@geekmidas/cli 9.0.2 → 10.0.0-alpha.1

package/src/test/__tests__/auth.spec.ts

@@ -1,162 +0,0 @@
-import { mkdirSync, rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import {
-	afterAll,
-	afterEach,
-	beforeAll,
-	beforeEach,
-	describe,
-	expect,
-	it,
-	vi,
-} from 'vitest';
-import {
-	loadPortState,
-	parseComposePortMappings,
-	rewriteUrlsWithPorts,
-	savePortState,
-} from '../../dev/index';
-import { getDependencyEnvVars } from '../../workspace/index';
-import { rewriteDatabaseUrlForTests } from '../index';
-import {
-	COMPOSE_FULL,
-	createFullstackSecrets,
-	createFullstackWorkspace,
-	mapSecretsForApp,
-} from './__fixtures__/workspace';
-
-beforeAll(() => {
-	vi.spyOn(console, 'log').mockImplementation(() => {});
-});
-
-afterAll(() => {
-	vi.restoreAllMocks();
-});
-
-describe('auth app context', () => {
-	let testDir: string;
-
-	beforeEach(() => {
-		testDir = join(tmpdir(), `gkm-auth-test-${Date.now()}`);
-		mkdirSync(testDir, { recursive: true });
-		writeFileSync(join(testDir, 'docker-compose.yml'), COMPOSE_FULL);
-	});
-
-	afterEach(() => {
-		rmSync(testDir, { recursive: true, force: true });
-	});
-
-	it('should resolve DATABASE_URL from AUTH_DATABASE_URL', () => {
-		const authSecrets = mapSecretsForApp(createFullstackSecrets(), 'auth');
-
-		expect(authSecrets.DATABASE_URL).toBe(
-			'postgresql://auth:auth-pass@localhost:5432/my-saas',
-		);
-		expect(authSecrets.AUTH_DATABASE_URL).toBe(
-			'postgresql://auth:auth-pass@localhost:5432/my-saas',
-		);
-	});
-
-	it('should preserve BETTER_AUTH_* secrets untouched', () => {
-		const authSecrets = mapSecretsForApp(createFullstackSecrets(), 'auth');
-
-		expect(authSecrets.BETTER_AUTH_SECRET).toBe('better-auth-secret-123');
-		expect(authSecrets.BETTER_AUTH_URL).toBe('http://localhost:3002');
-		expect(authSecrets.BETTER_AUTH_TRUSTED_ORIGINS).toBe(
-			'http://localhost:3000,http://localhost:3001',
-		);
-	});
-
-	it('should rewrite auth DATABASE_URL ports when postgres is remapped', async () => {
-		await savePortState(testDir, {
-			POSTGRES_HOST_PORT: 5433,
-			REDIS_HOST_PORT: 6379,
-		});
-
-		let secrets = mapSecretsForApp(createFullstackSecrets(), 'auth');
-
-		const mappings = parseComposePortMappings(
-			join(testDir, 'docker-compose.yml'),
-		);
-		const ports = await loadPortState(testDir);
-		secrets = rewriteUrlsWithPorts(secrets, {
-			dockerEnv: {},
-			ports,
-			mappings,
-		});
-
-		expect(secrets.DATABASE_URL).toBe(
-			'postgresql://auth:auth-pass@localhost:5433/my-saas',
-		);
-		expect(secrets.AUTH_DATABASE_URL).toBe(
-			'postgresql://auth:auth-pass@localhost:5433/my-saas',
-		);
-		// BETTER_AUTH_URL is an app port (3002), not a docker service port
-		expect(secrets.BETTER_AUTH_URL).toBe('http://localhost:3002');
-		expect(secrets.BETTER_AUTH_SECRET).toBe('better-auth-secret-123');
-		expect(secrets.BETTER_AUTH_TRUSTED_ORIGINS).toBe(
-			'http://localhost:3000,http://localhost:3001',
-		);
-	});
-
-	it('should apply _test suffix for gkm test in auth context', async () => {
-		await savePortState(testDir, { POSTGRES_HOST_PORT: 5433 });
-
-		let secrets = mapSecretsForApp(createFullstackSecrets(), 'auth');
-
-		const mappings = parseComposePortMappings(
-			join(testDir, 'docker-compose.yml'),
-		);
-		const ports = await loadPortState(testDir);
-		secrets = rewriteUrlsWithPorts(secrets, {
-			dockerEnv: {},
-			ports,
-			mappings,
-		});
-		secrets = rewriteDatabaseUrlForTests(secrets);
-
-		// Port rewrite + _test suffix
-		expect(secrets.DATABASE_URL).toBe(
-			'postgresql://auth:auth-pass@localhost:5433/my-saas_test',
-		);
-		expect(secrets.AUTH_DATABASE_URL).toBe(
-			'postgresql://auth:auth-pass@localhost:5433/my-saas_test',
-		);
-		// API_DATABASE_URL also gets _test (same container, different user)
-		expect(secrets.API_DATABASE_URL).toBe(
-			'postgresql://api:api-pass@localhost:5433/my-saas_test',
-		);
-	});
-
-	it('should use default ports when no port state saved', async () => {
-		let secrets = mapSecretsForApp(createFullstackSecrets(), 'auth');
-
-		const mappings = parseComposePortMappings(
-			join(testDir, 'docker-compose.yml'),
-		);
-		const ports = await loadPortState(testDir);
-
-		// No saved state — rewriting is a no-op
-		if (Object.keys(ports).length > 0) {
-			secrets = rewriteUrlsWithPorts(secrets, {
-				dockerEnv: {},
-				ports,
-				mappings,
-			});
-		}
-		secrets = rewriteDatabaseUrlForTests(secrets);
-
-		// Default port preserved, only _test suffix added
-		expect(secrets.DATABASE_URL).toBe(
-			'postgresql://auth:auth-pass@localhost:5432/my-saas_test',
-		);
-	});
-
-	it('should not inject dependency URLs for auth app (no dependencies)', () => {
-		const workspace = createFullstackWorkspace();
-		const depEnv = getDependencyEnvVars(workspace, 'auth');
-
-		expect(depEnv).toEqual({});
-	});
-});

package/src/test/__tests__/index.spec.ts

@@ -1,502 +0,0 @@
-import {
-	existsSync,
-	mkdirSync,
-	readFileSync,
-	rmSync,
-	writeFileSync,
-} from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import {
-	afterAll,
-	afterEach,
-	beforeAll,
-	beforeEach,
-	describe,
-	expect,
-	it,
-	vi,
-} from 'vitest';
-import {
-	buildDockerComposeEnv,
-	createCredentialsPreload,
-	loadPortState,
-	parseComposePortMappings,
-	resolveServicePorts,
-	rewriteUrlsWithPorts,
-	savePortState,
-} from '../../dev/index';
-import { rewriteDatabaseUrlForTests } from '../index';
-
-describe('rewriteDatabaseUrlForTests', () => {
-	beforeAll(() => {
-		vi.spyOn(console, 'log').mockImplementation(() => {});
-	});
-
-	afterAll(() => {
-		vi.restoreAllMocks();
-	});
-
-	it('should append _test to DATABASE_URL database name', () => {
-		const result = rewriteDatabaseUrlForTests({
-			DATABASE_URL: 'postgresql://app:secret@localhost:5432/myapp',
-		});
-		expect(result.DATABASE_URL).toBe(
-			'postgresql://app:secret@localhost:5432/myapp_test',
-		);
-	});
-
-	it('should handle URL-encoded passwords', () => {
-		const result = rewriteDatabaseUrlForTests({
-			DATABASE_URL: 'postgresql://app:p%40ssw0rd@localhost:5432/myapp',
-		});
-		expect(result.DATABASE_URL).toBe(
-			'postgresql://app:p%40ssw0rd@localhost:5432/myapp_test',
-		);
-	});
-
-	it('should handle non-default ports', () => {
-		const result = rewriteDatabaseUrlForTests({
-			DATABASE_URL: 'postgresql://app:secret@localhost:5433/myapp',
-		});
-		expect(result.DATABASE_URL).toBe(
-			'postgresql://app:secret@localhost:5433/myapp_test',
-		);
-	});
-
-	it('should not double-append _test if already present', () => {
-		const result = rewriteDatabaseUrlForTests({
-			DATABASE_URL: 'postgresql://app:secret@localhost:5432/myapp_test',
-		});
-		expect(result.DATABASE_URL).toBe(
-			'postgresql://app:secret@localhost:5432/myapp_test',
-		);
-	});
-
-	it('should rewrite all keys containing DATABASE_URL', () => {
-		const result = rewriteDatabaseUrlForTests({
-			DATABASE_URL: 'postgresql://app:secret@localhost:5432/app',
-			API_DATABASE_URL: 'postgresql://app:secret@localhost:5432/api',
-		});
-		expect(result.DATABASE_URL).toBe(
-			'postgresql://app:secret@localhost:5432/app_test',
-		);
-		expect(result.API_DATABASE_URL).toBe(
-			'postgresql://app:secret@localhost:5432/api_test',
-		);
-	});
-
-	it('should skip non-DATABASE_URL keys', () => {
-		const result = rewriteDatabaseUrlForTests({
-			DATABASE_URL: 'postgresql://app:secret@localhost:5432/app',
-			REDIS_URL: 'redis://:secret@localhost:6379',
-			API_KEY: 'sk-12345',
-		});
-		expect(result.DATABASE_URL).toBe(
-			'postgresql://app:secret@localhost:5432/app_test',
-		);
-		expect(result.REDIS_URL).toBe('redis://:secret@localhost:6379');
-		expect(result.API_KEY).toBe('sk-12345');
-	});
-
-	it('should skip invalid URLs gracefully', () => {
-		const result = rewriteDatabaseUrlForTests({
-			DATABASE_URL: 'not-a-url',
-		});
-		expect(result.DATABASE_URL).toBe('not-a-url');
-	});
-
-	it('should skip URLs without a database name', () => {
-		const result = rewriteDatabaseUrlForTests({
-			DATABASE_URL: 'postgresql://app:secret@localhost:5432/',
-		});
-		expect(result.DATABASE_URL).toBe('postgresql://app:secret@localhost:5432/');
-	});
-
-	it('should return empty object for empty input', () => {
-		const result = rewriteDatabaseUrlForTests({});
-		expect(result).toEqual({});
-	});
-
-	it('should not mutate the original object', () => {
-		const original = {
-			DATABASE_URL: 'postgresql://app:secret@localhost:5432/app',
-		};
-		const result = rewriteDatabaseUrlForTests(original);
-		expect(original.DATABASE_URL).toBe(
-			'postgresql://app:secret@localhost:5432/app',
-		);
-		expect(result).not.toBe(original);
-	});
-});
-
-describe('port rewriting + test database pipeline', () => {
-	let testDir: string;
-
-	beforeAll(() => {
-		vi.spyOn(console, 'log').mockImplementation(() => {});
-	});
-
-	afterAll(() => {
-		vi.restoreAllMocks();
-	});
-
-	beforeEach(() => {
-		testDir = join(tmpdir(), `gkm-pipeline-test-${Date.now()}`);
-		mkdirSync(testDir, { recursive: true });
-	});
-
-	afterEach(() => {
-		rmSync(testDir, { recursive: true, force: true });
-	});
-
-	it('should rewrite ports then append _test to DATABASE_URL', async () => {
-		// 1. Write docker-compose.yml with port mappings
-		writeFileSync(
-			join(testDir, 'docker-compose.yml'),
-			`
-services:
-  postgres:
-    image: postgres:17
-    ports:
-      - '\${POSTGRES_HOST_PORT:-5432}:5432'
-  redis:
-    image: redis:7
-    ports:
-      - '\${REDIS_HOST_PORT:-6379}:6379'
-`,
-		);
-
-		// 2. Save port state (simulating gkm dev having resolved ports)
-		await savePortState(testDir, {
-			POSTGRES_HOST_PORT: 5433,
-			REDIS_HOST_PORT: 6380,
-		});
-
-		// 3. Simulate secrets loaded from encrypted store
-		let secrets: Record<string, string> = {
-			DATABASE_URL: 'postgresql://app:secret@localhost:5432/myapp',
-			REDIS_URL: 'redis://:secret@localhost:6379',
-			BETTER_AUTH_SECRET: 'auth-secret-123',
-			BETTER_AUTH_URL: 'http://localhost:3002',
-		};
-
-		// 4. Apply port rewriting (what gkm test/exec does)
-		const composePath = join(testDir, 'docker-compose.yml');
-		const mappings = parseComposePortMappings(composePath);
-		const ports = await loadPortState(testDir);
-		secrets = rewriteUrlsWithPorts(secrets, {
-			dockerEnv: {},
-			ports,
-			mappings,
-		});
-
-		// Ports should be rewritten
-		expect(secrets.DATABASE_URL).toBe(
-			'postgresql://app:secret@localhost:5433/myapp',
-		);
-		expect(secrets.REDIS_URL).toBe('redis://:secret@localhost:6380');
-		// Non-docker URLs should be untouched
-		expect(secrets.BETTER_AUTH_URL).toBe('http://localhost:3002');
-		expect(secrets.BETTER_AUTH_SECRET).toBe('auth-secret-123');
-
-		// 5. Apply test database rewriting (gkm test only)
-		secrets = rewriteDatabaseUrlForTests(secrets);
-
-		// DATABASE_URL should now have both port + _test suffix
-		expect(secrets.DATABASE_URL).toBe(
-			'postgresql://app:secret@localhost:5433/myapp_test',
-		);
-		// Other URLs unchanged
-		expect(secrets.REDIS_URL).toBe('redis://:secret@localhost:6380');
-		expect(secrets.BETTER_AUTH_URL).toBe('http://localhost:3002');
-	});
-
-	it('should handle no saved port state gracefully', async () => {
-		writeFileSync(
-			join(testDir, 'docker-compose.yml'),
-			`
-services:
-  postgres:
-    image: postgres:17
-    ports:
-      - '\${POSTGRES_HOST_PORT:-5432}:5432'
-`,
-		);
-
-		// No saved port state — gkm dev hasn't run yet
-		let secrets: Record<string, string> = {
-			DATABASE_URL: 'postgresql://app:secret@localhost:5432/myapp',
-		};
-
-		const composePath = join(testDir, 'docker-compose.yml');
-		const mappings = parseComposePortMappings(composePath);
-		const ports = await loadPortState(testDir);
-
-		// No ports saved — rewrite should be a no-op
-		if (Object.keys(ports).length > 0) {
-			secrets = rewriteUrlsWithPorts(secrets, {
-				dockerEnv: {},
-				ports,
-				mappings,
-			});
-		}
-
-		// Still apply test database suffix
-		secrets = rewriteDatabaseUrlForTests(secrets);
-
-		expect(secrets.DATABASE_URL).toBe(
-			'postgresql://app:secret@localhost:5432/myapp_test',
-		);
-	});
-
-	it('should write test-secrets.json and credentials preload', async () => {
-		const gkmDir = join(testDir, '.gkm');
-		mkdirSync(gkmDir, { recursive: true });
-
-		const secrets = {
-			DATABASE_URL: 'postgresql://app:secret@localhost:5433/myapp_test',
-			JWT_SECRET: 'test-jwt-secret',
-		};
-
-		const secretsJsonPath = join(gkmDir, 'test-secrets.json');
-		writeFileSync(secretsJsonPath, JSON.stringify(secrets, null, 2));
-
-		const preloadPath = join(gkmDir, 'test-credentials-preload.ts');
-		await createCredentialsPreload(preloadPath, secretsJsonPath);
-
-		// Verify secrets JSON was written
-		expect(existsSync(secretsJsonPath)).toBe(true);
-		const written = JSON.parse(readFileSync(secretsJsonPath, 'utf-8'));
-		expect(written.DATABASE_URL).toBe(secrets.DATABASE_URL);
-		expect(written.JWT_SECRET).toBe(secrets.JWT_SECRET);
-
-		// Verify preload script was created with correct content
-		expect(existsSync(preloadPath)).toBe(true);
-		const preloadContent = readFileSync(preloadPath, 'utf-8');
-		expect(preloadContent).toContain('__gkm_credentials__');
-		expect(preloadContent).toContain('Object.assign(process.env');
-		expect(preloadContent).toContain(secretsJsonPath);
-	});
-
-	it('should handle worker template with rabbitmq ports', async () => {
-		writeFileSync(
-			join(testDir, 'docker-compose.yml'),
-			`
-services:
-  postgres:
-    image: postgres:17
-    ports:
-      - '\${POSTGRES_HOST_PORT:-5432}:5432'
-  rabbitmq:
-    image: rabbitmq:3-management
-    ports:
-      - '\${RABBITMQ_HOST_PORT:-5672}:5672'
-      - '\${RABBITMQ_MGMT_PORT:-15672}:15672'
-`,
-		);
-
-		await savePortState(testDir, {
-			POSTGRES_HOST_PORT: 5432,
-			RABBITMQ_HOST_PORT: 5673,
-			RABBITMQ_MGMT_PORT: 15672,
-		});
-
-		let secrets: Record<string, string> = {
-			DATABASE_URL: 'postgresql://app:secret@localhost:5432/myapp',
-			RABBITMQ_URL: 'amqp://app:secret@localhost:5672',
-		};
-
-		const mappings = parseComposePortMappings(
-			join(testDir, 'docker-compose.yml'),
-		);
-		const ports = await loadPortState(testDir);
-		secrets = rewriteUrlsWithPorts(secrets, {
-			dockerEnv: {},
-			ports,
-			mappings,
-		});
-		secrets = rewriteDatabaseUrlForTests(secrets);
-
-		// Postgres port unchanged, but _test suffix added
-		expect(secrets.DATABASE_URL).toBe(
-			'postgresql://app:secret@localhost:5432/myapp_test',
-		);
-		// RabbitMQ port rewritten
-		expect(secrets.RABBITMQ_URL).toBe('amqp://app:secret@localhost:5673');
-	});
-
-	it('should preserve root postgres credentials through the pipeline', async () => {
-		writeFileSync(
-			join(testDir, 'docker-compose.yml'),
-			`
-services:
-  postgres:
-    image: postgres:17
-    ports:
-      - '\${POSTGRES_HOST_PORT:-5432}:5432'
-`,
-		);
-
-		await savePortState(testDir, {
-			POSTGRES_HOST_PORT: 5434,
-		});
-
-		// Simulate toEmbeddableSecrets output for a workspace with app-specific users
-		let secrets: Record<string, string> = {
-			DATABASE_URL: 'postgresql://app:rootpass@postgres:5432/app',
-			API_DATABASE_URL: 'postgresql://api:apipass@localhost:5432/myproject_dev',
-			AUTH_DATABASE_URL:
-				'postgresql://auth:authpass@localhost:5432/myproject_dev',
-			POSTGRES_USER: 'app',
-			POSTGRES_PASSWORD: 'rootpass',
-			POSTGRES_DB: 'app',
-			POSTGRES_HOST: 'postgres',
-			POSTGRES_PORT: '5432',
-		};
-
-		// Apply port + host rewriting
-		const mappings = parseComposePortMappings(
-			join(testDir, 'docker-compose.yml'),
-		);
-		const ports = await loadPortState(testDir);
-		secrets = rewriteUrlsWithPorts(secrets, {
-			dockerEnv: {},
-			ports,
-			mappings,
-		});
-
-		// Apply test database suffix
-		secrets = rewriteDatabaseUrlForTests(secrets);
-
-		// Root credentials should be present and rewritten to localhost
-		expect(secrets.POSTGRES_USER).toBe('app');
-		expect(secrets.POSTGRES_PASSWORD).toBe('rootpass');
-		expect(secrets.POSTGRES_HOST).toBe('localhost');
-		expect(secrets.POSTGRES_PORT).toBe('5434');
-
-		// All DATABASE_URLs should have localhost, resolved port, and _test suffix
-		expect(secrets.DATABASE_URL).toBe(
-			'postgresql://app:rootpass@localhost:5434/app_test',
-		);
-		expect(secrets.API_DATABASE_URL).toBe(
-			'postgresql://api:apipass@localhost:5434/myproject_dev_test',
-		);
-		expect(secrets.AUTH_DATABASE_URL).toBe(
-			'postgresql://auth:authpass@localhost:5434/myproject_dev_test',
-		);
-	});
-});
-
-describe('test command Docker startup pipeline', () => {
-	let testDir: string;
-
-	beforeAll(() => {
-		vi.spyOn(console, 'log').mockImplementation(() => {});
-		vi.spyOn(console, 'warn').mockImplementation(() => {});
-	});
-
-	afterAll(() => {
-		vi.restoreAllMocks();
-	});
-
-	beforeEach(() => {
-		testDir = join(tmpdir(), `gkm-test-docker-${Date.now()}`);
-		mkdirSync(testDir, { recursive: true });
-	});
-
-	afterEach(() => {
-		rmSync(testDir, { recursive: true, force: true });
-	});
-
-	it('should build docker compose env with secrets so credentials are interpolated', () => {
-		const secretsEnv = {
-			POSTGRES_USER: 'app',
-			POSTGRES_PASSWORD: 'supersecret',
-			POSTGRES_DB: 'myapp',
-		};
-		const portEnv = { POSTGRES_HOST_PORT: '5434' };
-
-		// This is the env that gets passed to `docker compose up -d`
-		const env = buildDockerComposeEnv(secretsEnv, portEnv);
-
-		// Secrets are available so ${POSTGRES_USER:-postgres} resolves correctly
-		expect(env.POSTGRES_USER).toBe('app');
-		expect(env.POSTGRES_PASSWORD).toBe('supersecret');
-		expect(env.POSTGRES_DB).toBe('myapp');
-		expect(env.POSTGRES_HOST_PORT).toBe('5434');
-	});
-
-	it('should resolve ports, rewrite URLs and hostnames, then append _test', async () => {
-		writeFileSync(
-			join(testDir, 'docker-compose.yml'),
-			`
-services:
-  postgres:
-    image: postgres:18
-    ports:
-      - '\${POSTGRES_HOST_PORT:-5432}:5432'
-  redis:
-    image: redis:7
-    ports:
-      - '\${REDIS_HOST_PORT:-6379}:6379'
-`,
-		);
-
-		// Simulate secrets loaded from encrypted store (Docker hostnames)
-		const secretsEnv: Record<string, string> = {
-			DATABASE_URL: 'postgresql://app:supersecret@postgres:5432/myapp',
-			REDIS_URL: 'redis://:redispass@redis:6379',
-			POSTGRES_USER: 'app',
-			POSTGRES_PASSWORD: 'supersecret',
-			POSTGRES_DB: 'myapp',
-			POSTGRES_HOST: 'postgres',
-			POSTGRES_PORT: '5432',
-			REDIS_PASSWORD: 'redispass',
-			REDIS_HOST: 'redis',
-			REDIS_PORT: '6379',
-		};
-
-		// Step 1: Resolve ports
-		const resolvedPorts = await resolveServicePorts(testDir);
-
-		// Step 2: Build env for docker compose (secrets + ports)
-		const dockerEnv = buildDockerComposeEnv(
-			secretsEnv,
-			resolvedPorts.dockerEnv,
-		);
-		expect(dockerEnv.POSTGRES_USER).toBe('app');
-		expect(dockerEnv.POSTGRES_PASSWORD).toBe('supersecret');
-
-		// Step 3: Rewrite URLs with ports and hostnames
-		const rewritten = rewriteUrlsWithPorts(secretsEnv, resolvedPorts);
-
-		// Step 4: Apply test suffix
-		const final = rewriteDatabaseUrlForTests(rewritten);
-
-		// Hostnames should be rewritten to localhost
-		expect(final.POSTGRES_HOST).toBe('localhost');
-		expect(final.REDIS_HOST).toBe('localhost');
-
-		// DATABASE_URL should have localhost and _test suffix
-		expect(final.DATABASE_URL).toContain('@localhost:');
-		expect(final.DATABASE_URL).toMatch(/\/myapp_test$/);
-
-		// REDIS_URL should have localhost
-		expect(final.REDIS_URL).toContain('@localhost:');
-	});
-
-	it('should not default to postgres:postgres when secrets are provided', () => {
-		const secretsEnv = {
-			POSTGRES_USER: 'myapp',
-			POSTGRES_PASSWORD: 'strongpass123',
-		};
-
-		const env = buildDockerComposeEnv(secretsEnv, {});
-
-		// The key assertion: secrets are in env so Docker Compose
-		// ${POSTGRES_USER:-postgres} resolves to 'myapp', not 'postgres'
-		expect(env.POSTGRES_USER).toBe('myapp');
-		expect(env.POSTGRES_PASSWORD).toBe('strongpass123');
-	});
-});