[{"_1":2,"_181":-5,"_182":-5},"loaderData",{"_3":4,"_96":97},"root",{"_5":6,"_37":38,"_69":70},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":-5,"_32":33,"_34":20,"_35":20,"_36":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesChatPanelState","notificationCount",0,"flagDenols","isBusinessOrgMember","isHigherTownieTier","ENV",{"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","efeea19332d9bfe7de1049656877be9cb817c45f","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","API_URL","https://api.val.town","clerkState",{"_71":72},"__internal_clerk_state",{"_73":74,"_75":48,"_76":77,"_78":77,"_79":20,"_80":77,"_81":77,"_82":77,"_83":77,"_84":85,"_94":20,"_95":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_86":20,"_19":20,"_87":77,"_88":89,"_90":77,"_91":48,"_92":20,"_93":77},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_98":99,"_100":101,"_102":103,"_104":105,"_159":160,"_178":179,"_180":-5},"handle","trevormunoz","name","lakeland-timesheet","path","handler.test.ts","project",{"_106":107,"_100":101,"_108":109,"_110":-5,"_111":20,"_112":113,"_114":77,"_115":-5,"_12":116,"_117":-5,"_118":20,"_119":-5,"_120":-5,"_121":122,"_14":123,"_124":-5,"_125":-5,"_126":-5,"_127":-5,"_128":129,"_130":129,"_131":132,"_133":132,"_134":132,"_135":129,"_136":129,"_23":137,"_140":141,"_145":146,"_158":20},"id","5c0c02e4-130a-11f1-9411-42dde27851f2","createdAt",["D",1772107064004],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","7ec577df-7957-4760-a4d3-81e05cef3345","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",1,"48ae43c1-9cce-4f57-9abb-f1491d51acfb","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_98":99,"_138":139},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yWm5xQUFoY280MXptMVB2Tk9ad0ptV3gyNWUifQ","org",{"_98":99,"_142":139,"_12":116,"_143":144},"avatar","tier","free","branch",{"_147":148,"_100":46,"_106":149,"_150":107,"_151":-5,"_152":-5,"_153":-5,"_154":-5,"_155":-5,"_156":101,"_157":99},"version",178,"5c0c68ec-130a-11f1-9411-42dde27851f2","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_106":161,"_100":103,"_162":163,"_164":-5,"_165":149,"_166":167,"_168":169,"_108":170,"_147":122,"_171":172,"_173":174,"_175":20,"_176":-5,"_102":177},"0c71b084-2242-11f1-82dc-42dde27851f2","fileId","bf35f5c8-223c-11f1-bcd8-42dde27851f2","parentId","branchId","branchVersion",177,"latest",true,["D",1773780249631],"fileType","script","content","import { describe, it, expect, beforeEach } from \"vitest\";\nimport { createHandler, type HandlerDeps } from \"./main.ts\";\nimport { createTestDb } from \"./db/test-helpers.ts\";\nimport { migrate } from \"./db/schema.ts\";\nimport * as queries from \"./db/queries.ts\";\nimport type { SlackClient } from \"./slack/api.ts\";\nimport type { Database } from \"./db/types.ts\";\n\nconst SIGNING_SECRET = \"test_secret_for_handler\";\nconst ADMIN_USER_ID = \"U_ADMIN_001\";\nconst RESPONSE_URL = \"https://hooks.slack.com/actions/T000/B000/xxxx\";\n\n// --- Test helpers ---\n\nasync function signBody(body: string): Promise<{ timestamp: string; signature: string }> {\n const timestamp = Math.floor(Date.now() / 1000).toString();\n const encoder = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\", encoder.encode(SIGNING_SECRET),\n { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"],\n );\n const sig = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(`v0:${timestamp}:${body}`));\n const hex = Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n return { timestamp, signature: `v0=${hex}` };\n}\n\ninterface MockSlack extends SlackClient {\n calls: Array<{ method: string; args: unknown[] }>;\n}\n\nfunction createMockSlack(): MockSlack {\n const calls: Array<{ method: string; args: unknown[] }> = [];\n return {\n calls,\n async openModal(...args: unknown[]) { calls.push({ method: \"openModal\", args }); },\n async postEphemeral(...args: unknown[]) { calls.push({ method: \"postEphemeral\", args }); },\n async postMessage(...args: unknown[]) { calls.push({ method: \"postMessage\", args }); },\n async sendDm(...args: unknown[]) { calls.push({ method: \"sendDm\", args }); },\n };\n}\n\ninterface TestHarness {\n handler: (req: Request) => Promise;\n deps: HandlerDeps;\n db: Database;\n mockSlack: MockSlack;\n fetchCalls: Array<{ url: string; body: Record }>;\n backgroundTasks: Promise[];\n flushBackground: () => Promise;\n}\n\nasync function createTestHarness(): Promise {\n const db = await createTestDb();\n await migrate(db);\n const mockSlack = createMockSlack();\n const fetchCalls: Array<{ url: string; body: Record }> = [];\n const backgroundTasks: Promise[] = [];\n\n const deps: HandlerDeps = {\n getDb: async () => db,\n getSlack: () => mockSlack,\n adminUserIds: new Set([ADMIN_USER_ID]),\n signingSecret: SIGNING_SECRET,\n fetch: (async (url: string | URL | Request, init?: RequestInit) => {\n fetchCalls.push({ url: url.toString(), body: JSON.parse(init?.body as string) });\n return new Response(\"ok\", { status: 200 });\n }) as typeof fetch,\n onBackground: (p) => backgroundTasks.push(p),\n };\n\n return {\n handler: createHandler(deps),\n deps,\n db,\n mockSlack,\n fetchCalls,\n backgroundTasks,\n flushBackground: () => Promise.all(backgroundTasks).then(() => {}),\n };\n}\n\nasync function slashCommand(\n handler: (req: Request) => Promise,\n command: string,\n text = \"\",\n userId = \"U_USER_001\",\n extra: Record = {},\n): Promise {\n const params = new URLSearchParams({\n command,\n text,\n trigger_id: \"T_TRIGGER_123\",\n user_id: userId,\n user_name: \"testuser\",\n channel_id: \"C_CHANNEL_001\",\n response_url: RESPONSE_URL,\n ...extra,\n });\n const body = params.toString();\n const { timestamp, signature } = await signBody(body);\n return handler(new Request(\"https://example.com\", {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/x-www-form-urlencoded\",\n \"x-slack-request-timestamp\": timestamp,\n \"x-slack-signature\": signature,\n },\n body,\n }));\n}\n\nasync function interactionPayload(\n handler: (req: Request) => Promise,\n payload: Record,\n): Promise {\n const params = new URLSearchParams({ payload: JSON.stringify(payload) });\n const body = params.toString();\n const { timestamp, signature } = await signBody(body);\n return handler(new Request(\"https://example.com\", {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/x-www-form-urlencoded\",\n \"x-slack-request-timestamp\": timestamp,\n \"x-slack-signature\": signature,\n },\n body,\n }));\n}\n\n// --- Tests ---\n\ndescribe(\"handler: healthcheck\", () => {\n let h: TestHarness;\n beforeEach(async () => { h = await createTestHarness(); });\n\n it(\"GET returns status ok with working DB\", async () => {\n const res = await h.handler(new Request(\"https://example.com\", { method: \"GET\" }));\n expect(res.status).toBe(200);\n const body = await res.json();\n expect(body.status).toBe(\"ok\");\n });\n\n it(\"GET returns 500 when DB is broken\", async () => {\n const brokenDeps: HandlerDeps = {\n ...h.deps,\n getDb: async () => { throw new Error(\"DB unavailable\"); },\n };\n const brokenHandler = createHandler(brokenDeps);\n const res = await brokenHandler(new Request(\"https://example.com\", { method: \"GET\" }));\n expect(res.status).toBe(500);\n const body = await res.json();\n expect(body.status).toBe(\"error\");\n });\n});\n\ndescribe(\"handler: request validation\", () => {\n let h: TestHarness;\n beforeEach(async () => { h = await createTestHarness(); });\n\n it(\"rejects non-POST with 405\", async () => {\n const res = await h.handler(new Request(\"https://example.com\", { method: \"PUT\" }));\n expect(res.status).toBe(405);\n });\n\n it(\"rejects invalid signature with 401\", async () => {\n const res = await h.handler(new Request(\"https://example.com\", {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/x-www-form-urlencoded\",\n \"x-slack-request-timestamp\": String(Math.floor(Date.now() / 1000)),\n \"x-slack-signature\": \"v0=bogus\",\n },\n body: \"command=/timesheet\",\n }));\n expect(res.status).toBe(401);\n });\n});\n\ndescribe(\"handler: /timesheet\", () => {\n let h: TestHarness;\n beforeEach(async () => { h = await createTestHarness(); });\n\n it(\"returns immediate ack before doing any work\", async () => {\n const res = await slashCommand(h.handler, \"/timesheet\");\n\n expect(res.status).toBe(200);\n const body = await res.json();\n expect(body.response_type).toBe(\"ephemeral\");\n expect(body.text).toContain(\"Generating report\");\n });\n\n it(\"sends report via response_url, not postEphemeral\", async () => {\n const res = await slashCommand(h.handler, \"/timesheet\");\n expect(res.status).toBe(200);\n\n await h.flushBackground();\n\n // response_url was called\n expect(h.fetchCalls.length).toBe(1);\n expect(h.fetchCalls[0].url).toBe(RESPONSE_URL);\n expect(h.fetchCalls[0].body.response_type).toBe(\"ephemeral\");\n\n // Slack API was NOT called (no postEphemeral, no sendDm)\n expect(h.mockSlack.calls.length).toBe(0);\n });\n\n it(\"rejects share from non-admin\", async () => {\n const res = await slashCommand(h.handler, \"/timesheet\", \"share\", \"U_NOT_ADMIN\");\n const body = await res.json();\n expect(body.text).toContain(\"permission\");\n });\n\n it(\"allows share from admin and posts via response_url with in_channel type\", async () => {\n const res = await slashCommand(h.handler, \"/timesheet\", \"share\", ADMIN_USER_ID);\n expect(res.status).toBe(200);\n\n await h.flushBackground();\n\n // Share uses response_url with in_channel (visible to everyone)\n expect(h.fetchCalls.length).toBe(1);\n expect(h.fetchCalls[0].url).toBe(RESPONSE_URL);\n expect(h.fetchCalls[0].body.response_type).toBe(\"in_channel\");\n\n // Slack API was NOT called (no postMessage needed)\n expect(h.mockSlack.calls.length).toBe(0);\n });\n});\n\ndescribe(\"handler: /logtime\", () => {\n let h: TestHarness;\n beforeEach(async () => { h = await createTestHarness(); });\n\n it(\"returns immediate ack for modal open\", async () => {\n await queries.addTaskType(h.db, \"Transcription\");\n const res = await slashCommand(h.handler, \"/logtime\");\n expect(res.status).toBe(200);\n // Empty ack for modal (no text shown, modal appears instead)\n expect(await res.text()).toBe(\"\");\n\n await h.flushBackground();\n\n // Modal was opened via Slack API\n const openCalls = h.mockSlack.calls.filter((c) => c.method === \"openModal\");\n expect(openCalls.length).toBe(1);\n });\n\n it(\"returns immediate ack for list command\", async () => {\n const res = await slashCommand(h.handler, \"/logtime\", \"list\");\n expect(res.status).toBe(200);\n const body = await res.json();\n expect(body.text).toContain(\"Loading\");\n\n await h.flushBackground();\n\n // Response sent via response_url\n expect(h.fetchCalls.length).toBe(1);\n expect(h.fetchCalls[0].url).toBe(RESPONSE_URL);\n });\n\n it(\"inline entry creates time entry and responds via response_url\", async () => {\n await queries.addTaskType(h.db, \"Transcription\");\n\n const res = await slashCommand(h.handler, \"/logtime\", \"1h30m Transcription\");\n const body = await res.json();\n expect(body.text).toContain(\"Logging your time\");\n\n await h.flushBackground();\n\n // Entry was created in DB\n const entries = await queries.getRecentEntries(h.db, \"U_USER_001\", 5);\n expect(entries.length).toBe(1);\n expect(entries[0].minutes).toBe(90);\n\n // Confirmation sent via response_url\n expect(h.fetchCalls.length).toBe(1);\n expect(h.fetchCalls[0].url).toBe(RESPONSE_URL);\n expect(h.fetchCalls[0].body.text).toContain(\"Logged 1h 30m\");\n });\n\n it(\"sends error via response_url for unknown task\", async () => {\n await queries.addTaskType(h.db, \"Transcription\");\n\n const res = await slashCommand(h.handler, \"/logtime\", \"2h Nonexistent\");\n await h.flushBackground();\n\n expect(h.fetchCalls.length).toBe(1);\n expect(h.fetchCalls[0].body.text).toContain(\"Unknown task\");\n });\n\n it(\"sends no-task-types message via response_url when none configured\", async () => {\n const res = await slashCommand(h.handler, \"/logtime\");\n await h.flushBackground();\n\n expect(h.fetchCalls.length).toBe(1);\n expect(h.fetchCalls[0].body.text as string).toContain(\"No task types configured\");\n });\n});\n\ndescribe(\"handler: /admin-timesheet\", () => {\n let h: TestHarness;\n beforeEach(async () => { h = await createTestHarness(); });\n\n it(\"rejects non-admin users\", async () => {\n const res = await slashCommand(h.handler, \"/admin-timesheet\", \"list\", \"U_NOT_ADMIN\");\n const body = await res.json();\n expect(body.text).toContain(\"permission\");\n });\n\n it(\"returns immediate ack for admin\", async () => {\n const res = await slashCommand(h.handler, \"/admin-timesheet\", \"list\", ADMIN_USER_ID);\n const body = await res.json();\n expect(body.text).toContain(\"Processing\");\n\n await h.flushBackground();\n\n // Result sent via response_url\n expect(h.fetchCalls.length).toBe(1);\n expect(h.fetchCalls[0].url).toBe(RESPONSE_URL);\n });\n\n it(\"add task creates task and confirms via response_url\", async () => {\n await slashCommand(h.handler, \"/admin-timesheet\", 'add task \"Digitization\"', ADMIN_USER_ID);\n await h.flushBackground();\n\n const taskTypes = await queries.getActiveTaskTypes(h.db);\n expect(taskTypes.some((t) => t.name === \"Digitization\")).toBe(true);\n\n expect(h.fetchCalls[0].body.text).toContain(\"Added task type\");\n });\n});\n\ndescribe(\"handler: view_submission (modal)\", () => {\n let h: TestHarness;\n beforeEach(async () => { h = await createTestHarness(); });\n\n it(\"returns response_action:clear synchronously to close modal\", async () => {\n await queries.addTaskType(h.db, \"Transcription\");\n\n const res = await interactionPayload(h.handler, {\n type: \"view_submission\",\n user: { id: \"U_USER_001\", username: \"testuser\" },\n view: {\n callback_id: \"log_time_entry\",\n private_metadata: \"\",\n state: {\n values: {\n date_block: { date_select: { selected_date: \"2026-03-17\" } },\n time_block: { time_select: { selected_option: { value: \"60\" } } },\n task_block: { task_select: { selected_option: { value: \"1\" } } },\n project_block: { project_select: { selected_option: null } },\n grant_block: { grant_select: { selected_option: null } },\n comment_block: { comment_input: { value: null } },\n },\n },\n },\n });\n\n expect(res.status).toBe(200);\n const body = await res.json();\n expect(body.response_action).toBe(\"clear\");\n\n // Entry was created\n const entries = await queries.getRecentEntries(h.db, \"U_USER_001\", 5);\n expect(entries.length).toBe(1);\n expect(entries[0].minutes).toBe(60);\n });\n});\n\ndescribe(\"handler: block_actions\", () => {\n let h: TestHarness;\n beforeEach(async () => { h = await createTestHarness(); });\n\n it(\"returns 200 immediately and deletes in background\", async () => {\n await queries.addTaskType(h.db, \"Transcription\");\n const entryId = await queries.createTimeEntry(h.db, {\n slackUserId: \"U_USER_001\", slackUsername: \"testuser\",\n date: \"2026-03-17\", minutes: 60, taskTypeId: 1,\n projectId: null, grantId: null, comment: null,\n });\n\n const res = await interactionPayload(h.handler, {\n type: \"block_actions\",\n user: { id: \"U_USER_001\", username: \"testuser\" },\n channel: { id: \"C_CHANNEL_001\" },\n trigger_id: \"T_TRIGGER_123\",\n actions: [{ action_id: \"delete_entry\", value: String(entryId) }],\n });\n\n expect(res.status).toBe(200);\n expect(await res.text()).toBe(\"\");\n\n await h.flushBackground();\n\n // Entry was soft-deleted\n const entry = await queries.getTimeEntryById(h.db, entryId);\n expect(entry).toBeNull();\n });\n});\n","deleted","label",[103],"permalink","https://www.val.town/x/trevormunoz/lakeland-timesheet/code/handler.test.ts","extension","actionData","errors"]