@things-factory/auth-base 10.1.254 → 10.1.256

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/auth-base",
-  "version": "10.1.254",
+  "version": "10.1.256",
   "main": "dist-server/index.js",
   "browser": "dist-client/index.js",
   "things-factory": true,
@@ -50,5 +50,5 @@
     "passport-jwt": "^4.0.0",
     "passport-local": "^1.0.0"
   },
-  "gitHead": "793e2fd617db5bb917ec892e64956fb690f7e7b0"
+  "gitHead": "2fd641697190ce6e87bcf454a60b2321553e8110"
 }

package/tests/audit-work.test.ts

@@ -0,0 +1,58 @@
+/**
+ * Work done through the doors (ADR-0185 decision 6) - read from the audit: a declared mutation that went through is a
+ * piece of the person's work on that day; an undeclared one, a failed one, another person's or another day's is not.
+ */
+
+import { authDataSource, closeAuthDatabase, Domain, getRepository, openAuthDatabase, resetAuthDatabase } from './db'
+import { loadCompiled } from './compiled'
+
+const { registerWorkDoors, workDoneBy } = loadCompiled('service/audit/audit-work')
+const { AuditAction } = loadCompiled('service/audit/audit-action')
+const { AuditRequest } = loadCompiled('service/audit/audit-request')
+const { User } = loadCompiled('service/user/user')
+
+let domain: any, kim: any, lee: any
+
+beforeAll(async () => {
+  await openAuthDatabase()
+})
+afterAll(async () => {
+  await closeAuthDatabase()
+})
+
+beforeEach(async () => {
+  await resetAuthDatabase()
+  domain = await getRepository(Domain).save({ name: 'work', subdomain: 'work' })
+  kim = await getRepository(User).save({ name: 'kim', email: 'kim@work.test', status: 'activated' })
+  lee = await getRepository(User).save({ name: 'lee', email: 'lee@work.test', status: 'activated' })
+})
+
+const request = async (actor: any, at: string, fields: string, outcome: 'ok' | 'error' | 'both' | null, operationType = 'mutation') => {
+  const one = await getRepository(AuditRequest).save({ id: require('crypto').randomUUID(), domain, actor, createdAt: new Date(at), channel: 'graphql', operationType, fields })
+  for (const each of outcome === 'both' ? ['ok', 'error'] : outcome ? [outcome] : [])
+    await getRepository(AuditAction).save({ domain, actor, requestId: one.id, createdAt: new Date(at), kind: 'door.result', door: 'office:mutation', outcome: each })
+  return one
+}
+
+it('a declared mutation that went through is a piece of work, once per request and work', async () => {
+  registerWorkDoors([
+    { work: 'work.office.bank-lines', fields: ['updateMultipleCashTransaction', 'createCashTransaction'] },
+    { work: 'work.office.tax-invoices', fields: ['importOfficeTaxInvoices'] }
+  ])
+  expect(() => registerWorkDoors([{ work: 'work.other', fields: ['importOfficeTaxInvoices'] }])).toThrow(/declared as the work/)
+
+  await request(kim, '2026-11-10T01:00:00Z', 'updateMultipleCashTransaction,createCashTransaction', 'ok')
+  await request(kim, '2026-11-10T02:00:00Z', 'importOfficeTaxInvoices', 'ok')
+  await request(kim, '2026-11-10T03:00:00Z', 'importOfficeTaxInvoices', 'error')
+  await request(kim, '2026-11-10T03:30:00Z', 'createCashTransaction,importOfficeTaxInvoices', 'both')
+  await request(kim, '2026-11-10T04:00:00Z', 'saveMyDraft', 'ok')
+  await request(kim, '2026-11-10T05:00:00Z', 'importOfficeTaxInvoices', 'ok', 'query')
+  await request(lee, '2026-11-10T06:00:00Z', 'importOfficeTaxInvoices', 'ok')
+  await request(kim, '2026-11-17T01:00:00Z', 'importOfficeTaxInvoices', 'ok')
+
+  const done = await workDoneBy(authDataSource().manager, domain, kim.id, new Date('2026-11-09T00:00:00Z'), new Date('2026-11-16T00:00:00Z'))
+  expect(done.map((one: any) => [one.at.toISOString(), one.work])).toEqual([
+    ['2026-11-10T01:00:00.000Z', 'work.office.bank-lines'],
+    ['2026-11-10T02:00:00.000Z', 'work.office.tax-invoices']
+  ])
+})