- Replace admin role with granular roles: view, create, delete, edit, run - Two binding types: resource bindings (role+resource+optional name) and operation bindings (role:run + action like backup, logs, impersonate) - Name-scoped resource bindings for per-instance access control - Remove role from project members (all permissions via RBAC) - Add users, groups, RBAC CRUD endpoints and CLI commands - describe user/group shows all RBAC access (direct + inherited) - create rbac supports --subject, --binding, --operation flags - Backup/restore handles users, groups, RBAC definitions - mcplocal project-based MCP endpoint discovery - Full test coverage for all new functionality Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
64 lines
1.9 KiB
TypeScript
64 lines
1.9 KiB
TypeScript
import { PrismaClient } from '@prisma/client';
|
|
import { execSync } from 'node:child_process';
|
|
|
|
const TEST_DATABASE_URL = process.env['DATABASE_URL'] ??
|
|
'postgresql://mcpctl:mcpctl_test@localhost:5433/mcpctl_test';
|
|
|
|
let prisma: PrismaClient | undefined;
|
|
let schemaReady = false;
|
|
|
|
export function getTestClient(): PrismaClient {
|
|
if (!prisma) {
|
|
prisma = new PrismaClient({
|
|
datasources: { db: { url: TEST_DATABASE_URL } },
|
|
});
|
|
}
|
|
return prisma;
|
|
}
|
|
|
|
export async function setupTestDb(): Promise<PrismaClient> {
|
|
const client = getTestClient();
|
|
|
|
// Only push schema once per process (multiple test files share the worker)
|
|
if (!schemaReady) {
|
|
execSync('npx prisma db push --force-reset --skip-generate', {
|
|
cwd: new URL('..', import.meta.url).pathname,
|
|
env: {
|
|
...process.env,
|
|
DATABASE_URL: TEST_DATABASE_URL,
|
|
// Consent required when Prisma detects AI agent context.
|
|
// This targets the ephemeral test database (tmpfs-backed, port 5433).
|
|
PRISMA_USER_CONSENT_FOR_DANGEROUS_AI_ACTION: 'yes',
|
|
},
|
|
stdio: 'pipe',
|
|
});
|
|
schemaReady = true;
|
|
}
|
|
|
|
return client;
|
|
}
|
|
|
|
export async function cleanupTestDb(): Promise<void> {
|
|
if (prisma) {
|
|
await prisma.$disconnect();
|
|
prisma = undefined;
|
|
}
|
|
}
|
|
|
|
export async function clearAllTables(client: PrismaClient): Promise<void> {
|
|
// Delete in order respecting foreign keys
|
|
await client.auditLog.deleteMany();
|
|
await client.mcpInstance.deleteMany();
|
|
await client.projectServer.deleteMany();
|
|
await client.projectMember.deleteMany();
|
|
await client.secret.deleteMany();
|
|
await client.session.deleteMany();
|
|
await client.project.deleteMany();
|
|
await client.mcpServer.deleteMany();
|
|
await client.mcpTemplate.deleteMany();
|
|
await client.groupMember.deleteMany();
|
|
await client.group.deleteMany();
|
|
await client.rbacDefinition.deleteMany();
|
|
await client.user.deleteMany();
|
|
}
|