Primora/apps/backend/internal/services/documents_query_test.go

package services

import (
	"reflect"
	"strings"
	"testing"
)

func TestBuildDocumentFilters(t *testing.T) {
	t.Run("eq on a nested path uses #>>", func(t *testing.T) {
		conds, args, err := buildDocumentFilters("meta.city.eq.Prague", 2)
		if err != nil {
			t.Fatalf("err: %v", err)
		}
		want := "data #>> '{meta,city}' = $2"
		if conds[0] != want || !reflect.DeepEqual(args, []any{"Prague"}) {
			t.Fatalf("got %v %v", conds, args)
		}
	})

	t.Run("numeric ops cast to ::numeric", func(t *testing.T) {
		conds, args, err := buildDocumentFilters("age.gt.18,age.lt.65", 2)
		if err != nil {
			t.Fatalf("err: %v", err)
		}
		if !strings.Contains(conds[0], "::numeric > $2") || !strings.Contains(conds[1], "::numeric < $3") {
			t.Fatalf("got %v", conds)
		}
		if args[0] != 18.0 || args[1] != 65.0 {
			t.Fatalf("args: %v", args)
		}
	})

	t.Run("numeric op rejects non-numeric value", func(t *testing.T) {
		_, _, err := buildDocumentFilters("age.gt.abc", 2)
		if err == nil {
			t.Fatal("expected error")
		}
	})

	t.Run("like becomes ILIKE", func(t *testing.T) {
		conds, _, err := buildDocumentFilters("name.like.%_smith%", 2)
		if err != nil || conds[0] != "data #>> '{name}' ILIKE $2" {
			t.Fatalf("got %v %v", conds, err)
		}
	})

	t.Run("in becomes ANY with a text array", func(t *testing.T) {
		conds, args, err := buildDocumentFilters("role.in.admin|editor", 2)
		if err != nil || !strings.Contains(conds[0], "= ANY($2)") {
			t.Fatalf("got %v", conds)
		}
		if !reflect.DeepEqual(args[0], []string{"admin", "editor"}) {
			t.Fatalf("args: %v", args)
		}
	})

	t.Run("is null carries no argument", func(t *testing.T) {
		conds, args, err := buildDocumentFilters("deleted_at.is.null", 2)
		if err != nil || len(args) != 0 || conds[0] != "data #>> '{deleted_at}' IS NULL" {
			t.Fatalf("got %v %v", conds, args)
		}
	})

	t.Run("rejects injection-shaped field", func(t *testing.T) {
		_, _, err := buildDocumentFilters("x' OR '1'='1.eq.a", 2)
		if err == nil {
			t.Fatal("expected error")
		}
	})

	t.Run("rejects term without a known operator", func(t *testing.T) {
		_, _, err := buildDocumentFilters("age.between.5", 2)
		if err == nil || !strings.Contains(err.Error(), "invalid filter") {
			t.Fatalf("got %v", err)
		}
	})

	t.Run("malformed term errors", func(t *testing.T) {
		_, _, err := buildDocumentFilters("justafield", 2)
		if err == nil {
			t.Fatal("expected error")
		}
	})

	t.Run("real columns resolve directly", func(t *testing.T) {
		conds, _, err := buildDocumentFilters("created_at.gt.2026-01-01", 2)
		// created_at is a column — but value isn't numeric so gt must fail
		if err == nil {
			t.Fatalf("expected numeric-required error, got %v", conds)
		}
	})
}

func TestBuildDocumentOrder(t *testing.T) {
	cases := map[string]string{
		"":                  "created_at DESC",
		"name.asc":          "data #>> '{name}' ASC",
		"name":              "data #>> '{name}' ASC",
		"created_at.desc":   "created_at DESC",
		"a.b.asc,id.desc":   "data #>> '{a,b}' ASC, id DESC",
	}
	for in, want := range cases {
		got, err := buildDocumentOrder(in)
		if err != nil {
			t.Fatalf("%q: %v", in, err)
		}
		if got != want {
			t.Errorf("%q: got %q want %q", in, got, want)
		}
	}
	// A non-asc/desc suffix is a nested field path, not a direction error.
	if got, err := buildDocumentOrder("name.sideways"); err != nil || got != "data #>> '{name,sideways}' ASC" {
		t.Errorf("nested order path: got %q err %v", got, err)
	}
	if _, err := buildDocumentOrder("x;drop.asc"); err == nil {
		t.Error("expected field error")
	}
}