<?php

declare(strict_types=1);

it('blocks Microsoft-specific default labels and audit prose on shared provider connection surfaces', function (): void {
    $root = repo_path('apps/platform');
    $paths = [
        'app/Filament/Resources/ProviderConnectionResource.php',
        'app/Filament/Resources/ProviderConnectionResource/Pages/CreateProviderConnection.php',
        'app/Filament/Resources/ProviderConnectionResource/Pages/EditProviderConnection.php',
        'app/Filament/Resources/ProviderConnectionResource/Pages/ListProviderConnections.php',
        'app/Filament/Pages/Workspaces/ManagedTenantOnboardingWizard.php',
        'app/Services/Providers/ProviderConnectionMutationService.php',
        'app/Services/Verification/StartVerification.php',
        'app/Jobs/ProviderConnectionHealthCheckJob.php',
    ];

    $forbiddenFragments = [
        'Entra tenant ID',
        'Entra Tenant ID',
        'Directory (tenant) ID',
        'No Microsoft connections found',
        'Graph API calls',
        "'entra_tenant_id' => \$record->entra_tenant_id",
        "'entra_tenant_id' => (string) \$connection->entra_tenant_id",
    ];

    foreach ($paths as $path) {
        $contents = (string) file_get_contents($root.'/'.$path);

        foreach ($forbiddenFragments as $fragment) {
            expect($contents)
                ->not->toContain($fragment, sprintf('%s still contains shared-surface provider-specific default prose [%s].', $path, $fragment));
        }
    }
});