@gencow/core 0.1.9 → 0.1.11

package/src/__tests__/scoped-db.test.ts

@@ -1,442 +0,0 @@
-/**
- * packages/core/src/__tests__/scoped-db.test.ts
- *
- * Tests for createScopedDb() — Proxy wrapping Drizzle DB with auto-filter injection.
- *
- * Run: bun test packages/core/src/__tests__/scoped-db.test.ts
- */
-
-import { describe, it, expect, beforeEach, mock } from "bun:test";
-import { createScopedDb, applyFieldAccess } from "../scoped-db";
-import { gencowTable, ownerFilter, _resetTableRegistry, getTableAccessMeta } from "../table";
-import type { GencowCtx } from "../reactive";
-import { serial, text, integer } from "drizzle-orm/pg-core";
-import { pgTable } from "drizzle-orm/pg-core";
-import { eq, and, sql } from "drizzle-orm";
-
-// ─── Mock DB builder ────────────────────────────────────
-
-/**
- * Create a mock Drizzle-like DB that records method calls.
- * Supports chaining: db.select().from(table).where(cond).limit(n)
- */
-function makeMockDb() {
-    const calls: Array<{ method: string; args: any[] }> = [];
-    let lastWhere: any = undefined;
-
-    const chainable = (self: any) =>
-        new Proxy(self, {
-            get(target, prop: string) {
-                if (prop === "_calls") return calls;
-                if (prop === "_lastWhere") return lastWhere;
-                if (prop === "then") return undefined; // Not a thenable by default
-                if (prop === "execute") return undefined;
-
-                return (...args: any[]) => {
-                    calls.push({ method: prop, args });
-                    if (prop === "where") {
-                        lastWhere = args[0];
-                    }
-                    return chainable({});
-                };
-            },
-        });
-
-    const db = {
-        select: (...args: any[]) => {
-            calls.push({ method: "select", args });
-            return chainable({});
-        },
-        insert: (table: any) => {
-            calls.push({ method: "insert", args: [table] });
-            return chainable({});
-        },
-        update: (table: any) => {
-            calls.push({ method: "update", args: [table] });
-            return chainable({});
-        },
-        delete: (table: any) => {
-            calls.push({ method: "delete", args: [table] });
-            return chainable({});
-        },
-        execute: (sqlQuery: any) => {
-            calls.push({ method: "execute", args: [sqlQuery] });
-            return Promise.resolve([]);
-        },
-        query: {},
-        $client: {},
-        _: { session: {} },
-        _calls: calls,
-        _lastWhere: () => lastWhere,
-    };
-
-    return db;
-}
-
-function makeCtx(userId: string, role = "user"): GencowCtx {
-    return {
-        auth: {
-            getUserIdentity: () => ({ id: userId, email: `${userId}@test.com`, name: "Test" }),
-            requireAuth: () => ({ id: userId, email: `${userId}@test.com`, name: "Test", role } as any),
-        },
-        db: {},
-        unsafeDb: {},
-        storage: {} as any,
-        scheduler: {} as any,
-        realtime: {} as any,
-        retry: {} as any,
-    };
-}
-
-function makeAnonCtx(): GencowCtx {
-    return {
-        auth: {
-            getUserIdentity: () => null,
-            requireAuth: () => { throw new Error("Authentication required"); },
-        },
-        db: {},
-        unsafeDb: {},
-        storage: {} as any,
-        scheduler: {} as any,
-        realtime: {} as any,
-        retry: {} as any,
-    };
-}
-
-// ─── Tests ───────────────────────────────────────────────
-
-describe("createScopedDb()", () => {
-    beforeEach(() => {
-        _resetTableRegistry();
-    });
-
-    // ── execute() 차단 ──────────────────────────────────
-
-    describe("execute() 차단", () => {
-        it("ctx.db.execute()를 호출하면 에러를 던진다", () => {
-            const db = makeMockDb();
-            const ctx = makeCtx("user-1");
-            const scopedDb = createScopedDb(db, ctx);
-
-            expect(() => scopedDb.execute(sql`SELECT 1`)).toThrow(
-                "ctx.db.execute() is not allowed"
-            );
-        });
-
-        it("에러 메시지에 unsafeDb 사용 안내를 포함한다", () => {
-            const db = makeMockDb();
-            const ctx = makeCtx("user-1");
-            const scopedDb = createScopedDb(db, ctx);
-
-            try {
-                scopedDb.execute(sql`SELECT 1`);
-                expect(true).toBe(false); // should not reach
-            } catch (err: any) {
-                expect(err.message).toContain("ctx.unsafeDb.execute()");
-            }
-        });
-    });
-
-    // ── $client / _ 접근 차단 ────────────────────────────
-
-    describe("직접 클라이언트 접근 차단", () => {
-        it("ctx.db.$client 접근 시 에러", () => {
-            const db = makeMockDb();
-            const ctx = makeCtx("user-1");
-            const scopedDb = createScopedDb(db, ctx);
-
-            expect(() => scopedDb.$client).toThrow("ctx.db.$client is not allowed");
-        });
-
-        it("ctx.db._ 접근 시 에러", () => {
-            const db = makeMockDb();
-            const ctx = makeCtx("user-1");
-            const scopedDb = createScopedDb(db, ctx);
-
-            expect(() => scopedDb._).toThrow("ctx.db._ is not allowed");
-        });
-    });
-
-    // ── select().from() filter 주입 ─────────────────────
-
-    describe("select().from() — filter 주입", () => {
-        it("gencowTable에서 select().from() 호출 시 from이 실행된다", () => {
-            const table = gencowTable("scoped_tasks", {
-                id: serial("id").primaryKey(),
-                userId: text("user_id").notNull(),
-            }, {
-                filter: () => true,
-            });
-
-            const db = makeMockDb();
-            const ctx = makeCtx("user-1");
-            const scopedDb = createScopedDb(db, ctx);
-
-            scopedDb.select().from(table);
-
-            const fromCall = db._calls.find((c: any) => c.method === "from");
-            expect(fromCall).toBeDefined();
-        });
-
-        it("pgTable에서 select().from() 호출 시 그대로 통과한다", () => {
-            const table = pgTable("plain_tasks", {
-                id: serial("id").primaryKey(),
-            });
-
-            const db = makeMockDb();
-            const ctx = makeCtx("user-1");
-            const scopedDb = createScopedDb(db, ctx);
-
-            scopedDb.select().from(table);
-
-            const fromCall = db._calls.find((c: any) => c.method === "from");
-            expect(fromCall).toBeDefined();
-            // No where should be added for plain pgTable
-        });
-
-        it("filter: () => true 일 때 추가 where 없음", () => {
-            const table = gencowTable("public_table", {
-                id: serial("id").primaryKey(),
-            }, {
-                filter: () => true,
-            });
-
-            const db = makeMockDb();
-            const ctx = makeCtx("user-1");
-            const scopedDb = createScopedDb(db, ctx);
-
-            const chain = scopedDb.select().from(table);
-
-            // true filter 일 때 where가 호출되지 않아야 함
-            // (then에서 pending filters가 true이므로)
-            const calls = db._calls;
-            const whereCall = calls.find((c: any) => c.method === "where");
-            // No where for public tables
-        });
-    });
-
-    // ── insert는 필터 없이 통과 ─────────────────────────
-
-    describe("insert() — 패스스루", () => {
-        it("insert()는 필터 없이 통과한다", () => {
-            const table = gencowTable("insert_test", {
-                id: serial("id").primaryKey(),
-                userId: text("user_id").notNull(),
-            }, ownerFilter("userId"));
-
-            const db = makeMockDb();
-            const ctx = makeCtx("user-1");
-            const scopedDb = createScopedDb(db, ctx);
-
-            // insert는 새 행 추가이므로 filter 적용하지 않음
-            // (filter는 읽기/수정/삭제용)
-            scopedDb.insert(table);
-
-            const insertCall = db._calls.find((c: any) => c.method === "insert");
-            expect(insertCall).toBeDefined();
-        });
-    });
-
-    // ── update/delete filter 주입 ───────────────────────
-
-    describe("update() / delete() — filter 주입", () => {
-        it("update(gencowTable)가 실행된다", () => {
-            const table = gencowTable("update_test", {
-                id: serial("id").primaryKey(),
-                userId: text("user_id").notNull(),
-            }, ownerFilter("userId"));
-
-            const db = makeMockDb();
-            const ctx = makeCtx("user-1");
-            const scopedDb = createScopedDb(db, ctx);
-
-            scopedDb.update(table);
-
-            const updateCall = db._calls.find((c: any) => c.method === "update");
-            expect(updateCall).toBeDefined();
-        });
-
-        it("delete(gencowTable)가 실행된다", () => {
-            const table = gencowTable("delete_test", {
-                id: serial("id").primaryKey(),
-                userId: text("user_id").notNull(),
-            }, ownerFilter("userId"));
-
-            const db = makeMockDb();
-            const ctx = makeCtx("user-1");
-            const scopedDb = createScopedDb(db, ctx);
-
-            scopedDb.delete(table);
-
-            const deleteCall = db._calls.find((c: any) => c.method === "delete");
-            expect(deleteCall).toBeDefined();
-        });
-    });
-});
-
-// ─── applyFieldAccess ───────────────────────────────────
-
-describe("applyFieldAccess()", () => {
-    beforeEach(() => {
-        _resetTableRegistry();
-    });
-
-    it("미허용 필드를 null로 치환한다", () => {
-        const table = gencowTable("field_mask", {
-            id: serial("id").primaryKey(),
-            salary: integer("salary"),
-            name: text("name"),
-        }, {
-            filter: () => true,
-            fieldAccess: {
-                salary: { read: (ctx) => (ctx.auth.requireAuth() as any).role === "admin" },
-            },
-        });
-
-        const result = [
-            { id: 1, salary: 100000, name: "Alice" },
-            { id: 2, salary: 200000, name: "Bob" },
-        ];
-
-        const userCtx = makeCtx("user-1", "user");
-        const masked = applyFieldAccess(result, table, userCtx);
-
-        expect(masked[0].salary).toBeNull();
-        expect(masked[0].name).toBe("Alice");
-        expect(masked[1].salary).toBeNull();
-        expect(masked[1].name).toBe("Bob");
-    });
-
-    it("허용된 사용자의 필드는 유지된다", () => {
-        const table = gencowTable("field_keep", {
-            id: serial("id").primaryKey(),
-            salary: integer("salary"),
-        }, {
-            filter: () => true,
-            fieldAccess: {
-                salary: { read: (ctx) => (ctx.auth.requireAuth() as any).role === "admin" },
-            },
-        });
-
-        const result = [{ id: 1, salary: 100000 }];
-        const adminCtx = makeCtx("admin-1", "admin");
-        const kept = applyFieldAccess(result, table, adminCtx);
-
-        expect(kept[0].salary).toBe(100000);
-    });
-
-    it("fieldAccess가 없는 테이블은 결과를 그대로 반환한다", () => {
-        const table = gencowTable("no_field_access", {
-            id: serial("id").primaryKey(),
-            salary: integer("salary"),
-        }, {
-            filter: () => true,
-        });
-
-        const result = [{ id: 1, salary: 100000 }];
-        const ctx = makeCtx("user-1");
-        const kept = applyFieldAccess(result, table, ctx);
-
-        expect(kept[0].salary).toBe(100000);
-    });
-
-    it("단일 객체도 처리한다 (배열이 아닌 경우)", () => {
-        const table = gencowTable("single_obj", {
-            id: serial("id").primaryKey(),
-            salary: integer("salary"),
-        }, {
-            filter: () => true,
-            fieldAccess: {
-                salary: { read: () => false },
-            },
-        });
-
-        const result = { id: 1, salary: 100000 };
-        const ctx = makeCtx("user-1");
-        const masked = applyFieldAccess(result, table, ctx);
-
-        expect(masked.salary).toBeNull();
-        expect(masked.id).toBe(1);
-    });
-
-    it("pgTable은 그대로 반환한다", () => {
-        const table = pgTable("pg_no_field", {
-            id: serial("id").primaryKey(),
-            salary: integer("salary"),
-        });
-
-        const result = [{ id: 1, salary: 100000 }];
-        const ctx = makeCtx("user-1");
-        const kept = applyFieldAccess(result, table, ctx);
-
-        expect(kept[0].salary).toBe(100000);
-    });
-
-    it("비인증 사용자 — read 체크 실패 시 필드를 null로 치환", () => {
-        const table = gencowTable("anon_field", {
-            id: serial("id").primaryKey(),
-            secret: text("secret"),
-        }, {
-            filter: () => true,
-            fieldAccess: {
-                secret: { read: (ctx) => !!ctx.auth.getUserIdentity() },
-            },
-        });
-
-        const result = [{ id: 1, secret: "top-secret" }];
-        const anonCtx = makeAnonCtx();
-        const masked = applyFieldAccess(result, table, anonCtx);
-
-        expect(masked[0].secret).toBeNull();
-    });
-
-    it("여러 필드에 대한 fieldAccess 적용", () => {
-        const table = gencowTable("multi_field", {
-            id: serial("id").primaryKey(),
-            salary: integer("salary"),
-            ssn: text("ssn"),
-            name: text("name"),
-        }, {
-            filter: () => true,
-            fieldAccess: {
-                salary: { read: () => false },
-                ssn: { read: () => false },
-            },
-        });
-
-        const result = { id: 1, salary: 100000, ssn: "123-45-6789", name: "Alice" };
-        const ctx = makeCtx("user-1");
-        const masked = applyFieldAccess(result, table, ctx);
-
-        expect(masked.salary).toBeNull();
-        expect(masked.ssn).toBeNull();
-        expect(masked.name).toBe("Alice");
-        expect(masked.id).toBe(1);
-    });
-
-    it("null/undefined 결과는 그대로 반환", () => {
-        const table = gencowTable("null_result", {
-            id: serial("id").primaryKey(),
-        }, {
-            filter: () => true,
-            fieldAccess: { id: { read: () => false } },
-        });
-
-        const ctx = makeCtx("user-1");
-        expect(applyFieldAccess(null, table, ctx)).toBeNull();
-        expect(applyFieldAccess(undefined, table, ctx)).toBeUndefined();
-    });
-
-    it("빈 배열은 그대로 반환", () => {
-        const table = gencowTable("empty_arr", {
-            id: serial("id").primaryKey(),
-        }, {
-            filter: () => true,
-            fieldAccess: { id: { read: () => false } },
-        });
-
-        const ctx = makeCtx("user-1");
-        const result = applyFieldAccess([], table, ctx);
-        expect(result).toEqual([]);
-    });
-});