Replace the confused Profile abstraction with a dedicated Secret resource
following Kubernetes conventions. Servers now have env entries with inline
values or secretRef references. Env vars are resolved and passed to
containers at startup (fixes existing gap).
- Add Secret CRUD (model, repo, service, routes, CLI commands)
- Server env: {name, value} or {name, valueFrom: {secretRef: {name, key}}}
- Add env-resolver utility shared by instance startup and config generation
- Remove all profile-related code (models, services, routes, CLI, tests)
- Update backup/restore for secrets instead of profiles
- describe secret masks values by default, --show-values to reveal
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
58 lines
1.6 KiB
TypeScript
58 lines
1.6 KiB
TypeScript
import { PrismaClient } from '@prisma/client';
|
|
import { execSync } from 'node:child_process';
|
|
|
|
const TEST_DATABASE_URL = process.env['DATABASE_URL'] ??
|
|
'postgresql://mcpctl:mcpctl_test@localhost:5433/mcpctl_test';
|
|
|
|
let prisma: PrismaClient | undefined;
|
|
let schemaReady = false;
|
|
|
|
export function getTestClient(): PrismaClient {
|
|
if (!prisma) {
|
|
prisma = new PrismaClient({
|
|
datasources: { db: { url: TEST_DATABASE_URL } },
|
|
});
|
|
}
|
|
return prisma;
|
|
}
|
|
|
|
export async function setupTestDb(): Promise<PrismaClient> {
|
|
const client = getTestClient();
|
|
|
|
// Only push schema once per process (multiple test files share the worker)
|
|
if (!schemaReady) {
|
|
execSync('npx prisma db push --force-reset --skip-generate', {
|
|
cwd: new URL('..', import.meta.url).pathname,
|
|
env: {
|
|
...process.env,
|
|
DATABASE_URL: TEST_DATABASE_URL,
|
|
// Consent required when Prisma detects AI agent context.
|
|
// This targets the ephemeral test database (tmpfs-backed, port 5433).
|
|
PRISMA_USER_CONSENT_FOR_DANGEROUS_AI_ACTION: 'yes',
|
|
},
|
|
stdio: 'pipe',
|
|
});
|
|
schemaReady = true;
|
|
}
|
|
|
|
return client;
|
|
}
|
|
|
|
export async function cleanupTestDb(): Promise<void> {
|
|
if (prisma) {
|
|
await prisma.$disconnect();
|
|
prisma = undefined;
|
|
}
|
|
}
|
|
|
|
export async function clearAllTables(client: PrismaClient): Promise<void> {
|
|
// Delete in order respecting foreign keys
|
|
await client.auditLog.deleteMany();
|
|
await client.mcpInstance.deleteMany();
|
|
await client.secret.deleteMany();
|
|
await client.session.deleteMany();
|
|
await client.project.deleteMany();
|
|
await client.mcpServer.deleteMany();
|
|
await client.user.deleteMany();
|
|
}
|