admin-web/src/app/router/index.test.ts

import { describe, expect, it } from 'vitest'
import { adminNavigation, getNavigationLeaves } from '@/core/navigation/adminNavigation'
import router from './index'

describe('admin router access metadata', () => {
  it('uses the root route only as a permission-aware entry point while retaining the dashboard prototype', () => {
    const home = router.getRoutes().find((route) => route.name === 'home')

    expect(home?.path).toBe('/')
    expect(home?.meta.permission).toBeUndefined()
    expect(router.getRoutes().some((route) => route.name === 'dashboard')).toBe(true)
  })

  it('protects warehouse management with its stable list permission', () => {
    const warehouseRoute = router.getRoutes().find((route) => route.name === 'warehouses')

    expect(warehouseRoute?.path).toBe('/warehouses')
    expect(warehouseRoute?.meta.permission).toBe('platform:warehouse:list')
  })

  it('protects phase-two inbound operations and master data with deployed permissions', () => {
    const expected = [
      ['inbound-orders', '/inbounds', 'platform:firstleg:inbound:list'],
      ['inbound-order-detail', '/inbounds/:inboundId', 'platform:firstleg:inbound:view'],
      ['fba-customer-rules', '/first-leg-pricing/customer-rules', 'firstleg:fba-pricing:rule:view'],
      ['fba-carrier-rates', '/first-leg-pricing/carrier-rates', 'firstleg:fba-pricing:rate:view'],
      ['locations', '/master-data/locations', 'platform:location:list'],
      ['pallets', '/master-data/pallets', 'platform:pallet:list'],
    ]

    for (const [name, path, permission] of expected) {
      const route = router.getRoutes().find((item) => item.name === name)
      expect(route?.path).toBe(path)
      expect(route?.meta.permission).toBe(permission)
    }
  })

  it('protects express company records with a stable master-data permission', () => {
    const route = router.getRoutes().find((item) => item.name === 'express-companies')

    expect(route?.path).toBe('/master-data/express-companies')
    expect(route?.meta.permission).toBe('platform:express:list')
  })

  it('protects counterparty records with a stable master-data permission', () => {
    const route = router.getRoutes().find((item) => item.name === 'counterparties')
    expect(route?.path).toBe('/master-data/counterparties')
    expect(route?.meta.permission).toBe('platform:counterparty:list')
  })

  it('protects the download center with its stable list permission', () => {
    const route = router.getRoutes().find((item) => item.name === 'download-center')
    expect(route?.path).toBe('/downloads')
    expect(route?.meta.permission).toBe('platform:download:list')
  })

  it('redirects the removed enterprise review route to the protected customer list', () => {
    const route = router.getRoutes().find((item) => item.name === 'enterprise-reviews')

    expect(route?.path).toBe('/customers/reviews')
    expect(route?.redirect).toBe('/customers')
    expect(route?.meta.permission).toBe('platform:customer:list')
    expect(route?.meta.permissionAnyOf).toContain('platform:customer:review')
  })

  it('keeps forbidden inside the authenticated layout without a business permission', () => {
    const authenticatedLayout = router.options.routes.find((route) => route.path === '/')
    const forbidden = authenticatedLayout?.children?.find((route) => route.name === 'forbidden')
    const resolved = router.resolve('/403')

    expect(authenticatedLayout?.meta?.requiresAuth).toBe(true)
    expect(forbidden?.path).toBe('403')
    expect(forbidden?.meta?.permission).toBeUndefined()
    expect(resolved.matched.some((record) => record.meta.requiresAuth)).toBe(true)
  })

  it('keeps visible navigation paths and permissions aligned with routes', () => {
    for (const item of getNavigationLeaves(adminNavigation)) {
      const resolved = router.resolve(item.path)
      const pageRoute = resolved.matched.at(-1)

      expect(pageRoute, `missing route for ${item.path}`).toBeDefined()
      expect(pageRoute?.meta.permission, `permission mismatch for ${item.path}`).toBe(item.permission)
    }
  })
})