create-forgeon 0.3.16 → 0.3.17

package/src/modules/sync-integrations.test.mjs

@@ -31,29 +31,29 @@ describe('sync integrations', () => {
   const modulesDir = path.dirname(fileURLToPath(import.meta.url));
   const packageRoot = path.resolve(modulesDir, '..', '..');
 
-  it('does not expose auth persistence integration without a db-adapter provider', () => {
-    const tempRoot = makeTempDir('forgeon-sync-no-provider-');
-    const projectRoot = path.join(tempRoot, 'demo-sync-no-provider');
+  it('does not expose accounts-rbac integration when rbac is missing', () => {
+    const tempRoot = makeTempDir('forgeon-sync-no-rbac-');
+    const projectRoot = path.join(tempRoot, 'demo-sync-no-rbac');
 
     try {
       scaffoldBaseProject({
         packageRoot,
         targetRoot: projectRoot,
-        projectName: 'demo-sync-no-provider',
+        projectName: 'demo-sync-no-rbac',
       });
 
-      addModule({ moduleId: 'jwt-auth', targetRoot: projectRoot, packageRoot });
+      addModule({ moduleId: 'db-prisma', targetRoot: projectRoot, packageRoot });
+      addModule({ moduleId: 'accounts', targetRoot: projectRoot, packageRoot });
 
       const scan = scanIntegrations({
         targetRoot: projectRoot,
-        relatedModuleId: 'jwt-auth',
+        relatedModuleId: 'accounts',
       });
-      assert.equal(scan.groups.some((group) => group.id === 'auth-persistence'), false);
+      assert.equal(scan.groups.some((group) => group.id === 'accounts-rbac'), false);
 
       const syncResult = syncIntegrations({
         targetRoot: projectRoot,
-        packageRoot,
-        groupIds: ['auth-persistence'],
+        groupIds: ['accounts-rbac'],
       });
       assert.deepEqual(syncResult.summary, []);
       assert.deepEqual(syncResult.changedFiles, []);
@@ -62,48 +62,7 @@ describe('sync integrations', () => {
     }
   });
 
-  it('treats auth persistence sync as a no-op after it has already been applied', () => {
-    const tempRoot = makeTempDir('forgeon-sync-db-noop-');
-    const projectRoot = path.join(tempRoot, 'demo-sync-db-noop');
-
-    try {
-      scaffoldBaseProject({
-        packageRoot,
-        targetRoot: projectRoot,
-        projectName: 'demo-sync-db-noop',
-        dbPrismaEnabled: true,
-      });
-
-      addModule({ moduleId: 'jwt-auth', targetRoot: projectRoot, packageRoot });
-
-      const firstSync = syncIntegrations({
-        targetRoot: projectRoot,
-        packageRoot,
-        groupIds: ['auth-persistence'],
-      });
-      assert.equal(firstSync.summary.length, 1);
-      assert.equal(firstSync.summary[0].id, 'auth-persistence');
-      assert.equal(firstSync.summary[0].result.applied, true);
-
-      const secondScan = scanIntegrations({
-        targetRoot: projectRoot,
-        relatedModuleId: 'jwt-auth',
-      });
-      assert.equal(secondScan.groups.some((group) => group.id === 'auth-persistence'), false);
-
-      const secondSync = syncIntegrations({
-        targetRoot: projectRoot,
-        packageRoot,
-        groupIds: ['auth-persistence'],
-      });
-      assert.deepEqual(secondSync.summary, []);
-      assert.deepEqual(secondSync.changedFiles, []);
-    } finally {
-      fs.rmSync(tempRoot, { recursive: true, force: true });
-    }
-  });
-
-  it('treats auth claims sync as a no-op after it has already been applied', () => {
+  it('treats accounts-rbac sync as a no-op after it has already been applied', () => {
     const tempRoot = makeTempDir('forgeon-sync-rbac-noop-');
     const projectRoot = path.join(tempRoot, 'demo-sync-rbac-noop');
 
@@ -114,28 +73,27 @@ describe('sync integrations', () => {
         projectName: 'demo-sync-rbac-noop',
       });
 
+      addModule({ moduleId: 'db-prisma', targetRoot: projectRoot, packageRoot });
       addModule({ moduleId: 'rbac', targetRoot: projectRoot, packageRoot });
-      addModule({ moduleId: 'jwt-auth', targetRoot: projectRoot, packageRoot });
+      addModule({ moduleId: 'accounts', targetRoot: projectRoot, packageRoot });
 
       const firstSync = syncIntegrations({
         targetRoot: projectRoot,
-        packageRoot,
-        groupIds: ['auth-rbac-claims'],
+        groupIds: ['accounts-rbac'],
       });
       assert.equal(firstSync.summary.length, 1);
-      assert.equal(firstSync.summary[0].id, 'auth-rbac-claims');
+      assert.equal(firstSync.summary[0].id, 'accounts-rbac');
       assert.equal(firstSync.summary[0].result.applied, true);
 
       const secondScan = scanIntegrations({
         targetRoot: projectRoot,
-        relatedModuleId: 'jwt-auth',
+        relatedModuleId: 'accounts',
       });
-      assert.equal(secondScan.groups.some((group) => group.id === 'auth-rbac-claims'), false);
+      assert.equal(secondScan.groups.some((group) => group.id === 'accounts-rbac'), false);
 
       const secondSync = syncIntegrations({
         targetRoot: projectRoot,
-        packageRoot,
-        groupIds: ['auth-rbac-claims'],
+        groupIds: ['accounts-rbac'],
       });
       assert.deepEqual(secondSync.summary, []);
       assert.deepEqual(secondSync.changedFiles, []);
@@ -143,45 +101,8 @@ describe('sync integrations', () => {
       fs.rmSync(tempRoot, { recursive: true, force: true });
     }
   });
-  it('uses persistence markers instead of README prose when auth persistence sync runs', () => {
-    const tempRoot = makeTempDir('forgeon-sync-db-markers-');
-    const projectRoot = path.join(tempRoot, 'demo-sync-db-markers');
-
-    try {
-      scaffoldBaseProject({
-        packageRoot,
-        targetRoot: projectRoot,
-        projectName: 'demo-sync-db-markers',
-        dbPrismaEnabled: true,
-      });
-
-      addModule({ moduleId: 'jwt-auth', targetRoot: projectRoot, packageRoot });
-
-      const readmePath = path.join(projectRoot, 'README.md');
-      const customizedReadme = fs
-        .readFileSync(readmePath, 'utf8')
-        .replace('refresh token persistence: disabled by default', 'refresh token persistence: custom local note');
-      fs.writeFileSync(readmePath, customizedReadme, 'utf8');
-
-      const syncResult = syncIntegrations({
-        targetRoot: projectRoot,
-        packageRoot,
-        groupIds: ['auth-persistence'],
-      });
-      assert.equal(syncResult.summary.length, 1);
-      assert.equal(syncResult.summary[0].result.applied, true);
-
-      const readme = fs.readFileSync(readmePath, 'utf8');
-      assert.match(readme, /forgeon:jwt-auth:persistence:start/);
-      assert.match(readme, /refresh token persistence: enabled through the `db-adapter` capability/);
-      assert.match(readme, /0002_auth_refresh_token_hash/);
-      assert.doesNotMatch(readme, /custom local note/);
-    } finally {
-      fs.rmSync(tempRoot, { recursive: true, force: true });
-    }
-  });
 
-  it('uses RBAC markers instead of the demo credentials heading when auth claims sync runs', () => {
+  it('updates claim types and README markers when accounts-rbac sync runs', () => {
     const tempRoot = makeTempDir('forgeon-sync-rbac-markers-');
     const projectRoot = path.join(tempRoot, 'demo-sync-rbac-markers');
 
@@ -192,29 +113,29 @@ describe('sync integrations', () => {
         projectName: 'demo-sync-rbac-markers',
       });
 
+      addModule({ moduleId: 'db-prisma', targetRoot: projectRoot, packageRoot });
       addModule({ moduleId: 'rbac', targetRoot: projectRoot, packageRoot });
-      addModule({ moduleId: 'jwt-auth', targetRoot: projectRoot, packageRoot });
-
-      const readmePath = path.join(projectRoot, 'README.md');
-      const customizedReadme = fs
-        .readFileSync(readmePath, 'utf8')
-        .replace('Default demo credentials:', 'Demo credentials:');
-      fs.writeFileSync(readmePath, customizedReadme, 'utf8');
+      addModule({ moduleId: 'accounts', targetRoot: projectRoot, packageRoot });
 
       const syncResult = syncIntegrations({
         targetRoot: projectRoot,
-        packageRoot,
-        groupIds: ['auth-rbac-claims'],
+        groupIds: ['accounts-rbac'],
       });
       assert.equal(syncResult.summary.length, 1);
       assert.equal(syncResult.summary[0].result.applied, true);
 
-      const readme = fs.readFileSync(readmePath, 'utf8');
-      assert.match(readme, /forgeon:jwt-auth:rbac:start/);
-      assert.match(readme, /RBAC integration: demo auth tokens include `health\.rbac` permission/);
-      assert.match(readme, /Demo credentials:/);
+      const readme = fs.readFileSync(path.join(projectRoot, 'README.md'), 'utf8');
+      const contracts = fs.readFileSync(path.join(projectRoot, 'packages', 'accounts-contracts', 'src', 'index.ts'), 'utf8');
+      const authTypes = fs.readFileSync(path.join(projectRoot, 'packages', 'accounts-api', 'src', 'auth.types.ts'), 'utf8');
+
+      assert.match(readme, /forgeon:accounts:rbac:start/);
+      assert.match(readme, /base accounts schema remains free of roles and permissions/);
+      assert.match(contracts, /roles\?: string\[\];/);
+      assert.match(contracts, /permissions\?: string\[\];/);
+      assert.match(authTypes, /roles\?: string\[\];/);
+      assert.match(authTypes, /permissions\?: string\[\];/);
     } finally {
       fs.rmSync(tempRoot, { recursive: true, force: true });
     }
   });
-});
+});

package/src/run-add-module.test.mjs

@@ -151,3 +151,4 @@ describe('runAddModule', () => {
     }
   });
 });
+