<?php

declare(strict_types=1);

use App\Services\TenantConfiguration\ClaimGuard;
use App\Services\TenantConfiguration\EntraCertifiedComparePackEvaluator;
use App\Support\TenantConfiguration\ClaimState;

it('Spec425 treats exact pack certification claims as internal operator only', function (): void {
    expect(app(ClaimGuard::class)->evaluateCertifiedComparePackStatement(
        EntraCertifiedComparePackEvaluator::CLAIM_LABEL,
        packPassed: true,
        internalOperatorOnly: true,
    ))->toBe(ClaimState::InternalOnly);
});

it('Spec425 blocks forbidden customer broad restore and Microsoft 365 claims in feature context', function (string $claim): void {
    expect(app(ClaimGuard::class)->evaluateCertifiedComparePackStatement(
        claim: $claim,
        packPassed: true,
        internalOperatorOnly: true,
    ))->toBe(ClaimState::ClaimBlocked);
})->with([
    '100% Entra coverage',
    'Entra restore-ready',
    'Certified Microsoft 365 coverage',
    'Customer-ready Entra proof',
]);