<?php

declare(strict_types=1);

use App\Filament\Resources\EntraGroupResource;
use App\Filament\Resources\PolicyVersionResource;
use App\Models\EntraGroup;
use App\Models\Policy;
use App\Models\PolicyVersion;
use App\Support\Workspaces\WorkspaceContext;
use Filament\Facades\Filament;

it('renders canonical group links for resolved assignment targets', function (): void {
    [$user, $tenant] = createUserWithTenant(role: 'owner');
    $this->actingAs($user);
    Filament::setCurrentPanel('admin');
    Filament::setTenant($tenant, true);
    Filament::bootCurrentPanel();

    $groupId = '33333333-4444-5555-6666-777777777777';

    $group = EntraGroup::factory()->for($tenant)->create([
        'entra_id' => strtolower($groupId),
        'display_name' => 'Scoped group',
    ]);

    $policy = Policy::factory()->for($tenant)->create();

    $version = PolicyVersion::factory()->for($tenant)->create([
        'policy_id' => (int) $policy->getKey(),
        'assignments' => [
            [
                'intent' => 'apply',
                'target' => [
                    '@odata.type' => '#microsoft.graph.groupAssignmentTarget',
                    'groupId' => $groupId,
                ],
            ],
        ],
    ]);

    $groupUrl = EntraGroupResource::getUrl('view', ['record' => $group], panel: 'admin', tenant: $tenant);

    expect($groupUrl)
        ->not->toContain('/admin/tenants')
        ->not->toContain('/admin/t/');

    $this->withSession([WorkspaceContext::SESSION_KEY => (int) $tenant->workspace_id])
        ->get(PolicyVersionResource::getUrl('view', ['record' => $version], panel: 'admin', tenant: $tenant))
        ->assertOk()
        ->assertSee($groupUrl, false)
        ->assertSee('Scoped group');
});