Why
---
- Sprintf(*p.Title) fed the title as a format string — % in titles broke
the String() method; also panicked on nil Title.
- internal/applications.buildSummary used RE2-unsupported `(?= ...)`
lookahead inside regexp.MustCompile, panicking the first time the
applications-sync path was exercised on Go 1.23+.
- Query() duplicated the auth-expiry check inline while ensureToken()
already handled it — two code paths drifted.
- Request.Debug split Query() into two branches that both unmarshalled
into the same target value. Dead code.
- httptest fixtures that emulated OnlyOffice endpoints were lying to us:
they passed locally yet never caught a single real protocol regression.
What
----
- Project.String(): nil-safe, no Sprintf format-string interpretation.
- buildSummary regex: RE2-safe non-capturing trailing delimiter
`(?:\n## |$)` replaces the lookahead.
- Query() routes through ensureToken(); body marshalling factored into
an unexported requestBodyReader(). Debug flag retained for backwards
compatibility, documented as a no-op, to be removed at next major.
- Dropped Debug: true stray flags in GetTasks/UpdateProjectTask.
- Deleted httptest-based OnlyOffice mocks. unit_test.go is now pure Go
(parsers, helpers, env aliases, ctx cancellation against an unroutable
address). client_test.go is `//go:build integration` and runs against
a real OnlyOffice, skipping cleanly without ONLYOFFICE_URL/USER/PASS.
- AGENTS.md + .cursor/rules/no-synthetic-mocks.mdc document the new
testing policy.
Verified
--------
- `go test ./...` green (15 unit tests across package + internal).
- `go test -tags=integration ./...` green against live
office.produktor.io (5 integration tests: auth, projects, lifecycle,
calendar+CRM read, task list).
- inventar-sync smoke dry-run against live OO project 33 + Gitea found
30 tasks, 0 mutations.
Made-with: Cursor
Adds two helpers tailored for cron-driven or watcher-style clients:
- AuthenticateContext(ctx) — cancellable variant of Authenticate(). Bypasses
the non-context Query() path and POSTs /api/2.0/authentication.json directly,
so a stalled auth call never outlives the caller's deadline.
- InvalidateToken() — zeroes the cached *Token. Next request (or Authenticate*)
forces a fresh auth. Intended for mid-sync 401 recovery when the server has
revoked/rotated the session while local Expires still looks fresh.
Plain Authenticate() is unchanged; it remains a convenience wrapper.
Unit tests cover cache-hit, forced refresh, and context-cancellation paths.
Refs eSlider/inventar-sync#3, ASR-0008.
Made-with: Cursor
Four new executable examples mirror the oo-cli subcommands at library level so
downstream Go consumers can see the typed API without reading the CLI wiring.
README table updated to list all examples.
Made-with: Cursor
eSlider