<?php

declare(strict_types=1);

use App\Models\ProviderConnection;
use App\Models\ManagedEnvironment;
use App\Models\User;
use App\Support\Workspaces\WorkspaceContext;

it('returns 404 without location header for retired tenant-scoped provider connection routes', function (): void {
    [$user, $tenant] = createUserWithTenant(role: 'owner');

    $connection = ProviderConnection::factory()->create([
        'workspace_id' => (int) $tenant->workspace_id,
        'managed_environment_id' => (int) $tenant->getKey(),
        'provider' => 'microsoft',
    ]);

    $this->actingAs($user)
        ->get('/admin/tenants/'.$tenant->external_id.'/provider-connections')
        ->assertNotFound()
        ->assertHeaderMissing('Location');

    $this->actingAs($user)
        ->get('/admin/tenants/'.$tenant->external_id.'/provider-connections/create')
        ->assertNotFound()
        ->assertHeaderMissing('Location');

    $this->actingAs($user)
        ->get('/admin/tenants/'.$tenant->external_id.'/provider-connections/'.$connection->getKey().'/edit')
        ->assertNotFound()
        ->assertHeaderMissing('Location');
});

it('returns 404 without location header for non-workspace-members on retired legacy routes', function (): void {
    $user = User::factory()->create();
    $tenant = ManagedEnvironment::factory()->create();

    $this->actingAs($user)
        ->get('/admin/tenants/'.$tenant->external_id.'/provider-connections')
        ->assertNotFound()
        ->assertHeaderMissing('Location');
});

it('returns 404 without location header for non-tenant members on legacy routes', function (): void {
    $tenantA = ManagedEnvironment::factory()->create();
    $tenantB = ManagedEnvironment::factory()->create([
        'workspace_id' => (int) $tenantA->workspace_id,
    ]);

    [$user] = createUserWithTenant(tenant: $tenantA, role: 'owner');

    $this->actingAs($user)
        ->withSession([WorkspaceContext::SESSION_KEY => (int) $tenantA->workspace_id])
        ->get('/admin/tenants/'.$tenantB->external_id.'/provider-connections')
        ->assertNotFound()
        ->assertHeaderMissing('Location');
});

it('keeps /admin/t/{tenant}/provider-connections as not found and not redirected', function (): void {
    [$user, $tenant] = createUserWithTenant(role: 'owner');

    $this->actingAs($user)
        ->get('/admin/t/'.$tenant->external_id.'/provider-connections')
        ->assertNotFound()
        ->assertHeaderMissing('Location');
});
