@kahitsan/plugin-sdk 0.4.4 → 0.5.0-staging.26

package/dist/test.d.ts

@@ -0,0 +1,32 @@
+import { QueryResultRow, QueryResult, PoolClient, Pool } from 'pg';
+import { MiddlewareHandler } from 'hono';
+interface FakePluginDb {
+    query<R extends QueryResultRow = QueryResultRow>(text: string, params?: readonly unknown[]): Promise<QueryResult<R>>;
+    connect(): Promise<PoolClient>;
+}
+interface RecordedQuery {
+    text: string;
+    params: readonly unknown[];
+}
+declare function fakePluginDb(responder?: QueryResultRow[] | ((text: string, params: readonly unknown[]) => QueryResultRow[])): FakePluginDb & {
+    calls: RecordedQuery[];
+};
+interface RollbackDb {
+    db: FakePluginDb;
+    rollback: () => Promise<void>;
+}
+declare function withRollbackDb(pool: Pool, schemas: readonly string[]): Promise<RollbackDb>;
+interface StubIdentity {
+    workspaceId: number | string;
+    userId?: string;
+    role?: string;
+    wsRole?: string;
+    permissions?: string[];
+}
+declare function stubMiddleware(id: StubIdentity): {
+    requireAuth: MiddlewareHandler;
+    requireWorkspace: MiddlewareHandler;
+    requirePermission: (...codes: string[]) => MiddlewareHandler;
+};
+export { fakePluginDb, stubMiddleware, withRollbackDb };
+export type { FakePluginDb, RecordedQuery, RollbackDb, StubIdentity };

package/dist/test.js

@@ -0,0 +1,121 @@
+// src/test/db.ts
+function fakePluginDb(responder) {
+  const calls = [];
+  const resolveRows = typeof responder === "function" ? responder : () => Array.isArray(responder) ? responder : [];
+  const fakeClient = {
+    query: async (text, params) => {
+      calls.push({ text, params: params ?? [] });
+      return { rows: resolveRows(text, params ?? []) };
+    },
+    release: () => {
+    }
+  };
+  return {
+    calls,
+    query: async (text, params) => {
+      calls.push({ text, params: params ?? [] });
+      return { rows: resolveRows(text, params ?? []) };
+    },
+    // Handlers that do `const c = await db.connect()` then `c.query(...)`
+    // share the same recorder so their SQL is captured too.
+    connect: async () => fakeClient
+  };
+}
+function wrapWithSavepoints(client) {
+  let depth = 0;
+  const savepointName = () => `ksp_${depth}`;
+  const rewrite = (text) => {
+    const t = text.trim().toUpperCase();
+    if (t === "BEGIN" || t.startsWith("BEGIN") || t.startsWith("START TRANSACTION")) {
+      depth += 1;
+      return `SAVEPOINT ${savepointName()}`;
+    }
+    if (t === "COMMIT" || t.startsWith("COMMIT")) {
+      if (depth > 0) {
+        const name = savepointName();
+        depth -= 1;
+        return `RELEASE SAVEPOINT ${name}`;
+      }
+      return "RELEASE";
+    }
+    if (t === "ROLLBACK" || t.startsWith("ROLLBACK")) {
+      if (depth > 0) {
+        const name = savepointName();
+        depth -= 1;
+        return `ROLLBACK TO SAVEPOINT ${name}; RELEASE SAVEPOINT ${name}`;
+      }
+      return "ROLLBACK";
+    }
+    return text;
+  };
+  return {
+    query: ((text, params) => client.query(rewrite(String(text)), params)),
+    release: () => {
+    }
+  };
+}
+async function withRollbackDb(pool, schemas) {
+  const realClient = await pool.connect();
+  await realClient.query("BEGIN");
+  const quoted = schemas.map((s) => `"${s.replace(/"/g, '""')}"`).join(", ");
+  await realClient.query(`SET search_path = ${quoted || '"public"'}, public`);
+  const sp = wrapWithSavepoints(realClient);
+  const fakePool = {
+    connect: async () => {
+      await realClient.query(`SET search_path = ${quoted || '"public"'}, public`);
+      return sp;
+    }
+  };
+  const db = {
+    query: async (text, params) => {
+      const c = await fakePool.connect();
+      return c.query(text, params);
+    },
+    connect: fakePool.connect
+  };
+  return {
+    db,
+    rollback: async () => {
+      try {
+        await realClient.query("ROLLBACK");
+      } finally {
+        realClient.release();
+      }
+    }
+  };
+}
+
+// src/test/middleware.ts
+function stubMiddleware(id) {
+  const apply = (c) => {
+    c.set("workspaceId", id.workspaceId);
+    c.set("wsRole", id.wsRole ?? "admin");
+    c.set("permissions", id.permissions ?? []);
+    c.set("user", {
+      id: id.userId ?? "test-user",
+      role: id.role ?? "admin"
+    });
+  };
+  const requireAuth = async (c, next) => {
+    apply(c);
+    await next();
+  };
+  const requireWorkspace = async (c, next) => {
+    apply(c);
+    await next();
+  };
+  const requirePermission = (...codes) => async (c, next) => {
+    apply(c);
+    const granted = c.get("permissions") ?? [];
+    if (!codes.some((code) => granted.includes(code))) {
+      return c.json({ error: `Missing permission: ${codes.join(", ")}` }, 403);
+    }
+    await next();
+  };
+  return { requireAuth, requireWorkspace, requirePermission };
+}
+export {
+  fakePluginDb,
+  stubMiddleware,
+  withRollbackDb
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kahitsan/plugin-sdk",
-  "version": "0.4.4",
+  "version": "0.5.0-staging.26",
   "description": "THE single public author surface for Hilinga plugins: createPlugin, auth guards, the workspace-scoped data surface (makeDataSurface) + migrations + withTenantContext, cross-plugin RPC, and the wire-protocol verify surface. One npm package, no -composite/-protocol companions. Self-contained, no kernel internals, no signing capability.",
   "type": "module",
   "main": "./dist/index.js",
@@ -13,6 +13,10 @@
     "./flow": {
       "types": "./dist/flow-bundle.d.ts",
       "import": "./dist/flow-bundle.js"
+    },
+    "./test": {
+      "types": "./dist/test.d.ts",
+      "import": "./dist/test.js"
     }
   },
   "files": [