/** * 回收站集成测试(真实 Postgres,ADR-0031;最近打开已由 ADR-0032 移除)。 * 覆盖:bin 列出(祖先全活跃顶点/直连 MANAGE 可见性/管理员)、restore 对称语义 * 与审计、purge 仅管理员 + 整支硬删(RESTRICT 顺序)。 * 运行前提:本地 PG(paradigm:paradigm@127.0.0.1:5432/cph_hub_test)且已 migrate。 */ import { beforeEach, describe, expect, it } from "vitest"; import { prisma, resetDb, DEFAULT_ORG_ID } from "./helpers.js"; import { createNode, softDeleteNode, listChildren, type FileLibActor, type TreeServiceDeps, } from "../../src/database/filelib/treeService.js"; import { listBin, purgeBinEntry, restoreBinEntry, type BinDeps } from "../../src/database/filelib/binService.js"; import { createStaticGroupResolver } from "../../src/database/filelib/groupResolver.js"; import { createInMemoryVersionStore } from "../../src/database/filelib/versionStore.js"; import { FILE_LIB_AUDIT_ACTIONS } from "../../src/database/filelib/audit.js"; const ADMIN: FileLibActor = { userId: "u_admin", isWebsiteAdmin: true }; const ALICE: FileLibActor = { userId: "u_alice", isWebsiteAdmin: false }; const BOB: FileLibActor = { userId: "u_bob", isWebsiteAdmin: false }; function treeDeps(): TreeServiceDeps { return { prisma, groupResolver: createStaticGroupResolver({ u_bob: ["g_physics"] }), versionStore: createInMemoryVersionStore(), organizationId: DEFAULT_ORG_ID, storageRoot: "/tmp/filelib-test", }; } function binDeps(): BinDeps { return { prisma, organizationId: DEFAULT_ORG_ID, groupResolver: createStaticGroupResolver({ u_bob: ["g_physics"] }), }; } beforeEach(async () => { await resetDb(); for (const [id, openId] of [["u_admin", "ou_admin"], ["u_alice", "ou_alice"], ["u_bob", "ou_bob"]] as const) { await prisma.user.create({ data: { id, feishuOpenId: openId, displayName: id } }); } }); describe("binService · 列出与可见性", () => { it("只露每支已删子树的顶;管理员全见,直连 MANAGE 可见,无关者不见", async () => { const root = await createNode(treeDeps(), ADMIN, { parentId: null, kind: "FOLDER", name: "物理" }); const child = await createNode(treeDeps(), ADMIN, { parentId: root.id, kind: "FOLDER", name: "必修一" }); await createNode(treeDeps(), ADMIN, { parentId: child.id, kind: "PROJECT", name: "TH-141" }); // alice 在 child 上直连 MANAGE。 const own = await createNode(treeDeps(), ADMIN, { parentId: null, kind: "PROJECT", name: "alice 项目", grants: [{ principalType: "USER", principalId: "u_alice", role: "MANAGE" }], }); await softDeleteNode(treeDeps(), ADMIN, child.id); // 删中间层:child 是顶,孙项目不单列 await softDeleteNode(treeDeps(), ADMIN, own.id); const adminBin = await listBin(binDeps(), ADMIN); expect(adminBin.map((e) => e.name).sort()).toEqual(["alice 项目", "必修一"]); const aliceBin = await listBin(binDeps(), ALICE); expect(aliceBin.map((e) => e.name)).toEqual(["alice 项目"]); // 只见自己 MANAGE 的 const bobBin = await listBin(binDeps(), BOB); expect(bobBin).toEqual([]); void root; }); }); describe("binService · 恢复", () => { it("restore 只清本节点:整支立即可见,落 folder.restore 审计;无权者 404", async () => { const root = await createNode(treeDeps(), ADMIN, { parentId: null, kind: "FOLDER", name: "物理" }); const child = await createNode(treeDeps(), ADMIN, { parentId: root.id, kind: "FOLDER", name: "必修一" }); await softDeleteNode(treeDeps(), ADMIN, child.id); await expect(restoreBinEntry(binDeps(), BOB, child.id)).rejects.toMatchObject({ statusCode: 404 }); await restoreBinEntry(binDeps(), ADMIN, child.id); const visible = await listChildren(treeDeps(), ADMIN, root.id); expect(visible.map((c) => c.name)).toContain("必修一"); const audits = await prisma.auditEntry.findMany({ where: { action: FILE_LIB_AUDIT_ACTIONS.folderRestore }, }); expect(audits).toHaveLength(1); }); it("ADR-0033:与活跃兄弟撞名时恢复为「(已恢复)」,不死锁;审计记 renamedFrom", async () => { const root = await createNode(treeDeps(), ADMIN, { parentId: null, kind: "FOLDER", name: "物理" }); const child = await createNode(treeDeps(), ADMIN, { parentId: root.id, kind: "FOLDER", name: "必修一" }); await softDeleteNode(treeDeps(), ADMIN, child.id); // 删除后同名新建 → 活跃兄弟占了名字 await createNode(treeDeps(), ADMIN, { parentId: root.id, kind: "FOLDER", name: "必修一" }); const result = await restoreBinEntry(binDeps(), ADMIN, child.id); expect(result.renamedFrom).toBe("必修一"); expect(result.name).toBe("必修一(已恢复)"); const visible = await listChildren(treeDeps(), ADMIN, root.id); expect(visible.map((c) => c.name).sort()).toEqual(["必修一", "必修一(已恢复)"]); // 再删再恢复:名字已是去重后的「(已恢复)」,不再冲突 → 保持,不二次改名 await softDeleteNode(treeDeps(), ADMIN, child.id); const second = await restoreBinEntry(binDeps(), ADMIN, child.id); expect(second.name).toBe("必修一(已恢复)"); expect(second.renamedFrom).toBeUndefined(); const audits = await prisma.auditEntry.findMany({ where: { action: FILE_LIB_AUDIT_ACTIONS.folderRestore }, }); expect(audits).toHaveLength(2); }); }); describe("binService · 彻底删除", () => { it("ADR-0034:与条目可见性同权 —— 直连 MANAGE 可清空,无关者 404;整支硬删 + node.purge 审计", async () => { const root = await createNode(treeDeps(), ADMIN, { parentId: null, kind: "FOLDER", name: "物理" }); const child = await createNode(treeDeps(), ADMIN, { parentId: root.id, kind: "PROJECT", name: "TH-141", grants: [{ principalType: "USER", principalId: "u_alice", role: "MANAGE" }], }); await softDeleteNode(treeDeps(), ADMIN, root.id); // 连根删:root 是顶;alice 在 root 上无直连 MANAGE await expect(purgeBinEntry(binDeps(), BOB, root.id)).rejects.toMatchObject({ statusCode: 404 }); const { removed } = await purgeBinEntry(binDeps(), ADMIN, root.id); expect(removed).toBe(2); expect(await prisma.fileLibNode.count({ where: { id: { in: [root.id, child.id] } } })).toBe(0); expect(await prisma.fileLibGrant.count({ where: { nodeId: child.id } })).toBe(0); const audits = await prisma.auditEntry.findMany({ where: { action: FILE_LIB_AUDIT_ACTIONS.nodePurge } }); expect(audits).toHaveLength(1); }); it("ADR-0034:非管理员的直连 MANAGE 持有者也能彻底删除", async () => { const own = await createNode(treeDeps(), ADMIN, { parentId: null, kind: "PROJECT", name: "alice 项目", grants: [{ principalType: "USER", principalId: "u_alice", role: "MANAGE" }], }); await softDeleteNode(treeDeps(), ADMIN, own.id); const { removed } = await purgeBinEntry(binDeps(), ALICE, own.id); expect(removed).toBe(1); expect(await prisma.fileLibNode.count({ where: { id: own.id } })).toBe(0); }); });