<?php

use App\Models\User;

/**
 * T6.3 — every exception reaching an api/* route gets a consistent JSON
 * envelope, regardless of the client's Accept header, and never a bare
 * unenveloped 500 (bootstrap/app.php).
 */
test('an unauthenticated request to a protected api route gets a 401 JSON envelope', function () {
    $this->postJson('/api/v1/bookings/EVB-DOES-NOT-EXIST/cancel')
        ->assertUnauthorized()
        ->assertJsonStructure(['message']);
});

test('a route model binding miss on an api route gets a 404 JSON envelope', function () {
    $user = User::factory()->create();
    $token = $user->createToken('test')->plainTextToken;

    $this->withHeader('Authorization', "Bearer {$token}")
        ->getJson('/api/v1/bookings/EVB-DOES-NOT-EXIST')
        ->assertNotFound()
        ->assertJsonStructure(['message']);
});

test('an unknown api route gets a 404 JSON envelope, not an HTML page', function () {
    $this->getJson('/api/v1/this-route-does-not-exist')
        ->assertNotFound()
        ->assertJsonStructure(['message']);
});

test('an unsupported HTTP method on a known api route gets a 405 JSON envelope', function () {
    $this->putJson('/api/v1/companies')
        ->assertStatus(405)
        ->assertJsonStructure(['message']);
});