TenantAtlas/specs/008-apps-app-management/plan.md

Implementation Plan: Apps (008)

Branch: feat/008-apps-app-management
Date: 2025-12-29
Spec Source: spec.md

Summary

Make mobileApp reliable in the existing Policy/Backup/Restore flows by:

• Extending Graph contract registry with app assignment endpoints and a realistic @odata.type family.
• Enforcing metadata-only snapshots during capture (contract-driven filtering).
• Adding targeted Pest tests for contracts + snapshot behavior.

Execution Steps

1. Update config/graph_contracts.php for mobileApp:
   • Add assignments list + assign action endpoints and payload key.
   • Expand type_family using known app types.
2. Update app/Services/Intune/PolicySnapshotService.php:
   • For metadata-only types, request/select and persist only metadata keys (even if Graph falls back).
3. Add/extend tests:
   • tests/Unit/GraphContractRegistryActualDataTest.php for mobileApp contract coverage.
   • tests/Unit/PolicySnapshotServiceTest.php for metadata-only filtering behavior.
4. Run formatting + tests:
   • ./vendor/bin/pint --dirty
   • ./vendor/bin/sail artisan test tests/Unit/GraphContractRegistryActualDataTest.php tests/Unit/PolicySnapshotServiceTest.php