import { INestApplication } from '@nestjs/common'; import * as bcrypt from 'bcryptjs'; import request from 'supertest'; import { App } from 'supertest/types'; import { PrismaService } from '../src/prisma/prisma.service'; import { createTestApp } from './utils/create-test-app'; import { login } from './utils/api'; import { drainDomainEvents } from './utils/domain-events'; interface InspectionBody { id: string; colonyId: string; broodFrames?: number | null; } interface TaskBody { id: string; sourceInspectionId: string | null; } describe('Inspections (e2e)', () => { let app: INestApplication; let prisma: PrismaService; const staffEmail = `inspections-e2e-staff-${Date.now()}@example.com`; const readonlyEmail = `inspections-e2e-readonly-${Date.now()}@example.com`; const password = 'SuperSecret123!'; let staffId: string; let readonlyId: string; let staffToken: string; let readonlyToken: string; let apiaryId: string; let colonyId: string; let inspectionId: string; let taskId: string; beforeAll(async () => { app = await createTestApp(); prisma = app.get(PrismaService); const passwordHash = await bcrypt.hash(password, 12); const staff = await prisma.user.create({ data: { email: staffEmail, passwordHash, name: 'Staff', role: { connect: { key: 'STAFF' } }, }, }); staffId = staff.id; const readonly = await prisma.user.create({ data: { email: readonlyEmail, passwordHash, name: 'Readonly', role: { connect: { key: 'READONLY' } }, }, }); readonlyId = readonly.id; staffToken = (await login(app, staffEmail, password)).accessToken; readonlyToken = (await login(app, readonlyEmail, password)).accessToken; const apiary = await prisma.apiary.create({ data: { name: `Stand ${Date.now()}` }, }); apiaryId = apiary.id; const colony = await prisma.colony.create({ data: { code: `V-${Date.now()}`, apiaryId, colonyType: 'PRODUCTION_COLONY', }, }); colonyId = colony.id; }); afterAll(async () => { if (taskId) { await prisma.domainEvent.deleteMany({ where: { aggregateType: 'Task', aggregateId: taskId }, }); await prisma.task.delete({ where: { id: taskId } }); } const inspectionIds = ( await prisma.inspection.findMany({ where: { colonyId }, select: { id: true }, }) ).map((inspection) => inspection.id); // Deliveries go with their event (ON DELETE CASCADE). await prisma.domainEvent.deleteMany({ where: { aggregateType: 'Inspection', aggregateId: { in: inspectionIds }, }, }); await prisma.calendarSyncOutboxEntry.deleteMany({ where: { sourceType: 'INSPECTION', sourceId: { in: inspectionIds } }, }); await prisma.inspection.deleteMany({ where: { colonyId } }); await prisma.colony.deleteMany({ where: { id: colonyId } }); await prisma.apiary.deleteMany({ where: { id: apiaryId } }); await prisma.refreshToken.deleteMany({ where: { userId: { in: [staffId, readonlyId] } }, }); await prisma.auditLog.deleteMany({ where: { userId: { in: [staffId, readonlyId] } }, }); await prisma.user.deleteMany({ where: { id: { in: [staffId, readonlyId] } }, }); await app.close(); }); it('rejects create for a READONLY user', () => { return request(app.getHttpServer()) .post('/api/v1/inspections') .set('Authorization', `Bearer ${readonlyToken}`) .send({ colonyId, date: new Date().toISOString() }) .expect(403); }); it('lets a STAFF user document an inspection', async () => { const response = await request(app.getHttpServer()) .post('/api/v1/inspections') .set('Authorization', `Bearer ${staffToken}`) .send({ colonyId, date: new Date().toISOString(), queenSeen: true, colonyStrength: 8, }) .expect(201); inspectionId = (response.body as InspectionBody).id; expect(inspectionId).toEqual(expect.any(String)); const auditEntry = await prisma.auditLog.findFirst({ where: { entityType: 'Inspection', entityId: inspectionId, action: 'CREATE', userId: staffId, }, }); expect(auditEntry).not.toBeNull(); // Committed with the inspection; rules, calendar and webhook follow // from it once the handlers run - nothing of that in the request. const events = await prisma.domainEvent.findMany({ where: { aggregateType: 'Inspection', aggregateId: inspectionId }, }); expect(events).toEqual([ expect.objectContaining({ type: 'InspectionRecorded', actorUserId: staffId, payload: { colonyId }, status: 'PENDING', }), ]); }); it('records InspectionCorrected for an edit, whose only follow-up is the calendar', async () => { await drainDomainEvents(app, [inspectionId]); await request(app.getHttpServer()) .patch(`/api/v1/inspections/${inspectionId}`) .set('Authorization', `Bearer ${staffToken}`) .send({ notes: 'Nachtrag: Weiselzelle gesehen' }) .expect(200); await expect( prisma.auditLog.count({ where: { entityType: 'Inspection', entityId: inspectionId, action: 'UPDATE', userId: staffId, }, }), ).resolves.toBe(1); const correction = await prisma.domainEvent.findFirstOrThrow({ where: { aggregateId: inspectionId, type: 'InspectionCorrected' }, }); expect(correction).toMatchObject({ aggregateType: 'Inspection', actorUserId: staffId, payload: { colonyId }, }); await drainDomainEvents(app, [inspectionId]); // A correction evaluates no automation rule and sends no webhook. const deliveries = await prisma.domainEventDelivery.findMany({ where: { eventId: correction.id }, }); expect(deliveries).toEqual([ expect.objectContaining({ handler: 'calendar-sync.inspection', status: 'DONE', }), ]); }); it('lists inspections for the colony', async () => { const response = await request(app.getHttpServer()) .get(`/api/v1/colonies/${colonyId}/inspections`) .set('Authorization', `Bearer ${readonlyToken}`) .expect(200); const inspections = response.body as InspectionBody[]; expect(inspections.some((entry) => entry.id === inspectionId)).toBe(true); }); it('creates a follow-up task from the inspection', async () => { const response = await request(app.getHttpServer()) .post(`/api/v1/inspections/${inspectionId}/create-task`) .set('Authorization', `Bearer ${staffToken}`) .send({ title: 'Varroabehandlung planen' }) .expect(201); const task = response.body as TaskBody; taskId = task.id; expect(task.sourceInspectionId).toBe(inspectionId); // The same trail as a task from the task page. await expect( prisma.auditLog.count({ where: { entityType: 'Task', entityId: taskId, action: 'CREATE', userId: staffId, }, }), ).resolves.toBe(1); const events = await prisma.domainEvent.findMany({ where: { aggregateType: 'Task', aggregateId: taskId }, }); expect(events).toEqual([ expect.objectContaining({ type: 'TaskCreated', actorUserId: staffId, payload: { relatedType: 'COLONY', relatedId: colonyId, dueDate: null }, }), ]); }); it('stores, clears and validates broodFrames', async () => { const created = await request(app.getHttpServer()) .post('/api/v1/inspections') .set('Authorization', `Bearer ${staffToken}`) .send({ colonyId, date: new Date().toISOString(), broodFrames: 4 }) .expect(201); const id = (created.body as InspectionBody).id; expect((created.body as InspectionBody).broodFrames).toBe(4); const cleared = await request(app.getHttpServer()) .patch(`/api/v1/inspections/${id}`) .set('Authorization', `Bearer ${staffToken}`) .send({ broodFrames: null }) .expect(200); expect((cleared.body as InspectionBody).broodFrames).toBeNull(); await request(app.getHttpServer()) .patch(`/api/v1/inspections/${id}`) .set('Authorization', `Bearer ${staffToken}`) .send({ broodFrames: -1 }) .expect(400); await request(app.getHttpServer()) .patch(`/api/v1/inspections/${id}`) .set('Authorization', `Bearer ${staffToken}`) .send({ broodFrames: 'x' }) .expect(400); }); });