fix: harden durable runtime DEV gates

This commit is contained in:
Code Queue Review
2026-05-23 12:41:41 +00:00
parent 85e4c1c4ad
commit 30967566b7
7 changed files with 355 additions and 19 deletions
@@ -58,6 +58,14 @@ test("live dry-run classifies missing target role separately from missing databa
assert.equal(report.blockers.some((blocker) => blocker.scope === "runtime-provisioning-role"), true);
assert.equal(report.blockers.some((blocker) => blocker.scope === "runtime-provisioning-database"), false);
assert.equal(report.blockers.some((blocker) => blocker.scope === "runtime-provisioning-auth"), true);
assert.equal(
report.blockers.find((blocker) => blocker.scope === "runtime-provisioning-role").evidence.affectedRuntimeBlocker,
"runtime_durable_adapter_auth_blocked"
);
assert.equal(
report.blockers.find((blocker) => blocker.scope === "runtime-provisioning-auth").evidence.blocker,
"runtime_durable_adapter_auth_blocked"
);
assertNoFixtureSecrets(report);
});
@@ -77,6 +85,10 @@ test("live dry-run classifies missing target database separately from target rol
assert.equal(report.provisioning.targetDatabase.exists, false);
assert.equal(report.blockers.some((blocker) => blocker.scope === "runtime-provisioning-role"), false);
assert.equal(report.blockers.some((blocker) => blocker.scope === "runtime-provisioning-database"), true);
assert.equal(
report.blockers.find((blocker) => blocker.scope === "runtime-provisioning-database").evidence.affectedRuntimeBlocker,
"runtime_durable_adapter_auth_blocked"
);
});
test("live dry-run separates SSL from auth/schema/migration", async () => {