TenantAtlas/apps/platform/tests/Feature/Filament/TenantLifecycleStatusDomainSeparationTest.php

<?php

declare(strict_types=1);

use App\Filament\Resources\TenantResource\Pages\ViewTenant;
use App\Models\OperationRun;
use App\Models\ManagedEnvironment;
use App\Support\OperationRunOutcome;
use App\Support\OperationRunStatus;
use App\Support\Workspaces\WorkspaceContext;
use Filament\Facades\Filament;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Livewire\Livewire;

uses(RefreshDatabase::class);

it('keeps lifecycle and rbac status separated while removing app status from the tenant view page', function (): void {
    [$user, $tenant] = createUserWithTenant(
        tenant: ManagedEnvironment::factory()->create([
            'status' => ManagedEnvironment::STATUS_ONBOARDING,
            'app_status' => 'consent_required',
            'rbac_status' => 'failed',
            'name' => 'Separated Status ManagedEnvironment',
        ]),
        role: 'owner',
    );

    expect($tenant->fresh()->app_status)->toBe('consent_required');

    $this->actingAs($user);

    Filament::setTenant($tenant, true);

    Livewire::test(ViewTenant::class, ['record' => $tenant->getRouteKey()])
        ->assertSee('Lifecycle summary')
        ->assertSee('This environment is still onboarding. It remains visible on management and review surfaces, but it is not selectable as active context until onboarding completes.')
        ->assertDontSee('App status')
        ->assertDontSee('Consent required')
        ->assertSee('RBAC status')
        ->assertSee('Failed');
});

it('keeps referenced tenant lifecycle context separate from run status in the tenantless operations viewer', function (): void {
    expect(array_key_exists('app_status', ManagedEnvironment::factory()->onboarding()->raw()))->toBeFalse();

    $tenant = ManagedEnvironment::factory()->onboarding()->create([
        'name' => 'Viewer Separation ManagedEnvironment',
    ]);
    [$user, $tenant] = createUserWithTenant(tenant: $tenant, role: 'owner');

    $run = OperationRun::factory()->create([
        'workspace_id' => (int) $tenant->workspace_id,
        'managed_environment_id' => (int) $tenant->getKey(),
        'type' => 'policy.sync',
        'status' => OperationRunStatus::Completed->value,
        'outcome' => OperationRunOutcome::Succeeded->value,
    ]);

    Filament::setTenant(null, true);

    $this->actingAs($user)
        ->withSession([WorkspaceContext::SESSION_KEY => (int) $tenant->workspace_id])
        ->get(route('admin.operations.view', ['run' => (int) $run->getKey()]))
        ->assertOk()
        ->assertSee('Execution state')
        ->assertSee('Operation finished')
        ->assertSee('Outcome')
        ->assertSee('ManagedEnvironment lifecycle')
        ->assertSee('Onboarding')
        ->assertSee('ManagedEnvironment selector context')
        ->assertSee('This tenant is currently onboarding and may not appear in the tenant selector.');
});