@fleetbase/fleetops-engine 0.6.58 → 0.6.60

package/scripts/coverage-summary.php

@@ -2,7 +2,20 @@
 
 declare(strict_types=1);
 
-$cloverPath = $argv[1] ?? 'coverage/clover.xml';
+$cloverPath = 'coverage/clover.xml';
+$failUnder  = null;
+
+foreach (array_slice($argv, 1) as $arg) {
+    if (str_starts_with($arg, '--fail-under=')) {
+        $failUnder = (float) substr($arg, strlen('--fail-under='));
+
+        continue;
+    }
+
+    if ($arg !== '') {
+        $cloverPath = $arg;
+    }
+}
 
 if (!is_file($cloverPath)) {
     fwrite(STDERR, "Coverage file not found: {$cloverPath}\n");
@@ -26,6 +39,27 @@ function intMetric(SimpleXMLElement $node, string $name): int
     return (int) ($node->metrics[$name] ?? 0);
 }
 
+function hasMetric(SimpleXMLElement $node, string $name): bool
+{
+    return isset($node->metrics[$name]);
+}
+
+function deriveCoveredClasses(SimpleXMLElement $project): int
+{
+    $coveredClasses = 0;
+
+    foreach ($project->xpath('.//class') ?: [] as $class) {
+        $methods        = intMetric($class, 'methods');
+        $coveredMethods = intMetric($class, 'coveredmethods');
+
+        if ($methods > 0 && $coveredMethods >= $methods) {
+            $coveredClasses++;
+        }
+    }
+
+    return $coveredClasses;
+}
+
 $project = $xml->project;
 $metrics = $project->metrics;
 
@@ -34,7 +68,7 @@ $coveredStatements = (int) ($metrics['coveredstatements'] ?? 0);
 $methods           = (int) ($metrics['methods'] ?? 0);
 $coveredMethods    = (int) ($metrics['coveredmethods'] ?? 0);
 $classes           = (int) ($metrics['classes'] ?? 0);
-$coveredClasses    = (int) ($metrics['coveredclasses'] ?? 0);
+$coveredClasses    = hasMetric($project, 'coveredclasses') ? (int) $metrics['coveredclasses'] : deriveCoveredClasses($project);
 
 $files       = [];
 $directories = [];
@@ -108,3 +142,8 @@ foreach (array_slice($files, 0, 20) as $file) {
     $relativePath = preg_replace('#^' . preg_quote(getcwd(), '#') . '/?#', '', $file['path']);
     printf("  %6.2f%%  %5d/%-5d  %s\n", $file['percent'], $file['covered'], $file['statements'], $relativePath ?: $file['path']);
 }
+
+if ($failUnder !== null && coveragePercent($coveredStatements, $statements) < $failUnder) {
+    fwrite(STDERR, sprintf("\nCoverage %.2f%% is below the required %.2f%% line threshold.\n", coveragePercent($coveredStatements, $statements), $failUnder));
+    exit(1);
+}

package/scripts/pest-bootstrap.php

@@ -15,8 +15,31 @@ foreach ($autoloadCandidates as $candidate) {
 }
 
 if (!function_exists('config')) {
-    function config(?string $key = null, mixed $default = null): mixed
+    function config(string|array|null $key = null, mixed $default = null): mixed
     {
+        if (class_exists('Illuminate\Container\Container')) {
+            $app = Illuminate\Container\Container::getInstance();
+
+            if ($app->bound('config')) {
+                $config = $app->make('config');
+
+                if ($key === null) {
+                    return $config;
+                }
+
+                // Laravel's helper doubles as a setter when handed an array
+                if (is_array($key)) {
+                    foreach ($key as $configKey => $configValue) {
+                        $config->set($configKey, $configValue);
+                    }
+
+                    return null;
+                }
+
+                return $config->get($key, $default);
+            }
+        }
+
         return $default;
     }
 }
@@ -25,6 +48,106 @@ if (class_exists('Illuminate\Container\Container') && class_exists('Illuminate\S
     $app = Illuminate\Container\Container::getInstance();
     Illuminate\Support\Facades\Facade::setFacadeApplication($app);
 
+    if (!$app->bound('config') && class_exists('Illuminate\Config\Repository')) {
+        $app->singleton('config', fn () => new Illuminate\Config\Repository([
+            'fleetops'   => [],
+            'services'   => [],
+            'telematics' => [],
+        ]));
+    }
+
+    if (!$app->bound(Illuminate\Contracts\Routing\ResponseFactory::class)) {
+        $responseFactory = new class {
+            public function json(mixed $data = [], int $status = 200): mixed
+            {
+                if (class_exists('Illuminate\Http\JsonResponse')) {
+                    return new Illuminate\Http\JsonResponse($data, $status);
+                }
+
+                return new class($data, $status) {
+                    public function __construct(public mixed $data, public int $status)
+                    {
+                    }
+
+                    public function getStatusCode(): int
+                    {
+                        return $this->status;
+                    }
+                };
+            }
+
+            public function make(mixed $content = '', int $status = 200, array $headers = []): mixed
+            {
+                if (class_exists('Illuminate\\Http\\Response')) {
+                    return new Illuminate\Http\Response($content, $status, $headers);
+                }
+
+                return new class($content, $status) {
+                    public function __construct(public mixed $content, public int $status)
+                    {
+                    }
+
+                    public function getContent(): mixed
+                    {
+                        return $this->content;
+                    }
+
+                    public function getStatusCode(): int
+                    {
+                        return $this->status;
+                    }
+                };
+            }
+
+            public function error(mixed $error = null, int $status = 500): mixed
+            {
+                return $this->json(['error' => $error], $status);
+            }
+
+            public function apiError(mixed $error = null, int $statusCode = 400, ?array $data = []): mixed
+            {
+                if ($error instanceof Illuminate\Support\MessageBag) {
+                    $error = $error->all();
+                }
+
+                return $this->json(['error' => $error] + ($data ?? []), $statusCode);
+            }
+        };
+
+        $app->instance(Illuminate\Contracts\Routing\ResponseFactory::class, $responseFactory);
+        $app->instance('Illuminate\Contracts\Routing\ResponseFactory', $responseFactory);
+        $app->instance('response', $responseFactory);
+    }
+
+    if (!$app->bound('db')) {
+        // Unbound 'db' resolutions recurse the container until memory is
+        // exhausted when model boot paths reach the DB facade — proxy to the
+        // Eloquent connection resolver instead. Fixture instance bindings
+        // override this fallback.
+        $app->singleton('db', function () {
+            return new class {
+                public function connection($name = null)
+                {
+                    return Illuminate\Database\Eloquent\Model::getConnectionResolver()
+                        ? Illuminate\Database\Eloquent\Model::resolveConnection($name)
+                        : null;
+                }
+
+                public function raw($value)
+                {
+                    return new Illuminate\Database\Query\Expression($value);
+                }
+
+                public function __call($method, $arguments)
+                {
+                    $connection = $this->connection();
+
+                    return $connection ? $connection->{$method}(...$arguments) : null;
+                }
+            };
+        });
+    }
+
     if (!$app->bound('http') && class_exists('Illuminate\Http\Client\Factory')) {
         $app->singleton('http', fn () => new Illuminate\Http\Client\Factory());
     }
@@ -64,6 +187,16 @@ if (!function_exists('app')) {
 if (!function_exists('request')) {
     function request(?string $key = null, mixed $default = null): mixed
     {
+        if (class_exists('Illuminate\Container\Container')) {
+            $container = Illuminate\Container\Container::getInstance();
+
+            if ($container->bound('request')) {
+                $request = $container->make('request');
+
+                return $key === null ? $request : $request->input($key, $default);
+            }
+        }
+
         $request = class_exists('Illuminate\Http\Request') ? Illuminate\Http\Request::create('/') : new stdClass();
 
         return $key === null ? $request : $default;
@@ -81,7 +214,32 @@ if (!function_exists('response')) {
                 }
 
                 return new class($data, $status) {
-                    public function __construct(public mixed $data, public int $status) {}
+                    public function __construct(public mixed $data, public int $status)
+                    {
+                    }
+
+                    public function getStatusCode(): int
+                    {
+                        return $this->status;
+                    }
+                };
+            }
+
+            public function make(mixed $content = '', int $status = 200, array $headers = []): mixed
+            {
+                if (class_exists('Illuminate\\Http\\Response')) {
+                    return new Illuminate\Http\Response($content, $status, $headers);
+                }
+
+                return new class($content, $status) {
+                    public function __construct(public mixed $content, public int $status)
+                    {
+                    }
+
+                    public function getContent(): mixed
+                    {
+                        return $this->content;
+                    }
 
                     public function getStatusCode(): int
                     {
@@ -94,6 +252,15 @@ if (!function_exists('response')) {
             {
                 return $this->json(['error' => $error], $status);
             }
+
+            public function apiError(mixed $error = null, int $statusCode = 400, ?array $data = []): mixed
+            {
+                if ($error instanceof Illuminate\Support\MessageBag) {
+                    $error = $error->all();
+                }
+
+                return $this->json(['error' => $error] + ($data ?? []), $statusCode);
+            }
         };
     }
 }
@@ -120,12 +287,63 @@ if (!function_exists('now') && class_exists('Illuminate\Support\Carbon')) {
     }
 }
 
+if (!class_exists('Illuminate\Validation\ValidationException')) {
+    // Laravel's real constructor takes the failing validator and an optional
+    // response, not a message. Both shapes are accepted so
+    // `new ValidationException($validator, $response)` works alongside the
+    // `withMessages()` string form.
+    eval('namespace Illuminate\Validation; class ValidationException extends \Exception { public array $messages = []; public $validator; public $response; public function __construct($validator = null, $response = null) { parent::__construct(is_string($validator) ? $validator : "The given data was invalid."); $this->response = $response; if (!is_string($validator) && is_object($validator)) { $this->validator = $validator; if (method_exists($validator, "errors")) { $errors = $validator->errors(); $this->messages = is_object($errors) && method_exists($errors, "messages") ? $errors->messages() : (array) $errors; } } } public static function withMessages(array $messages): self { $exception = new self("The given data was invalid."); $exception->messages = $messages; return $exception; } public function errors(): array { return $this->messages; } public function getResponse() { return $this->response; } }');
+}
+
+if (class_exists('Illuminate\Http\Request') && method_exists('Illuminate\Http\Request', 'macro')) {
+    if (!method_exists('Illuminate\Http\Request', 'array')) {
+        Illuminate\Http\Request::macro('array', function (string $key, array $default = []): array {
+            $value = $this->input($key, $default);
+
+            return is_array($value) ? $value : $default;
+        });
+    }
+
+    if (!method_exists('Illuminate\Http\Request', 'validate')) {
+        Illuminate\Http\Request::macro('validate', function (array $rules, ...$parameters): array {
+            if (app()->bound('validator')) {
+                $validator = app('validator')->make($this->all(), $rules);
+                if (is_object($validator) && method_exists($validator, 'fails') && $validator->fails()) {
+                    $messages = method_exists($validator, 'errors') ? $validator->errors()->toArray() : ['error' => ['Validation failed.']];
+                    throw Illuminate\Validation\ValidationException::withMessages($messages);
+                }
+            }
+
+            return $this->all();
+        });
+    }
+}
+
 if (!trait_exists('Illuminate\Foundation\Auth\Access\AuthorizesRequests')) {
     eval('namespace Illuminate\Foundation\Auth\Access; trait AuthorizesRequests {}');
 }
 
+if (!class_exists('Fleetbase\TestSupport\PendingDispatch')) {
+    eval('namespace Fleetbase\TestSupport; class PendingDispatch { public function __call($name, $arguments) { return $this; } public function __toString(): string { return \'\'; } }');
+}
+
+if (!class_exists('Fleetbase\TestSupport\DispatchRecorder')) {
+    eval('namespace Fleetbase\TestSupport; class DispatchRecorder { public static array $dispatched = []; public static function record(string $job, array $arguments): void { self::$dispatched[] = [\'job\' => $job, \'arguments\' => $arguments]; } }');
+}
+
 if (!trait_exists('Illuminate\Foundation\Bus\Dispatchable')) {
-    eval('namespace Illuminate\Foundation\Bus; trait Dispatchable {}');
+    eval('namespace Illuminate\Foundation\Bus; trait Dispatchable {
+        public static function dispatch(...$arguments) { \Fleetbase\TestSupport\DispatchRecorder::record(static::class, $arguments); return new \Fleetbase\TestSupport\PendingDispatch(); }
+        public static function dispatchIf($boolean, ...$arguments) { if ($boolean) { \Fleetbase\TestSupport\DispatchRecorder::record(static::class, $arguments); } return new \Fleetbase\TestSupport\PendingDispatch(); }
+        public static function dispatchUnless($boolean, ...$arguments) { if (!$boolean) { \Fleetbase\TestSupport\DispatchRecorder::record(static::class, $arguments); } return new \Fleetbase\TestSupport\PendingDispatch(); }
+        public static function dispatchSync(...$arguments) { \Fleetbase\TestSupport\DispatchRecorder::record(static::class, $arguments); return null; }
+        public static function dispatchAfterResponse(...$arguments) { \Fleetbase\TestSupport\DispatchRecorder::record(static::class, $arguments); return null; }
+        public static function dispatchNow(...$arguments) { \Fleetbase\TestSupport\DispatchRecorder::record(static::class, $arguments); return null; }
+    }');
+}
+
+if (!trait_exists('Illuminate\Foundation\Events\Dispatchable')) {
+    eval('namespace Illuminate\Foundation\Events; trait Dispatchable {}');
 }
 
 if (!trait_exists('Illuminate\Foundation\Bus\DispatchesJobs')) {
@@ -136,10 +354,26 @@ if (!trait_exists('Illuminate\Foundation\Validation\ValidatesRequests')) {
     eval('namespace Illuminate\Foundation\Validation; trait ValidatesRequests {}');
 }
 
+if (!trait_exists('Fleetbase\Traits\HasApiModelCache')) {
+    eval('namespace Fleetbase\Traits; trait HasApiModelCache {}');
+}
+
+if (!trait_exists('Fleetbase\Traits\HasCustomFields')) {
+    eval('namespace Fleetbase\Traits; trait HasCustomFields {}');
+}
+
 if (!class_exists('Illuminate\Foundation\Http\FormRequest') && class_exists('Illuminate\Http\Request')) {
     eval('namespace Illuminate\Foundation\Http; class FormRequest extends \Illuminate\Http\Request { public function authorize(): bool { return true; } public function rules(): array { return []; } public function responseWithErrors(\Illuminate\Contracts\Validation\Validator $validator) { return $validator; } }');
 }
 
+if (!class_exists('Illuminate\Foundation\Auth\User') && class_exists('Illuminate\Database\Eloquent\Model')) {
+    eval('namespace Illuminate\Foundation\Auth; class User extends \Illuminate\Database\Eloquent\Model {}');
+}
+
+if (!class_exists('Fleetbase\Models\ScheduleItem') && class_exists('Fleetbase\Models\Model')) {
+    eval('namespace Fleetbase\Models; class ScheduleItem extends Model {}');
+}
+
 if (!interface_exists('Fleetbase\Ai\Contracts\AIContextCapabilityInterface')) {
     eval('namespace Fleetbase\Ai\Contracts; interface AIContextCapabilityInterface {}');
 }

package/scripts/pest-file-runner.php

@@ -29,7 +29,19 @@ if (!is_file($runner)) {
 }
 
 $testsPath = getcwd() . '/server/tests';
-$files     = glob($testsPath . '/*.php') ?: [];
+$files     = [];
+
+$iterator = new RecursiveIteratorIterator(
+    new RecursiveDirectoryIterator($testsPath, FilesystemIterator::SKIP_DOTS)
+);
+
+foreach ($iterator as $fileInfo) {
+    if ($fileInfo->isFile() && $fileInfo->getExtension() === 'php') {
+        $files[] = $fileInfo->getPathname();
+    }
+}
+
+$files = array_values(array_unique($files));
 sort($files);
 
 if ($files === []) {

package/scripts/pest-runner.php

@@ -24,8 +24,24 @@ if ($pest === null) {
 
 $serverVendor = getcwd() . '/server_vendor';
 $vendor       = getcwd() . '/vendor';
+
+// Pest hardcodes its autoloader at ../../../vendor/autoload.php (pestphp/pest#920),
+// so it needs a `vendor` entry even though this package installs to server_vendor.
+// Create the symlink only for the duration of this run and remove it afterwards, so it
+// never persists to collide with other tooling — notably the console's Ember build,
+// whose addon `vendor/` convention breaks when a dev-linked package exposes this PHP
+// server_vendor symlink there.
+$createdVendorSymlink = false;
 if (!file_exists($vendor) && is_dir($serverVendor) && function_exists('symlink')) {
-    @symlink($serverVendor, $vendor);
+    $createdVendorSymlink = @symlink($serverVendor, $vendor);
+}
+
+if ($createdVendorSymlink) {
+    register_shutdown_function(static function () use ($vendor): void {
+        if (is_link($vendor)) {
+            @unlink($vendor);
+        }
+    });
 }
 
 $bootstrap = getcwd() . '/scripts/pest-bootstrap.php';
@@ -34,7 +50,7 @@ if (!is_file($bootstrap)) {
     exit(1);
 }
 
-$args = array_slice($argv, 1);
+$args             = array_slice($argv, 1);
 $hasConfiguration = false;
 foreach ($args as $arg) {
     if (str_starts_with($arg, '--configuration')) {
@@ -48,6 +64,43 @@ if (!$hasConfiguration && is_file($configuration)) {
     array_unshift($args, '--configuration=' . $configuration);
 }
 
+/**
+ * Resolve the memory limit to run Pest under.
+ *
+ * Inheriting the ambient php.ini value makes the suite pass or fail on the
+ * developer's local configuration: fleetbase/countries loads a sizeable JSON5
+ * dataset, which alone pushes some test files past a stock 128M. Apply a floor
+ * so a run is reproducible everywhere, while never lowering an unlimited or
+ * already-larger setting. Mirrors FLEETOPS_COVERAGE_MEMORY_LIMIT in the
+ * coverage runners.
+ */
+function fleetopsResolveMemoryLimit(string $ambient, string $floor): string
+{
+    $toBytes = static function (string $value): float {
+        $value = trim($value);
+        if ($value === '' || $value === '-1') {
+            return INF;
+        }
+
+        $unit   = strtolower(substr($value, -1));
+        $number = (float) $value;
+
+        return match ($unit) {
+            'g'     => $number * 1024 * 1024 * 1024,
+            'm'     => $number * 1024 * 1024,
+            'k'     => $number * 1024,
+            default => $number,
+        };
+    };
+
+    return $toBytes($ambient) >= $toBytes($floor) ? $ambient : $floor;
+}
+
+$memoryLimit = fleetopsResolveMemoryLimit(
+    (string) ini_get('memory_limit'),
+    getenv('FLEETOPS_TEST_MEMORY_LIMIT') ?: '512M'
+);
+
 $command = array_merge([
     PHP_BINARY,
     '-d',
@@ -55,6 +108,8 @@ $command = array_merge([
     '-d',
     'error_reporting=8191',
     '-d',
+    'memory_limit=' . $memoryLimit,
+    '-d',
     'auto_prepend_file=' . $bootstrap,
     $pest,
 ], $args);

package/server/config/fleetops.php

@@ -96,10 +96,54 @@ return [
     |--------------------------------------------------------------------------
     */
     'navigator' => [
+        /*
+        | App store reviewers cannot receive our SMS, so a fixed verification code has
+        | to keep working for them — including in production, which is where a review
+        | build is tested. Blocking the bypass outside production made review
+        | impossible; restricting it to named accounts makes it safe instead.
+        |
+        | Both values are required, and neither has a default. The code alone is not
+        | sufficient: it is only accepted for an identity listed in review_accounts, so
+        | a leaked code cannot be used to authenticate as an arbitrary driver.
+        |
+        |   NAVIGATOR_BYPASS_VERIFICATION_CODE=<a secret, rotated code>
+        |   NAVIGATOR_REVIEW_ACCOUNTS=+15555550100,apple-review@example.com
+        */
         'bypass_verification_code' => env('SMS_AUTH_BYPASS_CODE', env('NAVIGATOR_BYPASS_VERIFICATION_CODE')),
+        'review_accounts'          => array_values(array_filter(array_map(
+            'trim',
+            explode(',', (string) env('NAVIGATOR_REVIEW_ACCOUNTS', ''))
+        ))),
         'app_identifier'           => env('NAVIGATOR_APP_IDENTIFIER', 'io.fleetbase.navigator'),
     ],
 
+    /*
+    |--------------------------------------------------------------------------
+    | Customers
+    |--------------------------------------------------------------------------
+    |
+    | Testing-only verification-code bypass for the customer auth flows
+    | (POST /v1/customers, /customers/verify-code, /customers/reset-password).
+    | Intended for local development and staging QA, where signing up means
+    | waiting on a real email or paying for a real SMS.
+    |
+    | MUST be left unset in production. It is ignored outright when the app
+    | environment is `production`, and when unset no bypass is possible.
+    |
+    | Deliberately NOT wired to SMS_AUTH_BYPASS_CODE: that variable already
+    | gates operator console login and driver login, and reusing it here would
+    | make one leaked value unlock three different privilege tiers.
+    |
+    */
+    'customers' => [
+        'verification_bypass_code' => env('FLEETOPS_CUSTOMER_VERIFICATION_BYPASS_CODE'),
+        // Identities the bypass code is accepted for. See the note on navigator below.
+        'review_accounts'          => array_values(array_filter(array_map(
+            'trim',
+            explode(',', (string) env('FLEETOPS_CUSTOMER_REVIEW_ACCOUNTS', ''))
+        ))),
+    ],
+
     /*
     |--------------------------------------------------------------------------
     | API Events

package/server/config/geocoder.php

@@ -57,7 +57,7 @@ return [
     'providers' => [
         Chain::class => [
             GoogleMaps::class => [
-                config('services.google_maps.locale', env('GOOGLE_MAPS_LOCALE', 'us')),
+                config('services.google_maps.locale', env('GOOGLE_MAPS_LOCALE', 'en')),
                 config('services.google_maps.api_key', env('GOOGLE_MAPS_API_KEY')),
             ]
         ],