Function TestSaveFetchToScratch

cli/plugins/builtin_web_helpers_test.go:218–249

(t *testing.T)

}

func TestSaveFetchToScratch(t *testing.T) {
	scratch := t.TempDir()
	t.Setenv("CHATCLI_AGENT_TMPDIR", scratch)

	t.Run("no save requested returns empty", func(t *testing.T) {
		path, err := saveFetchToScratch(fetchArgs{SaveToFile: false}, "body")
		if err != nil || path != "" {
			t.Fatalf("expected empty path no error, got %q, %v", path, err)
		}
	})

	t.Run("writes confined to scratch", func(t *testing.T) {
		path, err := saveFetchToScratch(fetchArgs{SaveToFile: true, SavePath: "ok.txt"}, "data")
		if err != nil {
			t.Fatalf("save: %v", err)
		}
		if !strings.HasPrefix(path, scratch) {
			t.Fatalf("path %q not under scratch %q", path, scratch)
		}
	})

	t.Run("absolute escape path is reduced to basename", func(t *testing.T) {
		// filepath.Base strips the directory, so this stays inside scratch.
		path, err := saveFetchToScratch(fetchArgs{SaveToFile: true, SavePath: "/etc/passwd"}, "data")
		if err != nil {
			t.Fatalf("save: %v", err)
		}
		if !strings.HasPrefix(path, scratch) {
			t.Fatalf("escape not contained: %q", path)
		}
	})
}