sure/test/models/assistant/function/get_account_statement_test.rb

require "test_helper"

class Assistant::Function::GetAccountStatementTest < ActiveSupport::TestCase
  include ActiveSupport::Testing::TimeHelpers

  DOWNLOAD_TTL_OVERSHOOT = Assistant::Function::GetAccountStatement::DOWNLOAD_URL_TTL + 1.minute

  setup do
    @user = users(:family_admin)
    @account = accounts(:depository)
    @function = Assistant::Function::GetAccountStatement.new(@user)
  end

  test "returns statement identity and reconciliation checks" do
    statement = create_statement(account: @account)
    statement.update!(
      period_start_on: Date.new(2024, 1, 1),
      period_end_on: Date.new(2024, 1, 31),
      opening_balance: 100,
      closing_balance: 200,
      currency: @account.currency
    )

    result = @function.call("statement_id" => statement.id)

    assert result[:success]
    assert_equal statement.id, result[:statement][:id]
    assert_equal statement.content_sha256, result[:statement][:content_sha256]
    assert_equal "2024-01-31", result[:statement][:period_end_on]
    assert result[:statement].key?(:reconciliation_checks)
  end

  # Nothing extracts balances from an uploaded document, so a statement archived
  # over MCP has no reconciliation. The payload has to say so — an empty check
  # list must never read as "the document agrees with the ledger".
  test "says explicitly that an unreconciled statement was not verified" do
    statement = create_statement(account: @account)

    result = @function.call("statement_id" => statement.id)

    assert result[:success]
    assert_equal "unavailable", result[:statement][:reconciliation_status]
    assert_empty result[:statement][:reconciliation_checks]
    assert_match(/not evidence/i, result[:statement][:reconciliation_note])
  end

  test "omits the note once reconciliation is available" do
    period_start = Date.new(2024, 1, 1)
    period_end = Date.new(2024, 1, 31)
    statement = create_statement(account: @account)
    statement.update!(
      period_start_on: period_start,
      period_end_on: period_end,
      opening_balance: 100,
      closing_balance: 200,
      currency: @account.currency
    )
    # Checks compare against the ledger, so both sides have to exist: the
    # statement's figures and a Balance row on each period boundary.
    # start_balance / end_balance are generated columns, so they are driven by
    # start_cash_balance rather than assigned.
    @account.balances.create!(date: period_start, balance: 100, start_cash_balance: 100, currency: @account.currency)
    @account.balances.create!(date: period_end, balance: 200, start_cash_balance: 200, currency: @account.currency)

    result = @function.call("statement_id" => statement.id)

    assert_equal "matched", result[:statement][:reconciliation_status]
    assert_not_empty result[:statement][:reconciliation_checks]
    assert_nil result[:statement][:reconciliation_note]
  end

  test "download url carries an expiring signed id" do
    statement = create_statement(account: @account)

    Rails.application.config.action_mailer.stubs(:default_url_options).returns({ host: "example.com" })
    url = @function.call("statement_id" => statement.id).dig(:statement, :download_url)

    assert_not_nil url, "expected a download URL when a host is configured"
    signed_id = url[%r{/blobs/redirect/([^/]+)/}, 1]
    assert_not_nil signed_id, "expected a signed id in #{url}"

    assert_equal statement.original_file.blob,
                 ActiveStorage::Blob.find_signed(signed_id)

    travel DOWNLOAD_TTL_OVERSHOOT do
      assert_nil ActiveStorage::Blob.find_signed(signed_id),
                 "signed id must expire — the tool description promises 15 minutes"
    end
  end

  test "returns not_found for an unknown id" do
    result = @function.call("statement_id" => SecureRandom.uuid)

    assert_not result[:success]
    assert_equal "not_found", result[:error]
  end

  test "returns not_found for a non-uuid id" do
    result = @function.call("statement_id" => "nope")

    assert_not result[:success]
    assert_equal "not_found", result[:error]
  end

  test "returns not_found for a statement the user cannot view" do
    statement = create_statement(account: accounts(:other_asset))

    result = Assistant::Function::GetAccountStatement.new(users(:family_member)).call("statement_id" => statement.id)

    assert_not result[:success]
    assert_equal "not_found", result[:error]
  end

  test "refuses a user who cannot manage the vault" do
    statement = create_statement(account: @account)

    result = Assistant::Function::GetAccountStatement.new(family_guest).call("statement_id" => statement.id)

    assert_not result[:success]
    assert_equal "forbidden", result[:error]
  end

  private
    def create_statement(account:)
      AccountStatement.create_from_upload!(
        family: @user.family,
        account: account,
        file: uploaded_file(
          filename: "statement-#{SecureRandom.hex(4)}.csv",
          content_type: "text/csv",
          content: "date,amount\n2024-01-01,#{SecureRandom.random_number(1000)}\n"
        )
      )
    end
end