bbcloud 0.18.2

#![allow(clippy::unwrap_used)] // test code is exempt from the unwrap/expect ban

use assert_cmd::Command;
use predicates::prelude::PredicateBooleanExt;
use predicates::str::contains;

/// Runs `bb` with the project root and both config locations pointed inside
/// tempdirs, so a test can never write the developer's real `~/.config/bb` or
/// reach the real OS keyring.
fn bb(project: &std::path::Path, cfg: &std::path::Path) -> Command {
    let mut cmd = Command::cargo_bin("bb").unwrap();
    cmd.current_dir(project)
        .env("HOME", cfg)
        .env("XDG_CONFIG_HOME", cfg)
        .env("NO_COLOR", "1")
        // These commands never touch the keyring by design; this is belt and braces.
        .env("BB_KEYRING_DISABLE", "1");
    cmd
}

/// Convenience over `bb()` for tests that don't need the project root and the
/// config location to be separate tempdirs.
fn bb_in(dir: &std::path::Path) -> Command {
    bb(dir, dir)
}

#[test]
fn install_creates_the_agents_skill_and_says_so() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();

    bb(project.path(), cfg.path())
        .args(["skill", "install"])
        .assert()
        .success()
        .stdout(contains(".agents/skills/bitbucket-cloud/SKILL.md"));

    let installed = project
        .path()
        .join(".agents/skills/bitbucket-cloud/SKILL.md");
    assert!(installed.is_file(), "skill was not written");
    let text = std::fs::read_to_string(installed).unwrap();
    assert!(text.starts_with("---"), "installed file is not the skill");
}

/// The whole point of the group: it must work on a machine that has never run
/// `bb auth login`. Anything routed through the credential loader exits 2.
#[test]
fn install_needs_no_credentials() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();

    bb(project.path(), cfg.path())
        .args(["skill", "install"])
        .env_remove("BB_EMAIL")
        .env_remove("BB_TOKEN")
        .assert()
        .success();
}

#[test]
fn install_is_idempotent() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();
    bb(project.path(), cfg.path())
        .args(["skill", "install"])
        .assert()
        .success();

    bb(project.path(), cfg.path())
        .args(["skill", "install"])
        .assert()
        .success()
        .stdout(contains("unchanged"));
}

#[test]
fn a_modified_skill_makes_install_exit_one_without_clobbering() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();
    bb(project.path(), cfg.path())
        .args(["skill", "install"])
        .assert()
        .success();

    let path = project
        .path()
        .join(".agents/skills/bitbucket-cloud/SKILL.md");
    std::fs::write(&path, "# ours\n").unwrap();

    bb(project.path(), cfg.path())
        .args(["skill", "install"])
        .assert()
        .code(1)
        .stdout(contains("skipped_modified").not())
        .stderr(contains("skipped_modified"))
        .stderr(contains("--force"));
    assert_eq!(std::fs::read_to_string(&path).unwrap(), "# ours\n");

    bb(project.path(), cfg.path())
        .args(["skill", "install", "--force"])
        .assert()
        .success();
    assert!(std::fs::read_to_string(&path).unwrap().starts_with("---"));
}

#[test]
fn status_reports_current_then_modified() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();
    bb(project.path(), cfg.path())
        .args(["skill", "install"])
        .assert()
        .success();

    bb(project.path(), cfg.path())
        .args(["skill", "status"])
        .assert()
        .success()
        .stdout(contains("current"));

    std::fs::write(
        project
            .path()
            .join(".agents/skills/bitbucket-cloud/SKILL.md"),
        "# ours\n",
    )
    .unwrap();

    bb(project.path(), cfg.path())
        .args(["skill", "status"])
        .assert()
        .success()
        // `contains("modified")` would also match `skipped_modified` — the
        // glyph that matters here is the bare `State::Modified` word, not a
        // substring of some other state's name.
        .stdout(contains("modified").and(contains("skipped_modified").not()));
}

#[test]
fn status_reports_missing_when_the_file_is_deleted() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();
    bb(project.path(), cfg.path())
        .args(["skill", "install"])
        .assert()
        .success();
    std::fs::remove_file(
        project
            .path()
            .join(".agents/skills/bitbucket-cloud/SKILL.md"),
    )
    .unwrap();

    bb(project.path(), cfg.path())
        .args(["skill", "status"])
        .assert()
        .success()
        .stdout(contains("missing"));
}

#[test]
fn uninstall_removes_the_file_and_forgets_it() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();
    bb(project.path(), cfg.path())
        .args(["skill", "install"])
        .assert()
        .success();

    bb(project.path(), cfg.path())
        .args(["skill", "uninstall"])
        .assert()
        .success();
    assert!(!project
        .path()
        .join(".agents/skills/bitbucket-cloud/SKILL.md")
        .exists());

    // Nothing tracked any more.
    let out = bb(project.path(), cfg.path())
        .args(["skill", "status", "--json"])
        .output()
        .unwrap();
    let value: serde_json::Value = serde_json::from_slice(&out.stdout).unwrap();
    assert_eq!(value, serde_json::json!([]));
}

#[test]
fn uninstall_leaves_a_modified_file_alone_without_force() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();
    bb(project.path(), cfg.path())
        .args(["skill", "install"])
        .assert()
        .success();
    let path = project
        .path()
        .join(".agents/skills/bitbucket-cloud/SKILL.md");
    std::fs::write(&path, "# ours\n").unwrap();

    bb(project.path(), cfg.path())
        .args(["skill", "uninstall"])
        .assert()
        .success();
    assert!(
        path.exists(),
        "a customized skill must not be deleted silently"
    );
}

#[test]
fn json_output_is_pure_on_every_subcommand() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();

    for args in [
        vec!["skill", "status", "--json"],
        vec!["skill", "install", "--json"],
        vec!["skill", "status", "--json"],
        vec!["skill", "uninstall", "--json"],
    ] {
        let out = bb(project.path(), cfg.path()).args(&args).output().unwrap();
        let stdout = String::from_utf8_lossy(&out.stdout);
        serde_json::from_str::<serde_json::Value>(stdout.trim())
            .unwrap_or_else(|e| panic!("{args:?} stdout was not JSON: {e}\n{stdout}"));
    }
}

#[test]
fn a_corrupt_state_file_does_not_break_the_command() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();
    let state = cfg.path().join("bb/skills.json");
    std::fs::create_dir_all(state.parent().unwrap()).unwrap();
    std::fs::write(&state, "{not json").unwrap();

    bb(project.path(), cfg.path())
        .args(["skill", "status"])
        .assert()
        .success();
}

/// `status` and `uninstall` must be equally honest about a corrupt state file:
/// both read through `load_state`, so both should warn on stderr rather than
/// one going silent about it.
#[test]
fn a_corrupt_state_file_warns_on_uninstall_too() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();
    let state = cfg.path().join("bb/skills.json");
    std::fs::create_dir_all(state.parent().unwrap()).unwrap();
    std::fs::write(&state, "{not json").unwrap();

    bb(project.path(), cfg.path())
        .args(["skill", "uninstall"])
        .assert()
        .success()
        .stderr(contains("skills.json"));
}

/// `--global` must act on `HOME`, never on the project directory, on both
/// `install` and `uninstall`.
#[test]
fn global_install_and_uninstall_target_home_not_the_project() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();

    bb(project.path(), cfg.path())
        .args(["skill", "install", "--global"])
        .assert()
        .success();

    let global_path = cfg.path().join(".agents/skills/bitbucket-cloud/SKILL.md");
    let project_path = project
        .path()
        .join(".agents/skills/bitbucket-cloud/SKILL.md");
    assert!(
        global_path.is_file(),
        "global install should write under HOME"
    );
    assert!(
        !project_path.exists(),
        "global install must not touch the project directory"
    );

    bb(project.path(), cfg.path())
        .args(["skill", "uninstall", "--global"])
        .assert()
        .success();
    assert!(
        !global_path.exists(),
        "global uninstall should remove the HOME copy"
    );
}

/// A symlinked Claude entry must be removed as a link, not followed into its
/// target. Uninstalling both agents naturally removes the `.agents` copy too
/// (it's tracked in its own right), so this only proves the `.claude` entry
/// actually disappears — the "did removal follow the link into its target"
/// property is covered by the library-level test in `src/skill.rs`, which
/// scopes the uninstall to just the Claude entry. Tolerates the platform
/// falling back to a real file instead of a symlink, same as the Task 2 test.
/// `install --agent claude` end to end, including a pre-existing hand-made
/// symlink at the Claude location (what the old README's `ln -s` step told
/// users to create). This is the exact gap that let Critical 2 slip through:
/// `--agent claude` alone was never exercised, so `install` recording
/// `kind: "file"` for a symlink it did not create itself went unnoticed.
#[test]
fn install_agent_claude_over_a_hand_made_symlink_then_uninstall_preserves_agents_copy() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();

    std::fs::create_dir_all(project.path().join(".agents/skills/bitbucket-cloud")).unwrap();
    std::fs::write(
        project
            .path()
            .join(".agents/skills/bitbucket-cloud/SKILL.md"),
        std::fs::read_to_string(concat!(
            env!("CARGO_MANIFEST_DIR"),
            "/.agents/skills/bitbucket-cloud/SKILL.md"
        ))
        .unwrap(),
    )
    .unwrap();

    let claude_dir = project.path().join(".claude/skills/bitbucket-cloud");
    std::fs::create_dir_all(claude_dir.parent().unwrap()).unwrap();
    #[cfg(unix)]
    std::os::unix::fs::symlink("../../.agents/skills/bitbucket-cloud", &claude_dir).unwrap();

    bb(project.path(), cfg.path())
        .args(["skill", "install", "--agent", "claude"])
        .assert()
        .success();

    bb(project.path(), cfg.path())
        .args(["skill", "uninstall"])
        .assert()
        .success();

    let agents_file = project
        .path()
        .join(".agents/skills/bitbucket-cloud/SKILL.md");
    assert!(
        agents_file.is_file(),
        "the .agents copy must survive uninstalling the claude link"
    );
    assert!(
        std::fs::symlink_metadata(&claude_dir).is_err(),
        "no dangling claude symlink should remain — Path::exists() would wrongly \
         report false for a dangling link, so this checks symlink_metadata instead"
    );
}

/// Important 4: the human-readable uninstall messages must distinguish
/// "removed", "refused because modified", and "was already gone" rather than
/// collapsing the latter two into the same `false` boolean.
#[test]
fn uninstall_messages_distinguish_removed_refused_and_absent() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();

    bb(project.path(), cfg.path())
        .args(["skill", "install", "--agent", "all"])
        .assert()
        .success();

    let agents_path = project
        .path()
        .join(".agents/skills/bitbucket-cloud/SKILL.md");
    std::fs::write(&agents_path, "# ours\n").unwrap();

    let claude_dir = project.path().join(".claude/skills/bitbucket-cloud");
    // Remove the claude side out from under bb, so its tracked entry is
    // "absent" rather than "removed" or "refused".
    if claude_dir.exists() || std::fs::symlink_metadata(&claude_dir).is_ok() {
        let _ = std::fs::remove_dir_all(&claude_dir);
        let _ = std::fs::remove_file(&claude_dir);
    }

    bb(project.path(), cfg.path())
        .args(["skill", "uninstall"])
        .assert()
        .success()
        .stderr(contains(
            "edited locally — left alone (pass --force to remove)",
        ))
        .stdout(contains("already gone — nothing to remove"));
}

#[test]
fn uninstall_removes_a_symlinked_claude_entry() {
    let project = tempfile::tempdir().unwrap();
    let cfg = tempfile::tempdir().unwrap();

    bb(project.path(), cfg.path())
        .args(["skill", "install", "--agent", "all"])
        .assert()
        .success();

    let claude_dir = project.path().join(".claude/skills/bitbucket-cloud");
    assert!(claude_dir.join("SKILL.md").exists() || claude_dir.exists());

    bb(project.path(), cfg.path())
        .args(["skill", "uninstall"])
        .assert()
        .success();

    assert!(
        !claude_dir.exists() && !claude_dir.join("SKILL.md").exists(),
        "the claude entry (link or file) should be gone"
    );
}

/// The embedded skill and the CLI ship together. If a command exists and the
/// skill does not mention it, an agent will never use it.
#[test]
fn skill_documents_build_status() {
    let text = bb_cli::skill::skill_by_name("bitbucket-cloud")
        .unwrap()
        .content;
    assert!(text.contains("bb pr build"), "skill omits `bb pr build`");
    assert!(
        text.contains("--build-status"),
        "skill omits `--build-status`"
    );
    assert!(
        text.contains("build_state"),
        "skill omits the rollup json field"
    );
}

#[test]
fn install_writes_every_skill() {
    let dir = tempfile::tempdir().unwrap();
    bb_in(dir.path())
        .args(["skill", "install", "--agent", "agents", "--json"])
        .assert()
        .success();
    for skill in bb_cli::skill::SKILLS.iter() {
        let path = dir
            .path()
            .join(format!(".agents/skills/{}/SKILL.md", skill.name));
        assert!(path.is_file(), "{} was not installed", skill.name);
    }
}

#[test]
fn skill_flag_installs_only_that_skill() {
    let dir = tempfile::tempdir().unwrap();
    bb_in(dir.path())
        .args([
            "skill",
            "install",
            "--agent",
            "agents",
            "--skill",
            "bbc-daily-brief",
            "--json",
        ])
        .assert()
        .success();
    assert!(dir
        .path()
        .join(".agents/skills/bbc-daily-brief/SKILL.md")
        .is_file());
    assert!(!dir
        .path()
        .join(".agents/skills/bitbucket-cloud/SKILL.md")
        .exists());
}

#[test]
fn an_unknown_skill_name_is_rejected() {
    let dir = tempfile::tempdir().unwrap();
    bb_in(dir.path())
        .args(["skill", "install", "--skill", "nope", "--json"])
        .assert()
        .failure();
}

#[test]
fn status_json_names_the_skill_per_row() {
    let dir = tempfile::tempdir().unwrap();
    bb_in(dir.path())
        .args(["skill", "install", "--agent", "agents", "--json"])
        .assert()
        .success();
    let out = bb_in(dir.path())
        .args(["skill", "status", "--json"])
        .assert()
        .success();
    let stdout = String::from_utf8(out.get_output().stdout.clone()).unwrap();
    let rows: serde_json::Value = serde_json::from_str(&stdout).unwrap();
    let names: Vec<String> = rows
        .as_array()
        .unwrap()
        .iter()
        .map(|r| r["skill"].as_str().unwrap().to_string())
        .collect();
    assert!(
        names.contains(&"bitbucket-cloud".to_string()),
        "got {names:?}"
    );
    assert!(
        names.contains(&"bbc-daily-brief".to_string()),
        "got {names:?}"
    );
}

#[test]
fn editing_one_skill_does_not_make_the_other_modified() {
    let dir = tempfile::tempdir().unwrap();
    bb_in(dir.path())
        .args(["skill", "install", "--agent", "agents", "--json"])
        .assert()
        .success();
    std::fs::write(
        dir.path().join(".agents/skills/bbc-daily-brief/SKILL.md"),
        "locally edited",
    )
    .unwrap();

    let out = bb_in(dir.path())
        .args(["skill", "status", "--json"])
        .assert()
        .success();
    let stdout = String::from_utf8(out.get_output().stdout.clone()).unwrap();
    let rows: serde_json::Value = serde_json::from_str(&stdout).unwrap();
    for row in rows.as_array().unwrap() {
        let expected = if row["skill"] == "bbc-daily-brief" {
            "modified"
        } else {
            "current"
        };
        assert_eq!(row["state"], expected, "row {row}");
    }
}

#[test]
fn uninstall_with_skill_removes_only_that_one() {
    let dir = tempfile::tempdir().unwrap();
    bb_in(dir.path())
        .args(["skill", "install", "--agent", "agents", "--json"])
        .assert()
        .success();
    bb_in(dir.path())
        .args(["skill", "uninstall", "--skill", "bbc-daily-brief", "--json"])
        .assert()
        .success();
    assert!(!dir
        .path()
        .join(".agents/skills/bbc-daily-brief/SKILL.md")
        .exists());
    assert!(dir
        .path()
        .join(".agents/skills/bitbucket-cloud/SKILL.md")
        .is_file());
}

#[test]
fn the_brief_skill_states_it_is_invoked_only_on_request() {
    let text = bb_cli::skill::skill_by_name("bbc-daily-brief")
        .unwrap()
        .content;
    assert!(text.contains("Never invoke this skill proactively"));
    assert!(text.contains("bb pr mine"));
    assert!(text.contains("Never resolve a comment thread"));
}

#[test]
fn the_main_skill_documents_the_cross_repository_query() {
    let text = bb_cli::skill::skill_by_name("bitbucket-cloud")
        .unwrap()
        .content;
    assert!(text.contains("bb pr mine"));
    assert!(text.contains("bbc-daily-brief"));
    assert!(text.contains("my_role"));
}

/// The brief is written by the agent *for the user*, so its prose must address
/// them as "you" rather than narrating in the first person. The json field names
/// `my_role`/`my_review_state` are the api's wording and must still be
/// documented, so they are stripped before the search; the frontmatter is too,
/// since its `description` quotes what a user says ("what needs my attention").
#[test]
fn the_brief_skill_addresses_the_user_not_itself() {
    let text = bb_cli::skill::skill_by_name("bbc-daily-brief")
        .unwrap()
        .content;
    let body = text
        .split_once("\n---\n")
        .map(|(_, rest)| rest.to_string())
        .unwrap_or_else(|| text.to_string());
    // `pr mine` is the command's own name, and `my_role`/`my_review_state` are
    // api field names: all three must stay documented, none of them is prose.
    let prose = body
        .replace("my_role", "")
        .replace("my_review_state", "")
        .replace("pr mine", "");
    for needle in [" my ", " mine ", " I ", "My ", "Mine "] {
        assert!(
            !prose.contains(needle),
            "first-person prose `{needle}` must not appear in a brief addressed to the user"
        );
    }
    assert!(
        prose.contains("your") || prose.contains("Your"),
        "the brief speaks to the user as `you`"
    );
}

/// The skill texts are compiled into the published binary, so an example copied
/// out of a real terminal session ships a real workspace, repository, colleague
/// or ticket id to everyone who installs `bb`. Examples must use the placeholder
/// `acme` workspace. This test is deliberately a denylist of the shapes that have
/// slipped in before rather than a clever heuristic: add to it, don't outsmart it.
#[test]
fn no_shipped_skill_text_names_a_real_workspace_or_person() {
    for skill in bb_cli::skill::SKILLS.iter() {
        let lower = skill.content.to_lowercase();
        for needle in [
            "check24",
            "mailgpt",
            "hyein",
            "afal-",
            "bitbucket.org/check",
        ] {
            assert!(
                !lower.contains(needle),
                "{} ships `{needle}` — examples must use the placeholder `acme` workspace",
                skill.name
            );
        }
    }
}

/// The denylist above only catches identifiers already known to be real. This
/// is the positive half: every concrete `-R <workspace>/<repo>` example in the
/// shipped skill text must use the `acme` workspace, so a *new* real workspace
/// slug slipping into an example fails the build even before anyone thinks to
/// add it to the denylist. A bare placeholder like `-R <workspace>/<repo>` is
/// not a concrete example and is skipped.
#[test]
fn every_concrete_repo_flag_example_uses_the_acme_workspace() {
    for skill in bb_cli::skill::SKILLS.iter() {
        let tokens: Vec<&str> = skill.content.split_whitespace().collect();
        for pair in tokens.windows(2) {
            if pair[0] != "-R" {
                continue;
            }
            let Some((workspace, _repo)) = pair[1].split_once('/') else {
                continue;
            };
            if workspace.starts_with('<') || workspace.starts_with('$') {
                continue; // a placeholder, not a concrete example
            }
            assert_eq!(
                workspace, "acme",
                "{} uses `-R {}` — concrete examples must use the acme workspace",
                skill.name, pair[1]
            );
        }
    }
}

/// `owner/repo#123` is GitHub's issue-reference syntax, and chat clients and
/// terminals rewrite it into a link to github.com. A brief about Bitbucket work
/// that renders it sends the reader to a GitHub 404 — which is exactly what
/// happened before this rule existed. No shipped skill text may contain that
/// shape; identifiers are written `PR <id>` with a real Bitbucket url.
#[test]
fn no_shipped_skill_text_uses_the_github_issue_shorthand() {
    for skill in bb_cli::skill::SKILLS.iter() {
        for (i, line) in skill.content.lines().enumerate() {
            // `<word>/<word>#<digits>` — the shape clients auto-link.
            let offending = line.split_whitespace().find(|token| {
                let token = token.trim_start_matches(['(', '[', '`']);
                match token.split_once('#') {
                    Some((path, rest)) => {
                        path.contains('/')
                            && !path.contains("://")
                            && !rest.is_empty()
                            && rest.chars().take_while(|c| c.is_ascii_digit()).count() > 0
                            && rest.starts_with(|c: char| c.is_ascii_digit())
                    }
                    None => false,
                }
            });
            assert!(
                offending.is_none(),
                "{} line {} writes `{}` — clients auto-link `owner/repo#id` to github.com; \
                 use `PR <id>` with the row's own url instead",
                skill.name,
                i + 1,
                offending.unwrap_or_default()
            );
        }
    }
}

/// The brief's emoji are visual anchors, not decoration: five glyphs, each with
/// one meaning. This asserts the allowlist rather than a denylist, so a cheerful
/// 🚀 added later fails the build instead of shipping — the value of the anchors
/// is that a reader can scan them, and that only holds while they stay scarce.
#[test]
fn the_brief_skill_uses_only_the_allowed_emoji() {
    const ALLOWED: [char; 5] = ['🔴', '⏳', '✅', '💥', '💤'];
    let text = bb_cli::skill::skill_by_name("bbc-daily-brief")
        .unwrap()
        .content;
    for c in text.chars() {
        let pictographic = matches!(c as u32,
            0x1F300..=0x1FAFF   // emoji proper
            | 0x2600..=0x27BF   // misc symbols and dingbats
            | 0x2B00..=0x2BFF); // arrows and stars block used by emoji
        if pictographic && !ALLOWED.contains(&c) {
            panic!(
                "bbc-daily-brief ships an unlisted emoji `{c}` (U+{:04X})",
                c as u32
            );
        }
    }
    for c in ALLOWED {
        assert!(text.contains(c), "the brief no longer documents `{c}`");
    }
}

#[test]
fn the_brief_skill_carries_the_grouped_output_contract() {
    let text = bb_cli::skill::skill_by_name("bbc-daily-brief")
        .unwrap()
        .content;
    assert!(text.contains("YOU'RE BLOCKING"));
    assert!(text.contains("WAITING ON OTHERS"));
    assert!(
        text.contains("bb pr list -R"),
        "the repo-scoped path must be documented"
    );
    assert!(
        text.contains("my_role"),
        "the json field name is still documented"
    );
}

/// The state file lives under `$XDG_CONFIG_HOME/bb/`, and these tests point both
/// `HOME` and `XDG_CONFIG_HOME` at one tempdir, so look in both shapes.
fn state_file(cfg: &std::path::Path) -> std::path::PathBuf {
    let xdg = cfg.join("bb/skills.json");
    if xdg.exists() {
        return xdg;
    }
    cfg.join(".config/bb/skills.json")
}

/// Rewrites every tracked entry's `version` to an old value, the way an upgraded
/// binary finds a state file written by its predecessor.
fn age_the_state_file(cfg: &std::path::Path) {
    let path = state_file(cfg);
    let raw = std::fs::read_to_string(&path).unwrap();
    let mut entries: Vec<serde_json::Value> = serde_json::from_str(&raw).unwrap();
    assert!(!entries.is_empty(), "nothing tracked to age");
    for e in &mut entries {
        e["version"] = serde_json::Value::String("0.0.1".into());
    }
    std::fs::write(&path, serde_json::to_string_pretty(&entries).unwrap()).unwrap();
}

/// Makes the state file claim that `bb` itself wrote `content` at `path`, which
/// is what distinguishes "the binary now ships newer text" (`Stale`, refreshable)
/// from "someone edited this by hand" (`Modified`, left alone). A test that only
/// overwrites the file gets the second case, not the first.
/// `suffix` is matched against the end of each tracked path rather than compared
/// whole: on macOS a tempdir is handed out as `/var/folders/...` but resolves to
/// `/private/var/folders/...`, so an exact string comparison misses.
fn record_as_written_by_bb(cfg: &std::path::Path, suffix: &str, content: &str) {
    let state = state_file(cfg);
    let raw = std::fs::read_to_string(&state).unwrap();
    let mut entries: Vec<serde_json::Value> = serde_json::from_str(&raw).unwrap();
    let mut found = false;
    for e in &mut entries {
        if e["path"].as_str().is_some_and(|p| p.ends_with(suffix)) {
            e["sha256"] =
                serde_json::Value::String(bb_cli::skill::content_hash(content.as_bytes()));
            found = true;
        }
    }
    assert!(found, "no tracked entry ending in {suffix}");
    std::fs::write(&state, serde_json::to_string_pretty(&entries).unwrap()).unwrap();
}

fn state_versions(cfg: &std::path::Path) -> Vec<String> {
    let raw = std::fs::read_to_string(state_file(cfg)).unwrap();
    let entries: Vec<serde_json::Value> = serde_json::from_str(&raw).unwrap();
    entries
        .iter()
        .map(|e| e["version"].as_str().unwrap().to_string())
        .collect()
}

#[test]
fn an_unrelated_command_refreshes_skills_left_behind_by_an_upgrade() {
    let dir = tempfile::tempdir().unwrap();
    bb_in(dir.path())
        .args(["skill", "install", "--agent", "agents", "--json"])
        .assert()
        .success();

    let path = dir.path().join(".agents/skills/bitbucket-cloud/SKILL.md");
    let old = "old text from a previous release";
    std::fs::write(&path, old).unwrap();
    record_as_written_by_bb(dir.path(), ".agents/skills/bitbucket-cloud/SKILL.md", old);
    age_the_state_file(dir.path());

    // A command with nothing to do with skills.
    bb_in(dir.path())
        .args(["completions", "bash"])
        .assert()
        .success();

    let after = std::fs::read_to_string(&path).unwrap();
    assert_ne!(
        after, "old text from a previous release",
        "auto-refresh should have rewritten it"
    );
    assert!(after.starts_with("---"), "and written the real skill text");
    assert!(
        state_versions(dir.path()).iter().all(|v| v != "0.0.1"),
        "the recorded version must move forward so the check stops firing"
    );
}

#[test]
fn auto_refresh_prints_nothing_on_stdout() {
    let dir = tempfile::tempdir().unwrap();
    bb_in(dir.path())
        .args(["skill", "install", "--agent", "agents", "--json"])
        .assert()
        .success();
    let path = dir.path().join(".agents/skills/bitbucket-cloud/SKILL.md");
    std::fs::write(&path, "old text").unwrap();
    record_as_written_by_bb(
        dir.path(),
        ".agents/skills/bitbucket-cloud/SKILL.md",
        "old text",
    );
    age_the_state_file(dir.path());

    let out = bb_in(dir.path())
        .args(["skill", "status", "--json"])
        .assert()
        .success();
    let stdout = String::from_utf8(out.get_output().stdout.clone()).unwrap();
    serde_json::from_str::<serde_json::Value>(stdout.trim())
        .unwrap_or_else(|e| panic!("stdout must be exactly one json value: {e}\n{stdout}"));
}

#[test]
fn the_opt_out_leaves_a_stale_file_alone() {
    let dir = tempfile::tempdir().unwrap();
    bb_in(dir.path())
        .args(["skill", "install", "--agent", "agents", "--json"])
        .assert()
        .success();
    let path = dir.path().join(".agents/skills/bitbucket-cloud/SKILL.md");
    std::fs::write(&path, "old text").unwrap();
    record_as_written_by_bb(
        dir.path(),
        ".agents/skills/bitbucket-cloud/SKILL.md",
        "old text",
    );
    age_the_state_file(dir.path());

    bb_in(dir.path())
        .env("BB_SKILL_NO_AUTO_REFRESH", "1")
        .args(["completions", "bash"])
        .assert()
        .success();

    assert_eq!(std::fs::read_to_string(&path).unwrap(), "old text");
}

#[test]
fn auto_refresh_never_overwrites_a_local_edit() {
    let dir = tempfile::tempdir().unwrap();
    bb_in(dir.path())
        .args(["skill", "install", "--agent", "agents", "--json"])
        .assert()
        .success();
    let path = dir.path().join(".agents/skills/bbc-daily-brief/SKILL.md");
    std::fs::write(&path, "my own notes").unwrap();
    age_the_state_file(dir.path());

    bb_in(dir.path())
        .args(["completions", "bash"])
        .assert()
        .success();

    assert_eq!(std::fs::read_to_string(&path).unwrap(), "my own notes");
    assert!(
        state_versions(dir.path()).iter().all(|v| v != "0.0.1"),
        "a skipped entry still records the running version"
    );
}

#[test]
fn a_state_entry_under_a_deleted_tree_is_pruned_by_any_command() {
    let dir = tempfile::tempdir().unwrap();
    let gone = dir.path().join("was-a-temp-dir");
    std::fs::create_dir_all(&gone).unwrap();
    bb(gone.as_path(), dir.path())
        .args(["skill", "install", "--agent", "agents", "--json"])
        .assert()
        .success();
    std::fs::remove_dir_all(&gone).unwrap();
    age_the_state_file(dir.path());

    bb_in(dir.path())
        .args(["completions", "bash"])
        .assert()
        .success();

    let out = bb_in(dir.path())
        .args(["skill", "status", "--json"])
        .assert()
        .success();
    let stdout = String::from_utf8(out.get_output().stdout.clone()).unwrap();
    assert!(
        !stdout.contains("was-a-temp-dir"),
        "the vanished entry should be gone from status: {stdout}"
    );
    assert!(!gone.exists(), "pruning must not recreate the tree");
}

/// The design ruling for finding 4: the pre-command auto-refresh must never
/// resurrect a file the user deleted on purpose. Only `bb skill install` and
/// `bb update` restore a missing file (see
/// `tests/update.rs::update_restores_a_deleted_skill_file` for the contrast).
/// A `Missing` entry the auto-refresh declines to restore must also stay
/// tracked with its old version, not get stamped as if it were current.
#[test]
fn auto_refresh_leaves_a_deliberately_deleted_file_deleted() {
    let dir = tempfile::tempdir().unwrap();
    bb_in(dir.path())
        .args(["skill", "install", "--agent", "agents", "--json"])
        .assert()
        .success();
    let path = dir.path().join(".agents/skills/bitbucket-cloud/SKILL.md");
    assert!(path.is_file(), "sanity: install wrote the file");
    std::fs::remove_file(&path).unwrap();
    age_the_state_file(dir.path());

    bb_in(dir.path())
        .args(["completions", "bash"])
        .assert()
        .success();

    assert!(
        !path.exists(),
        "auto-refresh must not silently write a deleted skill file back"
    );
    assert!(
        state_versions(dir.path()).iter().any(|v| v == "0.0.1"),
        "the entry for the deleted file must keep its old version, not be stamped current"
    );
}

/// The workflow skill is only useful if it carries the whole flow: the two
/// commands it drives, the git scan that produces suggestions, and the two human
/// gates. Each assertion is a step someone could quietly drop.
#[test]
fn the_open_pr_skill_carries_the_whole_workflow() {
    let text = bb_cli::skill::skill_by_name("bbc-open-pr").unwrap().content;
    for needle in [
        "bb pr create",
        "bb pr reviewers add",
        "git log",
        "--follow",
        "## Why",
        "## What changed",
    ] {
        assert!(
            text.contains(needle),
            "bbc-open-pr no longer documents `{needle}`"
        );
    }
}

/// Bitbucket Cloud strips raw HTML from pull request descriptions, so the
/// GitHub collapsible idiom renders as nothing. This is the single most likely
/// well-meaning regression in this file, hence a test rather than a comment.
#[test]
fn the_open_pr_skill_never_suggests_html_collapsibles() {
    let text = bb_cli::skill::skill_by_name("bbc-open-pr").unwrap().content;
    for tag in ["<details", "<summary", "<br", "<div"] {
        assert!(
            !text.contains(tag),
            "bbc-open-pr suggests `{tag}` — Bitbucket renders no raw HTML in descriptions"
        );
    }
}

/// The reviewer gate and the description gate are the reason this skill exists:
/// an agent must never tag people or open a PR body the user has not seen.
#[test]
fn the_open_pr_skill_keeps_both_human_gates() {
    let text = bb_cli::skill::skill_by_name("bbc-open-pr")
        .unwrap()
        .content
        .to_lowercase();
    assert!(
        text.contains("print the description back"),
        "the description-approval gate is gone"
    );
    assert!(
        text.contains("never tag anyone the user did not pick"),
        "the reviewer-consent rule is gone"
    );
}

/// A pick that cannot resolve fails at `bb pr reviewers add` time with exit 1,
/// so the skill resolves names against the repository's user pool *before* it
/// suggests them, and says so.
#[test]
fn the_open_pr_skill_resolves_names_before_suggesting() {
    let text = bb_cli::skill::skill_by_name("bbc-open-pr").unwrap().content;
    assert!(text.contains("bb pr reviewers"));
    assert!(
        text.to_lowercase().contains("could not be mapped"),
        "unmappable git authors must still be reported, not dropped"
    );
}

/// Every skill carries a one-line summary, because the install prompt lists them
/// by that line. An empty or over-long summary makes the prompt useless.
#[test]
fn every_skill_carries_a_short_summary() {
    for skill in bb_cli::skill::SKILLS.iter() {
        let summary = skill.summary;
        assert!(!summary.trim().is_empty(), "{} has no summary", skill.name);
        assert!(
            summary.len() <= 80,
            "{}'s summary is {} chars — the prompt shows one line",
            skill.name,
            summary.len()
        );
        assert!(
            !summary.contains('\n'),
            "{}'s summary spans lines",
            skill.name
        );
    }
}

/// The main skill stays the command reference — an agent that installed only
/// this one must still be able to open a pull request — but the workflow lives
/// in `bbc-open-pr`, and this skill points at it rather than repeating it.
#[test]
fn the_main_skill_points_at_the_open_pr_skill() {
    let text = bb_cli::skill::skill_by_name("bitbucket-cloud")
        .unwrap()
        .content;
    assert!(
        text.contains("bbc-open-pr"),
        "the main skill does not point at the workflow skill"
    );
    assert!(
        text.contains("bb pr create <target>"),
        "the command map must still carry bb pr create"
    );
    assert!(
        !text.contains("## What changed"),
        "the description template belongs to bbc-open-pr only"
    );
}

/// The load-bearing regression guard. The integration suite, CI, and
/// `auto_refresh_skills` all run without a terminal. If a prompt ever appears on
/// that path it hangs the suite, so a non-interactive install must still take
/// every skill and ask nothing — even in human format, where the prompt would
/// otherwise fire. Piped stdin (via `assert_cmd`'s default, non-tty stdin) is
/// what stands in for "no terminal" here, and human format (no `--json`) is
/// what makes this test distinct from `install_writes_every_skill`: it is the
/// only one of the two conditions that path checks that a JSON-mode test can't
/// also exercise.
#[test]
fn install_without_a_terminal_still_takes_every_skill() {
    let dir = tempfile::tempdir().unwrap();
    let out = bb_in(dir.path())
        .args(["skill", "install", "--agent", "agents"])
        .output()
        .unwrap();
    assert!(
        out.status.success(),
        "{}",
        String::from_utf8_lossy(&out.stderr)
    );
    let stderr = String::from_utf8_lossy(&out.stderr);
    assert!(
        !stderr.contains("Which skills should be installed"),
        "prompt text leaked onto stderr without a terminal: {stderr}"
    );
    for skill in bb_cli::skill::SKILLS.iter() {
        let path = dir
            .path()
            .join(format!(".agents/skills/{}/SKILL.md", skill.name));
        assert!(
            path.is_file(),
            "{} was not installed on the non-interactive path",
            skill.name
        );
    }
}

/// `--all` is the deliberate opt-out of the prompt, so it must behave exactly
/// like the non-interactive default.
#[test]
fn install_all_matches_the_non_interactive_default() {
    let dir = tempfile::tempdir().unwrap();
    let out = bb_in(dir.path())
        .args(["skill", "install", "--all", "--agent", "agents", "--json"])
        .output()
        .unwrap();
    assert!(
        out.status.success(),
        "{}",
        String::from_utf8_lossy(&out.stderr)
    );
    let rows: serde_json::Value = serde_json::from_slice(&out.stdout).unwrap();
    let names: Vec<String> = rows
        .as_array()
        .unwrap()
        .iter()
        .map(|r| r["skill"].as_str().unwrap().to_string())
        .collect();
    for skill in bb_cli::skill::SKILLS.iter() {
        assert!(
            names.contains(&skill.name.to_string()),
            "{} missing under --all",
            skill.name
        );
    }
}

/// `--skill` already expresses an exact choice, so combining it with `--all` is
/// a contradiction clap should reject rather than silently resolve.
#[test]
fn install_rejects_all_together_with_skill() {
    let dir = tempfile::tempdir().unwrap();
    bb_in(dir.path())
        .args(["skill", "install", "--all", "--skill", "bbc-open-pr"])
        .assert()
        .failure();
}

#[test]
fn the_main_skill_makes_the_agent_ask_before_requesting_changes() {
    let text = bb_cli::skill::skill_by_name("bitbucket-cloud")
        .unwrap()
        .content;
    assert!(
        text.contains("bb pr request-changes 42 --yes"),
        "the skill must show the flag the agent needs after the user says yes"
    );
    assert!(
        text.contains("Never mark changes requested on your own initiative"),
        "the skill must forbid marking without being asked"
    );
}

#[test]
fn the_main_skill_forbids_approving() {
    let text = bb_cli::skill::skill_by_name("bitbucket-cloud")
        .unwrap()
        .content;
    assert!(
        text.contains("Never approve a pull request"),
        "the skill must state the prohibition, not rely on the command being absent"
    );
    assert!(
        !text.contains("bb pr approve"),
        "no such command exists; naming it invites an agent to try it"
    );
}