feat(backend): Inventar (Modul 24)

EquipmentModule (GET/POST /equipment, GET/PATCH /equipment/:id) fuer
Ausruestungsgegenstaende (Inventarnummer, Bezeichnung, Hersteller,
Kaufdatum, Zustand, Standort, Wartungsdatum). Neues Prisma-Modell
Equipment (Migration equipment).

ApiCore-Backend/test/equipment.e2e-spec.ts

@@ -0,0 +1,102 @@
+import { INestApplication } from '@nestjs/common';
+import * as bcrypt from 'bcryptjs';
+import request from 'supertest';
+import { App } from 'supertest/types';
+import { PrismaService } from '../src/prisma/prisma.service';
+import { createTestApp } from './utils/create-test-app';
+import { login } from './utils/api';
+
+interface EquipmentBody {
+  id: string;
+  inventoryNumber: string;
+  condition: string;
+}
+
+describe('Equipment (e2e)', () => {
+  let app: INestApplication<App>;
+  let prisma: PrismaService;
+  const beekeeperEmail = `equipment-e2e-beekeeper-${Date.now()}@example.com`;
+  const staffEmail = `equipment-e2e-staff-${Date.now()}@example.com`;
+  const password = 'SuperSecret123!';
+  let beekeeperId: string;
+  let staffId: string;
+  let beekeeperToken: string;
+  let staffToken: string;
+  let equipmentId: string;
+
+  beforeAll(async () => {
+    app = await createTestApp();
+    prisma = app.get(PrismaService);
+
+    const passwordHash = await bcrypt.hash(password, 12);
+    const beekeeper = await prisma.user.create({
+      data: {
+        email: beekeeperEmail,
+        passwordHash,
+        name: 'Beekeeper',
+        role: 'BEEKEEPER',
+      },
+    });
+    beekeeperId = beekeeper.id;
+    const staff = await prisma.user.create({
+      data: { email: staffEmail, passwordHash, name: 'Staff', role: 'STAFF' },
+    });
+    staffId = staff.id;
+    beekeeperToken = (await login(app, beekeeperEmail, password)).accessToken;
+    staffToken = (await login(app, staffEmail, password)).accessToken;
+  });
+
+  afterAll(async () => {
+    if (equipmentId) {
+      await prisma.equipment.deleteMany({ where: { id: equipmentId } });
+    }
+    await prisma.refreshToken.deleteMany({
+      where: { userId: { in: [beekeeperId, staffId] } },
+    });
+    await prisma.auditLog.deleteMany({
+      where: { userId: { in: [beekeeperId, staffId] } },
+    });
+    await prisma.user.deleteMany({
+      where: { id: { in: [beekeeperId, staffId] } },
+    });
+    await app.close();
+  });
+
+  it('rejects create for a STAFF user', () => {
+    return request(app.getHttpServer())
+      .post('/api/v1/equipment')
+      .set('Authorization', `Bearer ${staffToken}`)
+      .send({ inventoryNumber: `INV-${Date.now()}`, name: 'Honigschleuder' })
+      .expect(403);
+  });
+
+  it('lets a BEEKEEPER create equipment', async () => {
+    const response = await request(app.getHttpServer())
+      .post('/api/v1/equipment')
+      .set('Authorization', `Bearer ${beekeeperToken}`)
+      .send({ inventoryNumber: `INV-${Date.now()}`, name: 'Honigschleuder' })
+      .expect(201);
+    const equipment = response.body as EquipmentBody;
+    equipmentId = equipment.id;
+    expect(equipment.condition).toBe('GOOD');
+  });
+
+  it('lists equipment for any authenticated role', async () => {
+    const response = await request(app.getHttpServer())
+      .get('/api/v1/equipment')
+      .set('Authorization', `Bearer ${staffToken}`)
+      .expect(200);
+    const items = response.body as EquipmentBody[];
+    expect(items.some((item) => item.id === equipmentId)).toBe(true);
+  });
+
+  it('updates equipment condition', async () => {
+    const response = await request(app.getHttpServer())
+      .patch(`/api/v1/equipment/${equipmentId}`)
+      .set('Authorization', `Bearer ${beekeeperToken}`)
+      .send({ condition: 'WORN' })
+      .expect(200);
+    const equipment = response.body as EquipmentBody;
+    expect(equipment.condition).toBe('WORN');
+  });
+});