accounted/lib/parties/scb/__tests__/scb.test.ts

import { readFileSync } from 'node:fs'
import { join } from 'node:path'
import { describe, expect, it } from 'vitest'
import { createScbClient, identityLookupBody, nameQuery, nameSearchBody, SCB_SEARCH_CAP } from '../client'
import { isScbConfigured, scbConfigFromEnv } from '../config'
import { factsFromScbCompany, BOLAGSVERKET_WARNING_CODES } from '../map'
import { isLegalPersonOrgNumber, toPeOrgNr } from '../org-number'
import { ScbApiError, scbJson } from '../transport'

/** One Je row exactly as the live API returned it on 2026-09-03 (AB Volvo, public registry data). */
const volvo = JSON.parse(readFileSync(join(__dirname, 'fixtures', 'volvo-je.json'), 'utf8')) as Record<string, string>

describe('org numbers we send to SCB', () => {
  it('accepts legal persons (month slot 20 or more) and refuses personnummer-shaped numbers', () => {
    expect(isLegalPersonOrgNumber('556012-5790')).toBe(true)
    expect(isLegalPersonOrgNumber('5564300142')).toBe(true)
    expect(isLegalPersonOrgNumber('9696789012')).toBe(true)
    expect(isLegalPersonOrgNumber('19800101-1234')).toBe(false)
    expect(isLegalPersonOrgNumber('8001011234')).toBe(false)
    expect(isLegalPersonOrgNumber('')).toBe(false)
    expect(isLegalPersonOrgNumber(null)).toBe(false)
  })

  it('builds PeOrgNr with the 16 prefix', () => {
    expect(toPeOrgNr('556012-5790')).toBe('165560125790')
  })
})

describe('config', () => {
  it('is configured only when both the certificate and its password are set', () => {
    const env = (v: Record<string, string>) => v as unknown as NodeJS.ProcessEnv
    expect(isScbConfigured(env({}))).toBe(false)
    expect(isScbConfigured(env({ SCB_API_CERT_PFX_BASE64: 'AAAA' }))).toBe(false)
    expect(isScbConfigured(env({ SCB_API_CERT_PFX_BASE64: 'AAAA', SCB_API_CERT_PASSWORD: 'x' }))).toBe(true)
    const cfg = scbConfigFromEnv(env({ SCB_API_CERT_PFX_BASE64: Buffer.from('pfx').toString('base64'), SCB_API_CERT_PASSWORD: 'x', SCB_API_BASE_URL: 'https://example.test/base/' }))
    expect(cfg.baseUrl).toBe('https://example.test/base')
    expect(cfg.pfx.toString()).toBe('pfx')
    expect(() => scbConfigFromEnv(env({}))).toThrow(/SCB_API_CERT_PFX_BASE64/)
  })
})

describe('factsFromScbCompany on a live row', () => {
  it('maps the Volvo row with SCB codes and SCB text', () => {
    const facts = factsFromScbCompany(volvo)
    const by = Object.fromEntries(facts.map((f) => [f.field, f.value]))
    expect(by.legal_name).toBe('AKTIEBOLAGET VOLVO')
    expect(by.trade_name).toBeUndefined()
    expect(by.f_tax).toEqual({ code: '1', label: 'Är registrerad för F-skatt' })
    expect(by.vat_registration).toEqual({ code: '1', label: 'Är registrerad för moms' })
    expect(by.employer_registration).toEqual({ code: '1', label: 'Är registrerad som vanlig arbetsgivare' })
    expect(by.company_status).toEqual({ code: '1', label: 'Är verksam' })
    expect(by.legal_form).toEqual({ code: '49', label: 'Övriga aktiebolag' })
    expect(by.bolagsverket_status).toEqual({ code: '0', label: 'Normalläge', warning: false })
    expect(by.employees_band).toEqual({ code: '8', label: '200-499 anställda' })
    expect(by.registered_skv).toBeUndefined()
    expect(by.vat_number).toBe('SE556012579001')
    expect(by.industry).toEqual({ code: '70100', label: 'Verksamheter som utövas av huvudkontor' })
    expect(by.postal_address).toEqual({ street: null, co: null, postal_code: '405 08', city: 'GÖTEBORG' })
    expect(by.seat).toEqual({ municipality_code: '1480', county_code: '14', municipality: 'Göteborg', county: 'Västra Götaland' })
    expect(by.turnover_band).toEqual({ code: '10', label: '1 000 000 - 4 999 999 tkr', year: '2025' })
    expect(by.registered_at).toBe('1972-01-01')
    expect(by.active_since).toBe('1972-01-01')
    expect(by.active_until).toBeUndefined()
    expect(by.phone).toBe('031660000')
    expect(by.email).toBeUndefined()
    expect(by.workplaces).toBe(1)
  })

  it('flags a company in konkurs, falls back to our labels without SCB text, and tolerates an empty row', () => {
    const facts = factsFromScbCompany({ Företagsnamn: 'Gone AB', 'Bolagsstatus, kod': '20', 'Fskattstatus, kod': '9 ' })
    const by = Object.fromEntries(facts.map((f) => [f.field, f.value]))
    expect(by.legal_name).toBe('Gone AB')
    expect(by.bolagsverket_status).toEqual({ code: '20', label: 'Konkurs inledd', warning: true })
    expect(by.f_tax).toEqual({ code: '9', label: 'Avregistrerad för F-skatt' })
    expect(by.vat_number).toBeUndefined()
    expect(factsFromScbCompany({ OrgNr: '5560125790', 'Momsstatus, kod': '9' }).find((f) => f.field === 'vat_number')).toBeUndefined()
    expect(BOLAGSVERKET_WARNING_CODES.has('0')).toBe(false)
    expect(BOLAGSVERKET_WARNING_CODES.has('49')).toBe(false) // fusion pågår
    expect(BOLAGSVERKET_WARNING_CODES.has('41')).toBe(true) // upplöst genom fusion
    expect(factsFromScbCompany({})).toEqual([])
  })
})

describe('createScbClient', () => {
  const cfg = { baseUrl: 'https://scb.test', pfx: Buffer.from('x'), passphrase: 'p', timeoutMs: 1 }

  it('sends the identity filter the live API accepts', () => {
    expect(identityLookupBody('5560125790')).toEqual({
      Variabler: [{ Variabel: 'OrgNr (10 siffror)', Operator: 'ArLikaMed', Varde1: '5560125790', Varde2: '' }],
      Kategorier: [],
    })
  })

  it('refuses a sole trader before any call is made', async () => {
    const json = async () => {
      throw new Error('should not be called')
    }
    const client = createScbClient(cfg, { json: json as never })
    await expect(client.lookupByOrgNumber('8001011234')).rejects.toThrow(/juridiska personer/)
  })

  it('posts HamtaForetag and maps the returned row', async () => {
    const calls: Array<{ method: string; path: string; body: unknown }> = []
    const json = async (_c: unknown, method: string, path: string, body?: unknown) => {
      calls.push({ method, path, body })
      return [volvo]
    }
    const client = createScbClient(cfg, { json: json as never })
    const r = await client.lookupByOrgNumber('556012-5790')
    expect(calls[0]!.method).toBe('POST')
    expect(calls[0]!.path).toBe('/api/Je/HamtaForetag')
    expect(calls[0]!.body).toEqual(identityLookupBody('5560125790'))
    expect(r.found).toBe(true)
    expect(r.peOrgNr).toBe('165560125790')
    expect(r.facts.find((f) => f.field === 'legal_name')?.value).toBe('AKTIEBOLAGET VOLVO')
  })

  it('reports not found when the list is empty', async () => {
    const json = async () => []
    const client = createScbClient(cfg, { json: json as never })
    const r = await client.lookupByOrgNumber('5564300142')
    expect(r.found).toBe(false)
    expect(r.facts).toEqual([])
  })
})

describe('name search', () => {
  it('strips AP prefixes, numbers and legal forms from the query', () => {
    expect(nameQuery('Levfakt Telia Sverige AB (17)')).toBe('Telia Sverige')
    expect(nameQuery('Leverantörsfaktura från 18 Loopia')).toBe('Loopia')
    expect(nameQuery('Adobe Systems Software')).toBe('Adobe Systems Software')
    expect(nameQuery("O'Learys Sundsvall AB")).toBe('OLearys Sundsvall')
    // Foreign legal forms stay: they are part of the registered name and dropping them floods.
    expect(nameQuery('Schmidt GmbH')).toBe('Schmidt GmbH')
    expect(nameQuery('Google Cloud EMEA Limited')).toBe('Google Cloud EMEA Limited')
    expect(nameSearchBody('Telia', 'starts_with').Variabler[0]).toEqual({ Variabel: 'Namn', Operator: 'BorjarPa', Varde1: 'Telia', Varde2: '' })
    expect(nameSearchBody('Telia', 'contains').Variabler[0]!.Operator).toBe('Innehaller')
  })

  const cfg = { baseUrl: 'https://scb.test', pfx: Buffer.from('x'), passphrase: 'p', timeoutMs: 1 }
  const row = (org: string, name: string, statusCode = '1', legalForm = '49', city = 'STOCKHOLM') => ({
    OrgNr: org,
    Företagsnamn: name,
    PostOrt: city,
    Bransch_1: 'Utgivning av annan programvara',
    'Företagsstatus, kod': statusCode,
    Företagsstatus: statusCode === '1' ? 'Är verksam' : 'Är ej längre verksam',
    'Juridisk form, kod': legalForm,
    'Juridisk form': 'Övriga aktiebolag',
  })

  it('counts first, prefers a prefix match, sorts active companies first and drops natural persons', async () => {
    const calls: string[] = []
    const json = async (_c: unknown, _m: string, path: string, body: { Variabler: Array<{ Operator: string }> }) => {
      calls.push(`${path}:${body.Variabler[0]!.Operator}`)
      if (path.endsWith('RaknaForetag')) return 3
      return [row('5020594593', 'ADOBE SYSTEMS SOFTWARE IRELAND LTD', '9'), row('5564082161', 'Adobe Systems Nordic Aktiebolag'), row('8001011234', 'ADOBE, ANNA', '1', '10')]
    }
    const client = createScbClient(cfg, { json: json as never })
    const r = await client.searchByName('Levfakt Adobe Systems (2)')
    expect(calls).toEqual(['/api/Je/RaknaForetag:BorjarPa', '/api/Je/HamtaForetag:BorjarPa'])
    expect(r.mode).toBe('starts_with')
    expect(r.total).toBe(2)
    expect(r.candidates.map((c) => [c.name, c.active])).toEqual([
      ['Adobe Systems Nordic Aktiebolag', true],
      ['ADOBE SYSTEMS SOFTWARE IRELAND LTD', false],
    ])
  })

  it('falls back to a contains match when the prefix finds nothing, and refuses to pull a flood', async () => {
    const calls: string[] = []
    const json = async (_c: unknown, _m: string, path: string, body: { Variabler: Array<{ Operator: string; Varde1: string }> }) => {
      calls.push(`${path}:${body.Variabler[0]!.Operator}`)
      if (path.endsWith('RaknaForetag')) return body.Variabler[0]!.Operator === 'BorjarPa' ? 0 : 593
      throw new Error('should not fetch rows for a flood')
    }
    const client = createScbClient(cfg, { json: json as never })
    const r = await client.searchByName('UBER')
    expect(calls).toEqual(['/api/Je/RaknaForetag:BorjarPa', '/api/Je/RaknaForetag:Innehaller'])
    expect(r).toMatchObject({ mode: 'contains', total: 593, truncated: true, candidates: [] })
    expect(SCB_SEARCH_CAP).toBe(25)
  })

  it('offers sole traders only when asked, and never estates', async () => {
    const json = async (_c: unknown, _m: string, path: string) => {
      if (path.endsWith('RaknaForetag')) return 3
      return [row('5564082161', 'Adobe Systems Nordic Aktiebolag'), row('8001011234', 'ADOBE, ANNA', '1', '10'), row('8001011235', 'ADOBE, ANNA DÖDSBO', '1', '91')]
    }
    const client = createScbClient(cfg, { json: json as never })
    const parties = await client.searchByName('Adobe')
    expect(parties.candidates.map((c) => c.orgNumber)).toEqual(['5564082161'])
    const onboarding = await client.searchByName('Adobe', { includeSoleTraders: true })
    expect(onboarding.candidates.map((c) => [c.orgNumber, c.legalFormCode])).toEqual([
      ['5564082161', '49'],
      ['8001011234', '10'],
    ])
    expect(onboarding.total).toBe(2)
  })

  it('does not call SCB for a query shorter than two characters', async () => {
    const json = async () => {
      throw new Error('should not be called')
    }
    const r = await createScbClient(cfg, { json: json as never }).searchByName('Levfakt 17')
    expect(r.candidates).toEqual([])
  })
})

describe('scbJson', () => {
  const cfg = { baseUrl: 'https://scb.test', pfx: Buffer.from('x'), passphrase: 'p', timeoutMs: 1 }

  it('retries once on a dropped connection, then succeeds', async () => {
    let n = 0
    const request = async () => {
      n += 1
      if (n === 1) throw Object.assign(new Error('read ECONNRESET'), { code: 'ECONNRESET' })
      return { status: 200, body: '3' }
    }
    await expect(scbJson(cfg, 'POST', '/api/Je/RaknaForetag', {}, { request: request as never, delayMs: 0 })).resolves.toBe(3)
    expect(n).toBe(2)
  })

  it('does not retry a non-transient error or a bad status', async () => {
    let n = 0
    const boom = async () => {
      n += 1
      throw new Error('certificate unknown')
    }
    await expect(scbJson(cfg, 'GET', '/x', undefined, { request: boom as never, delayMs: 0 })).rejects.toThrow(/certificate/)
    expect(n).toBe(1)
    const bad = async () => ({ status: 400, body: '{"Message":"Ogiltigt"}' })
    await expect(scbJson(cfg, 'GET', '/x', undefined, { request: bad as never })).rejects.toBeInstanceOf(ScbApiError)
  })
})