@csntgao/uni-base 0.1.0

package/packages/web-components/tests/notification-popover.test.ts

@@ -0,0 +1,283 @@
+// @vitest-environment happy-dom
+
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import type {
+  NotificationCenterTransport,
+  NotificationDto,
+  NotificationRealtimeChange,
+} from '@uniplat/ai-employee-client'
+import '../src'
+import { UniplatNotificationPopover } from '../src'
+
+function notification(overrides: Partial<NotificationDto> = {}): NotificationDto {
+  return {
+    id: overrides.id ?? 'n1',
+    type: overrides.type ?? 'todo',
+    typeName: overrides.typeName ?? '待办提醒',
+    title: overrides.title ?? '社保增员申报待确认',
+    summary: overrides.summary ?? '3 名新员工的 8 月社保增员待你确认。',
+    content: overrides.content ?? '正文内容',
+    contentType: overrides.contentType ?? 'text',
+    priority: overrides.priority ?? 'normal',
+    source: overrides.source ?? null,
+    resources: overrides.resources ?? [],
+    attachments: overrides.attachments ?? [],
+    readStatus: overrides.readStatus ?? 'unread',
+    readAt: overrides.readAt ?? null,
+    archivedAt: overrides.archivedAt ?? null,
+    createdAt: overrides.createdAt ?? new Date(Date.now() - 12 * 60_000).toISOString(),
+    expiresAt: overrides.expiresAt ?? null,
+  }
+}
+
+function makeTransport(
+  items: NotificationDto[],
+  overrides: Partial<NotificationCenterTransport> = {},
+) {
+  return {
+    listInbox: vi.fn(async () => ({ items, hasMore: false, nextId: null })),
+    getUnreadCount: vi.fn(async () => ({
+      unreadCount: items.filter((item) => item.readStatus === 'unread').length,
+    })),
+    markRead: vi.fn(async () => ({
+      unreadCount: Math.max(0, items.filter((item) => item.readStatus === 'unread').length - 1),
+      readAt: new Date().toISOString(),
+    })),
+    markAllRead: vi.fn(async () => ({
+      markedCount: items.filter((item) => item.readStatus === 'unread').length,
+      unreadCount: 0,
+    })),
+    downloadAttachment: vi.fn(async () => new Blob(['file'])),
+    ...overrides,
+  } satisfies NotificationCenterTransport
+}
+
+async function mount(
+  items: NotificationDto[],
+  overrides: Partial<NotificationCenterTransport> = {},
+) {
+  const transport = makeTransport(items, overrides)
+  const component = document.createElement('uniplat-notification-popover')
+  component.configure({ applicationName: 'OfficialWebsite', transport })
+  document.body.append(component)
+  await vi.waitFor(() => expect(transport.listInbox).toHaveBeenCalledTimes(1))
+  await component.updateComplete
+  return { component, transport }
+}
+
+describe('<uniplat-notification-popover>', () => {
+  afterEach(() => document.body.replaceChildren())
+
+  it('registers, exports and loads the four-item unread projection while initially closed', async () => {
+    const items = [
+      notification({ id: 'n1' }),
+      notification({ id: 'n2', type: 'certification', typeName: '认证进度' }),
+      notification({ id: 'n3', type: 'report', typeName: '服务动态' }),
+      notification({ id: 'n4', type: 'message', typeName: '顾问消息' }),
+      notification({ id: 'n5', type: 'policy', typeName: '政策提醒' }),
+      notification({ id: 'n6', readStatus: 'read' }),
+    ]
+    const { component, transport } = await mount(items)
+
+    expect(customElements.get('uniplat-notification-popover')).toBeTruthy()
+    expect(component).toBeInstanceOf(UniplatNotificationPopover)
+    expect(component.hasAttribute('open')).toBe(false)
+    expect(transport.listInbox).toHaveBeenCalledWith(
+      expect.objectContaining({
+        pageSize: 4,
+        readStatus: 'unread',
+        applicationName: 'OfficialWebsite',
+      }),
+    )
+
+    component.open()
+    await component.updateComplete
+    const root = component.shadowRoot
+    expect(root?.querySelector('.title')?.textContent).toBe('消息通知')
+    expect(root?.querySelector('.unread-badge')?.textContent).toContain('5 条未读')
+    expect(root?.querySelectorAll('.item')).toHaveLength(4)
+    expect(root?.querySelector('.meta')?.textContent).toMatch(/待办提醒 · (11|12) 分钟前/)
+    expect(root?.querySelector('[data-prototype-icon="clipboard-check"]')).toBeTruthy()
+    expect(root?.querySelector('.footer')?.textContent).toContain('查看全部消息')
+  })
+
+  it('marks all notifications read and switches to the prototype empty state', async () => {
+    const { component, transport } = await mount([notification(), notification({ id: 'n2' })])
+    component.open()
+    await component.updateComplete
+    component.shadowRoot?.querySelector<HTMLButtonElement>('.mark-all')?.click()
+
+    await vi.waitFor(() => expect(transport.markAllRead).toHaveBeenCalledTimes(1))
+    await component.updateComplete
+    expect(component.getUnreadCount()).toBe(0)
+    expect(component.shadowRoot?.querySelector('.unread-badge')).toBeNull()
+    expect(component.shadowRoot?.querySelector('.empty')?.textContent).toContain('暂无未读消息')
+    expect(component.shadowRoot?.querySelector('[data-prototype-icon="mail-check"]')).toBeTruthy()
+  })
+
+  it('marks an item read, closes and requests the full notification center with only its id', async () => {
+    const requested: unknown[] = []
+    const closed = vi.fn()
+    const { component, transport } = await mount([notification({ id: 'notice-7' })])
+    component.addEventListener('notification-center-requested', (event) => {
+      requested.push((event as CustomEvent).detail)
+    })
+    component.addEventListener('closed', closed)
+    component.open()
+    await component.updateComplete
+    component.shadowRoot?.querySelector<HTMLButtonElement>('.item')?.click()
+    await component.updateComplete
+
+    expect(component.hasAttribute('open')).toBe(false)
+    expect(requested).toEqual([{ notificationId: 'notice-7' }])
+    expect(closed).toHaveBeenCalledTimes(1)
+    await vi.waitFor(() => expect(transport.markRead).toHaveBeenCalledTimes(1))
+    expect(JSON.stringify(requested)).not.toContain('Bearer')
+  })
+
+  it('requests the full notification center without selecting an item from the footer', async () => {
+    const requested: unknown[] = []
+    const { component } = await mount([notification()])
+    component.addEventListener('notification-center-requested', (event) => {
+      requested.push((event as CustomEvent).detail)
+    })
+    component.open()
+    await component.updateComplete
+    component.shadowRoot?.querySelector<HTMLButtonElement>('.footer')?.click()
+    await component.updateComplete
+
+    expect(requested).toEqual([{}])
+    expect(component.hasAttribute('open')).toBe(false)
+  })
+
+  it('closes on the prototype outside-click layer and rejects credential-bearing icon URLs', async () => {
+    const closed = vi.fn()
+    const transport = makeTransport([notification()])
+    const component = document.createElement('uniplat-notification-popover')
+    component.configure({
+      applicationName: 'OfficialWebsite',
+      transport,
+      typeIcons: { todo: 'https://static.example/icon.svg?access_token=must-not-render' },
+    })
+    component.addEventListener('closed', closed)
+    document.body.append(component)
+    await vi.waitFor(() => expect(transport.listInbox).toHaveBeenCalledTimes(1))
+    component.open()
+    await vi.waitFor(() => expect(component.shadowRoot?.querySelector('.item')).toBeTruthy())
+
+    expect(component.shadowRoot?.innerHTML).not.toContain('must-not-render')
+    expect(
+      component.shadowRoot?.querySelector('[data-prototype-icon="clipboard-check"]'),
+    ).toBeTruthy()
+    component.shadowRoot?.querySelector<HTMLButtonElement>('.backdrop')?.click()
+    await component.updateComplete
+    expect(component.hasAttribute('open')).toBe(false)
+    expect(closed).toHaveBeenCalledTimes(1)
+  })
+
+  it('closes from a document-level outside click even when the backdrop cannot cover the host', async () => {
+    const closed = vi.fn()
+    const { component } = await mount([notification()])
+    const outside = document.createElement('button')
+    document.body.append(outside)
+    component.addEventListener('closed', closed)
+    component.open()
+    await new Promise((resolve) => setTimeout(resolve, 0))
+
+    component.shadowRoot
+      ?.querySelector<HTMLElement>('.panel')
+      ?.dispatchEvent(new MouseEvent('click', { bubbles: true, composed: true }))
+    expect(component.hasAttribute('open')).toBe(true)
+
+    outside.click()
+    await component.updateComplete
+    expect(component.hasAttribute('open')).toBe(false)
+    expect(closed).toHaveBeenCalledTimes(1)
+  })
+
+  it('does not consume the external bell click that calls toggle to open the popover', async () => {
+    const { component } = await mount([notification()])
+    const bell = document.createElement('button')
+    const outside = document.createElement('button')
+    const addEventListener = vi.spyOn(document, 'addEventListener')
+    document.body.append(bell, outside)
+    bell.addEventListener('click', () => component.toggle())
+
+    bell.click()
+    expect(component.opened).toBe(true)
+    await Promise.resolve()
+    expect(addEventListener.mock.calls.some(([type]) => type === 'click')).toBe(false)
+    await component.updateComplete
+    expect(component.hasAttribute('open')).toBe(true)
+
+    await new Promise((resolve) => setTimeout(resolve, 0))
+    expect(addEventListener.mock.calls.some(([type]) => type === 'click')).toBe(true)
+    expect(component.hasAttribute('open')).toBe(true)
+    outside.click()
+    await component.updateComplete
+    expect(component.hasAttribute('open')).toBe(false)
+    addEventListener.mockRestore()
+  })
+
+  it('removes the document-level outside-click listener when disconnected', async () => {
+    const closed = vi.fn()
+    const { component } = await mount([notification()])
+    component.addEventListener('closed', closed)
+    component.open()
+    await new Promise((resolve) => setTimeout(resolve, 0))
+    component.remove()
+
+    document.body.click()
+    expect(closed).not.toHaveBeenCalled()
+  })
+
+  it('consumes host-forwarded realtime events without creating a WebSocket', async () => {
+    const openedSockets: string[] = []
+    const originalWebSocket = globalThis.WebSocket
+    class TrackingSocket {
+      constructor(url: string) {
+        openedSockets.push(url)
+      }
+    }
+    Object.defineProperty(globalThis, 'WebSocket', {
+      value: TrackingSocket,
+      configurable: true,
+      writable: true,
+    })
+    try {
+      const parseRealtimeEvent = vi.fn((): NotificationRealtimeChange => ({
+        kind: 'created',
+        notification: notification({ id: 'n2', title: '企业认证已通过' }),
+        unreadCount: 2,
+      }))
+      const { component } = await mount([notification()], { parseRealtimeEvent })
+      component.applyRealtimeEvent({ event_type: 'notification_created' })
+      component.open()
+      await component.updateComplete
+
+      expect(openedSockets).toEqual([])
+      expect(parseRealtimeEvent).toHaveBeenCalledTimes(1)
+      expect(component.getUnreadCount()).toBe(2)
+      expect(component.shadowRoot?.querySelectorAll('.item')).toHaveLength(2)
+    } finally {
+      Object.defineProperty(globalThis, 'WebSocket', {
+        value: originalWebSocket,
+        configurable: true,
+        writable: true,
+      })
+    }
+  })
+
+  it('accepts an empty applicationName to load the all-applications projection', async () => {
+    const transport = makeTransport([notification()])
+    const component = document.createElement('uniplat-notification-popover')
+    component.configure({ applicationName: '', transport })
+    document.body.append(component)
+
+    await vi.waitFor(() => expect(transport.listInbox).toHaveBeenCalledTimes(1))
+    expect(transport.listInbox).toHaveBeenCalledWith(
+      expect.objectContaining({ applicationName: '', readStatus: 'unread' }),
+    )
+    expect(transport.getUnreadCount).toHaveBeenCalledWith({ applicationName: '' })
+  })
+})

package/packages/web-components/tests/organization-multi-employee-selector-transport.test.ts

@@ -0,0 +1,332 @@
+// @vitest-environment happy-dom
+
+import { describe, expect, it, vi } from 'vitest'
+import { createUniplatBaseOrganizationMultiEmployeeSelectorTransport } from '../src'
+import type { OrganizationMultiEmployeeSelectorTransportError } from '../src'
+
+function response(data: unknown, status = 200): Response {
+  return new Response(JSON.stringify(data), {
+    status,
+    headers: { 'content-type': 'application/json' },
+  })
+}
+
+function envelope(data: unknown) {
+  return { rescode: 0, data }
+}
+
+describe('createUniplatBaseOrganizationMultiEmployeeSelectorTransport()', () => {
+  it('loads the organization-scoped department tree with JWT only in Authorization', async () => {
+    const fetchImplementation = vi.fn<typeof fetch>().mockResolvedValue(
+      response(
+        envelope({
+          nodes: [
+            {
+              id: 10,
+              name: '研发部',
+              parent_id: null,
+              depth: 0,
+              member_count: 12,
+            },
+          ],
+        }),
+      ),
+    )
+    const transport = createUniplatBaseOrganizationMultiEmployeeSelectorTransport({
+      serviceBaseUrl: 'https://service.example/api/general/project/uniplat_base/service',
+      getAccessToken: () => 'secret-jwt',
+      fetch: fetchImplementation,
+    })
+
+    await expect(transport.loadDepartmentTree()).resolves.toEqual([
+      { id: '10', name: '研发部', depth: 0, memberCount: 12 },
+    ])
+    const [url, init] = fetchImplementation.mock.calls[0] ?? []
+    expect(url).toBe(
+      'https://service.example/api/general/project/uniplat_base/service/system.org_directory/tree_full',
+    )
+    expect(init?.headers).toMatchObject({ authorization: 'Bearer secret-jwt' })
+    expect(JSON.parse(String(init?.body))).toEqual({
+      payload: { directory_scope: 'organization' },
+    })
+    expect(String(url)).not.toContain('secret-jwt')
+    expect(String(init?.body)).not.toContain('secret-jwt')
+  })
+
+  it('maps department members, pages and masked employee summaries', async () => {
+    const fetchImplementation = vi.fn<typeof fetch>().mockResolvedValue(
+      response(
+        envelope({
+          total: 2,
+          page: 1,
+          page_size: 1,
+          items: [
+            {
+              employee_id: '145',
+              display_name: '高志刚2',
+              mobile_masked: '186****8793',
+              avatar_file_id: '8d6a4835-8e45-4e8c-8509-764d5127d878',
+              node_id: 10,
+              node_name: '研发部',
+              is_primary: true,
+              employment_status: 'active',
+            },
+          ],
+        }),
+      ),
+    )
+    const transport = createUniplatBaseOrganizationMultiEmployeeSelectorTransport({
+      serviceBaseUrl: '/api/general/project/uniplat_base/service',
+      getAccessToken: () => 'jwt-value',
+      fetch: fetchImplementation,
+    })
+
+    const result = await transport.listDepartmentEmployees({
+      departmentId: '10',
+      page: 1,
+      pageSize: 1,
+      employmentStatuses: ['active'],
+    })
+    expect(result).toEqual({
+      items: [
+        {
+          employeeId: '145',
+          displayName: '高志刚2',
+          maskedMobile: '186****8793',
+          avatar: { kind: 'file', fileId: '8d6a4835-8e45-4e8c-8509-764d5127d878' },
+          primaryDepartmentId: '10',
+          primaryDepartmentName: '研发部',
+          departmentIds: ['10'],
+          departmentNames: ['研发部'],
+          employmentStatus: 'active',
+        },
+      ],
+      page: 1,
+      pageSize: 1,
+      total: 2,
+      hasMore: true,
+    })
+    expect(JSON.parse(String(fetchImplementation.mock.calls[0]?.[1]?.body))).toEqual({
+      payload: {
+        directory_scope: 'organization',
+        node_id: '10',
+        page: 1,
+        page_size: 1,
+      },
+    })
+  })
+
+  it('searches active employees and never forwards caller identity fields', async () => {
+    const fetchImplementation = vi
+      .fn<typeof fetch>()
+      .mockResolvedValue(response(envelope({ total: 0, page: 2, page_size: 20, items: [] })))
+    const transport = createUniplatBaseOrganizationMultiEmployeeSelectorTransport({
+      serviceBaseUrl: 'https://service.example/base',
+      getAccessToken: () => 'jwt-value',
+      fetch: fetchImplementation,
+    })
+    await transport.searchEmployees({
+      keyword: '张',
+      page: 2,
+      pageSize: 20,
+      employmentStatuses: ['active'],
+    })
+    const body = JSON.parse(String(fetchImplementation.mock.calls[0]?.[1]?.body))
+    expect(body).toEqual({
+      payload: {
+        directory_scope: 'organization',
+        keyword: '张',
+        status: 1,
+        employment_status: 'active',
+        page: 2,
+        page_size: 20,
+      },
+    })
+    expect(JSON.stringify(body)).not.toMatch(/"(?:oid|xid|eid|uid|poid)"/)
+  })
+
+  it('resolves initial employees with bounded batches and refreshes JWT per request', async () => {
+    const tokens = ['jwt-1', 'jwt-2']
+    const getAccessToken = vi.fn(() => tokens.shift() ?? 'jwt-next')
+    const fetchImplementation = vi.fn<typeof fetch>().mockImplementation(async (_url, init) => {
+      const body = JSON.parse(String(init?.body))
+      const id = body.payload.employee_id
+      return response(
+        envelope({
+          employee_id: id,
+          display_name: id === '1' ? '张三' : '李四',
+          mobile: '138****6688',
+          primary_node: { id: 10, name: '研发部' },
+          nodes: [
+            { id: 10, name: '研发部' },
+            { id: 11, name: '项目组' },
+          ],
+          employment_status: 'active',
+        }),
+      )
+    })
+    const transport = createUniplatBaseOrganizationMultiEmployeeSelectorTransport({
+      serviceBaseUrl: 'https://service.example/base',
+      getAccessToken,
+      fetch: fetchImplementation,
+    })
+
+    const result = await transport.resolveEmployees({ employeeIds: ['1', '2', '1'] })
+    expect(result).toHaveLength(2)
+    expect(result[0]).toMatchObject({
+      employeeId: '1',
+      primaryDepartmentId: '10',
+      departmentIds: ['10', '11'],
+    })
+    expect(getAccessToken).toHaveBeenCalledTimes(2)
+    expect(fetchImplementation.mock.calls[0]?.[1]?.headers).toMatchObject({
+      authorization: 'Bearer jwt-1',
+    })
+    expect(fetchImplementation.mock.calls[1]?.[1]?.headers).toMatchObject({
+      authorization: 'Bearer jwt-2',
+    })
+  })
+
+  it('filters disabled employees from search, department and initial-selection results', async () => {
+    const fetchImplementation = vi.fn<typeof fetch>().mockImplementation(async (url, init) => {
+      const action = String(url).split('/').at(-1)
+      const body = JSON.parse(String(init?.body))
+      if (action === 'contact_get') {
+        return response(
+          envelope({
+            employee_id: body.payload.employee_id,
+            display_name: '已停用员工',
+            enable: 0,
+            status: 0,
+            employment_status: 'active',
+          }),
+        )
+      }
+      return response(
+        envelope({
+          total: 2,
+          page: 1,
+          page_size: 20,
+          items: [
+            {
+              employee_id: '1',
+              display_name: '启用员工',
+              enable: 1,
+              status: 1,
+              employment_status: 'active',
+            },
+            {
+              employee_id: '2',
+              display_name: '已停用员工',
+              enable: 0,
+              status: 0,
+              employment_status: 'active',
+            },
+          ],
+        }),
+      )
+    })
+    const transport = createUniplatBaseOrganizationMultiEmployeeSelectorTransport({
+      serviceBaseUrl: 'https://service.example/base',
+      getAccessToken: () => 'jwt',
+      fetch: fetchImplementation,
+    })
+
+    const search = await transport.searchEmployees({
+      keyword: '',
+      page: 1,
+      pageSize: 20,
+      employmentStatuses: ['active'],
+    })
+    const department = await transport.listDepartmentEmployees({
+      departmentId: '10',
+      page: 1,
+      pageSize: 20,
+      employmentStatuses: ['active'],
+    })
+    const resolved = await transport.resolveEmployees({ employeeIds: ['2'] })
+
+    expect(search.items.map(({ employeeId }) => employeeId)).toEqual(['1'])
+    expect(department.items.map(({ employeeId }) => employeeId)).toEqual(['1'])
+    expect(resolved).toEqual([])
+    expect(JSON.parse(String(fetchImplementation.mock.calls[0]?.[1]?.body))).toMatchObject({
+      payload: { status: 1, employment_status: 'active' },
+    })
+  })
+
+  it('drops full mobile numbers from public employee results', async () => {
+    const fetchImplementation = vi.fn<typeof fetch>().mockResolvedValue(
+      response(
+        envelope({
+          total: 1,
+          page: 1,
+          page_size: 20,
+          items: [
+            {
+              employee_id: '1',
+              display_name: '张三',
+              mobile: '13812345678',
+              employment_status: 'active',
+            },
+          ],
+        }),
+      ),
+    )
+    const transport = createUniplatBaseOrganizationMultiEmployeeSelectorTransport({
+      serviceBaseUrl: 'https://service.example/base',
+      getAccessToken: () => 'jwt',
+      fetch: fetchImplementation,
+    })
+    const result = await transport.searchEmployees({
+      keyword: '',
+      page: 1,
+      pageSize: 20,
+      employmentStatuses: ['active'],
+    })
+    expect(result.items[0]).not.toHaveProperty('maskedMobile')
+  })
+
+  it('maps authentication and permission failures to stable safe errors', async () => {
+    const authentication = createUniplatBaseOrganizationMultiEmployeeSelectorTransport({
+      serviceBaseUrl: 'https://service.example/base',
+      getAccessToken: () => '',
+      fetch: vi.fn(),
+    })
+    await expect(authentication.loadDepartmentTree()).rejects.toMatchObject({
+      name: 'OrganizationMultiEmployeeSelectorTransportError',
+      code: 'AUTH_REQUIRED',
+      retryable: false,
+    })
+
+    const forbidden = createUniplatBaseOrganizationMultiEmployeeSelectorTransport({
+      serviceBaseUrl: 'https://service.example/base',
+      getAccessToken: () => 'jwt',
+      fetch: vi.fn<typeof fetch>().mockResolvedValue(response({ rescode: 999 }, 403)),
+    })
+    await expect(forbidden.loadDepartmentTree()).rejects.toEqual(
+      expect.objectContaining<Partial<OrganizationMultiEmployeeSelectorTransportError>>({
+        code: 'FORBIDDEN',
+        retryable: false,
+      }),
+    )
+  })
+
+  it('rejects malformed responses and unsafe service URLs', async () => {
+    expect(() =>
+      createUniplatBaseOrganizationMultiEmployeeSelectorTransport({
+        serviceBaseUrl: 'javascript:alert(1)',
+        getAccessToken: () => 'jwt',
+      }),
+    ).toThrow(TypeError)
+
+    const transport = createUniplatBaseOrganizationMultiEmployeeSelectorTransport({
+      serviceBaseUrl: 'https://service.example/base',
+      getAccessToken: () => 'jwt',
+      fetch: vi.fn<typeof fetch>().mockResolvedValue(response(envelope({ nodes: [{}] }))),
+    })
+    await expect(transport.loadDepartmentTree()).rejects.toMatchObject({
+      code: 'INVALID_RESPONSE',
+      retryable: false,
+    })
+  })
+})