@selvajs/platform 0.14.2 → 0.15.0-beta.1

package/src/testing/suites/platformProjectGrantStoreSuite.ts

@@ -1,166 +0,0 @@
-/**
- * Adapter conformance suite for IPlatformProjectGrantStore.
- *
- * Grants are hard-deleted (no soft-delete column). Tests cover the round-trip,
- * dedup on (projectId, granteeType, granteeId), and the cascade hooks
- * (`deleteByProject` + `deleteByGranteeOrg`).
- */
-
-import { describe, it, expect } from 'vitest';
-import type { IPlatformProjectGrantStore } from '../../platformProjects/interface.js';
-import type { PlatformProjectGrant } from '../../platformProjects/types.js';
-import { SYSTEM_CONTEXT } from '../../context.js';
-import { makeUuid } from './helpers.js';
-
-export interface PlatformProjectGrantStoreConformanceOptions {
-	name: string;
-	createStore: () => Promise<IPlatformProjectGrantStore> | IPlatformProjectGrantStore;
-	/**
-	 * Optional hook for adapters with FK constraints to seed a `projects` row
-	 * before the suite writes a grant that references it. Adapters without FKs
-	 * (local JSON) can omit this.
-	 */
-	seedProject?: (projectId: string) => Promise<void>;
-}
-
-function grant(overrides: Partial<PlatformProjectGrant> = {}): PlatformProjectGrant {
-	return {
-		id: overrides.id ?? makeUuid(),
-		projectId: overrides.projectId ?? makeUuid(),
-		granteeType: overrides.granteeType ?? 'org',
-		granteeId: overrides.granteeId ?? makeUuid(),
-		canSolve: overrides.canSolve ?? false,
-		createdBy: overrides.createdBy ?? makeUuid(),
-		createdAt: overrides.createdAt ?? new Date().toISOString()
-	};
-}
-
-export function runPlatformProjectGrantStoreConformance(
-	opts: PlatformProjectGrantStoreConformanceOptions
-): void {
-	const { name, createStore, seedProject } = opts;
-	const seed = async (): Promise<string> => {
-		const id = makeUuid();
-		if (seedProject) await seedProject(id);
-		return id;
-	};
-
-	describe(`IPlatformProjectGrantStore conformance: ${name}`, () => {
-		it('create + listByProject round-trips the grant', async () => {
-			const store = await createStore();
-			const projectId = await seed();
-			const g = grant({ projectId, granteeType: 'org', canSolve: true });
-			await store.create(SYSTEM_CONTEXT, g);
-
-			const got = await store.listByProject(SYSTEM_CONTEXT, projectId);
-			expect(got).toHaveLength(1);
-			expect(got[0].id).toBe(g.id);
-			expect(got[0].canSolve).toBe(true);
-			expect(got[0].granteeType).toBe('org');
-		});
-
-		it('listByProject scopes to the requested project', async () => {
-			const store = await createStore();
-			const p1 = await seed();
-			const p2 = await seed();
-			await store.create(SYSTEM_CONTEXT, grant({ projectId: p1 }));
-			await store.create(SYSTEM_CONTEXT, grant({ projectId: p2 }));
-
-			const got = await store.listByProject(SYSTEM_CONTEXT, p1);
-			expect(got).toHaveLength(1);
-			expect(got[0].projectId).toBe(p1);
-		});
-
-		it('create rejects duplicate (projectId, granteeType, granteeId)', async () => {
-			const store = await createStore();
-			const projectId = await seed();
-			const granteeId = makeUuid();
-			await store.create(SYSTEM_CONTEXT, grant({ projectId, granteeType: 'org', granteeId }));
-			await expect(
-				store.create(SYSTEM_CONTEXT, grant({ projectId, granteeType: 'org', granteeId }))
-			).rejects.toThrow();
-		});
-
-		it('user and org grants for the same id coexist (different granteeType)', async () => {
-			const store = await createStore();
-			const projectId = await seed();
-			const sharedId = makeUuid();
-			await store.create(
-				SYSTEM_CONTEXT,
-				grant({ projectId, granteeType: 'org', granteeId: sharedId })
-			);
-			await store.create(
-				SYSTEM_CONTEXT,
-				grant({ projectId, granteeType: 'user', granteeId: sharedId })
-			);
-			const got = await store.listByProject(SYSTEM_CONTEXT, projectId);
-			expect(got).toHaveLength(2);
-		});
-
-		it('delete removes the grant and listByProject no longer returns it', async () => {
-			const store = await createStore();
-			const projectId = await seed();
-			const g = grant({ projectId });
-			await store.create(SYSTEM_CONTEXT, g);
-			await store.delete(SYSTEM_CONTEXT, g.id);
-
-			const got = await store.listByProject(SYSTEM_CONTEXT, projectId);
-			expect(got).toHaveLength(0);
-		});
-
-		it('delete on unknown id throws', async () => {
-			const store = await createStore();
-			await expect(store.delete(SYSTEM_CONTEXT, makeUuid())).rejects.toThrow();
-		});
-
-		it('deleteByProject removes every grant for that project', async () => {
-			const store = await createStore();
-			const target = await seed();
-			const other = await seed();
-			await store.create(SYSTEM_CONTEXT, grant({ projectId: target }));
-			await store.create(SYSTEM_CONTEXT, grant({ projectId: target }));
-			await store.create(SYSTEM_CONTEXT, grant({ projectId: other }));
-
-			await store.deleteByProject(SYSTEM_CONTEXT, target);
-
-			expect(await store.listByProject(SYSTEM_CONTEXT, target)).toHaveLength(0);
-			expect(await store.listByProject(SYSTEM_CONTEXT, other)).toHaveLength(1);
-		});
-
-		it('deleteByProject is a no-op when no grants exist', async () => {
-			const store = await createStore();
-			await expect(store.deleteByProject(SYSTEM_CONTEXT, makeUuid())).resolves.toBeUndefined();
-		});
-
-		it('deleteByGranteeOrg removes only org grants matching the id, leaving user grants', async () => {
-			const store = await createStore();
-			const projectId = await seed();
-			const orgId = makeUuid();
-			const userId = makeUuid();
-			await store.create(
-				SYSTEM_CONTEXT,
-				grant({ projectId, granteeType: 'org', granteeId: orgId })
-			);
-			await store.create(
-				SYSTEM_CONTEXT,
-				grant({ projectId, granteeType: 'user', granteeId: userId })
-			);
-			// A user grant whose granteeId happens to equal the orgId — must NOT be touched.
-			await store.create(
-				SYSTEM_CONTEXT,
-				grant({ projectId, granteeType: 'user', granteeId: orgId })
-			);
-
-			await store.deleteByGranteeOrg(SYSTEM_CONTEXT, orgId);
-
-			const remaining = await store.listByProject(SYSTEM_CONTEXT, projectId);
-			expect(remaining).toHaveLength(2);
-			expect(remaining.every((g) => g.granteeType === 'user')).toBe(true);
-		});
-
-		it('deleteByGranteeOrg is a no-op when no matching grants exist', async () => {
-			const store = await createStore();
-			await expect(store.deleteByGranteeOrg(SYSTEM_CONTEXT, makeUuid())).resolves.toBeUndefined();
-		});
-	});
-}

package/src/testing/suites/projectStoreSuite.ts

@@ -1,381 +0,0 @@
-// Conformance suite for IProjectStore: CRUD, membership, access checks across adapters.
-
-import { describe, it, expect } from 'vitest';
-import type { IProjectStore } from '../../projects/interface.js';
-import type { Project, ProjectMember } from '../../index.js';
-import { makeSeedHelpers, makeUuid, noopSeedUser, type SeedUserFn } from './helpers.js';
-
-export interface ProjectStoreConformanceOptions {
-	/** Name to show in test output (e.g. "local-provider"). */
-	name: string;
-	/**
-	 * Factory that returns a fresh store, the orgId to use for projects, and
-	 * the userId that owns the org (used to scope project ownership).
-	 * In single-org mode, return the pre-existing org's id.
-	 *
-	 * `ownerSessionToken` is optional — adapters that enforce auth at the DB
-	 * layer (Supabase RLS) must include it so `ctx(ownerId)` runs the call as
-	 * that authenticated user. Local providers can omit it.
-	 */
-	createStore: () => Promise<{
-		store: IProjectStore;
-		orgId: string;
-		ownerId: string;
-		ownerSessionToken?: string;
-	}>;
-	/**
-	 * Hook adapters with user FK constraints use to seed `auth.users` before
-	 * a conformance test references a user id. Returns the id the adapter
-	 * actually stored — callers use that, not the suggested one.
-	 */
-	seedUser?: SeedUserFn;
-	/** If true, run ctx-isolation tests (adapters with row-level security). */
-	ctxIsolation?: boolean;
-}
-
-function project(orgId: string, ownerId: string, overrides: Partial<Project> = {}): Project {
-	const now = new Date().toISOString();
-	return {
-		id: overrides.id ?? makeUuid(),
-		orgId,
-		name: overrides.name ?? 'Test Project',
-		slug: overrides.slug ?? `test-${Math.random().toString(36).slice(2, 8)}`,
-		visibility: overrides.visibility ?? 'private',
-		ownerId: overrides.ownerId ?? ownerId,
-		createdBy: overrides.createdBy ?? ownerId,
-		updatedBy: overrides.updatedBy ?? ownerId,
-		autoJoinOnUpload: overrides.autoJoinOnUpload ?? false,
-		createdAt: overrides.createdAt ?? now,
-		updatedAt: overrides.updatedAt ?? now,
-		deletedAt: overrides.deletedAt ?? null,
-		...overrides
-	};
-}
-
-function member(projectId: string, userId: string, role: ProjectMember['role']): ProjectMember {
-	const now = new Date().toISOString();
-	return {
-		projectId,
-		userId,
-		role,
-		joinedAt: now,
-		updatedAt: now,
-		updatedBy: userId,
-		deletedAt: null
-	};
-}
-
-export function runProjectStoreConformance(opts: ProjectStoreConformanceOptions): void {
-	const { name, createStore: rawCreateStore, seedUser = noopSeedUser, ctxIsolation = false } = opts;
-	const { seed, ctx, registerToken } = makeSeedHelpers(seedUser);
-	const createStore = async () => {
-		const result = await rawCreateStore();
-		if (result.ownerSessionToken) registerToken(result.ownerId, result.ownerSessionToken);
-		return result;
-	};
-
-	describe(`IProjectStore conformance: ${name}`, () => {
-		// ============================================================================
-		// Projects
-		// ============================================================================
-
-		it('createProject + getProject returns the project', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			const got = await store.getProject(ctx(ownerId), p.id);
-			expect(got?.name).toBe('Test Project');
-		});
-
-		it('getProject returns null for missing id', async () => {
-			const { store, ownerId } = await createStore();
-			const got = await store.getProject(ctx(ownerId), makeUuid());
-			expect(got).toBeNull();
-		});
-
-		it('getProjectBySlug finds project by slug', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId, { slug: 'my-proj' });
-			await store.createProject(ctx(ownerId), p);
-			const got = await store.getProjectBySlug(ctx(ownerId), orgId, 'my-proj');
-			expect(got?.id).toBe(p.id);
-		});
-
-		it('getProjectBySlug returns null for missing slug', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const got = await store.getProjectBySlug(ctx(ownerId), orgId, 'nonexistent');
-			expect(got).toBeNull();
-		});
-
-		it('updateProject modifies name, slug, description, visibility', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId, { slug: 'old', visibility: 'private' });
-			await store.createProject(ctx(ownerId), p);
-			await store.updateProject(ctx(ownerId), p.id, {
-				name: 'New Name',
-				slug: 'new-slug',
-				description: 'New desc',
-				visibility: 'org'
-			});
-			const got = await store.getProject(ctx(ownerId), p.id);
-			expect(got?.name).toBe('New Name');
-			expect(got?.slug).toBe('new-slug');
-			expect(got?.description).toBe('New desc');
-			expect(got?.visibility).toBe('org');
-		});
-
-		it('createProject rejects duplicate name in the same org (case-insensitive)', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			await store.createProject(ctx(ownerId), project(orgId, ownerId, { name: 'Shared' }));
-			await expect(
-				store.createProject(ctx(ownerId), project(orgId, ownerId, { name: 'shared' }))
-			).rejects.toThrow();
-		});
-
-		it('updateProject rejects renaming to a name already used in the same org', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const a = project(orgId, ownerId, { name: 'Alpha' });
-			const b = project(orgId, ownerId, { name: 'Beta' });
-			await store.createProject(ctx(ownerId), a);
-			await store.createProject(ctx(ownerId), b);
-			await expect(store.updateProject(ctx(ownerId), b.id, { name: 'ALPHA' })).rejects.toThrow();
-		});
-
-		it('deleteProject removes the project', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			await store.deleteProject(ctx(ownerId), p.id);
-			const got = await store.getProject(ctx(ownerId), p.id);
-			expect(got).toBeNull();
-		});
-
-		it('listProjects returns all projects with pagination', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			for (let i = 0; i < 3; i++) {
-				await store.createProject(
-					ctx(ownerId),
-					project(orgId, ownerId, { name: `Paginated ${i}` })
-				);
-			}
-			const page = await store.listProjects(ctx(ownerId), orgId, { limit: 2 });
-			expect(page.items.length).toBe(2);
-		});
-
-		// ============================================================================
-		// Project Members
-		// ============================================================================
-
-		it('addProjectMember + getProjectMember returns the member', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			const u2 = await seed();
-			await store.addProjectMember(ctx(ownerId), member(p.id, u2, 'editor'));
-			const got = await store.getProjectMember(ctx(ownerId), p.id, u2);
-			expect(got?.role).toBe('editor');
-		});
-
-		it('getProjectMember returns null for missing member', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			const got = await store.getProjectMember(ctx(ownerId), p.id, makeUuid());
-			expect(got).toBeNull();
-		});
-
-		it('updateProjectMemberRole changes role', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			const u2 = await seed();
-			await store.addProjectMember(ctx(ownerId), member(p.id, u2, 'viewer'));
-			await store.updateProjectMemberRole(ctx(ownerId), p.id, u2, 'editor');
-			const got = await store.getProjectMember(ctx(ownerId), p.id, u2);
-			expect(got?.role).toBe('editor');
-		});
-
-		it('removeProjectMember deletes the member', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			const u2 = await seed();
-			await store.addProjectMember(ctx(ownerId), member(p.id, u2, 'editor'));
-			await store.removeProjectMember(ctx(ownerId), p.id, u2);
-			const got = await store.getProjectMember(ctx(ownerId), p.id, u2);
-			expect(got).toBeNull();
-		});
-
-		it('listProjectMembers returns members with pagination', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			for (let i = 0; i < 3; i++) {
-				const u = await seed();
-				await store.addProjectMember(ctx(ownerId), member(p.id, u, 'viewer'));
-			}
-			const page = await store.listProjectMembers(ctx(ownerId), p.id, { limit: 2 });
-			expect(page.items.length).toBe(2);
-		});
-
-		// ============================================================================
-		// Audit fields + soft delete
-		// ============================================================================
-
-		it('createProject populates createdBy and updatedBy', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			const got = await store.getProject(ctx(ownerId), p.id);
-			expect(got?.createdBy).toBe(ownerId);
-			expect(got?.updatedBy).toBe(ownerId);
-			expect(got?.deletedAt ?? null).toBeNull();
-		});
-
-		it('updateProject advances updatedBy to the caller, preserves createdBy', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			const editor = await seed();
-			// Give the editor membership so the adapter's auth check (if any) permits
-			// the update. Conformance runs with permissive ctx defaults in practice.
-			await store.addProjectMember(ctx(ownerId), member(p.id, editor, 'editor'));
-			await store.updateProject(ctx(editor), p.id, { name: 'Renamed' });
-			const got = await store.getProject(ctx(ownerId), p.id);
-			expect(got?.updatedBy).toBe(editor);
-			expect(got?.createdBy).toBe(ownerId);
-		});
-
-		it('deleteProject soft-deletes — the project stops appearing in reads', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			await store.deleteProject(ctx(ownerId), p.id);
-			expect(await store.getProject(ctx(ownerId), p.id)).toBeNull();
-			expect(await store.getProjectBySlug(ctx(ownerId), orgId, p.slug)).toBeNull();
-			const listed = await store.listProjects(ctx(ownerId), orgId, { limit: 100 });
-			expect(listed.items.map((x) => x.id)).not.toContain(p.id);
-		});
-
-		it('deleteProject cascades soft-delete to project members', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			const u2 = await seed();
-			await store.addProjectMember(ctx(ownerId), member(p.id, u2, 'editor'));
-			await store.deleteProject(ctx(ownerId), p.id);
-			const got = await store.getProjectMember(ctx(ownerId), p.id, u2);
-			expect(got).toBeNull();
-			const listed = await store.listProjectMembers(ctx(ownerId), p.id, { limit: 100 });
-			expect(listed.items).toHaveLength(0);
-		});
-
-		it('removeProjectMember soft-deletes — the member stops appearing in reads', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			const u2 = await seed();
-			await store.addProjectMember(ctx(ownerId), member(p.id, u2, 'editor'));
-			await store.removeProjectMember(ctx(ownerId), p.id, u2);
-			expect(await store.getProjectMember(ctx(ownerId), p.id, u2)).toBeNull();
-		});
-
-		// ============================================================================
-		// reactivateProject — un-delete (slug-tombstone problem)
-		// ============================================================================
-
-		it('reactivateProject returns null when no tombstone exists for that slug', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const got = await store.reactivateProject(ctx(ownerId), orgId, 'no-such-slug');
-			expect(got).toBeNull();
-		});
-
-		it('reactivateProject clears the tombstone and surfaces it via getProject/getProjectBySlug', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId, { slug: 'revive-me' });
-			await store.createProject(ctx(ownerId), p);
-			await store.deleteProject(ctx(ownerId), p.id);
-			// Before reactivation: invisible
-			expect(await store.getProject(ctx(ownerId), p.id)).toBeNull();
-			expect(await store.getProjectBySlug(ctx(ownerId), orgId, 'revive-me')).toBeNull();
-
-			const revived = await store.reactivateProject(ctx(ownerId), orgId, 'revive-me');
-			expect(revived?.id).toBe(p.id);
-			expect(revived?.slug).toBe('revive-me');
-			// After reactivation: visible again
-			expect(await store.getProject(ctx(ownerId), p.id)).not.toBeNull();
-			expect(await store.getProjectBySlug(ctx(ownerId), orgId, 'revive-me')).not.toBeNull();
-		});
-
-		it('reactivateProject restores the owner project_member row', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId, { slug: 'member-revive' });
-			await store.createProject(ctx(ownerId), p);
-			await store.deleteProject(ctx(ownerId), p.id);
-			await store.reactivateProject(ctx(ownerId), orgId, 'member-revive');
-			const m = await store.getProjectMember(ctx(ownerId), p.id, ownerId);
-			expect(m?.role).toBe('owner');
-		});
-
-		it('createProject after delete+reactivate on the same slug works', async () => {
-			// This covers the bootstrap re-seed scenario: delete project, then createProject
-			// with the same slug succeeds after reactivating the tombstone.
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId, { slug: 'reseed-slug' });
-			await store.createProject(ctx(ownerId), p);
-			await store.deleteProject(ctx(ownerId), p.id);
-			await store.reactivateProject(ctx(ownerId), orgId, 'reseed-slug');
-			// Now it's live; a second delete + fresh createProject should work.
-			await store.deleteProject(ctx(ownerId), p.id);
-			await store.reactivateProject(ctx(ownerId), orgId, 'reseed-slug');
-			expect(await store.getProjectBySlug(ctx(ownerId), orgId, 'reseed-slug')).not.toBeNull();
-		});
-
-		// ============================================================================
-		// Project flags (autoJoinOnUpload)
-		// ============================================================================
-
-		it('create + get round-trips autoJoinOnUpload', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId, {
-				visibility: 'public',
-				autoJoinOnUpload: true
-			});
-			await store.createProject(ctx(ownerId), p);
-			const got = await store.getProject(ctx(ownerId), p.id);
-			expect(got?.autoJoinOnUpload).toBe(true);
-		});
-
-		it('flag defaults to false on a project created without it set', async () => {
-			const { store, orgId, ownerId } = await createStore();
-			const p = project(orgId, ownerId);
-			await store.createProject(ctx(ownerId), p);
-			const got = await store.getProject(ctx(ownerId), p.id);
-			expect(got?.autoJoinOnUpload).toBe(false);
-		});
-
-		if (ctxIsolation) {
-			it('ctx isolation: projects created by one user are not visible to another', async () => {
-				const { store, orgId } = await createStore();
-				const userA = await seed();
-				const userB = await seed();
-				const pA = project(orgId, userA);
-				await store.createProject(ctx(userA), pA);
-
-				const page = await store.listProjects(ctx(userB), orgId);
-				expect(page.items.map((p) => p.id)).not.toContain(pA.id);
-			});
-
-			it('ctx isolation: user cannot get a project they do not own', async () => {
-				const { store, orgId } = await createStore();
-				const userA = await seed();
-				const userB = await seed();
-				const pA = project(orgId, userA);
-				await store.createProject(ctx(userA), pA);
-
-				const got = await store.getProject(ctx(userB), pA.id);
-				expect(got).toBeNull();
-			});
-		}
-	});
-}