ApiCore/ApiCore-Backend/test/inspections.e2e-spec.ts

import { INestApplication } from '@nestjs/common';
import * as bcrypt from 'bcryptjs';
import request from 'supertest';
import { App } from 'supertest/types';
import { PrismaService } from '../src/prisma/prisma.service';
import { createTestApp } from './utils/create-test-app';
import { login } from './utils/api';
import { drainDomainEvents } from './utils/domain-events';

interface InspectionBody {
  id: string;
  colonyId: string;
  broodFrames?: number | null;
}

interface TaskBody {
  id: string;
  sourceInspectionId: string | null;
}

describe('Inspections (e2e)', () => {
  let app: INestApplication<App>;
  let prisma: PrismaService;
  const staffEmail = `inspections-e2e-staff-${Date.now()}@example.com`;
  const readonlyEmail = `inspections-e2e-readonly-${Date.now()}@example.com`;
  const password = 'SuperSecret123!';
  let staffId: string;
  let readonlyId: string;
  let staffToken: string;
  let readonlyToken: string;
  let apiaryId: string;
  let colonyId: string;
  let inspectionId: string;
  let taskId: string;

  beforeAll(async () => {
    app = await createTestApp();
    prisma = app.get(PrismaService);

    const passwordHash = await bcrypt.hash(password, 12);
    const staff = await prisma.user.create({
      data: {
        email: staffEmail,
        passwordHash,
        name: 'Staff',
        role: { connect: { key: 'STAFF' } },
      },
    });
    staffId = staff.id;
    const readonly = await prisma.user.create({
      data: {
        email: readonlyEmail,
        passwordHash,
        name: 'Readonly',
        role: { connect: { key: 'READONLY' } },
      },
    });
    readonlyId = readonly.id;
    staffToken = (await login(app, staffEmail, password)).accessToken;
    readonlyToken = (await login(app, readonlyEmail, password)).accessToken;

    const apiary = await prisma.apiary.create({
      data: { name: `Stand ${Date.now()}` },
    });
    apiaryId = apiary.id;
    const colony = await prisma.colony.create({
      data: {
        code: `V-${Date.now()}`,
        apiaryId,
        colonyType: 'PRODUCTION_COLONY',
      },
    });
    colonyId = colony.id;
  });

  afterAll(async () => {
    if (taskId) {
      await prisma.domainEvent.deleteMany({
        where: { aggregateType: 'Task', aggregateId: taskId },
      });
      await prisma.task.delete({ where: { id: taskId } });
    }
    const inspectionIds = (
      await prisma.inspection.findMany({
        where: { colonyId },
        select: { id: true },
      })
    ).map((inspection) => inspection.id);
    // Deliveries go with their event (ON DELETE CASCADE).
    await prisma.domainEvent.deleteMany({
      where: {
        aggregateType: 'Inspection',
        aggregateId: { in: inspectionIds },
      },
    });
    await prisma.calendarSyncOutboxEntry.deleteMany({
      where: { sourceType: 'INSPECTION', sourceId: { in: inspectionIds } },
    });
    await prisma.inspection.deleteMany({ where: { colonyId } });
    await prisma.colony.deleteMany({ where: { id: colonyId } });
    await prisma.apiary.deleteMany({ where: { id: apiaryId } });
    await prisma.refreshToken.deleteMany({
      where: { userId: { in: [staffId, readonlyId] } },
    });
    await prisma.auditLog.deleteMany({
      where: { userId: { in: [staffId, readonlyId] } },
    });
    await prisma.user.deleteMany({
      where: { id: { in: [staffId, readonlyId] } },
    });
    await app.close();
  });

  it('rejects create for a READONLY user', () => {
    return request(app.getHttpServer())
      .post('/api/v1/inspections')
      .set('Authorization', `Bearer ${readonlyToken}`)
      .send({ colonyId, date: new Date().toISOString() })
      .expect(403);
  });

  it('lets a STAFF user document an inspection', async () => {
    const response = await request(app.getHttpServer())
      .post('/api/v1/inspections')
      .set('Authorization', `Bearer ${staffToken}`)
      .send({
        colonyId,
        date: new Date().toISOString(),
        queenSeen: true,
        colonyStrength: 8,
      })
      .expect(201);
    inspectionId = (response.body as InspectionBody).id;
    expect(inspectionId).toEqual(expect.any(String));

    const auditEntry = await prisma.auditLog.findFirst({
      where: {
        entityType: 'Inspection',
        entityId: inspectionId,
        action: 'CREATE',
        userId: staffId,
      },
    });
    expect(auditEntry).not.toBeNull();

    // Committed with the inspection; rules, calendar and webhook follow
    // from it once the handlers run - nothing of that in the request.
    const events = await prisma.domainEvent.findMany({
      where: { aggregateType: 'Inspection', aggregateId: inspectionId },
    });
    expect(events).toEqual([
      expect.objectContaining({
        type: 'InspectionRecorded',
        actorUserId: staffId,
        payload: { colonyId },
        status: 'PENDING',
      }),
    ]);
  });

  it('records InspectionCorrected for an edit, whose only follow-up is the calendar', async () => {
    await drainDomainEvents(app, [inspectionId]);

    await request(app.getHttpServer())
      .patch(`/api/v1/inspections/${inspectionId}`)
      .set('Authorization', `Bearer ${staffToken}`)
      .send({ notes: 'Nachtrag: Weiselzelle gesehen' })
      .expect(200);

    await expect(
      prisma.auditLog.count({
        where: {
          entityType: 'Inspection',
          entityId: inspectionId,
          action: 'UPDATE',
          userId: staffId,
        },
      }),
    ).resolves.toBe(1);
    const correction = await prisma.domainEvent.findFirstOrThrow({
      where: { aggregateId: inspectionId, type: 'InspectionCorrected' },
    });
    expect(correction).toMatchObject({
      aggregateType: 'Inspection',
      actorUserId: staffId,
      payload: { colonyId },
    });

    await drainDomainEvents(app, [inspectionId]);
    // A correction evaluates no automation rule and sends no webhook.
    const deliveries = await prisma.domainEventDelivery.findMany({
      where: { eventId: correction.id },
    });
    expect(deliveries).toEqual([
      expect.objectContaining({
        handler: 'calendar-sync.inspection',
        status: 'DONE',
      }),
    ]);
  });

  it('lists inspections for the colony', async () => {
    const response = await request(app.getHttpServer())
      .get(`/api/v1/colonies/${colonyId}/inspections`)
      .set('Authorization', `Bearer ${readonlyToken}`)
      .expect(200);
    const inspections = response.body as InspectionBody[];
    expect(inspections.some((entry) => entry.id === inspectionId)).toBe(true);
  });

  it('creates a follow-up task from the inspection', async () => {
    const response = await request(app.getHttpServer())
      .post(`/api/v1/inspections/${inspectionId}/create-task`)
      .set('Authorization', `Bearer ${staffToken}`)
      .send({ title: 'Varroabehandlung planen' })
      .expect(201);
    const task = response.body as TaskBody;
    taskId = task.id;
    expect(task.sourceInspectionId).toBe(inspectionId);

    // The same trail as a task from the task page.
    await expect(
      prisma.auditLog.count({
        where: {
          entityType: 'Task',
          entityId: taskId,
          action: 'CREATE',
          userId: staffId,
        },
      }),
    ).resolves.toBe(1);
    const events = await prisma.domainEvent.findMany({
      where: { aggregateType: 'Task', aggregateId: taskId },
    });
    expect(events).toEqual([
      expect.objectContaining({
        type: 'TaskCreated',
        actorUserId: staffId,
        payload: { relatedType: 'COLONY', relatedId: colonyId, dueDate: null },
      }),
    ]);
  });

  it('stores, clears and validates broodFrames', async () => {
    const created = await request(app.getHttpServer())
      .post('/api/v1/inspections')
      .set('Authorization', `Bearer ${staffToken}`)
      .send({ colonyId, date: new Date().toISOString(), broodFrames: 4 })
      .expect(201);
    const id = (created.body as InspectionBody).id;
    expect((created.body as InspectionBody).broodFrames).toBe(4);

    const cleared = await request(app.getHttpServer())
      .patch(`/api/v1/inspections/${id}`)
      .set('Authorization', `Bearer ${staffToken}`)
      .send({ broodFrames: null })
      .expect(200);
    expect((cleared.body as InspectionBody).broodFrames).toBeNull();

    await request(app.getHttpServer())
      .patch(`/api/v1/inspections/${id}`)
      .set('Authorization', `Bearer ${staffToken}`)
      .send({ broodFrames: -1 })
      .expect(400);
    await request(app.getHttpServer())
      .patch(`/api/v1/inspections/${id}`)
      .set('Authorization', `Bearer ${staffToken}`)
      .send({ broodFrames: 'x' })
      .expect(400);
  });
});