Jyotisha/tests/test_supabase_user_data_contract.py

import re
from pathlib import Path


MIGRATION = (
    Path(__file__).resolve().parents[1]
    / "frontend"
    / "supabase"
    / "migrations"
    / "20260715030000_user_profiles_chat_sessions.sql"
)
COORDS_MIGRATION = (
    Path(__file__).resolve().parents[1]
    / "frontend"
    / "supabase"
    / "migrations"
    / "20260715050000_profile_coordinates.sql"
)
CONSULTATION_MIGRATION = (
    Path(__file__).resolve().parents[1]
    / "frontend"
    / "supabase"
    / "migrations"
    / "20260717000000_consultation_request_lifecycle.sql"
)
CHART_PROFILE_MIGRATION = (
    Path(__file__).resolve().parents[1]
    / "frontend"
    / "supabase"
    / "migrations"
    / "20260718100000_repair_missing_chart_profiles.sql"
)
SYNASTRY_REPORT_MIGRATION = (
    Path(__file__).resolve().parents[1]
    / "frontend"
    / "supabase"
    / "migrations"
    / "20260718101000_repair_missing_synastry_reports.sql"
)
PAGE = Path(__file__).resolve().parents[1] / "frontend" / "src" / "app" / "page.tsx"
_FRONTEND_SRC = Path(__file__).resolve().parents[1] / "frontend" / "src"
HOME_SURFACE_FILES = (
    PAGE,
    _FRONTEND_SRC / "lib" / "home-types.ts",
    _FRONTEND_SRC / "lib" / "home-profile.ts",
    _FRONTEND_SRC / "lib" / "home-cloud-sync.ts",
    _FRONTEND_SRC / "components" / "birth-location-fields.tsx",
    _FRONTEND_SRC / "components" / "profile-fields.tsx",
    _FRONTEND_SRC / "components" / "onboarding-chat-message.tsx",
    _FRONTEND_SRC / "components" / "chart-library-panel.tsx",
    _FRONTEND_SRC / "components" / "starter-home.tsx",
)


OPTIONAL_HOME_HOOKS = (
    _FRONTEND_SRC / "hooks" / "use-session-management.ts",
    _FRONTEND_SRC / "hooks" / "use-consultation-run.ts",
    _FRONTEND_SRC / "hooks" / "use-profile-onboarding.ts",
    _FRONTEND_SRC / "hooks" / "use-rectification-surface.ts",
    # 状态下沉把合盘从 page.tsx 搬进了自己的 hook（2026-09-16）。首页表面是这
    # 些文件的并集，新 hook 不进这张白名单，下面的合盘断言就会在代码完全正确
    # 的情况下变红。新增 Home 级 hook 时必须同步加进来。
    _FRONTEND_SRC / "hooks" / "use-synastry.ts",
)


def _home_surface() -> str:
    parts = [path.read_text(encoding="utf-8") for path in HOME_SURFACE_FILES]
    parts.extend(path.read_text(encoding="utf-8") for path in OPTIONAL_HOME_HOOKS if path.exists())
    return "".join(parts)


SESSION_CREATE_ROUTE = Path(__file__).resolve().parents[1] / "frontend" / "src" / "app" / "api" / "sessions" / "route.ts"
SESSION_ITEM_ROUTE = Path(__file__).resolve().parents[1] / "frontend" / "src" / "app" / "api" / "sessions" / "[id]" / "route.ts"
ACCOUNT_ROUTE = Path(__file__).resolve().parents[1] / "frontend" / "src" / "app" / "api" / "account" / "route.ts"
CHART_PROFILE_ROUTE = Path(__file__).resolve().parents[1] / "frontend" / "src" / "app" / "api" / "chart-profiles" / "route.ts"
CHART_PROFILE_DELETE_ROUTE = Path(__file__).resolve().parents[1] / "frontend" / "src" / "app" / "api" / "chart-profiles" / "[id]" / "route.ts"
SYNASTRY_ROUTE = Path(__file__).resolve().parents[1] / "frontend" / "src" / "app" / "api" / "synastry" / "route.ts"
SYNASTRY_REPORT_ROUTE = Path(__file__).resolve().parents[1] / "frontend" / "src" / "app" / "api" / "synastry-reports" / "route.ts"


def _sql() -> str:
    return re.sub(r"\s+", " ", MIGRATION.read_text(encoding="utf-8").lower()).strip()


def test_user_profile_and_chat_session_database_contract() -> None:
    sql = _sql()

    for definition in (
        "name text",
        "birth_date date",
        "birth_time time without time zone",
        "country_code text",
        "province_code text",
        "city_code text",
        "district_code text",
    ):
        assert f"add column if not exists {definition}" in sql

    assert "create policy profiles_update_own" in sql
    assert "for update to authenticated using ((select auth.uid()) = id) with check ((select auth.uid()) = id)" in sql
    assert "grant update ( name, birth_date, birth_time, country_code, province_code, city_code, district_code, updated_at ) on table public.profiles to authenticated" in sql

    assert "create table if not exists public.chat_sessions" in sql
    for definition in (
        "id uuid primary key default gen_random_uuid()",
        "user_id uuid not null references auth.users(id) on delete cascade",
        "title text not null default '新对话'",
        "theme text not null default 'general'",
        "messages jsonb not null default '[]'::jsonb",
        "created_at timestamptz not null default now()",
        "updated_at timestamptz not null default now()",
    ):
        assert definition in sql
    assert "check (theme in ('career', 'marriage', 'timing', 'general'))" in sql
    assert "check (jsonb_typeof(messages) = 'array')" in sql
    assert "alter table public.chat_sessions enable row level security" in sql
    assert "create policy chat_sessions_select_own on public.chat_sessions for select to authenticated using ((select auth.uid()) = user_id)" in sql
    assert "create policy chat_sessions_insert_own on public.chat_sessions for insert to authenticated with check ((select auth.uid()) = user_id)" in sql
    assert "create policy chat_sessions_update_own on public.chat_sessions for update to authenticated using ((select auth.uid()) = user_id) with check ((select auth.uid()) = user_id)" in sql
    assert "revoke all on table public.chat_sessions from anon, authenticated, service_role" in sql
    assert "grant select on table public.chat_sessions to authenticated" in sql
    assert "grant insert (id, user_id, title, theme, messages, updated_at) on table public.chat_sessions to authenticated" in sql
    assert "grant update (title, theme, messages, updated_at) on table public.chat_sessions to authenticated" in sql
    assert "grant delete" not in sql


def test_chat_page_uses_authenticated_cloud_persistence() -> None:
    source = _home_surface()
    create_route = SESSION_CREATE_ROUTE.read_text(encoding="utf-8")
    item_route = SESSION_ITEM_ROUTE.read_text(encoding="utf-8")

    # Former value: page talked to Supabase with `.from("profiles")` / `.from("chat_sessions")`.
    # Persistence is now same-origin APIs; the lock is still "no browser-owned writes".
    assert 'fetch("/api/account"' in source
    assert 'fetch("/api/sessions"' in source
    assert '.from("profiles")' not in source
    assert '.from("chat_sessions")' not in source
    assert 'await writeChatSession(session.id, values, mode)' in source
    write_contract = (
        Path(__file__).resolve().parents[1]
        / "frontend"
        / "src"
        / "lib"
        / "chat-session-write-contract.ts"
    ).read_text(encoding="utf-8")
    assert 'mode === "create" ? "/api/sessions"' in write_contract
    # 原值: assert 'user_id: user.id' in create_route
    # 新值: 路由传 userId，由 chat-session-write-contract 落成 user_id
    # 原因: 创建路由改走 chatSessionCreateInsertRow(...)（BUG-729～731 那一轮），
    #       字面量搬了家；归属校验本身没变，断言要跟着搬，不是放宽。
    assert 'userId: user.id' in create_route
    assert 'user_id: input.userId' in write_contract
    assert '.eq("user_id", user.id)' in item_route
    assert '.upsert(' not in source
    assert 'await persistSession(userSession)' not in source
    assert source.index('updateSession(sessionId, () => userSession)') < source.index('await persistSession(completedSession)')
    assert 'function completedOnboardingTranscript(profile: Profile, greeting: string): Message[]' in source
    # Former value: `messages: [...preservedMessages, { role: "user", text: question }]`
    # The user turn is still appended unless the question is already present.
    assert 'messages: questionAlreadyPresent ? preservedMessages : [...preservedMessages, { role: "user", text: question }]' in source
    assert 'await persistSession(completedSession)' in source
    assert 'const stoppedRequestAwaitingSettlement = useRef<string | null>(null)' in source
    assert 'const stoppedSessionPersistence = useRef(new Map<string, Promise<void>>())' in source
    # Former values: persist interruptedSession when `ownsInterface && !partialReply`.
    # Interrupted answers stay in page memory; the client does not replace the server transcript.
    assert "await persistSession(interruptedSession)" not in source
    assert "if (!cancelled && ownsInterface && pendingConsultation.current)" in source
    assert "await persistence" in source
    assert "pendingSessionId || cancellationInFlight.current" in source
    assert "setCancellationPending(true)" in source
    # Former value: "系统正在以账户记录为准同步点数"
    assert "正在停止回答并申请退回本次点数…" in source
    assert "void refreshAccount()" in source
    assert "回答中途断开，已保留现有内容，本次已计费。" not in source
    assert "本次已开始生成并计费" not in source
    # Former value: `localStorage.setItem(chartLibraryStorageKey(accountId)`
    # wrote a local library copy on cloud save failure.
    assert "localStorage.setItem(chartLibraryStorageKey(accountId)" not in source
    assert 'localStorage.setItem("chat_sessions"' not in source


def test_account_profile_patch_rejects_array_payloads() -> None:
    route = ACCOUNT_ROUTE.read_text(encoding="utf-8")
    schema = (
        Path(__file__).resolve().parents[1]
        / "frontend"
        / "src"
        / "lib"
        / "account-profile-patch.ts"
    ).read_text(encoding="utf-8")
    # Former value: `typeof payload !== "object" || Array.isArray(payload)` in the route.
    # Arrays are still rejected: the route parses with a Zod object schema.
    assert "accountProfilePatchSchema.safeParse" in route
    assert "export const accountProfilePatchSchema = z.object({" in schema
    assert "账户资料格式不正确" in route


def test_chart_profile_library_has_cloud_table_api_and_local_fallback() -> None:
    sql = re.sub(r"\s+", " ", CHART_PROFILE_MIGRATION.read_text(encoding="utf-8").lower()).strip()
    route = CHART_PROFILE_ROUTE.read_text(encoding="utf-8")
    delete_route = CHART_PROFILE_DELETE_ROUTE.read_text(encoding="utf-8")
    page = _home_surface()

    for token in (
        "create table if not exists public.chart_profiles",
        "user_id uuid not null references auth.users(id) on delete cascade",
        "role text not null default 'other' check (role in ('self', 'other'))",
        "profile jsonb not null check (jsonb_typeof(profile) = 'object')",
        "create unique index if not exists chart_profiles_one_self_per_user_idx",
        "alter table public.chart_profiles enable row level security",
        "create policy chart_profiles_select_own",
        "create policy chart_profiles_insert_own",
        "create policy chart_profiles_update_own",
        "create policy chart_profiles_delete_own",
        "grant delete on table public.chart_profiles to authenticated",
    ):
        assert token in sql

    for token in (
        'from("chart_profiles")',
        'eq("user_id", user.id)',
        'eq("role", "self")',
        "Array.isArray(body.profile)",
        'insert({ user_id: user.id, role, profile: body.profile',
        'insert({ user_id: user.id, role, profile: body.profile, updated_at: updatedAt })',
    ):
        assert token in route
    assert 'upsert(record, { onConflict: "id" })' not in route
    assert '.delete({ count: "exact" })' in delete_route
    assert 'eq("role", "other")' in delete_route
    assert "count !== 1" in delete_route
    assert "星盘不存在或无权删除" in delete_route

    for token in (
        "fetchCloudChartLibrary",
        "saveCloudChartProfile",
        "deleteCloudChartProfile",
        "buildSynastryQuestion",
        "draftSynastryQuestionFromChart",
        "synastryReportCard",
        "synastryHistory",
        "discardLegacyCloudMirrorKeys",
        "synastry-report-card",
        "synastry-history-list",
        'fetch("/api/synastry"',
        "Ashtakoot",
        "jyotisha_chart_library",
        "保存失败，请重试",
        "星盘库",
        "添加其他人的星盘",
        "用于合盘",
        "设为默认",
    ):
        assert token in page
    # Former values: synastryHistoryStorageKey, chartLibraryStorageKey,
    # and the comment "Cloud chart library is best-effort".
    assert "synastryHistoryStorageKey" not in page
    assert "chartLibraryStorageKey" not in page
    assert "Cloud chart library is best-effort" not in page
    assert "ayanam-profile" not in page
    assert "ayanam-sessions" not in page


def test_synastry_route_orchestrates_python_chart_and_ashtakoot() -> None:
    route = SYNASTRY_ROUTE.read_text(encoding="utf-8")
    for token in (
        'const apiBase = process.env.JYOTISH_API_BASE ?? "http://127.0.0.1:5200"',
        'postPython("/api/chart", selfPayload)',
        'postPython("/api/chart", partnerPayload)',
        'postPython("/api/varga_full"',
        'postPython("/api/synastry"',
        "moonLongitude(selfChart)",
        "moonSummary(selfChart)",
        "d9Summary(selfD9)",
        "relationshipReport",
        "scoreBand",
        "nextEvidence",
        "ashtakoot_plus_moon_nakshatra_d9",
        'evidenceLayers: ["ashtakoot", "moon_nakshatra", "d9_navamsa"]',
        'status: "blocked"',
        "synastryBirthPayload",
    ):
        assert token in route


def test_synastry_reports_are_cloud_persisted_per_user() -> None:
    sql = re.sub(r"\s+", " ", SYNASTRY_REPORT_MIGRATION.read_text(encoding="utf-8").lower()).strip()
    route = SYNASTRY_REPORT_ROUTE.read_text(encoding="utf-8")
    page = _home_surface()

    for token in (
        "create table if not exists public.synastry_reports",
        "user_id uuid not null references auth.users(id) on delete cascade",
        "partner_name text not null default '对方'",
        "report jsonb not null check (jsonb_typeof(report) = 'object')",
        "alter table public.synastry_reports enable row level security",
        "create policy synastry_reports_select_own on public.synastry_reports for select to authenticated using ((select auth.uid()) = user_id)",
        "create policy synastry_reports_insert_own on public.synastry_reports for insert to authenticated with check ((select auth.uid()) = user_id)",
        "create policy synastry_reports_delete_own on public.synastry_reports for delete to authenticated using ((select auth.uid()) = user_id)",
        "grant select on table public.synastry_reports to authenticated",
        "grant insert (id, user_id, partner_name, report, created_at) on table public.synastry_reports to authenticated",
    ):
        assert token in sql

    for token in (
        '.from("synastry_reports")',
        '.select("id, partner_name, report, created_at")',
        ".eq(\"user_id\", user.id)",
        ".limit(10)",
        "partner_name: partnerName",
        "report: body.report",
    ):
        assert token in route

    for token in (
        "fetchCloudSynastryHistory",
        "saveCloudSynastryReport",
        'fetch("/api/synastry-reports"',
        "未能存入历史",
        "cloud_synastry_history_unavailable",
        "cloud_synastry_report_save_failed",
    ):
        assert token in page
    # Former value: writeSynastryHistory(accountId, next) wrote a local
    # history copy when cloud save failed.
    assert "writeSynastryHistory(accountId, next)" not in page


def test_consultation_credit_lifecycle_is_idempotent_and_server_only() -> None:
    sql = re.sub(r"\s+", " ", CONSULTATION_MIGRATION.read_text(encoding="utf-8").lower()).strip()

    assert "create table if not exists public.consultation_requests" in sql
    assert "primary key (user_id, request_id)" in sql
    assert "status in ('reserved', 'completed', 'cancelled')" in sql
    for function_name in (
        "begin_consultation_credit",
        "complete_consultation_credit",
        "cancel_consultation_credit",
    ):
        assert f"create or replace function public.{function_name}" in sql
        assert f"grant execute on function public.{function_name}(uuid, text) to service_role" in sql
        assert f"revoke all on function public.{function_name}(uuid, text) from public, anon, authenticated" in sql
    assert "pg_advisory_xact_lock" in sql
    assert "if v_status = 'completed'" in sql
    assert "'request_completed'::text" in sql
    assert "if v_status = 'cancelled'" in sql


def test_profile_coordinates_are_persisted_with_database_bounds() -> None:
    sql = re.sub(r"\s+", " ", COORDS_MIGRATION.read_text(encoding="utf-8").lower()).strip()
    source = _home_surface()

    for definition in (
        "latitude double precision",
        "longitude double precision",
        "timezone_offset double precision",
    ):
        assert f"add column if not exists {definition}" in sql

    assert "latitude between -90 and 90" in sql
    assert "longitude between -180 and 180" in sql
    assert "timezone_offset between -12 and 14" in sql
    assert "grant update (latitude, longitude, timezone_offset) on table public.profiles to authenticated" in sql
    assert "latitude: birthPlace?.lat ?? null" in source
    assert "longitude: birthPlace?.lon ?? null" in source
    assert "timezone_offset: birthPlace?.tz ?? null" in source