cli_test.v

1module tests23import os4import time56const root = @VMODROOT7const binary = os.join_path(root, 'build', 'koh3')89struct Result {10mut:11	code int12	out  string13	err  string14}1516fn testsuite_begin() {17	os.mkdir_all(os.join_path(root, 'build')) or { panic(err) }18	build := os.execute('v -o ${q(binary)} ${q(os.join_path(root, 'src', 'koh3.v'))}')19	if build.exit_code != 0 {20		panic('could not build koh3: ${build.output}')21	}22}2324fn q(s string) string {25	return "'${s.replace("'", "'\\''")}'"26}2728fn temp_repo(name string) string {29	dir := os.join_path(os.temp_dir(), 'koh3-cli-${name}-${time.now().unix_nano()}')30	os.mkdir_all(dir) or { panic(err) }31	return dir32}3334fn run(repo string, args ...string) Result {35	home := temp_repo('home')36	defer { os.rmdir_all(home) or {} }37	return run_home(repo, home, ...args)38}3940fn run_home(repo string, home string, args ...string) Result {41	stamp := '${os.getpid()}-${time.now().unix_nano()}'42	base := os.join_path(os.temp_dir(), 'koh3-cli-${stamp}')43	out_path := '${base}.out'44	err_path := '${base}.err'45	code_path := '${base}.code'46	mut command := 'HOME=${q(home)} ${q(binary)}'47	for arg in args {48		command += ' ${q(arg)}'49	}50	shell := 'cd ${q(repo)} && ${command} </dev/null >${q(out_path)} 2>${q(err_path)}; printf "%s" \$? >${q(code_path)}'51	result := os.execute(shell)52	if result.exit_code != 0 {53		panic('could not run test command: ${result.output}')54	}55	code := os.read_file(code_path) or { panic(err) }56	out := os.read_file(out_path) or { '' }57	err := os.read_file(err_path) or { '' }58	os.rm(out_path) or {}59	os.rm(err_path) or {}60	os.rm(code_path) or {}61	return Result{62		code: code.int()63		out:  out64		err:  err65	}66}6768fn init_repo(repo string) {69	r := run(repo, 'init')70	assert r.code == 071	assert os.exists(os.join_path(repo, '.koh'))72	assert os.exists(os.join_path(repo, '.kohignore'))73}7475fn write(repo string, path string, text string) {76	full := os.join_path(repo, path)77	os.mkdir_all(os.dir(full)) or { panic(err) }78	os.write_file(full, text) or { panic(err) }79}8081fn read_json_has(text string, key string) {82	if !text.contains(key) {83		panic('missing JSON key ${key}: ${text}')84	}85}8687fn test_init_and_usage() {88	dir := temp_repo('init')89	defer { os.rmdir_all(dir) or {} }90	r := run(dir, 'init', '--json')91	assert r.code == 092	read_json_has(r.out, 'repo')93	read_json_has(r.out, 'ignore_created')94	assert run(dir, 'init').code == 195	assert run(dir, 'unknown-command').code == 296	assert run(dir, 'unknown-command').err.contains('unknown command')97	// An agent asking for JSON gets JSON for a usage mistake too, exit 2.98	for args in [['unknown-command', '--json'], ['save', '--json'], ['save', 'x', '--nope', '--json']] {99		r2 := run(dir, ...args)100		assert r2.code == 2101		assert r2.out == ''102		assert r2.err.starts_with('{"error":'), r2.err103	}104}105106fn test_save_checkpoint_and_status() {107	dir := temp_repo('save')108	defer { os.rmdir_all(dir) or {} }109	init_repo(dir)110	write(dir, 'tracked.txt', 'one\n')111	r := run(dir, 'save', 'first message', '--agent', 'agent-7', '--session', 'session-a', '--json')112	assert r.code == 0113	for key in ['id', 'parent', 'message', 'created_at', 'machine', 'is_checkpoint', 'agent', 'session',114		'files', 'size_bytes'] {115		read_json_has(r.out, key)116	}117	assert r.out.contains('"message":"first message"')118	assert r.out.contains('"agent":"agent-7"')119	assert r.out.contains('"session":"session-a"')120	assert r.out.contains('"is_checkpoint":false')121	assert run(dir, 'save', 'again').code == 1122	assert run(dir, 'save', 'again').err.contains('nothing has changed since the last save')123	assert run(dir, 'save').code == 2124	assert run(dir, 'save', 'x', '--bogus').code == 2125	cp := run(dir, 'checkpoint', 'still first', '--json')126	assert cp.code == 0127	assert cp.out.contains('"is_checkpoint":true')128	assert cp.out.contains('"parent":')129	clean := run(dir, 'status')130	assert clean.code == 0131	assert clean.out.contains('no changes')132	write(dir, 'tracked.txt', 'two\n')133	write(dir, 'new.txt', 'new\n')134	os.rm(os.join_path(dir, 'tracked.txt')) or { panic(err) }135	write(dir, '.kohignore', '*.log\n')136	status := run(dir, 'status')137	assert status.code == 0138	assert status.out.contains('+')139	assert status.out.contains('~') || status.out.contains('-')140	assert status.out.contains('added')141	js := run(dir, 'status', '--json')142	assert js.code == 0143	for key in ['head_id', 'head_msg', 'dirty', 'modified', 'added', 'deleted', 'ignore_changed'] {144		read_json_has(js.out, key)145	}146	assert js.out.contains('"ignore_changed":true')147}148149fn test_status_requires_repo_and_ignore_rules() {150	dir := temp_repo('status')151	defer { os.rmdir_all(dir) or {} }152	assert run(dir, 'status').code == 1153	init_repo(dir)154	write(dir, '.kohignore', '*.log\nbuild/\n')155	write(dir, 'keep.txt', 'keep\n')156	write(dir, 'ignored.log', 'ignore\n')157	write(dir, 'build/output.txt', 'ignore\n')158	assert run(dir, 'save', 'keep').code == 0159	assert run(dir, 'status').out.contains('no changes')160	assert !run(dir, 'status').out.contains('ignored.log')161	assert !run(dir, 'status').out.contains('build/output.txt')162	assert !run(dir, 'status').out.contains('LOG.md')163}164165// LOG.md is a convenience written after the save commits. If it cannot be166// written, the save still happened, and an agent that retried on a failure167// would only be told nothing had changed.168fn test_a_save_succeeds_when_log_md_cannot_be_written() {169	dir := temp_repo('logmd')170	defer { os.rmdir_all(dir) or {} }171	init_repo(dir)172	os.mkdir_all(os.join_path(dir, 'LOG.md')) or { panic(err) }173	write(dir, 'a.txt', 'one\n')174	r := run(dir, 'save', 'first', '--json')175	assert r.code == 0176	assert r.out.starts_with('{')177	assert r.err.contains('LOG.md')178	assert run(dir, 'log', '--json').out.contains('"message":"first"')179}180181// A folder of ignored files can sit where a restored file should go. Koh182// never touches ignored files, so the restore must stop and say so, not drop183// the file inside the folder under a temporary name.184fn test_a_restore_refuses_a_folder_of_ignored_files_in_the_way() {185	dir := temp_repo('dir-in-way')186	defer { os.rmdir_all(dir) or {} }187	init_repo(dir)188	write(dir, 'out', 'a file\n')189	first := run(dir, 'save', 'out is a file', '--json').out.all_after('"id":"')[..12]190	os.rm(os.join_path(dir, 'out')) or { panic(err) }191	write(dir, 'out/build.log', 'ignored\n')192	assert run(dir, 'save', 'out is gone').code == 0193	r := run(dir, 'load', first, '--yes')194	assert r.code == 1195	assert r.err.contains('out')196	assert os.ls(os.join_path(dir, 'out'))! == ['build.log']197}198199// Koh never follows a symlink, so a folder replaced by a link to somewhere200// else is not the repo's to write into: restoring through it would overwrite201// files outside the repo. The refusal comes before anything is recorded.202fn test_a_restore_never_writes_through_a_symlinked_folder() {203	dir := temp_repo('link-in-way')204	outside := temp_repo('link-target')205	defer {206		os.rmdir_all(dir) or {}207		os.rmdir_all(outside) or {}208	}209	init_repo(dir)210	write(dir, 'docs/a.md', 'saved\n')211	first := run(dir, 'save', 'docs', '--json').out.all_after('"id":"')[..12]212	os.rmdir_all(os.join_path(dir, 'docs')) or { panic(err) }213	write(outside, 'a.md', 'precious\n')214	os.symlink(outside, os.join_path(dir, 'docs')) or { panic(err) }215	assert run(dir, 'save', 'docs is a link now').code == 0216	head := run(dir, 'status', '--json').out217	r := run(dir, 'load', first, '--yes')218	assert r.code == 1219	assert r.err.contains('docs')220	assert os.read_file(os.join_path(outside, 'a.md'))! == 'precious\n'221	assert run(dir, 'status', '--json').out == head222}223224// A restore records its save first, then writes files. When the writing stops225// part way, the half-written tree is not somebody's work: saving it would226// record (and offer) a tree that undoes changes nobody asked to undo. Every227// command that would build on it points at revert, which finishes the job.228fn test_a_restore_cut_short_points_at_revert() {229	dir := temp_repo('cut-short')230	defer {231		os.chmod(os.join_path(dir, 'zz'), 0o755) or {}232		os.rmdir_all(dir) or {}233	}234	init_repo(dir)235	write(dir, 'zero', '0\n')236	assert run(dir, 'save', 'zero').code == 0237	write(dir, 'a.txt', 'v1\n')238	write(dir, 'zz/f', 'v1\n')239	assert run(dir, 'save', 'first').code == 0240	write(dir, 'a.txt', 'v2\n')241	write(dir, 'zz/f', 'v2\n')242	assert run(dir, 'save', 'second').code == 0243	// a.txt is written, then the read-only folder stops the restore: the244	// tree is genuinely half one save and half the other.245	os.chmod(os.join_path(dir, 'zz'), 0o555)!246	stopped := run(dir, 'undo', '--yes')247	assert stopped.code == 1248	assert stopped.err.contains('koh revert')249	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'v1\n'250	assert os.read_file(os.join_path(dir, 'zz/f'))! == 'v2\n'251	// Even a status that cannot read the tree says what happened.252	os.chmod(os.join_path(dir, 'zz'), 0o000)!253	assert run(dir, 'status').err.contains('koh revert')254	os.chmod(os.join_path(dir, 'zz'), 0o755)!255256	assert run(dir, 'status', '--json').out.contains('"restore_unfinished":true')257	for args in [['save', 'half'], ['checkpoint', 'half'], ['undo', '--yes']] {258		r := run(dir, ...args)259		assert r.code == 1260		assert r.err.contains('koh revert')261	}262	assert run(dir, 'revert', '--yes').code == 0263	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'v1\n'264	assert os.read_file(os.join_path(dir, 'zz/f'))! == 'v1\n'265	assert run(dir, 'status', '--json').out.contains('"restore_unfinished":false')266	write(dir, 'a.txt', 'v3\n')267	assert run(dir, 'save', 'carry on').code == 0268}269270// Doctor clears peek folders left from earlier days, never one somebody may271// be reading right now.272fn test_doctor_sweeps_only_old_peek_folders() {273	dir := temp_repo('peek-sweep')274	// V's temp_dir is /tmp on macOS whatever TMPDIR says, so these live in275	// the real temp directory under names no save could have.276	fresh := os.join_path(os.temp_dir(), 'koh-peek-fresh${os.getpid()}')277	old := os.join_path(os.temp_dir(), 'koh-peek-old${os.getpid()}')278	defer {279		os.rmdir_all(dir) or {}280		os.rmdir_all(fresh) or {}281		os.rmdir_all(old) or {}282	}283	init_repo(dir)284	write(dir, 'a.txt', 'one\n')285	assert run(dir, 'save', 'one').code == 0286	os.mkdir_all(fresh) or { panic(err) }287	os.mkdir_all(old) or { panic(err) }288	two_days_ago := time.now().unix() - 2 * 86400289	os.utime(old, two_days_ago, two_days_ago) or { panic(err) }290	assert run(dir, 'doctor', '--json').code == 0291	assert os.exists(fresh)292	assert !os.exists(old)293}294295// A file saved long ago and ignored since holds work no save has. Loading the296// old save must not write over it; the document says a restore never touches297// ignored files.298fn test_a_restore_never_overwrites_an_ignored_file() {299	dir := temp_repo('ignored-restore')300	defer { os.rmdir_all(dir) or {} }301	init_repo(dir)302	write(dir, '.env', 'KEY=saved long ago\n')303	first := run(dir, 'save', 'with env', '--json').out.all_after('"id":"')[..12]304	write(dir, '.kohignore', '.env\n')305	assert run(dir, 'save', 'ignore env').code == 0306	write(dir, '.env', 'KEY=never saved\n')307	assert run(dir, 'load', first, '--yes').code == 0308	assert os.read_file(os.join_path(dir, '.env'))! == 'KEY=never saved\n'309310	// Where the ignored file is missing, the restore still brings it back.311	other := temp_repo('ignored-restore-missing')312	defer { os.rmdir_all(other) or {} }313	init_repo(other)314	write(other, '.env', 'KEY=saved long ago\n')315	again := run(other, 'save', 'with env', '--json').out.all_after('"id":"')[..12]316	write(other, '.kohignore', '.env\n')317	assert run(other, 'save', 'ignore env').code == 0318	os.rm(os.join_path(other, '.env')) or { panic(err) }319	assert run(other, 'load', again, '--yes').code == 0320	assert os.read_file(os.join_path(other, '.env'))! == 'KEY=saved long ago\n'321}322323// A going-back preview lists paths only. Running diff(1) per file to draw it324// cost 27 s for 5,000 changed files, so it must not run diff at all.325fn test_a_going_back_preview_does_not_run_diff() {326	dir := temp_repo('preview-nodiff')327	home := temp_repo('preview-nodiff-home')328	defer {329		os.rmdir_all(dir) or {}330		os.rmdir_all(home) or {}331	}332	init_repo(dir)333	write(dir, 'a.txt', 'one\n')334	assert run_home(dir, home, 'save', 'one').code == 0335	write(dir, 'a.txt', 'two\n')336	assert run_home(dir, home, 'save', 'two').code == 0337	fake := os.join_path(home, 'bin')338	os.mkdir_all(fake) or { panic(err) }339	marker := os.join_path(home, 'diff-ran')340	os.write_file(os.join_path(fake, 'diff'), '#!/bin/sh\ntouch ${q(marker)}\nexit 2\n') or {341		panic(err)342	}343	os.chmod(os.join_path(fake, 'diff'), 0o755) or { panic(err) }344	assert run_home_with_path(dir, home, fake, 'undo', '--yes').code == 0345	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'346	assert !os.exists(marker)347}348349// A restore rewrites only what differs. Rewriting every file resets every350// mtime, so the next status has to hash the whole tree again.351fn test_a_restore_leaves_unchanged_files_alone() {352	dir := temp_repo('restore-skip')353	defer { os.rmdir_all(dir) or {} }354	init_repo(dir)355	write(dir, 'a.txt', 'one\n')356	write(dir, 'same.txt', 'never changes\n')357	assert run(dir, 'save', 'one').code == 0358	write(dir, 'a.txt', 'two\n')359	assert run(dir, 'save', 'two').code == 0360	long_ago := i64(1700000000)361	os.utime(os.join_path(dir, 'same.txt'), long_ago, long_ago) or { panic(err) }362	assert run(dir, 'undo', '--yes').code == 0363	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'364	assert os.file_last_mod_unix(os.join_path(dir, 'same.txt')) == long_ago365}366367// `save` records the executable bit, so `status` has to see it too, or a368// chmod would be invisible until it turned up in a save.369fn test_status_sees_an_executable_bit_change() {370	dir := temp_repo('chmod')371	defer { os.rmdir_all(dir) or {} }372	init_repo(dir)373	write(dir, 'run.sh', 'echo hi\n')374	assert run(dir, 'save', 'script').code == 0375	os.chmod(os.join_path(dir, 'run.sh'), 0o755) or { panic(err) }376	status := run(dir, 'status', '--json')377	assert status.out.contains('"dirty":true')378	assert status.out.contains('"modified":["run.sh"]')379}380381fn test_log_and_diff() {382	dir := temp_repo('history')383	defer { os.rmdir_all(dir) or {} }384	init_repo(dir)385	write(dir, 'a.txt', 'one\n')386	first := run(dir, 'save', 'one', '--session', 'alpha', '--json')387	id1 := first.out.all_after('"id":"')[..12]388	write(dir, 'a.txt', 'two\n')389	second := run(dir, 'save', 'two', '--session', 'beta', '--json')390	id2 := second.out.all_after('"id":"')[..12]391	cp := run(dir, 'checkpoint', 'checkpoint', '--json')392	assert cp.code == 0393	log := run(dir, 'log')394	assert log.code == 0395	assert log.out.contains('▸')396	assert log.out.contains('◐')397	lj := run(dir, 'log', '--json')398	assert lj.code == 0399	assert lj.out.contains('"head_id"')400	assert lj.out.contains('"saves"')401	assert run(dir, 'log', '--since', 'today').out.contains('two')402	session := run(dir, 'log', '--session', 'alpha')403	assert session.out.contains('one')404	assert !session.out.contains('two')405	write(dir, 'a.txt', 'three\n')406	d := run(dir, 'diff')407	assert d.code == 0408	assert d.out.contains('--- a/')409	assert d.out.contains('+++ b/')410	assert run(dir, 'diff', id1).code == 0411	assert run(dir, 'diff', id1, id2).code == 0412	dj := run(dir, 'diff', '--json')413	assert dj.code == 0414	assert dj.out.contains('"from"')415	assert dj.out.contains('"to"')416	assert dj.out.contains('"files"')417	assert dj.out.contains('"change":"modified"')418	assert run(dir, 'diff', 'not-a-real-id').code == 1419	assert run(dir, 'diff', id1, id2, 'third').code == 1420	write(dir, 'blob.bin', '\x00\x01\x02')421	diff_binary := run(dir, 'diff', '--json')422	assert diff_binary.out.contains('"binary":true')423	assert diff_binary.out.contains('Binary files differ')424}425426fn test_undo_revert_and_load() {427	dir := temp_repo('restore')428	defer { os.rmdir_all(dir) or {} }429	init_repo(dir)430	write(dir, 'a.txt', 'one\n')431	one := run(dir, 'save', 'one', '--json').out432	id1 := one.all_after('"id":"')[..12]433	write(dir, 'a.txt', 'two\n')434	write(dir, 'gone.txt', 'gone\n')435	second := run(dir, 'save', 'two', '--json').out436	id2 := second.all_after('"id":"')[..12]437	write(dir, 'a.txt', 'three\n')438	third := run(dir, 'save', 'three', '--json').out439	id3 := third.all_after('"id":"')[..12]440	// Unsaved work — here a file never saved — blocks every going-back but441	// revert, as in Koh 2: a restore must never overwrite what only the disk has.442	write(dir, 'never.txt', 'keep me\n')443	log_before := run(dir, 'log').out444	for args in [['undo', '--yes'], ['load', id1, '--yes'], ['pluck', id2, '--yes']] {445		blocked := run(dir, ...args)446		assert blocked.code == 1447		assert blocked.err.contains('unsaved changes')448	}449	assert run(dir, 'log').out == log_before450	os.rm(os.join_path(dir, 'never.txt')) or { panic(err) }451	write(dir, 'a.txt', 'edited, never saved\n')452	assert run(dir, 'undo', '--yes').err.contains('unsaved changes')453	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'edited, never saved\n'454	write(dir, 'a.txt', 'three\n')455	os.rm(os.join_path(dir, 'gone.txt')) or { panic(err) }456	assert run(dir, 'load', id1, '--yes').err.contains('unsaved changes')457	write(dir, 'gone.txt', 'gone\n')458	undo := run(dir, 'undo', '--yes', '--json')459	assert undo.code == 0460	if !undo.out.contains(id2) {461		panic('undo JSON did not name ${id2}: ${undo.out}')462	}463	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'464	assert os.exists(os.join_path(dir, 'gone.txt'))465	assert run(dir, 'load', id3, '--yes').code == 0466	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'three\n'467	assert run(dir, 'undo', '2', '--yes').code == 0468	assert run(dir, 'load', id2, '--yes').code == 0469	assert run(dir, 'undo', '99', '--yes').err.contains('nothing before')470	write(dir, 'a.txt', 'dirty\n')471	before := run(dir, 'log')472	refuse := run(dir, 'revert')473	assert refuse.code == 1474	assert refuse.err.contains('needs --yes when not interactive')475	assert run(dir, 'log').out == before.out476	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'dirty\n'477	write(dir, 'untracked.txt', 'remove\n')478	rv := run(dir, 'revert', '--yes', '--json')479	assert rv.code == 0480	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'481	assert !os.exists(os.join_path(dir, 'untracked.txt'))482	// The way back to the discarded work is named, not left to be found.483	kept := rv.out.all_after('"checkpoint":"')[..12]484	assert run(dir, 'load', kept, '--yes').code == 0485	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'dirty\n'486	assert os.read_file(os.join_path(dir, 'untracked.txt'))! == 'remove\n'487	write(dir, 'a.txt', 'dirty again\n')488	assert run(dir, 'revert', '--yes').out.contains('koh load ')489	assert run(dir, 'revert', '--yes').out.contains('working tree already matches')490	assert run(dir, 'load', '--checkpoint', '--yes').code == 0491	assert run(dir, 'load', id2, '--json').code == 1492	assert run(dir, 'load', id2, '--json').err.contains('error')493	assert run(dir, 'load').code == 2494	assert run(dir, 'load', 'unknown-id', '--yes').code == 1495}496497fn test_flag_and_flagged_log() {498	dir := temp_repo('flag')499	defer { os.rmdir_all(dir) or {} }500	init_repo(dir)501	write(dir, 'flag.txt', 'one\n')502	saved := run(dir, 'save', 'flag me', '--json')503	id := saved.out.all_after('"id":"')[..12]504	flagged := run(dir, 'flag', id, '--reason', 'unsafe', '--json')505	assert flagged.code == 0506	assert flagged.out.contains('"flagged":true')507	assert flagged.out.contains('"reason":"unsafe"')508	list := run(dir, 'flag', '--json')509	assert list.code == 0510	assert list.out.contains(id)511	assert list.out.contains('unsafe')512	assert run(dir, 'log').out.contains('⚑')513	assert run(dir, 'flag', '--clear', id).code == 0514	assert run(dir, 'flag').out.contains('nothing is flagged')515	assert run(dir, 'flag', 'unknown-id').code == 1516	assert run(dir, 'flag').code == 0517}518519fn test_pluck_forward_reverse_dry_run_and_conflict() {520	dir := temp_repo('pluck')521	defer { os.rmdir_all(dir) or {} }522	init_repo(dir)523	write(dir, 'a.txt', 'one\n')524	first := run(dir, 'save', 'one', '--json').out525	id1 := first.all_after('"id":"')[..12]526	write(dir, 'a.txt', 'two\n')527	second := run(dir, 'save', 'two', '--json').out528	id2 := second.all_after('"id":"')[..12]529	assert run(dir, 'load', id1, '--yes').code == 0530	dry := run(dir, 'pluck', id2, '--dry-run')531	assert dry.code == 0532	assert dry.out.contains('a.txt')533	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'534	assert run(dir, 'pluck', id2, '--yes').code == 0535	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'two\n'536	assert run(dir, 'pluck', '--reverse', id2, '--yes').code == 0537	assert os.read_file(os.join_path(dir, 'a.txt'))! == 'one\n'538	write(dir, 'a.txt', 'different\n')539	assert run(dir, 'pluck', id2, '--dry-run').code == 1540	assert run(dir, 'save', 'different').code == 0541	conflict := run(dir, 'pluck', id2, '--yes')542	assert conflict.code == 1543	assert conflict.err.contains('a.txt')544	assert run(dir, 'pluck').code == 2545	assert run(dir, 'pluck', 'unknown-id').code == 1546}547548fn test_peek_and_doctor() {549	dir := temp_repo('peek-doctor')550	defer { os.rmdir_all(dir) or {} }551	init_repo(dir)552	write(dir, 'peek.txt', 'peek me\n')553	assert run(dir, 'save', 'peekable').code == 0554	id := run(dir, 'log', '--json').out.all_after('"id":"')[..12]555	before_log := run(dir, 'log', '--json').out556	peek := run(dir, 'peek', id, '--json')557	assert peek.code == 0558	peek_path := peek.out.all_after('"path":"').before('"')559	assert peek.out.contains('"id":"${id}"')560	assert os.read_file(os.join_path(peek_path, 'peek.txt'))! == 'peek me\n'561	assert run(dir, 'status').out.contains('no changes')562	assert run(dir, 'log', '--json').out == before_log563	assert run(dir, 'peek').code == 2564	assert run(dir, 'peek', 'unknown-id').code == 1565	backup := os.join_path(dir, 'doctor.backup')566	healthy := run(dir, 'doctor')567	assert healthy.code == 0568	assert healthy.out.contains('is sound')569	report := run(dir, 'doctor', '--json')570	assert report.code == 0571	for key in ['problems', 'objects', 'saves', 'checkpoints', 'cached_files', 'peek_folders_removed',572		'backup'] {573		read_json_has(report.out, key)574	}575	backed := run(dir, 'doctor', '--backup', backup)576	assert backed.code == 0577	assert os.exists(backup)578	assert backed.out.contains(backup)579	assert run(dir, 'doctor', '--backup', backup).code == 1580	assert run(dir, 'peek', id, '--json').code == 0581	// A peek made today is left for whoever is reading it.582	kept := run(dir, 'doctor', '--json')583	assert kept.code == 0584	assert os.exists(peek_path)585	os.rmdir_all(peek_path) or {}586}587588fn test_strip_refuses_without_terminal() {589	dir := temp_repo('strip')590	defer { os.rmdir_all(dir) or {} }591	init_repo(dir)592	write(dir, 'secret.txt', 'keep\n')593	assert run(dir, 'save', 'secret').code == 0594	before_log := run(dir, 'log', '--json').out595	refused := run(dir, 'strip', 'secret.txt')596	assert refused.code == 1597	assert refused.err.contains('needs a terminal')598	assert run(dir, 'log', '--json').out == before_log599	assert os.read_file(os.join_path(dir, 'secret.txt'))! == 'keep\n'600	assert run(dir, 'log', '--json').out.contains('secret')601}602603fn test_saves_and_checkpoints_aliases() {604	dir := temp_repo('aliases')605	defer { os.rmdir_all(dir) or {} }606	init_repo(dir)607	write(dir, 'alias.txt', 'one\n')608	assert run(dir, 'save', 'plain save').code == 0609	assert run(dir, 'checkpoint', 'checkpoint save').code == 0610	saves := run(dir, 'saves')611	assert saves.code == 0612	assert saves.out.contains('plain save')613	assert saves.out.contains('checkpoint save')614	checkpoints := run(dir, 'checkpoints')615	assert checkpoints.code == 0616	assert checkpoints.out.contains('checkpoint save')617	assert !checkpoints.out.contains('plain save')618	json_result := run(dir, 'checkpoints', '--json')619	assert json_result.code == 0620	assert json_result.out.contains('"head_id"')621	assert json_result.out.contains('"saves"')622	assert json_result.out.contains('"is_checkpoint":true')623	assert !json_result.out.contains('"is_checkpoint":false')624}625626fn test_remote_configuration_is_isolated_and_atomic() {627	dir := temp_repo('remote')628	home := temp_repo('remote-home')629	defer {630		os.rmdir_all(dir) or {}631		os.rmdir_all(home) or {}632	}633	empty := run_home(dir, home, 'remote', '--json')634	assert empty.code == 0635	assert empty.out.contains('"configured":false')636	target := os.join_path(home, 'remote-store')637	set := run_home(dir, home, 'remote', 'folder', target)638	assert set.code == 0639	assert os.is_dir(target)640	state := run_home(dir, home, 'remote', '--json')641	assert state.code == 0642	assert state.out.contains('"kind":"folder"')643	assert state.out.contains(target)644	assert run_home(dir, home, 'remote', 's3', 'http://127.0.0.1:1', 'bucket', 'region').code == 1645	assert run_home(dir, home, 'remote', '--json').out.contains(target)646	assert run_home(dir, home, 'remote', 's3', 'http://127.0.0.1:1', 'bucket', 'region').err.contains('KOH_ACCESS_KEY')647	assert run_home(dir, home, 'remote', '--forget').code == 0648	assert run_home(dir, home, 'remote', '--json').out.contains('"configured":false')649}650651// A clone belongs to the repo it was stolen from, whatever its folder is652// called later: renaming it must not start a second repo on the remote.653fn test_a_renamed_clone_keeps_offering_to_its_repo() {654	syncroot := temp_repo('rename-clone')655	home := temp_repo('rename-clone-home')656	defer {657		os.rmdir_all(syncroot) or {}658		os.rmdir_all(home) or {}659	}660	remote := os.join_path(syncroot, 'remote')661	a := os.join_path(syncroot, 'A', 'proj')662	b_parent := os.join_path(syncroot, 'B')663	os.mkdir_all(a) or { panic(err) }664	os.mkdir_all(b_parent) or { panic(err) }665	init_repo(a)666	write(a, 'a.txt', 'from A\n')667	assert run_home(a, home, 'remote', 'folder', remote).code == 0668	assert run_home(a, home, 'save', 'A first').code == 0669	assert run_home(b_parent, home, 'steal', 'proj').code == 0670	renamed := os.join_path(b_parent, 'renamed')671	os.mv(os.join_path(b_parent, 'proj'), renamed) or { panic(err) }672	write(renamed, 'b.txt', 'from B\n')673	assert run_home(renamed, home, 'save', 'B first').code == 0674	assert !os.exists(os.join_path(remote, 'renamed'))675	assert run_home(a, home, 'steal').code == 0676	assert os.read_file(os.join_path(a, 'b.txt'))! == 'from B\n'677}678679fn test_offer_steal_folder_remote() {680	syncroot := temp_repo('sync')681	home := temp_repo('sync-home')682	defer {683		os.rmdir_all(syncroot) or {}684		os.rmdir_all(home) or {}685	}686	remote := os.join_path(syncroot, 'remote')687	a := os.join_path(syncroot, 'A', 'proj')688	b_parent := os.join_path(syncroot, 'B')689	os.mkdir_all(a) or { panic(err) }690	os.mkdir_all(b_parent) or { panic(err) }691	init_repo(a)692	write(a, 'a.txt', 'from A\n')693	assert run_home(a, home, 'remote', 'folder', remote).code == 0694	assert run_home(a, home, 'save', 'A first').code == 0695	clone := run_home(b_parent, home, 'steal', 'proj')696	assert clone.code == 0697	b := os.join_path(b_parent, 'proj')698	assert os.read_file(os.join_path(b, 'a.txt'))! == 'from A\n'699	write(b, 'b.txt', 'from B\n')700	assert run_home(b, home, 'save', 'B first').code == 0701	write(a, 'a2.txt', 'second\n')702	assert run_home(a, home, 'save', 'A second').code == 0703	assert run_home(a, home, 'steal').code == 0704	assert os.exists(os.join_path(a, 'b.txt'))705	assert run_home(b_parent, home, 'steal', '--list').out.contains('proj')706	write(a, 'clash.txt', 'base\n')707	assert run_home(a, home, 'save', 'clash base').code == 0708	assert run_home(b, home, 'steal').code == 0709	write(a, 'clash.txt', 'A version\n')710	assert run_home(a, home, 'save', 'A clash').code == 0711	write(b, 'clash.txt', 'B version\n')712	assert run_home(b, home, 'save', 'B clash').code == 0713	refused := run_home(b, home, 'steal')714	assert refused.code == 1715	assert refused.err.contains('--mine') || refused.err.contains('--theirs')716	b_head := run_home(b, home, 'status', '--json').out.all_after('"head_id":"')[..12]717	theirs := run_home(b, home, 'steal', '--theirs', '--json')718	assert theirs.code == 0719	// The pre-combine tree is off the line now; the way back must be named,720	// or an agent without the history view cannot find it.721	assert theirs.out.contains('"previous_head":"${b_head}"')722	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'A version\n'723	assert run_home(b, home, 'load', b_head, '--yes').code == 0724	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'B version\n'725	assert run_home(b, home, 'load', theirs.out.all_after('"head":"')[..12], '--yes').code == 0726	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'A version\n'727	write(a, 'clash.txt', 'A second\n')728	assert run_home(a, home, 'save', 'A second clash').code == 0729	write(b, 'clash.txt', 'B second\n')730	assert run_home(b, home, 'save', 'B second clash').code == 0731	assert run_home(b, home, 'steal', '--mine').code == 0732	assert os.read_file(os.join_path(b, 'clash.txt'))! == 'B second\n'733	assert run_home(b, home, 'log').out.contains('combine: kept mine for')734}735736// A clone brings in the whole history, flags included; both output forms must737// say which saves came in flagged, and why.738fn test_a_clone_reports_flagged_saves() {739	syncroot := temp_repo('clone-flags')740	home := temp_repo('clone-flags-home')741	defer {742		os.rmdir_all(syncroot) or {}743		os.rmdir_all(home) or {}744	}745	a := os.join_path(syncroot, 'A', 'proj')746	os.mkdir_all(a) or { panic(err) }747	init_repo(a)748	assert run_home(a, home, 'remote', 'folder', os.join_path(syncroot, 'remote')).code == 0749	write(a, 'a.txt', 'one\n')750	id := run_home(a, home, 'save', 'risky', '--json').out.all_after('"id":"')[..12]751	assert run_home(a, home, 'flag', id, '--reason', 'broke the build').code == 0752	assert run_home(a, home, 'offer').code == 0753	for name in ['B', 'C'] {754		os.mkdir_all(os.join_path(syncroot, name)) or { panic(err) }755	}756	json_clone := run_home(os.join_path(syncroot, 'B'), home, 'steal', 'proj', '--json')757	assert json_clone.code == 0758	assert json_clone.out.contains('"flagged":["${id}"]')759	text_clone := run_home(os.join_path(syncroot, 'C'), home, 'steal', 'proj')760	assert text_clone.code == 0761	assert text_clone.out.contains('[${id}] came in flagged — broke the build')762}763764// A folder remote on a disk or share that is not mounted is simply not there.765// Creating it would put the saves in a stand-in folder the other machine never766// sees; the offer must say what is wrong instead.767fn test_an_unmounted_folder_remote_is_not_recreated() {768	syncroot := temp_repo('unmounted')769	home := temp_repo('unmounted-home')770	defer {771		os.rmdir_all(syncroot) or {}772		os.rmdir_all(home) or {}773	}774	mount := os.join_path(syncroot, 'nas')775	remote := os.join_path(mount, 'koh')776	a := os.join_path(syncroot, 'proj')777	os.mkdir_all(a) or { panic(err) }778	init_repo(a)779	assert run_home(a, home, 'remote', 'folder', remote).code == 0780	write(a, 'a.txt', 'one\n')781	assert run_home(a, home, 'save', 'first').code == 0782	os.rename(mount, os.join_path(syncroot, 'nas-unplugged')) or { panic(err) }783	os.mkdir(mount) or { panic(err) }784	offered := run_home(a, home, 'offer')785	assert offered.code == 1786	assert offered.err.contains('mounted')787	assert !os.exists(remote)788	write(a, 'a.txt', 'two\n')789	saved := run_home(a, home, 'save', 'second')790	assert saved.code == 0791	assert saved.out.contains('mounted')792	assert !os.exists(remote)793}794795fn test_man_and_koh2_handoff() {796	dir := temp_repo('man')797	home := temp_repo('man-home')798	defer {799		os.rmdir_all(dir) or {}800		os.rmdir_all(home) or {}801	}802	whole := run_home(dir, home, 'man')803	assert whole.code == 0804	assert whole.out.contains('NAME')805	assert whole.out.contains('COMMANDS')806	strip := run_home(dir, home, 'man', 'strip')807	assert strip.code == 0808	assert strip.out.contains('strip')809	assert !strip.out.contains('koh save ')810	assert run_home(dir, home, 'man', 'nonsense').code == 2811	legacy := temp_repo('legacy')812	defer { os.rmdir_all(legacy) or {} }813	os.mkdir_all(os.join_path(legacy, '.koh')) or { panic(err) }814	fake := os.join_path(home, 'bin')815	os.mkdir_all(fake) or { panic(err) }816	fake_koh := os.join_path(fake, 'koh2')817	os.write_file(fake_koh, '#!/bin/sh\nprintf "handoff:%s\\n" "$*"\nexit 7\n') or { panic(err) }818	os.chmod(fake_koh, 0o755) or { panic(err) }819	handoff := run_home_with_path(legacy, home, fake, 'status', '--json')820	assert handoff.code == 7821	assert handoff.out.contains('handoff:status --json')822	// One notice line, on stderr, so koh2's own output stays as it was.823	assert handoff.err.contains('Koh 2 repo')824	assert handoff.err.trim_space().split_into_lines().len == 1825	assert handoff.out.trim_space() == 'handoff:status --json'826}827828fn run_home_with_path(repo string, home string, bin_dir string, args ...string) Result {829	stamp := '${os.getpid()}-${time.now().unix_nano()}'830	base := os.join_path(os.temp_dir(), 'koh3-cli-${stamp}')831	out_path := '${base}.out'832	err_path := '${base}.err'833	code_path := '${base}.code'834	mut command := 'HOME=${q(home)} PATH=${q(bin_dir + ':' + os.getenv('PATH'))} ${q(binary)}'835	for arg in args {836		command += ' ${q(arg)}'837	}838	shell := 'cd ${q(repo)} && ${command} </dev/null >${q(out_path)} 2>${q(err_path)}; printf "%s" \$? >${q(code_path)}'839	result := os.execute(shell)840	if result.exit_code != 0 {841		panic('could not run test command: ${result.output}')842	}843	code := os.read_file(code_path) or { panic(err) }844	out := os.read_file(out_path) or { '' }845	err := os.read_file(err_path) or { '' }846	os.rm(out_path) or {}847	os.rm(err_path) or {}848	os.rm(code_path) or {}849	return Result{850		code: code.int()851		out:  out852		err:  err853	}854}855856// --- migration -------------------------------------------------------------857858fn koh2_binary() string {859	return os.find_abs_path_of_executable('koh') or { '' }860}861862// run_koh2 runs the Koh 2 binary in a fixture; its own output is not under863// test here.864fn run_koh2(dir string, command string) {865	os.execute('cd ${q(dir)} && ${command} >/dev/null 2>&1')866}867868fn save_ids(dir string) []string {869	mut ids := []string{}870	for name in os.ls(os.join_path(dir, '.koh', 'snapshots')) or { []string{} } {871		if name.ends_with('.json') {872			ids << name.trim_right('.json')873		}874	}875	ids.sort()876	return ids877}878879fn test_migrate_converts_a_koh2_repo_and_keeps_every_save() {880	koh2 := koh2_binary()881	if koh2 == '' {882		println('skipping the migration tests: koh (Koh 2) is not on PATH')883		return884	}885	dir := temp_repo('migrate')886	defer { os.rmdir_all(dir) or {} }887	home := temp_repo('migrate-home')888	defer { os.rmdir_all(home) or {} }889	run_koh2(dir, '${q(koh2)} init')890	// One file large enough to be an object, one small enough to be inlined.891	write(dir, 'code.txt', 'x'.repeat(700))892	write(dir, 'tiny.txt', 'tiny\n')893	run_koh2(dir, '${q(koh2)} save "first save"')894	run_koh2(dir, '${q(koh2)} checkpoint "before something"')895	write(dir, 'code.txt', 'y'.repeat(700))896	run_koh2(dir, '${q(koh2)} save "second save"')897	original := save_ids(dir)898	assert original.len == 3899900	report := run_home(dir, home, 'migrate')901	assert report.code == 0902	assert report.out.contains('migrated 3 saves')903	// The swap: `.koh` is a file, the old data is archived, nothing is staging.904	assert os.is_file(os.join_path(dir, '.koh'))905	assert os.is_dir(os.join_path(dir, '.koh-v2'))906	assert os.is_file(os.join_path(dir, '.kohignore'))907	assert !os.exists(os.join_path(dir, '.koh-migrate'))908909	// Every save kept its original ID, and the new repo is sound.910	logged := run_home(dir, home, 'log', '--json')911	assert logged.code == 0912	for id in original {913		assert logged.out.contains(id)914	}915	assert run_home(dir, home, 'doctor').code == 0916	assert run_home(dir, home, 'status').code == 0917918	// Migrating again has nothing to convert.919	assert run_home(dir, home, 'migrate').code == 1920}921922fn test_migrate_refuses_a_tree_that_does_not_match_the_last_save() {923	koh2 := koh2_binary()924	if koh2 == '' {925		return926	}927	dir := temp_repo('migrate-dirty')928	defer { os.rmdir_all(dir) or {} }929	home := temp_repo('migrate-dirty-home')930	defer { os.rmdir_all(home) or {} }931	run_koh2(dir, '${q(koh2)} init')932	write(dir, 'code.txt', 'x'.repeat(700))933	run_koh2(dir, '${q(koh2)} save "only save"')934	write(dir, 'code.txt', 'unsaved change\n')935936	refused := run_home(dir, home, 'migrate')937	assert refused.code == 1938	assert refused.err.contains('save with koh2 first')939	// Nothing moved: still Koh 2, no archive, no staging file.940	assert os.is_dir(os.join_path(dir, '.koh'))941	assert !os.exists(os.join_path(dir, '.koh-v2'))942	assert !os.exists(os.join_path(dir, '.koh-migrate'))943}944945// Koh 2 never saved a root `.kohconfig`, root `.kohignore.<remote>` rules or946// `*.bundle` files, so a clean Koh 2 repo may hold them. Most real repos have947// a `.kohconfig`; migrate must not call them unsaved work.948fn test_migrate_passes_over_the_files_koh2_never_saved() {949	koh2 := koh2_binary()950	if koh2 == '' {951		return952	}953	dir := temp_repo('migrate-koh2-ignores')954	defer { os.rmdir_all(dir) or {} }955	home := temp_repo('migrate-koh2-ignores-home')956	defer { os.rmdir_all(home) or {} }957	run_koh2(dir, '${q(koh2)} init')958	write(dir, 'code.txt', 'x'.repeat(700))959	run_koh2(dir, '${q(koh2)} save "only save"')960	write(dir, '.kohconfig', 'stable_days = 14\n')961	write(dir, '.kohignore.public', 'private/\n')962	write(dir, 'lib/app.bundle', 'bundle\n')963	write(dir, 'ios/Settings.bundle/Root.plist', 'settings\n')964	// Koh 2 keeps saving a file under a folder pattern added later, where965	// Koh 3 reads the same rule as covering the folder: the saved file is on966	// disk and matches, so the tree is clean.967	write(dir, 'native/t.dSYM/Info.plist', 'plist\n')968	run_koh2(dir, '${q(koh2)} save --agent test --session test "add the dsym"')969	// Koh 2 skips *.bundle even when its rules no longer list it.970	ignore_path := os.join_path(dir, '.koh', 'ignore')971	rules := os.read_file(ignore_path)!.split_into_lines().filter(it != '*.bundle')972	os.write_file(ignore_path, rules.join('\n') + '\nnative/*.dSYM\n')!973	// A saved file the walk skips still has to match what was saved.974	write(dir, 'native/t.dSYM/Info.plist', 'changed\n')975	changed := run_home(dir, home, 'migrate')976	assert changed.code == 1977	assert changed.err.contains('native/t.dSYM/Info.plist does not match')978	write(dir, 'native/t.dSYM/Info.plist', 'plist\n')979	assert os.execute('cd ${q(dir)} && ${q(koh2)} status --json').output.contains('"dirty":false')980981	migrated := run_home(dir, home, 'migrate')982	assert migrated.code == 0, migrated.err983	// They stay where they were, for the user to keep or delete.984	assert os.read_file(os.join_path(dir, '.kohconfig'))! == 'stable_days = 14\n'985}