coverageFor('roleScopeTag'); $canonicalOnly = $resolver->coverageFor( 'roleScopeTag', ResourceIdentity::canonicalBuiltin('fake-provider', 'scope-tag', 'default'), ); $unsupported = $resolver->coverageFor('intuneRoleAssignment'); expect($inventoryOnly['coverage'])->toBe('inventory_only') ->and($inventoryOnly['reason_code'])->toBe('foundation_not_policy_backed') ->and($canonicalOnly['coverage'])->toBe('canonical_only') ->and($canonicalOnly['identity_kind'])->toBe(ResourceIdentity::CanonicalBuiltin) ->and($unsupported['coverage'])->toBe('unsupported') ->and($unsupported['reason_code'])->toBe('unsupported_subject'); });