feat(patients): phase B4 — messages (پیام‌ها)

Add a patient message/communication log: a new PatientMessage entity (record-scoped, CASCADE) + repository, and owner-scoped endpoints (GET messages, POST message, DELETE message) with a validated channel (sms/note/call/email). Wire the "پیام‌ها" tab in PatientDetailPage (send box + list + delete). PHPUnit covers create/list/delete + ownership + validation; Vitest covers the tab. API docs updated. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-13 15:35:10 +03:30
parent 976c4f0c0a
commit 5fb4c52246
8 changed files with 358 additions and 1 deletions
@@ -0,0 +1,69 @@
+<?php
+
+namespace App\Tests\Patient;
+
+use App\Doctor\Entity\Doctor;
+use App\Patient\Entity\PatientRecord;
+use App\Tests\ApiTestCase;
+
+/**
+ * Patient messages: create, list, delete + tenant ownership scoping.
+ */
+class PatientMessageTest extends ApiTestCase
+{
+    /** @return array{0: \App\Auth\Entity\User, 1: PatientRecord} */
+    private function recordFor(): array
+    {
+        $owner  = $this->createUser(['ROLE_DOCTOR']);
+        $doctor = new Doctor($owner, 'دکتر');
+        $this->em->persist($doctor);
+        $this->em->flush();
+
+        $patient = $this->createUser(['ROLE_USER']);
+        $record  = new PatientRecord('doctor', $doctor->getId(), $patient, 'doctor', $doctor->getId());
+        $this->em->persist($record);
+        $this->em->flush();
+
+        return [$owner, $record];
+    }
+
+    public function testCreateListDelete(): void
+    {
+        [$owner, $record] = $this->recordFor();
+
+        $created = $this->authJson('POST', '/api/v1/patient/' . $record->getUuid() . '/message', $owner, [
+            'body' => 'یادآوری نوبت فردا', 'channel' => 'sms',
+        ]);
+        self::assertSame(201, $this->responseCode());
+        self::assertSame('یادآوری نوبت فردا', $created['data']['body']);
+        self::assertSame('sms', $created['data']['channel']);
+        $mUuid = $created['data']['uuid'];
+
+        $list = $this->authJson('GET', '/api/v1/patient/' . $record->getUuid() . '/messages', $owner);
+        self::assertCount(1, $list['data']);
+
+        $this->authJson('DELETE', '/api/v1/patient/message/' . $mUuid, $owner);
+        self::assertSame(200, $this->responseCode());
+
+        $after = $this->authJson('GET', '/api/v1/patient/' . $record->getUuid() . '/messages', $owner);
+        self::assertCount(0, $after['data']);
+    }
+
+    public function testRequiresBody(): void
+    {
+        [$owner, $record] = $this->recordFor();
+        $this->authJson('POST', '/api/v1/patient/' . $record->getUuid() . '/message', $owner, ['body' => '']);
+        self::assertSame(422, $this->responseCode());
+    }
+
+    public function testOwnershipScoped(): void
+    {
+        [$owner, $record] = $this->recordFor();
+        $created = $this->authJson('POST', '/api/v1/patient/' . $record->getUuid() . '/message', $owner, ['body' => 'x']);
+        $mUuid   = $created['data']['uuid'];
+
+        [$other] = $this->recordFor();
+        $this->authJson('DELETE', '/api/v1/patient/message/' . $mUuid, $other);
+        self::assertSame(404, $this->responseCode());
+    }
+}