handler/tests/test_control_login.py

"""The claude web-login seam: driving ``claude /login`` through tmux, scraping the URL,
and confirming the login.

Uses the shared ``fake_tmux`` fixture (extended here with a scripted ``capture_pane``) and
patches out the real sleeps + the on-disk credentials check, so no live claude/tmux/FS is
touched — the same approach as the spawn tests.
"""

from __future__ import annotations

import pytest

from handler.control import login, tmux


@pytest.fixture
def no_sleep(monkeypatch):
    monkeypatch.setattr(login, "_sleep", lambda *_a, **_k: None)


@pytest.fixture
def stable_creds(monkeypatch):
    """No credentials change on disk — success must come from the pane/session signals."""
    monkeypatch.setattr(login, "_credentials_fingerprint", lambda: ())


def _pane(monkeypatch, *frames):
    """Make ``capture_pane`` return each frame in turn, then repeat the last one."""
    seq = list(frames)

    def capture(_name, escapes=False):
        return seq[0] if len(seq) == 1 else seq.pop(0)

    monkeypatch.setattr(tmux, "capture_pane", capture)


# A complete Claude OAuth URL (scheme + client_id + redirect_uri + state) — extraction
# deliberately rejects anything less, so the fixtures must use the real shape.
AUTH_URL = (
    "https://claude.ai/oauth/authorize?code=true&client_id=abc123&response_type=code"
    "&redirect_uri=https%3A%2F%2Fplatform.claude.com%2Foauth%2Fcode%2Fcallback"
    "&scope=user%3Aprofile&code_challenge=chal&code_challenge_method=S256&state=st42"
)


def test_extract_url_prefers_complete_oauth_link():
    pane = f"Visit https://example.com/help or\n{AUTH_URL}\nand paste the code."
    assert login._extract_url(pane) == AUTH_URL


def test_extract_url_strips_trailing_punctuation():
    assert login._extract_url(f"Open ({AUTH_URL}).") == AUTH_URL


def test_extract_url_none_when_no_link():
    assert login._extract_url("no link here") is None


def test_extract_url_rejects_incomplete_url():
    # A garbled/partial capture (dropped scheme char, or no query string) must be refused
    # so the iframe never opens a broken page.
    assert login._extract_url("ttps://claude.com/cai/oauth/authorize?client_id=x") is None
    assert login._extract_url("https://claude.ai/oauth/authorize") is None


def test_extract_url_stops_at_box_border():
    # claude may draw the URL inside a rounded box; a "│" flush against the link must not
    # be captured as part of the URL.
    assert login._extract_url(f"│{AUTH_URL}│") == AUTH_URL


def test_extract_url_recovers_href_from_osc8_hyperlink():
    # claude renders the URL as an OSC-8 hyperlink: the visible text can be styled/garbled
    # while the real href sits in the escape. Capturing with escapes lets us recover it.
    pane = f"\x1b]8;;{AUTH_URL}\x1b\\click here\x1b]8;;\x1b\\"
    assert login._extract_url(pane) == AUTH_URL


def test_start_launches_claude_selects_subscription_and_returns_url(
    env, fake_tmux, no_sleep, monkeypatch
):
    _pane(monkeypatch, "booting…", f"Open this URL to log in:\n{AUTH_URL}")

    result = login.start(url_timeout=1.0)

    assert result == {"session": login.LOGIN_SESSION, "url": AUTH_URL}
    # A fresh claude session was launched…
    launched = fake_tmux["calls"]["new_session"]
    assert len(launched) == 1
    assert launched[0]["name"] == login.LOGIN_SESSION
    assert launched[0]["command"] == "claude"
    # A wide window so the long authorization URL isn't clipped at 80 columns.
    assert launched[0]["width"] == login.LOGIN_COLS
    assert launched[0]["height"] == login.LOGIN_ROWS
    # …then /login was sent, followed by a bare Enter selecting the subscription option.
    sent = [c["keys"] for c in fake_tmux["calls"]["send_keys"]]
    assert sent[:2] == ["/login", ""]
    # The session is left alive for submit_code.
    assert login.LOGIN_SESSION in fake_tmux["live"]


def test_start_kills_a_stale_session_first(env, fake_tmux, no_sleep, monkeypatch):
    fake_tmux["live"].add(login.LOGIN_SESSION)  # a leftover from an abandoned attempt
    _pane(monkeypatch, f"{AUTH_URL}")

    login.start(url_timeout=1.0)

    assert login.LOGIN_SESSION in fake_tmux["calls"]["kill_session"]


def test_start_times_out_and_cleans_up_when_no_url(env, fake_tmux, no_sleep, monkeypatch):
    _pane(monkeypatch, "still thinking, no url yet")

    with pytest.raises(login.LoginError, match="timed out"):
        login.start(url_timeout=0.05, poll_interval=0.0)

    # It shouldn't leave a half-driven session lying around.
    assert login.LOGIN_SESSION not in fake_tmux["live"]


def test_submit_code_confirmed_by_success_text(env, fake_tmux, no_sleep, stable_creds, monkeypatch):
    fake_tmux["live"].add(login.LOGIN_SESSION)
    _pane(monkeypatch, "Login successful. Welcome back!")

    result = login.submit_code("my-auth-code", poll_timeout=1.0)

    assert result["success"] is True
    assert "Login successful" in result["output"]
    assert {"name": login.LOGIN_SESSION, "keys": "my-auth-code"} in fake_tmux["calls"]["send_keys"]
    # A confirmed login tears the session down.
    assert login.LOGIN_SESSION not in fake_tmux["live"]


def test_submit_code_confirmed_by_credentials_file(env, fake_tmux, no_sleep, monkeypatch):
    fake_tmux["live"].add(login.LOGIN_SESSION)
    # The pane never prints a success string, but claude writes its credentials — the
    # authoritative signal. First call = baseline, later calls = changed.
    calls = {"n": 0}

    def fingerprint():
        calls["n"] += 1
        return () if calls["n"] == 1 else (("~/.claude/.credentials.json", 123, 45),)

    monkeypatch.setattr(login, "_credentials_fingerprint", fingerprint)
    _pane(monkeypatch, "still on the paste-code screen, no success text")

    result = login.submit_code("code", poll_timeout=1.0)

    assert result["success"] is True
    assert login.LOGIN_SESSION not in fake_tmux["live"]


def test_submit_code_reports_failure_without_killing_session(
    env, fake_tmux, no_sleep, stable_creds, monkeypatch
):
    fake_tmux["live"].add(login.LOGIN_SESSION)
    _pane(monkeypatch, "Invalid code, please try again")

    result = login.submit_code("wrong", poll_timeout=0.05)

    assert result["success"] is False
    assert login.LOGIN_SESSION in fake_tmux["live"]  # left up for a retry


def test_submit_code_without_session_raises(env, fake_tmux, no_sleep):
    with pytest.raises(login.LoginError, match="no active"):
        login.submit_code("code")


def test_submit_code_rejects_blank(env, fake_tmux, no_sleep):
    with pytest.raises(login.LoginError, match="no authorization code"):
        login.submit_code("   ")