clawdie-ai/setup/system-update.test.ts

import { describe, expect, it } from 'vitest';

import {
  parseArgs,
  parseFreeBSDVersion,
  parsePkgAudit,
  parseReleaseList,
  rebootPending,
  selectJailUpdateTargets,
} from './system-update.js';

describe('parseArgs', () => {
  it('defaults to host runtime and no dry-run', () => {
    expect(parseArgs([])).toEqual({ dryRun: false, dbRuntime: 'host' });
  });

  it('accepts --dry-run', () => {
    expect(parseArgs(['--dry-run'])).toEqual({
      dryRun: true,
      dbRuntime: 'host',
    });
  });

  it('accepts --db-runtime jail', () => {
    expect(parseArgs(['--db-runtime', 'jail'])).toEqual({
      dryRun: false,
      dbRuntime: 'jail',
    });
  });
});

describe('parseFreeBSDVersion', () => {
  it('parses family and patchlevel', () => {
    expect(parseFreeBSDVersion('15.0-RELEASE-p8')).toEqual({
      raw: '15.0-RELEASE-p8',
      family: '15.0-RELEASE',
      patchLevel: 8,
    });
  });

  it('handles versions without patch suffix', () => {
    expect(parseFreeBSDVersion('15.0-RELEASE')).toEqual({
      raw: '15.0-RELEASE',
      family: '15.0-RELEASE',
      patchLevel: null,
    });
  });
});

describe('parseReleaseList', () => {
  it('parses non-empty release lines', () => {
    expect(parseReleaseList('\n15.0-RELEASE-p4\n\n15.0-RELEASE-p8\n')).toEqual([
      '15.0-RELEASE-p4',
      '15.0-RELEASE-p8',
    ]);
  });
});

describe('parsePkgAudit', () => {
  it('reports clean when no problems are found', () => {
    expect(parsePkgAudit('0 problem(s) found.')).toEqual({
      ok: true,
      vulnerableCount: 0,
      summary: '0 problem(s) found.',
    });
  });

  it('reports vulnerable count from a real-shaped audit output', () => {
    const raw = [
      'curl-8.7.1 is vulnerable:',
      '  CVE-2024-1234',
      '',
      '1 problem(s) found.',
    ].join('\n');
    const result = parsePkgAudit(raw);
    expect(result.ok).toBe(false);
    expect(result.vulnerableCount).toBe(1);
    expect(result.summary).toBe('1 problem(s) found.');
  });

  it('treats empty output as clean', () => {
    expect(parsePkgAudit('').vulnerableCount).toBe(0);
  });
});

describe('rebootPending', () => {
  it('returns false when running kernel matches installed userland', () => {
    expect(rebootPending('15.0-RELEASE-p4', '15.0-RELEASE-p4')).toBe(false);
  });

  it('returns true when patch levels differ', () => {
    expect(rebootPending('15.0-RELEASE-p4', '15.0-RELEASE-p8')).toBe(true);
  });

  it('ignores surrounding whitespace', () => {
    expect(rebootPending('15.0-RELEASE-p4\n', ' 15.0-RELEASE-p4 ')).toBe(false);
  });
});

describe('selectJailUpdateTargets', () => {
  const rows = [
    {
      jid: '1',
      name: 'git',
      ip: '192.168.72.2',
      state: 'running' as const,
      type: 'thin',
      release: '15.0-RELEASE-p4',
      raw: '',
    },
    {
      jid: '2',
      name: 'cms',
      ip: '192.168.72.3',
      state: 'running' as const,
      type: 'thick',
      release: '15.0-RELEASE-p4',
      raw: '',
    },
    {
      jid: '3',
      name: 'clawdie-db',
      ip: '192.168.72.5',
      state: 'running' as const,
      type: 'thick',
      release: '15.0-RELEASE-p4',
      raw: '',
    },
  ];

  it('updates thin jails and skips unrelated thick jails in host mode', () => {
    expect(selectJailUpdateTargets(rows, 'host', '192.168.72.5')).toEqual({
      thinJails: ['git'],
      dbJail: null,
      skippedThickJails: ['cms', 'clawdie-db'],
    });
  });

  it('selects the db jail separately in jail mode', () => {
    expect(selectJailUpdateTargets(rows, 'jail', '192.168.72.5')).toEqual({
      thinJails: ['git'],
      dbJail: 'clawdie-db',
      skippedThickJails: ['cms'],
    });
  });

  it('falls back to canonical db jail names when the deployed IP does not match', () => {
    expect(
      selectJailUpdateTargets(rows, 'jail', '192.168.72.250', [
        'clawdie-db',
        'db',
      ]),
    ).toEqual({
      thinJails: ['git'],
      dbJail: 'clawdie-db',
      skippedThickJails: ['cms'],
    });
  });
});