feat(worker): S3 3b härda UPDATE_USER_MEMORY — budget, kostnad, anti-påhitt, GDPR-regression

apps/api/test/me.test.ts

@@ -3,7 +3,7 @@ import { describe, expect, it, beforeAll, afterAll, vi } from "vitest";
 import { eq, inArray } from "drizzle-orm";
 import { buildServer } from "../src/server.js";
 import { loadConfig } from "../src/config.js";
-import { createDatabase, closeDatabase, schema } from "@app/database";
+import { createDatabase, closeDatabase, eraseUser, schema } from "@app/database";
 
 describe("DELETE /v1/me — GDPR-radering", () => {
   const testDb = createDatabase(process.env.TEST_DATABASE_URL!);
@@ -213,4 +213,90 @@ describe("DELETE /v1/me — GDPR-radering", () => {
     deleteSpy.mockRestore();
     await cleanupUser(email);
   });
+
+  it("raderar memoryItems och tasteSignals vid DELETE /v1/me", async () => {
+    const email = "gdpr-memory-signals@example.invalid";
+    await cleanupUser(email);
+    const { token, userId } = await registerUser(email);
+
+    await testDb.db.insert(schema.memoryItems).values({
+      userId,
+      kind: "structured_fact",
+      key: "favorite-cuisine-italian",
+      summarySv: "Gillar italienskt",
+      value: { favoriteCuisine: "italian" },
+      origin: "user_stated",
+      confidence: 1,
+    });
+
+    await testDb.db.insert(schema.tasteSignals).values({
+      userId,
+      axis: "spice",
+      direction: 1,
+      strength: 0.8,
+      origin: "user_stated",
+    });
+
+    const res = await app.inject({
+      method: "DELETE",
+      url: "/v1/me",
+      headers: { authorization: `Bearer ${token}` },
+    });
+
+    expect(res.statusCode).toBe(200);
+
+    const remainingMemory = await testDb.db
+      .select({ id: schema.memoryItems.id })
+      .from(schema.memoryItems)
+      .where(eq(schema.memoryItems.userId, userId));
+    expect(remainingMemory).toHaveLength(0);
+
+    const remainingSignals = await testDb.db
+      .select({ id: schema.tasteSignals.id })
+      .from(schema.tasteSignals)
+      .where(eq(schema.tasteSignals.userId, userId));
+    expect(remainingSignals).toHaveLength(0);
+
+    await cleanupUser(email);
+  });
+
+  it("eraseUser raderar memoryItems och tasteSignals (GDPR-regression)", async () => {
+    const email = "gdpr-erase-user-memory@example.invalid";
+    await cleanupUser(email);
+    const { userId } = await registerUser(email);
+
+    await testDb.db.insert(schema.memoryItems).values({
+      userId,
+      kind: "structured_fact",
+      key: "dislikes-broccoli",
+      summarySv: "Ogillar broccoli",
+      value: { dislikedIngredient: "broccoli" },
+      origin: "user_stated",
+      confidence: 1,
+    });
+
+    await testDb.db.insert(schema.tasteSignals).values({
+      userId,
+      axis: "garlic",
+      direction: -1,
+      strength: 0.9,
+      origin: "user_stated",
+    });
+
+    await eraseUser(testDb.db, userId);
+
+    const remainingMemory = await testDb.db
+      .select({ id: schema.memoryItems.id })
+      .from(schema.memoryItems)
+      .where(eq(schema.memoryItems.userId, userId));
+    expect(remainingMemory).toHaveLength(0);
+
+    const remainingSignals = await testDb.db
+      .select({ id: schema.tasteSignals.id })
+      .from(schema.tasteSignals)
+      .where(eq(schema.tasteSignals.userId, userId));
+    expect(remainingSignals).toHaveLength(0);
+
+    await cleanupUser(email);
+  });
 });