simstudioai--sim/apps/sim/lib/api/contracts/permission-groups.test.ts

/**
 * @vitest-environment node
 */
import { describe, expect, it } from 'vitest'
import {
  createPermissionGroupBodySchema,
  updatePermissionGroupBodySchema,
} from '@/lib/api/contracts/permission-groups'

describe('createPermissionGroupBodySchema', () => {
  it('accepts a name-only body (scope is resolved and validated server-side)', () => {
    const result = createPermissionGroupBodySchema.safeParse({ name: 'Engineering' })
    expect(result.success).toBe(true)
  })

  it('accepts a default group', () => {
    const result = createPermissionGroupBodySchema.safeParse({
      name: 'Baseline',
      isDefault: true,
    })
    expect(result.success).toBe(true)
  })

  it('accepts a specific-scope group with workspaces', () => {
    const result = createPermissionGroupBodySchema.safeParse({
      name: 'Contractors',
      workspaceIds: ['ws-1'],
    })
    expect(result.success).toBe(true)
  })

  it('accepts a name + empty workspaces (the create route enforces at least one)', () => {
    const result = createPermissionGroupBodySchema.safeParse({
      name: 'Contractors',
      workspaceIds: [],
    })
    expect(result.success).toBe(true)
  })

  it('rejects a default group that targets specific workspaces', () => {
    const result = createPermissionGroupBodySchema.safeParse({
      name: 'Baseline',
      isDefault: true,
      workspaceIds: ['ws-1'],
    })
    expect(result.success).toBe(false)
  })
})

describe('updatePermissionGroupBodySchema', () => {
  it('accepts an empty update', () => {
    expect(updatePermissionGroupBodySchema.safeParse({}).success).toBe(true)
  })

  it('accepts demoting the default via isDefault:false alone (the route re-scopes it)', () => {
    expect(updatePermissionGroupBodySchema.safeParse({ isDefault: false }).success).toBe(true)
  })

  it('accepts emptying scope (group then governs nothing)', () => {
    const result = updatePermissionGroupBodySchema.safeParse({ workspaceIds: [] })
    expect(result.success).toBe(true)
  })

  it('accepts a specific scope with workspaces', () => {
    const result = updatePermissionGroupBodySchema.safeParse({
      workspaceIds: ['ws-1', 'ws-2'],
    })
    expect(result.success).toBe(true)
  })

  it('accepts promoting a group to the default', () => {
    expect(updatePermissionGroupBodySchema.safeParse({ isDefault: true }).success).toBe(true)
  })

  it('rejects promoting to the default while naming workspaces', () => {
    const result = updatePermissionGroupBodySchema.safeParse({
      isDefault: true,
      workspaceIds: ['ws-1'],
    })
    expect(result.success).toBe(false)
  })
})