@dooer/dooer-test-env 1.17.2 → 1.18.0

package/lib/command/customer.js

@@ -2,6 +2,28 @@ const fs = require('fs')
 const chalk = require('chalk')
 const remote = require('../remote')
 const serviceClient = require('../service-client')
+
+// Run the documented shredder over the local database. Emails are already anonymized by the copy itself;
+// this is the rest of the PII.
+async function shredLocal() {
+  console.log(chalk.bold('\nshredding the local database…'))
+  const { shred } = require('../shred')
+  const { Client } = require('pg')
+  const client = new Client({ host: 'localhost', port: 55432, user: 'dooer', password: 'dooer', database: 'dooer' })
+  await client.connect()
+  try {
+    const result = await shred(client, { execute: true })
+    const failed = (result && result.failed) || []
+    if (failed.length) {
+      // Say so rather than letting a partial shred read as a clean one.
+      console.log(chalk.yellow(`  ${failed.length} shred script(s) failed — local PII is NOT fully anonymized\n`))
+    } else {
+      console.log(chalk.green(`  shredded ${((result && result.scripts) || []).length} script(s)\n`))
+    }
+  } finally {
+    await client.end().catch(() => {})
+  }
+}
 const { createAccount, SUBSCRIPTION_TYPES } = require('../account')
 
 // `copy` now runs through service-dooer-test-env (export in the source, import in the target) instead of
@@ -65,6 +87,10 @@ const copyOptions = (y) =>
     .option('skip-users', { type: 'boolean', describe: 'skip copying referenced users missing from the target' })
     .option('confirm-production', { type: 'boolean', describe: 'REQUIRED to write to dooer-production' })
     .option('reason', { type: 'string', describe: 'recorded in the audit trail at both ends' })
+    .option('shred', {
+      type: 'boolean',
+      describe: 'after a LOCAL copy, run the shredder over the local database (localhost only)',
+    })
     .option('execute', { type: 'boolean', default: false, describe: 'actually write (default: dry-run)' })
 
 module.exports = {
@@ -82,6 +108,12 @@ module.exports = {
           const targetEnv = envFromFlags(argv.targetLocal, argv.targetNamespace, sourceEnv)
           const { copyOrganization } = require('../copy')
 
+          // Shredding is whole-database and localhost-only by design (see command/shred.js), so it can
+          // only follow a copy INTO local, and only once — not per org in a batch.
+          if (argv.shred && targetEnv !== 'local') {
+            throw new Error('--shred only applies to a copy into the local env (the shredder is localhost-only)')
+          }
+
           if (sources.length === 1) {
             await copyOrganization({
               organizationId: sources[0],
@@ -90,6 +122,7 @@ module.exports = {
               reason: argv.reason,
               dryRun: !argv.execute,
             })
+            if (argv.shred && argv.execute) await shredLocal()
             return
           }
           // Batch: each org is a full independent copy (the engine scans the source per org). One bad uuid
@@ -117,6 +150,8 @@ module.exports = {
             )
           )
           failed.forEach((f) => console.log(chalk.red(`  ${f.source}: ${f.error}`)))
+          // Once, after the whole batch — the shredder covers the entire database.
+          if (argv.shred && argv.execute && failed.length < sources.length) await shredLocal()
           if (failed.length) process.exitCode = 1
         },
       })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dooer/dooer-test-env",
-  "version": "1.17.2",
+  "version": "1.18.0",
   "description": "Run the whole Dooer backend locally (staging DB minus customers), copy/purge customers between environments, and shred — one CLI.",
   "license": "UNLICENSED",
   "repository": "Dooer/cli-dooer-test-env",