir := temp_repo('offer_builds')807	defer { os.rmdir_all(dir) or {} }808	init_repo(dir)809	home := temp_repo('offer_builds_home')810	defer { os.rmdir_all(home) or {} }811	name := os.base(dir)812	notes := 'a release note long enough to clear forty characters and the twelve word rule easily'813	assert run(dir, 'offer', '--notes', notes).code == 2814	assert run(dir, 'offer', '--notes', '').code == 2815	// A value-taking option with nothing after it is a usage error too.816	missing := run(dir, 'offer', '--notes')817	assert missing.code == 2818	assert missing.err.contains('needs a value')819	assert run(dir, 'offer', 'extra').code == 2820821	write(dir, 'VERSION', '1.2.3\n')822	write(dir, 'koh.build', 'command = mkdir -p out && printf x > out/demo-1.2.3-${this_platform()}823output = out/demo-{version}-{platform}824platforms = ${this_platform()}825')826	assert run(dir, 'save', 'first').code == 0827	remote := os.join_path(home, 'remote')828	assert run_home(dir, home, 'remote', 'folder', remote).code == 0829830	// A dirty tree cannot publish: the files must belong to a save.831	write(dir, 'extra.txt', 'unsaved\n')832	dirty := run_home(dir, home, 'offer', '--builds')833	assert dirty.code == 1834	assert dirty.err.contains('save or checkpoint first')835836	// Notes that say nothing are refused before anything is built or uploaded.837	assert run_home(dir, home, 'save', 'second').code == 0838	short := run_home(dir, home, 'offer', '--builds', '--notes', 'too short')839	assert short.code == 1840	assert short.err.contains('at least 40 characters')841	assert !os.exists(os.join_path(remote, name, 'releases'))842843	published := run_home(dir, home, 'offer', '--builds', '--notes', notes)844	assert published.code == 0, published.err845	artifact := 'demo-1.2.3-${this_platform()}'846	assert os.is_file(os.join_path(remote, name, 'releases/1.2.3/release.json'))847	assert os.is_file(os.join_path(remote, name, 'releases/1.2.3/${this_platform()}/${artifact}'))848	assert os.read_file(os.join_path(remote, name, 'releases/latest'))! == '1.2.3'849	record := os.read_file(os.join_path(remote, name, 'releases/1.2.3/release.json'))!850	assert record.contains('"notes":"${notes}"')851}852853fn test_remote_configuration_is_isolated_and_atomic() {854	dir := temp_repo('remote')855	home := temp_repo('remote-home')856	defer {857		os.rmdir_all(dir) or {}858		os.rmdir_all(home) or {}859	}860	empty := run_home(dir, home, 'remote', '--json')861	assert empty.code == 0862	assert empty.out.contains('"configured":false')863	target := os.join_path(home, 'remote-store')864	set := run_home(dir, home, 'remote', 'folder', target)865	assert set.code == 0866	assert os.is_dir(target)867	state := run_home(dir, home, 'remote', '--json')868	assert state.code == 0869	assert state.out.contains('"kind":"folder"')870	assert state.out.contains(target)871	assert run_home(dir, home, 'remote', 's3', 'http://127.0.0.1:1', 'bucket', 'region').code == 1872	assert run_home(dir, home, 'remote', '--json').out.contains(target)873	assert run_home(dir, home, 'remote', 's3', 'http://127.0.0.1:1', 'bucket', 'region').err.contains('KOH_ACCESS_KEY')874	assert run_home(dir, home, 'remote', '--forget').code == 0875	assert run_home(dir, home, 'remote', '--json').out.contains('"configured":false')876}877878// The files under ~/.config/koh can be written by hand instead of by879// `koh remote`, and are then read the same way.880fn test_remote_written_by_hand() {881	dir := temp_repo('remote-by-hand')882	home := temp_repo('remote-by-hand-home')883	defer {884		os.rmdir_all(dir) or {}885		os.rmdir_all(home) or {}886	}887	config := os.join_path(home, '.config', 'koh')888	os.mkdir_all(config) or { panic(err) }889	target := os.join_path(home, 'remote-store')890	os.mkdir_all(target) or { panic(err) }891	os.write_file(os.join_path(config, 'remote'), 'kind = folder\npath = ${target}\n') or {892		panic(err)893	}894	assert run_home(dir, home, 'init').code == 0895	os.write_file(os.join_path(dir, 'a.txt'), 'a\n') or { panic(err) }896	assert run_home(dir, home, 'save', 'first').code == 0897	offered := run_home(dir, home, 'offer', '--json')898	assert offered.code == 0899	assert offered.out.contains('"head"')900901	// Keys anyone else can read are refused before they are ever sent.902	os.write_file(os.join_path(config, 'remote'), 'kind=s3\nendpoint=http://127.0.0.1:1\nbucket=b\nregion=r\n') or {903		panic(err)904	}905	credentials := os.join_path(config, 'credentials')906	os.write_file(credentials, 'access_key=AK\nsecret_key=SK\n') or { panic(err) }907	os.chmod(credentials, 0o644) or { panic(err) }908	loose := run_home(dir, home, 'offer')909	assert loose.code == 1910	assert loose.err.contains('chmod 600')911912	// A setting koh cannot read is replaced by setting the remote again.913	os.write_file(os.join_path(config, 'remote'), 'kind=ftp\n') or { panic(err) }914	unreadable := run_home(dir, home, 'offer')915	assert unreadable.code == 1916	assert unreadable.err.contains('not readable')917	assert run_home(dir, home, 'remote', 'folder', target).code == 0918	assert run_home(dir, home, 'offer').code == 0919}920921// A clone belongs to the repo it was stolen from, whatever its folder is922// called later: renaming it must not start a second repo on the remote.923fn test_a_renamed_clone_keeps_offering_to_its_repo() {924	syncroot := temp_repo('rename-clone')925	home := temp_repo('rename-clone-home')926	defer {927		os.rmdir_all(syncroot) or {}928		os.rmdir_all(home) or {}929	}930	remote := os.join_path(syncroot, 'remote')931	a := os.join_path(syncroot, 'A', 'proj')932	b_parent := os.join_path(syncroot, 'B')933	os.mkdir_all(a) or { panic(err) }934	os.mkdir_all(b_parent) or { panic(err) }935	init_repo(a)936	write(a, 'a.txt', 'from A\n')937	assert run_home(a, home, 'remote', 'folder', remote).code == 0938	assert run_home(a, home, 'save', 'A first').code == 0939	assert run_home(b_parent, home, 'steal', 'proj').code == 0940	renamed := os.join_path(b_parent, 'renamed')941	os.mv(os.join_path(b_parent, 'proj'), renamed) or { panic(err) }942	write(renamed, 'b.txt', 'from B\n')943	assert run_home(renamed, home, 'save', 'B first').code == 0944	assert !os.exists(os.join_path(remote, 'renamed'))945	assert run_home(a, home, 'steal').code == 0946	assert os.read_file(os.join_path(a, 'b.txt'))! == 'from B\n'947}948949// A damaged object on the remote stops a clone, names the object, and leaves950// no half-made folder that would make the retry refuse.951fn test_clone_of_a_damaged_remote_leaves_nothing() {952	syncroot := temp_repo('damaged')953	home := temp_repo('damaged-home')954	defer {955		os.rmdir_all(syncroot) or {}956		os.rmdir_all(home) or {}957	}958	remote := os.join_path(syncroot, 'remote')959	a := os.join_path(syncroot, 'A', 'proj')960	b_parent := os.join_path(syncroot, 'B')961	os.mkdir_all(a) or { panic(err) }962	os.mkdir_all(b_parent) or { panic(err) }963	init_repo(a)964	write(a, 'a.txt', 'from A\n')965	assert run_home(a, home, 'remote', 'folder', remote).code == 0966	assert run_home(a, home, 'save', 'A first').code == 0967	objects := os.join_path(remote, 'proj', 'objects')968	for name in os.ls(objects) or { panic(err) } {969		os.chmod(os.join_path(objects, name), 0o644) or {}970		os.write_file(os.join_path(objects, name), 'junk') or { panic(err) }971	}972	clone := run_home(b_parent, home, 'steal', 'proj')973	assert clone.code == 1974	assert clone.err.contains('is damaged')975	assert !os.exists(os.join_path(b_parent, 'proj'))976}977978fn test_offer_steal_folder_remote() {979	syncroot := temp_repo('sync')980	home := temp_repo('sync-home')981	defer {982		os.rmdir_all(syncroot) or {}983		os.rmdir_all(home) or {}984	}985	remote := os.join_path(syncroot, 'remote')986	a := os.join_path(syncroot, 'A', 'proj')987	b_parent := os.join_path(syncroot, 'B')988	os.mkdir_all(a) or { panic(err) }989	os.mkdir_all(b_parent) or { panic(err) }990	init_repo(a)991	write(a, 'a.txt', 'from A\n')992	assert run_home(a, home, 'remote', 'folder', remote).code == 0993	assert run_home(a, home, 'save', 'A first').code == 0994	clone := run_home(b_parent, home, 'steal', 'proj')995	assert clone.code == 0996	b := os.join_path(b_parent, 'proj')997	assert os.read_file(os.join_path(b, 'a.txt'))! == 'from A\n'998	write(b, 'b.txt', 'from B\n')999	assert run_home(b, home, 'save', 'B first').code == 01000	write(a, 'a2.txt', 'second\n')1001	assert run_home(a, home, 'save', 'A second').code == 01002	assert run_home(a, home, 'steal').code == 01003	assert os.exists(os.join_path(a, 'b.txt'))1004	assert run_home(b_parent, home, 'steal', '--list').out.contains('proj')1005	write(a, 'clash.txt', 'base\n')1006	assert run_home(a, home, 'save', 'clash base').code == 01007	assert run_home(b, home, 'steal').code == 01008	write(a, 'clash.txt', 'A version\n')1009	assert run_home(a, home, 'save', 'A clash').code == 01010	write(b, 'clash.txt', 'B version\n')1011	assert run_home(b, home, 'save', 'B clash').code == 01012	refused := run_home(b, home, 'steal')1013	assert refused.code == 11014	assert refused.err.contains('--mine') || refused.err.contains('--theirs')1015	b_head := run_home(b, home, 'status', '--json').out.all_after('"head_id":"')[..12]1016	theirs := run_home(b, home, 'steal', '--theirs', '--json')1017	assert theirs.code == 01018	// The pre-combine tree is off the line now; the way back must be named,1019	// or an agent without the history view cannot find it.1020	assert theirs.out.contains('"previous_head":"${b_head}"')1021	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'A version\n'1022	assert run_home(b, home, 'load', b_head, '--yes').code == 01023	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'B version\n'1024	assert run_home(b, home, 'load', theirs.out.all_after('"head":"')[..12], '--yes').code == 01025	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'A version\n'1026	write(a, 'clash.txt', 'A second\n')1027	assert run_home(a, home, 'save', 'A second clash').code == 01028	write(b, 'clash.txt', 'B second\n')1029	assert run_home(b, home, 'save', 'B second clash').code == 01030	assert run_home(b, home, 'steal', '--mine').code == 01031	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'B second\n'1032	assert run_home(b, home, 'log').out.contains('combine: kept mine for')1033}10341035// A clone brings in the whole history, flags included; both output forms must1036// say which saves came in flagged, and why.1037fn test_a_clone_reports_flagged_saves() {1038	syncroot := temp_repo('clone-flags')1039	home := temp_repo('clone-flags-home')1040	defer {1041		os.rmdir_all(syncroot) or {}1042		os.rmdir_all(home) or {}1043	}1044	a := os.join_path(syncroot, 'A', 'proj')1045	os.mkdir_all(a) or { panic(err) }1046	init_repo(a)1047	assert run_home(a, home, 'remote', 'folder', os.join_path(syncroot, 'remote')).code == 01048	write(a, 'a.txt', 'one\n')1049	id := run_home(a, home, 'save', 'risky', '--json').out.all_after('"id":"')[..12]1050	assert run_home(a, home, 'flag', id, '--reason', 'broke the build').code == 01051	assert run_home(a, home, 'offer').code == 01052	for name in ['B', 'C'] {1053		os.mkdir_all(os.join_path(syncroot, name)) or { panic(err) }1054	}1055	json_clone := run_home(os.join_path(syncroot, 'B'), home, 'steal', 'proj', '--json')1056	assert json_clone.code == 01057	assert json_clone.out.contains('"flagged":["${id}"]')1058	text_clone := run_home(os.join_path(syncroot, 'C'), home, 'steal', 'proj')1059	assert text_clone.code == 01060	assert text_clone.out.contains('[${id}] came in flagged — broke the build')1061}10621063// A folder remote on a disk or share that is not mounted is simply not there.1064// Creating it would put the saves in a stand-in folder the other machine never1065// sees; the offer must say what is wrong instead.1066fn test_an_unmounted_folder_remote_is_not_recreated() {1067	syncroot := temp_repo('unmounted')1068	home := temp_repo('unmounted-home')1069	defer {1070		os.rmdir_all(syncroot) or {}1071		os.rmdir_all(home) or {}1072	}1073	mount := os.join_path(syncroot, 'nas')1074	remote := os.join_path(mount, 'koh')1075	a := os.join_path(syncroot, 'proj')1076	os.mkdir_all(a) or { panic(err) }1077	init_repo(a)1078	assert run_home(a, home, 'remote', 'folder', remote).code == 01079	write(a, 'a.txt', 'one\n')1080	assert run_home(a, home, 'save', 'first').code == 01081	os.rename(mount, os.join_path(syncroot, 'nas-unplugged')) or { panic(err) }1082	os.mkdir(mount) or { panic(err) }1083	offered := run_home(a, home, 'offer')1084	assert offered.code == 11085	assert offered.err.contains('mounted')1086	assert !os.exists(remote)1087	write(a, 'a.txt', 'two\n')1088	saved := run_home(a, home, 'save', 'second')1089	assert saved.code == 01090	assert saved.out.contains('mounted')1091	assert !os.exists(remote)1092}10931094fn test_man_and_koh2_handoff() {1095	dir := temp_repo('man')1096	home := temp_repo('man-home')1097	defer {1098		os.rmdir_all(dir) or {}1099		os.rmdir_all(home) or {}1100	}1101	whole := run_home(dir, home, 'man')1102	assert whole.code == 01103	assert whole.out.contains('NAME')1104	assert whole.out.contains('COMMANDS')1105	assert !whole.out.contains('\x1b') && !whole.out.contains('◆')1106	strip := run_home(dir, home, 'man', 'strip')1107	assert strip.code == 01108	assert strip.out.contains('strip')1109	assert !strip.out.contains('koh save ')1110	steal := run_home(dir, home, 'man', 'steal').out1111	assert steal.starts_with('    koh steal') && steal.contains('koh steal my-project')1112	assert run_home(dir, home, 'man', 'init').out.trim_space() == "koh init\n        Create `.koh` here, and a starter `.kohignore` if there isn't one."1113	assert run_home(dir, home, 'man', 'nonsense').code == 21114	legacy := temp_repo('legacy')1115	defer { os.rmdir_all(legacy) or {} }1116	os.mkdir_all(os.join_path(legacy, '.koh')) or { panic(err) }1117	fake := os.join_path(home, 'bin')1118	os.mkdir_all(fake) or { panic(err) }1119	fake_koh := os.join_path(fake, 'koh2')1120	os.write_file(fake_koh, '#!/bin/sh\nprintf "handoff:%s\\n" "$*"\nexit 7\n') or { panic(err) }1121	os.chmod(fake_koh, 0o755) or { panic(err) }1122	handoff := run_home_with_path(legacy, home, fake, 'status', '--json')1123	assert handoff.code == 71124	assert handoff.out.contains('handoff:status --json')1125	// One notice line, on stderr, so koh2's own output stays as it was.1126	assert handoff.err.contains('Koh 2 repo')1127	assert handoff.err.trim_space().split_into_lines().len == 11128	assert handoff.out.trim_space() == 'handoff:status --json'1129}11301131fn run_home_with_path(repo string, home string, bin_dir string, args ...string) Result {1132	stamp := '${os.getpid()}-${time.now().unix_nano()}'1133	base := os.join_path(os.temp_dir(), 'koh3-cli-${stamp}')1134	out_path := '${base}.out'1135	err_path := '${base}.err'1136	code_path := '${base}.code'1137	mut command := 'HOME=${q(home)} PATH=${q(bin_dir + ':' + os.getenv('PATH'))} ${q(binary)}'1138	for arg in args {1139		command += ' ${q(arg)}'1140	}1141	shell := 'cd ${q(repo)} && ${command} </dev/null >${q(out_path)} 2>${q(err_path)}; printf "%s" \$? >${q(code_path)}'1142	result := os.execute(shell)1143	if result.exit_code != 0 {1144		panic('could not run test command: ${result.output}')1145	}1146	code := os.read_file(code_path) or { panic(err) }1147	out := os.read_file(out_path) or { '' }1148	err := os.read_file(err_path) or { '' }1149	os.rm(out_path) or {}1150	os.rm(err_path) or {}1151	os.rm(code_path) or {}1152	return Result{1153		code: code.int()1154		out:  out1155		err:  err1156	}1157}11581159// --- migration -------------------------------------------------------------11601161fn koh2_binary() string {1162	return os.find_abs_path_of_executable('koh') or { '' }1163}11641165// run_koh2 runs the Koh 2 binary in a fixture; its own output is not under1166// test here.1167fn run_koh2(dir string, command string) {1168	os.execute('cd ${q(dir)} && ${command} >/dev/null 2>&1')1169}11701171fn save_ids(dir string) []string {1172	mut ids := []string{}1173	for name in os.ls(os.join_path(dir, '.koh', 'snapshots')) or { []string{} } {1174		if name.ends_with('.json') {1175			ids << name.trim_right('.json')1176		}1177	}1178	ids.sort()1179	return ids1180}11811182fn test_migrate_converts_a_koh2_repo_and_keeps_every_save() {1183	koh2 := koh2_binary()1184	if koh2 == '' {1185		println('skipping the migration tests: koh (Koh 2) is not on PATH')1186		return1187	}1188	dir := temp_repo('migrate')1189	defer { os.rmdir_all(dir) or {} }1190	home := temp_repo('migrate-home')1191	defer { os.rmdir_all(home) or {} }1192	run_koh2(dir, '${q(koh2)} init')1193	// One file large enough to be an object, one small enough to be inlined.1194	write(dir, 'code.txt', 'x'.repeat(700))1195	write(dir, 'tiny.txt', 'tiny\n')1196	run_koh2(dir, '${q(koh2)} save "first save"')1197	run_koh2(dir, '${q(koh2)} checkpoint "before something"')1198	write(dir, 'code.txt', 'y'.repeat(700))1199	run_koh2(dir, '${q(koh2)} save "second save"')1200	original := save_ids(dir)1201	assert original.len == 312021203	report := run_home(dir, home, 'migrate')1204	assert report.code == 01205	assert report.out.contains('migrated 3 saves')1206	// The swap: `.koh` is a file, the old data is archived, nothing is staging.1207	assert os.is_file(os.join_path(dir, '.koh'))1208	assert os.is_dir(os.join_path(dir, '.koh-v2'))1209	assert os.is_file(os.join_path(dir, '.kohignore'))1210	assert !os.exists(os.join_path(dir, '.koh-migrate'))12111212	// Every save kept its original ID, and the new repo is sound.1213	logged := run_home(dir, home, 'log', '--json')1214	assert logged.code == 01215	for id in original {1216		assert logged.out.contains(id)1217	}1218	assert run_home(dir, home, 'doctor').code == 01219	assert run_home(dir, home, 'status').code == 012201221	// Migrating again has nothing to convert.1222	assert run_home(dir, home, 'migrate').code == 11223}12241225fn test_migrate_refuses_a_tree_that_does_not_match_the_last_save() {1226	koh2 := koh2_binary()1227	if koh2 == '' {1228		return1229	}1230	dir := temp_repo('migrate-dirty')1231	defer { os.rmdir_all(dir) or {} }1232	home := temp_repo('migrate-dirty-home')1233	defer { os.rmdir_all(home) or {} }1234	run_koh2(dir, '${q(koh2)} init')1235	write(dir, 'code.txt', 'x'.repeat(700))1236	run_koh2(dir, '${q(koh2)} save "only save"')1237	write(dir, 'code.txt', 'unsaved change\n')12381239	refused := run_home(dir, home, 'migrate')1240	assert refused.code == 11241	assert refused.err.contains('save with koh2 first')1242	// Nothing moved: still Koh 2, no archive, no staging file.1243	assert os.is_dir(os.join_path(dir, '.koh'))1244	assert !os.exists(os.join_path(dir, '.koh-v2'))1245	assert !os.exists(os.join_path(dir, '.koh-migrate'))1246}12471248// Koh 2 never saved a root `.kohconfig`, root `.kohignore.<remote>` rules or1249// `*.bundle` files, so a clean Koh 2 repo may hold them. Most real repos have1250// a `.kohconfig`; migrate must not call them unsaved work.1251fn test_migrate_passes_over_the_files_koh2_never_saved() {1252	koh2 := koh2_binary()1253	if koh2 == '' {1254		return1255	}1256	dir := temp_repo('migrate-koh2-ignores')1257	defer { os.rmdir_all(dir) or {} }1258	home := temp_repo('migrate-koh2-ignores-home')1259	defer { os.rmdir_all(home) or {} }1260	run_koh2(dir, '${q(koh2)} init')1261	write(dir, 'code.txt', 'x'.repeat(700))1262	run_koh2(dir, '${q(koh2)} save "only save"')1263	write(dir, '.kohconfig', 'stable_days = 14\n')1264	write(dir, '.kohignore.public', 'private/\n')1265	write(dir, 'lib/app.bundle', 'bundle\n')1266	write(dir, 'ios/Settings.bundle/Root.plist', 'settings\n')1267	// Koh 2 keeps saving a file under a folder pattern added later, where1268	// Koh 3 reads the same rule as covering the folder: the saved file is on1269	// disk and matches, so the tree is clean.1270	write(dir, 'native/t.dSYM/Info.plist', 'plist\n')1271	run_koh2(dir, '${q(koh2)} save --agent test --session test "add the dsym"')1272	// Koh 2 skips *.bundle even when its rules no longer list it.1273	ignore_path := os.join_path(dir, '.koh', 'ignore')1274	rules := os.read_file(ignore_path)!.split_into_lines().filter(it != '*.bundle')1275	os.write_file(ignore_path, rules.join('\n') + '\nnative/*.dSYM\n')!1276	// A saved file the walk skips still has to match what was saved.1277	write(dir, 'native/t.dSYM/Info.plist', 'changed\n')1278	changed := run_home(dir, home, 'migrate')1279	assert changed.code == 11280	assert changed.err.contains('native/t.dSYM/Info.plist does not match')1281	write(dir, 'native/t.dSYM/Info.plist', 'plist\n')1282	assert os.execute('cd ${q(dir)} && ${q(koh2)} status --json').output.contains('"dirty":false')12831284	migrated := run_home(dir, home, 'migrate')1285	assert migrated.code == 0, migrated.err1286	// They stay where they were, for the user to keep or delete.1287	assert os.read_file(os.join_path(dir, '.kohconfig'))! == 'stable_days = 14\n'1288}