feat(planning): ship holiday-aware planning and assistant upgrades

packages/db/src/destructive-db-guard.test.ts

@@ -0,0 +1,100 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { assertDestructiveDbAllowed } from "./destructive-db-guard.js";
+import { assertSafeSeedTarget } from "./safe-destructive-env.js";
+
+const ORIGINAL_ENV = { ...process.env };
+
+function setEnv(values: Record<string, string | undefined>) {
+  process.env = { ...ORIGINAL_ENV };
+
+  for (const [key, value] of Object.entries(values)) {
+    if (value === undefined) {
+      delete process.env[key];
+      continue;
+    }
+
+    process.env[key] = value;
+  }
+}
+
+test.afterEach(() => {
+  process.env = { ...ORIGINAL_ENV };
+});
+
+test("assertDestructiveDbAllowed allows an explicitly confirmed disposable capakraken test database", () => {
+  setEnv({
+    DATABASE_URL: "postgresql://tester:secret@localhost:5432/capakraken_test",
+    ALLOW_DESTRUCTIVE_DB_TOOLS: "true",
+    CONFIRM_DESTRUCTIVE_DB_NAME: "capakraken_test",
+  });
+
+  const target = assertDestructiveDbAllowed({
+    commandName: "db:test",
+    allowedDatabaseNames: ["capakraken_test"],
+  });
+
+  assert.equal(target.databaseName, "capakraken_test");
+  assert.equal(target.hostname, "localhost");
+});
+
+test("assertDestructiveDbAllowed rejects protected live database names even if allowlisted", () => {
+  setEnv({
+    DATABASE_URL: "postgresql://tester:secret@localhost:5432/capakraken",
+    ALLOW_DESTRUCTIVE_DB_TOOLS: "true",
+    CONFIRM_DESTRUCTIVE_DB_NAME: "capakraken",
+  });
+
+  assert.throws(
+    () => assertDestructiveDbAllowed({
+      commandName: "db:test",
+      allowedDatabaseNames: ["capakraken"],
+    }),
+    /explicitly protected/u,
+  );
+});
+
+test("assertDestructiveDbAllowed rejects missing confirmation", () => {
+  setEnv({
+    DATABASE_URL: "postgresql://tester:secret@localhost:5432/capakraken_e2e",
+    ALLOW_DESTRUCTIVE_DB_TOOLS: "true",
+    CONFIRM_DESTRUCTIVE_DB_NAME: "wrong_db",
+  });
+
+  assert.throws(
+    () => assertDestructiveDbAllowed({
+      commandName: "db:test",
+      allowedDatabaseNames: ["capakraken_e2e"],
+    }),
+    /CONFIRM_DESTRUCTIVE_DB_NAME=capakraken_e2e/u,
+  );
+});
+
+test("assertDestructiveDbAllowed rejects missing destructive allow flag", () => {
+  setEnv({
+    DATABASE_URL: "postgresql://tester:secret@localhost:5432/capakraken_ci",
+    ALLOW_DESTRUCTIVE_DB_TOOLS: undefined,
+    CONFIRM_DESTRUCTIVE_DB_NAME: "capakraken_ci",
+  });
+
+  assert.throws(
+    () => assertDestructiveDbAllowed({
+      commandName: "db:test",
+      allowedDatabaseNames: ["capakraken_ci"],
+    }),
+    /ALLOW_DESTRUCTIVE_DB_TOOLS=true/u,
+  );
+});
+
+test("assertSafeSeedTarget rejects legacy planarchy disposable databases", () => {
+  setEnv({
+    DATABASE_URL: "postgresql://tester:secret@localhost:5432/planarchy_test",
+    ALLOW_DESTRUCTIVE_DB_TOOLS: "true",
+    CONFIRM_DESTRUCTIVE_DB_NAME: "planarchy_test",
+  });
+
+  assert.throws(
+    () => assertSafeSeedTarget("db:seed"),
+    /not in the destructive-tool allowlist/u,
+  );
+});