heddle-cli 0.12.0

An AI-native version control system
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104

// SPDX-License-Identifier: Apache-2.0

use std::process::Command;

use chrono::Duration;
use crypto::{Ed25519Signer, Signer, state_signature_from_signer};
use objects::{
    object::{
        Blob, KeyBinding, KeyBindingRegistry, StateAttachment, StateAttachmentBody, StateSignature,
    },
    store::ObjectStore,
};
use repo::Repository;
use serde_json::Value;
use tempfile::TempDir;

fn signed_repository() -> (TempDir, Repository) {
    let temp = TempDir::new().expect("temp dir");
    let repo = Repository::init_default(temp.path()).expect("init repo");
    let state = repo
        .current_state()
        .expect("read current state")
        .expect("seeded state");
    let signer = Ed25519Signer::generate().expect("signer");
    repo.store()
        .put_state_attachment(&StateAttachment {
            state_id: state.state_id,
            body: StateAttachmentBody::Signature(
                state_signature_from_signer(&state.compute_hash(), &signer).expect("sign state"),
            ),
            attribution: state.attribution.clone(),
            created_at: state.created_at,
            supersedes: None,
        })
        .expect("attach state signature");

    let public_key = hex::encode(signer.public_key());
    let mut binding = KeyBinding {
        algorithm: signer.algorithm().to_string(),
        public_key: public_key.clone(),
        identity_ref: "identity:alice".to_string(),
        role: "author".to_string(),
        added_by_sig: StateSignature {
            algorithm: signer.algorithm().to_string(),
            public_key,
            signature: String::new(),
        },
        valid_from: state.created_at - Duration::seconds(1),
        revoked_at: None,
        delegated_from: None,
    };
    binding.added_by_sig.signature = hex::encode(
        signer
            .sign(&binding.canonical_signing_payload())
            .expect("sign binding"),
    );
    let registry = KeyBindingRegistry::new(vec![binding]);
    repo.store()
        .put_blob(&Blob::new(registry.encode().expect("encode registry")))
        .expect("store registry");
    (temp, repo)
}

fn run_json(repo: &Repository, args: &[&str]) -> Value {
    let output = Command::new(env!("CARGO_BIN_EXE_heddle"))
        .args(args)
        .current_dir(repo.root())
        .env_remove("CODEX_THREAD_ID")
        .output()
        .expect("run heddle");
    assert!(
        output.status.success(),
        "command failed: stdout={} stderr={}",
        String::from_utf8_lossy(&output.stdout),
        String::from_utf8_lossy(&output.stderr)
    );
    serde_json::from_slice(&output.stdout).expect("JSON output")
}

#[test]
fn verify_and_fsck_render_verified_registry_identity_end_to_end() {
    let (_temp, repo) = signed_repository();

    let verify = run_json(&repo, &["--output", "json", "verify", "--provenance"]);
    assert_eq!(verify["clean"], true, "{verify}");
    assert_eq!(
        verify["provenance"]["states"][0]["status"], "Verified(identity:alice)",
        "{verify}"
    );
    assert_eq!(
        verify["provenance"]["states"][0]["identity"], "identity:alice",
        "{verify}"
    );

    let fsck = run_json(
        &repo,
        &["--output", "json", "fsck", "--thorough", "--provenance"],
    );
    assert_eq!(fsck["valid"], true, "{fsck}");
    assert_eq!(
        fsck["provenance"]["states"][0]["status"], "Verified(identity:alice)",
        "{fsck}"
    );
}