TenantAtlas/tests/Feature/TenantReview/TenantReviewAuditLogTest.php
ahmido a4f2629493 feat: add tenant review layer (#185)
## Summary
- add the tenant review domain with tenant-scoped review library, canonical workspace review register, lifecycle actions, and review-derived executive pack export
- extend review pack, operations, audit, capability, and badge infrastructure to support review composition, publication, export, and recurring review cycles
- add product backlog and audit documentation updates for tenant review and semantic-clarity follow-up candidates

## Testing
- `vendor/bin/sail bin pint --dirty --format agent`
- `vendor/bin/sail artisan test --compact --filter="TenantReview"`
- `CI=1 vendor/bin/sail artisan test --compact`

## Notes
- Livewire v4+ compliant via existing Filament v5 stack
- panel providers remain in `bootstrap/providers.php` via existing Laravel 12 structure; no provider registration moved to `bootstrap/app.php`
- `TenantReviewResource` is not globally searchable, so the Filament edit/view global-search constraint does not apply
- destructive review actions use action handlers with confirmation and policy enforcement

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #185
2026-03-21 22:03:01 +00:00

91 lines
3.3 KiB
PHP

<?php
declare(strict_types=1);
use App\Jobs\GenerateReviewPackJob;
use App\Models\AuditLog;
use App\Models\EvidenceSnapshot;
use App\Services\ReviewPackService;
use App\Services\TenantReviews\TenantReviewLifecycleService;
use App\Services\TenantReviews\TenantReviewService;
use App\Support\Audit\AuditActionId;
use Illuminate\Support\Facades\Storage;
beforeEach(function (): void {
Storage::fake('exports');
});
it('records tenant-review audit history across create, refresh, publish, export, successor, and archive flows', function (): void {
[$user, $tenant] = createUserWithTenant(role: 'owner');
$reviewService = app(TenantReviewService::class);
$lifecycle = app(TenantReviewLifecycleService::class);
$initialSnapshot = seedTenantReviewEvidence($tenant);
$review = $reviewService->create($tenant, $initialSnapshot, $user);
$review = $reviewService->compose($review);
EvidenceSnapshot::query()
->where('tenant_id', (int) $tenant->getKey())
->where('status', 'active')
->update([
'status' => 'expired',
'expires_at' => now(),
]);
$refreshSnapshot = seedTenantReviewEvidence(
tenant: $tenant,
findingCount: 6,
driftCount: 2,
operationRunCount: 2,
);
$review = $reviewService->refresh($review, $user, $refreshSnapshot);
$review = $reviewService->compose($review->fresh());
$published = $lifecycle->publish($review, $user);
EvidenceSnapshot::query()
->where('tenant_id', (int) $tenant->getKey())
->where('status', 'active')
->update([
'status' => 'expired',
'expires_at' => now(),
]);
$pack = app(ReviewPackService::class)->generateFromReview($published, $user, [
'include_pii' => true,
'include_operations' => true,
]);
$job = new GenerateReviewPackJob(
reviewPackId: (int) $pack->getKey(),
operationRunId: (int) $pack->operation_run_id,
);
app()->call([$job, 'handle']);
$nextReview = $lifecycle->createNextReview($published->fresh(), $user, seedTenantReviewEvidence(
tenant: $tenant,
findingCount: 7,
driftCount: 1,
operationRunCount: 3,
));
$lifecycle->archive($nextReview, $user);
expect(AuditLog::query()->where('action', AuditActionId::TenantReviewCreated->value)->exists())->toBeTrue()
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewRefreshed->value)->exists())->toBeTrue()
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewPublished->value)->exists())->toBeTrue()
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewExported->value)->exists())->toBeTrue()
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewSuccessorCreated->value)->exists())->toBeTrue()
->and(AuditLog::query()->where('action', AuditActionId::TenantReviewArchived->value)->exists())->toBeTrue();
$exportAudit = AuditLog::query()
->where('action', AuditActionId::TenantReviewExported->value)
->latest('id')
->first();
expect($exportAudit)->not->toBeNull()
->and($exportAudit?->resource_type)->toBe('tenant_review')
->and(data_get($exportAudit?->metadata, 'review_pack_id'))->toBe((int) $pack->getKey());
});