<?php

declare(strict_types=1);

use App\Filament\Pages\EnvironmentDashboard;
use App\Filament\Widgets\Dashboard\DashboardKpis;
use App\Filament\Widgets\Dashboard\RecoveryReadiness;
use App\Models\BackupItem;
use App\Models\BackupSet;
use App\Models\Finding;
use App\Models\OperationRun;
use App\Models\User;
use Filament\Facades\Filament;
use Illuminate\Support\Facades\Bus;
use Livewire\Livewire;

it('renders the tenant dashboard DB-only (no outbound HTTP, no background work)', function (): void {
    [$user, $tenant] = createUserWithTenant(role: 'owner');

    Finding::factory()->create([
        'managed_environment_id' => $tenant->getKey(),
        'finding_type' => Finding::FINDING_TYPE_DRIFT,
        'severity' => Finding::SEVERITY_HIGH,
        'status' => Finding::STATUS_NEW,
    ]);

    OperationRun::factory()->create([
        'managed_environment_id' => $tenant->getKey(),
        'type' => 'inventory_sync',
        'status' => 'queued',
        'outcome' => 'pending',
        'initiator_name' => 'System',
    ]);

    $backupSet = BackupSet::factory()->create([
        'managed_environment_id' => (int) $tenant->getKey(),
        'name' => 'DB-only healthy backup',
        'item_count' => 1,
        'completed_at' => now()->subMinutes(30),
    ]);

    BackupItem::factory()->create([
        'managed_environment_id' => (int) $tenant->getKey(),
        'backup_set_id' => (int) $backupSet->getKey(),
        'payload' => ['id' => 'healthy-policy'],
        'metadata' => [],
        'assignments' => [],
    ]);

    $this->actingAs($user);

    Bus::fake();
    Filament::setTenant($tenant, true);

    assertNoOutboundHttp(function () use ($tenant): void {
        $this->get(EnvironmentDashboard::getUrl(tenant: $tenant))
            ->assertOk()
            ->assertSee('/admin/choose-workspace', false)
            ->assertDontSee('data-testid="tenant-dashboard-operations-attention-summary"', false)
            ->assertDontSee('Review operation')
            ->assertDontSee('Open operations hub')
            ->assertDontSee('Recent operations');

        Livewire::test(RecoveryReadiness::class)
            ->assertSee('Backup posture')
            ->assertSee('Healthy');

        Livewire::test(DashboardKpis::class)
            ->assertSee('Operations needing attention')
            ->assertSee('No operations need attention');
    });

    Bus::assertNothingDispatched();
});

it('keeps tenant dashboard access deny-as-not-found for non-members', function (): void {
    [, $tenant] = createUserWithTenant(role: 'owner');
    $outsider = User::factory()->create();

    $this->actingAs($outsider)
        ->get(EnvironmentDashboard::getUrl(tenant: $tenant))
        ->assertNotFound();
});
