<?php

declare(strict_types=1);

use App\Models\TenantConfigurationResourceType;
use App\Services\TenantConfiguration\ResourceTypeRegistry;
use App\Support\TenantConfiguration\ClaimState;
use App\Support\TenantConfiguration\RestoreTier;

it('Spec421 keeps Conditional Access typed support separate from restore or certification claims', function (): void {
    app(ResourceTypeRegistry::class)->syncDefaults();

    $resourceType = TenantConfigurationResourceType::query()
        ->where('canonical_type', 'conditionalAccessPolicy')
        ->firstOrFail();

    expect($resourceType->restore_tier)->toBe(RestoreTier::NotRestorable)
        ->and($resourceType->allows_certified_claims)->toBeFalse()
        ->and($resourceType->default_claim_state)->toBe(ClaimState::InternalOnly)
        ->and($resourceType->metadata['customer_claims_allowed'] ?? null)->toBeFalse();
});