211 lines
8.9 KiB
Python
211 lines
8.9 KiB
Python
import unittest
|
|
|
|
from fastapi import HTTPException
|
|
from fastapi.testclient import TestClient
|
|
|
|
from app.api.standard_clauses import get_audit_log_service, get_standard_clause_service, require_current_user
|
|
from app.main import app
|
|
|
|
|
|
class StubAuditLogService:
|
|
def __init__(self):
|
|
self.events = []
|
|
|
|
def record_event(self, **kwargs):
|
|
self.events.append(kwargs)
|
|
return kwargs
|
|
|
|
|
|
class StubStandardClauseService:
|
|
def list_clauses(self, current_user, page, page_size, contract_type, clause_category, is_active):
|
|
if current_user["role"] != "admin":
|
|
raise HTTPException(status_code=403, detail="forbidden")
|
|
return {
|
|
"items": [
|
|
{
|
|
"id": "clause-123",
|
|
"clause_code": "CLAUSE-PAYMENT-TERM-001",
|
|
"name": "Payment Term",
|
|
"contract_type": contract_type or "purchase",
|
|
"clause_category": clause_category or "payment",
|
|
"variant_group": "standard",
|
|
"source_ids": ["SRC-CIVIL-CODE-001"],
|
|
"applicable_conditions": ["milestone_payment"],
|
|
"excluded_conditions": [],
|
|
"risk_notes_path": "phase13/risk-note.md",
|
|
"clause_path": "phase13/clause.md",
|
|
"content": "The buyer shall pay by milestone.",
|
|
"governance_status": "published",
|
|
"is_active": True if is_active is None else is_active,
|
|
"published_at": "2026-05-12T00:00:00+00:00",
|
|
"published_by": "user-admin",
|
|
"latest_governance_asset_id": "govast-clause-001",
|
|
"metadata": {"phase": "Phase13"},
|
|
"current_version_label": "v1.2",
|
|
"latest_change_summary": "Improve payment schedule",
|
|
"latest_version_created_at": "2026-05-12T00:00:00+00:00",
|
|
"version_count": 3,
|
|
"created_by": "user-admin",
|
|
"updated_by": "user-admin",
|
|
"created_at": "2026-05-10T00:00:00+00:00",
|
|
"updated_at": "2026-05-12T00:00:00+00:00",
|
|
}
|
|
],
|
|
"page": page,
|
|
"page_size": page_size,
|
|
"total": 1,
|
|
}
|
|
|
|
def get_clause_versions(self, current_user, clause_id):
|
|
if current_user["role"] != "admin":
|
|
raise HTTPException(status_code=403, detail="forbidden")
|
|
return {
|
|
"clause_id": clause_id,
|
|
"current_version_label": "v1.2",
|
|
"version_count": 3,
|
|
"items": [
|
|
{
|
|
"id": "clausever-003",
|
|
"clause_id": clause_id,
|
|
"version_label": "v1.2",
|
|
"change_summary": "Improve payment schedule",
|
|
"clause_code": "CLAUSE-PAYMENT-TERM-001",
|
|
"name": "Payment Term",
|
|
"contract_type": "purchase",
|
|
"clause_category": "payment",
|
|
"variant_group": "standard",
|
|
"source_ids": ["SRC-CIVIL-CODE-001"],
|
|
"applicable_conditions": ["milestone_payment"],
|
|
"excluded_conditions": [],
|
|
"risk_notes_path": "phase13/risk-note.md",
|
|
"clause_path": "phase13/clause.md",
|
|
"content": "The buyer shall pay by milestone.",
|
|
"governance_status": "published",
|
|
"is_active": True,
|
|
"metadata": {"phase": "Phase13"},
|
|
"is_current": True,
|
|
"created_by": "user-admin",
|
|
"created_by_name": "Admin",
|
|
"created_at": "2026-05-12T00:00:00+00:00",
|
|
}
|
|
],
|
|
}
|
|
|
|
def publish_clause(self, current_user, clause_id):
|
|
if current_user["role"] != "admin":
|
|
raise HTTPException(status_code=403, detail="forbidden")
|
|
return {
|
|
"id": clause_id,
|
|
"clause_code": "CLAUSE-PAYMENT-TERM-001",
|
|
"name": "Payment Term",
|
|
"published_at": "2026-05-12T00:00:00+00:00",
|
|
"published_by": current_user["id"],
|
|
"latest_governance_asset_id": "govast-clause-001",
|
|
"current_version_label": "v1.2",
|
|
}
|
|
|
|
def unpublish_clause(self, current_user, clause_id):
|
|
if current_user["role"] != "admin":
|
|
raise HTTPException(status_code=403, detail="forbidden")
|
|
return {
|
|
"id": clause_id,
|
|
"clause_code": "CLAUSE-PAYMENT-TERM-001",
|
|
"name": "Payment Term",
|
|
"published_at": None,
|
|
"published_by": None,
|
|
"latest_governance_asset_id": None,
|
|
"current_version_label": "v1.2",
|
|
}
|
|
|
|
def rollback_clause(self, current_user, clause_id, target_version_label, change_summary=None):
|
|
if current_user["role"] != "admin":
|
|
raise HTTPException(status_code=403, detail="forbidden")
|
|
return {
|
|
"id": clause_id,
|
|
"clause_code": "CLAUSE-PAYMENT-TERM-001",
|
|
"name": "Payment Term",
|
|
"published_at": None,
|
|
"published_by": None,
|
|
"latest_governance_asset_id": None,
|
|
"current_version_label": "v1.3",
|
|
"latest_change_summary": change_summary or f"Rollback to {target_version_label}",
|
|
}
|
|
|
|
|
|
class StandardClausesApiTestCase(unittest.TestCase):
|
|
def setUp(self):
|
|
self.audit_log_service = StubAuditLogService()
|
|
app.dependency_overrides[get_standard_clause_service] = lambda: StubStandardClauseService()
|
|
app.dependency_overrides[get_audit_log_service] = lambda: self.audit_log_service
|
|
self.client = TestClient(app)
|
|
|
|
def tearDown(self):
|
|
app.dependency_overrides.clear()
|
|
|
|
def test_admin_can_list_standard_clauses(self):
|
|
app.dependency_overrides[require_current_user] = lambda: {
|
|
"id": "user-admin",
|
|
"tenant_id": "tenant-demo-001",
|
|
"role": "admin",
|
|
}
|
|
response = self.client.get("/api/v1/standard-clauses", params={"contract_type": "purchase"})
|
|
|
|
self.assertEqual(response.status_code, 200)
|
|
payload = response.json()["data"]["items"][0]
|
|
self.assertEqual(payload["clause_code"], "CLAUSE-PAYMENT-TERM-001")
|
|
self.assertEqual(payload["contract_type"], "purchase")
|
|
self.assertEqual(payload["current_version_label"], "v1.2")
|
|
|
|
def test_admin_can_list_clause_versions(self):
|
|
app.dependency_overrides[require_current_user] = lambda: {
|
|
"id": "user-admin",
|
|
"tenant_id": "tenant-demo-001",
|
|
"role": "admin",
|
|
}
|
|
response = self.client.get("/api/v1/standard-clauses/clause-123/versions")
|
|
|
|
self.assertEqual(response.status_code, 200)
|
|
body = response.json()["data"]
|
|
self.assertEqual(body["current_version_label"], "v1.2")
|
|
self.assertEqual(body["version_count"], 3)
|
|
self.assertEqual(body["items"][0]["version_label"], "v1.2")
|
|
|
|
def test_admin_can_publish_unpublish_and_rollback_clause(self):
|
|
app.dependency_overrides[require_current_user] = lambda: {
|
|
"id": "user-admin",
|
|
"tenant_id": "tenant-demo-001",
|
|
"role": "admin",
|
|
}
|
|
publish_response = self.client.post("/api/v1/standard-clauses/clause-123/publish")
|
|
unpublish_response = self.client.post("/api/v1/standard-clauses/clause-123/unpublish")
|
|
rollback_response = self.client.post(
|
|
"/api/v1/standard-clauses/clause-123/rollback",
|
|
data={"target_version_label": "v1.1"},
|
|
)
|
|
|
|
self.assertEqual(publish_response.status_code, 200)
|
|
self.assertEqual(unpublish_response.status_code, 200)
|
|
self.assertEqual(rollback_response.status_code, 200)
|
|
self.assertEqual(publish_response.json()["data"]["published_by"], "user-admin")
|
|
self.assertEqual(unpublish_response.json()["data"]["published_at"], None)
|
|
self.assertEqual(rollback_response.json()["data"]["current_version_label"], "v1.3")
|
|
self.assertEqual(self.audit_log_service.events[-3]["action"], "publish_standard_clause")
|
|
self.assertEqual(self.audit_log_service.events[-2]["action"], "unpublish_standard_clause")
|
|
self.assertEqual(self.audit_log_service.events[-1]["action"], "rollback_standard_clause")
|
|
|
|
def test_member_cannot_access_standard_clauses(self):
|
|
app.dependency_overrides[require_current_user] = lambda: {
|
|
"id": "user-member",
|
|
"tenant_id": "tenant-demo-001",
|
|
"role": "member",
|
|
}
|
|
response = self.client.get("/api/v1/standard-clauses")
|
|
|
|
self.assertEqual(response.status_code, 403)
|
|
self.assertEqual(response.json()["message"], "forbidden")
|
|
self.assertEqual(self.audit_log_service.events, [])
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|