TenantAtlas/apps/platform/tests/Feature/TenantReview/TenantReviewAuditLogTest.php
ahmido ce0615a9c1 Spec 182: relocate Laravel platform to apps/platform (#213)
## Summary
- move the Laravel application into `apps/platform` and keep the repository root for orchestration, docs, and tooling
- update the local command model, Sail/Docker wiring, runtime paths, and ignore rules around the new platform location
- add relocation quickstart/contracts plus focused smoke coverage for bootstrap, command model, routes, and runtime behavior

## Validation
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/PlatformRelocation`
- integrated browser smoke validated `/up`, `/`, `/admin`, `/admin/choose-workspace`, and tenant route semantics for `200`, `403`, and `404`

## Remaining Rollout Checks
- validate Dokploy build context and working-directory assumptions against the new `apps/platform` layout
- confirm web, queue, and scheduler processes all start from the expected working directory in staging/production
- verify no legacy volume mounts or asset-publish paths still point at the old root-level `public/` or `storage/` locations

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #213
2026-04-08 08:40:47 +00:00

91 lines
3.3 KiB
PHP

<?php
declare(strict_types=1);
use App\Jobs\GenerateReviewPackJob;
use App\Models\AuditLog;
use App\Models\EvidenceSnapshot;
use App\Services\ReviewPackService;
use App\Services\TenantReviews\TenantReviewLifecycleService;
use App\Services\TenantReviews\TenantReviewService;
use App\Support\Audit\AuditActionId;
use Illuminate\Support\Facades\Storage;
beforeEach(function (): void {
Storage::fake('exports');
});
it('records tenant-review audit history across create, refresh, publish, export, successor, and archive flows', function (): void {
[$user, $tenant] = createUserWithTenant(role: 'owner');
$reviewService = app(TenantReviewService::class);
$lifecycle = app(TenantReviewLifecycleService::class);
$initialSnapshot = seedTenantReviewEvidence($tenant);
$review = $reviewService->create($tenant, $initialSnapshot, $user);
$review = $reviewService->compose($review);
EvidenceSnapshot::query()
->where('tenant_id', (int) $tenant->getKey())
->where('status', 'active')
->update([
'status' => 'expired',
'expires_at' => now(),
]);
$refreshSnapshot = seedTenantReviewEvidence(
tenant: $tenant,
findingCount: 6,
driftCount: 2,
operationRunCount: 2,
);
$review = $reviewService->refresh($review, $user, $refreshSnapshot);
$review = $reviewService->compose($review->fresh());
$published = $lifecycle->publish($review, $user);
EvidenceSnapshot::query()
->where('tenant_id', (int) $tenant->getKey())
->where('status', 'active')
->update([
'status' => 'expired',
'expires_at' => now(),
]);
$pack = app(ReviewPackService::class)->generateFromReview($published, $user, [
'include_pii' => true,
'include_operations' => true,
]);
$job = new GenerateReviewPackJob(
reviewPackId: (int) $pack->getKey(),
operationRunId: (int) $pack->operation_run_id,
);
app()->call([$job, 'handle']);
$nextReview = $lifecycle->createNextReview($published->fresh(), $user, seedTenantReviewEvidence(
tenant: $tenant,
findingCount: 7,
driftCount: 1,
operationRunCount: 3,
));
$lifecycle->archive($nextReview, $user);
expect(AuditLog::query()->where('action', AuditActionId::TenantReviewCreated->value)->exists())->toBeTrue()
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewRefreshed->value)->exists())->toBeTrue()
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewPublished->value)->exists())->toBeTrue()
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewExported->value)->exists())->toBeTrue()
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewSuccessorCreated->value)->exists())->toBeTrue()
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewArchived->value)->exists())->toBeTrue();
$exportAudit = AuditLog::query()
->where('action', AuditActionId::TenantReviewExported->value)
->latest('id')
->first();
expect($exportAudit)->not->toBeNull()
->and($exportAudit?->resource_type)->toBe('tenant_review')
->and(data_get($exportAudit?->metadata, 'review_pack_id'))->toBe((int) $pack->getKey());
});