orca/src/main/gitlab/project-ref-parser.test.ts

import { describe, expect, it } from 'vitest'
import { parseGitLabProjectRef, parseRemoteProjectRefCandidate } from './project-ref-parser'

describe('gitlab project ref parsing', () => {
  it('parses HTTPS and SSH GitLab.com remotes', () => {
    expect(parseGitLabProjectRef('https://gitlab.com/acme/widgets.git')).toEqual({
      host: 'gitlab.com',
      path: 'acme/widgets'
    })
    expect(parseGitLabProjectRef('git@gitlab.com:stablyai/orca.git')).toEqual({
      host: 'gitlab.com',
      path: 'stablyai/orca'
    })
  })

  it.each([
    'ssh://git@altssh.gitlab.com:443/team/project.git',
    'git@altssh.gitlab.com:team/project.git',
    'ssh://git@ALTSSH.GITLAB.COM:443/team/project.git',
    'git@ALTSSH.GITLAB.COM:team/project.git',
    'git+ssh://git@altssh.gitlab.com:443/team/project.git'
  ])('parses the SSH alias as the canonical GitLab host: %s', (remote) => {
    expect(parseGitLabProjectRef(remote)).toEqual({
      host: 'gitlab.com',
      path: 'team/project'
    })
  })

  it.each([
    'ssh://git@altssh.gitlab.com.example.com:443/team/project.git',
    'git@altssh.gitlab.com.example.com:team/project.git',
    'git@notaltssh.gitlab.com:team/project.git'
  ])('does not trust an SSH alias lookalike: %s', (remote) => {
    expect(parseGitLabProjectRef(remote)).toBeNull()
  })

  it('preserves nested group paths', () => {
    expect(parseGitLabProjectRef('git@gitlab.com:group/subgroup/project.git')).toEqual({
      host: 'gitlab.com',
      path: 'group/subgroup/project'
    })
    expect(parseGitLabProjectRef('https://gitlab.com/g1/g2/g3/proj.git')).toEqual({
      host: 'gitlab.com',
      path: 'g1/g2/g3/proj'
    })
  })

  it('returns null for non-GitLab hosts when host not in knownHosts', () => {
    expect(parseGitLabProjectRef('git@github.com:stablyai/orca.git')).toBeNull()
    expect(parseGitLabProjectRef('git@example.com:foo/bar.git')).toBeNull()
  })

  it('matches self-hosted hosts when included in knownHosts', () => {
    expect(
      parseGitLabProjectRef('git@gitlab.example.com:team/api.git', [
        'gitlab.com',
        'gitlab.example.com'
      ])
    ).toEqual({ host: 'gitlab.example.com', path: 'team/api' })
  })

  it('drops the SSH transport port from the GitLab host identity', () => {
    // SSH ports select transport, not the web/API endpoint.
    expect(
      parseGitLabProjectRef('ssh://git@gitlab.example.com:2222/team/api.git', [
        'gitlab.com',
        'gitlab.example.com'
      ])
    ).toEqual({ host: 'gitlab.example.com', path: 'team/api' })
  })

  it('keeps the HTTP(S) port as part of the self-hosted GitLab host identity', () => {
    // Non-default HTTPS ports identify the self-hosted API endpoint.
    expect(
      parseGitLabProjectRef('https://gitlab.example.com:8443/team/api.git', [
        'gitlab.com',
        'gitlab.example.com:8443'
      ])
    ).toEqual({ host: 'gitlab.example.com:8443', path: 'team/api' })
  })

  it('matches a port-bearing http remote against a port-less legacy known host', () => {
    // Legacy portless inventory entries recognize any port on that hostname.
    expect(
      parseGitLabProjectRef('https://gitlab.example.com:8443/team/api.git', [
        'gitlab.com',
        'gitlab.example.com'
      ])
    ).toEqual({ host: 'gitlab.example.com:8443', path: 'team/api' })
  })

  it('distinguishes two services on the same host by port — only the GitLab one matches', () => {
    // Same-host services on different ports must retain distinct forge identities.
    const knownHosts = ['gitlab.com', 'gitea.example.com:8443']
    expect(parseGitLabProjectRef('http://gitea.example.com:8443/team/api.git', knownHosts)).toEqual(
      { host: 'gitea.example.com:8443', path: 'team/api' }
    )
    expect(
      parseGitLabProjectRef('http://gitea.example.com:3030/team/api.git', knownHosts)
    ).toBeNull()
  })

  it('rejects single-segment paths (host root or user-only)', () => {
    expect(parseGitLabProjectRef('git@gitlab.com:foo.git')).toBeNull()
    expect(parseGitLabProjectRef('https://gitlab.com/foo.git')).toBeNull()
  })

  it('handles missing .git suffix', () => {
    expect(parseGitLabProjectRef('https://gitlab.com/acme/widgets')).toEqual({
      host: 'gitlab.com',
      path: 'acme/widgets'
    })
  })

  it('strips trailing slashes after .git suffixes', () => {
    expect(parseGitLabProjectRef('https://gitlab.com/acme/widgets.git/')).toEqual({
      host: 'gitlab.com',
      path: 'acme/widgets'
    })
    expect(parseGitLabProjectRef('ssh://git@gitlab.com/acme/widgets.git/')).toEqual({
      host: 'gitlab.com',
      path: 'acme/widgets'
    })
  })

  it('preserves git protocol remote support', () => {
    expect(parseGitLabProjectRef('git://gitlab.com/acme/widgets.git')).toEqual({
      host: 'gitlab.com',
      path: 'acme/widgets'
    })
  })
})

describe('gitlab remote project ref candidates', () => {
  it('canonicalizes the SSH alias before resolving auth for a candidate', () => {
    expect(
      parseRemoteProjectRefCandidate('ssh://git@altssh.gitlab.com:443/team/subgroup/project.git')
    ).toEqual({ host: 'gitlab.com', path: 'team/subgroup/project' })
  })

  it('extracts self-hosted candidates before the host is trusted', () => {
    expect(parseRemoteProjectRefCandidate('git@gitlab.internal:team/orca.git')).toEqual({
      host: 'gitlab.internal',
      path: 'team/orca'
    })
  })

  it('rejects non-git URLs and single-segment project paths', () => {
    expect(parseRemoteProjectRefCandidate('file:///tmp/repo')).toBeNull()
    expect(parseRemoteProjectRefCandidate('git@gitlab.internal:team.git')).toBeNull()
  })
})