use std::process::{Command, Output};
fn router(args: &[&str]) -> Output {
Command::new(env!("CARGO_BIN_EXE_link-assistant-router"))
.args(args)
.env("TOKEN_SECRET", "auth-cli-test-secret")
.output()
.expect("router CLI should run")
}
#[test]
fn claude_code_without_a_pending_login_does_not_start_a_new_login() {
let home = tempfile::tempdir().expect("temp home");
let output = Command::new(env!("CARGO_BIN_EXE_link-assistant-router"))
.args([
"auth",
"claude",
"--flow",
"code",
"--code",
"copied-code#previous-state",
])
.env("HOME", home.path())
.env("CLAUDE_CODE_HOME", home.path().join(".claude"))
.env("TOKEN_SECRET", "auth-cli-test-secret")
.env("DATA_DIR", home.path().join("router-data"))
.env("STORAGE_POLICY", "text")
.output()
.expect("router CLI should run");
assert!(!output.status.success());
assert!(
!String::from_utf8_lossy(&output.stdout).contains("Open this URL:"),
"supplying a code must not create a different PKCE login: {}",
String::from_utf8_lossy(&output.stdout)
);
let stderr = String::from_utf8_lossy(&output.stderr);
assert!(
stderr.contains("no pending Claude authorization"),
"{stderr}"
);
assert!(stderr.contains("auth claude --flow code"), "{stderr}");
}
#[test]
fn claude_code_is_rejected_for_the_cli_fallback_without_starting_it() {
let home = tempfile::tempdir().expect("temp home");
let output = Command::new(env!("CARGO_BIN_EXE_link-assistant-router"))
.args(["auth", "claude", "--flow", "cli", "--code", "copied-code"])
.env("HOME", home.path())
.env("CLAUDE_CODE_HOME", home.path().join(".claude"))
.env("TOKEN_SECRET", "auth-cli-test-secret")
.env("DATA_DIR", home.path().join("router-data"))
.env("STORAGE_POLICY", "text")
.output()
.expect("router CLI should run");
assert_eq!(output.status.code(), Some(2));
assert!(!String::from_utf8_lossy(&output.stdout).contains("Open this URL:"));
assert!(String::from_utf8_lossy(&output.stderr).contains("--code requires --flow code"));
}
#[test]
fn unsupported_provider_flows_are_rejected_during_parsing() {
for (provider, flow) in [
("claude", "device"),
("claude", "loopback"),
("codex", "code"),
("codex", "cli"),
] {
let output = router(&["auth", provider, "--flow", flow]);
assert_eq!(
output.status.code(),
Some(2),
"auth {provider} accepted {flow}"
);
assert!(
String::from_utf8_lossy(&output.stderr).contains("invalid value"),
"auth {provider} --flow {flow} did not explain the failure: {}",
String::from_utf8_lossy(&output.stderr)
);
}
}
#[test]
fn provider_help_lists_supported_flows() {
for (provider, supported_flows, unsupported_flows) in [
("claude", ["auto", "code", "cli"], ["device", "loopback"]),
("codex", ["auto", "device", "loopback"], ["code", "cli"]),
] {
let output = router(&["auth", provider, "--help"]);
assert!(output.status.success());
let stdout = String::from_utf8_lossy(&output.stdout);
let possible_values = stdout
.split("Possible values:")
.nth(1)
.and_then(|section| section.split("[default:").next())
.expect("flow possible-values section");
for flow in supported_flows {
assert!(possible_values.contains(&format!("- {flow}:")), "{stdout}");
}
for flow in unsupported_flows {
assert!(!possible_values.contains(&format!("- {flow}:")), "{stdout}");
let rejected = router(&["auth", provider, "--flow", flow]);
assert_eq!(
rejected.status.code(),
Some(2),
"auth {provider} accepted {flow}"
);
}
}
}