feat: implement permission-aware search baseline

tests/test_migrations.py

@@ -0,0 +1,48 @@
+from __future__ import annotations
+
+import tempfile
+import unittest
+from pathlib import Path
+
+from alembic.runtime.migration import MigrationContext
+from sqlalchemy import create_engine, inspect
+
+from govoplan_core.db.migrations import migrate_database
+from govoplan_search.backend.manifest import get_manifest
+
+
+class SearchMigrationTests(unittest.TestCase):
+    def test_migration_creates_search_tables_and_head(self) -> None:
+        with tempfile.TemporaryDirectory(
+            prefix="govoplan-search-migration-"
+        ) as directory:
+            url = f"sqlite:///{Path(directory) / 'search.db'}"
+            migrate_database(
+                database_url=url,
+                enabled_modules=("search",),
+                manifest_factories=(get_manifest,),
+            )
+            engine = create_engine(url)
+            try:
+                with engine.connect() as connection:
+                    self.assertIn(
+                        "a1b2c3d4e5f6",
+                        set(MigrationContext.configure(connection).get_current_heads()),
+                    )
+                    self.assertEqual(
+                        {
+                            "search_index_acl_tokens",
+                            "search_index_documents",
+                        },
+                        {
+                            name
+                            for name in inspect(connection).get_table_names()
+                            if name.startswith("search_index_")
+                        },
+                    )
+            finally:
+                engine.dispose()
+
+
+if __name__ == "__main__":
+    unittest.main()