Files
accounted/extensions/general/invoice-inbox/__tests__/extract-invoice-fields.test.ts
T
MattssonandClaude Fable 5 84c8e1ce59 fix(inbox): never extract the receiving company as its own supplier (#2080)
* fix(inbox): never extract the receiving company as its own supplier

The model sometimes reads the Kund/Kunduppgifter block of bank agreements
and similar documents as the issuer, so the inbox offered to create the
user's own company as a leverantor. Two layers: a supplier-direction rule
in the extraction prompt (issuer, never the customer/recipient block), and
a deterministic post-extraction guard that nulls the supplier block when
its org number, derived VAT number, or exact name equals the receiving
company's own. All AI extraction paths (upload, deferred, retry,
attach-document, document-extraction, MCP) pass the company identity.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Hqm9QgdyNAFaWiz6Ww7pgb

* fix(inbox): keep the own-company guard alive for photographed documents

Skeptic findings on PR #2080: normalizeImageForExtraction rebuilt the input
without ownCompany, so the guard never fired for HEIC/oversized phone photos
(the motivating case). Spread the original input instead. Also let a
provably different extracted org number outvote a name coincidence, and
accept 12-digit personnummer-form own org numbers (19/20 century prefix,
enskild firma) alongside the 16-prefixed organisation form.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Hqm9QgdyNAFaWiz6Ww7pgb

* docs(compliance): add RoPA entry for the own-company-identity lookup

Compliance swarm (GDPR Art. 30): fetchOwnCompanyIdentity reads
companies.name and org_number on every extraction; record the processing
activity (transient in-memory comparison, never sent to the model).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Hqm9QgdyNAFaWiz6Ww7pgb

* fix(inbox): log own-company identity lookup failures instead of failing silent

Compliance swarm (SOC 2 CC7.2): the bare catch in fetchOwnCompanyIdentity
made a persistently broken lookup (RLS misconfig, DB outage) disable the
guard invisibly. Also pin the VAT-number match across prefixed and bare
digit forms in the test matrix.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Hqm9QgdyNAFaWiz6Ww7pgb

* fix(inbox): surface maybeSingle query errors in the own-company lookup

CodeRabbit: maybeSingle() reports RLS/query failures in error without
throwing, so the failure log added for SOC 2 CC7.2 never fired for exactly
those cases. Throw the reported error into the existing catch (still fail
open to nulls).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Hqm9QgdyNAFaWiz6Ww7pgb

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-08-31 15:13:14 +02:00

827 lines
29 KiB
TypeScript

import { describe, it, expect, vi, beforeEach, afterAll } from 'vitest'
import {
extractInvoiceFields,
extractJsonObject,
stripOwnCompanyAsSupplier,
emptyResult,
} from '@/extensions/general/invoice-inbox/lib/extract-invoice-fields'
// Mock the Bedrock SDK so tests drive the JSON parser without
// network/credential needs.
const mockCreate = vi.fn()
vi.mock('@anthropic-ai/bedrock-sdk', () => {
class FakeBedrock {
messages = { create: mockCreate }
}
return { default: FakeBedrock }
})
// sharp is imported lazily by normalizeImageForExtraction. The default mock
// (no implementation → TypeError on .rotate()) mimics a build without HEIF
// support: normalization fails, the original buffer flows on. Individual
// tests install a working chain via sharpMock.mockImplementationOnce.
const sharpMock = vi.fn()
vi.mock('sharp', () => ({
default: (...args: unknown[]) => sharpMock(...args),
}))
function workingSharpChain(outputBuffer: Buffer) {
const chain = {
rotate: vi.fn(() => chain),
resize: vi.fn(() => chain),
jpeg: vi.fn(() => chain),
toBuffer: vi.fn().mockResolvedValue(outputBuffer),
}
return chain
}
const ORIG_AWS_ACCESS_KEY_ID = process.env.AWS_ACCESS_KEY_ID
const ORIG_AWS_SECRET_ACCESS_KEY = process.env.AWS_SECRET_ACCESS_KEY
function aiResponse(json: string | object) {
const text = typeof json === 'string' ? json : JSON.stringify(json)
return Promise.resolve({
content: [{ type: 'text', text }],
})
}
const VALID_RESULT = {
supplier: {
name: 'Anthropic, PBC',
orgNumber: null,
vatNumber: null,
address: '548 Market Street, San Francisco, CA 94104',
bankgiro: null,
plusgiro: null,
},
invoice: {
invoiceNumber: '06655767-0007',
invoiceDate: '2026-02-13',
dueDate: null,
paymentReference: null,
currency: 'USD',
},
lineItems: [
{
description: 'One-time credit purchase',
quantity: 1,
unitPrice: 5,
lineTotal: 5,
vatRate: 25,
accountSuggestion: null,
},
],
totals: { subtotal: 5, vatAmount: 1.25, total: 6.25 },
vatBreakdown: [{ rate: 25, base: 5, amount: 1.25 }],
}
describe('extractInvoiceFields', () => {
beforeEach(() => {
vi.clearAllMocks()
process.env.AWS_ACCESS_KEY_ID = 'test-key'
process.env.AWS_SECRET_ACCESS_KEY = 'test-secret'
})
it('returns empty result for unsupported mime type (HEIC)', async () => {
const { data, rawText } = await extractInvoiceFields({
buffer: Buffer.from(''),
mimeType: 'image/heic',
fileName: 'photo.heic',
})
expect(rawText).toBeNull()
expect(data.totals.total).toBeNull()
expect(data.supplier.name).toBeNull()
expect(mockCreate).not.toHaveBeenCalled()
})
it('returns empty result and skips API when AWS creds are missing', async () => {
delete process.env.AWS_ACCESS_KEY_ID
delete process.env.AWS_SECRET_ACCESS_KEY
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'f.pdf',
})
expect(data.totals.total).toBeNull()
expect(mockCreate).not.toHaveBeenCalled()
})
it('parses a valid AI response into InvoiceExtractionResult', async () => {
mockCreate.mockReturnValueOnce(aiResponse(VALID_RESULT))
const { data, rawText } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'anthropic-receipt.pdf',
})
expect(rawText).toContain('Anthropic')
expect(data.supplier.name).toBe('Anthropic, PBC')
expect(data.invoice.currency).toBe('USD')
expect(data.invoice.invoiceNumber).toBe('06655767-0007')
expect(data.totals.total).toBe(6.25)
expect(data.vatBreakdown).toHaveLength(1)
expect(data.lineItems).toHaveLength(1)
expect(data.confidence).toBe(1)
})
it('promotes a single prominent amount into the editable total (bankintyg/avtal)', async () => {
// Zero amounts are noise ("Totalt månadspris: 0 kr"), so this document
// still has exactly one meaningful figure and it becomes TOTALT.
mockCreate.mockReturnValueOnce(
aiResponse({
...VALID_RESULT,
documentKind: 'other',
supplier: { ...VALID_RESULT.supplier, name: 'SEB' },
invoice: { ...VALID_RESULT.invoice, invoiceNumber: null, currency: 'SEK' },
lineItems: [],
totals: { subtotal: null, vatAmount: null, total: null },
vatBreakdown: [],
prominentAmounts: [
{ amount: 0, label: 'Totalt månadspris' },
{ amount: 2500, label: 'Anslutnings-/Engångspris' },
],
})
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'affarsavtal.pdf',
})
expect(data.totals.total).toBe(2500)
expect(data.totalSource).toBe('prominent')
// The source list is preserved: matching demotes the promoted total back
// through it, and re-extraction stays idempotent.
expect(data.prominentAmounts).toEqual([
{ amount: 0, label: 'Totalt månadspris' },
{ amount: 2500, label: 'Anslutnings-/Engångspris' },
])
})
it('does not promote when the document shows several distinct amounts', async () => {
mockCreate.mockReturnValueOnce(
aiResponse({
...VALID_RESULT,
documentKind: 'government_letter',
lineItems: [],
totals: { subtotal: null, vatAmount: null, total: null },
vatBreakdown: [],
prominentAmounts: [
{ amount: 4568, label: 'Arbetsgivaravgift' },
{ amount: 8151, label: 'Skatt' },
],
})
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'agi-besked.pdf',
})
expect(data.totals.total).toBeNull()
expect(data.totalSource).toBeUndefined()
})
it('never promotes on invoices or receipts', async () => {
// A receipt whose total was unreadable must not have a stray printed
// figure laundered into its total.
mockCreate.mockReturnValueOnce(
aiResponse({
...VALID_RESULT,
documentKind: 'receipt',
totals: { subtotal: null, vatAmount: null, total: null },
prominentAmounts: [{ amount: 999, label: 'Pris' }],
})
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'kvitto.pdf',
})
expect(data.totals.total).toBeNull()
expect(data.totalSource).toBeUndefined()
})
it('degrades a hallucinated prominentAmounts shape to an empty list, not a parse failure', async () => {
mockCreate.mockReturnValueOnce(
aiResponse({ ...VALID_RESULT, prominentAmounts: [{ amount: 'tjugofemtusen' }] })
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'f.pdf',
})
// The rest of the document still parses.
expect(data.totals.total).toBe(6.25)
expect(data.prominentAmounts).toEqual([])
})
it('validates a cached raw output from before prominentAmounts existed', async () => {
mockCreate.mockReturnValueOnce(aiResponse(VALID_RESULT))
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'f.pdf',
})
expect(data.totals.total).toBe(6.25)
expect(data.prominentAmounts).toBeUndefined()
})
it('sends image content for an image upload', async () => {
mockCreate.mockReturnValueOnce(aiResponse(VALID_RESULT))
await extractInvoiceFields({
buffer: Buffer.from('JPEG'),
mimeType: 'image/jpeg',
fileName: 'photo.jpg',
})
const call = mockCreate.mock.calls[0][0]
const content = call.messages[0].content
expect(content[0].type).toBe('image')
expect(content[0].source.media_type).toBe('image/jpeg')
})
it('sends document content for a PDF upload', async () => {
mockCreate.mockReturnValueOnce(aiResponse(VALID_RESULT))
await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'invoice.pdf',
})
const call = mockCreate.mock.calls[0][0]
const content = call.messages[0].content
expect(content[0].type).toBe('document')
expect(content[0].source.media_type).toBe('application/pdf')
})
it('returns empty result when AI response is not valid JSON', async () => {
mockCreate.mockReturnValueOnce(aiResponse('Sorry, I cannot read this PDF.'))
const { data, rawText } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'f.pdf',
})
expect(rawText).toBe('Sorry, I cannot read this PDF.')
expect(data.totals.total).toBeNull()
expect(data.supplier.name).toBeNull()
})
// ── Fenced / prefixed model output (Sonnet 5 regression, 2026-08) ──
// Sonnet 5 intermittently wraps the JSON in markdown fences despite the
// JSON-only instruction; a fifth of prod extractions came back empty
// because JSON.parse saw the backticks.
it('parses a response wrapped in ```json fences', async () => {
mockCreate.mockReturnValueOnce(
aiResponse('```json\n' + JSON.stringify(VALID_RESULT) + '\n```')
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'kvitto.pdf',
})
expect(data.supplier.name).toBe('Anthropic, PBC')
expect(data.totals.total).toBe(6.25)
expect(data.confidence).toBe(1)
})
it('parses a response wrapped in bare ``` fences', async () => {
mockCreate.mockReturnValueOnce(
aiResponse('```\n' + JSON.stringify(VALID_RESULT) + '\n```')
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'kvitto.pdf',
})
expect(data.totals.total).toBe(6.25)
expect(data.confidence).toBe(1)
})
it('parses a response with prose before and after the JSON object', async () => {
mockCreate.mockReturnValueOnce(
aiResponse(
'Here is the extracted data:\n```json\n' +
JSON.stringify(VALID_RESULT) +
'\n```\nLet me know if you need anything else.'
)
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'kvitto.pdf',
})
expect(data.supplier.name).toBe('Anthropic, PBC')
expect(data.confidence).toBe(1)
})
it('parses JSON when the surrounding prose itself contains braces', async () => {
mockCreate.mockReturnValueOnce(
aiResponse(
'Note: fields use the shape {field: value}.\n```json\n' +
JSON.stringify(VALID_RESULT) +
'\n```\nAnything unclear {just ask}.'
)
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'kvitto.pdf',
})
expect(data.supplier.name).toBe('Anthropic, PBC')
expect(data.totals.total).toBe(6.25)
expect(data.confidence).toBe(1)
})
it('handles braces inside JSON string values without ending the object early', async () => {
mockCreate.mockReturnValueOnce(
aiResponse(
'```json\n' +
JSON.stringify({
...VALID_RESULT,
supplier: { ...VALID_RESULT.supplier, address: 'Suite {B}, "Main" St 1' },
}) +
'\n```'
)
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'kvitto.pdf',
})
expect(data.supplier.address).toBe('Suite {B}, "Main" St 1')
expect(data.confidence).toBe(1)
})
it('stays bounded on pathological brace-laden input and falls through unchanged', async () => {
// 100k unclosed braces: without the attempt cap this would scan
// quadratically; with it the helper bails fast and returns the input,
// which then lands in the existing empty-result path.
const pathological = '{'.repeat(100_000)
const startedAt = performance.now()
expect(extractJsonObject(pathological)).toBe(pathological)
expect(performance.now() - startedAt).toBeLessThan(1_000)
mockCreate.mockReturnValueOnce(aiResponse(pathological))
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'f.pdf',
})
expect(data.totals.total).toBeNull()
expect(data.confidence).toBe(0)
})
it('skips scanning entirely for oversized input', async () => {
// Above the 256 KB cap the helper must not scan at all; the raw text
// passes through unchanged even though it contains valid JSON.
const oversized = 'x'.repeat(300 * 1024) + JSON.stringify(VALID_RESULT)
expect(extractJsonObject(oversized)).toBe(oversized)
})
// ── max_tokens truncation retry (2026-08) ──────────────────
// Line-item-heavy documents can blow the output cap; the truncated JSON
// used to parse to nothing and look like an unreadable document.
it('retries once with a doubled cap when the output was truncated at max_tokens', async () => {
mockCreate
.mockResolvedValueOnce({
content: [{ type: 'text', text: JSON.stringify(VALID_RESULT).slice(0, 40) }],
stop_reason: 'max_tokens',
})
.mockReturnValueOnce(aiResponse(VALID_RESULT))
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'many-line-items.pdf',
})
expect(mockCreate).toHaveBeenCalledTimes(2)
const firstMax = mockCreate.mock.calls[0][0].max_tokens
expect(mockCreate.mock.calls[1][0].max_tokens).toBe(firstMax * 2)
expect(data.totals.total).toBe(6.25)
expect(data.confidence).toBe(1)
})
it('falls back to the empty result when the retry is truncated too', async () => {
mockCreate
.mockResolvedValueOnce({
content: [{ type: 'text', text: '{"lineItems":[{"desc' }],
stop_reason: 'max_tokens',
})
.mockResolvedValueOnce({
content: [{ type: 'text', text: '{"lineItems":[{"description":"still cut' }],
stop_reason: 'max_tokens',
})
const { data, rawText } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'many-line-items.pdf',
})
expect(mockCreate).toHaveBeenCalledTimes(2)
expect(rawText).toBe('{"lineItems":[{"description":"still cut')
expect(data.totals.total).toBeNull()
expect(data.confidence).toBe(0)
})
it('keeps the first response when the retry call itself throws', async () => {
// The truncated first answer happens to be complete valid JSON (the flag
// can fire on the last token); a throttled retry must not discard it.
mockCreate
.mockResolvedValueOnce({
content: [{ type: 'text', text: JSON.stringify(VALID_RESULT) }],
stop_reason: 'max_tokens',
})
.mockRejectedValueOnce(new Error('throttled'))
const { data, rawText } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'many-line-items.pdf',
})
expect(mockCreate).toHaveBeenCalledTimes(2)
expect(rawText).toBe(JSON.stringify(VALID_RESULT))
expect(data.totals.total).toBe(6.25)
expect(data.confidence).toBe(1)
})
it('does not retry when the answer completed under the cap', async () => {
mockCreate.mockReturnValueOnce(aiResponse(VALID_RESULT))
await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'kvitto.pdf',
})
expect(mockCreate).toHaveBeenCalledTimes(1)
})
it('returns empty result when AI response fails schema validation', async () => {
mockCreate.mockReturnValueOnce(
aiResponse({ supplier: { name: 'X' } /* missing required keys */ })
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'f.pdf',
})
expect(data.totals.total).toBeNull()
expect(data.supplier.name).toBeNull()
})
it('returns empty result when Bedrock throws', async () => {
mockCreate.mockRejectedValueOnce(new Error('throttled'))
const { data, rawText } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'f.pdf',
})
expect(rawText).toBeNull()
expect(data.totals.total).toBeNull()
})
it('forces accountSuggestion to null even if the model returns a value', async () => {
mockCreate.mockReturnValueOnce(
aiResponse({
...VALID_RESULT,
lineItems: [
{
...VALID_RESULT.lineItems[0],
accountSuggestion: '5410', // model attempting BAS suggestion
},
],
})
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'f.pdf',
})
expect(data.lineItems[0].accountSuggestion).toBeNull()
})
// ── Receipt-aware classification fields (2026-08) ──────────
it('parses the classification fields when the model returns them', async () => {
mockCreate.mockReturnValueOnce(
aiResponse({
...VALID_RESULT,
documentKind: 'receipt',
merchantCategory: 'restaurant',
legibility: 'good',
purchaseTime: '12:41',
payment: { method: 'card', cardLast4: '1234' },
totals: { ...VALID_RESULT.totals, roundingAmount: -0.25 },
})
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'kvitto.pdf',
})
expect(data.documentKind).toBe('receipt')
expect(data.merchantCategory).toBe('restaurant')
expect(data.legibility).toBe('good')
expect(data.purchaseTime).toBe('12:41')
expect(data.payment).toEqual({ method: 'card', cardLast4: '1234' })
expect(data.totals.roundingAmount).toBe(-0.25)
})
it('still parses cached outputs from before the classification fields existed', async () => {
// VALID_RESULT has none of the new fields: the whole document must
// validate, not fall back to the empty result.
mockCreate.mockReturnValueOnce(aiResponse(VALID_RESULT))
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'old.pdf',
})
expect(data.supplier.name).toBe('Anthropic, PBC')
expect(data.documentKind).toBeUndefined()
})
it('degrades hallucinated classification values to null instead of failing the parse', async () => {
mockCreate.mockReturnValueOnce(
aiResponse({
...VALID_RESULT,
documentKind: 'parking_ticket',
merchantCategory: 'nightclub',
legibility: 'excellent',
purchaseTime: '25:99',
payment: { method: 'bitcoin', cardLast4: 'abcd' },
totals: { ...VALID_RESULT.totals, roundingAmount: 'noll' },
})
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'kvitto.pdf',
})
// Amounts survived: the junk classification did not sink the document.
expect(data.totals.total).toBe(6.25)
expect(data.documentKind).toBeNull()
expect(data.merchantCategory).toBeNull()
expect(data.legibility).toBeNull()
expect(data.purchaseTime).toBeNull()
expect(data.payment).toEqual({ method: null, cardLast4: null })
expect(data.totals.roundingAmount).toBeNull()
})
// ── Image normalization (HEIC transcode + oversized downscale) ──
it('transcodes HEIC to JPEG and extracts when sharp can decode it', async () => {
const converted = Buffer.from('converted-jpeg-bytes')
sharpMock.mockImplementationOnce(() => workingSharpChain(converted))
mockCreate.mockReturnValueOnce(aiResponse(VALID_RESULT))
const { data } = await extractInvoiceFields({
buffer: Buffer.from('heic-bytes'),
mimeType: 'image/heic',
fileName: 'photo.heic',
})
expect(mockCreate).toHaveBeenCalledOnce()
const content = mockCreate.mock.calls[0][0].messages[0].content
expect(content[0].source.media_type).toBe('image/jpeg')
expect(content[0].source.data).toBe(converted.toString('base64'))
expect(data.supplier.name).toBe('Anthropic, PBC')
})
it('downscales oversized JPEGs before sending to Bedrock', async () => {
const converted = Buffer.from('downscaled-jpeg')
sharpMock.mockImplementationOnce(() => workingSharpChain(converted))
mockCreate.mockReturnValueOnce(aiResponse(VALID_RESULT))
await extractInvoiceFields({
buffer: Buffer.alloc(5 * 1024 * 1024, 1),
mimeType: 'image/jpeg',
fileName: 'big-photo.jpg',
})
expect(sharpMock).toHaveBeenCalledOnce()
const content = mockCreate.mock.calls[0][0].messages[0].content
expect(content[0].source.data).toBe(converted.toString('base64'))
})
it('keeps the original buffer when downscaling an oversized image fails', async () => {
// Default sharpMock throws: the original 5 MB buffer is still attempted.
mockCreate.mockReturnValueOnce(aiResponse(VALID_RESULT))
await extractInvoiceFields({
buffer: Buffer.alloc(5 * 1024 * 1024, 1),
mimeType: 'image/jpeg',
fileName: 'big-photo.jpg',
})
expect(mockCreate).toHaveBeenCalledOnce()
const content = mockCreate.mock.calls[0][0].messages[0].content
expect(content[0].source.media_type).toBe('image/jpeg')
})
// ── Own-company-as-supplier guard (2026-08) ──────────
it('strips the supplier when the model extracted the receiving company itself', async () => {
// A bank agreement's Kunduppgifter block: the model read the customer
// (the user's own company) as the issuer.
mockCreate.mockReturnValueOnce(
aiResponse({
...VALID_RESULT,
documentKind: 'other',
supplier: {
name: 'Testbrand AB',
orgNumber: '5566778899',
vatNumber: null,
address: 'Provgatan 1, 111 11 Teststad',
bankgiro: null,
plusgiro: null,
},
})
)
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'affarsavtal.pdf',
ownCompany: { orgNumber: '556677-8899', name: 'Testbrand AB' },
})
expect(data.supplier).toEqual({
name: null,
orgNumber: null,
vatNumber: null,
address: null,
bankgiro: null,
plusgiro: null,
})
// Only the supplier block is affected.
expect(data.totals.total).toBe(6.25)
})
it('still strips the own company on the image-normalization path (photographed documents)', async () => {
// normalizeImageForExtraction rebuilds the input for HEIC/oversized
// photos; ownCompany must survive that rebuild or the guard is dead for
// exactly the phone-photo documents the fix targets.
sharpMock.mockImplementationOnce(() => workingSharpChain(Buffer.from('converted-jpeg')))
mockCreate.mockReturnValueOnce(
aiResponse({
...VALID_RESULT,
supplier: { ...VALID_RESULT.supplier, name: 'Testbrand AB', orgNumber: '5566778899' },
})
)
const { data } = await extractInvoiceFields({
buffer: Buffer.alloc(5 * 1024 * 1024, 1),
mimeType: 'image/jpeg',
fileName: 'photo-of-avtal.jpg',
ownCompany: { orgNumber: '556677-8899', name: 'Testbrand AB' },
})
expect(data.supplier.name).toBeNull()
expect(data.supplier.orgNumber).toBeNull()
})
it('leaves a genuine supplier untouched when ownCompany is passed', async () => {
mockCreate.mockReturnValueOnce(aiResponse(VALID_RESULT))
const { data } = await extractInvoiceFields({
buffer: Buffer.from('%PDF'),
mimeType: 'application/pdf',
fileName: 'invoice.pdf',
ownCompany: { orgNumber: '556677-8899', name: 'Testbrand AB' },
})
expect(data.supplier.name).toBe('Anthropic, PBC')
})
it('does not invoke sharp for normal-sized supported images', async () => {
mockCreate.mockReturnValueOnce(aiResponse(VALID_RESULT))
await extractInvoiceFields({
buffer: Buffer.from('JPEG'),
mimeType: 'image/jpeg',
fileName: 'photo.jpg',
})
expect(sharpMock).not.toHaveBeenCalled()
})
// Restore env vars so other test files aren't affected.
afterAll(() => {
if (ORIG_AWS_ACCESS_KEY_ID) process.env.AWS_ACCESS_KEY_ID = ORIG_AWS_ACCESS_KEY_ID
else delete process.env.AWS_ACCESS_KEY_ID
if (ORIG_AWS_SECRET_ACCESS_KEY) process.env.AWS_SECRET_ACCESS_KEY = ORIG_AWS_SECRET_ACCESS_KEY
else delete process.env.AWS_SECRET_ACCESS_KEY
})
})
describe('stripOwnCompanyAsSupplier', () => {
function withSupplier(supplier: Partial<ReturnType<typeof emptyResult>['supplier']>) {
const base = emptyResult()
return { ...base, supplier: { ...base.supplier, ...supplier } }
}
const strippedSupplier = {
name: null,
orgNumber: null,
vatNumber: null,
address: null,
bankgiro: null,
plusgiro: null,
}
const own = { orgNumber: '556677-8899', name: 'Testbrand AB' }
it('matches the org number across hyphen and 12-digit variants', () => {
for (const extracted of ['5566778899', '556677-8899', '165566778899', '16556677-8899']) {
const result = stripOwnCompanyAsSupplier(
withSupplier({ name: 'Något AB', orgNumber: extracted }),
own
)
expect(result.supplier, `orgNumber ${extracted}`).toEqual(strippedSupplier)
}
})
it('matches the derived Swedish VAT number (SE<orgnr>01)', () => {
// Both the full prefixed form and a bare digits form denote the same
// registration: digitsOf strips the SE prefix before comparing.
for (const vat of ['SE556677889901', '556677889901', 'SE 556677-8899 01']) {
const result = stripOwnCompanyAsSupplier(
withSupplier({ name: 'Något AB', vatNumber: vat }),
own
)
expect(result.supplier, `vatNumber ${vat}`).toEqual(strippedSupplier)
}
})
it('matches the exact company name case-insensitively', () => {
const result = stripOwnCompanyAsSupplier(withSupplier({ name: ' testbrand ab ' }), own)
expect(result.supplier).toEqual(strippedSupplier)
})
it('matches a personnummer-form own org number (enskild firma)', () => {
// companies.org_number for enskild firma is the owner's personnummer,
// often stored in 12-digit century form.
const result = stripOwnCompanyAsSupplier(
withSupplier({ name: 'Firma X', orgNumber: '550505-5566' }),
{ orgNumber: '195505055566', name: 'Firma X Enskild' }
)
expect(result.supplier).toEqual(strippedSupplier)
})
it('lets a provably different org number outvote a name coincidence', () => {
// A same-named but distinct entity (foreign registry, generic name) with
// its own org number on the document stays a valid supplier.
const supplier = {
name: 'Testbrand AB',
orgNumber: '5029032081',
vatNumber: null,
address: null,
bankgiro: null,
plusgiro: null,
}
expect(stripOwnCompanyAsSupplier(withSupplier(supplier), own).supplier).toEqual(supplier)
})
it('leaves a different supplier alone', () => {
const supplier = {
name: 'SEB',
orgNumber: '5029032081',
vatNumber: null,
address: null,
bankgiro: null,
plusgiro: null,
}
expect(stripOwnCompanyAsSupplier(withSupplier(supplier), own).supplier).toEqual(supplier)
})
it('never matches on an empty own identity (junk cannot match junk)', () => {
const result = stripOwnCompanyAsSupplier(
withSupplier({ name: 'Något AB', orgNumber: null }),
{ orgNumber: null, name: null }
)
expect(result.supplier.name).toBe('Något AB')
})
it('fetchOwnCompanyIdentity degrades to nulls on a reported query error (fail open, logged)', async () => {
const { fetchOwnCompanyIdentity } = await import(
'@/extensions/general/invoice-inbox/lib/extract-invoice-fields'
)
const supabase = {
from: () => ({
select: () => ({
eq: () => ({
maybeSingle: () =>
Promise.resolve({ data: null, error: new Error('permission denied') }),
}),
}),
}),
}
await expect(
fetchOwnCompanyIdentity(supabase as never, 'company-1')
).resolves.toEqual({ orgNumber: null, name: null })
})
it('is a no-op without ownCompany', () => {
const data = withSupplier({ name: 'Testbrand AB', orgNumber: '5566778899' })
expect(stripOwnCompanyAsSupplier(data, undefined)).toBe(data)
})
it('preserves every non-supplier field when stripping', () => {
const base = withSupplier({ name: 'Testbrand AB' })
const data = {
...base,
documentKind: 'other' as const,
totals: { ...base.totals, total: 2500 },
prominentAmounts: [{ amount: 2500, label: 'Engångspris' }],
}
const result = stripOwnCompanyAsSupplier(data, own)
expect(result.documentKind).toBe('other')
expect(result.totals.total).toBe(2500)
expect(result.prominentAmounts).toEqual([{ amount: 2500, label: 'Engångspris' }])
})
})