fix(sql): fix sql script

tests/enabled_apps_smoke.rs

@@ -0,0 +1,79 @@
+use iam_service::services::TenantService;
+use sqlx::PgPool;
+use uuid::Uuid;
+
+#[tokio::test]
+async fn tenant_enabled_apps_roundtrip_and_version_conflict()
+-> Result<(), Box<dyn std::error::Error>> {
+    let database_url = match std::env::var("DATABASE_URL") {
+        Ok(v) if !v.trim().is_empty() => v,
+        _ => return Ok(()),
+    };
+
+    let pool = PgPool::connect(&database_url).await?;
+    let tenant_service = TenantService::new(pool.clone());
+
+    let test_app = format!("testapp{}", Uuid::new_v4().to_string().replace('-', ""));
+    let tenant_id: Uuid = sqlx::query_scalar(
+        r#"
+        INSERT INTO tenants (name, status, config)
+        VALUES ($1, 'active', '{}'::jsonb)
+        RETURNING id
+        "#,
+    )
+    .bind(format!("smoke-{}", Uuid::new_v4()))
+    .fetch_one(&pool)
+    .await?;
+
+    let actor_user_id = Uuid::new_v4();
+
+    async fn cleanup(pool: &PgPool, tenant_id: Uuid, test_app: &str) {
+        let _ = sqlx::query("DELETE FROM tenants WHERE id = $1")
+            .bind(tenant_id)
+            .execute(pool)
+            .await;
+        let _ = sqlx::query("DELETE FROM apps WHERE id = $1")
+            .bind(test_app)
+            .execute(pool)
+            .await;
+    }
+
+    let _ = sqlx::query(
+        r#"
+        INSERT INTO apps (id, name, description)
+        VALUES ($1, 'TestApp', 'Test')
+        "#,
+    )
+    .bind(&test_app)
+    .execute(&pool)
+    .await?;
+
+    let _ = sqlx::query(
+        r#"
+        INSERT INTO tenant_entitlements (tenant_id, enabled_apps, version)
+        VALUES ($1, '{}'::text[], 0)
+        ON CONFLICT (tenant_id) DO NOTHING
+        "#,
+    )
+    .bind(tenant_id)
+    .execute(&pool)
+    .await?;
+
+    let r1 = tenant_service
+        .set_enabled_apps(tenant_id, vec![test_app.clone()], Some(0), actor_user_id)
+        .await;
+    if r1.is_err() {
+        cleanup(&pool, tenant_id, &test_app).await;
+    }
+    let (apps, v1, _) = r1?;
+    assert_eq!(apps, vec![test_app.clone()]);
+    assert_eq!(v1, 1);
+
+    let r2 = tenant_service
+        .set_enabled_apps(tenant_id, vec![test_app.clone()], Some(0), actor_user_id)
+        .await;
+    assert!(r2.is_err());
+
+    cleanup(&pool, tenant_id, &test_app).await;
+    Ok(())
+}