test: ClickHouse env detection + Filesystem chmod-on-ENOENT

Cover two gaps from the ClickHouse driver (#574) and the chmod fix:
- detectEnvVars: CLICKHOUSE_HOST, CLICKHOUSE_URL, and DATABASE_URL scheme mapping
- Filesystem.write: permissions applied correctly when parent dirs don't exist

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

https://claude.ai/code/session_01EzpUnoRYpyCw3EfdFBQ9jd

Author: claude

packages/opencode/test/tool/project-scan.test.ts

@@ -312,6 +312,8 @@ describe("detectEnvVars", () => {
       "PGHOST", "PGPORT", "PGDATABASE", "PGUSER", "PGPASSWORD", "DATABASE_URL",
       "MYSQL_HOST", "MYSQL_TCP_PORT", "MYSQL_DATABASE", "MYSQL_USER", "MYSQL_PASSWORD",
       "REDSHIFT_HOST", "REDSHIFT_PORT", "REDSHIFT_DATABASE", "REDSHIFT_USER", "REDSHIFT_PASSWORD",
+      "CLICKHOUSE_HOST", "CLICKHOUSE_PORT", "CLICKHOUSE_DB", "CLICKHOUSE_DATABASE",
+      "CLICKHOUSE_USER", "CLICKHOUSE_USERNAME", "CLICKHOUSE_PASSWORD", "CLICKHOUSE_URL",
     ]
     for (const v of vars) {
       delete process.env[v]
@@ -554,6 +556,70 @@ describe("detectEnvVars", () => {
       expect(conn.name).toBe(`env_${conn.type}`)
     }
   })
+
+  test("detects ClickHouse via CLICKHOUSE_HOST", async () => {
+    clearWarehouseEnvVars()
+    process.env.CLICKHOUSE_HOST = "ch.example.com"
+    process.env.CLICKHOUSE_PORT = "8443"
+    process.env.CLICKHOUSE_DATABASE = "analytics"
+    process.env.CLICKHOUSE_USER = "default"
+
+    const result = await detectEnvVars()
+    const ch = result.find((r) => r.type === "clickhouse")
+    expect(ch).toBeDefined()
+    expect(ch!.name).toBe("env_clickhouse")
+    expect(ch!.source).toBe("env-var")
+    expect(ch!.signal).toBe("CLICKHOUSE_HOST")
+    expect(ch!.config.host).toBe("ch.example.com")
+    expect(ch!.config.port).toBe("8443")
+    expect(ch!.config.database).toBe("analytics")
+    expect(ch!.config.user).toBe("default")
+  })
+
+  test("detects ClickHouse via CLICKHOUSE_URL (connection_string redacted)", async () => {
+    clearWarehouseEnvVars()
+    process.env.CLICKHOUSE_URL = "clickhouse://default:secret@ch.example.com:9000/analytics"
+
+    const result = await detectEnvVars()
+    const ch = result.find((r) => r.type === "clickhouse")
+    expect(ch).toBeDefined()
+    expect(ch!.name).toBe("env_clickhouse")
+    expect(ch!.signal).toBe("CLICKHOUSE_URL")
+    // connection_string is a sensitive key — detectEnvVars redacts it to "***"
+    expect(ch!.config.connection_string).toBe("***")
+  })
+
+  test("detects ClickHouse via DATABASE_URL with clickhouse:// scheme", async () => {
+    clearWarehouseEnvVars()
+    process.env.DATABASE_URL = "clickhouse://default:pass@ch.example.com:9000/analytics"
+
+    const result = await detectEnvVars()
+    const ch = result.find((r) => r.type === "clickhouse")
+    expect(ch).toBeDefined()
+    expect(ch!.name).toBe("env_clickhouse")
+    expect(ch!.type).toBe("clickhouse")
+    expect(ch!.signal).toBe("DATABASE_URL")
+  })
+
+  test("detects ClickHouse via DATABASE_URL with clickhouse+http scheme", async () => {
+    clearWarehouseEnvVars()
+    process.env.DATABASE_URL = "clickhouse+http://default:pass@ch.example.com:8123/analytics"
+
+    const result = await detectEnvVars()
+    const ch = result.find((r) => r.type === "clickhouse")
+    expect(ch).toBeDefined()
+    expect(ch!.type).toBe("clickhouse")
+  })
+
+  test("detects ClickHouse via DATABASE_URL with clickhouse+https scheme", async () => {
+    clearWarehouseEnvVars()
+    process.env.DATABASE_URL = "clickhouse+https://default:pass@ch.example.com:8443/analytics"
+
+    const result = await detectEnvVars()
+    const ch = result.find((r) => r.type === "clickhouse")
+    expect(ch).toBeDefined()
+    expect(ch!.type).toBe("clickhouse")
+  })
 })
 
 // ---------------------------------------------------------------------------

packages/opencode/test/util/filesystem.test.ts

@@ -217,6 +217,20 @@ describe("filesystem", () => {
 
       expect(await fs.readFile(filepath, "utf-8")).toBe(content)
     })
+
+    test("creates parent directories with correct permissions", async () => {
+      await using tmp = await tmpdir()
+      const filepath = path.join(tmp.path, "nested", "deep", "secret.txt")
+      const content = "secret data"
+
+      await Filesystem.write(filepath, content, 0o600)
+
+      expect(await fs.readFile(filepath, "utf-8")).toBe(content)
+      if (process.platform !== "win32") {
+        const stats = await fs.stat(filepath)
+        expect(stats.mode & 0o777).toBe(0o600)
+      }
+    })
   })
 
   describe("writeJson()", () => {