@open-mercato/core 0.4.9-develop-e55592929f → 0.4.9-develop-97d4cca067

package/src/helpers/integration/sseEventCollector.ts

@@ -0,0 +1,30 @@
+import type { Page } from '@playwright/test'
+
+const OM_EVENT_NAME = 'om:event'
+const CAPTURED_EVENTS_KEY = '__capturedOmEvents'
+
+export type CapturedEvent = {
+  id: string
+  payload?: Record<string, unknown>
+}
+
+export async function installOmEventCollector(page: Page): Promise<void> {
+  await page.evaluate(({ eventName, storageKey }) => {
+    ;(window as unknown as Record<string, unknown>)[storageKey] = []
+    window.addEventListener(eventName, (event: Event) => {
+      const detail = (event as CustomEvent<CapturedEvent>).detail
+      if (!detail || typeof detail !== 'object') return
+      const store = (window as unknown as Record<string, unknown>)[storageKey]
+      if (!Array.isArray(store)) return
+      store.push(detail)
+    })
+  }, { eventName: OM_EVENT_NAME, storageKey: CAPTURED_EVENTS_KEY })
+}
+
+export async function getCapturedOmEvents(page: Page): Promise<CapturedEvent[]> {
+  return page.evaluate((storageKey) => {
+    const store = (window as unknown as Record<string, unknown>)[storageKey]
+    if (!Array.isArray(store)) return []
+    return store as CapturedEvent[]
+  }, CAPTURED_EVENTS_KEY)
+}

package/src/helpers/integration/staffFixtures.ts

@@ -0,0 +1,61 @@
+import { expect, type APIRequestContext } from '@playwright/test';
+import { apiRequest } from './api';
+
+export async function createStaffTeamFixture(
+  request: APIRequestContext,
+  token: string,
+  name?: string,
+): Promise<string> {
+  const response = await apiRequest(request, 'POST', '/api/staff/teams', {
+    token,
+    data: { name: name ?? `QA Team ${Date.now()}` },
+  });
+  expect(response.ok(), `Failed to create staff team fixture: ${response.status()}`).toBeTruthy();
+  const body = (await response.json()) as { id?: string };
+  expect(typeof body.id === 'string' && body.id.length > 0).toBeTruthy();
+  return body.id as string;
+}
+
+export async function createStaffTeamMemberFixture(
+  request: APIRequestContext,
+  token: string,
+  input?: { displayName?: string },
+): Promise<string> {
+  const response = await apiRequest(request, 'POST', '/api/staff/team-members', {
+    token,
+    data: { displayName: input?.displayName ?? `QA Member ${Date.now()}` },
+  });
+  expect(response.ok(), `Failed to create staff team member fixture: ${response.status()}`).toBeTruthy();
+  const body = (await response.json()) as { id?: string };
+  expect(typeof body.id === 'string' && body.id.length > 0).toBeTruthy();
+  return body.id as string;
+}
+
+export async function createStaffTeamRoleFixture(
+  request: APIRequestContext,
+  token: string,
+  input?: { name?: string },
+): Promise<string> {
+  const response = await apiRequest(request, 'POST', '/api/staff/team-roles', {
+    token,
+    data: { name: input?.name ?? `QA Role ${Date.now()}` },
+  });
+  expect(response.ok(), `Failed to create staff team role fixture: ${response.status()}`).toBeTruthy();
+  const body = (await response.json()) as { id?: string };
+  expect(typeof body.id === 'string' && body.id.length > 0).toBeTruthy();
+  return body.id as string;
+}
+
+export async function deleteStaffEntityIfExists(
+  request: APIRequestContext,
+  token: string | null,
+  path: string,
+  id: string | null,
+): Promise<void> {
+  if (!token || !id) return;
+  try {
+    await apiRequest(request, 'DELETE', `${path}?id=${encodeURIComponent(id)}`, { token });
+  } catch {
+    return;
+  }
+}

package/src/modules/auth/lib/setup-app.ts

@@ -411,9 +411,11 @@ async function ensureDefaultRoleAcls(
   const employeeRole = await findRoleByName(em, 'employee', roleTenantId)
 
   // Merge features from all enabled modules' setup configs
+  const builtInRoles = ['superadmin', 'admin', 'employee'] as const
   const superadminFeatures: string[] = []
   const adminFeatures: string[] = []
   const employeeFeatures: string[] = []
+  const customRoleFeatures = new Map<string, string[]>()
 
   for (const mod of modules) {
     const roleFeatures = mod.setup?.defaultRoleFeatures
@@ -421,12 +423,24 @@ async function ensureDefaultRoleAcls(
     if (roleFeatures.superadmin) superadminFeatures.push(...roleFeatures.superadmin)
     if (roleFeatures.admin) adminFeatures.push(...roleFeatures.admin)
     if (roleFeatures.employee) employeeFeatures.push(...roleFeatures.employee)
+
+    // Collect features for custom roles (any key not in builtInRoles)
+    for (const [roleName, features] of Object.entries(roleFeatures)) {
+      if ((builtInRoles as readonly string[]).includes(roleName)) continue
+      if (!Array.isArray(features)) continue
+      const existing = customRoleFeatures.get(roleName) ?? []
+      existing.push(...features)
+      customRoleFeatures.set(roleName, existing)
+    }
   }
 
   console.log('✅ Seeded default role features', {
     superadmin: superadminFeatures,
     admin: adminFeatures,
     employee: employeeFeatures,
+    ...(customRoleFeatures.size > 0
+      ? Object.fromEntries(customRoleFeatures)
+      : {}),
   })
 
   if (includeSuperadminRole && superadminRole) {
@@ -438,6 +452,14 @@ async function ensureDefaultRoleAcls(
   if (employeeRole) {
     await ensureRoleAclFor(em, employeeRole, tenantId, employeeFeatures)
   }
+
+  // Seed ACLs for custom roles defined by app modules
+  for (const [roleName, features] of customRoleFeatures) {
+    const role = await findRoleByName(em, roleName, roleTenantId)
+    if (role) {
+      await ensureRoleAclFor(em, role, tenantId, features)
+    }
+  }
 }
 
 async function ensureRoleAclFor(

package/src/testing/integration/api.ts

@@ -0,0 +1 @@
+export * from '../../helpers/integration/api'

package/src/testing/integration/auth.ts

@@ -0,0 +1 @@
+export * from '../../helpers/integration/auth'

package/src/testing/integration/authFixtures.ts

@@ -0,0 +1 @@
+export * from '../../helpers/integration/authFixtures'

package/src/testing/integration/authUi.ts

@@ -0,0 +1 @@
+export * from '../../helpers/integration/authUi'

package/src/testing/integration/crmFixtures.ts

@@ -0,0 +1 @@
+export * from '../../helpers/integration/crmFixtures'

package/src/testing/integration/dictionariesFixtures.ts

@@ -0,0 +1 @@
+export * from '../../helpers/integration/dictionariesFixtures'

package/src/testing/integration/generalFixtures.ts

@@ -0,0 +1 @@
+export * from '../../helpers/integration/generalFixtures'

package/src/testing/integration/index.ts

@@ -0,0 +1,22 @@
+export { getAuthToken, apiRequest, postForm } from '../../helpers/integration/api'
+export { DEFAULT_CREDENTIALS, type Role } from '../../helpers/integration/auth'
+export { createUserViaUi } from '../../helpers/integration/authUi'
+export {
+  createCompanyFixture,
+  createPersonFixture,
+  createDealFixture,
+  createPipelineFixture,
+  createPipelineStageFixture,
+  deleteEntityByBody,
+  deleteEntityIfExists,
+} from '../../helpers/integration/crmFixtures'
+export {
+  readJsonSafe,
+  getTokenContext,
+  getTokenScope,
+  expectId,
+  deleteEntityByPathIfExists,
+  deleteGeneralEntityIfExists,
+} from '../../helpers/integration/generalFixtures'
+export { createDictionaryFixture } from '../../helpers/integration/dictionariesFixtures'
+export { createRoleFixture, deleteRoleIfExists, createUserFixture, deleteUserIfExists } from '../../helpers/integration/authFixtures'

package/tsconfig.json

@@ -7,6 +7,9 @@
     "paths": {
       "@open-mercato/core/modules/core/__integration__/helpers/*": [
         "./src/modules/core/__integration__/helpers/*"
+      ],
+      "@open-mercato/core/helpers/integration/*": [
+        "./src/helpers/integration/*"
       ]
     }
   },