Update Healer Man server

server/dungeon-queue-policy.test.mjs

@@ -0,0 +1,74 @@
+import assert from "node:assert/strict";
+import { mkdtempSync, rmSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import test from "node:test";
+import { openGameDatabase } from "./database.mjs";
+import { normalizeDungeonQueuePolicy } from "./dungeon-queue-policy.mjs";
+import { createGameServer } from "./server.mjs";
+
+test("queue policy validates dungeon IDs and mode membership", () => {
+  assert.throws(() => normalizeDungeonQueuePolicy({ schemaVersion: 1, disabled: {
+    regular: ["bite-sized-stormwind-stockade"], biteSized: [], randomizedBiteSized: [],
+  } }), /invalid disabled dungeon/i);
+  assert.throws(() => normalizeDungeonQueuePolicy({ schemaVersion: 1, disabled: {
+    regular: ["unknown-dungeon"], biteSized: [], randomizedBiteSized: [],
+  } }), /invalid disabled dungeon/i);
+});
+
+test("GM queue settings persist with revision checks", async () => {
+  const dataDir = mkdtempSync(path.join(os.tmpdir(), "healer-man-queue-policy-"));
+  let database = openGameDatabase({ dataDir });
+  try {
+    assert.deepEqual(database.getDungeonQueuePolicy().config.disabled, {
+      regular: [], biteSized: [], randomizedBiteSized: [],
+    });
+    const gm = (await database.register("codex_dev_gm", "test-password")).account;
+    const player = (await database.register("queue_player", "test-password")).account;
+    const config = { schemaVersion: 1, disabled: {
+      regular: ["stormwind-stockade"],
+      biteSized: ["bite-sized-stormwind-stockade"],
+      randomizedBiteSized: ["randomized-bite-sized-stormwind-stockade"],
+    } };
+    assert.throws(() => database.putDungeonQueuePolicy(player, 0, config), (error) => error.status === 403);
+    assert.equal(database.putDungeonQueuePolicy(gm, 0, config).revision, 1);
+    assert.throws(() => database.putDungeonQueuePolicy(gm, 0, config), (error) => error.status === 409);
+    database.close();
+    database = openGameDatabase({ dataDir });
+    assert.deepEqual(database.getDungeonQueuePolicy().config, config);
+  } finally {
+    database.close();
+    rmSync(dataDir, { recursive: true, force: true });
+  }
+});
+
+test("queue policy API is public to read and GM only to edit", async () => {
+  const dataDir = mkdtempSync(path.join(os.tmpdir(), "healer-man-queue-api-"));
+  const runtime = createGameServer({ dataDir, staticDir: dataDir, contentDir: dataDir });
+  await new Promise((resolve) => runtime.server.listen(0, "127.0.0.1", resolve));
+  const origin = `http://127.0.0.1:${runtime.server.address().port}`;
+  try {
+    const initial = await (await fetch(`${origin}/api/dungeon-queue-policy`)).json();
+    assert.deepEqual(initial.config.disabled.regular, []);
+    const register = async (username) => (await (await fetch(`${origin}/api/auth/register`, {
+      method: "POST", headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ username, password: "test-password" }),
+    })).json()).token;
+    const playerToken = await register("queue_reader");
+    const gmToken = await register("codex_dev_gm");
+    const config = { schemaVersion: 1, disabled: {
+      regular: [], biteSized: ["bite-sized-stormwind-stockade"], randomizedBiteSized: [],
+    } };
+    const put = (token, expectedRevision) => fetch(`${origin}/api/gm/dungeon-queue-policy`, {
+      method: "PUT", headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
+      body: JSON.stringify({ expectedRevision, config }),
+    });
+    assert.equal((await put(playerToken, 0)).status, 403);
+    assert.equal((await put(gmToken, 0)).status, 200);
+    assert.equal((await put(gmToken, 0)).status, 409);
+    assert.deepEqual((await (await fetch(`${origin}/api/dungeon-queue-policy`)).json()).config, config);
+  } finally {
+    await new Promise((resolve) => runtime.server.close(resolve));
+    rmSync(dataDir, { recursive: true, force: true });
+  }
+});