<?php

declare(strict_types=1);

use App\Models\Tenant;
use App\Models\User;
use Illuminate\Foundation\Testing\RefreshDatabase;

uses(RefreshDatabase::class);

it('denies non-member access as not found (404)', function () {
    $tenant = Tenant::factory()->create(['status' => 'active']);
    $onboardingUrl = "/admin/t/{$tenant->external_id}/onboarding";

    $nonMember = User::factory()->create();
    $this->actingAs($nonMember);

    $this->get($onboardingUrl)
        ->assertNotFound();
});