Test cargo takeover over unrewritable deps (#1020)

[Mikola Lysenko (mikolalysenko)]

LLM Description written by Claude Code:claude-opus-5-5

Refs #1020 (closed as already fixed on main by #1039; this PR adds the regression test).

Summary

#1020 reported that scan --mode hosted over a vendored cargo crate reverted the vendored wiring before the hosted Cargo.toml rewriter refused the dependency spelling (dotted keys, cfg-if = '1.0', registry = "crates-io"), leaving the crate in neither mode, while --dry-run previewed redirected: 1.

#1039 (823810a, "Make the vendored-to-hosted takeover atomic") staged the takeover in the run's GroupCommit overlay: a staged purl the hosted rewrite does not pin is retracted (Takeover::retract), so the purl stays vendored byte for byte and the dry run runs the same steps. That fixes #1020 on main. Nothing pinned that cargo behavior, so this PR adds a real-cargo e2e.

Test

crates/socket-patch-cli/tests/mode_migration_cargo.rs::takeover_over_unrewritable_spelling_keeps_vendored. It runs once for each of the three spellings:

• vendor --offline, then cargo build --locked --offline links the patched copy (a compile oracle that calls cfg_if::socket_patched())
• hosted --dry-run gives redirected: 0, redirect_takeover_kept_vendored and redirect_cargo_toml_dep_unrewritable, with no redirect_would_revert_vendored and no writes
• the wet run gives the same exit and status as the dry run, redirected: 0 and no redirect_takeover_unpatched. Every project byte is unchanged.
• a fresh checkout still builds the patched crate with --locked

Commands run

• cargo test -p socket-patch-cli --test mode_migration_cargo takeover_over_unrewritable: passes on current main (cargo 1.93.1)
• rustfmt on the changed file

🤖 Generated with Claude Code

---

Note

Low Risk
Test-only change; no runtime or CLI behavior is modified.

Overview
Adds a regression e2e test for issue #1020 in mode_migration_cargo.rs: takeover_over_unrewritable_spelling_keeps_vendored.

The test runs vendored → hosted scan when Cargo.toml uses dependency spellings the hosted rewriter cannot rewrite (dotted keys, single-quoted version, explicit registry = "crates-io"). It asserts redirected: 0, redirect_takeover_kept_vendored and redirect_cargo_toml_dep_unrewritable, and that --dry-run matches the wet run (no redirect_would_revert_vendored, no filesystem writes). After a refused takeover the project stays byte-identical and a fresh cargo build --locked still links the vendored patched crate.

No production code changes—only pins behavior already fixed on main (#1039).

^{Reviewed by Cursor Bugbot for commit e18a8af. Configure here.}

---

Generated by Claude Code

[Mikola Lysenko (mikolalysenko)]

BugBot review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit e18a8af. Configure here.}

[Mikola Lysenko (mikolalysenko)]

Ready for review (burn-down agent).

• Head: e18a8af2
• CI: every check green except main-wide failures that also fail on main at a8e9397: e2e (ubuntu-latest, e2e_safety_pnpm), hosted-e2e (withdrawn free minimist@1.2.2 patch, Merge queue blocked: production no longer publishes free minimist@1.2.2 patch #1293; fixes in Repin live minimist@1.2.2 suites to republished patch 642d7f02 (#1293) #1301/Follow the republished minimist canary patch #1302), and the ci-ok roll-up.
• Bugbot: reviewed this head, no findings; no open review threads.
• No CHANGELOG.md changes.
• Test-only change. Auto-merge was already armed; nothing was pushed.

---

Generated by Claude Code

[Mikola Lysenko (mikolalysenko)]

[final reviewer] I disarmed auto-merge at e18a8af2 because ci-ok is red on this head. Only hosted-e2e and e2e (ubuntu-latest, e2e_safety_pnpm) fail, which is the main-wide minimist@1.2.2 failure (#1293), not this PR. #1302 fixes it and is in the merge queue now. Once main carries it, merge main in here (no other commits needed) and I'll re-arm auto-merge after CI goes green. The approval still covers this head.

---

Generated by Claude Code