## Summary - add the tenant review domain with tenant-scoped review library, canonical workspace review register, lifecycle actions, and review-derived executive pack export - extend review pack, operations, audit, capability, and badge infrastructure to support review composition, publication, export, and recurring review cycles - add product backlog and audit documentation updates for tenant review and semantic-clarity follow-up candidates ## Testing - `vendor/bin/sail bin pint --dirty --format agent` - `vendor/bin/sail artisan test --compact --filter="TenantReview"` - `CI=1 vendor/bin/sail artisan test --compact` ## Notes - Livewire v4+ compliant via existing Filament v5 stack - panel providers remain in `bootstrap/providers.php` via existing Laravel 12 structure; no provider registration moved to `bootstrap/app.php` - `TenantReviewResource` is not globally searchable, so the Filament edit/view global-search constraint does not apply - destructive review actions use action handlers with confirmation and policy enforcement Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #185
91 lines
3.3 KiB
PHP
91 lines
3.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Jobs\GenerateReviewPackJob;
|
|
use App\Models\AuditLog;
|
|
use App\Models\EvidenceSnapshot;
|
|
use App\Services\ReviewPackService;
|
|
use App\Services\TenantReviews\TenantReviewLifecycleService;
|
|
use App\Services\TenantReviews\TenantReviewService;
|
|
use App\Support\Audit\AuditActionId;
|
|
use Illuminate\Support\Facades\Storage;
|
|
|
|
beforeEach(function (): void {
|
|
Storage::fake('exports');
|
|
});
|
|
|
|
it('records tenant-review audit history across create, refresh, publish, export, successor, and archive flows', function (): void {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$reviewService = app(TenantReviewService::class);
|
|
$lifecycle = app(TenantReviewLifecycleService::class);
|
|
|
|
$initialSnapshot = seedTenantReviewEvidence($tenant);
|
|
$review = $reviewService->create($tenant, $initialSnapshot, $user);
|
|
$review = $reviewService->compose($review);
|
|
|
|
EvidenceSnapshot::query()
|
|
->where('tenant_id', (int) $tenant->getKey())
|
|
->where('status', 'active')
|
|
->update([
|
|
'status' => 'expired',
|
|
'expires_at' => now(),
|
|
]);
|
|
|
|
$refreshSnapshot = seedTenantReviewEvidence(
|
|
tenant: $tenant,
|
|
findingCount: 6,
|
|
driftCount: 2,
|
|
operationRunCount: 2,
|
|
);
|
|
$review = $reviewService->refresh($review, $user, $refreshSnapshot);
|
|
$review = $reviewService->compose($review->fresh());
|
|
|
|
$published = $lifecycle->publish($review, $user);
|
|
|
|
EvidenceSnapshot::query()
|
|
->where('tenant_id', (int) $tenant->getKey())
|
|
->where('status', 'active')
|
|
->update([
|
|
'status' => 'expired',
|
|
'expires_at' => now(),
|
|
]);
|
|
|
|
$pack = app(ReviewPackService::class)->generateFromReview($published, $user, [
|
|
'include_pii' => true,
|
|
'include_operations' => true,
|
|
]);
|
|
|
|
$job = new GenerateReviewPackJob(
|
|
reviewPackId: (int) $pack->getKey(),
|
|
operationRunId: (int) $pack->operation_run_id,
|
|
);
|
|
app()->call([$job, 'handle']);
|
|
|
|
$nextReview = $lifecycle->createNextReview($published->fresh(), $user, seedTenantReviewEvidence(
|
|
tenant: $tenant,
|
|
findingCount: 7,
|
|
driftCount: 1,
|
|
operationRunCount: 3,
|
|
));
|
|
|
|
$lifecycle->archive($nextReview, $user);
|
|
|
|
expect(AuditLog::query()->where('action', AuditActionId::TenantReviewCreated->value)->exists())->toBeTrue()
|
|
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewRefreshed->value)->exists())->toBeTrue()
|
|
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewPublished->value)->exists())->toBeTrue()
|
|
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewExported->value)->exists())->toBeTrue()
|
|
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewSuccessorCreated->value)->exists())->toBeTrue()
|
|
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewArchived->value)->exists())->toBeTrue();
|
|
|
|
$exportAudit = AuditLog::query()
|
|
->where('action', AuditActionId::TenantReviewExported->value)
|
|
->latest('id')
|
|
->first();
|
|
|
|
expect($exportAudit)->not->toBeNull()
|
|
->and($exportAudit?->resource_type)->toBe('tenant_review')
|
|
->and(data_get($exportAudit?->metadata, 'review_pack_id'))->toBe((int) $pack->getKey());
|
|
});
|