feat(data-plane): add provider contracts and ontology delivery

2026-07-16 02:23:34 +03:00
parent e527812826
commit 569b8762e6
84 changed files with 11170 additions and 70 deletions
@@ -0,0 +1,51 @@
+import assert from "node:assert/strict";
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { readConfig } from "../src/config.mjs";
+
+const base = {
+  EXTERNAL_DATA_PLANE_DATABASE_URL: "postgresql://user:pass@example.invalid/data_plane",
+  NODEDC_INTERNAL_ACCESS_TOKEN: "legacy-internal-token",
+};
+
+const directory = await mkdtemp(join(tmpdir(), "nodedc-edp-config-"));
+const secretPath = join(directory, "provisioner-token");
+const secret = "provisioner_secret_is_separate_from_legacy_internal_token_123456";
+try {
+  await writeFile(secretPath, `${secret}\n`, { encoding: "utf8", mode: 0o600 });
+  const config = readConfig({
+    ...base,
+    EXTERNAL_DATA_PLANE_PROVISIONING_ENABLED: "true",
+    EXTERNAL_DATA_PLANE_PROVISIONER_TOKEN_FILE: secretPath,
+    EXTERNAL_DATA_PLANE_MAX_FUTURE_SKEW_SECONDS: "120",
+    EXTERNAL_DATA_PLANE_RETENTION_SWEEP_MS: "60000",
+  });
+  assert.equal(config.provisionerAccessToken, secret);
+  assert.equal(config.maxFutureSkewSeconds, 120);
+  assert.equal(config.retentionSweepMs, 60000);
+  assert.equal(config.maxPatchBytes, 262144);
+  assert.equal(config.receiptRetentionMs, 604800000);
+  assert.equal(config.legacyIntakeEnabled, false);
+  assert.equal(readConfig({ ...base, EXTERNAL_DATA_PLANE_LEGACY_INTAKE_ENABLED: "true" }).legacyIntakeEnabled, true);
+  assert.throws(() => readConfig({
+    ...base,
+    EXTERNAL_DATA_PLANE_PROVISIONING_ENABLED: "true",
+    EXTERNAL_DATA_PLANE_PROVISIONER_TOKEN_FILE: secretPath,
+    NODEDC_INTERNAL_ACCESS_TOKEN: secret,
+  }), /provisioner_token_must_differ_from_internal_token/);
+  assert.throws(() => readConfig({
+    ...base,
+    EXTERNAL_DATA_PLANE_PROVISIONING_ENABLED: "true",
+    EXTERNAL_DATA_PLANE_PROVISIONER_TOKEN_FILE: join(directory, "missing"),
+  }), /external_data_plane_provisioner_token_file_unreadable/);
+  assert.equal(readConfig({
+    ...base,
+    EXTERNAL_DATA_PLANE_PROVISIONING_ENABLED: "false",
+    EXTERNAL_DATA_PLANE_PROVISIONER_TOKEN_FILE: join(directory, "missing"),
+  }).provisionerAccessToken, "");
+} finally {
+  await rm(directory, { recursive: true, force: true });
+}
+
+console.log("external-data-plane config: ok");