@indigoai-us/hq-cli 5.77.13 → 5.78.0

package/src/commands/outposts-self-deploy.test.ts

@@ -1,243 +0,0 @@
-import { Command } from "commander";
-import {
-  afterEach,
-  beforeEach,
-  describe,
-  expect,
-  it,
-  vi,
-  type MockInstance,
-} from "vitest";
-import {
-  registerOutpostsCommand,
-  type SelfDeployDependencies,
-} from "./outposts.js";
-
-type SpawnCall = {
-  command: string;
-  args: string[];
-  options: Parameters<SelfDeployDependencies["spawnSync"]>[2];
-};
-
-const AL2023 = 'ID="amzn"\nVERSION_ID="2023"\n';
-const SECRET = "refresh-token-that-must-never-be-printed";
-
-function successfulSpawn(stdout = "") {
-  return {
-    status: 0,
-    stdout,
-    stderr: "",
-    error: undefined,
-  } as ReturnType<SelfDeployDependencies["spawnSync"]>;
-}
-
-function selfDeployDependencies(input: {
-  osRelease?: string;
-  uname?: string;
-  systemd?: boolean;
-  sudo?: boolean;
-  session?: { refreshToken?: string; idToken?: string } | undefined;
-  stdinTty?: boolean;
-  uid?: number;
-} = {}): { deps: Partial<SelfDeployDependencies>; calls: SpawnCall[] } {
-  const calls: SpawnCall[] = [];
-  const deps: Partial<SelfDeployDependencies> = {
-    readTextFile: () => input.osRelease ?? AL2023,
-    loadCachedTokens: () => input.session ?? { refreshToken: SECRET },
-    getUid: () => input.uid ?? 1000,
-    isStdinTty: () => input.stdinTty ?? true,
-    confirm: async () => true,
-    defaultHqRoot: () => "/home/ec2-user/hq",
-    invokingUser: () => "ec2-user",
-    spawnSync: ((command, args, options) => {
-      calls.push({ command, args, options });
-      if (command === "uname") return successfulSpawn(input.uname ?? "x86_64\n");
-      if (command === "systemctl" && args[0] === "--version") {
-        return input.systemd === false
-          ? { ...successfulSpawn(), status: 1 }
-          : successfulSpawn("systemd 252\n");
-      }
-      if (command === "sudo" && args[0] === "-n") {
-        return input.sudo === false ? { ...successfulSpawn(), status: 1 } : successfulSpawn();
-      }
-      return successfulSpawn();
-    }) as SelfDeployDependencies["spawnSync"],
-  };
-  return { deps, calls };
-}
-
-function buildProgram(deps: Partial<SelfDeployDependencies>): Command {
-  const program = new Command();
-  program.name("hq").exitOverride();
-  registerOutpostsCommand(program, deps);
-  return program;
-}
-
-async function run(
-  deps: Partial<SelfDeployDependencies>,
-  args: string[],
-): Promise<void> {
-  await buildProgram(deps).parseAsync(["node", "hq", ...args]);
-}
-
-let exitSpy: MockInstance<typeof process.exit>;
-let logSpy: MockInstance<typeof console.log>;
-let errorSpy: MockInstance<typeof console.error>;
-let fetchSpy: MockInstance<typeof fetch>;
-
-beforeEach(() => {
-  exitSpy = vi.spyOn(process, "exit").mockImplementation((code?: number) => {
-    throw new Error(`process.exit(${code})`);
-  }) as unknown as MockInstance<typeof process.exit>;
-  logSpy = vi.spyOn(console, "log").mockImplementation(() => {});
-  errorSpy = vi.spyOn(console, "error").mockImplementation(() => {});
-  fetchSpy = vi.spyOn(globalThis, "fetch");
-});
-
-afterEach(() => {
-  vi.restoreAllMocks();
-});
-
-function printed(): string {
-  return [
-    ...logSpy.mock.calls.map((call) => call.map(String).join(" ")),
-    ...errorSpy.mock.calls.map((call) => call.map(String).join(" ")),
-  ].join("\n");
-}
-
-function installedCommands(calls: SpawnCall[]): SpawnCall[] {
-  return calls.filter(
-    (call) =>
-      call.command === "hq" ||
-      (call.command === "sudo" &&
-        ["tee", "chmod", "systemctl"].includes(call.args[0] ?? "")),
-  );
-}
-
-describe("hq outposts self-deploy", () => {
-  it("is hidden from outposts help but remains invokable", async () => {
-    const { deps, calls } = selfDeployDependencies();
-    const program = buildProgram(deps);
-    const outposts = program.commands.find((command) => command.name() === "outposts");
-
-    expect(outposts?.helpInformation()).not.toContain("self-deploy");
-
-    await run(deps, ["outposts", "self-deploy", "--yes"]);
-    expect(calls).toContainEqual(
-      expect.objectContaining({
-        command: "hq",
-        args: ["rescue", "--hq-root", "/home/ec2-user/hq", "--yes"],
-      }),
-    );
-  });
-
-  it("rejects non-Amazon Linux 2023 before installing anything", async () => {
-    const { deps, calls } = selfDeployDependencies({
-      osRelease: 'ID="ubuntu"\nVERSION_ID="24.04"\n',
-    });
-
-    await expect(run(deps, ["outposts", "self-deploy", "--yes"])).rejects.toThrow(
-      "process.exit(1)",
-    );
-    expect(printed()).toContain("Amazon Linux 2023 x86_64");
-    expect(installedCommands(calls)).toEqual([]);
-  });
-
-  it("rejects a host without systemd before installing anything", async () => {
-    const { deps, calls } = selfDeployDependencies({ systemd: false });
-
-    await expect(run(deps, ["outposts", "self-deploy", "--yes"])).rejects.toThrow(
-      "process.exit(1)",
-    );
-    expect(printed()).toContain("systemd is required");
-    expect(installedCommands(calls)).toEqual([]);
-  });
-
-  it("requires an existing hq login before installing anything", async () => {
-    const { deps, calls } = selfDeployDependencies({ session: undefined });
-    deps.loadCachedTokens = () => undefined;
-
-    await expect(run(deps, ["outposts", "self-deploy", "--yes"])).rejects.toThrow(
-      "process.exit(1)",
-    );
-    expect(printed()).toContain("hq login");
-    expect(installedCommands(calls)).toEqual([]);
-  });
-
-  it("aborts without a TTY or --yes before running install commands", async () => {
-    const idToken = `header.${Buffer.from(JSON.stringify({ email: "person@example.com" })).toString("base64url")}.signature`;
-    const { deps, calls } = selfDeployDependencies({
-      stdinTty: false,
-      session: { refreshToken: SECRET, idToken },
-    });
-
-    await expect(run(deps, ["outposts", "self-deploy"])).rejects.toThrow(
-      "process.exit(1)",
-    );
-    expect(printed()).toContain("HQ identity: person@example.com");
-    expect(printed()).toContain("SELF-HOSTED HQ outpost");
-    expect(printed()).toMatch(/pass --yes/i);
-    expect(installedCommands(calls)).toEqual([]);
-  });
-
-  it("installs the all-company watch sync service locally with --yes", async () => {
-    const { deps, calls } = selfDeployDependencies();
-
-    await run(deps, ["outposts", "self-deploy", "--yes"]);
-
-    expect(calls).toContainEqual(
-      expect.objectContaining({
-        command: "hq",
-        args: ["rescue", "--hq-root", "/home/ec2-user/hq", "--yes"],
-      }),
-    );
-    const serviceWrite = calls.find(
-      (call) =>
-        call.command === "sudo" &&
-        call.args[0] === "tee" &&
-        call.args[1] === "/etc/systemd/system/outpost-sync.service",
-    );
-    const serviceContents = String(
-      (serviceWrite?.options as { input?: unknown } | undefined)?.input,
-    );
-    expect(serviceContents).toContain("User=ec2-user");
-    expect(serviceContents).toContain("WorkingDirectory=\"/home/ec2-user/hq\"");
-    expect(serviceContents).toContain("ExecStart=/usr/local/bin/outpost-sync.sh");
-    expect(serviceContents).toContain("Restart=always");
-
-    const scriptWrite = calls.find(
-      (call) =>
-        call.command === "sudo" &&
-        call.args[0] === "tee" &&
-        call.args[1] === "/usr/local/bin/outpost-sync.sh",
-    );
-    const scriptContents = String(
-      (scriptWrite?.options as { input?: unknown } | undefined)?.input,
-    );
-    expect(scriptContents).toContain("hq auth refresh");
-    expect(scriptContents).toContain("hq-sync-runner");
-    expect(scriptContents).toContain("--companies");
-    expect(scriptContents).toContain("--watch");
-    expect(scriptContents).toContain("--event-push");
-    expect(scriptContents).toContain("--poll-remote-ms 60000");
-    expect(calls).toContainEqual(
-      expect.objectContaining({
-        command: "sudo",
-        args: ["systemctl", "enable", "--now", "outpost-sync.service"],
-      }),
-    );
-  });
-
-  it("never exposes session secrets or makes hq-pro requests", async () => {
-    const { deps, calls } = selfDeployDependencies({
-      session: { refreshToken: SECRET },
-    });
-
-    await run(deps, ["outposts", "self-deploy", "--yes"]);
-
-    expect(JSON.stringify(calls)).not.toContain(SECRET);
-    expect(printed()).not.toContain(SECRET);
-    expect(fetchSpy).not.toHaveBeenCalled();
-    expect(exitSpy).not.toHaveBeenCalled();
-  });
-});