Suriyakumarvijayanayagam
dad04e8cda
Five components that ship as one product:
- behavision/ the recognition engine. RTSP ingest, YuNet detection, IoU
tracking, ArcFace embeddings, a FAISS/SQLite gallery, and a
FastAPI dashboard. Identity is decided once per TRACK from an
average of at least three embeddings, never per frame.
- agent/ the Go edge agent: supervises the engine, holds a durable
spool, and drains it to MQTT. Nothing is acked before the
broker confirms.
- desktop/ the shop PC application (Wails + React + tray).
- server/ the cloud API, MQTT consumer, reports and assistant.
- web/ platform.loyaly.ai, the head-office app, embedded in the
server binary.
The gallery stores 512-float embeddings and timestamps - no images unless
`app.store_faces` is switched on. Those embeddings are biometric personal
data under GDPR and India's DPDP: template inversion reconstructs a
recognisable face from an ArcFace vector, so data/behavision.db is treated
as a biometric database and DELETE /api/visitors/{id} is a real erasure.
CLAUDE.md carries the reasoning behind every non-obvious decision here,
including the ones that were measured and the ones that were wrong first.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HViLj9gYNRtSr7YVZmW5sn
91 lines
3.0 KiB
Go
91 lines
3.0 KiB
Go
package api
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net/http"
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
func seedSite(fs *fakeStore) {
|
|
fs.sites = []SiteHealth{{SiteID: siteA, Slug: "chennai", Name: "TeNext Chennai"}}
|
|
}
|
|
|
|
func TestAManagerCanGetACodeForTheirOwnShop(t *testing.T) {
|
|
s, fs := newServer(t)
|
|
seedUser(fs)
|
|
seedSite(fs)
|
|
sess := login(t, s, "manager@acme.com", "correct horse battery")
|
|
|
|
rec := do(t, s, "POST", "/api/sites/"+siteA+"/enrolment-code", sess.Token,
|
|
map[string]any{"label": "counter PC"})
|
|
if rec.Code != http.StatusCreated {
|
|
t.Fatalf("got %d: %s", rec.Code, rec.Body.String())
|
|
}
|
|
var out EnrolmentCode
|
|
if err := json.Unmarshal(rec.Body.Bytes(), &out); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if out.Code == "" || out.ExpiresAt.IsZero() {
|
|
t.Fatalf("no usable code came back: %s", rec.Body.String())
|
|
}
|
|
// Grouped for reading aloud - the installer is on the phone.
|
|
if !strings.Contains(out.Code, "-") {
|
|
t.Errorf("code is not grouped for dictation: %q", out.Code)
|
|
}
|
|
if out.SiteName != "TeNext Chennai" {
|
|
t.Errorf("the shop is not named back to the operator: %q", out.SiteName)
|
|
}
|
|
}
|
|
|
|
// Staff must not be able to mint one. The code is redeemed for the site's
|
|
// broker password, so it is a credential and not a convenience - and an
|
|
// instruction in a prompt or a hidden button is not a permission check.
|
|
func TestStaffCannotMintAnEnrolmentCode(t *testing.T) {
|
|
s, fs := newServer(t)
|
|
seedSite(fs)
|
|
fs.addUser("staff@acme.com", "correct horse battery", UserRecord{
|
|
ID: "u2", ClientID: "client-acme", Role: "staff", Active: true,
|
|
})
|
|
sess := login(t, s, "staff@acme.com", "correct horse battery")
|
|
|
|
rec := do(t, s, "POST", "/api/sites/"+siteA+"/enrolment-code", sess.Token, nil)
|
|
if rec.Code != http.StatusForbidden {
|
|
t.Fatalf("staff minted a credential: %d %s", rec.Code, rec.Body.String())
|
|
}
|
|
}
|
|
|
|
// A shop belonging to somebody else is NOT FOUND, not forbidden: a tenant has
|
|
// no business learning that another tenant's shop exists.
|
|
func TestAnotherTenantsShopIsNotFound(t *testing.T) {
|
|
s, fs := newServer(t)
|
|
seedUser(fs)
|
|
seedSite(fs)
|
|
sess := login(t, s, "manager@acme.com", "correct horse battery")
|
|
|
|
other := "bbbbbbbb-1111-2222-3333-444444444444"
|
|
rec := do(t, s, "POST", "/api/sites/"+other+"/enrolment-code", sess.Token, nil)
|
|
if rec.Code != http.StatusNotFound {
|
|
t.Fatalf("got %d, want 404: %s", rec.Code, rec.Body.String())
|
|
}
|
|
}
|
|
|
|
// A code is read aloud, photographed and pasted into chat on its way to a
|
|
// shop. A caller asking for a year of validity gets a month.
|
|
func TestCodeLifetimeIsCapped(t *testing.T) {
|
|
s, fs := newServer(t)
|
|
seedUser(fs)
|
|
seedSite(fs)
|
|
sess := login(t, s, "manager@acme.com", "correct horse battery")
|
|
|
|
do(t, s, "POST", "/api/sites/"+siteA+"/enrolment-code", sess.Token,
|
|
map[string]any{"days": 3650})
|
|
if got := fs.lastCodeTTL.Hours(); got > 30*24 {
|
|
t.Fatalf("ttl was %v, want at most 30 days", fs.lastCodeTTL)
|
|
}
|
|
// And a code records who minted it - it hands out a broker password.
|
|
if fs.lastCodeActor == "" {
|
|
t.Error("the code was not attributed to the person who asked for it")
|
|
}
|
|
}
|