@fleetbase/fleetops-engine 0.6.66 → 0.6.67

package/server/tests/Feature/Http/SafeeRealtimeIngestionTest.php

@@ -0,0 +1,208 @@
+<?php
+
+require_once __DIR__ . '/../../Support/TelemetryTestEnvironment.php';
+
+use Fleetbase\FleetOps\Jobs\ProcessTelematicDelivery;
+use Fleetbase\FleetOps\Models\Device;
+use Fleetbase\FleetOps\Models\DeviceEvent;
+use Fleetbase\FleetOps\Models\Telematic;
+use Fleetbase\FleetOps\Support\Telematics\TelematicProviderRegistry;
+use Fleetbase\FleetOps\Support\Telematics\Providers\SafeeProvider;
+use Fleetbase\FleetOps\Models\Vehicle;
+use Fleetbase\FleetOps\Support\Telematics\TelematicService;
+use Fleetbase\FleetOps\Support\Telematics\Telemetry\Ingestor;
+use Illuminate\Database\ConnectionResolver;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\SQLiteConnection;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Facades\Cache;
+use Illuminate\Support\Facades\Crypt;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+if (!function_exists('Fleetbase\\FleetOps\\Support\\Telematics\\Telemetry\\broadcast')) {
+    eval('namespace Fleetbase\\FleetOps\\Support\\Telematics\\Telemetry; function broadcast($event) { $GLOBALS["afaqy_broadcasts"][] = $event; }');
+}
+if (!function_exists('Fleetbase\\FleetOps\\Support\\Telematics\\broadcast')) {
+    eval('namespace Fleetbase\\FleetOps\\Support\\Telematics; function broadcast($event) { $GLOBALS["afaqy_broadcasts"][] = $event; }');
+}
+
+function safeeDbFixture(): Telematic
+{
+    $pdo      = new PDO('sqlite::memory:');
+    $geometry = function ($text, $srid = 0, ...$rest) {
+        preg_match('/POINT\(([\d.e+\-]+) ([\d.e+\-]+)\)/i', $text, $coordinates);
+
+        return pack('V', $srid) . chr(1) . pack('V', 1) . pack('e2', (float) $coordinates[1], (float) $coordinates[2]);
+    };
+    $pdo->sqliteCreateFunction('ST_GeomFromText', $geometry);
+    $pdo->sqliteCreateFunction('ST_PointFromText', $geometry);
+    $connection = new SQLiteConnection($pdo, '', '', ['name' => 'mysql']);
+    $connection->setTransactionManager(new Illuminate\Database\DatabaseTransactionsManager());
+    $resolver = new ConnectionResolver(['mysql' => $connection]);
+    $resolver->setDefaultConnection('mysql');
+    Model::setConnectionResolver($resolver);
+    Model::unsetEventDispatcher();
+    Model::clearBootedModels();
+    app()->instance('db', new class($connection) {
+        public function __construct(public $connection)
+        {
+        }
+
+        public function connection($name = null)
+        {
+            return $this->connection;
+        }
+
+        public function __call($method, $args)
+        {
+            return $this->connection->{$method}(...$args);
+        }
+    });
+    app()->instance('db.schema', $connection->getSchemaBuilder());
+    DB::clearResolvedInstance('db');
+    Schema::clearResolvedInstance('db.schema');
+    app()->instance('encrypter', new Illuminate\Encryption\Encrypter(str_repeat('m', 32), 'aes-256-cbc'));
+    Crypt::clearResolvedInstance('encrypter');
+    Cache::flush();
+    Carbon::setTestNow('2026-09-15 12:00:00 UTC');
+    config(['telematics.afaqy.webhooks_enabled' => true, 'telematics.afaqy.polling_enabled' => true]);
+    config(['telematics.providers' => (require __DIR__ . '/../../../config/telematics.php')['providers']]);
+    app()->instance(TelematicProviderRegistry::class, new TelematicProviderRegistry());
+    $GLOBALS['afaqy_broadcasts'] = [];
+    // This persistence fixture excludes model listeners and external transports.
+    foreach ([
+        'telematics'    => ['uuid', 'public_id', 'company_uuid', 'provider', 'status', 'meta', 'credentials'],
+        'vehicles'      => ['uuid', 'public_id', 'company_uuid', 'name', 'plate_number', 'location', 'speed', 'heading', 'altitude', 'odometer', 'online', 'telematics'],
+        'sensors'       => ['uuid', 'public_id', 'company_uuid', 'device_uuid', 'telematic_uuid', 'type', 'internal_id', 'name', 'unit', 'last_value', 'last_reading_at', 'last_position', 'status', 'meta'],
+        'positions'     => ['uuid', 'public_id', 'company_uuid', 'subject_uuid', 'subject_type', 'coordinates', 'speed', 'heading', 'bearing', 'altitude', 'order_uuid', 'destination_uuid'],
+        'devices'       => ['uuid', 'public_id', 'company_uuid', 'telematic_uuid', 'device_id', 'internal_id', 'name', 'model', 'provider', 'type', 'imei', 'imsi', 'serial_number', 'firmware_version', 'last_position', 'last_online_at', 'online', 'status', 'meta', 'attachable_uuid', 'attachable_type'],
+        'device_events' => ['uuid', 'public_id', 'company_uuid', 'device_uuid', 'event_type', 'severity', 'message', 'provider', 'ident', 'code', 'state', 'reason', 'occurred_at', 'data', 'payload', '_key', 'meta', 'location'],
+    ] as $table => $columns) {
+        Schema::create($table, function ($schema) use ($columns) {
+            $schema->increments('id');
+            foreach ($columns as $column) {
+                $schema->text($column)->nullable();
+            }
+            $schema->timestamps();
+            $schema->timestamp('deleted_at')->nullable();
+            $schema->index('uuid');
+        });
+    }
+    (require __DIR__ . '/../../../migrations/2026_09_15_000001_create_telematic_telemetry_tables.php')->up();
+    Schema::table('device_events', fn ($table) => $table->index('_key'));
+    DB::table('telematics')->insert(['uuid' => 'integration-1', 'public_id' => 'telematic_1', 'company_uuid' => 'company-1', 'provider' => 'safee', 'status' => 'active', 'meta' => '{}']);
+
+    DB::table('devices')->insert(['uuid' => 'device-1', 'public_id' => 'device_1', 'company_uuid' => 'company-1', 'telematic_uuid' => 'integration-1', 'device_id' => '101', 'internal_id' => 'internal-original', 'name' => 'Existing tracker', 'imei' => 'existing-imei', 'status' => 'offline', 'meta' => '{"preserved":"yes"}']);
+
+    return Telematic::withoutGlobalScopes()->first();
+}
+
+function safeeDbSample(string $time = '2026-09-15T11:59:00Z', float $latitude = 24.0, array $identity = []): array
+{
+    return [
+        'id' => 101,
+        '_safee' => [
+            'vehicle_id' => 101,
+            'identity' => ['id' => 101] + $identity,
+            'current_state' => ['vehicle' => ['id' => 101], 'date' => $time, 'position' => ['lat' => $latitude, 'lon' => 46.7], 'speed' => 20, 'heading' => 90],
+        ],
+    ];
+}
+
+afterEach(fn () => Carbon::setTestNow());
+
+test('safee repeated and reversed polling samples preserve current device and attached vehicle positions', function () {
+    $connection = safeeDbFixture();
+    DB::table('vehicles')->insert(['uuid' => 'vehicle-1', 'public_id' => 'vehicle_1', 'company_uuid' => 'company-1', 'name' => 'Existing vehicle']);
+    DB::table('devices')->where('uuid', 'device-1')->update(['attachable_uuid' => 'vehicle-1', 'attachable_type' => Vehicle::class]);
+    $provider = new SafeeProvider();
+    $service = new TelematicService(new TelematicProviderRegistry());
+    $ingestor = new Ingestor();
+    $sample = safeeDbSample();
+    $ingestor->ingest($connection, $provider, $sample, $service);
+    $duplicate = $ingestor->ingest($connection, $provider, $sample, $service);
+    $ingestor->ingest($connection, $provider, safeeDbSample('2026-09-15T11:50:00Z', 12), $service);
+    $device = Device::withoutGlobalScopes()->firstOrFail();
+    $vehicle = Vehicle::withoutGlobalScopes()->firstOrFail();
+    expect($duplicate['duplicate'])->toBeTrue()
+        ->and(DeviceEvent::withoutGlobalScopes()->count())->toBe(2)
+        ->and($device->last_position->getLat())->toBe(24.0)
+        ->and($vehicle->location->getLat())->toBe(24.0)
+        ->and($device->last_online_at->toISOString())->toBe('2026-09-15T11:59:00.000000Z')
+        ->and($device->name)->toBe('Existing tracker')
+        ->and($device->imei)->toBe('existing-imei')
+        ->and($device->attachable_uuid)->toBe('vehicle-1')
+        ->and($device->attachable_type)->toBe(Vehicle::class)
+        ->and($device->internal_id)->toBe('internal-original')
+        ->and(data_get($device->meta, 'preserved'))->toBe('yes');
+});
+
+test('safee timestamps with offsets deduplicate the same UTC position', function () {
+    $connection = safeeDbFixture();
+    $service = new TelematicService(new TelematicProviderRegistry());
+    $ingestor = new Ingestor();
+    $provider = new SafeeProvider();
+    $ingestor->ingest($connection, $provider, safeeDbSample(), $service);
+    $same = $ingestor->ingest($connection, $provider, safeeDbSample('2026-09-15T14:59:00+03:00'), $service);
+    expect($same['duplicate'])->toBeTrue()
+        ->and(DeviceEvent::withoutGlobalScopes()->count())->toBe(1)
+        ->and(Device::withoutGlobalScopes()->first()->last_online_at->toISOString())->toBe('2026-09-15T11:59:00.000000Z');
+});
+
+test('safee missing or invalid positions cannot erase a valid current fix', function ($replacement) {
+    $connection = safeeDbFixture();
+    $service = new TelematicService(new TelematicProviderRegistry());
+    $ingestor = new Ingestor();
+    $provider = new SafeeProvider();
+    $ingestor->ingest($connection, $provider, safeeDbSample(), $service);
+    $invalid = safeeDbSample('2026-09-15T11:59:30Z');
+    $invalid['_safee']['current_state'] = $replacement;
+    $result = $ingestor->ingest($connection, $provider, $invalid, $service);
+    $device = Device::withoutGlobalScopes()->firstOrFail();
+    expect($result['invalid_position'])->toBeTrue()
+        ->and($device->last_position->getLat())->toBe(24.0)
+        ->and(data_get($device->meta, 'telemetry.position_at'))->toBe('2026-09-15T11:59:00.000000Z')
+        ->and(DeviceEvent::withoutGlobalScopes()->count())->toBe(1);
+})->with([
+    'missing state' => [null],
+    'invalid coordinates' => [['date' => '2026-09-15T11:59:30Z', 'position' => ['lat' => 200, 'lon' => 46.7]]],
+    'missing timestamp' => [['position' => ['lat' => 25, 'lon' => 46.7]]],
+]);
+
+test('safee matching unit IDs remain isolated by integration and company', function () {
+    $first = safeeDbFixture();
+    DB::table('telematics')->insert(['uuid' => 'integration-2', 'public_id' => 'telematic_2', 'company_uuid' => 'company-2', 'provider' => 'safee', 'status' => 'active', 'meta' => '{}']);
+    DB::table('devices')->insert(['uuid' => 'device-2', 'public_id' => 'device_2', 'company_uuid' => 'company-2', 'telematic_uuid' => 'integration-2', 'device_id' => '101', 'name' => 'Other tracker', 'status' => 'offline', 'meta' => '{}']);
+    $second = Telematic::withoutGlobalScopes()->where('uuid', 'integration-2')->firstOrFail();
+    $service = new TelematicService(new TelematicProviderRegistry());
+    $ingestor = new Ingestor();
+    $provider = new SafeeProvider();
+    $ingestor->ingest($first, $provider, safeeDbSample(), $service);
+    $ingestor->ingest($second, $provider, safeeDbSample('2026-09-15T11:59:00Z', 25), $service);
+    $devices = Device::withoutGlobalScopes()->orderBy('company_uuid')->get();
+    expect($devices)->toHaveCount(2)
+        ->and($devices[0]->company_uuid)->toBe('company-1')
+        ->and($devices[0]->last_position->getLat())->toBe(24.0)
+        ->and($devices[1]->company_uuid)->toBe('company-2')
+        ->and($devices[1]->last_position->getLat())->toBe(25.0)
+        ->and(DeviceEvent::withoutGlobalScopes()->count())->toBe(2);
+});
+
+test('telematics broadcasts use the configured broadcast queue without changing unconfigured instances', function (?string $queue) {
+    $connection = safeeDbFixture();
+    config(['telematics.telemetry.broadcast_queue' => $queue]);
+    DB::table('vehicles')->insert(['uuid' => 'vehicle-1', 'public_id' => 'vehicle_1', 'company_uuid' => 'company-1', 'name' => 'Existing vehicle', 'telematics' => '{}']);
+    DB::table('devices')->where('uuid', 'device-1')->update(['attachable_uuid' => 'vehicle-1', 'attachable_type' => Vehicle::class]);
+    try {
+        (new Ingestor())->ingest($connection, new SafeeProvider(), safeeDbSample(), new TelematicService(new TelematicProviderRegistry()));
+        $classes = array_map('get_class', $GLOBALS['afaqy_broadcasts']);
+        expect($classes)->toContain(Fleetbase\FleetOps\Events\DeviceTelemetryUpdated::class)
+            ->and($classes)->toContain(Fleetbase\FleetOps\Events\VehicleLocationChanged::class);
+        foreach ($GLOBALS['afaqy_broadcasts'] as $event) {
+            expect($event->broadcastQueue)->toBe($queue);
+        }
+    } finally {
+        config(['telematics.telemetry.broadcast_queue' => null]);
+    }
+})->with(['unconfigured' => [null], 'dedicated queue' => ['telematics-broadcasts']]);

package/server/tests/Feature/Http/TelematicDeliveryCheckpointTest.php

@@ -0,0 +1,198 @@
+<?php
+
+require_once __DIR__ . '/../../Support/TelemetryTestEnvironment.php';
+require_once __DIR__ . '/../../Support/ExampleTelemetryProvider.php';
+
+use Fleetbase\FleetOps\Contracts\TelemetryProviderInterface;
+use Fleetbase\FleetOps\Jobs\ProcessTelematicDelivery;
+use Fleetbase\FleetOps\Models\Device;
+use Fleetbase\FleetOps\Models\Telematic;
+use Fleetbase\FleetOps\Support\Telematics\TelematicProviderRegistry;
+use Fleetbase\FleetOps\Support\Telematics\TelematicService;
+use Fleetbase\FleetOps\Support\Telematics\Telemetry\Ingestor;
+use Illuminate\Database\ConnectionResolver;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\SQLiteConnection;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Facades\Cache;
+use Illuminate\Support\Facades\Crypt;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+class CheckpointTestIngestor extends Ingestor
+{
+    public array $calls = [];
+    public array $fail = [];
+    public array $invalid = [];
+
+    public function ingest(Telematic $telematic, TelemetryProviderInterface $provider, array $raw, TelematicService $service, ?string $receivedAt = null, string $source = 'poll'): array
+    {
+        $this->calls[] = $raw['tracker'];
+        if (in_array($raw['tracker'], $this->fail, true)) {
+            throw new RuntimeException('Temporary device failure');
+        }
+        $device = new Device();
+        $device->meta = ['telemetry' => ['source_delay_seconds' => 1]];
+
+        return ['device' => $device, 'invalid_position' => in_array($raw['tracker'], $this->invalid, true)];
+    }
+}
+
+function checkpointDeliverySetup(int $count = 12, string $source = 'poll'): array
+{
+    $connection = new SQLiteConnection(new PDO('sqlite::memory:'), '', '', ['name' => 'mysql']);
+    $connection->setTransactionManager(new Illuminate\Database\DatabaseTransactionsManager());
+    $resolver = new ConnectionResolver(['mysql' => $connection]);
+    $resolver->setDefaultConnection('mysql');
+    Model::setConnectionResolver($resolver);
+    Model::unsetEventDispatcher();
+    Model::clearBootedModels();
+    app()->instance('db', new class($connection) {
+        public function __construct(public $connection)
+        {
+        }
+
+        public function connection($name = null)
+        {
+            return $this->connection;
+        }
+
+        public function __call($method, $args)
+        {
+            return $this->connection->{$method}(...$args);
+        }
+    });
+    app()->instance('db.schema', $connection->getSchemaBuilder());
+    DB::clearResolvedInstance('db');
+    Schema::clearResolvedInstance('db.schema');
+    app()->instance('encrypter', new Illuminate\Encryption\Encrypter(str_repeat('c', 32), 'aes-256-cbc'));
+    Crypt::clearResolvedInstance('encrypter');
+    Cache::flush();
+    Carbon::setTestNow('2026-09-17 12:00:00 UTC');
+    Schema::create('telematics', function ($schema) {
+        $schema->increments('id');
+        foreach (['uuid', 'public_id', 'company_uuid', 'provider', 'status', 'meta'] as $column) {
+            $schema->text($column)->nullable();
+        }
+        $schema->timestamps();
+        $schema->timestamp('deleted_at')->nullable();
+    });
+    Schema::create('devices', function ($schema) {
+        foreach (['company_uuid', 'telematic_uuid', 'device_id'] as $column) {
+            $schema->text($column)->nullable();
+        }
+    });
+    (require __DIR__ . '/../../../migrations/2026_09_15_000001_create_telematic_telemetry_tables.php')->up();
+    DB::table('telematics')->insert(['uuid' => 'integration-checkpoint', 'public_id' => 'telematic_checkpoint', 'company_uuid' => 'company-1', 'provider' => 'example', 'status' => 'active', 'meta' => '{}']);
+    $registry = new class extends TelematicProviderRegistry {
+        public function resolve(string $key): Fleetbase\FleetOps\Contracts\TelematicProviderInterface
+        {
+            return new ExampleTelemetryProvider();
+        }
+    };
+    app()->instance(TelematicProviderRegistry::class, $registry);
+    $units = array_map(fn ($i) => ['tracker' => 'unit-' . $i, 'measured' => '2026-09-17T11:59:00Z', 'point' => [46.7, 24.0]], range(1, $count));
+    $payload = $source === 'webhook' ? ['signals' => $units] : $units;
+    DB::table('telematic_deliveries')->insert([
+        'uuid' => 'delivery-checkpoint', 'telematic_uuid' => 'integration-checkpoint', 'source' => $source, 'status' => 'pending',
+        'payload_hash' => hash('sha256', json_encode($payload)), 'payload' => Crypt::encryptString(json_encode($payload)),
+        'received_at' => now(), 'available_at' => now(), 'created_at' => now(), 'updated_at' => now(),
+    ]);
+
+    return [new ProcessTelematicDelivery('delivery-checkpoint'), new CheckpointTestIngestor(), new TelematicService($registry), $connection];
+}
+
+function checkpointDeliveryRow(): object
+{
+    return DB::table('telematic_deliveries')->where('uuid', 'delivery-checkpoint')->first();
+}
+
+afterEach(function () {
+    Carbon::setTestNow();
+    unset($GLOBALS['telemetry_test_clock']);
+});
+
+test('slow deliveries continue beyond five reservations without replaying applied units', function ($source) {
+    [$job, $ingestor, $service] = checkpointDeliverySetup(7, $source);
+    for ($pass = 0; $pass < 7; $pass++) {
+        $GLOBALS['telemetry_test_clock'] = [1000.0, 1041.0];
+        $job->handle($ingestor, $service);
+        $row = checkpointDeliveryRow();
+        expect((int) $row->applied)->toBe($pass + 1);
+        expect($row->status)->toBe($pass === 6 ? 'processed' : 'retry');
+        expect((int) $row->attempts)->toBe($pass === 6 ? 1 : 0);
+    }
+    expect($ingestor->calls)->toBe(array_map(fn ($i) => 'unit-' . $i, range(1, 7)));
+    expect((int) checkpointDeliveryRow()->failed)->toBe(0);
+})->with(['poll', 'webhook']);
+
+test('yield preserves failed items and invalid counts while reaching the untouched tail', function (string $source, int $invalidFailures, string $finalStatus) {
+    [$job, $ingestor, $service] = checkpointDeliverySetup(8, $source);
+    $ingestor->fail = ['unit-1'];
+    $ingestor->invalid = ['unit-2'];
+    for ($pass = 0; $pass < 8; $pass++) {
+        $GLOBALS['telemetry_test_clock'] = [1000.0, 1041.0];
+        $job->handle($ingestor, $service);
+    }
+    $row = checkpointDeliveryRow();
+    expect($row->status)->toBe('retry')->and((int) $row->attempts)->toBe(1)
+        ->and((int) $row->applied)->toBe(6)->and((int) $row->invalid_count)->toBe(1)->and((int) $row->failed)->toBe(1 + $invalidFailures);
+    expect(array_column(json_decode(Crypt::decryptString($row->retry_payload), true), 'tracker'))->toBe(['unit-1']);
+    expect($ingestor->calls)->toBe(array_map(fn ($i) => 'unit-' . $i, range(1, 8)));
+    $ingestor->fail = [];
+    Carbon::setTestNow(now()->addSeconds(16));
+    $GLOBALS['telemetry_test_clock'] = [1000.0, 1001.0];
+    $job->handle($ingestor, $service);
+    $row = checkpointDeliveryRow();
+    expect($row->status)->toBe($finalStatus)->and((int) $row->applied)->toBe(7)
+        ->and((int) $row->invalid_count)->toBe(1)->and((int) $row->failed)->toBe($invalidFailures)->and((int) $row->attempts)->toBe(2);
+    expect(end($ingestor->calls))->toBe('unit-1');
+})->with([
+    // Polled units without a fix are counted but only pushed invalid samples are replayable failures.
+    'poll'    => ['poll', 0, 'processed'],
+    'webhook' => ['webhook', 1, 'quarantined'],
+]);
+
+test('worker restart resumes the committed checkpoint and accounts only the remaining units', function () {
+    [$job, $ingestor, $service, $connection] = checkpointDeliverySetup();
+    $connection->setEventDispatcher(new Illuminate\Events\Dispatcher());
+    $interrupted = false;
+    $connection->listen(function ($query) use (&$interrupted) {
+        if (!$interrupted && str_starts_with($query->sql, 'update ') && str_contains($query->sql, 'retry_payload')) {
+            $interrupted = true;
+            throw new RuntimeException('Simulated worker interruption after durable checkpoint');
+        }
+    });
+    $GLOBALS['telemetry_test_clock'] = array_fill(0, 13, 1000.0);
+    expect(fn () => $job->handle($ingestor, $service))->toThrow(RuntimeException::class, 'Simulated worker interruption');
+    $row = checkpointDeliveryRow();
+    expect($row->status)->toBe('processing')->and((int) $row->applied)->toBe(10)->and((int) $row->attempts)->toBe(1);
+    expect(array_column(json_decode(Crypt::decryptString($row->retry_payload), true)['remaining'], 'tracker'))->toBe(['unit-11', 'unit-12']);
+    Carbon::setTestNow(now()->addSeconds(121));
+    $GLOBALS['telemetry_test_clock'] = [1000.0, 1000.0, 1000.0];
+    (new ProcessTelematicDelivery('delivery-checkpoint'))->handle($ingestor, $service);
+    expect(checkpointDeliveryRow()->status)->toBe('processed')->and((int) checkpointDeliveryRow()->applied)->toBe(12)
+        ->and($ingestor->calls)->toBe(array_map(fn ($i) => 'unit-' . $i, range(1, 12)));
+});
+
+test('slow single-unit checkpoints limit replay before a ten-unit boundary', function () {
+    [$job, $ingestor, $service, $connection] = checkpointDeliverySetup(3);
+    $connection->setEventDispatcher(new Illuminate\Events\Dispatcher());
+    $connection->listen(function ($query) {
+        if (str_starts_with($query->sql, 'update ') && str_contains($query->sql, 'retry_payload')) {
+            throw new RuntimeException('Stop after first checkpoint');
+        }
+    });
+    $GLOBALS['telemetry_test_clock'] = [1000.0, 1003.0];
+    expect(fn () => $job->handle($ingestor, $service))->toThrow(RuntimeException::class, 'first checkpoint');
+    expect((int) checkpointDeliveryRow()->applied)->toBe(1)->and($ingestor->calls)->toBe(['unit-1']);
+});
+
+test('malformed delivery checkpoints are quarantined instead of partially replayed', function () {
+    [$job, $ingestor, $service] = checkpointDeliverySetup(3);
+    DB::table('telematic_deliveries')->where('uuid', 'delivery-checkpoint')->update(['retry_payload' => Crypt::encryptString(json_encode([
+        'checkpoint_version' => 1, 'remaining' => ['tracker' => 'unit-1'], 'failed' => [], 'failure_types' => [],
+    ]))]);
+    $job->handle($ingestor, $service);
+    expect(checkpointDeliveryRow()->status)->toBe('quarantined')->and($ingestor->calls)->toBe([]);
+});

package/server/tests/Feature/Http/TelematicMixedFleetDeliveryTest.php

@@ -0,0 +1,166 @@
+<?php
+
+require_once __DIR__ . '/../../Support/TelemetryTestEnvironment.php';
+
+use Fleetbase\FleetOps\Jobs\ProcessTelematicDelivery;
+use Fleetbase\FleetOps\Models\Device;
+use Fleetbase\FleetOps\Models\DeviceEvent;
+use Fleetbase\FleetOps\Models\Telematic;
+use Fleetbase\FleetOps\Support\Telematics\TelematicProviderRegistry;
+use Fleetbase\FleetOps\Support\Telematics\TelematicService;
+use Fleetbase\FleetOps\Support\Telematics\Telemetry\Ingestor;
+use Illuminate\Database\ConnectionResolver;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\SQLiteConnection;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Facades\Cache;
+use Illuminate\Support\Facades\Crypt;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+if (!function_exists('Fleetbase\\FleetOps\\Support\\Telematics\\Telemetry\\broadcast')) {
+    eval('namespace Fleetbase\\FleetOps\\Support\\Telematics\\Telemetry; function broadcast($event) { $GLOBALS["afaqy_broadcasts"][] = $event; }');
+}
+if (!function_exists('Fleetbase\\FleetOps\\Support\\Telematics\\broadcast')) {
+    eval('namespace Fleetbase\\FleetOps\\Support\\Telematics; function broadcast($event) { $GLOBALS["afaqy_broadcasts"][] = $event; }');
+}
+
+function mixedFleetDeliveryFixture(): Telematic
+{
+    $pdo      = new PDO('sqlite::memory:');
+    $geometry = function ($text, $srid = 0, ...$rest) {
+        preg_match('/POINT\(([\d.e+\-]+) ([\d.e+\-]+)\)/i', $text, $coordinates);
+
+        return pack('V', $srid) . chr(1) . pack('V', 1) . pack('e2', (float) $coordinates[1], (float) $coordinates[2]);
+    };
+    $pdo->sqliteCreateFunction('ST_GeomFromText', $geometry);
+    $pdo->sqliteCreateFunction('ST_PointFromText', $geometry);
+    $connection = new SQLiteConnection($pdo, '', '', ['name' => 'mysql']);
+    $connection->setTransactionManager(new Illuminate\Database\DatabaseTransactionsManager());
+    $resolver = new ConnectionResolver(['mysql' => $connection]);
+    $resolver->setDefaultConnection('mysql');
+    Model::setConnectionResolver($resolver);
+    Model::unsetEventDispatcher();
+    Model::clearBootedModels();
+    app()->instance('db', new class($connection) {
+        public function __construct(public $connection)
+        {
+        }
+
+        public function connection($name = null)
+        {
+            return $this->connection;
+        }
+
+        public function __call($method, $args)
+        {
+            return $this->connection->{$method}(...$args);
+        }
+    });
+    app()->instance('db.schema', $connection->getSchemaBuilder());
+    DB::clearResolvedInstance('db');
+    Schema::clearResolvedInstance('db.schema');
+    app()->instance('encrypter', new Illuminate\Encryption\Encrypter(str_repeat('m', 32), 'aes-256-cbc'));
+    Crypt::clearResolvedInstance('encrypter');
+    Cache::flush();
+    Carbon::setTestNow('2026-09-15 12:00:00 UTC');
+    config(['telematics.afaqy.webhooks_enabled' => true, 'telematics.afaqy.polling_enabled' => true]);
+    config(['telematics.providers' => (require __DIR__ . '/../../../config/telematics.php')['providers']]);
+    app()->instance(TelematicProviderRegistry::class, new TelematicProviderRegistry());
+    $GLOBALS['afaqy_broadcasts'] = [];
+    // This persistence fixture excludes model listeners and external transports.
+    foreach ([
+        'telematics'    => ['uuid', 'public_id', 'company_uuid', 'provider', 'status', 'meta', 'credentials'],
+        'vehicles'      => ['uuid', 'public_id', 'company_uuid', 'name', 'plate_number', 'location', 'speed', 'heading', 'altitude', 'odometer', 'online', 'telematics'],
+        'sensors'       => ['uuid', 'public_id', 'company_uuid', 'device_uuid', 'telematic_uuid', 'type', 'internal_id', 'name', 'unit', 'last_value', 'last_reading_at', 'last_position', 'status', 'meta'],
+        'positions'     => ['uuid', 'public_id', 'company_uuid', 'subject_uuid', 'subject_type', 'coordinates', 'speed', 'heading', 'bearing', 'altitude', 'order_uuid', 'destination_uuid'],
+        'devices'       => ['uuid', 'public_id', 'company_uuid', 'telematic_uuid', 'device_id', 'internal_id', 'name', 'model', 'provider', 'type', 'imei', 'imsi', 'serial_number', 'firmware_version', 'last_position', 'last_online_at', 'online', 'status', 'meta', 'attachable_uuid', 'attachable_type'],
+        'device_events' => ['uuid', 'public_id', 'company_uuid', 'device_uuid', 'event_type', 'severity', 'message', 'provider', 'ident', 'code', 'state', 'reason', 'occurred_at', 'data', 'payload', '_key', 'meta', 'location'],
+    ] as $table => $columns) {
+        Schema::create($table, function ($schema) use ($columns) {
+            $schema->increments('id');
+            foreach ($columns as $column) {
+                $schema->text($column)->nullable();
+            }
+            $schema->timestamps();
+            $schema->timestamp('deleted_at')->nullable();
+            $schema->index('uuid');
+        });
+    }
+    (require __DIR__ . '/../../../migrations/2026_09_15_000001_create_telematic_telemetry_tables.php')->up();
+    Schema::table('device_events', fn ($table) => $table->index('_key'));
+    DB::table('telematics')->insert(['uuid' => 'integration-1', 'public_id' => 'telematic_1', 'company_uuid' => 'company-1', 'provider' => 'afaqy', 'status' => 'active', 'meta' => '{}']);
+
+    return Telematic::withoutGlobalScopes()->first();
+}
+
+function mixedFleetPosition(string $id, float $lat): array
+{
+    return ['_id' => $id, 'name' => $id, 'last_update' => ['dtt' => '2026-09-15 11:59:00', 'dts' => '2026-09-15 11:59:01', 'lat' => $lat, 'lng' => 46.7, 'spd' => 20, 'acc' => 1]];
+}
+
+function processMixedFleetDelivery(array $payload, string $source = 'poll'): object
+{
+    DB::table('telematic_sync_runs')->insert(['uuid' => 'run-1', 'telematic_uuid' => 'integration-1', 'status' => 'ingesting', 'created_at' => now(), 'updated_at' => now()]);
+    DB::table('telematic_deliveries')->insert([
+        'uuid'       => 'delivery-1', 'telematic_uuid' => 'integration-1', 'run_uuid' => 'run-1', 'source' => $source,
+        'status'     => 'pending', 'payload_hash' => hash('sha256', json_encode($payload)),
+        'payload'    => Crypt::encryptString(json_encode($payload)), 'received_at' => now(), 'available_at' => now(),
+        'created_at' => now(), 'updated_at' => now(),
+    ]);
+    (new ProcessTelematicDelivery('delivery-1'))->handle(new Ingestor(), new TelematicService(new TelematicProviderRegistry()));
+
+    return DB::table('telematic_deliveries')->where('uuid', 'delivery-1')->first();
+}
+
+afterEach(fn () => Carbon::setTestNow());
+
+test('polling applies valid positions on both sides of a unit without a GPS fix', function ($missingUpdate) {
+    mixedFleetDeliveryFixture();
+    foreach (['first-unit', 'never-connected', 'last-unit'] as $id) {
+        DB::table('devices')->insert(['uuid' => 'device-' . $id, 'public_id' => 'device_' . $id, 'telematic_uuid' => 'integration-1', 'company_uuid' => 'company-1', 'device_id' => $id, 'name' => $id, 'status' => 'offline', 'meta' => '{}']);
+    }
+    $middle   = ['_id' => 'never-connected', 'name' => 'Inactive tracker', 'active' => false] + $missingUpdate;
+    $payload  = [mixedFleetPosition('first-unit', 24.1), $middle, mixedFleetPosition('last-unit', 24.3)];
+    $delivery = processMixedFleetDelivery($payload);
+
+    // A polled unit without a fix is inventory state, not a failed delivery to quarantine and replay.
+    expect($delivery->status)->toBe('processed')
+        ->and((int) $delivery->applied)->toBe(2)
+        ->and((int) $delivery->invalid_count)->toBe(1)
+        ->and((int) $delivery->failed)->toBe(0)
+        ->and((int) $delivery->attempts)->toBe(1);
+    expect(DeviceEvent::withoutGlobalScopes()->count())->toBe(2);
+    foreach (['first-unit' => 24.1, 'last-unit' => 24.3] as $id => $latitude) {
+        $device = Device::withoutGlobalScopes()->where('device_id', $id)->firstOrFail();
+        expect($device->last_position->getLat())->toBe($latitude)
+            ->and($device->last_online_at->toISOString())->toBe('2026-09-15T11:59:01.000000Z')
+            ->and(data_get($device->meta, 'telemetry.position_at'))->toBe('2026-09-15T11:59:00.000000Z');
+    }
+    $inactive = Device::withoutGlobalScopes()->where('device_id', 'never-connected')->firstOrFail();
+    expect($inactive->last_online_at)->toBeNull()
+        ->and(data_get($inactive->meta, 'telemetry.position_at'))->toBeNull();
+    $run = DB::table('telematic_sync_runs')->where('uuid', 'run-1')->first();
+    expect($run->status)->toBe('completed')->and((int) $run->applied)->toBe(2)->and((int) $run->failed)->toBe(0);
+    expect(json_decode(Crypt::decryptString($delivery->payload), true))->toBe($payload);
+})->with(['missing last_update' => [[]], 'null last_update' => [['last_update' => null]]]);
+
+test('unknown vehicle events remain quarantined as external deliveries', function () {
+    mixedFleetDeliveryFixture();
+    $event    = mixedFleetPosition('event-unit', 24.1) + ['event' => 'zone_entry'];
+    $delivery = processMixedFleetDelivery([$event], 'webhook');
+
+    expect($delivery->status)->toBe('quarantined')
+        ->and((int) $delivery->applied)->toBe(0)
+        ->and($delivery->error)->toContain('Unsupported or unreadable position payload');
+    expect(Device::withoutGlobalScopes()->count())->toBe(0);
+    expect(DeviceEvent::withoutGlobalScopes()->count())->toBe(0);
+});
+
+test('poll deliveries still reject invalid internal envelopes', function () {
+    mixedFleetDeliveryFixture();
+    $delivery = processMixedFleetDelivery(['data' => [mixedFleetPosition('unit', 24.1)]]);
+
+    expect($delivery->status)->toBe('quarantined')->and((int) $delivery->applied)->toBe(0);
+    expect(Device::withoutGlobalScopes()->count())->toBe(0);
+});