73 lines
4.5 KiB
JavaScript
73 lines
4.5 KiB
JavaScript
import assert from 'node:assert/strict'
|
|
import { readFileSync } from 'node:fs'
|
|
import test from 'node:test'
|
|
|
|
import { inspectOceanBookingIdentity, truckAppointmentPayload } from './truck-appointments.mjs'
|
|
|
|
test('booking identity is marker scoped and contains no customer snapshot', () => {
|
|
const result = inspectOceanBookingIdentity('RUN-2', { id: '91', marker: 'RUN-2', warehouseId: '41' })
|
|
assert.deepEqual(result.identity, { oceanBookingId: '91', warehouseId: '41' })
|
|
assert.equal(Object.hasOwn(result.identity, 'customerId'), false)
|
|
assert.equal(inspectOceanBookingIdentity('RUN-2', { id: '90', marker: 'RUN-1', warehouseId: '41' }).identity, null)
|
|
})
|
|
|
|
test('payload requires booking container and carrier but never emits customer fields', () => {
|
|
const context = { createdResources: { truckSupplier: { supplierId: '501', supplierName: '正式拖车商' } } }
|
|
const payload = truckAppointmentPayload(context, '2', {
|
|
oceanBookingId: '91', containerBookingId: '81', loadingPlanId: '71', warehouseId: '41', billOfLadingNo: 'BL-1',
|
|
})
|
|
assert.deepEqual({ oceanBookingId: payload.oceanBookingId, containerBookingId: payload.containerBookingId,
|
|
carrierId: payload.carrierId, carrierName: payload.carrierName },
|
|
{ oceanBookingId: '91', containerBookingId: '81', carrierId: '501', carrierName: '正式拖车商' })
|
|
assert.equal(Object.hasOwn(payload, 'customerId'), false)
|
|
assert.equal(Object.hasOwn(payload, 'customerName'), false)
|
|
})
|
|
|
|
test('backend DTO entity mapper service and OpenAPI have no truck customer protocol', () => {
|
|
const paths = [
|
|
'../../firstleg/src/main/java/com/baiyue/firstleg/dto/TruckAppointmentDtos.java',
|
|
'../../firstleg/src/main/java/com/baiyue/firstleg/entity/TruckAppointmentEntity.java',
|
|
'../../firstleg/src/main/java/com/baiyue/firstleg/mapper/TruckAppointmentMapper.java',
|
|
'../../firstleg/src/main/java/com/baiyue/firstleg/service/TruckAppointmentService.java',
|
|
'../../firstleg/src/main/resources/openapi/truck-appointments-v1.yaml',
|
|
]
|
|
for (const path of paths) {
|
|
const source = readFileSync(new URL(path, import.meta.url), 'utf8')
|
|
assert.doesNotMatch(source, /customerId|customerName|customer_id|customer_name/)
|
|
}
|
|
})
|
|
|
|
test('backend freezes released booking real container bill file and carrier rules', () => {
|
|
const dto = readFileSync(new URL('../../firstleg/src/main/java/com/baiyue/firstleg/dto/TruckAppointmentDtos.java', import.meta.url), 'utf8')
|
|
assert.match(dto, /@NotNull @Positive Long oceanBookingId/)
|
|
assert.match(dto, /@NotNull @Positive Long containerBookingId/)
|
|
assert.match(dto, /@NotNull @Positive Long carrierId/)
|
|
const service = readFileSync(new URL('../../firstleg/src/main/java/com/baiyue/firstleg/service/TruckAppointmentService.java', import.meta.url), 'utf8')
|
|
for (const token of ['"RELEASED"', 'containerBookingId未分配至该订舱', 'Iso6346ContainerNumber.require',
|
|
'oceanBookingDocuments.requireActiveValidDocument', 'suppliers.trucking', 'uk_truck_active_container']) {
|
|
assert.ok(service.includes(token), `missing ${token}`)
|
|
}
|
|
})
|
|
|
|
test('HTTP regression covers no-customer response and submit idempotency matrix', () => {
|
|
const source = readFileSync(new URL('truck-appointments.mjs', import.meta.url), 'utf8')
|
|
for (const label of ['响应不含客户字段且冻结订舱柜号关系', '同键同载荷重放', '提交幂等重放零漂移',
|
|
'同键异载荷拒绝', '提单号与订舱不一致拒绝创建']) assert.match(source, new RegExp(label))
|
|
assert.doesNotMatch(source, /customerId\s*:|customerName\s*:|独立拖车/)
|
|
})
|
|
|
|
test('schema owns platform attachments and one active appointment per real container', () => {
|
|
const sql = readFileSync(new URL('../../firstleg/src/main/resources/db/phase3-truck-appointment-schema.sql', import.meta.url), 'utf8')
|
|
assert.doesNotMatch(sql, /customer_id|customer_name|idx_truck_appointment_customer/)
|
|
assert.match(sql, /UNIQUE KEY uk_truck_active_container\(active_container_booking_id\)/)
|
|
assert.match(sql, /visibility VARCHAR\(24\) NOT NULL DEFAULT 'PLATFORM'/)
|
|
})
|
|
|
|
test('method permissions remain independently enforced after removing customer scope', () => {
|
|
const controller = readFileSync(new URL('../../firstleg/src/main/java/com/baiyue/firstleg/controller/PlatformTruckAppointmentController.java', import.meta.url), 'utf8')
|
|
for (const permission of ['platform:firstleg:truck-appointment:list', 'platform:firstleg:truck-appointment:create',
|
|
'platform:firstleg:truck-appointment:edit', 'platform:firstleg:truck-appointment:operate']) {
|
|
assert.match(controller, new RegExp(`hasAuthority\\('${permission}'\\)`))
|
|
}
|
|
})
|