chore: import upstream snapshot with attribution

tests/cli_e2e/apps/apps_git_credential_local_test.go

@@ -0,0 +1,122 @@
+// Copyright (c) 2026 Lark Technologies Pte. Ltd.
+// SPDX-License-Identifier: MIT
+
+package apps
+
+import (
+	"context"
+	"encoding/json"
+	"net/url"
+	"os"
+	"path/filepath"
+	"testing"
+	"time"
+
+	clie2e "github.com/larksuite/cli/tests/cli_e2e"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+	"github.com/tidwall/gjson"
+)
+
+func TestAppsGitCredentialListLocalE2E(t *testing.T) {
+	env := setupAppsGitCredentialLocalEnv(t)
+	seedAppsGitCredentialMetadata(t, env.configDir, "app_a", "https://example.com/git/u/a.git", "pat-ref-a")
+	seedAppsGitCredentialMetadata(t, env.configDir, "app_b", "https://example.com/git/u/b.git", "pat-ref-b")
+
+	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+	t.Cleanup(cancel)
+
+	result, err := clie2e.RunCmd(ctx, clie2e.Request{
+		Args:      []string{"apps", "+git-credential-list"},
+		DefaultAs: "user",
+		Env:       env.vars,
+	})
+	require.NoError(t, err)
+	result.AssertExitCode(t, 0)
+
+	assert.Equal(t, int64(2), gjson.Get(result.Stdout, "data.count").Int())
+	credentials := map[string]gjson.Result{}
+	for _, credential := range gjson.Get(result.Stdout, "data.credentials").Array() {
+		credentials[credential.Get("app_id").String()] = credential
+	}
+	require.Contains(t, credentials, "app_a")
+	require.Contains(t, credentials, "app_b")
+	assert.Equal(t, "https://example.com/git/u/a.git", credentials["app_a"].Get("repository_url").String())
+	assert.Equal(t, "missing_secret", credentials["app_a"].Get("status").String())
+	assert.Equal(t, "https://example.com/git/u/b.git", credentials["app_b"].Get("repository_url").String())
+	assert.Equal(t, "missing_secret", credentials["app_b"].Get("status").String())
+	assert.False(t, credentials["app_a"].Get("expires_at").Exists())
+	assert.False(t, credentials["app_a"].Get("expired").Exists())
+}
+
+func TestAppsGitCredentialRemoveLocalE2E(t *testing.T) {
+	env := setupAppsGitCredentialLocalEnv(t)
+	metadataPath := seedAppsGitCredentialMetadata(t, env.configDir, "app_xxx", "https://example.com/git/u/app.git", "pat-ref-remove")
+
+	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+	t.Cleanup(cancel)
+
+	result, err := clie2e.RunCmd(ctx, clie2e.Request{
+		Args:      []string{"apps", "+git-credential-remove", "--app-id", "app_xxx"},
+		DefaultAs: "user",
+		Env:       env.vars,
+	})
+	require.NoError(t, err)
+	result.AssertExitCode(t, 0)
+
+	assert.Equal(t, "app_xxx", gjson.Get(result.Stdout, "data.app_id").String())
+	assert.True(t, gjson.Get(result.Stdout, "data.removed").Bool())
+	assert.NoFileExists(t, metadataPath)
+}
+
+type appsGitCredentialLocalEnv struct {
+	configDir string
+	vars      map[string]string
+}
+
+func setupAppsGitCredentialLocalEnv(t *testing.T) appsGitCredentialLocalEnv {
+	t.Helper()
+	configDir := t.TempDir()
+	homeDir := t.TempDir()
+	gitConfig := filepath.Join(t.TempDir(), ".gitconfig")
+	return appsGitCredentialLocalEnv{
+		configDir: configDir,
+		vars: map[string]string{
+			"LARKSUITE_CLI_CONFIG_DIR":         configDir,
+			"LARKSUITE_CLI_APP_ID":             "apps_local_test",
+			"LARKSUITE_CLI_APP_SECRET":         "apps_local_secret",
+			"LARKSUITE_CLI_BRAND":              "feishu",
+			"LARKSUITE_CLI_NO_UPDATE_NOTIFIER": "1",
+			"LARKSUITE_CLI_NO_SKILLS_NOTIFIER": "1",
+			"LARKSUITE_CLI_DATA_DIR":           filepath.Join(homeDir, ".local", "share"),
+			"HOME":                             homeDir,
+			"GIT_CONFIG_GLOBAL":                gitConfig,
+			"GIT_CONFIG_NOSYSTEM":              "1",
+			"GIT_TERMINAL_PROMPT":              "0",
+		},
+	}
+}
+
+func seedAppsGitCredentialMetadata(t *testing.T, configDir, appID, gitHTTPURL, patRef string) string {
+	t.Helper()
+	dir := filepath.Join(configDir, "spark", url.PathEscape(appID))
+	require.NoError(t, os.MkdirAll(dir, 0700))
+	path := filepath.Join(dir, "git.json")
+	payload := map[string]any{
+		"version":        1,
+		"app_id":         appID,
+		"git_http_url":   gitHTTPURL,
+		"profile":        "default",
+		"profile_app_id": "apps_local_test",
+		"user_open_id":   "ou_local_test",
+		"username":       "x-access-token",
+		"pat_ref":        patRef,
+		"status":         "confirmed",
+		"expires_at":     time.Now().Add(24 * time.Hour).Unix(),
+		"updated_at":     time.Now().Unix(),
+	}
+	data, err := json.MarshalIndent(payload, "", "  ")
+	require.NoError(t, err)
+	require.NoError(t, os.WriteFile(path, append(data, '\n'), 0600))
+	return path
+}