@fleetbase/fleetops-engine 0.6.49 → 0.6.51

package/server/src/Tracking/TrackingIntelligenceService.php

@@ -8,6 +8,8 @@ use Illuminate\Support\Facades\Cache;
 
 class TrackingIntelligenceService
 {
+    protected const TERMINAL_STATUSES = ['completed', 'canceled'];
+
     public function __construct(
         protected TrackingContextBuilder $contextBuilder,
         protected TrackingProviderManager $providerManager,
@@ -34,19 +36,28 @@ class TrackingIntelligenceService
             'completion_seconds'  => data_get($tracker, 'eta.completion_seconds'),
             'active_stop_at'      => data_get($tracker, 'eta.active_stop_at'),
             'completion_at'       => data_get($tracker, 'eta.completion_at'),
+            'start_seconds'       => data_get($tracker, 'eta.start_seconds'),
+            'start_at'            => data_get($tracker, 'eta.start_at'),
             'provider'            => data_get($tracker, 'provider'),
             'confidence'          => data_get($tracker, 'confidence'),
+            'lifecycle'           => data_get($tracker, 'lifecycle'),
             'warnings'            => data_get($tracker, 'warnings', []),
         ];
     }
 
     protected function buildResult(TrackingContext $context, TrackingProviderResult $providerResult, TrackingOptions $options): array
     {
-        $now               = now();
-        $completionSeconds = $providerResult->durationInTrafficSeconds ?? $providerResult->durationSeconds;
-        $activeStopSeconds = data_get($providerResult->legs, '0.duration_in_traffic_s', data_get($providerResult->legs, '0.duration_s', $completionSeconds));
-        $progress          = $this->progress($context, $providerResult);
-        $warnings          = array_values(array_unique([...$context->warnings, ...$providerResult->warnings]));
+        $now                  = now();
+        $rawCompletionSeconds = $providerResult->durationInTrafficSeconds ?? $providerResult->durationSeconds;
+        $rawActiveStopSeconds = data_get($providerResult->legs, '0.duration_in_traffic_s', data_get($providerResult->legs, '0.duration_s', $rawCompletionSeconds));
+        $lifecycle            = $this->lifecycle($context, $rawActiveStopSeconds, $now);
+        $showsLiveEta         = (bool) data_get($lifecycle, 'show_live_eta');
+        $showsStartEta        = (bool) data_get($lifecycle, 'show_start_eta');
+        $completionSeconds    = $showsLiveEta ? $rawCompletionSeconds : null;
+        $activeStopSeconds    = $showsLiveEta ? $rawActiveStopSeconds : null;
+        $startSeconds         = $showsStartEta ? $rawActiveStopSeconds : null;
+        $progress             = $this->progress($context, $providerResult);
+        $warnings             = array_values(array_unique([...$context->warnings, ...$providerResult->warnings]));
 
         if ($providerResult->confidence === 'low') {
             $warnings[] = 'low_confidence_eta';
@@ -64,6 +75,7 @@ class TrackingIntelligenceService
                 'online'               => (bool) data_get($context->driver, 'online', false),
             ],
             'progress'          => $progress,
+            'lifecycle'         => $lifecycle,
             'stops'             => $context->stops->map(fn (TrackingStop $stop) => $stop->toArray())->values()->all(),
             'active_stop'       => $context->activeStop?->toArray(),
             'next_stop'         => $context->nextStop?->toArray(),
@@ -73,13 +85,15 @@ class TrackingIntelligenceService
                 'duration_in_traffic_s' => $providerResult->durationInTrafficSeconds,
                 'polyline'              => $providerResult->polyline,
                 'coordinates'           => $providerResult->coordinates,
-                'legs'                  => $this->legs($context, $providerResult, $now),
+                'legs'                  => $this->legs($context, $providerResult, $now, $showsLiveEta),
             ],
             'eta'               => [
                 'active_stop_seconds' => $activeStopSeconds,
                 'completion_seconds'  => $completionSeconds,
                 'active_stop_at'      => $this->addSeconds($now, $activeStopSeconds),
                 'completion_at'       => $this->addSeconds($now, $completionSeconds),
+                'start_seconds'       => $startSeconds,
+                'start_at'            => $this->addSeconds($now, $startSeconds),
             ],
             'insights'          => [
                 'is_delayed'          => false,
@@ -107,17 +121,17 @@ class TrackingIntelligenceService
         ];
     }
 
-    protected function legs(TrackingContext $context, TrackingProviderResult $providerResult, Carbon $now): array
+    protected function legs(TrackingContext $context, TrackingProviderResult $providerResult, Carbon $now, bool $showsLiveEta = true): array
     {
         $elapsedSeconds = 0;
 
-        return collect($providerResult->legs)->map(function ($leg, $index) use ($context, $now, &$elapsedSeconds) {
+        return collect($providerResult->legs)->map(function ($leg, $index) use ($context, $now, $showsLiveEta, &$elapsedSeconds) {
             $stop        = $context->remainingStops->values()->get($index);
             $legSeconds  = data_get($leg, 'duration_in_traffic_s', data_get($leg, 'duration_s'));
             $etaSeconds  = null;
             $etaAt       = null;
 
-            if ($legSeconds !== null) {
+            if ($showsLiveEta && $stop instanceof TrackingStop && $legSeconds !== null) {
                 $elapsedSeconds += (float) $legSeconds;
                 $etaSeconds = $elapsedSeconds;
                 $etaAt      = $this->addSeconds($now, $etaSeconds);
@@ -131,6 +145,92 @@ class TrackingIntelligenceService
         })->all();
     }
 
+    protected function lifecycle(TrackingContext $context, ?float $startSeconds, Carbon $now): array
+    {
+        $order             = $context->order;
+        $status            = strtolower((string) ($order->status ?? 'created'));
+        $hasAssignedDriver = !empty($order->driver_assigned_uuid);
+        $hasStarted        = $this->hasOrderStarted($order);
+        $isTerminal        = in_array($status, self::TERMINAL_STATUSES, true);
+        $isDispatched      = $status === 'dispatched' || (bool) $order->dispatched;
+
+        if ($isTerminal) {
+            return [
+                'status'         => $status,
+                'mode'           => $status,
+                'message'        => $status === 'completed' ? 'Order has been completed.' : 'Order has been canceled.',
+                'is_terminal'    => true,
+                'has_started'    => $hasStarted,
+                'show_live_eta'  => false,
+                'show_start_eta' => false,
+            ];
+        }
+
+        if (!$hasAssignedDriver) {
+            return [
+                'status'         => $status,
+                'mode'           => 'unassigned',
+                'message'        => 'Assign a driver to start live tracking and improve ETA accuracy.',
+                'is_terminal'    => false,
+                'has_started'    => $hasStarted,
+                'show_live_eta'  => false,
+                'show_start_eta' => false,
+            ];
+        }
+
+        if (!$hasStarted && $isDispatched) {
+            return [
+                'status'         => $status,
+                'mode'           => 'dispatched',
+                'message'        => 'Order has been dispatched. Estimated start is based on the assigned driver route to the first stop.',
+                'is_terminal'    => false,
+                'has_started'    => false,
+                'show_live_eta'  => false,
+                'show_start_eta' => $startSeconds !== null,
+                'start_at'       => $this->addSeconds($now, $startSeconds),
+            ];
+        }
+
+        if (!$hasStarted) {
+            return [
+                'status'         => $status,
+                'mode'           => 'pre_start',
+                'message'        => 'Live ETA will begin once the order is started.',
+                'is_terminal'    => false,
+                'has_started'    => false,
+                'show_live_eta'  => false,
+                'show_start_eta' => false,
+            ];
+        }
+
+        return [
+            'status'         => $status,
+            'mode'           => 'active',
+            'message'        => null,
+            'is_terminal'    => false,
+            'has_started'    => true,
+            'show_live_eta'  => true,
+            'show_start_eta' => false,
+        ];
+    }
+
+    protected function hasOrderStarted(Order $order): bool
+    {
+        if ((bool) $order->started || $order->started_at || strtolower((string) $order->status) === 'started') {
+            return true;
+        }
+
+        try {
+            if ($order->relationLoaded('trackingStatuses')) {
+                return $order->trackingStatuses->contains(fn ($status) => strtolower((string) data_get($status, 'code')) === 'started');
+            }
+
+            return $order->trackingStatuses()->whereRaw('LOWER(code) = ?', ['started'])->exists();
+        } catch (\Throwable) {
+            return false;
+        }
+    }
+
     protected function capabilitiesFor(string $provider): array
     {
         $registry   = app(TrackingProviderRegistry::class);

package/server/src/Tracking/TrackingStop.php

@@ -18,6 +18,7 @@ class TrackingStop implements \JsonSerializable
         public ?Waypoint $waypoint = null,
         public bool $completed = false,
         public ?int $sequence = null,
+        public ?string $trackingNumberUuid = null,
     ) {
     }
 
@@ -35,20 +36,21 @@ class TrackingStop implements \JsonSerializable
         $point = $this->point();
 
         return [
-            'uuid'       => $this->uuid,
-            'public_id'  => $this->publicId,
-            'type'       => $this->type,
-            'status'     => $this->status,
-            'completed'  => $this->completed,
-            'sequence'   => $this->sequence,
-            'address'    => data_get($this->place, 'address'),
-            'name'       => data_get($this->place, 'name'),
-            'location'   => $point ? [
+            'uuid'                 => $this->uuid,
+            'public_id'            => $this->publicId,
+            'type'                 => $this->type,
+            'status'               => $this->status,
+            'completed'            => $this->completed,
+            'sequence'             => $this->sequence,
+            'tracking_number_uuid' => $this->trackingNumberUuid,
+            'address'              => data_get($this->place, 'address'),
+            'name'                 => data_get($this->place, 'name'),
+            'location'             => $point ? [
                 'type'        => 'Point',
                 'coordinates' => [$point->getLng(), $point->getLat()],
             ] : null,
-            'latitude'   => $point ? $point->getLat() : null,
-            'longitude'  => $point ? $point->getLng() : null,
+            'latitude'             => $point ? $point->getLat() : null,
+            'longitude'            => $point ? $point->getLng() : null,
         ];
     }
 

package/server/src/routes.php

@@ -12,7 +12,7 @@ use Illuminate\Support\Facades\Route;
 | is assigned the "api" middleware group. Enjoy building your API!
 |
 */
-Route::prefix(config('fleetops.api.routing.prefix', null))->namespace('Fleetbase\FleetOps\Http\Controllers')->group(
+Route::prefix(config('fleetops.api.routing.prefix'))->namespace('Fleetbase\FleetOps\Http\Controllers')->group(
     function ($router) {
         /*
         |--------------------------------------------------------------------------
@@ -49,6 +49,38 @@ Route::prefix(config('fleetops.api.routing.prefix', null))->namespace('Fleetbase
                 $router->put('{id}', 'ContactController@update');
                 $router->delete('{id}', 'ContactController@delete');
             });
+            // order-configs — read-only public projection of the OrderConfig flow.
+            $router->group(['prefix' => 'order-configs'], function () use ($router) {
+                $router->get('/', 'OrderConfigController@query');
+                $router->get('{id}', 'OrderConfigController@find');
+            });
+            // customers routes — public B2C customer auth + customer-scoped orders.
+            //  - Public endpoints: API key only (resolves company from credential)
+            //  - Authenticated endpoints: API key + `Customer-Token` header (Sanctum)
+            $router->group(['prefix' => 'customers', 'middleware' => []], function () use ($router) {
+                // Public auth flows
+                $router->post('request-creation-code', 'CustomerController@requestCreationCode');
+                $router->post('/', 'CustomerController@create');
+                $router->post('login', 'CustomerController@login');
+                $router->post('login-with-sms', 'CustomerController@loginWithPhone');
+                $router->post('verify-code', 'CustomerController@verifyCode');
+                $router->post('forgot-password', 'CustomerController@forgotPassword');
+                $router->post('reset-password', 'CustomerController@resetPassword');
+
+                // Authenticated (require Customer-Token)
+                $router->group(['middleware' => [Fleetbase\FleetOps\Http\Middleware\AuthenticateCustomerToken::class]], function () use ($router) {
+                    $router->get('me', 'CustomerController@me');
+                    $router->put('me', 'CustomerController@updateMe');
+                    $router->match(['post', 'patch'], 'me', 'CustomerController@updateMe');
+                    $router->post('logout', 'CustomerController@logout');
+                    $router->post('logout-all', 'CustomerController@logoutAll');
+                    $router->post('register-device', 'CustomerController@registerDevice');
+                    $router->get('places', 'CustomerController@places');
+                    $router->get('orders', 'CustomerController@orders');
+                    $router->post('orders', 'CustomerController@createOrder');
+                    $router->get('orders/{id}', 'CustomerController@findOrder');
+                });
+            });
             // vendors routes
             $router->group(['prefix' => 'vendors'], function () use ($router) {
                 $router->post('/', 'VendorController@create');
@@ -280,6 +312,7 @@ Route::prefix(config('fleetops.api.routing.prefix', null))->namespace('Fleetbase
                                 $router->post('import', $controller('import'));
                                 $router->get('facilitators/{id}', $controller('getAsFacilitator'));
                                 $router->get('customers/{id}', $controller('getAsCustomer'));
+                                $router->post('{id}/convert-to-vendor', $controller('convertToVendor'));
                                 $router->delete('bulk-delete', $controller('bulkDelete'));
                             }
                         );
@@ -319,6 +352,7 @@ Route::prefix(config('fleetops.api.routing.prefix', null))->namespace('Fleetbase
                                 $router->delete('bulk-delete', $controller('bulkDelete'));
                             }
                         );
+                        $router->get('issues/{id}/timeline', 'IssueController@timeline');
                         $router->fleetbaseRoutes(
                             'issues',
                             function ($router, $controller) {
@@ -346,8 +380,10 @@ Route::prefix(config('fleetops.api.routing.prefix', null))->namespace('Fleetbase
                                 $router->get('{id}/tracker', 'OrderController@trackerInfo');
                                 $router->get('{id}/eta', 'OrderController@waypointEtas');
                                 $router->post('{id}/ping-driver', $controller('pingDriver'));
+                                $router->post('{id}/capture-photo/{subjectId?}', $controller('capturePhoto'));
                                 $router->post('process-imports', $controller('importFromFiles'));
                                 $router->patch('route/{id}', $controller('editOrderRoute'));
+                                $router->patch('set-destination/{id}/{placeId}', $controller('setDestination'));
                                 $router->patch('update-activity/{id}', $controller('updateActivity'));
                                 $router->get('{id}/proofs/{subjectId?}', $controller('proofs'));
                                 $router->patch('bulk-assign-driver', $controller('bulkAssignDriver'));
@@ -436,6 +472,9 @@ Route::prefix(config('fleetops.api.routing.prefix', null))->namespace('Fleetbase
                                 $router->match(['get', 'post'], 'export', $controller('export'));
                                 $router->get('facilitators/{id}', $controller('getAsFacilitator'));
                                 $router->get('customers/{id}', $controller('getAsCustomer'));
+                                $router->get('{id}/personnels', $controller('vendorPersonnels'));
+                                $router->post('{id}/personnels', $controller('addVendorPersonnel'));
+                                $router->delete('{id}/personnels/{contact}', $controller('removeVendorPersonnel'));
                                 $router->post('{id}/assign-driver', $controller('assignDriver'));
                                 $router->post('{id}/remove-driver', $controller('removeDriver'));
                                 $router->delete('bulk-delete', $controller('bulkDelete'));
@@ -489,7 +528,11 @@ Route::prefix(config('fleetops.api.routing.prefix', null))->namespace('Fleetbase
                             ['prefix' => 'customers'],
                             function () use ($router) {
                                 $router->get('/', 'MorphController@queryCustomers');
+                                $router->post('create-portal-login', 'CustomerController@createPortalLogin');
                                 $router->post('reset-credentials', 'CustomerController@resetCredentials');
+                                $router->post('send-credentials', 'CustomerController@sendCredentials');
+                                $router->post('deactivate-portal-login', 'CustomerController@deactivatePortalLogin');
+                                $router->post('reactivate-portal-login', 'CustomerController@reactivatePortalLogin');
                             }
                         );
                         $router->group(
@@ -579,16 +622,22 @@ Route::prefix(config('fleetops.api.routing.prefix', null))->namespace('Fleetbase
                                 $router->group(
                                     ['prefix' => 'analytics'],
                                     function ($router) {
-                                        $router->get('operations-pulse',     'AnalyticsController@operationsPulse');
-                                        $router->get('revenue-trend',        'AnalyticsController@revenueTrend');
-                                        $router->get('orders-by-status',     'AnalyticsController@ordersByStatus');
-                                        $router->get('on-time-delivery',     'AnalyticsController@onTimeDelivery');
-                                        $router->get('top-drivers',          'AnalyticsController@topDrivers');
-                                        $router->get('fuel-efficiency',      'AnalyticsController@fuelEfficiency');
-                                        $router->get('issues-insights',      'AnalyticsController@issuesInsights');
+                                        $router->get('operations-pulse', 'AnalyticsController@operationsPulse');
+                                        $router->get('revenue-trend', 'AnalyticsController@revenueTrend');
+                                        $router->get('orders-by-status', 'AnalyticsController@ordersByStatus');
+                                        $router->get('on-time-delivery', 'AnalyticsController@onTimeDelivery');
+                                        $router->get('top-drivers', 'AnalyticsController@topDrivers');
+                                        $router->get('fuel-efficiency', 'AnalyticsController@fuelEfficiency');
+                                        $router->get('issues-insights', 'AnalyticsController@issuesInsights');
                                         $router->get('maintenance-overview', 'AnalyticsController@maintenanceOverview');
-                                        $router->get('geofence-violations',  'AnalyticsController@geofenceViolations');
-                                        $router->get('live-fleet',           'AnalyticsController@liveFleet');
+                                        $router->get('geofence-violations', 'AnalyticsController@geofenceViolations');
+                                        $router->get('live-fleet', 'AnalyticsController@liveFleet');
+                                    }
+                                );
+                                $router->group(
+                                    ['prefix' => 'getting-started'],
+                                    function ($router) {
+                                        $router->get('status', 'GettingStartedController@status');
                                     }
                                 );
                                 $router->group(
@@ -627,3 +676,20 @@ Route::prefix(config('fleetops.api.routing.prefix', null))->namespace('Fleetbase
         );
     }
 );
+
+if (filled(config('fleetops.api.routing.prefix'))) {
+    Route::prefix(config('fleetops.api.routing.internal_prefix', 'int') . '/v1')
+        ->namespace('Fleetbase\FleetOps\Http\Controllers\Internal\v1')
+        ->middleware([
+            'fleetbase.protected',
+            Fleetbase\FleetOps\Http\Middleware\TransformLocationMiddleware::class,
+            Fleetbase\FleetOps\Http\Middleware\SetupDriverSession::class,
+        ])
+        ->group(function ($router) {
+            $router->get('issues/{id}/timeline', 'IssueController@timeline');
+            $router->get('vendors/{id}/personnels', 'VendorController@vendorPersonnels');
+            $router->post('vendors/{id}/personnels', 'VendorController@addVendorPersonnel');
+            $router->delete('vendors/{id}/personnels/{contact}', 'VendorController@removeVendorPersonnel');
+            $router->post('contacts/{id}/convert-to-vendor', 'ContactController@convertToVendor');
+        });
+}

package/server/tests/AnalyticsRoutesTest.php

@@ -39,3 +39,11 @@ test('analytics controller has one method per widget', function () {
         expect($controller)->toContain("public function {$method}(");
     }
 });
+
+test('top drivers on-time sorting uses a sql aggregate expression', function () {
+    $widget = file_get_contents(dirname(__DIR__) . '/src/Support/Analytics/TopDrivers.php');
+
+    expect($widget)->toContain("'on_time'  => \"CASE");
+    expect($widget)->toContain('TIMESTAMPDIFF(SECOND, orders.scheduled_at, orders.updated_at) <= 1800');
+    expect($widget)->not->toContain("'on_time'  => 'on_time_pct'");
+});

package/server/tests/CapacityAllocationEngineTest.php

@@ -16,8 +16,8 @@ function capacityTestOrder(string $publicId, float $weightKg, float $volumeLitre
                     public float $weight;
                     public string $weight_unit = 'kg';
                     public float $length;
-                    public float $width = 1;
-                    public float $height = 1;
+                    public float $width            = 1;
+                    public float $height           = 1;
                     public string $dimensions_unit = 'm';
 
                     public function __construct(float $weightKg, float $volumeLitres)
@@ -30,8 +30,8 @@ function capacityTestOrder(string $publicId, float $weightKg, float $volumeLitre
         }
     };
 
-    $order = new Order();
-    $order->public_id = $publicId;
+    $order                  = new Order();
+    $order->public_id       = $publicId;
     $order->required_skills = $skills;
     $order->setRelation('payload', $payload);
 
@@ -40,14 +40,14 @@ function capacityTestOrder(string $publicId, float $weightKg, float $volumeLitre
 
 function capacityTestVehicle(string $publicId, float $weightKg, float $volumeM3 = 0, int $maxTasks = 0, array $skills = []): Vehicle
 {
-    $vehicle = new Vehicle();
-    $vehicle->public_id = $publicId;
-    $vehicle->payload_capacity = $weightKg;
-    $vehicle->payload_capacity_volume = $volumeM3;
+    $vehicle                           = new Vehicle();
+    $vehicle->public_id                = $publicId;
+    $vehicle->payload_capacity         = $weightKg;
+    $vehicle->payload_capacity_volume  = $volumeM3;
     $vehicle->payload_capacity_pallets = 0;
     $vehicle->payload_capacity_parcels = 100;
-    $vehicle->max_tasks = $maxTasks;
-    $vehicle->skills = $skills;
+    $vehicle->max_tasks                = $maxTasks;
+    $vehicle->skills                   = $skills;
     $vehicle->setRelation('driver', null);
 
     return $vehicle;

package/server/tests/CustomerContactIdentitySafetyTest.php

@@ -0,0 +1,95 @@
+<?php
+
+test('customer contacts reject existing non-customer users by identity', function () {
+    $contactModel  = file_get_contents(__DIR__ . '/../src/Models/Contact.php');
+    $conflictClass = file_get_contents(__DIR__ . '/../src/Exceptions/CustomerUserConflictException.php');
+    $observer      = file_get_contents(__DIR__ . '/../src/Observers/ContactObserver.php');
+
+    expect($contactModel)
+        ->toContain('assertCustomerIdentityIsAvailable')
+        ->toContain('assertCustomerUserCanBeAssigned')
+        ->toContain("orWhereHas('companyUsers'")
+        ->toContain("\$user->type === 'customer'")
+        ->toContain('cannot be used for a customer account');
+
+    expect($conflictClass)->toContain('class CustomerUserConflictException extends UserAlreadyExistsException');
+
+    expect($observer)
+        ->toContain('$contact->assertCustomerIdentityIsAvailable();')
+        ->toContain('$contact->normalizeCustomerUser();');
+});
+
+test('customer user assignment no longer promotes staff users', function () {
+    $contactModel = file_get_contents(__DIR__ . '/../src/Models/Contact.php');
+
+    expect($contactModel)
+        ->toContain('public function assignUser(User $user, bool $sendInvite = false): self')
+        ->toContain('$this->assertCustomerUserCanBeAssigned($user);')
+        ->not->toContain("if (\$this->isCustomer() && \$user->type !== 'customer') {\n            \$user->setType('customer');");
+});
+
+test('customer creation entrypoints run the customer identity guard', function () {
+    $apiContact      = file_get_contents(__DIR__ . '/../src/Http/Controllers/Api/v1/ContactController.php');
+    $internalContact = file_get_contents(__DIR__ . '/../src/Http/Controllers/Internal/v1/ContactController.php');
+    $orderController = file_get_contents(__DIR__ . '/../src/Http/Controllers/Api/v1/OrderController.php');
+    $customerForm    = file_get_contents(__DIR__ . '/../../addon/components/customer/form.hbs');
+
+    expect($apiContact)->toContain('$contactCandidate->assertCustomerIdentityIsAvailable();');
+    expect($internalContact)->toContain('$this->assertCustomerIdentityIsAvailable($input');
+    expect($orderController)->toContain('$customerCandidate->assertCustomerIdentityIsAvailable();');
+    expect($customerForm)->toContain('is_customer=true');
+});
+
+test('customer conflict audit command is registered and read only', function () {
+    $provider = file_get_contents(__DIR__ . '/../src/Providers/FleetOpsServiceProvider.php');
+    $command  = file_get_contents(__DIR__ . '/../src/Console/Commands/AuditCustomerUserConflicts.php');
+
+    expect($provider)->toContain('AuditCustomerUserConflicts::class');
+    expect($command)
+        ->toContain('fleetops:audit-customer-user-conflicts')
+        ->toContain('Reports customer contacts linked to users')
+        ->not->toContain('->save(')
+        ->not->toContain('->update(')
+        ->not->toContain('forceFill');
+});
+
+test('customer portal welcome email is opt in and does not create organization invites', function () {
+    $internalContact     = file_get_contents(__DIR__ . '/../src/Http/Controllers/Internal/v1/ContactController.php');
+    $internalCustomer    = file_get_contents(__DIR__ . '/../src/Http/Controllers/Internal/v1/CustomerController.php');
+    $contactModel        = file_get_contents(__DIR__ . '/../src/Models/Contact.php');
+    $customerCredentials = file_get_contents(__DIR__ . '/../src/Mail/CustomerCredentialsMail.php');
+    $customerEmail       = file_get_contents(__DIR__ . '/../resources/views/mail/customer-credentials.blade.php');
+    $customerForm        = file_get_contents(__DIR__ . '/../../addon/components/customer/form.hbs');
+
+    expect($internalContact)
+        ->toContain('meta.customer_portal.send_welcome_email')
+        ->toContain('assertCustomerPortalCanSendWelcomeEmail')
+        ->toContain('sendCustomerPortalWelcomeEmail')
+        ->toContain('Contact::createUserFromContact($contact, false, true)')
+        ->toContain('Mail::to($user)->send(new CustomerCredentialsMail($password, $contact))')
+        ->toContain("data_forget(\$meta, 'customer_portal.send_welcome_email')")
+        ->toContain('fleetbase/customer-portal-api')
+        ->not->toContain('UserInvited')
+        ->not->toContain('Invite::create');
+
+    expect($internalCustomer)
+        ->toContain('Contact::createUserFromContact($customer, false, true)')
+        ->not->toContain('send_invite');
+
+    expect($customerCredentials)->toContain('customer portal access is ready')
+        ->and($customerCredentials)->toContain("Utils::consoleUrl(\$accessUrlSlug ?: 'customer-portal')")
+        ->and($customerEmail)->toContain('Your customer portal access is ready')
+        ->and($customerEmail)->toContain('Sign in to customer portal')
+        ->and($customerEmail)->toContain('Temporary password:')
+        ->and($customerEmail)->toContain('You can change your password after signing in.')
+        ->and($customerForm)->toContain('this.showWelcomeEmailOption')
+        ->and($customerForm)->toContain('this.toggleWelcomeEmail');
+
+    expect($contactModel)
+        ->toContain('assignUserToContactCompany')
+        ->toContain('$contact->company->addUser($user, $role)')
+        ->toContain('Deprecated and ignored. Contact and customer users do not receive organization invitations.')
+        ->not->toContain('UserInvited')
+        ->not->toContain('Invite::create')
+        ->not->toContain('->assignCompany(');
+});