135 lines
5.0 KiB
PHP
135 lines
5.0 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Jobs\BackfillFindingLifecycleJob;
|
|
use App\Models\Finding;
|
|
use Carbon\CarbonImmutable;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
it('backfills legacy findings (ack → triaged, lifecycle fields, due_at from backfill time)', function (): void {
|
|
CarbonImmutable::setTestNow(CarbonImmutable::parse('2026-02-24T10:00:00Z'));
|
|
|
|
[$user, $tenant] = createUserWithTenant(role: 'manager');
|
|
|
|
$finding = Finding::factory()->for($tenant)->create([
|
|
'severity' => Finding::SEVERITY_MEDIUM,
|
|
'status' => Finding::STATUS_ACKNOWLEDGED,
|
|
'acknowledged_at' => CarbonImmutable::parse('2026-02-20T00:00:00Z'),
|
|
'acknowledged_by_user_id' => (int) $user->getKey(),
|
|
'first_seen_at' => null,
|
|
'last_seen_at' => null,
|
|
'times_seen' => null,
|
|
'sla_days' => null,
|
|
'due_at' => null,
|
|
'triaged_at' => null,
|
|
'created_at' => CarbonImmutable::parse('2026-02-10T00:00:00Z'),
|
|
'updated_at' => CarbonImmutable::parse('2026-02-10T00:00:00Z'),
|
|
]);
|
|
|
|
BackfillFindingLifecycleJob::dispatchSync(
|
|
tenantId: (int) $tenant->getKey(),
|
|
workspaceId: (int) $tenant->workspace_id,
|
|
initiatorUserId: (int) $user->getKey(),
|
|
);
|
|
|
|
$finding->refresh();
|
|
|
|
expect($finding->status)->toBe(Finding::STATUS_TRIAGED)
|
|
->and($finding->triaged_at?->toIso8601String())->toBe('2026-02-20T00:00:00+00:00')
|
|
->and($finding->first_seen_at?->toIso8601String())->toBe('2026-02-10T00:00:00+00:00')
|
|
->and($finding->last_seen_at?->toIso8601String())->toBe('2026-02-10T00:00:00+00:00')
|
|
->and($finding->times_seen)->toBe(1)
|
|
->and($finding->sla_days)->toBe(14)
|
|
->and($finding->due_at?->toIso8601String())->toBe('2026-03-10T10:00:00+00:00')
|
|
->and($finding->acknowledged_at?->toIso8601String())->toBe('2026-02-20T00:00:00+00:00')
|
|
->and((int) $finding->acknowledged_by_user_id)->toBe((int) $user->getKey());
|
|
|
|
CarbonImmutable::setTestNow();
|
|
});
|
|
|
|
it('computes drift recurrence keys and consolidates drift duplicates', function (): void {
|
|
CarbonImmutable::setTestNow(CarbonImmutable::parse('2026-02-24T10:00:00Z'));
|
|
|
|
[$user, $tenant] = createUserWithTenant(role: 'manager');
|
|
|
|
$scopeKey = hash('sha256', 'scope-drift-backfill-duplicate');
|
|
|
|
$evidence = [
|
|
'change_type' => 'modified',
|
|
'summary' => [
|
|
'kind' => 'policy_snapshot',
|
|
'changed_fields' => ['snapshot_hash'],
|
|
],
|
|
'baseline' => ['policy_id' => 'policy-dupe'],
|
|
'current' => ['policy_id' => 'policy-dupe'],
|
|
];
|
|
|
|
$open = Finding::factory()->for($tenant)->create([
|
|
'finding_type' => Finding::FINDING_TYPE_DRIFT,
|
|
'scope_key' => $scopeKey,
|
|
'subject_type' => 'policy',
|
|
'subject_external_id' => 'policy-dupe',
|
|
'status' => Finding::STATUS_NEW,
|
|
'recurrence_key' => null,
|
|
'evidence_jsonb' => $evidence,
|
|
'first_seen_at' => null,
|
|
'last_seen_at' => null,
|
|
'times_seen' => null,
|
|
'sla_days' => null,
|
|
'due_at' => null,
|
|
'created_at' => CarbonImmutable::parse('2026-02-20T00:00:00Z'),
|
|
'updated_at' => CarbonImmutable::parse('2026-02-20T00:00:00Z'),
|
|
]);
|
|
|
|
$duplicate = Finding::factory()->for($tenant)->create([
|
|
'finding_type' => Finding::FINDING_TYPE_DRIFT,
|
|
'scope_key' => $scopeKey,
|
|
'subject_type' => 'policy',
|
|
'subject_external_id' => 'policy-dupe',
|
|
'status' => Finding::STATUS_RESOLVED,
|
|
'resolved_at' => CarbonImmutable::parse('2026-02-21T00:00:00Z'),
|
|
'resolved_reason' => 'fixed',
|
|
'recurrence_key' => null,
|
|
'evidence_jsonb' => $evidence,
|
|
'first_seen_at' => null,
|
|
'last_seen_at' => null,
|
|
'times_seen' => null,
|
|
'created_at' => CarbonImmutable::parse('2026-02-18T00:00:00Z'),
|
|
'updated_at' => CarbonImmutable::parse('2026-02-18T00:00:00Z'),
|
|
]);
|
|
|
|
BackfillFindingLifecycleJob::dispatchSync(
|
|
tenantId: (int) $tenant->getKey(),
|
|
workspaceId: (int) $tenant->workspace_id,
|
|
initiatorUserId: (int) $user->getKey(),
|
|
);
|
|
|
|
$tenantId = (int) $tenant->getKey();
|
|
$expectedRecurrenceKey = hash(
|
|
'sha256',
|
|
sprintf('drift:%d:%s:policy:%s:policy_snapshot:modified', $tenantId, $scopeKey, 'policy-dupe'),
|
|
);
|
|
|
|
expect(Finding::query()
|
|
->where('tenant_id', $tenantId)
|
|
->where('finding_type', Finding::FINDING_TYPE_DRIFT)
|
|
->where('recurrence_key', $expectedRecurrenceKey)
|
|
->count())->toBe(1);
|
|
|
|
$open->refresh();
|
|
$duplicate->refresh();
|
|
|
|
expect($open->recurrence_key)->toBe($expectedRecurrenceKey)
|
|
->and($open->status)->toBe(Finding::STATUS_NEW);
|
|
|
|
expect($duplicate->recurrence_key)->toBeNull()
|
|
->and($duplicate->status)->toBe(Finding::STATUS_RESOLVED)
|
|
->and($duplicate->resolved_reason)->toBe('consolidated_duplicate')
|
|
->and($duplicate->resolved_at?->toIso8601String())->toBe('2026-02-24T10:00:00+00:00');
|
|
|
|
CarbonImmutable::setTestNow();
|
|
});
|