feat: add POST /web/cases/purge-closed for bulk hard-delete

Iterates the user's data dir and removes every case directory that carries a .closed marker. Requires form field confirm=yes as a server- side guard against accidental browser-history re-POSTs. Emits CasePurged per successfully removed case; per-case failures are logged but do not abort the sweep. UI button is deferred to the show-closed step so the endpoint is only reachable after an explicit navigation. Three integration tests cover the happy path, missing-confirm, and coexistence with open cases.
2026-04-21 10:46:07 +02:00
parent 396565a571
commit 8173ff2f26
4 changed files with 173 additions and 1 deletions
@@ -140,6 +140,17 @@ fn reopen_request(case_id: &str, cookie: &str) -> Request<Body> {
        .unwrap()
 }

+fn purge_closed_request(cookie: &str, confirm: Option<&str>) -> Request<Body> {
+    let body = confirm.map(|v| format!("confirm={v}")).unwrap_or_default();
+    Request::builder()
+        .method("POST")
+        .uri("/web/cases/purge-closed")
+        .header(header::COOKIE, cookie)
+        .header(header::CONTENT_TYPE, "application/x-www-form-urlencoded")
+        .body(Body::from(body))
+        .unwrap()
+}
+
 // ---------------------------------------------------------------------
 // HTTP-level precondition tests
 // ---------------------------------------------------------------------
@@ -735,6 +746,90 @@ async fn reopen_is_noop_on_open_case() {
    assert!(!case_dir.join(".closed").exists());
 }

+#[tokio::test]
+async fn purge_closed_removes_directory() {
+    let config = config_with_llm(unique_tmp("purge-1"), "http://unused".into());
+    let case_id = "11111111-1111-1111-1111-111111111111";
+    let case_dir = seed_case(&config.data_path, "dr_a", case_id);
+    seed_recording(&case_dir, "10-00-00", Some("ok"));
+
+    let app = doctate_server::create_router(config);
+    let cookie = login(app.clone(), "dr_a").await;
+
+    let _ = app
+        .clone()
+        .oneshot(close_request(case_id, &cookie))
+        .await
+        .unwrap();
+    assert!(case_dir.join(".closed").exists());
+
+    let resp = app
+        .oneshot(purge_closed_request(&cookie, Some("yes")))
+        .await
+        .unwrap();
+    assert_eq!(resp.status(), StatusCode::SEE_OTHER);
+    assert!(
+        !case_dir.exists(),
+        "case directory must be removed after purge"
+    );
+}
+
+#[tokio::test]
+async fn purge_requires_confirm_param() {
+    let config = config_with_llm(unique_tmp("purge-2"), "http://unused".into());
+    let case_id = "11111111-1111-1111-1111-111111111111";
+    let case_dir = seed_case(&config.data_path, "dr_a", case_id);
+    seed_recording(&case_dir, "10-00-00", Some("ok"));
+
+    let app = doctate_server::create_router(config);
+    let cookie = login(app.clone(), "dr_a").await;
+
+    let _ = app
+        .clone()
+        .oneshot(close_request(case_id, &cookie))
+        .await
+        .unwrap();
+
+    let resp = app
+        .oneshot(purge_closed_request(&cookie, None))
+        .await
+        .unwrap();
+    assert_eq!(resp.status(), StatusCode::BAD_REQUEST);
+    assert!(
+        case_dir.exists(),
+        "case directory must survive purge without confirm=yes"
+    );
+    assert!(case_dir.join(".closed").exists());
+}
+
+#[tokio::test]
+async fn purge_closed_keeps_open_cases() {
+    let config = config_with_llm(unique_tmp("purge-3"), "http://unused".into());
+    let closed_id = "11111111-1111-1111-1111-111111111111";
+    let open_id = "22222222-2222-2222-2222-222222222222";
+    let dir_closed = seed_case(&config.data_path, "dr_a", closed_id);
+    let dir_open = seed_case(&config.data_path, "dr_a", open_id);
+    seed_recording(&dir_closed, "10-00-00", Some("a"));
+    seed_recording(&dir_open, "10-00-00", Some("b"));
+
+    let app = doctate_server::create_router(config);
+    let cookie = login(app.clone(), "dr_a").await;
+
+    let _ = app
+        .clone()
+        .oneshot(close_request(closed_id, &cookie))
+        .await
+        .unwrap();
+
+    let resp = app
+        .oneshot(purge_closed_request(&cookie, Some("yes")))
+        .await
+        .unwrap();
+    assert_eq!(resp.status(), StatusCode::SEE_OTHER);
+    assert!(!dir_closed.exists(), "closed case must be purged");
+    assert!(dir_open.exists(), "open case must survive the purge");
+}
+
 #[tokio::test]
 async fn bulk_close_shares_one_closed_at_timestamp() {
    let config = config_with_llm(unique_tmp("bulk-c"), "http://unused".into());