// 已读取AGENTS.md
import * as fs from 'fs';
import * as path from 'path';

/**
 * 第十七批回归闸门：管理端写接口鉴权（用户删除 / 场所管理 / 订单超时扫描）
 */
describe('第十七批管理端写接口鉴权闸门', () => {
  const rootDir = path.resolve(__dirname, '../../');
  const indexCode = fs.readFileSync(path.join(rootDir, 'server/src/index.ts'), 'utf-8');

  it('删除用户仅管理员可执行', () => {
    expect(indexCode).toContain("app.delete('/api/users/:id', requireAdmin");
  });

  it('场所增删改仅管理员可执行', () => {
    expect(indexCode).toContain("app.post('/api/safety/places', requireAdmin");
    expect(indexCode).toContain("app.put('/api/safety/places/:id', requireAdmin");
    expect(indexCode).toContain("app.delete('/api/safety/places/:id', requireAdmin");
  });

  it('场所列表仍保持公开可读（小程序合规场所库）', () => {
    expect(indexCode).toContain("app.get('/api/safety/places', async");
  });

  it('订单超时自动流转扫描仅管理员可触发', () => {
    expect(indexCode).toContain("app.post('/api/orders/process-timeouts', requireAdmin");
  });
});