envProductionDefaults.test.ts

import { describe, expect, it } from "vitest";
import { configuredOrDevelopmentDefault, missingProductionConfig, resolveDatabaseUrl } from "./_core/env";

describe("production environment defaults", () => {
  it("retains a local development default outside production", () => {
    expect(configuredOrDevelopmentDefault(
      "BIS_GATEWAY_URL",
      "http://localhost:8081",
      { NODE_ENV: "development" },
    )).toBe("http://localhost:8081");
  });

  it("rejects implicit localhost and development-secret defaults in production", () => {
    expect(configuredOrDevelopmentDefault(
      "BIS_GATEWAY_URL",
      "http://localhost:8081",
      { NODE_ENV: "production" },
    )).toBe("");
    expect(configuredOrDevelopmentDefault(
      "BIS_GATEWAY_KEY",
      "dev-gateway-key-change-in-prod",
      { NODE_ENV: "production" },
    )).toBe("");
  });

  it("uses an explicit production configuration value", () => {
    expect(configuredOrDevelopmentDefault(
      "BIS_GATEWAY_URL",
      "http://localhost:8081",
      { NODE_ENV: "production", BIS_GATEWAY_URL: "https://gateway.internal.example" },
    )).toBe("https://gateway.internal.example");
  });

  it("rejects non-PostgreSQL database URLs in every environment", () => {
    expect(() => resolveDatabaseUrl({
      NODE_ENV: "development",
      DATABASE_URL: "invalid-db-scheme://platform-injected.example/bis",
    })).toThrow("must use a PostgreSQL URL");
  });

  it("accepts only an explicit PostgreSQL connection URL", () => {
    expect(resolveDatabaseUrl({
      NODE_ENV: "production",
      BIS_DATABASE_URL: "postgresql://managed.example/bis",
    })).toBe("postgresql://managed.example/bis");
    expect(resolveDatabaseUrl({
      NODE_ENV: "development",
      DATABASE_URL: "postgres://localhost/bis",
    })).toBe("postgres://localhost/bis");
  });

  it("identifies every mandatory production secret or service endpoint that is absent", () => {
    expect(missingProductionConfig({
      BIS_GATEWAY_KEY: "gateway-key",
      BIS_GATEWAY_URL: "https://gateway.internal.example",
      TIGERBEETLE_HTTP_URL: "https://ledger.internal.example",
      PERMIFY_URL: "https://permify.internal.example",
      KEYCLOAK_URL: "https://identity.internal.example",
      KEYCLOAK_REALM: "bis",
      KEYCLOAK_CLIENT_ID: "bis-bff",
      KEYCLOAK_CLIENT_SECRET: "identity-client-secret",
      REDIS_URL: "rediss://cache.internal.example",
      BIS_WAF_KEY: "waf-key",
      BIS_EDGE_TOKEN_SECRET: "edge-secret",
      AUDIT_HMAC_SECRET: "audit-secret",
      GRAFANA_WEBHOOK_SECRET: "grafana-secret",
    })).toEqual([]);
    expect(missingProductionConfig({ BIS_GATEWAY_KEY: "gateway-key" })).toContain("TIGERBEETLE_HTTP_URL");
  });
});