retoor
8e9d3fad98
Implements the moderation and consent obligations a social platform carries, so the web version and any client that speaks to it enforce the same rules. Moderation core (services/moderation/, database/moderation.py): a reportable target registry, the content filter and its choke points, the report queue with atomic resolution, enforcement actions, consent tracking, maturity gating, and account deletion with a grace window. Surfaces: POST /reports plus the member report list, /admin/moderation and the per-report admin view, /workspaces, terms acceptance at /auth/terms, consent and account deletion under /profile, the report button and dialog partials, the maturity gate, and the moderation stylesheet and ReportDialog client. Every user-generated surface stays reportable by construction: new content tables are registered in REPORTABLE_TARGETS or listed in UNREPORTABLE_TABLES with a reason, and the registry test fails the suite on anything left unclassified. Docs: community guidelines, content moderation, intellectual property, privacy, terms, contact, and the admin-only moderation operations page, plus the moderation API group and the Devii moderation actions. Compliance record: applecomp.md is the requirement register, applechanges.md the gap analysis against this codebase, and appleimpl.md the implementation design they resolve to. Tests cover the report flow, admin moderation, consent, account deletion, terms acceptance, workspaces, and the registry invariant across the unit, api, and e2e tiers.
191 lines
6.1 KiB
Python
191 lines
6.1 KiB
Python
# retoor <retoor@molodetz.nl>
|
|
|
|
import time
|
|
|
|
import requests
|
|
|
|
from devplacepy.database import get_table
|
|
from devplacepy.services.game import economy, store
|
|
from tests.conftest import BASE_URL
|
|
|
|
JSON = {"Accept": "application/json"}
|
|
_counter = [0]
|
|
|
|
|
|
def _signup():
|
|
_counter[0] += 1
|
|
name = f"gapi{int(time.time() * 1000)}{_counter[0]}"
|
|
session = requests.Session()
|
|
session.post(
|
|
f"{BASE_URL}/auth/signup",
|
|
data={
|
|
"username": name,
|
|
"email": f"{name}@t.dev",
|
|
"password": "secret123",
|
|
"confirm_password": "secret123",
|
|
"birth_date": "1990-01-01",
|
|
"accept_terms": "1",
|
|
},
|
|
allow_redirects=True,
|
|
)
|
|
return session, name
|
|
|
|
|
|
def _reset_farm(username, coins=100000):
|
|
user = get_table("users").find_one(username=username)
|
|
farm = store.get_farm(user["uid"])
|
|
if farm:
|
|
get_table("game_plots").delete(farm_uid=farm["uid"])
|
|
get_table("game_quests").delete(farm_uid=farm["uid"])
|
|
get_table("game_farms").delete(uid=farm["uid"])
|
|
get_table("game_market_ticks").delete()
|
|
farm = store.ensure_farm(user["uid"])
|
|
get_table("game_farms").update({"uid": farm["uid"], "coins": coins}, ["uid"])
|
|
return user
|
|
|
|
|
|
def test_state_requires_auth(app_server, seeded_db):
|
|
response = requests.get(f"{BASE_URL}/game/state", headers=JSON)
|
|
assert response.status_code == 401
|
|
|
|
|
|
def test_state_returns_farm_json(app_server, seeded_db):
|
|
session, name = _signup()
|
|
_reset_farm(name)
|
|
response = session.get(f"{BASE_URL}/game/state", headers=JSON)
|
|
assert response.status_code == 200
|
|
farm = response.json()["farm"]
|
|
for key in (
|
|
"coins",
|
|
"level",
|
|
"ci_tier",
|
|
"plots",
|
|
"crops",
|
|
"perks",
|
|
"quests",
|
|
"prestige",
|
|
"streak",
|
|
"daily_available",
|
|
):
|
|
assert key in farm
|
|
assert len(farm["crops"]) == len(economy.CROPS)
|
|
assert len(farm["perks"]) == len(economy.PERKS)
|
|
assert len(farm["quests"]) == economy.DAILY_QUEST_COUNT
|
|
|
|
|
|
def _set_farm(username, **fields):
|
|
user = get_table("users").find_one(username=username)
|
|
farm = store.get_farm(user["uid"])
|
|
get_table("game_farms").update({"uid": farm["uid"], **fields}, ["uid"])
|
|
|
|
|
|
def test_leaderboard_is_public_json(app_server, seeded_db):
|
|
response = requests.get(f"{BASE_URL}/game/leaderboard", headers=JSON)
|
|
assert response.status_code == 200
|
|
assert "entries" in response.json()
|
|
|
|
|
|
def test_leaderboard_entries_carry_score_and_prestige(app_server, seeded_db):
|
|
session, name = _signup()
|
|
_reset_farm(name)
|
|
_set_farm(name, prestige=50, total_harvests=20, ci_tier=3)
|
|
deadline = time.time() + 20
|
|
while True:
|
|
response = requests.get(f"{BASE_URL}/game/leaderboard", headers=JSON)
|
|
assert response.status_code == 200
|
|
entries = response.json()["entries"]
|
|
mine = next(
|
|
(entry for entry in entries if entry["username"] == name), None
|
|
)
|
|
if mine is not None or time.time() >= deadline:
|
|
break
|
|
time.sleep(0.5)
|
|
assert entries
|
|
scores = [entry["score"] for entry in entries]
|
|
assert scores == sorted(scores, reverse=True)
|
|
for entry in entries:
|
|
assert "score" in entry and "prestige" in entry
|
|
assert mine is not None
|
|
assert mine["prestige"] == 50
|
|
assert mine["score"] == economy.farm_score(store.get_farm(
|
|
get_table("users").find_one(username=name)["uid"]
|
|
))
|
|
assert mine["score"] >= 50 * economy.SCORE_PRESTIGE
|
|
|
|
|
|
def test_plant_returns_updated_farm(app_server, seeded_db):
|
|
session, name = _signup()
|
|
_reset_farm(name)
|
|
response = session.post(
|
|
f"{BASE_URL}/game/plant", data={"slot": 0, "crop": "shell"}, headers=JSON
|
|
)
|
|
assert response.status_code == 200
|
|
farm = response.json()["farm"]
|
|
assert farm["coins"] == 100000 - economy.crop_for("shell").cost
|
|
assert any(plot["state"] == "growing" for plot in farm["plots"])
|
|
|
|
|
|
def test_plant_requires_auth(app_server, seeded_db):
|
|
response = requests.post(
|
|
f"{BASE_URL}/game/plant", data={"slot": 0, "crop": "shell"}, headers=JSON
|
|
)
|
|
assert response.status_code == 401
|
|
|
|
|
|
def test_plant_insufficient_coins_returns_400(app_server, seeded_db):
|
|
session, name = _signup()
|
|
_reset_farm(name, coins=0)
|
|
response = session.post(
|
|
f"{BASE_URL}/game/plant", data={"slot": 0, "crop": "shell"}, headers=JSON
|
|
)
|
|
assert response.status_code == 400
|
|
assert "error" in response.json()
|
|
|
|
|
|
def test_harvest_empty_returns_400(app_server, seeded_db):
|
|
session, name = _signup()
|
|
_reset_farm(name)
|
|
response = session.post(
|
|
f"{BASE_URL}/game/harvest", data={"slot": 0}, headers=JSON
|
|
)
|
|
assert response.status_code == 400
|
|
|
|
|
|
def test_buy_plot_and_upgrade_ci(app_server, seeded_db):
|
|
session, name = _signup()
|
|
_reset_farm(name)
|
|
buy = session.post(f"{BASE_URL}/game/buy-plot", headers=JSON)
|
|
assert buy.status_code == 200
|
|
assert buy.json()["farm"]["plot_count"] == economy.STARTING_PLOTS + 1
|
|
upgrade = session.post(f"{BASE_URL}/game/upgrade", headers=JSON)
|
|
assert upgrade.status_code == 200
|
|
assert upgrade.json()["farm"]["ci_tier"] == 2
|
|
|
|
|
|
def test_daily_claim_then_double_claim_400(app_server, seeded_db):
|
|
session, name = _signup()
|
|
_reset_farm(name)
|
|
first = session.post(f"{BASE_URL}/game/daily", headers=JSON)
|
|
assert first.status_code == 200
|
|
assert first.json()["farm"]["streak"] == 1
|
|
second = session.post(f"{BASE_URL}/game/daily", headers=JSON)
|
|
assert second.status_code == 400
|
|
|
|
|
|
def test_upgrade_perk_returns_updated_farm(app_server, seeded_db):
|
|
session, name = _signup()
|
|
_reset_farm(name)
|
|
response = session.post(
|
|
f"{BASE_URL}/game/perk", data={"perk": "growth"}, headers=JSON
|
|
)
|
|
assert response.status_code == 200
|
|
growth = next(p for p in response.json()["farm"]["perks"] if p["key"] == "growth")
|
|
assert growth["level"] == 1
|
|
|
|
|
|
def test_prestige_below_level_returns_400(app_server, seeded_db):
|
|
session, name = _signup()
|
|
_reset_farm(name)
|
|
response = session.post(f"{BASE_URL}/game/prestige", headers=JSON)
|
|
assert response.status_code == 400
|