mirror of
https://github.com/InvoiceShelf/InvoiceShelf.git
synced 2026-09-07 15:44:10 +00:00
Darko Gjorgjijoski
5ef7804e60
* refactor: stabilize model identities for domain migration * refactor: extract module platform context * refactor: assign models to domain contexts * refactor: extract ai platform context * refactor: extract storage platform context * refactor: extract mail platform context * refactor: extract pdf platform context * refactor: extract operations platform context * refactor: move installation into operations platform * refactor: extract money domain context * refactor: extract taxation domain context * refactor: extract catalog domain context * refactor: extract metadata domain context * refactor: extract reporting domain context * refactor: extract purchases domain context * refactor: extract receivables domain context * refactor: extract accounts domain context * refactor: complete reporting statement boundary * refactor: extract contacts domain context * refactor: extract sales domain context * refactor: remove legacy application layers * fix: migrate legacy bouncer role identities
94 lines
3.3 KiB
PHP
94 lines
3.3 KiB
PHP
<?php
|
|
|
|
use App\Domains\Accounts\Models\Company;
|
|
use App\Domains\Contacts\Models\Customer;
|
|
use App\Domains\Sales\Models\Invoice;
|
|
use App\Platform\Ai\Application\Tools\SearchInvoicesTool;
|
|
use Illuminate\Support\Facades\Artisan;
|
|
|
|
beforeEach(function () {
|
|
Artisan::call('db:seed', ['--class' => 'DatabaseSeeder', '--force' => true]);
|
|
Artisan::call('db:seed', ['--class' => 'DemoSeeder', '--force' => true]);
|
|
});
|
|
|
|
test('search_invoices scopes strictly to the passed company id', function () {
|
|
$companyA = Company::first();
|
|
$companyB = Company::factory()->create();
|
|
|
|
$customerA = Customer::factory()->create(['company_id' => $companyA->id]);
|
|
$customerB = Customer::factory()->create(['company_id' => $companyB->id]);
|
|
|
|
$invoiceA = Invoice::factory()->create([
|
|
'company_id' => $companyA->id,
|
|
'customer_id' => $customerA->id,
|
|
'invoice_number' => 'AAA-001',
|
|
]);
|
|
$invoiceB = Invoice::factory()->create([
|
|
'company_id' => $companyB->id,
|
|
'customer_id' => $customerB->id,
|
|
'invoice_number' => 'BBB-001',
|
|
]);
|
|
|
|
$tool = new SearchInvoicesTool;
|
|
|
|
// Call with companyA — should ONLY see invoiceA
|
|
$resultA = $tool->execute([], $companyA->id, 1);
|
|
$numbersA = collect($resultA['invoices'])->pluck('invoice_number');
|
|
expect($numbersA)->toContain('AAA-001')->not->toContain('BBB-001');
|
|
|
|
// Call with companyB — should ONLY see invoiceB
|
|
$resultB = $tool->execute([], $companyB->id, 1);
|
|
$numbersB = collect($resultB['invoices'])->pluck('invoice_number');
|
|
expect($numbersB)->toContain('BBB-001')->not->toContain('AAA-001');
|
|
});
|
|
|
|
test('search_invoices ignores any company_id the caller tries to pass in arguments', function () {
|
|
$companyA = Company::first();
|
|
$companyB = Company::factory()->create();
|
|
|
|
$customerB = Customer::factory()->create(['company_id' => $companyB->id]);
|
|
Invoice::factory()->create([
|
|
'company_id' => $companyB->id,
|
|
'customer_id' => $customerB->id,
|
|
'invoice_number' => 'BBB-LEAK',
|
|
]);
|
|
|
|
$tool = new SearchInvoicesTool;
|
|
|
|
// Simulate an LLM trying to pass company_id as an argument — even if present,
|
|
// the tool must ignore it because the schema doesn't include that field and
|
|
// the execute() method uses the injected $companyId.
|
|
$result = $tool->execute(
|
|
['company_id' => $companyB->id, 'query' => 'BBB'],
|
|
$companyA->id,
|
|
1,
|
|
);
|
|
|
|
expect(collect($result['invoices'])->pluck('invoice_number'))
|
|
->not->toContain('BBB-LEAK');
|
|
});
|
|
|
|
test('search_invoices respects the limit parameter with a hard cap', function () {
|
|
$company = Company::first();
|
|
$customer = Customer::factory()->create(['company_id' => $company->id]);
|
|
|
|
// Create 60 invoices — more than the max limit of 50
|
|
for ($i = 0; $i < 60; $i++) {
|
|
Invoice::factory()->create([
|
|
'company_id' => $company->id,
|
|
'customer_id' => $customer->id,
|
|
'invoice_number' => 'SCAN-'.str_pad((string) $i, 3, '0', STR_PAD_LEFT),
|
|
]);
|
|
}
|
|
|
|
$tool = new SearchInvoicesTool;
|
|
|
|
// Passing limit=99 should be capped to 50
|
|
$result = $tool->execute(['limit' => 99], $company->id, 1);
|
|
expect($result['invoices'])->toHaveCount(50);
|
|
|
|
// Default limit is 10
|
|
$result = $tool->execute([], $company->id, 1);
|
|
expect($result['invoices'])->toHaveCount(10);
|
|
});
|