@carthooks/arcubase-cli 0.1.7 → 0.1.8

package/dist/tests/command_registry.test.js

@@ -1,34 +1,87 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { adminCommands, userCommands } from '../generated/command_registry.generated.js';
-import { findCommandSuggestions } from '../runtime/command_registry.js';
-test('admin app create-entity command exists', () => {
-    assert.ok(adminCommands.some((c) => c.commandPath.join(' ') === 'app create-entity'));
+function commandPaths(commands) {
+    return commands.map((item) => item.commandPath.join(' ')).sort();
+}
+test('admin surface is restricted to reset white list', () => {
+    const actual = commandPaths(adminCommands);
+    const expected = [
+        'app create',
+        'app delete',
+        'app get',
+        'app list',
+        'app update',
+        'table create',
+        'table delete',
+        'table get',
+        'table list',
+        'table rename',
+        'table update-schema',
+        'access-rule assign-users',
+        'access-rule create',
+        'access-rule delete',
+        'access-rule get',
+        'access-rule list',
+        'access-rule update',
+        'workflow create-version',
+        'workflow deploy',
+        'workflow get',
+        'workflow update',
+    ].sort();
+    assert.deepEqual(actual, expected);
 });
-test('admin app list-apps command exists', () => {
-    assert.ok(adminCommands.some((c) => c.commandPath.join(' ') === 'app list-apps'));
+test('user surface is restricted to reset white list', () => {
+    const actual = commandPaths(userCommands);
+    const expected = [
+        'entry',
+        'profile get',
+        'profile update',
+        'row bulk-update',
+        'row create',
+        'row delete',
+        'row get',
+        'row query',
+        'row selection-action',
+        'row update',
+        'table dataset',
+        'table get',
+        'table relation-options',
+        'upload check-mobile',
+        'upload mobile',
+        'upload preview',
+        'upload token',
+        'workflow approve',
+        'workflow countersign',
+        'workflow forward',
+        'workflow process-map',
+        'workflow query-approve-users',
+        'workflow query-nodes',
+        'workflow resolve',
+        'workflow retract',
+        'workflow rollback',
+    ].sort();
+    assert.deepEqual(actual, expected);
 });
-test('admin app inventory command exists', () => {
-    const suggestions = findCommandSuggestions('app', 'inventory', 20);
-    assert.ok(suggestions.some((item) => item.binary === 'arcubase-admin' && item.moduleName === 'app' && item.commandName === 'inventory'));
-});
-test('user rows query-entity command exists', () => {
-    assert.ok(userCommands.some((c) => c.commandPath.join(' ') === 'rows query-entity'));
-});
-test('inline request type keeps full object text instead of truncated brace', () => {
-    const command = adminCommands.find((c) => c.commandPath.join(' ') === 'dashboard clone-dashboard');
-    assert.ok(command);
-    const typed = command;
-    assert.match(String(typed.requestType), /^\{\s*name:\s*string\s*\}$/);
-});
-test('tag commands no longer emit truncated inline request type', () => {
-    const command = adminCommands.find((c) => c.commandPath.join(' ') === 'entity-tags batch-add-entity-tags');
-    assert.ok(command);
-    const typed = command;
-    assert.match(String(typed.requestType), /^\{\s*policy_id:\s*string.*selection:\s*any.*tag_names:\s*string\[\]\s*\}$/);
-    assert.equal(typed.scalarParams.length, 0);
-});
-test('suggestions can point wrong admin delete guess to user rows delete command', () => {
-    const suggestions = findCommandSuggestions('entity', 'admin-delete-entity-row');
-    assert.ok(suggestions.some((item) => item.binary === 'arcubase' && item.moduleName === 'rows' && item.commandName === 'delete-entity-row'));
+test('black list commands are removed from registry', () => {
+    const all = new Set([...commandPaths(adminCommands), ...commandPaths(userCommands)]);
+    const forbidden = [
+        'app inventory',
+        'app list-apps',
+        'app create-entity',
+        'entity admin-get-entity-info',
+        'entity admin-save-entity',
+        'ingress create-entity-ingress',
+        'workflow query-entity',
+        'workflow insert-entity',
+        'workflow update-entity-row',
+        'workflow delete-entity-row',
+        'workflow restore-entity-row',
+        'workflow query-entity-selection',
+        'profile change-password',
+        'profile auth-channels',
+    ];
+    for (const item of forbidden) {
+        assert.equal(all.has(item), false, `${item} should not exist`);
+    }
 });