import test from 'node:test'
import assert from 'node:assert/strict'
import { readFileSync } from 'node:fs'

const sql = readFileSync(new URL('./db/security-projection-repair.sql', import.meta.url), 'utf8')

test('security projection repair derives every platform identity from IAM', () => {
  assert.match(sql, /FROM baiyue_iam\.iam_user u/)
  assert.match(sql, /CAST\(u\.auth_user_id AS CHAR\)/)
  assert.doesNotMatch(sql, /9000000001|9000000003/)
})

test('security projection repair rebuilds user status and overseas authorization', () => {
  assert.match(sql, /'USER'/)
  assert.match(sql, /'AUTHORIZATION'/)
  assert.match(sql, /platform:overseas-warehouse:/)
  assert.match(sql, /platform:overseas-business:/)
  assert.match(sql, /platform:overseas-master-data:/)
  assert.match(sql, /platform:finance:/)
  assert.match(sql, /lastleg:/)
  assert.match(sql, /CONCAT\('repair-', u\.auth_user_id, '-[ua]-'/)
})