60 lines
2.3 KiB
PHP
60 lines
2.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Models\Finding;
|
|
use App\Services\Evidence\EvidenceSnapshotService;
|
|
use App\Support\TenantReviewCompletenessState;
|
|
use App\Support\TenantReviewStatus;
|
|
|
|
it('creates an anchored tenant review from a chosen evidence snapshot and keeps that basis stable after live data changes', function (): void {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
$snapshot = seedTenantReviewEvidence($tenant);
|
|
|
|
$review = composeTenantReviewForTest($tenant, $user, $snapshot);
|
|
|
|
expect($review->evidence_snapshot_id)->toBe((int) $snapshot->getKey())
|
|
->and($review->sections)->toHaveCount(7)
|
|
->and($review->sections->pluck('section_key')->all())->toBe([
|
|
'executive_summary',
|
|
'control_interpretation',
|
|
'open_risks',
|
|
'accepted_risks',
|
|
'permission_posture',
|
|
'baseline_drift_posture',
|
|
'operations_health',
|
|
])
|
|
->and($review->summary['evidence_basis']['snapshot_id'])->toBe((int) $snapshot->getKey());
|
|
|
|
Finding::factory()->create([
|
|
'tenant_id' => (int) $tenant->getKey(),
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'severity' => Finding::SEVERITY_CRITICAL,
|
|
]);
|
|
|
|
$newSnapshotPayload = app(EvidenceSnapshotService::class)->buildSnapshotPayload($tenant);
|
|
|
|
expect($review->fresh()->evidence_snapshot_id)->toBe((int) $snapshot->getKey())
|
|
->and($review->fresh()->summary['evidence_basis']['snapshot_fingerprint'])->toBe((string) $snapshot->fingerprint)
|
|
->and($newSnapshotPayload['fingerprint'])->not->toBe((string) $snapshot->fingerprint);
|
|
});
|
|
|
|
it('records completeness and publish blockers when the evidence basis is partial or missing', function (): void {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$snapshot = seedTenantReviewEvidence(
|
|
tenant: $tenant,
|
|
permissionPayload: [
|
|
'required_count' => 10,
|
|
'granted_count' => 7,
|
|
],
|
|
operationRunCount: 0,
|
|
);
|
|
|
|
$review = composeTenantReviewForTest($tenant, $user, $snapshot);
|
|
|
|
expect($review->completeness_state)->toBe(TenantReviewCompletenessState::Missing->value)
|
|
->and($review->status)->toBe(TenantReviewStatus::Draft->value)
|
|
->and($review->publishBlockers())->not->toBeEmpty();
|
|
});
|