ApiCore/ApiCore-Backend/test/search.e2e-spec.ts

import * as fs from 'node:fs';
import * as path from 'node:path';
import { INestApplication } from '@nestjs/common';
import * as bcrypt from 'bcryptjs';
import request from 'supertest';
import { App } from 'supertest/types';
import { PrismaService } from '../src/prisma/prisma.service';
import { createTestApp } from './utils/create-test-app';
import { login } from './utils/api';

interface SearchResultBody {
  type: string;
  id: string;
  label: string;
}

interface ColonyBody {
  id: string;
  status: string;
}

describe('Search and filters (e2e)', () => {
  let app: INestApplication<App>;
  let prisma: PrismaService;
  const readonlyEmail = `search-e2e-readonly-${Date.now()}@example.com`;
  const password = 'SuperSecret123!';
  let readonlyId: string;
  let readonlyToken: string;
  let apiaryId: string;
  let colonyId: string;
  let dissolvedColonyId: string;
  const uniqueCode = `SRCH-${Date.now()}`;

  beforeAll(async () => {
    app = await createTestApp();
    prisma = app.get(PrismaService);

    const passwordHash = await bcrypt.hash(password, 12);
    const readonly = await prisma.user.create({
      data: {
        email: readonlyEmail,
        passwordHash,
        name: 'Readonly',
        role: { connect: { key: 'READONLY' } },
      },
    });
    readonlyId = readonly.id;
    readonlyToken = (await login(app, readonlyEmail, password)).accessToken;

    const apiary = await prisma.apiary.create({
      data: { name: `Stand ${Date.now()}` },
    });
    apiaryId = apiary.id;
    const colony = await prisma.colony.create({
      data: { code: uniqueCode, apiaryId, colonyType: 'PRODUCTION_COLONY' },
    });
    colonyId = colony.id;
    const dissolvedColony = await prisma.colony.create({
      data: {
        code: `${uniqueCode}-DISSOLVED`,
        apiaryId,
        colonyType: 'PRODUCTION_COLONY',
        status: 'DISSOLVED',
      },
    });
    dissolvedColonyId = dissolvedColony.id;
  });

  afterAll(async () => {
    await prisma.colony.deleteMany({
      where: { id: { in: [colonyId, dissolvedColonyId] } },
    });
    await prisma.apiary.deleteMany({ where: { id: apiaryId } });
    await prisma.refreshToken.deleteMany({ where: { userId: readonlyId } });
    await prisma.auditLog.deleteMany({ where: { userId: readonlyId } });
    await prisma.user.deleteMany({ where: { id: readonlyId } });
    await app.close();
  });

  it('finds a colony by its code across entity types', async () => {
    const response = await request(app.getHttpServer())
      .get(`/api/v1/search?q=${uniqueCode}`)
      .set('Authorization', `Bearer ${readonlyToken}`)
      .expect(200);
    const results = response.body as SearchResultBody[];
    expect(
      results.some((entry) => entry.type === 'Colony' && entry.id === colonyId),
    ).toBe(true);
  });

  it('filters colonies by status', async () => {
    const response = await request(app.getHttpServer())
      .get(`/api/v1/colonies?status=DISSOLVED&apiaryId=${apiaryId}`)
      .set('Authorization', `Bearer ${readonlyToken}`)
      .expect(200);
    const colonies = response.body as ColonyBody[];
    expect(colonies.map((entry) => entry.id)).toEqual([dissolvedColonyId]);
  });
});

describe('Voice capture content guard', () => {
  // VoiceCapture holds personal data that is deleted after at most 7 days. It
  // must never be reachable through search or any export/report builder.
  const sourceRoots = ['search', 'export'].map((dir) =>
    path.resolve(__dirname, '../src', dir),
  );

  function sourceFiles(dir: string): string[] {
    return fs.readdirSync(dir, { withFileTypes: true }).flatMap((entry) => {
      const full = path.join(dir, entry.name);
      if (entry.isDirectory()) return sourceFiles(full);
      return entry.name.endsWith('.ts') ? [full] : [];
    });
  }

  it('VoiceCapture appears in no search provider and no export', () => {
    const files = sourceRoots.flatMap(sourceFiles);

    expect(files.length).toBeGreaterThan(0);
    for (const file of files) {
      expect({
        file: path.basename(file),
        mentions: /voiceCapture|VoiceCapture/.test(
          fs.readFileSync(file, 'utf8'),
        ),
      }).toEqual({ file: path.basename(file), mentions: false });
    }
  });
});