bot-28/tests/Integration/AgentApplicationTest.php

<?php

namespace Tests\Integration;

use App\Console\Commands\UnlinkAgentOwners;
use App\Http\Controllers\admin\AgentApplication as AdminApplication;
use App\Models\Agent\Agent;
use App\Models\Agent\AgentApplication;
use App\Services\Agent\AgentApplicationService;
use App\Services\Agent\AgentService;
use App\Services\SiteInboxService;
use Illuminate\Config\Repository;
use Illuminate\Database\Capsule\Manager;
use Illuminate\Database\QueryException;
use Illuminate\Database\Schema\Blueprint;
use Illuminate\Foundation\Application;
use Illuminate\Hashing\BcryptHasher;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\DB;
use Illuminate\Support\Facades\Facade;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Schema;
use Illuminate\Translation\ArrayLoader;
use Illuminate\Translation\Translator;
use Illuminate\Validation\Factory;
use PHPUnit\Framework\TestCase;
use Symfony\Component\Console\Tester\CommandTester;

class AgentApplicationTest extends TestCase
{
    private Application $app;
    private AgentService $agents;
    private AgentApplicationService $service;

    protected function setUp(): void
    {
        Facade::clearResolvedInstances();
        $this->app = new Application(dirname(__DIR__, 2));
        $this->app->instance('config', new Repository(['app' => ['locale' => 'zh', 'timezone' => 'Asia/Shanghai']]));
        Facade::setFacadeApplication($this->app);
        $db = new Manager($this->app);
        $db->addConnection(['driver' => 'sqlite', 'database' => ':memory:', 'prefix' => 'bot_']);
        $db->setAsGlobal(); $db->bootEloquent();
        $this->app->instance('db', $db->getDatabaseManager());
        $this->app->bind('db.schema', fn () => $db->schema());
        $this->app->instance('hash', new BcryptHasher(['rounds' => 4]));
        $this->app->instance('log', new \Psr\Log\NullLogger());
        $translator = new Translator(new ArrayLoader(), 'zh');
        $this->app->instance('translator', $translator);
        $validator = new Factory($translator, $this->app);
        $validator->setPresenceVerifier(new \Illuminate\Validation\DatabasePresenceVerifier($db->getDatabaseManager()));
        $this->app->instance('validator', $validator);
        $this->app->instance(\Illuminate\Contracts\Routing\ResponseFactory::class, new \Tests\Support\JsonResponseFactory());
        Request::macro('validate', function (array $rules) { return app('validator')->make($this->all(), $rules)->validate(); });
        Schema::create('users', function (Blueprint $t) {
            $t->id(); $t->string('user_id')->unique(); $t->string('member_id')->unique(); $t->string('account');
            $t->string('username')->default(''); $t->string('first_name')->default(''); $t->integer('from')->default(1);
            $t->integer('is_banned')->default(0); $t->dateTime('delete_time')->nullable(); $t->string('language')->nullable(); $t->timestamps();
        });
        // Metadata only: the existing profit-profile migration inspects MySQL
        // indexes; the application and all business queries still use real SQLite.
        DB::connection()->getPdo()->sqliteCreateFunction('DATABASE', static fn () => 'isolated');
        DB::statement("ATTACH DATABASE ':memory:' AS information_schema");
        DB::statement('CREATE TABLE information_schema.statistics (table_schema TEXT,table_name TEXT,index_name TEXT,column_name TEXT,non_unique INTEGER,seq_in_index INTEGER)');
        foreach (['2026_08_24_140000_create_agent_system_tables.php', '2026_08_28_120000_create_agent_profit_profiles_and_rebate_records.php'] as $file) {
            (require dirname(__DIR__, 2) . '/database/migrations/' . $file)->up();
        }
        // Pre-upgrade flow commission structures; 2026_11_07 removes them again.
        Schema::create('agent_flow_commission_profiles', function (Blueprint $t) {
            $t->id(); $t->string('name'); $t->integer('is_default')->default(0); $t->timestamps();
        });
        Schema::create('agent_flow_commission_assignments', function (Blueprint $t) {
            $t->id(); $t->unsignedBigInteger('agent_id'); $t->date('effective_from'); $t->timestamps();
        });
        Schema::table('agents', fn (Blueprint $t) => $t->unsignedBigInteger('flow_commission_profile_id')->nullable());
        Schema::table('agent_profit_commission_profiles', fn (Blueprint $t) => $t->unsignedBigInteger('owner_agent_id')->nullable());
        Schema::create('operation_audits', function (Blueprint $t) {
            $t->id(); $t->string('resource_type'); $t->integer('resource_id')->nullable(); $t->string('action'); $t->json('changes');
            $t->integer('operator_id')->nullable(); $t->string('operator_name'); $t->timestamp('created_at')->useCurrent();
        });
        foreach (['2026_10_26_110000_create_site_messages.php', '2026_10_27_150000_create_site_realtime_events.php', '2026_10_29_140000_create_agent_applications.php',
            '2026_11_07_120000_agent_joint_venture_and_equity.php', '2026_11_08_150000_add_type_to_agent_applications.php',
            '2026_11_10_120000_add_is_test_to_agents.php'] as $file) {
            (require dirname(__DIR__, 2) . '/database/migrations/' . $file)->up();
        }
        foreach ([11 => 'zh', 22 => 'en', 33 => null] as $id => $language) DB::table('users')->insert([
            'id' => $id, 'user_id' => (string) (10000 + $id), 'member_id' => 'M' . $id, 'account' => 'member' . $id,
            'first_name' => 'Member ' . $id, 'from' => 1, 'language' => $language, 'agent_id' => 99,
        ]);
        $this->agents = new AgentService();
        $this->service = new AgentApplicationService();
        $this->request();
    }

    protected function tearDown(): void
    {
        DB::disconnect(); Facade::clearResolvedInstances(); parent::tearDown();
    }

    private function request(array $params = []): void
    {
        $request = Request::create('/admin/agent/applicationAudit', 'POST', $params);
        $request->user = (object) ['id' => 1, 'username' => 'admin'];
        $this->app->instance('request', $request);
    }

    private function application(int $userId = 11, string $username = 'newagent', int $type = Agent::TYPE_JOINT): AgentApplication
    {
        return AgentApplication::create([
            'type' => $type, 'user_id' => $userId, 'pending_user_id' => $userId, 'username' => $username, 'pending_username' => $username,
            'password_hash' => password_hash('login-secret', PASSWORD_BCRYPT, ['cost' => 4]),
            'withdraw_password_hash' => password_hash('withdraw-secret', PASSWORD_BCRYPT, ['cost' => 4]), 'status' => 'pending',
        ]);
    }

    private function audit(int $id, string $status = 'approved', array $extra = []): array
    {
        $this->request(['id' => $id, 'status' => $status] + $extra);
        return (new AdminApplication())->audit($this->service, $this->agents)->getData(true);
    }

    public function test_approval_creates_independent_agent_keeps_passwords_and_sends_one_private_message(): void
    {
        $application = $this->application();
        $response = $this->audit($application->id);
        $this->assertSame(0, $response['code'], $response['msg']);
        $agent = Agent::firstOrFail();
        $this->assertNull($agent->owner_user_id);
        $this->assertSame(1, $agent->level);
        $this->assertSame(1, $agent->status);
        $this->assertTrue(Hash::check('login-secret', $agent->password));
        $this->assertTrue(Hash::check('withdraw-secret', $agent->withdraw_password));
        $this->assertSame(99, (int) DB::table('users')->where('id', 11)->value('agent_id'));
        $this->assertSame(Agent::TYPE_JOINT, $agent->type);
        $this->assertNull($agent->profit_commission_profile_id, 'the agent applies for a plan in its own backend');
        $application->refresh();
        $this->assertSame('approved', $application->status);
        $this->assertSame($agent->id, (int) $application->agent_id);
        $this->assertNull($application->password_hash); $this->assertNull($application->withdraw_password_hash);
        $this->assertNull($application->pending_user_id); $this->assertNull($application->pending_username);
        $inbox = new SiteInboxService();
        $message = DB::table('site_messages')->first();
        $this->assertStringContainsString('newagent', $inbox->detail('user', 11, $message->id)['content']);
        $this->assertSame(1, $inbox->unread('user', 11)['count']);
        $this->assertSame(0, $inbox->unread('user', 22)['count']);
        $this->assertSame(1, DB::table('site_realtime_events')->count());
        $this->assertSame(0, $this->audit($application->id)['code']);
        $this->assertSame(1, Agent::count()); $this->assertSame(1, DB::table('site_messages')->count());
        $this->assertNotSame(0, $this->audit($application->id, 'rejected', ['remark' => 'Cannot reverse'])['code']);
        $payload = json_encode($response) . DB::table('operation_audits')->get()->toJson() . DB::table('site_message_translations')->get()->toJson();
        foreach (['login-secret', 'withdraw-secret', 'password_hash', 'withdraw_password_hash'] as $secret) $this->assertStringNotContainsString($secret, $payload);
    }

    public function test_rejection_requires_reason_releases_pending_keys_and_notifies_in_member_language(): void
    {
        $application = $this->application(22);
        $this->assertNotSame(0, $this->audit($application->id, 'rejected')['code']);
        $this->assertSame('pending', $application->refresh()->status);
        $this->assertSame(0, $this->audit($application->id, 'rejected', ['remark' => 'Please update your information'])['code']);
        $this->assertSame(0, Agent::count());
        $this->assertSame('rejected', $application->refresh()->status);
        $this->assertNull($application->pending_username); $this->assertNull($application->pending_user_id);
        $receipt = DB::table('site_message_recipients')->first();
        $this->assertSame('en', $receipt->language); $this->assertSame(22, (int) $receipt->recipient_id);
        $content = (new SiteInboxService())->detail('user', 22, $receipt->message_id)['content'];
        $this->assertStringContainsString('Please update your information', $content);
        $this->assertSame(0, $this->audit($application->id, 'rejected', ['remark' => 'Please update your information'])['code']);
        $this->assertSame(1, DB::table('site_messages')->count());
        $this->application(22);
        $this->assertSame(2, AgentApplication::count());
    }

    public function test_notification_failure_rolls_back_agent_approval_and_profile_assignments(): void
    {
        $application = $this->application();
        DB::statement("CREATE TRIGGER reject_agent_notice BEFORE INSERT ON bot_site_messages BEGIN SELECT RAISE(ABORT, 'notice failure'); END");
        try {
            $this->service->audit(['id' => $application->id, 'status' => 'approved'], $this->agents);
            $this->fail('Notification failure must roll back approval');
        } catch (QueryException $e) { $this->assertStringContainsString('notice failure', $e->getMessage()); }
        $this->assertSame(0, Agent::count());
        $this->assertSame(0, DB::table('agent_profit_commission_assignments')->count());
        $this->assertSame('pending', $application->refresh()->status);
        $this->assertNotNull($application->password_hash); $this->assertSame(11, (int) $application->pending_user_id);
        $this->assertSame(0, DB::table('site_messages')->count()); $this->assertSame(0, DB::transactionLevel());
    }

    public function test_already_approved_member_cannot_open_a_second_agent_through_another_application(): void
    {
        $application = $this->application();
        $this->assertSame(0, $this->audit($application->id)['code']);
        $another = $this->application(11, 'anotheragent');
        $this->assertSame('该会员已有通过的代理申请', $this->audit($another->id)['msg']);
        $this->assertSame(1, Agent::count());
        $this->assertSame('pending', $another->refresh()->status);
    }

    public function test_unlink_command_previews_and_only_updates_explicitly_selected_agent_owners(): void
    {
        $first = $this->agents->create(['username' => 'aa123', 'password' => 'legacy-secret']);
        $second = $this->agents->create(['username' => 'anotheragent', 'password' => 'legacy-secret']);
        DB::table('agents')->where('id', $first->id)->update(['owner_user_id' => 11]);
        DB::table('agents')->where('id', $second->id)->update(['owner_user_id' => 22]);
        $before = DB::table('agents')->where('id', $first->id)->first();
        $users = DB::table('users')->orderBy('id')->get()->toJson();
        $command = new UnlinkAgentOwners();
        $command->setLaravel($this->app);
        $tester = new CommandTester($command);

        $this->assertSame(0, $tester->execute([]));
        $preview = $tester->getDisplay();
        foreach (['检查到关联：2 条', '实际更新：0 条', 'bot_agents', 'owner_user_id', 'aa123', 'anotheragent', 'NULL'] as $value) {
            $this->assertStringContainsString($value, $preview);
        }
        $this->assertEquals($before, DB::table('agents')->where('id', $first->id)->first());
        $this->assertSame(2, $tester->execute(['--write' => true]));

        $this->assertSame(0, $tester->execute(['--username' => 'aa123', '--write' => true]));
        $this->assertStringContainsString('实际更新：1 条', $tester->getDisplay());
        $this->assertStringNotContainsString('anotheragent', $tester->getDisplay());
        $before->owner_user_id = null;
        $this->assertEquals($before, DB::table('agents')->where('id', $first->id)->first());
        $this->assertSame(22, (int) DB::table('agents')->where('id', $second->id)->value('owner_user_id'));

        $this->assertSame(0, $tester->execute(['--all' => true, '--write' => true]));
        $this->assertStringContainsString('实际更新：1 条', $tester->getDisplay());
        $this->assertSame(0, DB::table('agents')->whereNotNull('owner_user_id')->count());
        $this->assertSame($users, DB::table('users')->orderBy('id')->get()->toJson());
        $this->assertSame(0, $tester->execute(['--all' => true, '--write' => true]));
        $this->assertStringContainsString('实际更新：0 条', $tester->getDisplay());
    }

    public function test_listing_hides_credentials_and_unknown_member_language_gets_a_private_fallback_notice(): void
    {
        $application = $this->application(33);
        $listing = $this->service->listing(['status' => 'pending', 'member_id' => 'M33']);
        $this->assertSame(1, $listing['total']);
        $this->assertSame('member33', $listing['data'][0]->member_account);
        $this->assertStringNotContainsString('password', json_encode($listing));
        $this->assertSame(0, $this->audit($application->id)['code']);
        $this->assertSame('zh', DB::table('site_message_recipients')->value('language'));
        $this->assertSame(1, (new SiteInboxService())->unread('user', 33)['count']);
    }

    public function test_admin_update_no_longer_binds_member_identity(): void
    {
        $agent = $this->agents->create(['username' => 'oldaccount', 'password' => 'legacy-secret', 'real_name' => 'Original']);
        $this->request(['id' => $agent->id, 'owner_user_id' => 11, 'real_name' => 'Renamed']);
        $response = (new \App\Http\Controllers\admin\Agent())->update(request(), $this->agents)->getData(true);
        $this->assertSame(0, $response['code'], $response['msg']);
        $this->assertArrayNotHasKey('owner_user_id', $response['data']);
        $this->assertArrayHasKey('profit_commission_profile', $response['data']);
        $this->assertSame('Renamed', $agent->refresh()->real_name);
        $this->assertNull($agent->owner_user_id);
    }

    public function test_application_routes_keep_the_existing_admin_auth_and_agent_management_restriction(): void
    {
        $router = new \Illuminate\Routing\Router(new \Illuminate\Events\Dispatcher($this->app), $this->app);
        $this->app->instance('router', $router);
        $router->group(['prefix' => 'admin'], function () { require dirname(__DIR__, 2) . '/routes/admin.php'; });
        foreach ([['/admin/agent/applications', 'GET'], ['/admin/agent/applicationAudit', 'POST']] as [$path, $method]) {
            $route = $router->getRoutes()->match(Request::create($path, $method));
            $this->assertContains('admin.jwt', $route->gatherMiddleware());
            $this->assertContains('agent.admin', $route->gatherMiddleware());
        }
        $this->request(); request()->user = (object) ['id' => 20, 'username' => 'ordinary-admin'];
        $called = false;
        $response = (new \App\Http\Middleware\AgentAdminMiddleware())->handle(request(), function () use (&$called) { $called = true; });
        $this->assertFalse($called); $this->assertNotSame(0, $response->getData(true)['code']);
    }

    public function test_newly_unavailable_account_or_username_cannot_be_approved(): void
    {
        $application = $this->application();
        DB::table('users')->where('id', 11)->update(['is_banned' => 1]);
        $this->assertNotSame(0, $this->audit($application->id)['code']);
        $this->assertSame('pending', $application->refresh()->status);
        $this->assertSame(0, Agent::count());
        $this->assertSame(0, $this->audit($application->id, 'rejected', ['remark' => '账号已停用'])['code']);
        $this->assertSame(1, DB::table('site_messages')->count());

        $other = $this->application(22, 'takenname');
        $this->agents->create(['username' => 'TakenName', 'password' => 'existing-secret']);
        $response = $this->audit($other->id);
        $this->assertNotSame(0, $response['code']);
        $this->assertStringContainsString('账号已被使用', $response['msg']);
        $this->assertSame('pending', $other->refresh()->status);
        $this->assertSame(1, Agent::count());
        $this->assertSame(1, DB::table('site_messages')->count());
    }

    public function test_approval_always_uses_the_member_application_type(): void
    {
        $equity = $this->application(11, 'equityagent', Agent::TYPE_EQUITY);
        $listed = $this->service->listing(['type' => Agent::TYPE_EQUITY])['data'];
        $this->assertCount(1, $listed);
        $this->assertSame(Agent::TYPE_EQUITY, $listed[0]->type);
        $this->assertSame('入股', $listed[0]->type_text);
        $this->assertSame(0, $this->service->listing(['type' => Agent::TYPE_JOINT])['total']);
        $this->assertSame(0, $this->audit($equity->id)['code']);
        $this->assertSame(Agent::TYPE_EQUITY, (int) Agent::where('username', 'equityagent')->value('type'));

        $joint = $this->application(22, 'jointagent', Agent::TYPE_JOINT);
        $response = $this->audit($joint->id, 'approved', ['type' => Agent::TYPE_EQUITY]);
        $this->assertSame(0, $response['code'], $response['msg']);
        $this->assertSame(Agent::TYPE_JOINT, (int) Agent::where('username', 'jointagent')->value('type'));
        $this->assertSame(Agent::TYPE_JOINT, $joint->fresh()->type);
        $this->assertSame('合营', $this->service->listing(['id' => $joint->id])['data'][0]->type_text);
    }
}