TenantAtlas/apps/platform/tests/Feature/Spec085/OperationsIndexHeaderTest.php

<?php

declare(strict_types=1);

use App\Models\ManagedEnvironment;
use App\Support\Workspaces\WorkspaceContext;
use Filament\Facades\Filament;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Illuminate\Support\Facades\Http;

uses(RefreshDatabase::class);

beforeEach(function (): void {
    Http::preventStrayRequests();
});

it('renders tenant scope label and CTAs when tenant context is active and entitled', function (): void {
    $tenant = ManagedEnvironment::factory()->create();
    [$user, $tenant] = createUserWithTenant($tenant, role: 'owner');

    Filament::setTenant($tenant, true);

    $this->actingAs($user)
        ->withSession([WorkspaceContext::SESSION_KEY => (int) $tenant->workspace_id])
        ->get(route('admin.operations.index', ['workspace' => $tenant->workspace]))
        ->assertOk()
        ->assertSee(__('localization.shell.environment_scope').': '.$tenant->name)
        ->assertSee('Back to '.$tenant->name)
        ->assertSee(__('localization.shell.show_all_environments'));
});

it('treats stale tenant context as workspace-wide without tenant identity hints', function (): void {
    $entitledTenant = ManagedEnvironment::factory()->create();
    [$user, $entitledTenant] = createUserWithTenant($entitledTenant, role: 'owner', workspaceRole: 'readonly');

    $staleTenant = ManagedEnvironment::factory()->create([
        'workspace_id' => (int) $entitledTenant->workspace_id,
    ]);

    Filament::setTenant($staleTenant, true);

    $this->actingAs($user)
        ->withSession([WorkspaceContext::SESSION_KEY => (int) $entitledTenant->workspace_id])
        ->get(route('admin.operations.index', ['workspace' => $entitledTenant->workspace]))
        ->assertOk()
        ->assertSee(__('localization.shell.all_environments'))
        ->assertDontSee('Back to '.$staleTenant->name)
        ->assertDontSee($staleTenant->name)
        ->assertDontSee(__('localization.shell.show_all_environments'));
});

it('clears filament tenant context and last-tenant session state via clear-tenant-context endpoint', function (): void {
    $tenant = ManagedEnvironment::factory()->create();
    [$user, $tenant] = createUserWithTenant($tenant, role: 'owner');

    $workspaceId = (int) $tenant->workspace_id;
    $lastTenantIds = [
        (string) $workspaceId => (int) $tenant->getKey(),
    ];

    Filament::setTenant($tenant, true);

    $this->actingAs($user)
        ->withSession([
            WorkspaceContext::SESSION_KEY => $workspaceId,
            WorkspaceContext::LAST_TENANT_IDS_SESSION_KEY => $lastTenantIds,
        ])
        ->from('/admin/alerts')
        ->post('/admin/clear-tenant-context')
        ->assertRedirect('/admin/alerts');

    expect(Filament::getTenant())->toBeNull();
    expect(session()->get(WorkspaceContext::LAST_TENANT_IDS_SESSION_KEY, []))
        ->not->toHaveKey((string) $workspaceId);

    $this->withSession([
        WorkspaceContext::SESSION_KEY => $workspaceId,
    ])
        ->get(route('admin.operations.index', ['workspace' => $tenant->workspace]))
        ->assertOk()
        ->assertSee(__('localization.shell.all_environments'))
        ->assertDontSee(__('localization.shell.environment_scope').': '.$tenant->name);
});

it('clears remembered tenant scope even when the stored tenant is no longer operable', function (): void {
    $activeTenant = ManagedEnvironment::factory()->create();
    [$user, $activeTenant] = createUserWithTenant($activeTenant, role: 'owner');

    $onboardingTenant = ManagedEnvironment::factory()->onboarding()->create([
        'workspace_id' => (int) $activeTenant->workspace_id,
    ]);

    createUserWithTenant(
        tenant: $onboardingTenant,
        user: $user,
        role: 'owner',
        workspaceRole: 'owner',
        ensureDefaultMicrosoftProviderConnection: false,
    );

    $workspaceId = (int) $activeTenant->workspace_id;

    $this->actingAs($user)
        ->withSession([
            WorkspaceContext::SESSION_KEY => $workspaceId,
            WorkspaceContext::LAST_TENANT_IDS_SESSION_KEY => [
                (string) $workspaceId => (int) $onboardingTenant->getKey(),
            ],
        ])
        ->from(route('admin.operations.index', ['workspace' => $activeTenant->workspace]))
        ->post('/admin/clear-tenant-context')
        ->assertRedirect(route('admin.operations.index', ['workspace' => $activeTenant->workspace]));

    expect(session()->get(WorkspaceContext::LAST_TENANT_IDS_SESSION_KEY, []))
        ->not->toHaveKey((string) $workspaceId);
});