julian
0985b86fa7
Foundation for testing every service. Adds @parking/db/testing — createTestDb() spins a fresh in-memory SQLite and applies the real Drizzle migrations, so server tests run against the production schema with zero live-DB risk. Wires Vitest into apps/server (test script + config; test signing keys via env) and adds the first Phase-1 suites against the anti-fraud core: - signer.test.ts (10): sign/verify round-trip, tamper + forgery rejection, malformed-signature guard, determinism, keyId rotation (buildVerifier). - event-log.test.ts (12): monotonic index, prevHash linkage, payload-in-signature, append serialization, and verifyChain() catching every tamper class — edited payload, deleted row (index gap), broken prevHash, unknown keyId — plus canonicalize byte-stability. Also stops *.test.ts leaking into shipped dist/ (tsconfig exclude in server + shared; shared had been emitting compiled tests all along). server 22/22, shared 87/87 green. Claude-Session: https://claude.ai/code/session_01Xcm6ikLgGoCxxHrxtjkk5V
16 lines
615 B
TypeScript
16 lines
615 B
TypeScript
import { defineConfig } from "vitest/config";
|
|
|
|
// Server tests live next to the code under test (src/**/*.test.ts). They run against
|
|
// a fresh in-memory SQLite from @parking/db/testing — never the live parking.sqlite.
|
|
// A test signing key is set here so the SoftwareSigner/buildSigner path works without
|
|
// a real .env (the value is irrelevant — tests assert self-consistency, not secrecy).
|
|
export default defineConfig({
|
|
test: {
|
|
include: ["src/**/*.test.ts"],
|
|
env: {
|
|
EVENT_SIGNING_KEY: "test-event-signing-key-0123456789",
|
|
JWT_SECRET: "test-jwt-secret-0123456789abcdef",
|
|
},
|
|
},
|
|
});
|