/** * /api/parties: the Kontakter register and its write actions. The read model * and the pipeline are unit-tested in lib/parties; here the routes are * checked for auth, validation and the shape they hand the page. */ import { describe, it, expect, vi, beforeEach } from 'vitest' import { createMockRequest, parseJsonResponse, createQueuedMockSupabase } from '@/tests/helpers' import { eventBus } from '@/lib/events' const { supabase: mockSupabase, enqueue, reset } = createQueuedMockSupabase() vi.mock('@/lib/supabase/server', () => ({ createClient: () => Promise.resolve(mockSupabase), })) vi.mock('@/lib/init', () => ({ ensureInitialized: vi.fn() })) vi.mock('@/lib/company/context', () => ({ requireCompanyId: vi.fn().mockResolvedValue('company-1'), getActiveCompanyId: vi.fn().mockResolvedValue('company-1'), })) vi.mock('@/lib/auth/require-write', () => ({ requireWritePermission: vi.fn().mockResolvedValue({ ok: true }), })) const getRegister = vi.fn() const getDossier = vi.fn() vi.mock('@/lib/parties/register', () => ({ getRegister: (...args: unknown[]) => getRegister(...args), getDossier: (...args: unknown[]) => getDossier(...args), })) const suggestPartiesForCompany = vi.fn() vi.mock('@/lib/parties/suggest', () => ({ suggestPartiesForCompany: (...args: unknown[]) => suggestPartiesForCompany(...args), })) import { GET as listGet } from '../route' import { GET as dossierGet } from '../[id]/route' import { POST as suggestPost } from '../suggest/route' import { POST as decidePost } from '../decide/route' import { POST as undoDecidePost } from '../decide/undo/route' import { POST as mergePost } from '../merge/route' import { POST as undoMergePost } from '../merge/undo/route' import { POST as promotePost } from '../promote/route' import { POST as undoPromotePost } from '../promote/undo/route' const user = { id: 'user-1', email: 'test@test.se' } const noParams = { params: Promise.resolve({}) } const PARTY = '11111111-1111-4111-8111-111111111111' const OTHER = '22222222-2222-4222-8222-222222222222' const DECISION = '33333333-3333-4333-8333-333333333333' function json(url: string, body: unknown) { return createMockRequest(url, { method: 'POST', body }) } beforeEach(() => { vi.clearAllMocks() reset() eventBus.clear() mockSupabase.auth.getUser.mockResolvedValue({ data: { user } }) }) describe('GET /api/parties', () => { it('returns 401 when not authenticated', async () => { mockSupabase.auth.getUser.mockResolvedValue({ data: { user: null } }) const { status } = await parseJsonResponse(await listGet(createMockRequest('/api/parties'), noParams)) expect(status).toBe(401) }) it('rejects an unknown view with 400', async () => { const { status } = await parseJsonResponse(await listGet(createMockRequest('/api/parties?view=nope'), noParams)) expect(status).toBe(400) expect(getRegister).not.toHaveBeenCalled() }) it('passes view, query and period to the read model for the active company', async () => { const register = { counts: { suggested: 1, suggestedSuppliers: 1, suggestedCustomers: 0, observed: 0, confirmed: 3 }, rows: [], observed: [], generic: { count: 0, expenseSek: 0, examples: [] }, period: 'all' } getRegister.mockResolvedValue(register) const { status, body } = await parseJsonResponse<{ data: typeof register }>( await listGet(createMockRequest('/api/parties?view=observed&q=beijer&period=all'), noParams), ) expect(status).toBe(200) expect(body.data).toEqual(register) expect(getRegister).toHaveBeenCalledWith(mockSupabase, 'company-1', { view: 'observed', q: 'beijer', period: 'all' }) }) it('no longer accepts the register views that moved to Leverantörer and Kunder', async () => { const { status } = await parseJsonResponse(await listGet(createMockRequest('/api/parties?view=suppliers'), noParams)) expect(status).toBe(400) }) }) describe('GET /api/parties/[id]', () => { it('returns 404 for a party that is not in the company', async () => { getDossier.mockResolvedValue(null) const { status } = await parseJsonResponse( await dossierGet(createMockRequest(`/api/parties/${PARTY}`), { params: Promise.resolve({ id: PARTY }) }), ) expect(status).toBe(404) }) it('returns 404 for a malformed id without touching the database', async () => { const { status } = await parseJsonResponse( await dossierGet(createMockRequest('/api/parties/not-a-uuid'), { params: Promise.resolve({ id: 'not-a-uuid' }) }), ) expect(status).toBe(404) expect(getDossier).not.toHaveBeenCalled() }) it('returns the dossier', async () => { const dossier = { party: { id: PARTY, displayName: 'Loopia AB' }, facts: [], identities: [], decisions: [], vouchers: [], similar: [] } getDossier.mockResolvedValue(dossier) const { status, body } = await parseJsonResponse<{ data: typeof dossier }>( await dossierGet(createMockRequest(`/api/parties/${PARTY}`), { params: Promise.resolve({ id: PARTY }) }), ) expect(status).toBe(200) expect(body.data.party.displayName).toBe('Loopia AB') expect(getDossier).toHaveBeenCalledWith(mockSupabase, 'company-1', PARTY) }) }) describe('POST /api/parties/suggest', () => { it('runs the pipeline for the caller and company', async () => { const summary = { observed: 10, suggested: 4, skipped: 6, created: 3, attached: 1, identities: 2, facts: 5 } suggestPartiesForCompany.mockResolvedValue(summary) const { status, body } = await parseJsonResponse<{ data: typeof summary }>(await suggestPost(createMockRequest('/api/parties/suggest', { method: 'POST' }), noParams)) expect(status).toBe(200) expect(body.data).toEqual(summary) expect(suggestPartiesForCompany).toHaveBeenCalledWith(mockSupabase, 'company-1', 'user-1') }) }) describe('POST /api/parties/decide', () => { it('rejects an empty id list and an unknown kind', async () => { const a = await parseJsonResponse(await decidePost(json('/api/parties/decide', { partyIds: [], kind: 'confirm' }), noParams)) expect(a.status).toBe(400) const b = await parseJsonResponse(await decidePost(json('/api/parties/decide', { partyIds: [PARTY], kind: 'merge' }), noParams)) expect(b.status).toBe(400) }) it('calls decide_parties with the caller identity and returns the count', async () => { enqueue({ data: 2 }) const { status, body } = await parseJsonResponse<{ data: { count: number; kind: string } }>( await decidePost(json('/api/parties/decide', { partyIds: [PARTY, OTHER], kind: 'confirm', note: 'from queue' }), noParams), ) expect(status).toBe(200) expect(body.data).toEqual({ count: 2, kind: 'confirm' }) expect(mockSupabase.rpc).toHaveBeenCalledWith('decide_parties', { p_company_id: 'company-1', p_user_id: 'user-1', p_party_ids: [PARTY, OTHER], p_kind: 'confirm', p_note: 'from queue', }) }) }) describe('POST /api/parties/decide/undo', () => { it('reverses the latest decisions for the given parties', async () => { enqueue({ data: 1 }) const { status, body } = await parseJsonResponse<{ data: { count: number } }>( await undoDecidePost(json('/api/parties/decide/undo', { partyIds: [PARTY] }), noParams), ) expect(status).toBe(200) expect(body.data).toEqual({ count: 1 }) expect(mockSupabase.rpc).toHaveBeenCalledWith('undo_party_decisions', { p_company_id: 'company-1', p_user_id: 'user-1', p_party_ids: [PARTY] }) }) }) describe('POST /api/parties/merge', () => { it('rejects a survivor listed among the merged ids', async () => { const { status } = await parseJsonResponse(await mergePost(json('/api/parties/merge', { survivorId: PARTY, mergedIds: [PARTY] }), noParams)) expect(status).toBe(400) expect(mockSupabase.rpc).not.toHaveBeenCalled() }) it('maps a foreign or merged party to 404', async () => { enqueue({ data: null, error: { code: '23503', message: 'survivor is not a live party of this company' } }) const { status } = await parseJsonResponse(await mergePost(json('/api/parties/merge', { survivorId: PARTY, mergedIds: [OTHER] }), noParams)) expect(status).toBe(404) }) it('returns the decision id for undo', async () => { enqueue({ data: DECISION }) const { status, body } = await parseJsonResponse<{ data: { decisionId: string; survivorId: string; mergedIds: string[] } }>( await mergePost(json('/api/parties/merge', { survivorId: PARTY, mergedIds: [OTHER], note: 'same supplier' }), noParams), ) expect(status).toBe(200) expect(body.data).toEqual({ decisionId: DECISION, survivorId: PARTY, mergedIds: [OTHER] }) expect(mockSupabase.rpc).toHaveBeenCalledWith('merge_parties', { p_company_id: 'company-1', p_user_id: 'user-1', p_survivor: PARTY, p_merged: [OTHER], p_note: 'same supplier', }) }) }) describe('POST /api/parties/merge/undo', () => { it('validates the decision id', async () => { const { status } = await parseJsonResponse(await undoMergePost(json('/api/parties/merge/undo', { decisionId: 'x' }), noParams)) expect(status).toBe(400) }) it('restores the merged parties', async () => { enqueue({ data: 2 }) const { status, body } = await parseJsonResponse<{ data: { restored: number } }>( await undoMergePost(json('/api/parties/merge/undo', { decisionId: DECISION }), noParams), ) expect(status).toBe(200) expect(body.data).toEqual({ restored: 2 }) expect(mockSupabase.rpc).toHaveBeenCalledWith('undo_party_merge', { p_company_id: 'company-1', p_user_id: 'user-1', p_decision_id: DECISION }) }) }) describe('POST /api/parties/promote', () => { it('rejects an item without roles', async () => { const { status } = await parseJsonResponse(await promotePost(json('/api/parties/promote', { items: [{ partyId: PARTY, roles: [] }] }), noParams)) expect(status).toBe(400) expect(mockSupabase.rpc).not.toHaveBeenCalled() }) it('maps a foreign or archived party to 404', async () => { enqueue({ data: null, error: { code: '23503', message: 'not a live party' } }) const { status } = await parseJsonResponse(await promotePost(json('/api/parties/promote', { items: [{ partyId: PARTY, roles: ['supplier'] }] }), noParams)) expect(status).toBe(404) }) it('calls promote_parties with snake_case items and returns the counts', async () => { enqueue({ data: { parties: 2, suppliers: 1, customers: 1 } }) const { status, body } = await parseJsonResponse<{ data: { parties: number; suppliers: number; customers: number } }>( await promotePost( json('/api/parties/promote', { items: [ { partyId: PARTY, roles: ['supplier'] }, { partyId: OTHER, roles: ['customer'] }, ], }), noParams, ), ) expect(status).toBe(200) expect(body.data).toEqual({ parties: 2, suppliers: 1, customers: 1 }) expect(mockSupabase.rpc).toHaveBeenCalledWith('promote_parties', { p_company_id: 'company-1', p_user_id: 'user-1', p_items: [ { party_id: PARTY, roles: ['supplier'] }, { party_id: OTHER, roles: ['customer'] }, ], }) }) }) describe('POST /api/parties/promote/undo', () => { it('reverses promotions for the given parties', async () => { enqueue({ data: 2 }) const { status, body } = await parseJsonResponse<{ data: { count: number } }>( await undoPromotePost(json('/api/parties/promote/undo', { partyIds: [PARTY, OTHER] }), noParams), ) expect(status).toBe(200) expect(body.data).toEqual({ count: 2 }) expect(mockSupabase.rpc).toHaveBeenCalledWith('undo_party_promotions', { p_company_id: 'company-1', p_user_id: 'user-1', p_party_ids: [PARTY, OTHER] }) }) })