alrahma_sunday_school_api/tests/Feature/Api/V1/FullSurface/ApiBatch18CrossModuleBusinessInvariantRegisterTest.php

<?php

namespace Tests\Feature\Api\V1\FullSurface;

use Tests\Feature\Api\V1\FullSurface\Support\FullSurfaceE2EContractCase;

class ApiBatch18CrossModuleBusinessInvariantRegisterTest extends FullSurfaceE2EContractCase
{
    public function test_batch18_business_invariant_route_families_remain_present(): void
    {
        $families = [
            'identity immutability' => ['users', 'students', 'parents'],
            'role and privilege boundaries' => ['roles', 'permissions', 'admin'],
            'consent and communication compliance' => ['notification', 'message', 'email', 'whatsapp'],
            'export auditability' => ['export', 'download', 'print', 'report'],
            'safety and medical minimization' => ['emergency', 'guardian', 'incident', 'attendance'],
            'finance dispute integrity' => ['payment', 'refund', 'transaction', 'finance'],
            'class capacity and schedule safety' => ['classes', 'schedule', 'calendar', 'assign'],
            'external integration callbacks' => ['paypal', 'payment-notification', 'verify-payment', 'sync'],
            'file quarantine safety' => ['upload', 'import', 'document', 'media'],
        ];

        foreach ($families as $label => $needles) {
            $this->assertNotEmpty(
                $this->apiRoutesContainingAny($needles),
                'Batch 18 invariant family missing or renamed without updating risk register: '.$label
            );
        }
    }
}