TenantAtlas/tests/Feature/Drift/DriftGenerationDispatchTest.php

<?php

use App\Filament\Pages\DriftLanding;
use App\Jobs\GenerateDriftFindingsJob;
use App\Models\BulkOperationRun;
use App\Models\InventorySyncRun;
use App\Models\OperationRun;
use App\Services\Graph\GraphClientInterface;
use App\Support\OperationRunLinks;
use App\Support\RunIdempotency;
use Filament\Facades\Filament;
use Illuminate\Support\Facades\Queue;
use Livewire\Livewire;

beforeEach(function () {
    $this->mock(GraphClientInterface::class, function ($mock): void {
        $mock->shouldReceive('listPolicies')->never();
        $mock->shouldReceive('getPolicy')->never();
        $mock->shouldReceive('getOrganization')->never();
        $mock->shouldReceive('applyPolicy')->never();
        $mock->shouldReceive('getServicePrincipalPermissions')->never();
        $mock->shouldReceive('request')->never();
    });
});

test('opening Drift dispatches generation when findings are missing', function () {
    Queue::fake();

    [$user, $tenant] = createUserWithTenant(role: 'manager');
    $this->actingAs($user);
    Filament::setTenant($tenant, true);

    $scopeKey = hash('sha256', 'scope-dispatch');

    $baseline = InventorySyncRun::factory()->for($tenant)->create([
        'selection_hash' => $scopeKey,
        'status' => InventorySyncRun::STATUS_SUCCESS,
        'finished_at' => now()->subDays(2),
    ]);

    $current = InventorySyncRun::factory()->for($tenant)->create([
        'selection_hash' => $scopeKey,
        'status' => InventorySyncRun::STATUS_SUCCESS,
        'finished_at' => now()->subDay(),
    ]);

    Livewire::test(DriftLanding::class);

    $idempotencyKey = RunIdempotency::buildKey(
        tenantId: (int) $tenant->getKey(),
        operationType: 'drift.generate',
        targetId: $scopeKey,
        context: [
            'scope_key' => $scopeKey,
            'baseline_run_id' => (int) $baseline->getKey(),
            'current_run_id' => (int) $current->getKey(),
        ],
    );

    $bulkRun = BulkOperationRun::query()
        ->where('tenant_id', $tenant->getKey())
        ->where('idempotency_key', $idempotencyKey)
        ->latest('id')
        ->first();

    expect($bulkRun)->not->toBeNull();
    expect($bulkRun->resource)->toBe('drift');
    expect($bulkRun->action)->toBe('generate');
    expect($bulkRun->status)->toBe('pending');
    expect($bulkRun->item_ids)->toBe([
        'scope_key' => $scopeKey,
        'baseline_run_id' => (int) $baseline->getKey(),
        'current_run_id' => (int) $current->getKey(),
    ]);

    $opRun = OperationRun::query()
        ->where('tenant_id', $tenant->getKey())
        ->where('type', 'drift.generate')
        ->latest('id')
        ->first();

    expect($opRun)->not->toBeNull();
    expect($opRun?->status)->toBe('queued');

    $notifications = session('filament.notifications', []);

    expect($notifications)->not->toBeEmpty();
    expect(collect($notifications)->last()['actions'][0]['url'] ?? null)
        ->toBe(OperationRunLinks::view($opRun, $tenant));

    Queue::assertPushed(GenerateDriftFindingsJob::class, function (GenerateDriftFindingsJob $job) use ($tenant, $user, $baseline, $current, $scopeKey, $bulkRun, $opRun): bool {
        return $job->tenantId === (int) $tenant->getKey()
            && $job->userId === (int) $user->getKey()
            && $job->baselineRunId === (int) $baseline->getKey()
            && $job->currentRunId === (int) $current->getKey()
            && $job->scopeKey === $scopeKey
            && $job->bulkOperationRunId === (int) $bulkRun->getKey()
            && $job->operationRun instanceof OperationRun
            && (int) $job->operationRun->getKey() === (int) $opRun?->getKey();
    });
});

test('opening Drift is idempotent while a run is pending', function () {
    Queue::fake();

    [$user, $tenant] = createUserWithTenant(role: 'manager');
    $this->actingAs($user);
    Filament::setTenant($tenant, true);

    $scopeKey = hash('sha256', 'scope-idempotent');

    $baseline = InventorySyncRun::factory()->for($tenant)->create([
        'selection_hash' => $scopeKey,
        'status' => InventorySyncRun::STATUS_SUCCESS,
        'finished_at' => now()->subDays(2),
    ]);

    $current = InventorySyncRun::factory()->for($tenant)->create([
        'selection_hash' => $scopeKey,
        'status' => InventorySyncRun::STATUS_SUCCESS,
        'finished_at' => now()->subDay(),
    ]);

    Livewire::test(DriftLanding::class);
    Livewire::test(DriftLanding::class);

    Queue::assertPushed(GenerateDriftFindingsJob::class, 1);

    $idempotencyKey = RunIdempotency::buildKey(
        tenantId: (int) $tenant->getKey(),
        operationType: 'drift.generate',
        targetId: $scopeKey,
        context: [
            'scope_key' => $scopeKey,
            'baseline_run_id' => (int) $baseline->getKey(),
            'current_run_id' => (int) $current->getKey(),
        ],
    );

    expect(BulkOperationRun::query()
        ->where('tenant_id', $tenant->getKey())
        ->where('idempotency_key', $idempotencyKey)
        ->count())->toBe(1);

    expect(OperationRun::query()
        ->where('tenant_id', $tenant->getKey())
        ->where('type', 'drift.generate')
        ->count())->toBe(1);
});

test('opening Drift does not dispatch generation when fewer than two successful runs exist', function () {
    Queue::fake();

    [$user, $tenant] = createUserWithTenant(role: 'manager');
    $this->actingAs($user);
    Filament::setTenant($tenant, true);

    $scopeKey = hash('sha256', 'scope-blocked');

    InventorySyncRun::factory()->for($tenant)->create([
        'selection_hash' => $scopeKey,
        'status' => InventorySyncRun::STATUS_SUCCESS,
        'finished_at' => now()->subDay(),
    ]);

    Livewire::test(DriftLanding::class);

    Queue::assertNothingPushed();
    expect(BulkOperationRun::query()->where('tenant_id', $tenant->getKey())->count())->toBe(0);
    expect(OperationRun::query()->where('tenant_id', $tenant->getKey())->count())->toBe(0);
});

test('opening Drift does not dispatch generation for readonly users', function () {
    Queue::fake();

    [$user, $tenant] = createUserWithTenant(role: 'readonly');
    $this->actingAs($user);
    Filament::setTenant($tenant, true);

    $scopeKey = hash('sha256', 'scope-readonly-blocked');

    InventorySyncRun::factory()->for($tenant)->create([
        'selection_hash' => $scopeKey,
        'status' => InventorySyncRun::STATUS_SUCCESS,
        'finished_at' => now()->subDays(2),
    ]);

    InventorySyncRun::factory()->for($tenant)->create([
        'selection_hash' => $scopeKey,
        'status' => InventorySyncRun::STATUS_SUCCESS,
        'finished_at' => now()->subDay(),
    ]);

    Livewire::test(DriftLanding::class);

    Queue::assertNothingPushed();
    expect(BulkOperationRun::query()->where('tenant_id', $tenant->getKey())->count())->toBe(0);
    expect(OperationRun::query()->where('tenant_id', $tenant->getKey())->count())->toBe(0);
});