chore: wire Carplace into dev and production stacks

apps/api/src/tests/api/employee-carplace-notification.api.test.ts

@@ -0,0 +1,135 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+vi.mock('../../lib/prisma', () => ({ prisma: {} }))
+vi.mock('../../lib/redis', () => ({
+  redis: { on: vi.fn(), get: vi.fn(), set: vi.fn(), del: vi.fn(), quit: vi.fn() },
+}))
+vi.mock('../../middleware/requireCompanyAuth', () => ({
+  requireCompanyDocumentAuth: (_req: any, _res: any, next: any) => next(),
+  requireCompanyAuth: (req: any, _res: any, next: any) => {
+    req.employee = { id: 'employee_1', role: 'MANAGER', firstName: 'Aya', lastName: 'Manager' }
+    next()
+  },
+}))
+vi.mock('../../middleware/requireTenant', () => ({
+  requireTenant: (req: any, _res: any, next: any) => {
+    req.companyId = 'company_1'
+    next()
+  },
+}))
+vi.mock('../../middleware/requireSubscription', () => ({ requireSubscription: (_req: any, _res: any, next: any) => next() }))
+vi.mock('../../modules/auth/auth.employee.service', () => ({
+  getMe: vi.fn(),
+  login: vi.fn(),
+  forgotPassword: vi.fn(),
+  updateLanguage: vi.fn(),
+  resetPassword: vi.fn(),
+}))
+vi.mock('../../modules/menu/menu.service', () => ({ getEmployeeMenu: vi.fn() }))
+vi.mock('../../modules/notifications/notification.service', () => ({
+  listCompany: vi.fn(),
+  countUnread: vi.fn(),
+  markRead: vi.fn(),
+  markAllRead: vi.fn(),
+  getPreferences: vi.fn(),
+  setPreferences: vi.fn(),
+  listCompanyHistory: vi.fn(),
+  listRenter: vi.fn(),
+  markRenterRead: vi.fn(),
+  markAllRenterRead: vi.fn(),
+  getRenterPreferences: vi.fn(),
+  setRenterPreferences: vi.fn(),
+}))
+vi.mock('../../modules/carplace/carplace.service', () => ({
+  getCities: vi.fn(),
+  getListedCompanies: vi.fn(),
+  searchVehicles: vi.fn(),
+  getVehicleDetail: vi.fn(),
+  createCarplaceReservation: vi.fn(),
+  getCompanyPage: vi.fn(),
+  getCompanyReviews: vi.fn(),
+  getCompanyVehicles: vi.fn(),
+  getVehicle: vi.fn(),
+  getCompanyOffers: vi.fn(),
+  getReviewContext: vi.fn(),
+  submitReview: vi.fn(),
+  validateOfferCode: vi.fn(),
+  getPublicOffers: vi.fn(),
+}))
+
+import request from 'supertest'
+import { createApp } from '../../app'
+import * as employeeService from '../../modules/auth/auth.employee.service'
+import * as notificationService from '../../modules/notifications/notification.service'
+import * as carplaceService from '../../modules/carplace/carplace.service'
+
+const app = createApp()
+
+describe('employee, notification, and carplace API validation contracts', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    vi.mocked(employeeService.login).mockResolvedValue({ token: 'jwt', employee: { id: 'employee_1' } } as never)
+    vi.mocked(employeeService.forgotPassword).mockResolvedValue({ message: 'If that email is registered, a reset link has been sent.' } as never)
+    vi.mocked(employeeService.updateLanguage).mockResolvedValue({ language: 'ar' } as never)
+    vi.mocked(employeeService.resetPassword).mockResolvedValue({ message: 'Password updated successfully. You can now sign in.' } as never)
+    vi.mocked(notificationService.setPreferences).mockResolvedValue({ success: true } as never)
+    vi.mocked(carplaceService.searchVehicles).mockResolvedValue({ companies: [], vehicles: [], pagination: { page: 1, pageSize: 20, total: 0 } } as never)
+    vi.mocked(carplaceService.submitReview).mockResolvedValue({ id: 'review_1' } as never)
+  })
+
+  it('normalizes employee login email before service execution', async () => {
+    const res = await request(app).post('/api/v1/auth/employee/login').send({
+      email: 'Agent@Example.TEST',
+      password: 'valid-password',
+    })
+
+    expect(res.status).toBe(200)
+    expect(employeeService.login).toHaveBeenCalledWith({ email: 'agent@example.test', password: 'valid-password' })
+  })
+
+  it('rejects empty employee reset tokens before service execution', async () => {
+    const res = await request(app).post('/api/v1/auth/employee/reset-password').send({ token: '', password: 'new-password' })
+
+    expect(res.status).toBe(400)
+    expect(employeeService.resetPassword).not.toHaveBeenCalled()
+  })
+
+  it('forwards authenticated language updates with the employee id from auth context', async () => {
+    const res = await request(app).patch('/api/v1/auth/employee/me/language').send({ language: 'ar' })
+
+    expect(res.status).toBe(200)
+    expect(employeeService.updateLanguage).toHaveBeenCalledWith('employee_1', 'ar')
+  })
+
+  it('rejects malformed notification preferences before persistence', async () => {
+    const res = await request(app).patch('/api/v1/notifications/company/preferences').send({
+      preferences: [{ notificationType: 'RESERVATION_CREATED', channel: 'EMAIL', enabled: true }],
+    })
+
+    expect(res.status).toBe(400)
+    expect(notificationService.setPreferences).not.toHaveBeenCalled()
+  })
+
+  it('defaults carplace search pagination at the public route boundary', async () => {
+    const res = await request(app).get('/api/v1/carplace/search?city=Casablanca')
+
+    expect(res.status).toBe(200)
+    expect(carplaceService.searchVehicles).toHaveBeenCalledWith(expect.objectContaining({
+      city: 'Casablanca',
+      page: 1,
+      pageSize: 20,
+    }))
+  })
+
+  it('rejects out-of-range public review ratings before service execution', async () => {
+    const res = await request(app).post('/api/v1/carplace/review/token_123').send({
+      overallRating: 6,
+      vehicleRating: 5,
+      serviceRating: 5,
+      comment: 'Too magical',
+    })
+
+    expect(res.status).toBe(400)
+    expect(carplaceService.submitReview).not.toHaveBeenCalled()
+  })
+})