ekklesiaandClaude Sonnet 5
679a5d225c
Adds Core-owned identity contracts, a Core-owned Better Auth database schema (ekklesia_core_user/session/account/verification), a first-class Core-owned migration source that coexists with module-owned migrations under the exact existing migration system, and an explicit Better Auth construction boundary. No authentication endpoint or sign-in UI is exposed yet (ADR 0010). Co-Authored-By: Claude Sonnet 5 <[email protected]>
76 lines
3.6 KiB
Markdown
76 lines
3.6 KiB
Markdown
# Testing
|
|
|
|
Ekklesia separates fast code-level evidence from live infrastructure evidence.
|
|
|
|
## Unit and repository verification
|
|
|
|
```bash
|
|
pnpm test
|
|
pnpm verify
|
|
```
|
|
|
|
These commands exercise package tests, repository boundaries, type checking, offline Core and
|
|
module migration discovery, identity schema drift detection, formatting, linting, and builds.
|
|
Migration-runner unit tests use a narrow database/session port to prove deterministic planning,
|
|
approval, transaction orchestration, cleanup, and sanitized errors. They do not claim to prove
|
|
PostgreSQL behavior. Identity unit tests cover principal/opaque-ID contracts, configuration
|
|
validation (secret, base URL, and trusted-origin rules), the Better Auth construction boundary
|
|
(explicit construction, exact schema mapping, no unexpected provider or plugin, sanitized
|
|
failures), and Core migration discovery (deterministic ordering, the reserved `core` identity, and
|
|
collision rejection) — all without a live database.
|
|
|
|
`pnpm verify` is intentionally Docker-free. It never plans or applies migrations against a live
|
|
database.
|
|
|
|
## Live PostgreSQL migration evidence
|
|
|
|
Docker and the Docker Compose plugin are required for the live suite:
|
|
|
|
```bash
|
|
pnpm test:migrations:integration
|
|
```
|
|
|
|
The command first builds the workspace through the repository's Turbo build graph, then starts the
|
|
repository's pinned PostgreSQL image in a unique Compose project, waits for bounded health
|
|
readiness, runs the production PostgreSQL adapter and migration services, and removes the
|
|
container, network, and volume. A build failure occurs before Docker provisioning. Each scenario
|
|
also receives a safely named disposable database. Direct host runs use a Docker-assigned random
|
|
port bound only to `127.0.0.1`; a containerized Gitea job joins the isolated Compose network and
|
|
uses the PostgreSQL service name.
|
|
|
|
The live suite proves fresh read-only planning, initial and incremental application, genuine
|
|
no-op behavior, exact applied checksums and history, edited or corrupt history rejection,
|
|
whole-batch DDL rollback, Drizzle breakpoint execution, real advisory-lock concurrency and
|
|
timeouts, lock release after failure, exact destructive approvals, and public-error sanitization.
|
|
It does not make migrations automatic during Core startup.
|
|
|
|
A dedicated set of scenarios exercises the committed Core identity migration against real
|
|
PostgreSQL: read-only planning on a fresh database, applying it and confirming exactly the four
|
|
expected `ekklesia_core_*` tables and their indexes exist, a genuine no-op on a second apply, Core
|
|
executing before a fixture module migration in one batch, previously applied module-only history
|
|
staying byte-for-byte unchanged once Core is introduced, and a later module migration's failure
|
|
rolling back cleanly without damaging the already-committed Core identity migration or leaking the
|
|
advisory lock.
|
|
|
|
CI runs the same command in the dedicated `migration-smoke` job. After this change is merged, add
|
|
the following pull-request status context to `main` branch protection:
|
|
|
|
```text
|
|
CI / migration-smoke (pull_request)
|
|
```
|
|
|
|
## Safe troubleshooting
|
|
|
|
Confirm the prerequisites without printing configuration:
|
|
|
|
```bash
|
|
docker info
|
|
docker compose version
|
|
```
|
|
|
|
Then rerun `pnpm test:migrations:integration`. The harness emits fixed failure messages and does
|
|
not dump PostgreSQL logs, SQL, container inspection output, or the generated database URL. Do not
|
|
enable query logging, print the test environment, run `docker compose config` without redaction,
|
|
or paste Docker inspection output into an issue. If the Docker daemon itself stopped during
|
|
cleanup, restore it before rerunning so the harness can create a fresh uniquely named project.
|