Add comprehensive integration tests for CLI lifecycle

- Added integration_test.go with full authentication and service lifecycle testing
- Made psql command testable by using cmd.OutOrStdout() instead of os.Stdout
- Fixed global config caching issue preventing --output json flag from working
- Enhanced password storage testing with keychain integration
- Updated CLAUDE.md with environment variable loading patterns and integration testing docs
- Fixed service deletion verification and password authentication in tests

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: cevian

CLAUDE.md

@@ -20,6 +20,12 @@ go test ./...
 
 # Run tests with verbose output
 go test -v ./...
+
+# Load environment variables from .env file (note: source .env doesn't work)
+export $(cat .env | xargs)
+
+# Run integration tests with environment variables from .env file
+export $(cat .env | xargs) && go test ./internal/tiger/cmd -v -run TestServiceLifecycleIntegration
 ```
 
 ### Running Locally
@@ -31,6 +37,26 @@ go test -v ./...
 go run ./cmd/tiger --help
 ```
 
+### Integration Testing
+```bash
+# Run all tests (integration tests will skip without credentials)
+go test ./...
+
+# Run only integration tests
+go test ./internal/tiger/cmd -run Integration
+
+# To run integration tests with real API calls, set environment variables:
+export TIGER_PUBLIC_KEY_INTEGRATION=your-public-key
+export TIGER_SECRET_KEY_INTEGRATION=your-secret-key
+export TIGER_PROJECT_ID_INTEGRATION=your-project-id
+
+# Optional: Set this to test database commands with existing service
+export TIGER_EXISTING_SERVICE_ID_INTEGRATION=existing-service-id
+
+# Then run tests normally
+go test ./internal/tiger/cmd -v -run Integration
+```
+
 ### Code Generation
 ```bash
 # Generate OpenAPI client code and mocks from openapi.yaml

TODO.md

@@ -1,10 +1,15 @@
-TODO items:
+TODO items
+
+Blocked:
 - we should get a Project ID from the API when we login (need to add a new endpoint to the API)
 - need to add JWT/OATH2 support so that users don't handle API keys
-- the api key stuff right now is messy. we require setting the api key from the public key and private key as public_key:private_key. should be a single string instead.
 
+Active List:
+- update exit codes for authentication and permission errors
+- test the --password-storage flag with none option and PGPASSWORD env var
 
-spec updates needed:
+Done:
+ - ✅ api key stuff right now is messy. we require setting the api key from the public key and private key as public_key:private_key. should be a single string instead.
  - ✅ change service operations to use --wait-timeout instead of --timeout
  - ✅ implement --wait-timeout flag to accept time.ParseDuration format (e.g., "30m", "1h30m", "90s")
  - ✅ update --timeout flag for db test-connection to accept time.ParseDuration format 
@@ -14,7 +19,4 @@ spec updates needed:
  - ✅ change from "tiger services" to "tiger service" with aliases for "services" and "svc"
  - ✅ add --password-storage flag to all commands that save passwords (keyring|pgpass|none)
  - ✅ update create-service and update-password commands to respect global --password-storage flag (keyring|pgpass|none)
- - update exit codes for authentication and permission errors
-
-small things:
- - make sure create makes the service the default service (with option to not do this)
+ - ✅ make sure create makes the service the default service (with option to not do this)

internal/tiger/cmd/db.go

@@ -352,20 +352,22 @@ func separateServiceAndPsqlArgs(cmd ArgsLenAtDashProvider, args []string) ([]str
 
 // launchPsqlWithConnectionString launches psql using the connection string and additional flags
 func launchPsqlWithConnectionString(connectionString, psqlPath string, additionalFlags []string, service api.Service, cmd *cobra.Command) error {
-	psqlCmd := buildPsqlCommand(connectionString, psqlPath, additionalFlags, service)
+	psqlCmd := buildPsqlCommand(connectionString, psqlPath, additionalFlags, service, cmd)
 	return psqlCmd.Run()
 }
 
 // buildPsqlCommand creates the psql command with proper environment setup
-func buildPsqlCommand(connectionString, psqlPath string, additionalFlags []string, service api.Service) *exec.Cmd {
+func buildPsqlCommand(connectionString, psqlPath string, additionalFlags []string, service api.Service, cmd *cobra.Command) *exec.Cmd {
 	// Build command arguments: connection string first, then additional flags
 	args := []string{connectionString}
 	args = append(args, additionalFlags...)
 
 	psqlCmd := exec.Command(psqlPath, args...)
-	psqlCmd.Stdin = os.Stdin
-	psqlCmd.Stdout = os.Stdout
-	psqlCmd.Stderr = os.Stderr
+	
+	// Use cmd's input/output streams for testability while maintaining CLI behavior
+	psqlCmd.Stdin = cmd.InOrStdin()
+	psqlCmd.Stdout = cmd.OutOrStdout()
+	psqlCmd.Stderr = cmd.ErrOrStderr()
 
 	// Only set PGPASSWORD for keyring storage method
 	// pgpass storage relies on psql automatically reading ~/.pgpass file

internal/tiger/cmd/db_test.go

@@ -361,8 +361,11 @@ func TestBuildPsqlCommand_KeyringPasswordEnvVar(t *testing.T) {
 	psqlPath := "/usr/bin/psql"
 	additionalFlags := []string{"--quiet"}
 
+	// Create a mock command for testing
+	testCmd := &cobra.Command{}
+	
 	// Call the actual production function that builds the command
-	psqlCmd := buildPsqlCommand(connectionString, psqlPath, additionalFlags, service)
+	psqlCmd := buildPsqlCommand(connectionString, psqlPath, additionalFlags, service, testCmd)
 
 	if psqlCmd == nil {
 		t.Fatal("buildPsqlCommand returned nil")
@@ -400,8 +403,11 @@ func TestBuildPsqlCommand_PgpassStorage_NoEnvVar(t *testing.T) {
 	connectionString := "postgresql://testuser@testhost:5432/testdb?sslmode=require"
 	psqlPath := "/usr/bin/psql"
 
+	// Create a mock command for testing
+	testCmd := &cobra.Command{}
+	
 	// Call the actual production function that builds the command
-	psqlCmd := buildPsqlCommand(connectionString, psqlPath, []string{}, service)
+	psqlCmd := buildPsqlCommand(connectionString, psqlPath, []string{}, service, testCmd)
 
 	if psqlCmd == nil {
 		t.Fatal("buildPsqlCommand returned nil")