const Fastify = require("fastify"); const weeklyReportsRoutes = require("../../../src/routes/weeklyReports"); async function buildApp(options = {}) { const app = Fastify(); let row = options.row; const prisma = { featureFlag: { findUnique: vi.fn().mockResolvedValue({ flag_key: "weekly_report_v1", override_mode: "force_on", rollout_type: "global", department_ids: [] }) }, weeklyReport: { findUnique: vi.fn(async () => row ?? null), findMany: vi.fn(async () => row ? [row] : []), create: vi.fn(async ({ data }) => (row = { id: "synthetic-report", ...data, status: "draft", project_links: [] })), update: vi.fn(async ({ data }) => (row = { ...row, ...data })), }, projectLinkOnWeeklyReport: { deleteMany: vi.fn(), createMany: vi.fn() }, employee: { findMany: vi.fn().mockResolvedValue([]) }, $transaction: vi.fn(async (callback) => callback(prisma)), }; app.decorate("prisma", prisma); app.decorate("config", { weeklyReportEnabled: options.enabled ?? true, projectLinkingEnabled: options.projectLinking ?? false, appTimezone: "Asia/Shanghai" }); app.decorate("authenticate", async (request) => { request.employee = { id: "synthetic-employee", department_id: null }; }); app.decorate("hasPermission", () => options.allowed ?? true); app.setErrorHandler((error, request, reply) => reply.status(error.statusCode || 500).send({ error: { code: error.code, details: error.details } })); await app.register(weeklyReportsRoutes, { prefix: "/api" }); return { app, prisma }; } describe("weekly report raw date validation before Monday normalization", () => { const routes = [["GET", "/weekly-reports/me"], ["GET", "/weekly-reports/team"], ["PUT", "/weekly-reports/me"], ["POST", "/weekly-reports/me/submit"]]; it.each(routes.flatMap(([method, url]) => ["2026-02-29", "2026-04-31", "2026-13-01", ""].map((date) => [method, url, date])))("rejects %s %s date=%s without creating a draft", async (method, url, date) => { const { app, prisma } = await buildApp(); try { const response = await app.inject({ method, url: `/api${url}` + (method === "GET" ? `?weekStart=${date}` : ""), ...(method === "GET" ? {} : { payload: { weekStart: date } }) }); expect(response.statusCode).toBe(400); expect(response.json().error.details.reasonCode).toBe(method === "GET" ? "weekly_report.query_invalid" : method === "PUT" ? "weekly_report.write_input_invalid" : "weekly_report.submit_input_invalid"); expect(response.json().error.details.fieldErrors.weekStart.length).toBeGreaterThan(0); expect(prisma.weeklyReport.findUnique).not.toHaveBeenCalled(); expect(prisma.weeklyReport.create).not.toHaveBeenCalled(); expect(prisma.weeklyReport.update).not.toHaveBeenCalled(); expect(prisma.$transaction).not.toHaveBeenCalled(); } finally { await app.close(); } }); it.each([["2024-02-29", "2024-02-26"], ["2026-04-30", "2026-04-27"]])("keeps %s normalized to Monday %s", async (date, monday) => { const { app, prisma } = await buildApp(); try { const response = await app.inject({ method: "PUT", url: "/api/weekly-reports/me", payload: { weekStart: date, highlightsText: "合成周报" } }); expect(response.statusCode).toBe(200); expect(response.json().data.item.weekStart).toBe(monday); expect(prisma.weeklyReport.create.mock.calls[0][0].data.week_start).toEqual(new Date(`${monday}T00:00:00.000Z`)); } finally { await app.close(); } }); it("keeps omitted week supported and null invalid", async () => { const { app, prisma } = await buildApp(); try { const response = await app.inject({ method: "GET", url: "/api/weekly-reports/me" }); expect(response.statusCode).toBe(200); expect(prisma.weeklyReport.create.mock.calls[0][0].data.week_start.getUTCDay()).toBe(1); prisma.weeklyReport.update.mockClear(); const invalid = await app.inject({ method: "PUT", url: "/api/weekly-reports/me", payload: { weekStart: null } }); expect(invalid.statusCode).toBe(400); expect(prisma.weeklyReport.update).not.toHaveBeenCalled(); } finally { await app.close(); } }); }); describe("weekly report operation contracts", () => { it.each([[{}, "write_input_invalid"], [{ highlightsText: "x".repeat(5001) }, "write_input_invalid"], [{ projectLinks: Array.from({ length: 21 }, () => ({ projectId: "11111111-1111-4111-8111-111111111111" })) }, "write_input_invalid"]])("rejects invalid write %s before draft", async (payload, reason) => { const { app, prisma } = await buildApp(); try { const r = await app.inject({ method: "PUT", url: "/api/weekly-reports/me", payload }); expect(r.statusCode).toBe(400); expect(r.json().error.details.reasonCode).toBe(`weekly_report.${reason}`); expect(prisma.weeklyReport.create).not.toHaveBeenCalled(); expect(prisma.weeklyReport.update).not.toHaveBeenCalled(); } finally { await app.close(); } }); it("preserves feature and team permission guards", async () => { for (const [options, path, status, reason] of [[{ enabled: false }, "me", 409, "weekly_report.feature_disabled"], [{ allowed: false }, "team", 403, undefined]]) { const { app, prisma } = await buildApp(options); try { const r = await app.inject({ url: `/api/weekly-reports/${path}?weekStart=bad` }); expect(r.statusCode).toBe(status); if (reason) expect(r.json().error.details.reasonCode).toBe(reason); expect(prisma.weeklyReport.findUnique).not.toHaveBeenCalled(); expect(prisma.weeklyReport.create).not.toHaveBeenCalled(); expect(prisma.employee.findMany).not.toHaveBeenCalled(); } finally { await app.close(); } } }); it("preserves submitted read-only", async () => { const { app, prisma } = await buildApp({ row: { id: "synthetic", status: "submitted" } }); try { const r = await app.inject({ method: "PUT", url: "/api/weekly-reports/me", payload: { needsHelp: true } }); expect(r.statusCode).toBe(409); expect(r.json().error.details).toEqual({ status: "submitted_readonly", reasonCode: "weekly_report.submitted_readonly" }); expect(prisma.weeklyReport.update).not.toHaveBeenCalled(); expect(prisma.$transaction).not.toHaveBeenCalled(); } finally { await app.close(); } }); it("keeps original update attempt before project gate rejection", async () => { const { app, prisma } = await buildApp(); try { const r = await app.inject({ method: "PUT", url: "/api/weekly-reports/me", payload: { highlightsText: "合成", projectLinks: [] } }); expect(r.statusCode).toBe(409); expect(r.json().error.details.reasonCode).toBe("weekly_report.project_linking_disabled"); expect(prisma.weeklyReport.create).toHaveBeenCalledOnce(); expect(prisma.weeklyReport.update).toHaveBeenCalledOnce(); expect(prisma.projectLinkOnWeeklyReport.deleteMany).not.toHaveBeenCalled(); expect(prisma.projectLinkOnWeeklyReport.createMany).not.toHaveBeenCalled(); } finally { await app.close(); } }); it("retains 20 links and repeated submission semantics", async () => { const { app, prisma } = await buildApp({ projectLinking: true }); try { const r = await app.inject({ method: "PUT", url: "/api/weekly-reports/me", payload: { projectLinks: Array.from({ length: 20 }, () => ({ projectId: "11111111-1111-4111-8111-111111111111" })) } }); expect(r.statusCode).toBe(200); expect(prisma.projectLinkOnWeeklyReport.createMany.mock.calls[0][0].data).toHaveLength(20); for (let i = 0; i < 2; i += 1) expect((await app.inject({ method: "POST", url: "/api/weekly-reports/me/submit", payload: {} })).statusCode).toBe(200); expect(prisma.weeklyReport.update).toHaveBeenCalledTimes(3); } finally { await app.close(); } }); });