presseportale/tests/Feature/Archive/EvidenceArchiveTest.php

<?php

use App\Enums\ArchiveEvent;
use App\Enums\ArchiveReasonCategory;
use App\Enums\ConfirmationChannel;
use App\Enums\Portal;
use App\Enums\PressReleaseStatus;
use App\Models\ArchiveAccessLog;
use App\Models\ArchiveEntry;
use App\Models\Category;
use App\Models\Company;
use App\Models\ImageRightsConfirmation;
use App\Models\PressRelease;
use App\Models\PressReleaseImage;
use App\Models\User;
use App\Services\Archive\EvidenceArchive;
use App\Services\PressRelease\AnonymizationService;
use App\Services\PressRelease\Images\ImageCorrectionService;
use App\Services\PressRelease\Images\PressReleaseImageRemover;
use App\Services\PressRelease\PressReleaseService;
use Database\Seeders\RolesAndPermissionsSeeder;
use Illuminate\Support\Facades\Mail;
use Illuminate\Support\Facades\Storage;
use Tests\TestCase;

/**
 * Beweisarchiv (Bildkennzeichnung Block F): Verschlüsselung, Append-only,
 * Legal Hold, Purge mit Tombstone, Tombstone-Export und Restore-Abgleich,
 * Auslöser (Bild entfernt, Depublikation, DSGVO-Änderung, Korrektur),
 * Zugriffsprotokoll und Admin-Zugriff.
 */
beforeEach(function (): void {
    /** @var TestCase $this */
    $this->seed(RolesAndPermissionsSeeder::class);
    Storage::fake('archive');
    Storage::fake('local');
    Storage::fake('public');
    Mail::fake();
    config()->set('archive.key', 'base64:'.base64_encode(random_bytes(32)));
});

function archiveAdmin(): User
{
    $admin = User::factory()->create(['is_active' => true]);
    $admin->assignRole('admin');

    return $admin;
}

/**
 * @return array{pr: PressRelease, image: PressReleaseImage}
 */
function archivePublishedWithImage(): array
{
    $category = Category::factory()->create(['portal' => Portal::Presseecho]);
    $category->translations()->create(['locale' => 'de', 'name' => 'Energie', 'slug' => 'energie-'.$category->id]);
    $company = Company::factory()->presseecho()->create(['name' => 'Beispiel AG', 'is_active' => true]);
    $pr = PressRelease::factory()->published()->forPortal(Portal::Presseecho)->for($category)->for($company)->create([
        'published_ever_at' => now()->subDay(),
        'slug' => 'archiv-'.fake()->unique()->numberBetween(1, 99999),
    ]);

    $image = PressReleaseImage::factory()->for($pr)->rulesV2()->create([
        'copyright' => 'Anna Beispiel',
        'published_ever_at' => now()->subDay(),
        'published_snapshot_path' => 'press-release-published/'.$pr->id.'/snap.jpg',
        'published_snapshot_sha256' => hash('sha256', 'snapshot-bytes'),
    ]);
    Storage::disk('local')->put($image->path, 'cover-bytes');
    Storage::disk('local')->put($image->original_path, 'original-bytes');
    Storage::disk('local')->put('press-release-published/'.$pr->id.'/snap.jpg', 'snapshot-bytes');
    Storage::disk('local')->put('press-release-published/'.$pr->id.'/snap.json', '{"credit_line":"Foto: Anna Beispiel"}');

    ImageRightsConfirmation::query()->create([
        'subject_type' => $image->getMorphClass(),
        'subject_id' => $image->getKey(),
        'press_release_id' => $pr->id,
        'company_id' => $pr->company_id,
        'user_id' => $pr->user_id,
        'channel' => ConfirmationChannel::Form,
        'legal_text_key' => 'img-confirm-v2',
        'text_snapshot' => 'Ich bestätige …',
        'agb_version' => '0.6',
        'file_sha256' => $image->original_sha256,
        'declaration_snapshot' => [],
        'confirmed_at' => now(),
        'created_at' => now(),
    ]);

    return ['pr' => $pr, 'image' => $image->fresh()];
}

test('an entry round-trips through encryption with hash check, manifest and signed export', function () {
    $admin = archiveAdmin();
    $pr = PressRelease::factory()->create();
    $archive = app(EvidenceArchive::class);

    $entry = $archive->record(ArchiveEvent::PressReleaseDepublished, $pr, $pr->id, ArchiveReasonCategory::OwnDecision, 'admin', $admin->id, ['title' => 'Geheim'], ['bild.jpg' => 'jpeg-bytes'], ['files' => 1]);

    expect($entry)->not->toBeNull()
        ->and($entry->payload_path)->toStartWith('entries/'.now()->format('Y').'/')
        ->and($entry->retain_until->toDateString())->toBe(now()->endOfYear()->addYears(3)->toDateString())
        ->and(Storage::disk('archive')->get($entry->payload_path))->not->toContain('Geheim');

    $manifest = $archive->manifest($entry, $admin, 'Test');
    expect($manifest['title'])->toBe('Geheim')
        ->and($manifest['event'])->toBe('pm_depublished');

    $zip = $archive->open($entry, $admin, 'Abmahnung prüfen');
    expect(hash('sha256', $zip))->toBe($entry->payload_hash);

    $export = $archive->export($entry, $admin, 'Anwalt');
    $temp = tempnam(sys_get_temp_dir(), 'pk-test-');
    file_put_contents($temp, $export);
    $outer = new ZipArchive;
    $outer->open($temp);
    expect($outer->getFromName('signature.txt'))->toContain('hmac-sha256=')
        ->and(json_decode((string) $outer->getFromName('metadata.json'), true)['payload_sha256'])->toBe($entry->payload_hash)
        ->and($outer->getFromName('payload.zip'))->toBe($zip);
    $outer->close();
    unlink($temp);

    expect(ArchiveAccessLog::query()->count())->toBe(3)
        ->and(ArchiveAccessLog::query()->where('action', 'open')->sole()->purpose)->toBe('Abmahnung prüfen');

    expect(fn () => $archive->open($entry, $admin, '   '))->toThrow(RuntimeException::class);
});

test('without a key nothing is archived and the business flow continues', function () {
    config()->set('archive.key', null);
    $pr = PressRelease::factory()->create();

    $entry = app(EvidenceArchive::class)->record(ArchiveEvent::GdprChange, $pr, $pr->id, ArchiveReasonCategory::Gdpr, 'system', null, []);

    expect($entry)->toBeNull()
        ->and(ArchiveEntry::query()->count())->toBe(0)
        ->and(app(EvidenceArchive::class)->isConfigured())->toBeFalse();
});

test('entries are append-only except legal hold, retention and tombstone', function () {
    $admin = archiveAdmin();
    $pr = PressRelease::factory()->create();
    $archive = app(EvidenceArchive::class);
    $entry = $archive->record(ArchiveEvent::LabelCorrected, $pr, $pr->id, ArchiveReasonCategory::Correction, 'admin', $admin->id, []);

    expect(fn () => $entry->update(['event' => 'gdpr_change']))->toThrow(LogicException::class)
        ->and(fn () => $entry->delete())->toThrow(LogicException::class);

    // Der abgewiesene Versuch lässt das Modell schmutzig zurück — frisch laden.
    $entry = $entry->fresh();
    $archive->setLegalHold($entry, $admin, 'Abmahnung Az. 12/2026');
    expect($entry->fresh()->legal_hold)->toBeTrue()
        ->and($entry->fresh()->legal_hold_set_by)->toBe($admin->id);

    $this->travel(2)->years();
    $archive->releaseLegalHold($entry->fresh(), $admin, 'Verfahren beendet');
    $released = $entry->fresh();

    expect($released->legal_hold)->toBeFalse()
        ->and($released->retain_until->toDateString())->toBe(now()->endOfYear()->addYears(3)->toDateString());
});

test('purge removes due payloads, keeps tombstones, respects legal hold, and reconcile undoes a restore', function () {
    /** @var TestCase $this */
    $admin = archiveAdmin();
    $pr = PressRelease::factory()->create();
    $archive = app(EvidenceArchive::class);

    $due = $archive->record(ArchiveEvent::ImageRemoved, $pr, $pr->id, ArchiveReasonCategory::CustomerRequest, 'customer', null, ['x' => 1]);
    $held = $archive->record(ArchiveEvent::ImageRemoved, $pr, $pr->id, ArchiveReasonCategory::CustomerRequest, 'customer', null, ['x' => 2]);
    $archive->setLegalHold($held, $admin, 'Streit');
    $duePath = $due->payload_path;

    $this->travelTo(now()->endOfYear()->addYears(3)->addDay());

    $this->artisan('archive:purge', ['--dry-run' => true])->expectsOutputToContain('Fällig (Trockenlauf): 1')->assertSuccessful();
    expect(Storage::disk('archive')->exists($duePath))->toBeTrue();

    $this->artisan('archive:purge')->expectsOutputToContain('Gelöscht: 1')->assertSuccessful();

    expect($due->fresh()->isTombstoned())->toBeTrue()
        ->and($due->fresh()->payload_path)->toBe($duePath)
        ->and(Storage::disk('archive')->exists($duePath))->toBeFalse()
        ->and($held->fresh()->isTombstoned())->toBeFalse()
        ->and(fn () => $archive->open($due->fresh(), $admin, 'x'))->toThrow(RuntimeException::class);

    $this->artisan('archive:export-tombstones')->expectsOutputToContain('1 Einträge')->assertSuccessful();
    $export = json_decode((string) Storage::disk('archive')->get(config('archive.tombstone_export_path')), true);
    expect($export['entries'][0]['id'])->toBe($due->id);

    // „Restore": Sicherung bringt Zeile und Datei zurück.
    ArchiveEntry::withoutEvents(fn () => ArchiveEntry::query()->whereKey($due->id)->update(['deleted_at' => null]));
    Storage::disk('archive')->put($duePath, 'restored-cipher');

    $this->artisan('archive:reconcile-after-restore')->expectsOutputToContain('1 Einträge erneut')->assertSuccessful();

    expect($due->fresh()->isTombstoned())->toBeTrue()
        ->and(Storage::disk('archive')->exists($duePath))->toBeFalse();
});

test('removing a published image archives original, snapshot and confirmations and then drops the local evidence files', function () {
    ['pr' => $pr, 'image' => $image] = archivePublishedWithImage();
    $admin = archiveAdmin();

    app(PressReleaseImageRemover::class)->remove($image, $admin);

    $entry = ArchiveEntry::query()->where('event', 'image_removed')->sole();
    expect($entry->subject_id)->toBe($image->id)
        ->and($entry->press_release_id)->toBe($pr->id)
        ->and($entry->actor_type)->toBe('admin')
        ->and($entry->summary['files'])->toBe(3)
        ->and(Storage::disk('local')->exists($image->original_path))->toBeFalse()
        ->and(Storage::disk('local')->exists($image->published_snapshot_path))->toBeFalse()
        ->and(PressReleaseImage::withTrashed()->whereKey($image->id)->sole()->trashed())->toBeTrue()
        ->and(ImageRightsConfirmation::query()->count())->toBe(1);

    $manifest = app(EvidenceArchive::class)->manifest($entry, $admin, 'Test');
    expect($manifest['image']['copyright'])->toBe('Anna Beispiel')
        ->and($manifest['confirmations'])->toHaveCount(1)
        ->and($manifest['credit_line'])->toBe('Foto: Anna Beispiel');

    $zip = new ZipArchive;
    $temp = tempnam(sys_get_temp_dir(), 'pk-test-');
    file_put_contents($temp, app(EvidenceArchive::class)->open($entry, $admin, 'Test'));
    $zip->open($temp);
    expect($zip->getFromName('original.jpg'))->toBe('original-bytes')
        ->and($zip->getFromName('published.jpg'))->toBe('snapshot-bytes')
        ->and($zip->getFromName('published.json'))->toContain('Foto: Anna Beispiel');
    $zip->close();
    unlink($temp);
});

test('depublication, admin removal and admin status change archive the last published state', function () {
    ['pr' => $pr] = archivePublishedWithImage();
    $this->actingAs(archiveAdmin());

    app(PressReleaseService::class)->depublish($pr);

    $entry = ArchiveEntry::query()->where('event', 'pm_depublished')->sole();
    expect($entry->reason_category)->toBe(ArchiveReasonCategory::CustomerRequest)
        ->and($entry->summary['images'])->toBe(1)
        ->and($entry->summary['files'])->toBe(1);

    $manifest = app(EvidenceArchive::class)->manifest($entry, auth()->user(), 'Test');
    expect($manifest['press_release']['title'])->toBe($pr->title)
        ->and($manifest['press_release']['company']['name'])->toBe('Beispiel AG')
        ->and($manifest['images'][0]['credit_line'])->toBe('Foto: Anna Beispiel');

    ['pr' => $second] = archivePublishedWithImage();
    $originalTitle = $second->title;
    app(PressReleaseService::class)->deleteFromAdmin($second);

    $removed = ArchiveEntry::query()->where('press_release_id', $second->id)->sole();
    expect(app(EvidenceArchive::class)->manifest($removed, auth()->user(), 'Test')['press_release']['title'])->toBe($originalTitle)
        ->and($second->fresh()->text)->toContain('entfernt');

    ['pr' => $third] = archivePublishedWithImage();
    app(PressReleaseService::class)->changeStatusFromAdmin($third, PressReleaseStatus::Rejected, 'Nachträglich zurückgezogen');

    expect(ArchiveEntry::query()->where('press_release_id', $third->id)->sole()->reason_category)->toBe(ArchiveReasonCategory::OwnDecision);
});

test('an anonymisation archives the before and after values with the request reference', function () {
    ['pr' => $pr] = archivePublishedWithImage();
    $pr->forceFill(['text' => '<p>Max Mustermann war dabei.</p>'])->save();

    app(AnonymizationService::class)->execute($pr, ['Max Mustermann']);

    $entry = ArchiveEntry::query()->where('event', 'gdpr_change')->sole();
    $manifest = app(EvidenceArchive::class)->manifest($entry, archiveAdmin(), 'Auskunft Art. 15');

    expect($manifest['before']['text'])->toContain('Max Mustermann')
        ->and($manifest['after']['text'])->not->toContain('Max Mustermann')
        ->and($entry->reason_category)->toBe(ArchiveReasonCategory::Gdpr);
});

test('a label correction is mirrored as archive entry', function () {
    ['image' => $image] = archivePublishedWithImage();
    $admin = archiveAdmin();

    app(ImageCorrectionService::class)->correctCredit($image, $admin, 'Neuer Nachweis', 'Einwand des Fotografen');

    $entry = ArchiveEntry::query()->where('event', 'label_corrected')->sole();
    expect($entry->summary['field'])->toBe('copyright')
        ->and(app(EvidenceArchive::class)->manifest($entry, $admin, 'Test')['correction']['new_value'])->toBe('Neuer Nachweis');
});

test('the admin archive page lists entries and downloads only with a purpose', function () {
    /** @var TestCase $this */
    $admin = archiveAdmin();
    $pr = PressRelease::factory()->create();
    $entry = app(EvidenceArchive::class)->record(ArchiveEvent::PressReleaseDepublished, $pr, $pr->id, ArchiveReasonCategory::OwnDecision, 'admin', $admin->id, ['t' => 1]);

    $this->actingAs($admin)->get('https://pressekonto.test/admin/archive')
        ->assertSuccessful()
        ->assertSeeText('Meldung depubliziert')
        ->assertSeeText('aufbewahrt');

    $this->actingAs($admin)->get('https://pressekonto.test/admin/archive/'.$entry->id.'/download')
        ->assertSuccessful()
        ->assertSeeText('Zweck des Zugriffs');

    expect(ArchiveAccessLog::query()->count())->toBe(0);

    $this->actingAs($admin)->get('https://pressekonto.test/admin/archive/'.$entry->id.'/download?purpose=Auskunft')
        ->assertSuccessful()
        ->assertHeader('Content-Type', 'application/zip');

    expect(ArchiveAccessLog::query()->sole()->purpose)->toBe('Auskunft');

    $customer = User::factory()->create(['is_active' => true]);
    $customer->assignRole('customer');
    $this->actingAs($customer)->get('https://pressekonto.test/admin/archive')->assertForbidden();
});