From 28a37393ee62e3b53dad69d58810f72151bd58c2 Mon Sep 17 00:00:00 2001
From: DanConwayDev <DanConwayDev@protonmail.com>
Date: Fri, 15 Aug 2025 15:17:39 +0100
Subject: feat(remote): list proposals as `refs/pr-by-id/*`

This branch name cannot be attacked by brute forcing a
shorthand event id like refs/pr/<branch-name(<shorthand-event-id)
can.
---
 test_utils/src/lib.rs | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

(limited to 'test_utils/src')

diff --git a/test_utils/src/lib.rs b/test_utils/src/lib.rs
index 3e348a4..8d81efe 100644
--- a/test_utils/src/lib.rs
+++ b/test_utils/src/lib.rs
@@ -12,7 +12,7 @@ use dialoguer::theme::{ColorfulTheme, Theme};
 use futures::{executor::block_on, future::join_all};
 use git::GitTestRepo;
 use git2::{Signature, Time};
-use nostr::{self, Kind, Tag, nips::nip65::RelayMetadata};
+use nostr::{self, Kind, Tag, event::EventId, nips::nip65::RelayMetadata};
 use nostr_database::NostrDatabase;
 use nostr_lmdb::NostrLMDB;
 use nostr_sdk::{Client, Event, NostrSigner, TagStandard, serde_json};
@@ -1197,6 +1197,24 @@ pub fn get_proposal_branch_name_from_events(
     bail!("failed to find proposal root with branch-name tag matching title")
 }
 
+pub fn get_proposal_id_from_branch_name(
+    events: &[nostr::Event],
+    branch_name_in_event: &str,
+) -> Result<EventId> {
+    let mut events = events.to_owned();
+    events.reverse();
+    for event in events {
+        if event
+            .tags
+            .iter()
+            .any(|t| t.as_slice()[0].eq("branch-name") && t.as_slice()[1].eq(branch_name_in_event))
+        {
+            return Ok(event.id);
+        }
+    }
+    bail!("failed to find proposal root with branch-name tag matching title")
+}
+
 pub static FEATURE_BRANCH_NAME_1: &str = "feature-example-t";
 pub static FEATURE_BRANCH_NAME_2: &str = "feature-example-f";
 pub static FEATURE_BRANCH_NAME_3: &str = "feature-example-c";
-- 
cgit v1.2.3