import * as fs from 'node:fs'; import * as path from 'node:path'; import { INestApplication } from '@nestjs/common'; import * as bcrypt from 'bcryptjs'; import request from 'supertest'; import { App } from 'supertest/types'; import { PrismaService } from '../src/prisma/prisma.service'; import { createTestApp } from './utils/create-test-app'; import { login } from './utils/api'; interface SearchResultBody { type: string; id: string; label: string; } interface ColonyBody { id: string; status: string; } describe('Search and filters (e2e)', () => { let app: INestApplication; let prisma: PrismaService; const readonlyEmail = `search-e2e-readonly-${Date.now()}@example.com`; const password = 'SuperSecret123!'; let readonlyId: string; let readonlyToken: string; let apiaryId: string; let colonyId: string; let dissolvedColonyId: string; const uniqueCode = `SRCH-${Date.now()}`; beforeAll(async () => { app = await createTestApp(); prisma = app.get(PrismaService); const passwordHash = await bcrypt.hash(password, 12); const readonly = await prisma.user.create({ data: { email: readonlyEmail, passwordHash, name: 'Readonly', role: { connect: { key: 'READONLY' } }, }, }); readonlyId = readonly.id; readonlyToken = (await login(app, readonlyEmail, password)).accessToken; const apiary = await prisma.apiary.create({ data: { name: `Stand ${Date.now()}` }, }); apiaryId = apiary.id; const colony = await prisma.colony.create({ data: { code: uniqueCode, apiaryId, colonyType: 'PRODUCTION_COLONY' }, }); colonyId = colony.id; const dissolvedColony = await prisma.colony.create({ data: { code: `${uniqueCode}-DISSOLVED`, apiaryId, colonyType: 'PRODUCTION_COLONY', status: 'DISSOLVED', }, }); dissolvedColonyId = dissolvedColony.id; }); afterAll(async () => { await prisma.colony.deleteMany({ where: { id: { in: [colonyId, dissolvedColonyId] } }, }); await prisma.apiary.deleteMany({ where: { id: apiaryId } }); await prisma.refreshToken.deleteMany({ where: { userId: readonlyId } }); await prisma.auditLog.deleteMany({ where: { userId: readonlyId } }); await prisma.user.deleteMany({ where: { id: readonlyId } }); await app.close(); }); it('finds a colony by its code across entity types', async () => { const response = await request(app.getHttpServer()) .get(`/api/v1/search?q=${uniqueCode}`) .set('Authorization', `Bearer ${readonlyToken}`) .expect(200); const results = response.body as SearchResultBody[]; expect( results.some((entry) => entry.type === 'Colony' && entry.id === colonyId), ).toBe(true); }); it('filters colonies by status', async () => { const response = await request(app.getHttpServer()) .get(`/api/v1/colonies?status=DISSOLVED&apiaryId=${apiaryId}`) .set('Authorization', `Bearer ${readonlyToken}`) .expect(200); const colonies = response.body as ColonyBody[]; expect(colonies.map((entry) => entry.id)).toEqual([dissolvedColonyId]); }); }); describe('Voice capture content guard', () => { // VoiceCapture holds personal data that is deleted after at most 7 days. It // must never be reachable through search or any export/report builder. const sourceRoots = ['search', 'export'].map((dir) => path.resolve(__dirname, '../src', dir), ); function sourceFiles(dir: string): string[] { return fs.readdirSync(dir, { withFileTypes: true }).flatMap((entry) => { const full = path.join(dir, entry.name); if (entry.isDirectory()) return sourceFiles(full); return entry.name.endsWith('.ts') ? [full] : []; }); } it('VoiceCapture appears in no search provider and no export', () => { const files = sourceRoots.flatMap(sourceFiles); expect(files.length).toBeGreaterThan(0); for (const file of files) { expect({ file: path.basename(file), mentions: /voiceCapture|VoiceCapture/.test( fs.readFileSync(file, 'utf8'), ), }).toEqual({ file: path.basename(file), mentions: false }); } }); });