Portal: Admin-Panel, Rechnungsanalyse und alte Admin-Schnittstellen entfernt

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

test/funktionenRoutes.test.js

@@ -14,10 +14,10 @@ const st = await startFakeStripe()
 useTestEnv({ appwriteUrl: aw.url, stripeUrl: st.url })
 const { config } = await import('../server/config.js')
 const { startTestApp, get, rawGet, post, postWebhook } = await import('./support/testApp.js')
-const { adminCookie, customerCookie, seedFixtures } = await import('./support/fixtures.js')
+const { customerCookie, seedFixtures } = await import('./support/fixtures.js')
 const { default: funktionenRoutes } = await import('../server/routes/funktionen.js')
 const { default: aboRoutes } = await import('../server/routes/abo.js')
-const { default: portalAdminRoutes } = await import('../server/routes/portalAdmin.js')
+const { default: teamRoutes } = await import('../server/routes/team/index.js')
 const { default: publicNewsRoutes } = await import('../server/routes/publicNews.js')
 const sf = await import('../server/services/siteFeatures.js')
 const { deleteDocument } = await import('../server/services/appwriteAdmin.js')
@@ -27,7 +27,7 @@ const { mailSink } = await import('./support/mailSink.js')
 const app = await startTestApp({
   '/api/funktionen': funktionenRoutes,
   '/api/abo': aboRoutes,
-  '/api/portal-admin': portalAdminRoutes,
+  '/api/team': teamRoutes,
   '/api/public/news': publicNewsRoutes,
 })
 const mails = mailSink()
@@ -235,9 +235,11 @@ test('parallele_aktivierung_mailt_einmal', async () => {
   assert.equal(mails.sent.slice(mailsBefore).filter((m) => m.subject === 'Deine News-Pinnwand ist bereit').length, 1)
 })
 
-// ---------------------------------------------------------------- Admin ---
-const adminC = adminCookie()
-const adminPost = (customerId, body, cookie = adminC) => post(`/api/portal-admin/funktionen/${customerId}/news`, body, { cookie })
+// ------------------------------------------------- Ticketsystem (Team) ---
+// Mitarbeiter ohne Admin-Label ueber den Team-Eingang (JWT)
+aw.seed('employees', { $id: 'e_staff2', userId: 'u_staff2', displayName: 'Andrej', email: 'andrej@webklar.com' })
+const STAFF = { headers: { Authorization: 'Bearer jwt-staff' } }
+const adminPost = (customerId, body, opts = STAFF) => post(`/api/team/funktionen/${customerId}/news`, body, opts)
 
 test('admin_aktivieren_ohne_zahlung', async () => {
   aw.seed('websiteProjects', { $id: 'pa1', customerId: 'c1', projectName: 'Admin-Test' })
@@ -247,12 +249,12 @@ test('admin_aktivieren_ohne_zahlung', async () => {
   const view = res.body.projects.find((p) => p.projectId === 'pa1').features.news
   assert.equal(view.state, 'active')
   assert.equal(view.ticketWoid, null)
-  assert.match(view.adminNote, /^\d{4}-\d\d-\d\dT[\d:.]+Z Kenso: activate – Kulanz$/)
+  assert.match(view.adminNote, /^\d{4}-\d\d-\d\dT[\d:.]+Z Andrej: activate – Kulanz$/)
   const doc = await sf.getFeatureDoc('c1', 'pa1', 'news')
   assert.equal(doc.enabled, true)
   assert.equal(doc.unlockedByPurchase, false)
   assert.equal(workorders().length, wosBefore)
-  const list = await get('/api/portal-admin/funktionen/c1', { cookie: adminC })
+  const list = await get('/api/team/funktionen/c1', STAFF)
   assert.equal(list.projects.find((p) => p.projectId === 'pa1').features.news.state, 'active')
 })
 
@@ -264,7 +266,7 @@ test('admin_abschalten', async () => {
   assert.equal(res.status, 200)
   const view = res.body.projects[0].features.news
   assert.equal(view.state, 'disabled')
-  assert.match(view.adminNote, /Kenso: disable \| .*Kenso: activate – Kulanz$/)
+  assert.match(view.adminNote, /Andrej: disable \| .*Andrej: activate – Kulanz$/)
   assert.ok(view.adminNote.length <= 300)
   assert.equal((await sf.getFeatureDoc('c1', 'pa1', 'news')).enabled, false)
   const { status, body } = await rawGet(publicUrl)
@@ -286,15 +288,15 @@ test('admin_notiz_bleibt_im_limit', async () => {
   }
   const note = (await sf.getFeatureDoc('c1', 'pa2', 'news')).adminNote
   assert.ok(note.length <= 300)
-  assert.match(note, /^\S+ Kenso: disable – x+/)
+  assert.match(note, /^\S+ Andrej: disable – x+/)
 })
 
 test('kunde_darf_admin_route_nicht', async () => {
   aw.seed('websiteProjects', { $id: 'pa5', customerId: 'c1', projectName: 'Kundenversuch' })
-  const res = await adminPost('c1', { projectId: 'pa5', action: 'activate' }, customerCookie('c1'))
+  const res = await adminPost('c1', { projectId: 'pa5', action: 'activate' }, { cookie: customerCookie('c1') })
   assert.ok(res.status === 401 || res.status === 403)
   assert.equal(await sf.getFeatureDoc('c1', 'pa5', 'news'), null)
-  const list = await rawGet('/api/portal-admin/funktionen/c1', { cookie: customerCookie('c1') })
+  const list = await rawGet('/api/team/funktionen/c1', { cookie: customerCookie('c1') })
   assert.ok(list.status === 401 || list.status === 403)
 })
 
@@ -305,7 +307,7 @@ test('ticket_fehlt_markiert', async () => {
   const doc = await sf.getFeatureDoc('c1', 'pa3', 'news')
   assert.equal(doc.state, 'setup')
   const newsOf = async () =>
-    (await get('/api/portal-admin/funktionen/c1', { cookie: adminC })).projects.find((p) => p.projectId === 'pa3').features.news
+    (await get('/api/team/funktionen/c1', STAFF)).projects.find((p) => p.projectId === 'pa3').features.news
   assert.equal((await newsOf()).ticketMissing, false)
   await deleteDocument(config.collections.workorders, doc.ticketId)
   const missing = await newsOf()