fix: clarify durable postgres blocker diagnostics

2026-05-23 02:30:15 +00:00
parent 905b3df74c
commit a7e12abea0
8 changed files with 501 additions and 24 deletions
@@ -74,6 +74,40 @@ test("live dry-run separates migration ledger blocker from auth and schema", asy
  assert.equal(report.runtime.migration.missing, true);
 });

+test("live dry-run separates SSL negotiation blocker from auth and schema", async () => {
+  const report = await buildDevRuntimeMigrationReport(
+    parseArgs(["--dry-run", "--allow-live-db-read", "--confirm-dev"]),
+    {
+      env: {
+        HWLAB_CLOUD_DB_URL: "postgresql://hwlab:redacted@example.invalid:5432/hwlab",
+        HWLAB_CLOUD_DB_SSL_MODE: "require"
+      },
+      queryClient: {
+        async query(sql) {
+          assert.match(sql, /information_schema\.columns/u);
+          const error = new Error("The server does not support SSL connections");
+          error.code = "08P01";
+          throw error;
+        }
+      },
+      now: () => "2026-05-22T00:00:00.000Z"
+    }
+  );
+
+  assert.equal(report.conclusion.status, "blocked");
+  assert.equal(report.actions.liveDbReadAttempted, true);
+  assert.equal(report.actions.liveDbWriteAttempted, false);
+  assert.equal(report.gates.auth.status, "not_checked");
+  assert.equal(report.gates.schema.status, "not_checked");
+  assert.equal(report.gates.migration.status, "not_checked");
+  assert.equal(report.gates.readiness.status, "not_checked");
+  assert.equal(report.blockers[0].scope, "runtime-migration-ssl");
+  assert.equal(report.blockers[0].evidence.blocker, "runtime_durable_adapter_ssl_blocked");
+  assert.equal(report.runtime.blocker, "runtime_durable_adapter_ssl_blocked");
+  assert.equal(report.runtime.connection.queryResult, "ssl_negotiation_blocked");
+  assert.equal(JSON.stringify(report).includes("redacted@example.invalid"), false);
+});
+
 test("apply mode records ledger and verifies durable runtime readiness", async () => {
  const queryClient = createFakeQueryClient({ migrationReady: false });
  const report = await buildDevRuntimeMigrationReport(