user = User::factory()->create([]); $this->workspace = Workspace::factory()->create(['user_id' => $this->user->id]); $this->workspace->members()->attach($this->user->id, ['role' => Role::Member->value]); $this->user->update(['current_workspace_id' => $this->workspace->id]); }); // Index tests test('workspaces index requires authentication', function () { $response = $this->get(route('app.workspaces.index')); $response->assertRedirect(route('login')); }); test('workspaces index shows all workspaces for user', function () { $workspaces = Workspace::factory()->count(2)->create(['user_id' => $this->user->id]); foreach ($workspaces as $workspace) { $workspace->members()->attach($this->user->id, ['role' => Role::Member->value]); } $response = $this->actingAs($this->user)->get(route('app.workspaces.index')); $response->assertOk(); $response->assertInertia(fn ($page) => $page ->component('workspaces/Index', false) ->has('workspaces', 3) ->has('currentWorkspaceId') ); }); // Create tests test('create workspace requires authentication', function () { $response = $this->get(route('app.workspaces.create')); $response->assertRedirect(route('login')); }); test('create workspace shows form for user with no workspaces', function () { // Delete existing workspace so user has none $this->user->update(['current_workspace_id' => null]); $this->workspace->delete(); $response = $this->actingAs($this->user)->get(route('app.workspaces.create')); $response->assertOk(); $response->assertInertia(fn ($page) => $page ->component('workspaces/Create', false) ); }); test('create workspace shows form when user already has workspace in self-hosted mode', function () { config(['trypost.self_hosted' => true]); $response = $this->actingAs($this->user)->get(route('app.workspaces.create')); $response->assertOk(); $response->assertInertia(fn ($page) => $page ->component('workspaces/Create', false) ); }); // Store tests test('store workspace requires authentication', function () { $response = $this->post(route('app.workspaces.store'), ['name' => 'Test Workspace']); $response->assertRedirect(route('login')); }); test('store workspace creates first workspace', function () { // Delete existing workspace so user has none $this->user->update(['current_workspace_id' => null]); $this->workspace->delete(); $response = $this->actingAs($this->user)->post(route('app.workspaces.store'), [ 'name' => 'New Workspace', ]); $response->assertRedirect(route('app.accounts')); $this->assertDatabaseHas('workspaces', [ 'name' => 'New Workspace', 'user_id' => $this->user->id, ]); }); test('store workspace creates second workspace in self-hosted mode', function () { config(['trypost.self_hosted' => true]); $response = $this->actingAs($this->user)->post(route('app.workspaces.store'), [ 'name' => 'Second Workspace', ]); $response->assertRedirect(route('app.calendar')); $this->assertDatabaseHas('workspaces', [ 'name' => 'Second Workspace', 'user_id' => $this->user->id, ]); }); test('store workspace validates name is required', function () { $response = $this->actingAs($this->user)->post(route('app.workspaces.store'), [ 'name' => '', ]); $response->assertSessionHasErrors('name'); }); test('store workspace sets new workspace as current', function () { // Delete existing workspace so user has none $this->user->update(['current_workspace_id' => null]); $this->workspace->delete(); $this->actingAs($this->user)->post(route('app.workspaces.store'), [ 'name' => 'New Workspace', ]); $this->user->refresh(); $newWorkspace = Workspace::where('name', 'New Workspace')->first(); expect($this->user->current_workspace_id)->toBe($newWorkspace->id); }); // Switch tests test('switch workspace requires authentication', function () { $response = $this->post(route('app.workspaces.switch', $this->workspace)); $response->assertRedirect(route('login')); }); test('switch workspace changes current workspace', function () { $otherWorkspace = Workspace::factory()->create(['user_id' => $this->user->id]); $otherWorkspace->members()->attach($this->user->id, ['role' => Role::Member->value]); $response = $this->actingAs($this->user)->post(route('app.workspaces.switch', $otherWorkspace)); $response->assertRedirect(route('app.calendar')); $this->user->refresh(); expect($this->user->current_workspace_id)->toBe($otherWorkspace->id); }); test('switch workspace returns 403 for workspace user does not belong to', function () { $otherUser = User::factory()->create([]); $otherWorkspace = Workspace::factory()->create(['user_id' => $otherUser->id]); $response = $this->actingAs($this->user)->post(route('app.workspaces.switch', $otherWorkspace)); $response->assertForbidden(); }); // Settings tests test('workspace settings requires authentication', function () { $response = $this->get(route('app.workspace.settings')); $response->assertRedirect(route('login')); }); test('workspace settings shows the workspace settings page', function () { $response = $this->actingAs($this->user)->get(route('app.workspace.settings')); $response->assertOk(); $response->assertInertia(fn ($page) => $page ->component('settings/Workspace', false) ->has('workspace') ); }); test('brand settings shows the brand settings page', function () { $response = $this->actingAs($this->user)->get(route('app.workspace.brand')); $response->assertOk(); $response->assertInertia(fn ($page) => $page ->component('settings/Brand', false) ->has('workspace') ); }); test('workspace settings redirects to create if no workspace', function () { $this->user->update(['current_workspace_id' => null]); $response = $this->actingAs($this->user)->get(route('app.workspace.settings')); $response->assertRedirect(route('app.workspaces.create')); }); // Update settings tests test('update workspace settings requires authentication', function () { $response = $this->put(route('app.workspace.settings.update'), [ 'name' => 'Updated Name', ]); $response->assertRedirect(route('login')); }); test('update workspace settings updates workspace and redirects back', function () { $response = $this->actingAs($this->user) ->from(route('app.workspace.brand')) ->put(route('app.workspace.settings.update'), [ 'name' => 'Updated Name', 'brand_font' => 'Inter', ]); $response->assertRedirect(route('app.workspace.brand')); $this->workspace->refresh(); expect($this->workspace->name)->toBe('Updated Name'); }); test('update workspace settings validates required fields', function () { $response = $this->actingAs($this->user)->put(route('app.workspace.settings.update'), [ 'name' => '', ]); $response->assertSessionHasErrors(['name']); }); // Logo upload tests test('upload workspace logo requires authentication', function () { $response = $this->post(route('app.workspace.upload-logo'), [ 'photo' => UploadedFile::fake()->image('logo.jpg'), ]); $response->assertRedirect(route('login')); }); test('upload workspace logo succeeds with valid image', function () { $response = $this->actingAs($this->user)->post(route('app.workspace.upload-logo'), [ 'photo' => UploadedFile::fake()->image('logo.jpg', 200, 200), ]); $response->assertRedirect(); $this->workspace->refresh(); expect($this->workspace->has_logo)->toBeTrue(); expect($this->workspace->logo_url)->not->toBeNull(); }); test('upload workspace logo validates file is an image', function () { $response = $this->actingAs($this->user)->post(route('app.workspace.upload-logo'), [ 'photo' => UploadedFile::fake()->create('document.pdf', 100), ]); $response->assertSessionHasErrors('photo'); }); test('upload workspace logo validates max size', function () { $response = $this->actingAs($this->user)->post(route('app.workspace.upload-logo'), [ 'photo' => UploadedFile::fake()->image('logo.jpg')->size(3000), ]); $response->assertSessionHasErrors('photo'); }); test('upload workspace logo requires authorization', function () { $otherUser = User::factory()->create([]); $otherWorkspace = Workspace::factory()->create(['user_id' => $otherUser->id]); $otherWorkspace->members()->attach($otherUser->id, ['role' => Role::Member->value]); $otherUser->update(['current_workspace_id' => $otherWorkspace->id]); $otherUser->account->subscriptions()->create([ 'type' => Account::SUBSCRIPTION_NAME, 'stripe_id' => 'sub_test_'.fake()->uuid(), 'stripe_status' => 'active', 'stripe_price' => 'price_123', ]); // otherUser is account owner of their own account/workspace, so policy 'update' passes for their own workspace. // Switch their current workspace to the original $this->workspace (which they don't own) to trigger forbidden. $otherUser->update(['current_workspace_id' => $this->workspace->id]); $response = $this->actingAs($otherUser)->post(route('app.workspace.upload-logo'), [ 'photo' => UploadedFile::fake()->image('logo.jpg'), ]); $response->assertForbidden(); }); test('delete workspace logo requires authentication', function () { $response = $this->delete(route('app.workspace.delete-logo')); $response->assertRedirect(route('login')); }); test('delete workspace logo succeeds', function () { // Upload first $this->actingAs($this->user)->post(route('app.workspace.upload-logo'), [ 'photo' => UploadedFile::fake()->image('logo.jpg', 200, 200), ]); $this->workspace->refresh(); expect($this->workspace->has_logo)->toBeTrue(); // Delete $response = $this->actingAs($this->user)->delete(route('app.workspace.delete-logo')); $response->assertRedirect(); $this->workspace->refresh(); expect($this->workspace->has_logo)->toBeFalse(); }); test('delete workspace logo requires authorization', function () { $otherUser = User::factory()->create([]); $otherWorkspace = Workspace::factory()->create(['user_id' => $otherUser->id]); $otherWorkspace->members()->attach($otherUser->id, ['role' => Role::Member->value]); $otherUser->update(['current_workspace_id' => $otherWorkspace->id]); $otherUser->account->subscriptions()->create([ 'type' => Account::SUBSCRIPTION_NAME, 'stripe_id' => 'sub_test_'.fake()->uuid(), 'stripe_status' => 'active', 'stripe_price' => 'price_123', ]); $otherUser->update(['current_workspace_id' => $this->workspace->id]); $response = $this->actingAs($otherUser)->delete(route('app.workspace.delete-logo')); $response->assertForbidden(); }); // Destroy tests test('destroy workspace requires authentication', function () { $response = $this->delete(route('app.workspaces.destroy', $this->workspace)); $response->assertRedirect(route('login')); }); test('destroy workspace deletes the workspace', function () { $workspaceId = $this->workspace->id; $response = $this->actingAs($this->user)->delete(route('app.workspaces.destroy', $this->workspace)); $response->assertRedirect(route('app.workspaces.index')); expect(Workspace::find($workspaceId))->toBeNull(); }); test('destroy workspace clears current workspace if deleting current', function () { $this->actingAs($this->user)->delete(route('app.workspaces.destroy', $this->workspace)); $this->user->refresh(); expect($this->user->current_workspace_id)->toBeNull(); }); test('destroy workspace returns 403 for non-owner', function () { $otherUser = User::factory()->create([]); $otherWorkspace = Workspace::factory()->create(['user_id' => $otherUser->id]); $otherWorkspace->members()->attach($otherUser->id, ['role' => Role::Member->value]); $otherUser->update(['current_workspace_id' => $otherWorkspace->id]); $otherUser->account->subscriptions()->create([ 'type' => Account::SUBSCRIPTION_NAME, 'stripe_id' => 'sub_test_'.fake()->uuid(), 'stripe_status' => 'active', 'stripe_price' => 'price_123', ]); $response = $this->actingAs($otherUser)->delete(route('app.workspaces.destroy', $this->workspace)); $response->assertForbidden(); }); // Autofill brand tests test('autofillBrand returns metadata without persisting anything', function () { $account = Account::factory()->create(); $user = User::factory()->create(['account_id' => $account->id]); $account->update(['owner_id' => $user->id]); Http::fake([ 'example.com/*' => Http::response( 'Acme', 200, ['Content-Type' => 'text/html'], ), 'example.com' => Http::response( 'Acme', 200, ['Content-Type' => 'text/html'], ), ]); $initialWorkspaceCount = Workspace::count(); $response = $this->actingAs($user) ->postJson(route('app.workspaces.autofill'), ['url' => 'https://example.com']); $response->assertOk(); $response->assertJsonStructure(['name', 'brand_description', 'brand_tone', 'brand_voice_notes', 'content_language', 'logo_url']); expect(Workspace::count())->toBe($initialWorkspaceCount); }); test('autofillBrand validates url is required', function () { $account = Account::factory()->create(); $user = User::factory()->create(['account_id' => $account->id]); $this->actingAs($user) ->postJson(route('app.workspaces.autofill'), []) ->assertUnprocessable() ->assertJsonValidationErrors('url'); }); // Brand-aware store tests test('store persists brand fields and redirects first workspace to /accounts', function () { $account = Account::factory()->create(); $user = User::factory()->create(['account_id' => $account->id]); $account->update(['owner_id' => $user->id]); $account->subscriptions()->create([ 'type' => Account::SUBSCRIPTION_NAME, 'stripe_id' => 'sub_test_'.fake()->uuid(), 'stripe_status' => 'active', 'stripe_price' => 'price_123', ]); $response = $this->actingAs($user)->post(route('app.workspaces.store'), [ 'name' => 'Acme Inc', 'brand_website' => 'https://acme.example', 'brand_description' => 'We sell rockets.', 'brand_tone' => 'professional', 'brand_voice_notes' => 'short, punchy.', 'content_language' => 'en', ]); $response->assertRedirect(route('app.accounts')); $workspace = Workspace::where('name', 'Acme Inc')->sole(); expect($workspace->name)->toBe('Acme Inc'); expect($workspace->brand_website)->toBe('https://acme.example'); expect($workspace->brand_description)->toBe('We sell rockets.'); }); test('store redirects to /calendar for additional workspace (existing user)', function () { $account = Account::factory()->create(); $user = User::factory()->create(['account_id' => $account->id]); $account->update(['owner_id' => $user->id]); $account->subscriptions()->create([ 'type' => Account::SUBSCRIPTION_NAME, 'stripe_id' => 'sub_test_'.fake()->uuid(), 'stripe_status' => 'active', 'stripe_price' => 'price_123', ]); // First workspace already exists $existing = Workspace::factory()->create(['account_id' => $account->id, 'user_id' => $user->id]); $existing->members()->attach($user->id, ['role' => Role::Member->value]); $response = $this->actingAs($user)->post(route('app.workspaces.store'), [ 'name' => 'Second Workspace', ]); $response->assertRedirect(route('app.calendar')); expect(Workspace::where('account_id', $account->id)->count())->toBe(2); }); test('store attaches logo when logo_url is provided', function () { $account = Account::factory()->create(); $user = User::factory()->create(['account_id' => $account->id]); $account->update(['owner_id' => $user->id]); $account->subscriptions()->create([ 'type' => Account::SUBSCRIPTION_NAME, 'stripe_id' => 'sub_test_'.fake()->uuid(), 'stripe_status' => 'active', 'stripe_price' => 'price_123', ]); $logoAttacher = $this->mock(LogoAttacher::class); $logoAttacher->shouldReceive('attach')->once(); $this->actingAs($user)->post(route('app.workspaces.store'), [ 'name' => 'Acme', 'logo_url' => 'https://example.com/logo.png', ])->assertRedirect(); });