Janady13/missionmatch / internal/modules/ai/graph_loop_test.go

1package ai 2 3import ( 4 "strings" 5 "testing" 6) 7 8// TestRequirementSegmentSQLPassesTheReadOnlyGuard is the load bearing security assertion for G6: the segment 9// resolver SQL passes GuardReadOnlyQuery against the real ReadAllowlist with no error. It must be a single 10// read over allowlisted tables (requirements, opportunities, opportunity_records) with no set returning 11// function in a FROM or JOIN position, no mutating keyword, and no eeo marker, the same gate ValidateRegistry 12// runs at boot and ExecuteIntent would re run. It is the SQL the composition runs to resolve the segment 13// under RLS and the registered SQL of the composed intent. 14func TestRequirementSegmentSQLPassesTheReadOnlyGuard(t *testing.T) { 15 if err := GuardReadOnlyQuery(requirementSegmentSQL, ReadAllowlist); err != nil { 16 t.Fatalf("the requirement segment resolver SQL must pass the read only guard: %v", err) 17 } 18} 19 20// TestValidateRegistryWithCaptureIntent proves the whole closed Registry, now carrying the G6 composed 21// capture intent alongside the TAG, G3, G1, G9, G7, G2, G5, and G4 intents, validates at boot. ValidateRegistry 22// runs GuardReadOnlyQuery on every intent's SQL, so the composed intent's registered SQL (the segment 23// resolver read) must itself pass the guard for the whole Registry to validate. This is the assertion the api 24// boot runs. 25func TestValidateRegistryWithCaptureIntent(t *testing.T) { 26 if err := ValidateRegistry(); err != nil { 27 t.Fatalf("ValidateRegistry must pass with the G6 capture intent registered: %v", err) 28 } 29} 30 31// TestCaptureIntentIsRegistered proves capture_picture_for_requirement is in the closed Registry binding 32// exactly one ParamUUID requirement_id, so ValidateRegistry asserts it at boot and the bench fork can bind its 33// id. A missing intent or a wrong param shape means the registration regressed. 34func TestCaptureIntentIsRegistered(t *testing.T) { 35 it, ok := IntentByName(IntentCapturePictureForRequirement) 36 if !ok { 37 t.Fatalf("intent %q must be registered in the closed Registry", IntentCapturePictureForRequirement) 38 } 39 if len(it.Params) != 1 { 40 t.Fatalf("the capture intent must bind exactly one param, got %d", len(it.Params)) 41 } 42 if it.Params[0].Kind != ParamUUID { 43 t.Errorf("the capture intent must bind a ParamUUID requirement id, got %q", it.Params[0].Kind) 44 } 45 if it.SQL != requirementSegmentSQL { 46 t.Error("the capture intent's registered SQL must be the segment resolver read, the only guarded read it carries") 47 } 48} 49 50// TestCaptureIntentIsGraphAndBenchIntent proves the composed capture intent is BOTH a graph intent (so the 51// Answer dispatcher routes it to AnswerGraph) AND a bench intent (so it is auth gated, rejected on the raw 52// ExecuteIntent path, and forked to its composition). A regression dropping it from either set would let it 53// route to TAG or run unsuppressed. 54func TestCaptureIntentIsGraphAndBenchIntent(t *testing.T) { 55 if !IsGraphIntent(IntentCapturePictureForRequirement) { 56 t.Error("the capture intent must be a graph intent so Answer routes it to AnswerGraph") 57 } 58 if !IsBenchIntent(IntentCapturePictureForRequirement) { 59 t.Error("the capture intent reads the bench and must be a bench intent so it is auth gated and raw path rejected") 60 } 61} 62 63// TestCaptureClassifierBindsOnlyOnExplicitRequirementUUID pins the conservative NL posture: a capture picture 64// question routes to the composed intent ONLY when it carries an explicit canonical requirement UUID, and a 65// capture phrasing with no UUID falls back to RAG (a nil route) rather than guessing a requirement, the same 66// posture as the bench gap and readiness routes. 67func TestCaptureClassifierBindsOnlyOnExplicitRequirementUUID(t *testing.T) { 68 reqID := "11111111-2222-3333-4444-555555555555" 69 gr := graphClassify(`give me the capture picture for requirement ` + reqID) 70 if gr == nil { 71 t.Fatal("a capture picture question carrying an explicit requirement UUID must route to the composed intent") 72 } 73 if gr.intent != IntentCapturePictureForRequirement { 74 t.Errorf("the capture question must route to %q, got %q", IntentCapturePictureForRequirement, gr.intent) 75 } 76 if len(gr.args) != 1 || gr.args[0] != reqID { 77 t.Errorf("the capture route must bind the explicit requirement id, got %v", gr.args) 78 } 79 // A capture phrasing with NO explicit requirement id falls back to RAG (nil route), never a guessed id. 80 if got := graphClassify("can we staff this and what is the market"); got != nil { 81 t.Errorf("a capture question with no explicit requirement id must fall back to RAG, got %+v", got) 82 } 83} 84 85// TestCaptureNarrativeNamesThePriceFloorAndNeverADash pins two surfaced invariants of the deterministic 86// narrative: it always states the price to win honest floor verbatim (no fabricated rate), and it carries no 87// dash in surfaced prose (the platform writing rule). The bench legs are empty here, so the narrative is the 88// pure structural and floor text with no person data. 89func TestCaptureNarrativeNamesThePriceFloorAndNeverADash(t *testing.T) { 90 seg := RequirementSegment{Agency: "", NAICS: "", RequiredLevel: "secret", Found: true} 91 market := []string{"the market segment could not be bound: this requirement names no customer agency and links no opportunity."} 92 got := captureNarrative(seg, nil, nil, market) 93 if !strings.Contains(got, capturePriceToWinFloor) { 94 t.Errorf("the capture narrative must state the price to win honest floor, got %q", got) 95 } 96 if strings.Contains(got, "-") { 97 t.Errorf("the capture narrative must carry no dash in surfaced prose, got %q", got) 98 } 99} 100 101// TestSegmentBindRules pins the honest floor discipline: the agency keyed leg runs only with a non empty 102// agency, the (agency, naics) keyed leg only with both, and SegmentBound (whether any market arm can run) is 103// the non empty agency floor. 104func TestSegmentBindRules(t *testing.T) { 105 none := RequirementSegment{Found: true} 106 if none.AgencyBound() || none.NAICSBound() || none.SegmentBound() { 107 t.Error("an empty segment must bind no market arm") 108 } 109 agencyOnly := RequirementSegment{Agency: "DEPT OF THE AIR FORCE", Found: true} 110 if !agencyOnly.AgencyBound() || agencyOnly.NAICSBound() || !agencyOnly.SegmentBound() { 111 t.Error("an agency only segment must bind the agency arm but not the naics arm") 112 } 113 full := RequirementSegment{Agency: "DEPT OF THE AIR FORCE", NAICS: "541512", Found: true} 114 if !full.AgencyBound() || !full.NAICSBound() || !full.SegmentBound() { 115 t.Error("a full segment must bind both market arms") 116 } 117} 118