OXYGENHUB
◆ main oxygen / tests / cli_json.rs
32.0 KiB · Rust · last changed Cylinder C1, first part: artifacts as trees of the repository's chunks, oxy artifact pack/list/show/unpack/verify, kept by gc (refs #108) 7 days ago source blame history raw
1
//! Every `--json` output of the CLI parses as JSON and carries the fields
2
//! the VS Code extension relies on (oxygen-vscode/docs/spec.md section 4).
3
4
use serde_json::Value;
5
use std::path::Path;
6
use std::process::Command;
7
8
fn oxy(dir: &Path, home: &Path, args: &[&str]) -> (i32, Vec<u8>, String) {
9
    let out = Command::new(env!("CARGO_BIN_EXE_oxy"))
10
        .arg("--plain")
11
        .args(args)
12
        .current_dir(dir)
13
        .env("OXY_HOME", home)
14
        .env("NO_COLOR", "1")
15
        .output()
16
        .unwrap();
17
    (
18
        out.status.code().unwrap_or(-1),
19
        out.stdout,
20
        String::from_utf8_lossy(&out.stderr).to_string(),
21
    )
22
}
23
24
fn json(dir: &Path, home: &Path, args: &[&str]) -> Value {
25
    let (code, out, err) = oxy(dir, home, args);
26
    assert!(
27
        code == 0 || code == 2 || code == 1,
28
        "oxy {args:?} exited {code}: {err}"
29
    );
30
    serde_json::from_slice(&out).unwrap_or_else(|e| {
31
        panic!(
32
            "oxy {args:?} is not JSON: {e}\n{}",
33
            String::from_utf8_lossy(&out)
34
        )
35
    })
36
}
37
38
fn write(dir: &Path, rel: &str, content: &str) {
39
    let p = dir.join(rel);
40
    std::fs::create_dir_all(p.parent().unwrap()).unwrap();
41
    std::fs::write(p, content).unwrap();
42
}
43
44
#[test]
45
fn machine_interface_round_trips() {
46
    let tmp = tempfile::tempdir().unwrap();
47
    let home = tmp.path().join("home");
48
    std::fs::create_dir_all(&home).unwrap();
49
    let origin = tmp.path().join("origin");
50
    assert_eq!(
51
        oxy(tmp.path(), &home, &["init", origin.to_str().unwrap()]).0,
52
        0
53
    );
54
    let repo = tmp.path().join("repo");
55
    assert_eq!(
56
        oxy(
57
            tmp.path(),
58
            &home,
59
            &["clone", origin.to_str().unwrap(), repo.to_str().unwrap()]
60
        )
61
        .0,
62
        0
63
    );
64
    let r = repo.as_path();
65
    assert_eq!(
66
        oxy(
67
            r,
68
            &home,
69
            &[
70
                "identity",
71
                "create",
72
                "--name",
73
                "Ada",
74
                "--email",
75
                "[email protected]"
76
            ]
77
        )
78
        .0,
79
        0
80
    );
81
    assert_eq!(
82
        oxy(r, &home, &["config", "--user", "core.sign", "change"]).0,
83
        0
84
    );
85
86
    let v = json(r, &home, &["version", "--json"]);
87
    assert_eq!(v["protocol"], 1);
88
    let root = json(r, &home, &["root", "--json"]);
89
    assert_eq!(root["bookmark"], "main");
90
    assert!(root["root"].as_str().unwrap().ends_with("repo"));
91
92
    write(r, "a.txt", "1\n2\n3\n");
93
    write(r, "b.txt", "b\n");
94
    let st = json(r, &home, &["status", "--json"]);
95
    assert_eq!(st["paths"].as_array().unwrap().len(), 2);
96
    assert_eq!(oxy(r, &home, &["commit", "-m", "base"]).0, 0);
97
    write(r, "a.txt", "0\n1\n2\n3\n");
98
    write(r, "b.txt", "b\nbb\n");
99
    write(r, "c.txt", "c\n");
100
101
    // diff and hunks agree on the working copy.
102
    let d = json(r, &home, &["diff", "--json"]);
103
    let files = d["files"].as_array().unwrap();
104
    assert_eq!(files.len(), 3, "{d}");
105
    let a = files.iter().find(|f| f["path"] == "a.txt").unwrap();
106
    assert_eq!(a["kind"], "modified");
107
    assert_eq!(a["hunks"][0]["base_line"], 0);
108
    assert_eq!(a["hunks"][0]["added"][0], "0\n");
109
    let c = files.iter().find(|f| f["path"] == "c.txt").unwrap();
110
    assert_eq!(c["kind"], "added");
111
    let hunks = json(r, &home, &["hunks", "--json"]);
112
    let hunks = hunks.as_array().unwrap();
113
    assert!(hunks.len() >= 3, "{hunks:?}");
114
    let b_hunk = hunks.iter().find(|h| h["path"] == "b.txt").unwrap()["index"]
115
        .as_u64()
116
        .unwrap();
117
    // Commit only b's hunk; discard c by path; then discard a's remaining hunk.
118
    assert_eq!(
119
        oxy(
120
            r,
121
            &home,
122
            &["commit", "-m", "b only", "--hunks", &b_hunk.to_string()]
123
        )
124
        .0,
125
        0
126
    );
127
    assert_eq!(oxy(r, &home, &["discard", "c.txt"]).0, 0);
128
    assert!(!r.join("c.txt").exists());
129
    let hunks = json(r, &home, &["hunks", "--json"]);
130
    let a_hunk = hunks
131
        .as_array()
132
        .unwrap()
133
        .iter()
134
        .find(|h| h["path"] == "a.txt")
135
        .unwrap()["index"]
136
        .as_u64()
137
        .unwrap();
138
    assert_eq!(
139
        oxy(r, &home, &["discard", "--hunks", &a_hunk.to_string()]).0,
140
        0
141
    );
142
    assert_eq!(
143
        std::fs::read_to_string(r.join("a.txt")).unwrap(),
144
        "1\n2\n3\n"
145
    );
146
    let st = json(r, &home, &["status", "--json"]);
147
    assert_eq!(st["clean"], true, "{st}");
148
149
    // cat serves file content at states.
150
    let (code, out, _) = oxy(r, &home, &["cat", "b.txt"]);
151
    assert_eq!((code, out.as_slice()), (0, b"b\nbb\n".as_slice()));
152
    let (code, out, _) = oxy(r, &home, &["cat", "b.txt", "-r", "main"]);
153
    assert_eq!((code, out.as_slice()), (0, b"b\nbb\n".as_slice()));
154
155
    // log, show, verify, op log, bookmarks, remotes, sync.
156
    let log = json(r, &home, &["log", "--json"]);
157
    let changes = log["changes"].as_array().unwrap();
158
    assert_eq!(changes.len(), 3, "working copy plus two changes: {log}");
159
    let head = changes.iter().find(|c| c["message"] == "b only").unwrap();
160
    assert_eq!(head["signature"]["status"], "signed");
161
    assert_eq!(head["author"], "Ada");
162
    let hash = head["hash"].as_str().unwrap().to_string();
163
    let by_path = json(r, &home, &["log", "--json", "--path", "b.txt"]);
164
    assert_eq!(by_path["changes"].as_array().unwrap().len(), 2, "{by_path}");
165
    let show = json(r, &home, &["show", "--json", &format!("#{}", &hash[..12])]);
166
    assert_eq!(show["files"][0]["path"], "b.txt");
167
    // oxygen#119: lines added and removed per file, and --stat.
168
    assert!(show["files"][0]["added"].as_u64().unwrap() >= 1, "{show}");
169
    let (code, out, _) = oxy(r, &home, &["show", "--stat", &format!("#{}", &hash[..12])]);
170
    let out = String::from_utf8_lossy(&out);
171
    assert!(
172
        code == 0 && out.contains("b.txt") && out.contains("1 file changed"),
173
        "{out}"
174
    );
175
    assert!(!out.contains("@@"), "the files, not the diff: {out}");
176
    let verify = json(r, &home, &["verify", "--json"]);
177
    assert!(verify
178
        .as_array()
179
        .unwrap()
180
        .iter()
181
        .all(|v| v["status"] == "signed"));
182
    let ops = json(r, &home, &["op", "log", "--json"]);
183
    assert!(ops[0]["current"] == true && ops.as_array().unwrap().len() > 3);
184
    assert_eq!(oxy(r, &home, &["bookmark", "create", "feature"]).0, 0);
185
    let bms = json(r, &home, &["bookmark", "list", "--json"]);
186
    assert_eq!(
187
        bms.as_array()
188
            .unwrap()
189
            .iter()
190
            .map(|b| b["name"].as_str().unwrap())
191
            .collect::<Vec<_>>(),
192
        vec!["feature", "main"]
193
    );
194
    let remotes = json(r, &home, &["remote", "list", "--json"]);
195
    assert_eq!(remotes[0]["name"], "origin");
196
    let push = json(r, &home, &["push", "--json"]);
197
    assert_eq!(push[0]["ok"], true, "{push}");
198
    let state = push[0]["state"].as_str().unwrap();
199
    assert!(
200
        state.len() == 64 && state.chars().all(|c| c.is_ascii_hexdigit()),
201
        "the state the push moved the bookmark to: {push}"
202
    );
203
    let fetch = json(r, &home, &["fetch", "--json"]);
204
    assert_eq!(fetch["remote"], "origin");
205
    let pull = json(r, &home, &["pull", "--json"]);
206
    assert_eq!(pull["changed"], false);
207
    assert_eq!(json(r, &home, &["resolve", "--json"])["conflicted"], false);
208
    assert!(json(r, &home, &["submodule", "status", "--json"])
209
        .as_array()
210
        .unwrap()
211
        .is_empty());
212
    assert!(json(r, &home, &["bisect", "status", "--json"]).is_null());
213
    assert!(json(r, &home, &["policy", "show", "--json"]).is_null());
214
    assert_eq!(oxy(r, &home, &["policy", "init"]).0, 0);
215
    let policy = json(r, &home, &["policy", "show", "--json"]);
216
    assert_eq!(policy["roots"][0]["name"], "Ada");
217
    // Keyless (oxygenhub#241): a hub's certified subject may sign too.
218
    let hub =
219
        oxy_core::identity::SecretKey::generate().identity("oxygenhub.io", "[email protected]", 1);
220
    let hub_file = r.join("hub.identity");
221
    std::fs::write(&hub_file, hub.encode()).unwrap();
222
    let grant = [
223
        "policy",
224
        "grant-subject",
225
        "repo:ada/demo:bookmark:main",
226
        "--issuer",
227
        hub_file.to_str().unwrap(),
228
        "--scope",
229
        "refs",
230
    ];
231
    assert_eq!(oxy(r, &home, &grant).0, 0);
232
    let policy = json(r, &home, &["policy", "show", "--json"]);
233
    let subjects = &policy["rules"][0]["subjects"][0];
234
    assert_eq!(
235
        (
236
            subjects["subject"].as_str(),
237
            subjects["issuer"]["name"].as_str(),
238
            subjects["scope"].as_str()
239
        ),
240
        (
241
            Some("repo:ada/demo:bookmark:main"),
242
            Some("oxygenhub.io"),
243
            Some("refs")
244
        )
245
    );
246
    std::fs::remove_file(&hub_file).unwrap();
247
    assert_eq!(
248
        oxy(r, &home, &["tag", "create", "v1", "-m", "first tag"]).0,
249
        0
250
    );
251
    let tags = json(r, &home, &["tag", "list", "--json"]);
252
    assert_eq!(
253
        (tags[0]["name"].as_str(), tags[0]["message"].as_str()),
254
        (Some("v1"), Some("first tag"))
255
    );
256
    let ws = json(r, &home, &["workspace", "list", "--json"]);
257
    assert_eq!(
258
        (ws.as_array().unwrap().len(), ws[0]["current"].as_bool()),
259
        (1, Some(true))
260
    );
261
}
262
263
/// `oxy commit -F`, `oxy describe` naming and tags as changes (feedback
264
/// 4 and 6).
265
/// Cylinder C1 (oxygen#108): a directory packs into an artifact of this
266
/// repository's chunks, lists and shows as JSON, survives gc, and unpacks.
267
#[test]
268
fn artifacts_pack_show_survive_gc_and_unpack() {
269
    let tmp = tempfile::tempdir().unwrap();
270
    let home = tmp.path().join("home");
271
    let dir = tmp.path().join("r");
272
    std::fs::create_dir_all(&dir).unwrap();
273
    assert_eq!(oxy(&dir, &home, &["init"]).0, 0);
274
    write(tmp.path(), "out/bin/tool", "#!/bin/sh\necho hi\n");
275
    write(tmp.path(), "out/README", "a tool\n");
276
    let out = tmp.path().join("out");
277
    let pack = [
278
        "artifact",
279
        "pack",
280
        out.to_str().unwrap(),
281
        "--kind",
282
        "package",
283
        "--arch",
284
        "x86_64",
285
        "--label",
286
        "version=0.1.0",
287
        "--json",
288
    ];
289
    let a = json(&dir, &home, &pack);
290
    let name = a["name"].as_str().unwrap().to_string();
291
    assert_eq!(
292
        (
293
            a["kind"].as_str(),
294
            a["files"].as_u64(),
295
            a["labels"]["version"].as_str()
296
        ),
297
        (Some("package"), Some(2), Some("0.1.0"))
298
    );
299
    let list = json(&dir, &home, &["artifact", "list", "--json"]);
300
    assert_eq!(list[0]["name"], name.as_str());
301
    let (code, _, err) = oxy(
302
        &dir,
303
        &home,
304
        &[
305
            "artifact",
306
            "pack",
307
            out.to_str().unwrap(),
308
            "--kind",
309
            "tarball",
310
        ],
311
    );
312
    assert_ne!(code, 0);
313
    assert!(err.contains("runner-image"), "{err}");
314
    assert_eq!(oxy(&dir, &home, &["gc", "--now"]).0, 0);
315
    let (code, verified, err) = oxy(&dir, &home, &["artifact", "verify", &name[..8]]);
316
    assert_eq!(code, 0, "{err}");
317
    assert!(String::from_utf8_lossy(&verified).contains("2 files check out"));
318
    let back = tmp.path().join("back");
319
    assert_eq!(
320
        oxy(
321
            &dir,
322
            &home,
323
            &["artifact", "unpack", &name, back.to_str().unwrap()]
324
        )
325
        .0,
326
        0
327
    );
328
    assert_eq!(
329
        std::fs::read_to_string(back.join("bin/tool")).unwrap(),
330
        "#!/bin/sh\necho hi\n"
331
    );
332
}
333
334
/// oxygen#144: a first identity needs no repository; the next repository
335
/// signs as it.
336
#[test]
337
fn a_first_identity_needs_no_repository() {
338
    let tmp = tempfile::tempdir().unwrap();
339
    let home = tmp.path().join("home");
340
    let nowhere = tmp.path().join("nowhere");
341
    std::fs::create_dir_all(&nowhere).unwrap();
342
    let local = ["identity", "create", "--local"];
343
    let (code, _, err) = oxy(&nowhere, &home, &local);
344
    assert_ne!(code, 0, "--local needs a repository");
345
    assert!(err.contains("no oxy repository"), "{err}");
346
    let ident = [
347
        "identity",
348
        "create",
349
        "--name",
350
        "Ada",
351
        "--email",
352
        "[email protected]",
353
    ];
354
    let (code, out, err) = oxy(&nowhere, &home, &ident);
355
    assert_eq!(code, 0, "{err}");
356
    let out = String::from_utf8_lossy(&out);
357
    assert!(
358
        out.contains("Created identity Ada <[email protected]>"),
359
        "{out}"
360
    );
361
    let user = oxy_core::repo::read_config_file(&home.join("config.toml")).unwrap();
362
    let key = user["author.key"].clone();
363
    assert_eq!(user["author.name"], "Ada");
364
    assert!(home.join("keys").join(format!("{key}.secret")).exists());
365
    assert!(!nowhere.join(".oxy").exists(), "no repository made");
366
367
    // A repository made afterwards signs its changes with it.
368
    let dir = tmp.path().join("r");
369
    std::fs::create_dir_all(&dir).unwrap();
370
    assert_eq!(oxy(&dir, &home, &["init"]).0, 0);
371
    assert_eq!(oxy(&dir, &home, &["config", "core.sign", "change"]).0, 0);
372
    write(&dir, "a.txt", "a\n");
373
    let (code, _, err) = oxy(&dir, &home, &["commit", "-m", "First"]);
374
    assert_eq!(code, 0, "{err}");
375
    let log = json(&dir, &home, &["log", "--json", "-n", "2"]);
376
    let first = &log["changes"][1];
377
    assert_eq!(first["message"], "First");
378
    assert_eq!(first["signature"]["status"], "signed", "{first}");
379
    assert_eq!(first["signature"]["key"], key.as_str());
380
    assert_eq!(first["signature"]["name"], "Ada");
381
}
382
383
#[test]
384
fn commit_from_a_file_and_describe_for_builds() {
385
    let tmp = tempfile::tempdir().unwrap();
386
    let home = tmp.path().join("home");
387
    std::fs::create_dir_all(&home).unwrap();
388
    let dir = tmp.path().join("r");
389
    std::fs::create_dir_all(&dir).unwrap();
390
    assert_eq!(oxy(&dir, &home, &["init"]).0, 0);
391
    write(&dir, "a.txt", "a\n");
392
    write(
393
        tmp.path(),
394
        "msg.txt",
395
        "Subject from a file\n\nA body\nof two lines.\n",
396
    );
397
    let msg = tmp.path().join("msg.txt");
398
    let (code, _, err) = oxy(&dir, &home, &["commit", "-F", msg.to_str().unwrap()]);
399
    assert_eq!(code, 0, "{err}");
400
    let log = json(&dir, &home, &["log", "--json", "-n", "2"]);
401
    assert_eq!(
402
        log["changes"][1]["message"],
403
        "Subject from a file\n\nA body\nof two lines."
404
    );
405
    assert_ne!(oxy(&dir, &home, &["commit"]).0, 0, "a message is required");
406
407
    // Untagged: bookmark and change; a tag names it; later work counts.
408
    let d = json(&dir, &home, &["describe", "--json"]);
409
    assert_eq!(
410
        (d["tag"].clone(), d["dirty"].clone()),
411
        (Value::Null, Value::Bool(false))
412
    );
413
    let change = d["change"].as_str().unwrap().to_string();
414
    assert_eq!(d["describe"], format!("main-{}", &change[..8]));
415
    assert_eq!(
416
        oxy(&dir, &home, &["tag", "create", "v0.1.0", "-m", "first"]).0,
417
        0
418
    );
419
    let (_, out, _) = oxy(&dir, &home, &["describe"]);
420
    assert_eq!(String::from_utf8_lossy(&out).trim(), "v0.1.0");
421
    let (code, out, err) = oxy(&dir, &home, &["show", "v0.1.0"]);
422
    assert_eq!(code, 0, "a tag names its change: {err}");
423
    assert!(String::from_utf8_lossy(&out).contains("Subject from a file"));
424
    write(&dir, "b.txt", "b\n");
425
    let d = json(&dir, &home, &["describe", "--json"]);
426
    assert_eq!(d["describe"], "v0.1.0-dirty");
427
    assert_eq!(oxy(&dir, &home, &["commit", "-m", "b"]).0, 0);
428
    write(&dir, "c.txt", "c\n");
429
    assert_eq!(oxy(&dir, &home, &["commit", "-m", "c"]).0, 0);
430
    let d = json(&dir, &home, &["describe", "--json"]);
431
    let change = d["change"].as_str().unwrap();
432
    assert_eq!(d["distance"], 2);
433
    assert_eq!(d["describe"], format!("v0.1.0-2-{}", &change[..8]));
434
}
435
436
/// `oxy log -L START,END:PATH`: the history of a range of lines.
437
#[test]
438
fn the_history_of_a_function() {
439
    let tmp = tempfile::tempdir().unwrap();
440
    let home = tmp.path().join("home");
441
    std::fs::create_dir_all(&home).unwrap();
442
    let dir = tmp.path().join("r");
443
    std::fs::create_dir_all(&dir).unwrap();
444
    assert_eq!(oxy(&dir, &home, &["init"]).0, 0);
445
    write(&dir, "f.rs", "use x;\nfn a() {\n  one();\n}\n");
446
    assert_eq!(oxy(&dir, &home, &["commit", "-m", "add f"]).0, 0);
447
    write(&dir, "f.rs", "use y;\nfn a() {\n  one();\n}\n");
448
    assert_eq!(oxy(&dir, &home, &["commit", "-m", "import"]).0, 0);
449
    write(&dir, "f.rs", "use y;\nfn a() {\n  two();\n}\n");
450
    assert_eq!(oxy(&dir, &home, &["commit", "-m", "body"]).0, 0);
451
    let v = json(&dir, &home, &["log", "--json", "-L", "2,4:f.rs"]);
452
    let messages: Vec<&str> = v["changes"]
453
        .as_array()
454
        .unwrap()
455
        .iter()
456
        .map(|c| c["message"].as_str().unwrap())
457
        .collect();
458
    assert_eq!(messages, ["body", "add f"], "not the import");
459
    let (code, _, err) = oxy(&dir, &home, &["log", "-L", "2:f.rs"]);
460
    assert_ne!(code, 0);
461
    assert!(err.contains("START,END:PATH"), "{err}");
462
}
463
464
#[test]
465
fn receipts_verify_import_list_show_and_export() {
466
    use oxy_core::hash::{ObjectRef, ObjectType};
467
    use oxy_core::identity::SecretKey;
468
    use oxy_core::objects::StateObject;
469
    use oxy_core::receipt::{Receipt, SignedReceipt};
470
    let tmp = tempfile::tempdir().unwrap();
471
    let home = tmp.path().join("home");
472
    std::fs::create_dir_all(&home).unwrap();
473
    let r = tmp.path().join("repo");
474
    assert_eq!(oxy(tmp.path(), &home, &["init", r.to_str().unwrap()]).0, 0);
475
    write(&r, "a.txt", "a\n");
476
    assert_eq!(oxy(&r, &home, &["commit", "-m", "A"]).0, 0);
477
478
    let repo = oxy_core::repo::Repo::open(&r).unwrap();
479
    let heads = repo.bookmark_heads().unwrap();
480
    let state = oxy_core::hash::hash_object(ObjectType::State, &StateObject::new(heads).encode());
481
    let receipt = Receipt {
482
        job_name: "test".into(),
483
        pipeline_hash: ObjectRef([1; 32]),
484
        scope_tree_hash: ObjectRef([2; 32]),
485
        inputs: vec![],
486
        environment: ObjectRef([3; 32]),
487
        outputs: vec![],
488
        exit_code: 0,
489
        duration_ms: 2500,
490
    };
491
    let sk = SecretKey::generate();
492
    let runner = sk.identity("earth-1", "runner@earth", 1);
493
    let sr = SignedReceipt::sign(receipt, repo.id().unwrap(), state, "demo#7", &runner, &sk);
494
    let file = tmp.path().join("r.receipt");
495
    std::fs::write(&file, sr.encode()).unwrap();
496
    let f = file.to_str().unwrap();
497
498
    let v = json(&r, &home, &["receipt", "verify", f, "--json"]);
499
    assert_eq!(
500
        (v["valid"].as_bool(), v["job"].as_str(), v["run"].as_str()),
501
        (Some(true), Some("test"), Some("demo#7"))
502
    );
503
    assert!(v["attest"].is_null());
504
505
    assert!(json(&r, &home, &["receipt", "list", "--json"])
506
        .as_array()
507
        .unwrap()
508
        .is_empty());
509
    assert_eq!(oxy(&r, &home, &["receipt", "import", f]).0, 0);
510
    let list = json(&r, &home, &["receipt", "list", "--json"]);
511
    let list = list.as_array().unwrap();
512
    assert_eq!(list.len(), 1);
513
    assert_eq!(list[0]["runner_name"], "earth-1");
514
    assert_eq!(list[0]["state"], state.to_hex());
515
    let attest = list[0]["attest"].as_str().unwrap().to_string();
516
    let shown = json(&r, &home, &["receipt", "show", &attest[..10], "--json"]);
517
    assert_eq!(shown["duration_ms"], 2500);
518
519
    let out = tmp.path().join("out.receipt");
520
    assert_eq!(
521
        oxy(
522
            &r,
523
            &home,
524
            &["receipt", "export", &attest[..10], out.to_str().unwrap()]
525
        )
526
        .0,
527
        0
528
    );
529
    assert_eq!(std::fs::read(&out).unwrap(), sr.encode());
530
531
    // SLSA provenance is signed with the exporter's key: none yet, so it is
532
    // refused and says what to do.
533
    let prov = tmp.path().join("prov.json");
534
    let p = prov.to_str().unwrap();
535
    let slsa = ["receipt", "export", &attest[..10], p, "--format", "slsa"];
536
    let (code, _, err) = oxy(&r, &home, &slsa);
537
    assert_ne!(code, 0);
538
    assert!(err.contains("oxy identity create"), "{err}");
539
    let ident = [
540
        "identity",
541
        "create",
542
        "--name",
543
        "Ada",
544
        "--email",
545
        "[email protected]",
546
    ];
547
    assert_eq!(oxy(&r, &home, &ident).0, 0);
548
    assert_eq!(oxy(&r, &home, &slsa).0, 0);
549
    let env: serde_json::Value = serde_json::from_slice(&std::fs::read(&prov).unwrap()).unwrap();
550
    assert_eq!(env["payloadType"], oxy_core::dsse::IN_TOTO);
551
    let payload = oxy_core::dsse::base64_decode(env["payload"].as_str().unwrap()).unwrap();
552
    let st: serde_json::Value = serde_json::from_slice(&payload).unwrap();
553
    assert_eq!(st["predicateType"], "https://slsa.dev/provenance/v1");
554
    assert_eq!(st["subject"][0]["digest"]["oxygen-state"], state.to_hex());
555
    let run = &st["predicate"]["runDetails"];
556
    assert_eq!(run["metadata"]["invocationId"], "demo#7");
557
    let kept = oxy_core::dsse::base64_decode(run["byproducts"][0]["content"].as_str().unwrap());
558
    assert_eq!(
559
        kept.unwrap(),
560
        sr.encode(),
561
        "the runner's receipt rides along"
562
    );
563
    // It verifies with the exporter's key and its PEM holds that key.
564
    let repo = oxy_core::repo::Repo::open(&r)
565
        .unwrap()
566
        .with_home(home.clone());
567
    let key = repo.signing_key().unwrap();
568
    assert_eq!(env["signatures"][0]["keyid"], key.to_hex());
569
    let me = repo.identity(&key).unwrap();
570
    let sig = oxy_core::dsse::base64_decode(env["signatures"][0]["sig"].as_str().unwrap()).unwrap();
571
    assert!(oxy_core::dsse::verify(&me, oxy_core::dsse::IN_TOTO, &payload, &sig).is_ok());
572
    assert!(oxy_core::dsse::verify(&runner, oxy_core::dsse::IN_TOTO, &payload, &sig).is_err());
573
    let pem = tmp.path().join("key.pem");
574
    let pem_args = ["identity", "export", "--pem", pem.to_str().unwrap()];
575
    assert_eq!(oxy(&r, &home, &pem_args).0, 0);
576
    assert_eq!(
577
        std::fs::read_to_string(&pem).unwrap(),
578
        oxy_core::dsse::public_pem(&me)
579
    );
580
581
    // A receipt whose result was changed after signing does not verify.
582
    let mut forged = sr.clone();
583
    forged.receipt.exit_code = 3;
584
    std::fs::write(&file, forged.encode()).unwrap();
585
    let (code, out, _) = oxy(&r, &home, &["receipt", "verify", f]);
586
    assert_eq!(code, 1);
587
    assert!(String::from_utf8_lossy(&out).contains("different receipt"));
588
    let (code, _, err) = oxy(&r, &home, &["receipt", "import", f]);
589
    assert_ne!(code, 0);
590
    assert!(err.contains("does not verify"), "{err}");
591
}
592
593
/// Metalgear, 2026-09-29 (oxygen#37): a bookmark created at one of three
594
/// independent heads held only that change and what it depends on, and
595
/// switching to it silently wrote a much older tree.
596
#[test]
597
fn a_bookmark_at_one_head_of_several_is_refused_unless_asked_for() {
598
    let tmp = tempfile::tempdir().unwrap();
599
    let home = tmp.path().join("home");
600
    std::fs::create_dir_all(&home).unwrap();
601
    let r = tmp.path().join("repo");
602
    assert_eq!(oxy(tmp.path(), &home, &["init", r.to_str().unwrap()]).0, 0);
603
    for f in ["a", "b", "c"] {
604
        write(&r, &format!("{f}.txt"), &format!("{f}\n"));
605
        assert_eq!(oxy(&r, &home, &["commit", "-m", f]).0, 0);
606
    }
607
    let bms = json(&r, &home, &["bookmark", "list", "--json"]);
608
    assert_eq!(
609
        bms[0]["heads"].as_array().unwrap().len(),
610
        3,
611
        "independent: {bms}"
612
    );
613
    let log = json(&r, &home, &["log", "--json"]);
614
    let hash = |m: &str| {
615
        let c = log["changes"]
616
            .as_array()
617
            .unwrap()
618
            .iter()
619
            .find(|c| c["message"] == m)
620
            .unwrap();
621
        format!("#{}", &c["hash"].as_str().unwrap()[..12])
622
    };
623
    let b = hash("b");
624
625
    let (code, _, err) = oxy(&r, &home, &["bookmark", "create", "x", &b]);
626
    assert_ne!(code, 0);
627
    assert!(
628
        err.contains("would lack 1 change") && err.contains("--upto") && err.contains("--only"),
629
        "{err}"
630
    );
631
632
    assert_eq!(
633
        oxy(&r, &home, &["bookmark", "create", "upto", &b, "--upto"]).0,
634
        0
635
    );
636
    assert_eq!(
637
        oxy(&r, &home, &["bookmark", "create", "only", &b, "--only"]).0,
638
        0
639
    );
640
    let bms = json(&r, &home, &["bookmark", "list", "--json"]);
641
    let heads = |n: &str| {
642
        bms.as_array()
643
            .unwrap()
644
            .iter()
645
            .find(|x| x["name"] == n)
646
            .unwrap()["heads"]
647
            .as_array()
648
            .unwrap()
649
            .len()
650
    };
651
    assert_eq!(heads("upto"), 2, "a and b: {bms}");
652
    assert_eq!(heads("only"), 1);
653
654
    // Switching to the smaller state says what it leaves out.
655
    let (code, out, err) = oxy(&r, &home, &["bookmark", "switch", "only"]);
656
    assert_eq!(code, 0, "{err}");
657
    let out = String::from_utf8_lossy(&out);
658
    assert!(out.contains("only lacks 2 changes that main has"), "{out}");
659
    assert!(!r.join("a.txt").exists() && r.join("b.txt").exists());
660
661
    // Moving a bookmark asks the same (metalgear, oxygen#42): main at b
662
    // alone would lose a, which it holds and was recorded before b.
663
    let (code, _, err) = oxy(&r, &home, &["bookmark", "set", "main", &b]);
664
    assert_ne!(code, 0, "b is a head main holds, not a move forward");
665
    assert!(
666
        err.contains("would lose 1 change") && err.contains("--upto"),
667
        "{err}"
668
    );
669
    assert_eq!(
670
        oxy(&r, &home, &["bookmark", "set", "main", &b, "--upto"]).0,
671
        0
672
    );
673
    let bms = json(&r, &home, &["bookmark", "list", "--json"]);
674
    let main = bms
675
        .as_array()
676
        .unwrap()
677
        .iter()
678
        .find(|x| x["name"] == "main")
679
        .unwrap();
680
    assert_eq!(main["heads"].as_array().unwrap().len(), 2, "a and b: {bms}");
681
682
    // A fast-forward (oxygen#78): y holds a and b; b2 is built on b, its
683
    // newest head. Moving y to b2 keeps a, which b2 does not depend on.
684
    assert_eq!(
685
        oxy(&r, &home, &["bookmark", "switch", "main", "--discard"]).0,
686
        0
687
    );
688
    assert_eq!(oxy(&r, &home, &["bookmark", "create", "y"]).0, 0);
689
    write(&r, "b.txt", "b2\n");
690
    assert_eq!(oxy(&r, &home, &["commit", "-m", "b2"]).0, 0);
691
    let log = json(&r, &home, &["log", "--json"]);
692
    let b2 = log["changes"]
693
        .as_array()
694
        .unwrap()
695
        .iter()
696
        .find(|c| c["message"] == "b2")
697
        .unwrap()["hash"]
698
        .as_str()
699
        .unwrap()[..12]
700
        .to_string();
701
    let (code, out, err) = oxy(&r, &home, &["bookmark", "set", "y", &format!("#{b2}")]);
702
    assert_eq!(code, 0, "{err}");
703
    assert!(
704
        String::from_utf8_lossy(&out).contains("builds on y's newest head"),
705
        "says why"
706
    );
707
    let bms = json(&r, &home, &["bookmark", "list", "--json"]);
708
    let y = bms
709
        .as_array()
710
        .unwrap()
711
        .iter()
712
        .find(|x| x["name"] == "y")
713
        .unwrap();
714
    assert_eq!(y["heads"].as_array().unwrap().len(), 2, "a and b2: {bms}");
715
}
716
717
/// oxygen#29: a pull on a feature bookmark said only "Already up to date"
718
/// while main was behind. Since oxygen#48 it updates main too, and says so.
719
#[test]
720
fn pull_names_its_bookmark_and_the_others_it_moved() {
721
    let tmp = tempfile::tempdir().unwrap();
722
    let home = tmp.path().join("home");
723
    std::fs::create_dir_all(&home).unwrap();
724
    let origin = tmp.path().join("origin");
725
    assert_eq!(
726
        oxy(tmp.path(), &home, &["init", origin.to_str().unwrap()]).0,
727
        0
728
    );
729
    let (a, b) = (tmp.path().join("a"), tmp.path().join("b"));
730
    for d in [&a, &b] {
731
        assert_eq!(
732
            oxy(
733
                tmp.path(),
734
                &home,
735
                &["clone", origin.to_str().unwrap(), d.to_str().unwrap()]
736
            )
737
            .0,
738
            0
739
        );
740
    }
741
    write(&a, "one.txt", "one\n");
742
    assert_eq!(oxy(&a, &home, &["commit", "-m", "one"]).0, 0);
743
    assert_eq!(oxy(&a, &home, &["push"]).0, 0);
744
    assert_eq!(oxy(&b, &home, &["pull"]).0, 0);
745
    assert_eq!(oxy(&b, &home, &["bookmark", "create", "feat"]).0, 0);
746
    assert_eq!(oxy(&b, &home, &["bookmark", "switch", "feat"]).0, 0);
747
    assert_eq!(oxy(&b, &home, &["push", "-b", "feat"]).0, 0);
748
    write(&a, "two.txt", "two\n");
749
    assert_eq!(oxy(&a, &home, &["commit", "-m", "two"]).0, 0);
750
    assert_eq!(oxy(&a, &home, &["push"]).0, 0);
751
752
    let (code, out, err) = oxy(&b, &home, &["pull"]);
753
    assert_eq!(code, 0, "{err}");
754
    let out = String::from_utf8_lossy(&out);
755
    assert!(out.contains("feat is up to date with origin"), "{out}");
756
    assert!(out.contains("Also updated main"), "{out}");
757
    assert!(!out.contains("behind"), "{out}");
758
}
759
760
/// oxygen#35: a clean status is answered from the manifest, loading no
761
/// history; any change, a mode change included, falls back to a snapshot.
762
#[test]
763
fn a_clean_status_needs_no_history_and_misses_no_change() {
764
    use std::os::unix::fs::PermissionsExt;
765
    let tmp = tempfile::tempdir().unwrap();
766
    let home = tmp.path().join("home");
767
    std::fs::create_dir_all(&home).unwrap();
768
    let r = tmp.path().join("repo");
769
    assert_eq!(oxy(tmp.path(), &home, &["init", r.to_str().unwrap()]).0, 0);
770
    let old = std::time::SystemTime::now() - std::time::Duration::from_secs(30);
771
    for f in ["a.txt", "b.txt"] {
772
        write(&r, f, &format!("{f}\n"));
773
        std::fs::File::options()
774
            .write(true)
775
            .open(r.join(f))
776
            .unwrap()
777
            .set_modified(old)
778
            .unwrap();
779
    }
780
    assert_eq!(oxy(&r, &home, &["commit", "-m", "two"]).0, 0);
781
    let status = |r: &Path| {
782
        let out = Command::new(env!("CARGO_BIN_EXE_oxy"))
783
            .args(["--plain", "status"])
784
            .current_dir(r)
785
            .env("OXY_HOME", &home)
786
            .env("NO_COLOR", "1")
787
            .env("OXY_TIMINGS", "1")
788
            .output()
789
            .unwrap();
790
        (
791
            String::from_utf8_lossy(&out.stdout).to_string(),
792
            String::from_utf8_lossy(&out.stderr).to_string(),
793
        )
794
    };
795
    let (out, err) = status(&r);
796
    assert!(out.contains("working copy clean"), "{out}");
797
    assert!(!err.contains("snapshot"), "no snapshot was needed: {err}");
798
799
    // A mode change alters neither size nor time.
800
    std::fs::set_permissions(r.join("a.txt"), std::fs::Permissions::from_mode(0o755)).unwrap();
801
    let (out, err) = status(&r);
802
    assert!(out.contains("a.txt"), "{out}");
803
    assert!(err.contains("snapshot"), "{err}");
804
    std::fs::set_permissions(r.join("a.txt"), std::fs::Permissions::from_mode(0o644)).unwrap();
805
806
    // A new file.
807
    write(&r, "c.txt", "c\n");
808
    let (out, _) = status(&r);
809
    assert!(out.contains("c.txt"), "{out}");
810
}
811
812
#[test]
813
fn a_nested_git_repository_is_named_not_silently_skipped() {
814
    let tmp = tempfile::tempdir().unwrap();
815
    let home = tmp.path().join("home");
816
    std::fs::create_dir_all(&home).unwrap();
817
    let r = tmp.path().join("repo");
818
    std::fs::create_dir_all(&r).unwrap();
819
    assert_eq!(oxy(&r, &home, &["init", "."]).0, 0);
820
    write(&r, "a.txt", "a\n");
821
    write(&r, "rust-core/src/lib.rs", "pub fn f() {}\n");
822
    write(&r, "rust-core/.git/HEAD", "ref: refs/heads/main\n");
823
    let st = json(&r, &home, &["status", "--json"]);
824
    assert_eq!(st["untracked_nested"], serde_json::json!(["rust-core"]));
825
    let (code, out, err) = oxy(&r, &home, &["commit", "-m", "first"]);
826
    assert_eq!(code, 0, "{err}");
827
    let out = String::from_utf8_lossy(&out);
828
    assert!(
829
        out.contains("rust-core/") && out.contains("nested Git repository"),
830
        "{out}"
831
    );
832
    // The clean status says so too.
833
    let (_, out, _) = oxy(&r, &home, &["status"]);
834
    let out = String::from_utf8_lossy(&out);
835
    assert!(
836
        out.contains("working copy clean") && out.contains("rust-core/"),
837
        "{out}"
838
    );
839
}
840
841
/// oxygen#50: the log is a graph. Two changes that build on the same one
842
/// take two lanes that join above it; each change shows its ID, author,
843
/// time and hash on one line and its subject on the next.
844
#[test]
845
fn the_log_draws_lanes_that_join() {
846
    let tmp = tempfile::tempdir().unwrap();
847
    let home = tmp.path().join("home");
848
    std::fs::create_dir_all(&home).unwrap();
849
    let repo = tmp.path().join("r");
850
    assert_eq!(
851
        oxy(tmp.path(), &home, &["init", repo.to_str().unwrap()]).0,
852
        0
853
    );
854
    write(&repo, "a.txt", "a\n");
855
    write(&repo, "b.txt", "b\n");
856
    assert_eq!(oxy(&repo, &home, &["commit", "-m", "both files"]).0, 0);
857
    write(&repo, "a.txt", "a\na2\n");
858
    assert_eq!(oxy(&repo, &home, &["commit", "-m", "edit a"]).0, 0);
859
    write(&repo, "b.txt", "b\nb2\n");
860
    assert_eq!(oxy(&repo, &home, &["commit", "-m", "edit b"]).0, 0);
861
862
    let (code, out, err) = oxy(&repo, &home, &["log"]);
863
    assert_eq!(code, 0, "{err}");
864
    let out = String::from_utf8_lossy(&out);
865
    let lines: Vec<&str> = out.lines().collect();
866
    // The working copy, then "edit b", "edit a" beside it, then their base.
867
    assert!(lines[0].starts_with('@'), "{out}");
868
    assert!(
869
        lines
870
            .iter()
871
            .any(|l| l.starts_with("|-'") && l.contains("edit a")),
872
        "{out}"
873
    );
874
    assert!(
875
        lines
876
            .iter()
877
            .any(|l| l.starts_with("| *") || l.starts_with("| o")),
878
        "{out}"
879
    );
880
    let base = lines.iter().position(|l| l.contains("both files")).unwrap();
881
    assert!(
882
        lines[base - 1].contains('#'),
883
        "the header line carries the hash: {out}"
884
    );
885
}