weichen
571e2bd28a
Why: The safe open requirement covers user, apikey and identity verify, including default CLI paths. Evidence: All three paths use private missing directories; previous full Go and PostgreSQL receipts cover the implementation, with a focused recheck before push. Impact: Test coverage only; no runtime behavior or migration changes. Refs: Backend PR #185; Dev PR #486
59 lines
1.6 KiB
Go
59 lines
1.6 KiB
Go
package app
|
|
|
|
import (
|
|
"agent-system-backend/internal/store"
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
)
|
|
|
|
func TestAccountMaintenanceDefaultsToNonCreatingOpen(t *testing.T) {
|
|
t.Setenv("AGENT_SYSTEM_DSN", "")
|
|
for _, tc := range []struct {
|
|
name string
|
|
run func(string) error
|
|
}{
|
|
{"user", func(dir string) error {
|
|
_, _, err := CreateUserAccount("", dir, "ada", "Ada", "", false, false, false)
|
|
return err
|
|
}},
|
|
{"apikey", func(dir string) error {
|
|
_, err := CreateAPIKey("", dir, "ada", "test")
|
|
return err
|
|
}},
|
|
{"identity verify", func(dir string) error {
|
|
_, err := VerifySystemIdentity("", dir, "fixture", "sqlite")
|
|
return err
|
|
}},
|
|
} {
|
|
t.Run(tc.name, func(t *testing.T) {
|
|
dir := filepath.Join(t.TempDir(), "absent")
|
|
if err := tc.run(dir); err == nil {
|
|
t.Error("maintenance created a missing database")
|
|
}
|
|
if _, err := os.Stat(dir); !os.IsNotExist(err) {
|
|
t.Error("failed maintenance created a directory")
|
|
}
|
|
})
|
|
}
|
|
}
|
|
func TestAccountMaintenanceCannotImplicitlyMigrate(t *testing.T) {
|
|
t.Setenv("AGENT_SYSTEM_DSN", "")
|
|
dir := t.TempDir()
|
|
st, err := store.OpenSQLite(filepath.Join(dir, "agent-system.db"))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := st.EnsureSystemIdentity("test", "sqlite"); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
// Roll back the newest additive migration in this private fixture only.
|
|
if err := st.MigrateDown(store.SchemaTarget() - 1); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
st.Close()
|
|
if _, _, err := CreateUserAccount("", dir, "ada", "Ada", "", false, false, false); err == nil {
|
|
t.Error("account command implicitly migrated an older schema")
|
|
}
|
|
}
|