<?php

use App\Models\Finding;
use App\Models\InventorySyncRun;
use App\Models\Policy;
use App\Models\PolicyVersion;
use App\Services\Drift\DriftFindingGenerator;

test('drift generation is deterministic for the same baseline/current', function () {
    [, $tenant] = createUserWithTenant(role: 'manager');

    $scopeKey = hash('sha256', 'scope-determinism');

    $baseline = InventorySyncRun::factory()->for($tenant)->create([
        'selection_hash' => $scopeKey,
        'selection_payload' => ['policy_types' => ['settingsCatalogPolicy']],
        'status' => InventorySyncRun::STATUS_SUCCESS,
        'finished_at' => now()->subDays(2),
    ]);

    $current = InventorySyncRun::factory()->for($tenant)->create([
        'selection_hash' => $scopeKey,
        'selection_payload' => ['policy_types' => ['settingsCatalogPolicy']],
        'status' => InventorySyncRun::STATUS_SUCCESS,
        'finished_at' => now()->subDay(),
    ]);

    $policy = Policy::factory()->for($tenant)->create([
        'policy_type' => 'settingsCatalogPolicy',
    ]);

    $baselineAssignments = [
        ['target' => ['@odata.type' => '#microsoft.graph.groupAssignmentTarget', 'groupId' => 'group-a']],
        ['target' => ['@odata.type' => '#microsoft.graph.groupAssignmentTarget', 'groupId' => 'group-b']],
    ];

    $currentAssignments = [
        ['target' => ['@odata.type' => '#microsoft.graph.groupAssignmentTarget', 'groupId' => 'group-c']],
    ];

    PolicyVersion::factory()->for($tenant)->for($policy)->create([
        'version_number' => 1,
        'policy_type' => $policy->policy_type,
        'captured_at' => $baseline->finished_at->copy()->subMinute(),
        'assignments' => $baselineAssignments,
    ]);

    PolicyVersion::factory()->for($tenant)->for($policy)->create([
        'version_number' => 2,
        'policy_type' => $policy->policy_type,
        'captured_at' => $current->finished_at->copy()->subMinute(),
        'assignments' => $currentAssignments,
    ]);

    $generator = app(DriftFindingGenerator::class);

    $created1 = $generator->generate($tenant, $baseline, $current, $scopeKey);
    $fingerprints1 = Finding::query()
        ->where('tenant_id', $tenant->getKey())
        ->pluck('fingerprint')
        ->sort()
        ->values()
        ->all();

    $created2 = $generator->generate($tenant, $baseline, $current, $scopeKey);
    $fingerprints2 = Finding::query()
        ->where('tenant_id', $tenant->getKey())
        ->pluck('fingerprint')
        ->sort()
        ->values()
        ->all();

    expect($created1)->toBeGreaterThan(0);
    expect($created2)->toBe(0);
    expect($fingerprints2)->toBe($fingerprints1);
});