orca/src/main/github/client-ssh-provider-execution-boundary.test.ts

import { beforeEach, describe, expect, it, vi } from 'vitest'
import type * as GithubApiRepositoryModule from './github-api-repository'
import type * as GitHubEnterpriseRepositoryModule from './github-enterprise-repository'

const { clientMocks, moduleMocks } = await vi.hoisted(async () => {
  const moduleMocks = await import('./client-test-mocks')
  return { clientMocks: moduleMocks.createGitHubClientMocks(), moduleMocks }
})

vi.mock('./gh-utils', () => moduleMocks.ghUtilsModuleMock(clientMocks))
vi.mock('../git/runner', () => moduleMocks.gitRunnerModuleMock(clientMocks))
vi.mock('../providers/ssh-git-dispatch', () => moduleMocks.sshGitDispatchModuleMock(clientMocks))
vi.mock('./local-git-config-signature', () =>
  moduleMocks.localGitConfigSignatureModuleMock(clientMocks)
)
vi.mock('./github-enterprise-repository', async (importOriginal) =>
  moduleMocks.githubEnterpriseRepositoryModuleMock(
    await importOriginal<typeof GitHubEnterpriseRepositoryModule>()
  )
)
vi.mock('./rate-limit', () => moduleMocks.rateLimitModuleMock(clientMocks))
vi.mock('./github-api-repository', async (importOriginal) =>
  moduleMocks.githubApiRepositoryModuleMock(
    clientMocks,
    await importOriginal<typeof GithubApiRepositoryModule>()
  )
)

import { getPRForBranch, getPRForBranchOutcome } from './client'
import { resetPRForBranchMocks } from './client-test-harness'

const {
  ghExecFileAsyncMock,
  getOwnerRepoMock,
  gitExecFileAsyncMock,
  getSshGitProviderMock,
  resolvePRRepositoryCandidatesMock
} = clientMocks

const MERGED_BRANCH = 'fix-tab-strip-layout-test'
const MERGED_HEAD_OID = 'current-head-oid'

function mockMergedBranchPRLookup(): void {
  ghExecFileAsyncMock
    .mockResolvedValueOnce({
      stdout: JSON.stringify([
        {
          number: 5875,
          title: 'Merged current branch PR',
          state: 'closed',
          merged_at: '2026-06-20T04:53:05Z',
          html_url: 'https://github.com/acme/widgets/pull/5875',
          updated_at: '2026-06-20T04:53:05Z',
          draft: false,
          mergeable_state: 'clean',
          head: { ref: MERGED_BRANCH, sha: MERGED_HEAD_OID },
          base: { ref: 'main', sha: 'base-oid' }
        }
      ])
    })
    .mockResolvedValueOnce({
      stdout: JSON.stringify({
        number: 5875,
        title: 'Merged current branch PR',
        state: 'MERGED',
        url: 'https://github.com/acme/widgets/pull/5875',
        statusCheckRollup: [],
        updatedAt: '2026-06-20T04:53:05Z',
        isDraft: false,
        mergeable: 'MERGEABLE',
        baseRefName: 'main',
        headRefName: MERGED_BRANCH,
        baseRefOid: 'base-oid',
        headRefOid: MERGED_HEAD_OID
      })
    })
}

function mockUpstreamOnlyPRLookup(): void {
  ghExecFileAsyncMock
    .mockResolvedValueOnce({ stdout: JSON.stringify([]) })
    .mockResolvedValueOnce({
      stdout: JSON.stringify([
        {
          number: 78,
          title: 'Upstream branch PR',
          state: 'open',
          html_url: 'https://github.com/acme/widgets/pull/78',
          updated_at: '2026-03-28T00:00:00Z',
          draft: false,
          mergeable: true,
          base: { ref: 'main', sha: 'base-oid' },
          head: { ref: 'contributor/original', sha: 'upstream-head-oid' }
        }
      ])
    })
    .mockResolvedValueOnce({
      stdout: JSON.stringify({
        number: 78,
        title: 'Hydrated upstream branch PR',
        state: 'OPEN',
        url: 'https://github.com/acme/widgets/pull/78',
        statusCheckRollup: [],
        updatedAt: '2026-03-28T00:00:00Z',
        isDraft: false,
        mergeable: 'MERGEABLE',
        baseRefName: 'main',
        headRefName: 'contributor/original',
        baseRefOid: 'base-oid',
        headRefOid: 'upstream-head-oid'
      })
    })
}

// The strict execution boundary: for an SSH-hosted repoPath, an unregistered
// provider means "we could not ask" — it must never degrade into a client-side
// git run, which on a same-named local path answers for the wrong repository.
describe('getPRForBranch SSH execution boundary', () => {
  beforeEach(() => {
    resetPRForBranchMocks(clientMocks)
    getOwnerRepoMock.mockResolvedValue({ owner: 'acme', repo: 'widgets' })
  })

  it('does not rev-parse HEAD locally when the SSH provider is unregistered', async () => {
    getSshGitProviderMock.mockReturnValue(undefined)
    mockMergedBranchPRLookup()
    gitExecFileAsyncMock.mockResolvedValue({ stdout: `${MERGED_HEAD_OID}\n`, stderr: '' })

    const outcome = await getPRForBranchOutcome('/remote/repo', MERGED_BRANCH, null, 'ssh-1')

    expect(gitExecFileAsyncMock).not.toHaveBeenCalled()
    expect(outcome).toMatchObject({ kind: 'upstream-error', errorType: 'unknown' })
  })

  it('reports an upstream error when SSH candidate discovery is unverifiable', async () => {
    resolvePRRepositoryCandidatesMock.mockRejectedValue(
      new Error('Remote repository identity is unverifiable.')
    )

    const outcome = await getPRForBranchOutcome('/remote/repo', MERGED_BRANCH, null, 'ssh-1')

    expect(gitExecFileAsyncMock).not.toHaveBeenCalled()
    expect(ghExecFileAsyncMock).not.toHaveBeenCalled()
    expect(outcome).toMatchObject({ kind: 'upstream-error', errorType: 'unknown' })
  })

  it('keeps a verified empty SSH candidate set as no PR', async () => {
    resolvePRRepositoryCandidatesMock.mockResolvedValue({ candidates: [], headRepo: null })

    const outcome = await getPRForBranchOutcome('/remote/repo', MERGED_BRANCH, null, 'ssh-1')

    expect(gitExecFileAsyncMock).not.toHaveBeenCalled()
    expect(ghExecFileAsyncMock).not.toHaveBeenCalled()
    expect(outcome).toMatchObject({ kind: 'no-pr' })
  })

  it('rev-parses HEAD through the SSH provider when it is registered', async () => {
    const sshGitProvider = {
      exec: vi.fn(async (args: string[]) =>
        args[0] === 'rev-parse' && args[1] === 'HEAD'
          ? { stdout: `${MERGED_HEAD_OID}\n`, stderr: '' }
          : { stdout: '', stderr: '' }
      )
    }
    getSshGitProviderMock.mockReturnValue(sshGitProvider)
    mockMergedBranchPRLookup()

    const pr = await getPRForBranch('/remote/repo', MERGED_BRANCH, null, 'ssh-1')

    expect(sshGitProvider.exec).toHaveBeenCalledWith(['rev-parse', 'HEAD'], '/remote/repo')
    expect(gitExecFileAsyncMock).not.toHaveBeenCalled()
    expect(pr).toMatchObject({ number: 5875, state: 'merged', headSha: MERGED_HEAD_OID })
  })

  it('rev-parses HEAD through the local runtime for a WSL repository', async () => {
    mockMergedBranchPRLookup()
    gitExecFileAsyncMock.mockResolvedValue({ stdout: `${MERGED_HEAD_OID}\n`, stderr: '' })

    const pr = await getPRForBranch('/repo-root', MERGED_BRANCH, null, null, null, {
      localGitExecOptions: { wslDistro: 'Ubuntu' }
    })

    expect(gitExecFileAsyncMock).toHaveBeenCalledWith(['rev-parse', 'HEAD'], {
      cwd: '/repo-root',
      wslDistro: 'Ubuntu'
    })
    expect(pr).toMatchObject({ number: 5875, state: 'merged', headSha: MERGED_HEAD_OID })
  })

  it('does not read tracked upstreams locally when the SSH provider is unregistered', async () => {
    getSshGitProviderMock.mockReturnValue(undefined)
    mockUpstreamOnlyPRLookup()
    gitExecFileAsyncMock.mockResolvedValue({
      stdout: `${MERGED_BRANCH}\0origin/contributor/original\n`,
      stderr: ''
    })

    const outcome = await getPRForBranchOutcome('/remote/repo', MERGED_BRANCH, null, 'ssh-1')

    expect(gitExecFileAsyncMock).not.toHaveBeenCalled()
    expect(outcome).toMatchObject({ kind: 'upstream-error', errorType: 'unknown' })
    expect(ghExecFileAsyncMock).toHaveBeenCalledTimes(1)
  })

  it('reports an upstream error when the SSH HEAD probe loses its provider mid-flight', async () => {
    getSshGitProviderMock.mockReturnValue({
      exec: vi.fn().mockRejectedValue(new Error('SSH transport closed'))
    })
    mockMergedBranchPRLookup()

    const outcome = await getPRForBranchOutcome('/remote/repo', MERGED_BRANCH, null, 'ssh-1')

    expect(gitExecFileAsyncMock).not.toHaveBeenCalled()
    expect(outcome).toMatchObject({ kind: 'upstream-error', errorType: 'unknown' })
  })

  it('reports an upstream error when the SSH upstream probe loses its provider mid-flight', async () => {
    getSshGitProviderMock.mockReturnValue({
      exec: vi.fn().mockRejectedValue(new Error('SSH transport closed'))
    })
    mockUpstreamOnlyPRLookup()

    const outcome = await getPRForBranchOutcome('/remote/repo', MERGED_BRANCH, null, 'ssh-1')

    expect(gitExecFileAsyncMock).not.toHaveBeenCalled()
    expect(outcome).toMatchObject({ kind: 'upstream-error', errorType: 'unknown' })
  })

  it('reads tracked upstreams through the SSH provider when it is registered', async () => {
    const forEachRefArgs = ['for-each-ref', '--format=%(refname)%00%(upstream)', 'refs/heads']
    const sshGitProvider = {
      exec: vi.fn(async (args: string[]) =>
        args[0] === 'for-each-ref'
          ? { stdout: `${MERGED_BRANCH}\0origin/contributor/original\n`, stderr: '' }
          : { stdout: '', stderr: '' }
      )
    }
    getSshGitProviderMock.mockReturnValue(sshGitProvider)
    mockUpstreamOnlyPRLookup()

    const pr = await getPRForBranch('/remote/repo', MERGED_BRANCH, null, 'ssh-1')

    expect(sshGitProvider.exec).toHaveBeenCalledWith(forEachRefArgs, '/remote/repo')
    expect(gitExecFileAsyncMock).not.toHaveBeenCalled()
    expect(pr).toMatchObject({ number: 78, title: 'Hydrated upstream branch PR' })
  })

  it('reads tracked upstreams through the local runtime for a WSL repository', async () => {
    const forEachRefArgs = ['for-each-ref', '--format=%(refname)%00%(upstream)', 'refs/heads']
    mockUpstreamOnlyPRLookup()
    gitExecFileAsyncMock.mockResolvedValue({
      stdout: `${MERGED_BRANCH}\0origin/contributor/original\n`,
      stderr: ''
    })

    const pr = await getPRForBranch('/repo-root', MERGED_BRANCH, null, null, null, {
      localGitExecOptions: { wslDistro: 'Ubuntu' }
    })

    expect(gitExecFileAsyncMock).toHaveBeenCalledWith(forEachRefArgs, {
      cwd: '/repo-root',
      wslDistro: 'Ubuntu'
    })
    expect(pr).toMatchObject({ number: 78, title: 'Hydrated upstream branch PR' })
  })
})