feat: implement database reset and demo population scripts with tests

tests/reset.test.ts

@@ -0,0 +1,97 @@
+import "dotenv/config";
+import assert from "node:assert/strict";
+import { randomBytes } from "node:crypto";
+import { spawnSync } from "node:child_process";
+import { createRequire } from "node:module";
+import { fileURLToPath } from "node:url";
+import test from "node:test";
+import { Pool } from "pg";
+import { verifyPassword } from "../src/lib/password";
+
+test("Instanz-Reset: Schutzabfragen, vollstaendige Leerung, Demodaten und erneuter Reset", async () => {
+  assert.ok(process.env.DATABASE_URL, "DATABASE_URL fehlt.");
+  const target = new URL(process.env.DATABASE_URL);
+  assert.ok(["localhost", "127.0.0.1", "[::1]"].includes(target.hostname), "Nur lokal testen.");
+  const name = `kibu_reset_test_${randomBytes(8).toString("hex")}`;
+  const admin = new Pool({ connectionString: target.toString() });
+  target.pathname = `/${name}`;
+  const pool = new Pool({ connectionString: target.toString() });
+  const tsx = createRequire(import.meta.url).resolve("tsx/cli");
+  const password = "test-only-reset-password";
+  const env = { ...process.env, DATABASE_URL: target.toString(), BOOTSTRAP_EMAIL: "reset@example.invalid", BOOTSTRAP_PASSWORD: password };
+  const run = (script: string, args: string[] = [], overrides: Partial<NodeJS.ProcessEnv> = {}) =>
+    spawnSync(process.execPath, [tsx, fileURLToPath(new URL(`../scripts/${script}`, import.meta.url)), ...args], {
+      cwd: fileURLToPath(new URL("../", import.meta.url)),
+      env: { ...env, ...overrides },
+      encoding: "utf8",
+      timeout: 30_000,
+    });
+  const succeed = (result: ReturnType<typeof run>) => {
+    assert.ifError(result.error);
+    assert.equal(result.status, 0, `${result.stdout}\n${result.stderr}`);
+  };
+  const counts = async () => (await pool.query(`SELECT
+    (SELECT count(*)::int FROM children) AS children,
+    (SELECT count(*)::int FROM staff) AS staff,
+    (SELECT count(*)::int FROM attendance) AS attendance,
+    (SELECT count(*)::int FROM audit_log) AS audit,
+    (SELECT count(*)::int FROM schema_migrations) AS migrations`)).rows[0];
+  let created = false;
+  try {
+    await admin.query(`CREATE DATABASE "${name}"`);
+    created = true;
+    succeed(run("setup.ts"));
+    succeed(run("seed-demo.ts"));
+    const before = await counts();
+    assert.equal(before.children, 12);
+    assert.ok(before.attendance > 0 && before.audit > 0);
+    const missingConfirmation = run("reset-instance.ts", ["clear"]);
+    assert.notEqual(missingConfirmation.status, 0);
+    assert.match(missingConfirmation.stderr, /confirm-reset/);
+    const remote = run("reset-instance.ts", ["clear", "--confirm-reset"], {
+      DATABASE_URL: `postgresql://localhost.example.invalid/${name}`,
+    });
+    assert.notEqual(remote.status, 0);
+    assert.match(remote.stderr, /lokale Anwendungsdatenbank/);
+    const invalidPassword = run("reset-instance.ts", ["demo", "--confirm-reset"], { BOOTSTRAP_PASSWORD: "short" });
+    assert.notEqual(invalidPassword.status, 0);
+    assert.match(invalidPassword.stderr, /nichts geloescht/);
+    assert.deepEqual(await counts(), before);
+    await pool.query(`INSERT INTO sessions(token_hash, staff_id, expires_at)
+      SELECT 'reset-test-session', id, now() + interval '1 hour' FROM staff`);
+    await pool.query("INSERT INTO pickup_slots(starts_at, ends_at) VALUES ('13:00', '13:15')");
+    await pool.query(`INSERT INTO admission_rounds(name, code_hash, expires_on, created_by)
+      SELECT 'Reset-Test', 'reset-test-hash', current_date, id FROM staff`);
+    await pool.query(`INSERT INTO applications(round_id, first_name, last_name, class_name, parent_name, email)
+      SELECT id, 'Demo', 'Test', '1a', 'Kontakt', 'test@example.invalid' FROM admission_rounds`);
+    await pool.query("INSERT INTO application_limits VALUES ('test', 1, now())");
+    await pool.query("INSERT INTO login_attempts VALUES ('test@example.invalid', 1, now())");
+    succeed(run("reset-instance.ts", ["clear", "--confirm-reset"]));
+    assert.deepEqual(await counts(), { children: 0, staff: 0, attendance: 0, audit: 0, migrations: before.migrations });
+    for (const table of ["sessions", "login_attempts", "weekly_schedules", "day_overrides", "pickup_contacts", "alone_rules", "applications", "admission_rounds", "application_limits"]) {
+      assert.equal((await pool.query(`SELECT count(*)::int AS count FROM ${table}`)).rows[0].count, 0, table);
+    }
+    const slots = await pool.query("SELECT starts_at::text AS start, ends_at::text AS end, active FROM pickup_slots ORDER BY starts_at");
+    assert.deepEqual(slots.rows, [14, 15, 16, 17].map((hour) => ({ start: `${hour}:00:00`, end: `${hour}:15:00`, active: true })));
+    await assert.rejects(pool.query("DELETE FROM audit_log"), /unveraenderlich/);
+    for (let iteration = 0; iteration < 2; iteration++) {
+      succeed(run("reset-instance.ts", ["demo", "--confirm-reset"]));
+      const after = await counts();
+      assert.equal(after.children, 12);
+      assert.equal(after.staff, 1);
+      assert.ok(after.attendance > 0 && after.audit > 0);
+      assert.equal(after.migrations, before.migrations);
+      const account = (await pool.query("SELECT email, password_hash FROM staff")).rows[0];
+      assert.equal(account.email, env.BOOTSTRAP_EMAIL);
+      assert.ok(await verifyPassword(password, account.password_hash));
+      await assert.rejects(pool.query("DELETE FROM audit_log"), /unveraenderlich/);
+    }
+  } finally {
+    await pool.end();
+    try {
+      if (created) await admin.query(`DROP DATABASE "${name}"`);
+    } finally {
+      await admin.end();
+    }
+  }
+});