@izara_project/izara-core-generate-service-code 1.0.88 → 1.0.90

package/test/resourceArtifacts.test.js

@@ -204,6 +204,38 @@ test('rejects deprecated FlowHook schemas', async () => {
   );
 });
 
+test('rejects invalid generateCodeTag configuration', async () => {
+  const rootPath = await createProject();
+  const flowDirectory = join(rootPath, 'app/src/schemas/FlowSchemas');
+  await writeFile(
+    join(flowDirectory, 'InvalidTag.js'),
+    "export default { flowTag: 'invalidHook', event: ['ownTopic'], " +
+      "generatedCodeConfig: { generateCodeTag: ['invalidAction'], " +
+      "codeHookTag: 'before' } };\n"
+  );
+
+  await assert.rejects(
+    generateResourceArtifacts(rootPath),
+    /generatedCodeConfig\.generateCodeTag contains invalid tag 'invalidAction'/
+  );
+});
+
+test('rejects empty generateCodeTag array configuration', async () => {
+  const rootPath = await createProject();
+  const flowDirectory = join(rootPath, 'app/src/schemas/FlowSchemas');
+  await writeFile(
+    join(flowDirectory, 'EmptyTag.js'),
+    "export default { flowTag: 'emptyHook', event: ['ownTopic'], " +
+      "generatedCodeConfig: { generateCodeTag: [], " +
+      "codeHookTag: 'before' } };\n"
+  );
+
+  await assert.rejects(
+    generateResourceArtifacts(rootPath),
+    /generatedCodeConfig\.generateCodeTag array must not be empty/
+  );
+});
+
 test('emits the shared WebSocket completion queue and output-topic subscriptions', async () => {
   const rootPath = await createProject();
   await generateResourceArtifacts(rootPath);
@@ -382,6 +414,50 @@ test('emits CreateNodeCallbackHdrSqs in FlowObjectsRole when object has graph an
   assert.match(role, /RolePermissions/);
   assert.match(role, /ValidatorRbac_In/);
   assert.match(role, /Rbac_\$\{self:custom\.iz_stage\}_ValidatorRbac_In/);
+  assert.match(role, /ConfirmUsageHdrInv/);
+  assert.match(role, /CancelUsageHdrInv/);
+});
+
+test('emits correct permissions in FlowObjectsRole when object is child RBAC node with graph', async () => {
+  const rootPath = await createProject();
+  const schemas = join(rootPath, 'app/src/schemas');
+  await rm(join(schemas, 'ObjectSchemas/Order.js'));
+  await writeFile(
+    join(schemas, 'ObjectSchemas/ChildNode.js'),
+    "export default { objectType: 'childNode', generatedBy: 'user', belongTo: [{ serviceTag: 'UserAccount', objectType: 'user' }], identifiers: [{ type: 'partitionKey', fieldName: 'childId' }], storageResources: { main: { storageType: 'graph', tableName: 'ChildNodes' } } };\n"
+  );
+  await generateResourceArtifacts(rootPath);
+
+  const iam = await readFile(
+    join(
+      rootPath,
+      'app/sls_yaml/generatedCode/source/generate-shared-resource.yml'
+    ),
+    'utf8'
+  );
+  const role = roleBlock(iam, 'FlowObjectsRole');
+  assert.match(role, /CreateNodeCallbackHdrSqs/);
+  assert.match(role, /CreateNodeCallbackHdrSqsDLQ/);
+  assert.match(role, /ValidatorRbac_In/);
+  assert.match(role, /Rbac_\$\{self:custom\.iz_stage\}_ValidatorRbac_In/);
+  assert.match(role, /UserAccount_\$\{self:custom\.iz_stage\}_ValidatorRbac_In/);
+  assert.match(role, /ConfirmUsageHdrInv/);
+  assert.match(role, /CancelUsageHdrInv/);
+  assert.match(role, /UserAccount\$\{self:custom\.iz_stage\}ValidatorRbacHdrInv/);
+  // Child node service is not RBAC provider: no TargetRoles or Roles table in DynamoDB permissions
+  assert.doesNotMatch(role, /TargetRoles/);
+  assert.doesNotMatch(role, /RolePermissions/);
+  assert.doesNotMatch(iam, /FlowRbacRole:/);
+
+  const dynamo = await readFile(
+    join(
+      rootPath,
+      'resource/sls_yaml/generatedCode/source/generated-dynamoDB-table.yml'
+    ),
+    'utf8'
+  );
+  assert.doesNotMatch(dynamo, /TargetRolesTable:/);
+  assert.doesNotMatch(dynamo, /RolesTable:/);
 });
 
 test('emits CreateAfterHookCallbackHdrSqs in SQS resources and FlowObjectsRole when flow has after hook with ownTopic', async () => {
@@ -559,6 +635,43 @@ test('emits lambda:InvokeFunction in FlowObjectsRole when flow has after hook wi
   assert.match(role, /AuditAfterCreate/);
 });
 
+test('emits SQS queues and deduplicated IAM policies when generateCodeTag is an array for multiple actions', async () => {
+  const rootPath = await createProject();
+  const schemas = join(rootPath, 'app/src/schemas');
+  await writeFile(
+    join(schemas, 'FlowSchemas/NotifyMultiAfter.js'),
+    "export default { flowTag: 'notifyMultiAfter', event: ['ownTopic'], " +
+      "generatedCodeConfig: { generateCodeTag: ['create', 'update'], " +
+      "codeHookTag: 'after', invocationType: 'ownTopic', " +
+      "objType: { objectType: 'order' } } };\n"
+  );
+  await generateResourceArtifacts(rootPath);
+
+  const crudResources = await readFile(
+    join(
+      rootPath,
+      'resource/sls_yaml/generatedCode/source/generated-sns-sqs-crud.yml'
+    ),
+    'utf8'
+  );
+  assert.match(crudResources, /^  CreateAfterHookCallbackHdrSqs:/m);
+  assert.match(crudResources, /^  UpdateAfterHookCallbackHdrSqs:/m);
+
+  const iam = await readFile(
+    join(
+      rootPath,
+      'app/sls_yaml/generatedCode/source/generate-shared-resource.yml'
+    ),
+    'utf8'
+  );
+  const role = roleBlock(iam, 'FlowObjectsRole');
+  assert.match(role, /CreateAfterHookCallbackHdrSqs/);
+  assert.match(role, /UpdateAfterHookCallbackHdrSqs/);
+
+  const notifyTopicMatches = role.match(/NotifyMultiAfter_In/g);
+  assert.strictEqual(notifyTopicMatches?.length, 1);
+});
+
 function roleBlock(iam, roleName) {
   const match = iam.match(
     new RegExp(