test: clickhouse env detection & filesystem write permissions on ENOENT path

Cover two untested code paths from recent PRs:
1. ClickHouse env var detection added in #574 had zero test coverage
2. Filesystem.write chmod fix on the ENOENT retry path (creating parent dirs) was untested

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

https://claude.ai/code/session_01X5hQueMu6AzQ8jwdUnCqPK

Author: claude

packages/opencode/test/tool/project-scan.test.ts

@@ -312,6 +312,8 @@ describe("detectEnvVars", () => {
       "PGHOST", "PGPORT", "PGDATABASE", "PGUSER", "PGPASSWORD", "DATABASE_URL",
       "MYSQL_HOST", "MYSQL_TCP_PORT", "MYSQL_DATABASE", "MYSQL_USER", "MYSQL_PASSWORD",
       "REDSHIFT_HOST", "REDSHIFT_PORT", "REDSHIFT_DATABASE", "REDSHIFT_USER", "REDSHIFT_PASSWORD",
+      "CLICKHOUSE_HOST", "CLICKHOUSE_URL", "CLICKHOUSE_PORT", "CLICKHOUSE_DB",
+      "CLICKHOUSE_DATABASE", "CLICKHOUSE_USER", "CLICKHOUSE_USERNAME", "CLICKHOUSE_PASSWORD",
     ]
     for (const v of vars) {
       delete process.env[v]
@@ -542,6 +544,35 @@ describe("detectEnvVars", () => {
     }
   })
 
+  test("detects ClickHouse via CLICKHOUSE_HOST", async () => {
+    clearWarehouseEnvVars()
+    process.env.CLICKHOUSE_HOST = "clickhouse.example.com"
+    process.env.CLICKHOUSE_PORT = "8443"
+    process.env.CLICKHOUSE_DATABASE = "analytics"
+    process.env.CLICKHOUSE_USER = "default"
+
+    const result = await detectEnvVars()
+    const ch = result.find((r) => r.type === "clickhouse")
+    expect(ch).toBeDefined()
+    expect(ch!.signal).toBe("CLICKHOUSE_HOST")
+    expect(ch!.config.host).toBe("clickhouse.example.com")
+    expect(ch!.config.port).toBe("8443")
+    expect(ch!.config.database).toBe("analytics")
+    expect(ch!.config.user).toBe("default")
+  })
+
+  test("detects ClickHouse via DATABASE_URL with clickhouse+http scheme", async () => {
+    clearWarehouseEnvVars()
+    process.env.DATABASE_URL = "clickhouse+http://user:pass@host:8123/db"
+
+    const result = await detectEnvVars()
+    const ch = result.find((r) => r.type === "clickhouse")
+    expect(ch).toBeDefined()
+    expect(ch!.type).toBe("clickhouse")
+    expect(ch!.signal).toBe("DATABASE_URL")
+    expect(ch!.config.connection_string).toBe("***")
+  })
+
   test("connection names follow env_ prefix convention", async () => {
     clearWarehouseEnvVars()
     process.env.SNOWFLAKE_ACCOUNT = "acct"

packages/opencode/test/util/filesystem.test.ts

@@ -217,6 +217,20 @@ describe("filesystem", () => {
 
       expect(await fs.readFile(filepath, "utf-8")).toBe(content)
     })
+
+    test("applies permissions when creating parent directories", async () => {
+      await using tmp = await tmpdir()
+      const filepath = path.join(tmp.path, "new", "nested", "secret.key")
+
+      await Filesystem.write(filepath, "private-key-data", 0o600)
+
+      const content = await fs.readFile(filepath, "utf-8")
+      expect(content).toBe("private-key-data")
+      if (process.platform !== "win32") {
+        const stats = await fs.stat(filepath)
+        expect(stats.mode & 0o777).toBe(0o600)
+      }
+    })
   })
 
   describe("writeJson()", () => {