@openora/core 0.4.1-canary.36 → 0.4.1-canary.38

package/dist/wallet/__tests__/wallet.router.test.js

@@ -1,51 +1,71 @@
-import { describe, it, expect, vi } from 'vitest';
+import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vitest';
+import { randomUUID } from 'node:crypto';
 import { call, ORPCError } from '@orpc/server';
-import { mock, adminCaller, testContext } from '../../testing/mock.js';
+import { createTestDb } from '@openora/core/testing';
+import { mock, makeEventBus, testContext, makeAuditWriter, makeAdminGuard, } from '../../testing/mock.js';
+import { migrate } from '../migrate.js';
+import { wallet, walletTransaction } from '../schema/index.js';
 import { createWalletRouter } from '../router/index.js';
+import { WalletService } from '../service/wallet.service.js';
 const CTX = testContext();
-const fakeAudit = () => mock({ record: vi.fn() });
-const fakePayment = () => mock({});
-const fakeWebhookVerifier = () => mock({ verify: vi.fn().mockReturnValue(false) });
 const USER_ID = '63d3c264-3bf4-4d08-9b92-ea3eaf40a440';
-function fakeWallet() {
-    return mock({
-        getTransactions: vi.fn().mockResolvedValue({ items: [], total: 0, page: 1, limit: 20 }),
+let db;
+beforeAll(async () => {
+    db = await createTestDb([migrate]);
+});
+afterAll(async () => {
+    await db.drop();
+});
+beforeEach(async () => {
+    await db.drizzle.db.delete(walletTransaction);
+    await db.drizzle.db.delete(wallet);
+});
+function realWalletService() {
+    return new WalletService({
+        drizzle: db.drizzle,
+        events: makeEventBus(),
+        payment: mock({}),
+        audit: makeAuditWriter(),
     });
 }
-/** AdminGuard that denies the `transaction` resource, grants everything else. */
-function fakeTransactionDenyingGuard() {
-    return mock({
-        assert: vi.fn(async (_ctx, resource) => {
-            if (resource === 'transaction') {
-                throw new ORPCError('FORBIDDEN', { message: 'Missing permission: transaction:view' });
-            }
-            return adminCaller({ userId: 'caller-1', role: 'support' });
-        }),
-    });
+function routerWith(adminGuard) {
+    return createWalletRouter(realWalletService(), adminGuard, makeAuditWriter(), mock({}), mock({ verify: vi.fn().mockReturnValue(false) }));
 }
-function fakeAllowingGuard() {
-    return mock({
-        assert: vi.fn(async () => adminCaller({ userId: 'caller-1' })),
-    });
+const transactionDenyingGuard = () => makeAdminGuard({ deny: ['transaction'], caller: { userId: 'caller-1', role: 'support' } });
+const allowingGuard = () => makeAdminGuard({ caller: { userId: 'caller-1' } });
+async function seedLedger(userId, amounts) {
+    const [row] = await db.drizzle.db
+        .insert(wallet)
+        .values({ userId, balance: '0', currency: 'USD' })
+        .returning();
+    for (const amount of amounts) {
+        await db.drizzle.db.insert(walletTransaction).values({
+            walletId: row.id,
+            type: 'deposit',
+            amount,
+            currency: 'USD',
+            status: 'completed',
+            rail: 'fiat',
+        });
+    }
 }
 describe('wallet router listPlayerTransactions authz', () => {
     it('rejects a caller lacking transaction:view (IDOR guard)', async () => {
-        const wallet = fakeWallet();
-        const router = createWalletRouter(wallet, fakeTransactionDenyingGuard(), fakeAudit(), fakePayment(), fakeWebhookVerifier());
-        await expect(call(router.listPlayerTransactions, { userId: USER_ID, page: 1, limit: 20 }, { context: CTX })).rejects.toBeInstanceOf(ORPCError);
-        expect(wallet.getTransactions).not.toHaveBeenCalled();
+        await seedLedger(USER_ID, ['10.00']);
+        await expect(call(routerWith(transactionDenyingGuard()).listPlayerTransactions, { userId: USER_ID, page: 1, limit: 20 }, { context: CTX })).rejects.toBeInstanceOf(ORPCError);
     });
     it('allows a caller with transaction:view to read any player ledger', async () => {
-        const wallet = fakeWallet();
-        const router = createWalletRouter(wallet, fakeAllowingGuard(), fakeAudit(), fakePayment(), fakeWebhookVerifier());
-        await call(router.listPlayerTransactions, { userId: USER_ID, page: 1, limit: 20 }, { context: CTX });
-        expect(wallet.getTransactions).toHaveBeenCalledWith({
-            userId: USER_ID,
-            page: 1,
-            limit: 20,
-            sortBy: 'createdAt',
-            sortOrder: 'desc',
-        });
+        await seedLedger(USER_ID, ['10.00', '25.50']);
+        const result = await call(routerWith(allowingGuard()).listPlayerTransactions, { userId: USER_ID, page: 1, limit: 20 }, { context: CTX });
+        expect(result.total).toBe(2);
+        expect(result.items.map((t) => t.amount).sort()).toEqual(['10.00000000', '25.50000000']);
+    });
+    it('reads only the requested player, never a neighbour ledger', async () => {
+        await seedLedger(USER_ID, ['10.00']);
+        await seedLedger(randomUUID(), ['999.00']);
+        const result = await call(routerWith(allowingGuard()).listPlayerTransactions, { userId: USER_ID, page: 1, limit: 20 }, { context: CTX });
+        expect(result.total).toBe(1);
+        expect(result.items[0]?.amount).toBe('10.00000000');
     });
 });
 //# sourceMappingURL=wallet.router.test.js.map

package/dist/wallet/__tests__/wallet.router.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"wallet.router.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet.router.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAOvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;AAC1B,MAAM,SAAS,GAAG,GAAmB,EAAE,CAAC,IAAI,CAAiB,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAClF,MAAM,WAAW,GAAG,GAAmB,EAAE,CAAC,IAAI,CAAiB,EAAE,CAAC,CAAC;AACnE,MAAM,mBAAmB,GAAG,GAA2B,EAAE,CACvD,IAAI,CAAyB,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC3E,MAAM,OAAO,GAAG,sCAAsC,CAAC;AAEvD,SAAS,UAAU;IACjB,OAAO,IAAI,CAAgB;QACzB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;KACxF,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,SAAS,2BAA2B;IAClC,OAAO,IAAI,CAAa;QACtB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAa,EAAE,QAAiB,EAAE,EAAE;YACvD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;gBAC/B,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9D,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,IAAI,CAAa;QACtB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,kBAAkB,CAC/B,MAAM,EACN,2BAA2B,EAAE,EAC7B,SAAS,EAAE,EACX,WAAW,EAAE,EACb,mBAAmB,EAAE,CACtB,CAAC;QAEF,MAAM,MAAM,CACV,IAAI,CACF,MAAM,CAAC,sBAAsB,EAC7B,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EACvC,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CACF,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,kBAAkB,CAC/B,MAAM,EACN,iBAAiB,EAAE,EACnB,SAAS,EAAE,EACX,WAAW,EAAE,EACb,mBAAmB,EAAE,CACtB,CAAC;QAEF,MAAM,IAAI,CACR,MAAM,CAAC,sBAAsB,EAC7B,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EACvC,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC;YAClD,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"wallet.router.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet.router.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,YAAY,EAAe,MAAM,uBAAuB,CAAC;AAClE,OAAO,EACL,IAAI,EACJ,YAAY,EACZ,WAAW,EACX,eAAe,EACf,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;AAC1B,MAAM,OAAO,GAAG,sCAAsC,CAAC;AAEvD,IAAI,EAAU,CAAC;AAEf,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC9C,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,SAAS,iBAAiB;IACxB,OAAO,IAAI,aAAa,CAAC;QACvB,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,MAAM,EAAE,YAAY,EAAE;QACtB,OAAO,EAAE,IAAI,CAAiB,EAAE,CAAC;QACjC,KAAK,EAAE,eAAe,EAAE;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,UAAsB;IACxC,OAAO,kBAAkB,CACvB,iBAAiB,EAAE,EACnB,UAAU,EACV,eAAe,EAAE,EACjB,IAAI,CAAiB,EAAE,CAAC,EACxB,IAAI,CAAyB,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,uBAAuB,GAAG,GAAG,EAAE,CACnC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AAE7F,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;AAE/E,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,OAAiB;IACzD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAC9B,MAAM,CAAC,MAAM,CAAC;SACd,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SACjD,SAAS,EAAE,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;YACnD,QAAQ,EAAE,GAAI,CAAC,EAAE;YACjB,IAAI,EAAE,SAAS;YACf,MAAM;YACN,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAErC,MAAM,MAAM,CACV,IAAI,CACF,UAAU,CAAC,uBAAuB,EAAE,CAAC,CAAC,sBAAsB,EAC5D,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EACvC,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CACF,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,sBAAsB,EAClD,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EACvC,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrC,MAAM,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,sBAAsB,EAClD,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EACvC,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}