feat: use postgres

integration/internal/harness/postgres_container_test.go

@@ -0,0 +1,138 @@
+package harness
+
+import (
+	"context"
+	"net/url"
+	"testing"
+	"time"
+
+	"galaxy/postgres"
+
+	"github.com/stretchr/testify/require"
+)
+
+func TestPostgresContainerRoundTrip(t *testing.T) {
+	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
+	t.Cleanup(cancel)
+
+	rt := StartPostgresContainer(t)
+
+	require.NoError(t, rt.EnsureRoleAndSchema(ctx, "smoke_schema", "smoke_role", "smoke_pass"))
+
+	cfg := postgres.DefaultConfig()
+	cfg.PrimaryDSN = rt.DSNForSchema("smoke_schema", "smoke_role")
+	cfg.OperationTimeout = 5 * time.Second
+
+	db, err := postgres.OpenPrimary(ctx, cfg)
+	require.NoError(t, err)
+	t.Cleanup(func() {
+		require.NoError(t, db.Close())
+	})
+
+	require.NoError(t, postgres.Ping(ctx, db, cfg.OperationTimeout))
+
+	_, err = db.ExecContext(ctx, `CREATE TABLE notes (id serial PRIMARY KEY, body text NOT NULL)`)
+	require.NoError(t, err)
+
+	var insertedID int64
+	require.NoError(t, db.QueryRowContext(ctx,
+		`INSERT INTO notes (body) VALUES ($1) RETURNING id`, "hello").Scan(&insertedID))
+	require.Greater(t, insertedID, int64(0))
+
+	var body string
+	require.NoError(t, db.QueryRowContext(ctx,
+		`SELECT body FROM notes WHERE id = $1`, insertedID).Scan(&body))
+	require.Equal(t, "hello", body)
+
+	// search_path is honoured: the unqualified table created above resolved
+	// inside smoke_schema.
+	var schemaName string
+	require.NoError(t, db.QueryRowContext(ctx,
+		`SELECT table_schema FROM information_schema.tables WHERE table_name = 'notes'`,
+	).Scan(&schemaName))
+	require.Equal(t, "smoke_schema", schemaName)
+}
+
+func TestEnsureRoleAndSchemaIsIdempotent(t *testing.T) {
+	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
+	t.Cleanup(cancel)
+
+	rt := StartPostgresContainer(t)
+
+	require.NoError(t, rt.EnsureRoleAndSchema(ctx, "schema_x", "role_x", "pass_x"))
+	require.NoError(t, rt.EnsureRoleAndSchema(ctx, "schema_x", "role_x", "pass_x"))
+}
+
+func TestEnsureRoleAndSchemaSupportsReservedWordIdentifiers(t *testing.T) {
+	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Minute)
+	t.Cleanup(cancel)
+
+	rt := StartPostgresContainer(t)
+
+	// `user` is a SQL reserved word; identifier quoting must keep this working.
+	require.NoError(t, rt.EnsureRoleAndSchema(ctx, "user", "userservice", "secret"))
+
+	cfg := postgres.DefaultConfig()
+	cfg.PrimaryDSN = rt.DSNForSchema("user", "userservice")
+	cfg.OperationTimeout = 5 * time.Second
+
+	db, err := postgres.OpenPrimary(ctx, cfg)
+	require.NoError(t, err)
+	t.Cleanup(func() {
+		require.NoError(t, db.Close())
+	})
+
+	require.NoError(t, postgres.Ping(ctx, db, cfg.OperationTimeout))
+}
+
+func TestWithPostgresBuildsPrimaryDSNEnv(t *testing.T) {
+	t.Parallel()
+
+	rt := newRuntimeForTest("127.0.0.1", "55432", "galaxy_integration", "userservice", "s3cr3t!")
+
+	env := WithPostgres(rt, "USERSERVICE", "user", "userservice")
+
+	require.Len(t, env, 1)
+
+	dsn, ok := env["USERSERVICE_POSTGRES_PRIMARY_DSN"]
+	require.True(t, ok, "missing USERSERVICE_POSTGRES_PRIMARY_DSN entry")
+
+	parsed, err := url.Parse(dsn)
+	require.NoError(t, err)
+	require.Equal(t, "postgres", parsed.Scheme)
+	require.Equal(t, "127.0.0.1:55432", parsed.Host)
+	require.Equal(t, "/galaxy_integration", parsed.Path)
+	require.Equal(t, "userservice", parsed.User.Username())
+
+	password, hasPassword := parsed.User.Password()
+	require.True(t, hasPassword)
+	require.Equal(t, "s3cr3t!", password)
+
+	query := parsed.Query()
+	require.Equal(t, "user", query.Get("search_path"))
+	require.Equal(t, "disable", query.Get("sslmode"))
+}
+
+func TestDSNForSchemaPanicsWithoutCredentials(t *testing.T) {
+	t.Parallel()
+
+	rt := newRuntimeForTest("127.0.0.1", "55432", "galaxy_integration", "userservice", "secret")
+
+	require.PanicsWithValue(t,
+		`harness: DSNForSchema called for role "unknown" with no credentials; call EnsureRoleAndSchema first`,
+		func() {
+			_ = rt.DSNForSchema("user", "unknown")
+		},
+	)
+}
+
+// newRuntimeForTest builds a PostgresRuntime without spinning a container.
+// It exists only to exercise the pure DSN/env-builder paths.
+func newRuntimeForTest(host, port, database, role, password string) *PostgresRuntime {
+	return &PostgresRuntime{
+		host:     host,
+		port:     port,
+		database: database,
+		creds:    map[string]string{role: password},
+	}
+}