ahmido
da1adbdeb5
Implements Spec 119 (Drift Golden Master Cutover): - Baseline Compare is the only drift writer (`source = baseline.compare`). - Drift findings now store diff-compatible `evidence_jsonb` (summary.kind, baseline/current policy_version_id refs, fidelity + provenance). - Findings UI renders one-sided diffs for `missing_policy`/`unexpected_policy` when a single ref exists; otherwise shows explicit “diff unavailable”. - Removes legacy drift generator runtime (jobs/services/UI) and related tests. - Adds one-time migration to delete legacy drift findings (`finding_type=drift` where source is null or != baseline.compare). - Scopes baseline capture & landing duplicate warnings to latest completed inventory sync. - Canonicalizes compliance `scheduledActionsForRule` drift signal and keeps legacy snapshots comparable. Tests: - `vendor/bin/sail artisan test --compact` (full suite per tasks) - Focused pack: BaselinePolicyVersionResolverTest, BaselineCompareDriftEvidenceContractTest, DriftFindingDiffUnavailableTest, LegacyDriftFindingsCleanupMigrationTest, ComplianceNoncomplianceActionsDriftTest Notes: - Livewire v4+ / Filament v5 compatible (no legacy APIs). - No new external dependencies. Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #144
58 lines
1.6 KiB
PHP
58 lines
1.6 KiB
PHP
<?php
|
|
|
|
use App\Jobs\BulkPolicyUnignoreJob;
|
|
use App\Models\OperationRun;
|
|
use App\Models\Policy;
|
|
use App\Models\Tenant;
|
|
use App\Models\User;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
test('bulk restore (unignore) clears ignored_at for selected policies', function () {
|
|
$tenant = Tenant::factory()->create();
|
|
$user = User::factory()->create();
|
|
|
|
$policies = Policy::factory()
|
|
->count(5)
|
|
->create([
|
|
'tenant_id' => $tenant->id,
|
|
'ignored_at' => now(),
|
|
]);
|
|
|
|
$policyIds = $policies->pluck('id')->toArray();
|
|
|
|
$opRun = OperationRun::create([
|
|
'tenant_id' => $tenant->id,
|
|
'user_id' => $user->id,
|
|
'initiator_name' => $user->name,
|
|
'type' => 'policy.unignore',
|
|
'status' => 'queued',
|
|
'outcome' => 'pending',
|
|
'run_identity_hash' => 'policy-unignore-test',
|
|
'context' => [
|
|
'policy_ids' => $policyIds,
|
|
],
|
|
]);
|
|
|
|
BulkPolicyUnignoreJob::dispatchSync(
|
|
tenantId: (int) $tenant->getKey(),
|
|
userId: (int) $user->getKey(),
|
|
policyIds: $policyIds,
|
|
operationRun: $opRun,
|
|
);
|
|
|
|
$opRun->refresh();
|
|
|
|
expect($opRun->status)->toBe('completed');
|
|
|
|
$counts = is_array($opRun->summary_counts) ? $opRun->summary_counts : [];
|
|
expect((int) ($counts['processed'] ?? 0))->toBe(5);
|
|
expect((int) ($counts['succeeded'] ?? 0))->toBe(5);
|
|
expect((int) ($counts['failed'] ?? 0))->toBe(0);
|
|
|
|
$policies->each(function (Policy $policy): void {
|
|
expect($policy->refresh()->ignored_at)->toBeNull();
|
|
});
|
|
});
|