import { describe, it, expect, beforeAll, afterAll, beforeEach } from 'vitest'; import { PrismaClient } from '@prisma/client'; import { resetDb } from '../test-utils/reset-db'; import { makeFakePorts, makeFakeInference } from '@insignia/iios-testkit'; import { type MessagePrincipal } from '../messaging/message.service'; import { ActorResolver } from '../identity/actor.resolver'; import { AiJobService } from '../ai/ai.service'; import { AiBudgetGuard } from '../ai/ai-budget.guard'; import { OutboundService } from '../adapters/outbound.service'; import { IdempotencyService } from '../idempotency/idempotency.service'; import { CapabilityBroker } from '../capability/capability.broker'; import { CapabilityProviderRegistry } from '../capability/capability.registry'; import { CalendarService } from './calendar.service'; import type { PrismaService } from '../prisma/prisma.service'; import type { FakePorts } from '@insignia/iios-testkit'; const url = process.env.DATABASE_URL ?? 'postgresql://iios:iios@localhost:5434/iios?schema=public'; const prisma = new PrismaClient({ datasources: { db: { url } } }); const asService = prisma as unknown as PrismaService; const actors = new ActorResolver(asService); const alice: MessagePrincipal = { userId: 'alice', orgId: 'org_demo', appId: 'portal-demo', displayName: 'Alice' }; const START = '2026-07-02T10:00:00.000Z'; const ai = () => new AiJobService(asService, makeFakePorts(), makeFakeInference(), new AiBudgetGuard(asService), actors); const cal = (ports?: FakePorts) => new CalendarService(asService, ports ?? makeFakePorts(), actors, ai(), new OutboundService(asService, new CapabilityBroker(makeFakePorts(), new CapabilityProviderRegistry()), new IdempotencyService(asService))); async function scheduledMeeting(attendees: { userId: string; visibility?: 'FULL' | 'NONE' }[]) { const m = await cal().scheduleDirect(alice, { meetingType: 'INTERNAL', title: 'Board sync', startAt: START, attendees }); return m; } const grantAll = async (meetingId: string) => { const ps = await prisma.iiosMeetingParticipant.findMany({ where: { meetingId } }); for (const p of ps) if (p.actorRefId) await cal().setConsent(meetingId, p.actorRefId, 'GRANTED'); }; beforeAll(async () => { await prisma.$connect(); }); afterAll(async () => { await prisma.$disconnect(); }); beforeEach(async () => { await resetDb(prisma); }); describe('Calendar consent gate (P8 — KG-14 / Scenario 6)', () => { it('transcript is BLOCKED with no segments when an attendee has not consented (KG-14)', async () => { const m = await scheduledMeeting([{ userId: 'bob' }]); // organizer + bob; nobody granted consent const t = await cal().generateTranscript(m.id, alice); expect(t.status).toBe('BLOCKED'); expect(await prisma.iiosTranscriptSegment.count()).toBe(0); expect(await prisma.iiosMeetingSummary.count()).toBe(0); expect(await prisma.iiosMeetingActionItem.count()).toBe(0); }); it('transcript is READY with segments once every attendee consents', async () => { const m = await scheduledMeeting([{ userId: 'bob' }]); await grantAll(m.id); const t = await cal().generateTranscript(m.id, alice); expect(t.status).toBe('READY'); expect(t.segments.length).toBe(2); }); it('CMP DENY blocks the transcript even if all attendees granted', async () => { const m = await scheduledMeeting([{ userId: 'bob' }]); await grantAll(m.id); const ports = makeFakePorts(); ports.cmp.setStatus('DENY'); const t = await cal(ports).generateTranscript(m.id, alice); expect(t.status).toBe('BLOCKED'); }); it('summarize → summary linked to a P7 ai_artifact + action items + MEETING_FOLLOWUP inbox', async () => { const m = await scheduledMeeting([{ userId: 'bob' }]); await grantAll(m.id); await cal().generateTranscript(m.id, alice); await cal().summarize(m.id, alice); const summary = await prisma.iiosMeetingSummary.findFirstOrThrow({ where: { meetingId: m.id } }); expect(summary.aiArtifactId).toBeTruthy(); const artifact = await prisma.iiosAiArtifact.findUniqueOrThrow({ where: { id: summary.aiArtifactId! } }); expect(artifact.artifactType).toBe('SUMMARY'); expect(await prisma.iiosMeetingActionItem.count({ where: { meetingId: m.id } })).toBeGreaterThan(0); expect(await prisma.iiosInboxItem.count({ where: { kind: 'MEETING_FOLLOWUP' } })).toBe(2); // organizer + bob }); it('a visibility=NONE attendee is excluded from inbox follow-ups (Scenario 6)', async () => { const m = await scheduledMeeting([{ userId: 'bob', visibility: 'NONE' }]); await grantAll(m.id); await cal().generateTranscript(m.id, alice); await cal().summarize(m.id, alice); // only the organizer (FULL) gets a follow-up; bob (NONE) is excluded expect(await prisma.iiosInboxItem.count({ where: { kind: 'MEETING_FOLLOWUP' } })).toBe(1); }); it('revoking consent after a READY transcript blocks re-summary', async () => { const m = await scheduledMeeting([{ userId: 'bob' }]); await grantAll(m.id); await cal().generateTranscript(m.id, alice); const bob = await prisma.iiosMeetingParticipant.findFirstOrThrow({ where: { meetingId: m.id, role: 'REQUIRED' } }); await cal().setConsent(m.id, bob.actorRefId!, 'REVOKED'); await expect(cal().summarize(m.id, alice)).rejects.toThrow(); expect(await prisma.iiosMeetingSummary.count()).toBe(0); }); });