store: assert CHECK constraint on host_credentials.kind

2026-05-03 22:10:29 +01:00
parent d92aa6d65c
commit d4821714a5
1 changed files with 7 additions and 0 deletions
@@ -116,6 +116,13 @@ func TestMigration0009Schema(t *testing.T) {
 		t.Fatal("expected unique constraint violation on (host_id, kind), got nil")
 	}

+	// CHECK (kind IN ('repo','admin')) must reject an invalid kind.
+	if _, err := s.DB().ExecContext(ctx,
+		`INSERT INTO host_credentials (host_id, kind, enc_repo_creds, updated_at) VALUES (?,?,?,?)`,
+		"h-0009", "other", "enc-other", now); err == nil {
+		t.Fatal("expected CHECK constraint violation on kind='other', got nil")
+	}
+
 	// host_repo_stats table must exist with expected columns.
 	if _, err := s.DB().ExecContext(ctx,
 		`INSERT INTO host_repo_stats (host_id, lock_present, updated_at) VALUES (?,?,?)`,