# Backend
./mvnw compile
./mvnw test

# Frontend (from /home/reuben/Documents/workspace/past-care-spring-frontend)
ng build --configuration=production
ng test --watch=false --browsers=ChromeHeadless
npx playwright test

# Backend - specific test class
./mvnw test -Dtest=RoleBasedAccessControlTest

# Frontend - specific E2E test
npx playwright test critical-path-01

# Frontend - E2E with UI
npx playwright test --ui

@Test
void getAllVisitors_shouldOnlyReturnCurrentChurchVisitors() {
    // Given: Two churches with visitors
    Church church1 = createChurch("Church A");
    Church church2 = createChurch("Church B");
    Visitor visitor1 = createVisitor(church1);
    Visitor visitor2 = createVisitor(church2);

    // When: Church A admin calls getAllVisitors()
    authenticateAs(church1AdminUser);
    List<VisitorResponse> visitors = visitorService.getAllVisitors();

    // Then: Should only see Church A visitors
    assertThat(visitors).hasSize(1);
    assertThat(visitors.get(0).getId()).isEqualTo(visitor1.getId());
    assertThat(visitors).noneMatch(v -> v.getId().equals(visitor2.getId()));
}

@SpringBootTest
@AutoConfigureMockMvc
@Transactional
class FeatureIntegrationTest {
    @Autowired MockMvc mockMvc;

    @Test
    void endpoint_withAdminRole_shouldSucceed() {
        // Given
        authenticateAs(adminUser);

        // When
        var result = mockMvc.perform(get("/api/endpoint"))
            .andExpect(status().isOk());

        // Then
        // assertions
    }

    @Test
    void endpoint_withMemberRole_shouldBeForbidden() {
        authenticateAs(memberUser);
        mockMvc.perform(get("/api/endpoint"))
            .andExpect(status().isForbidden());
    }
}

test.describe('Feature Name', () => {
  test('admin can access feature', async ({ page }) => {
    await loginAs(page, 'admin');
    await page.goto('/feature');
    await expect(page.getByRole('heading')).toContainText('Feature');
  });

  test('member cannot access admin feature', async ({ page }) => {
    await loginAs(page, 'member');
    await page.goto('/admin-feature');
    await expect(page).toHaveURL('/unauthorized');
  });
});