Add webhook endpoint for gate certification intake

.env.testing

@@ -0,0 +1,12 @@
+APP_NAME="Synapse Sentinel Core"
+APP_ENV=testing
+APP_KEY=base64:uu9NaQgjKWHuLvyg3EZvLNYjVgrkunyitUMq88LDf4c=
+APP_DEBUG=true
+APP_URL=http://localhost
+
+DB_CONNECTION=sqlite
+DB_DATABASE=:memory:
+
+CACHE_STORE=array
+QUEUE_CONNECTION=sync
+SESSION_DRIVER=array

app/Events/CertificationCompleted.php

@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Events;
+
+use Thunk\Verbs\Event;
+
+class CertificationCompleted extends Event
+{
+    public function __construct(
+        public string $repository,
+        public string $sha,
+        public string $verdict,
+        public ?string $reason = null,
+        public ?array $checks = null,
+        public ?string $triggeredBy = null,
+        public ?int $prNumber = null,
+    ) {}
+}

app/Http/Controllers/WebhookController.php

@@ -0,0 +1,27 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers;
+
+use App\Events\CertificationCompleted;
+use App\Http\Requests\GateWebhookRequest;
+use Illuminate\Http\JsonResponse;
+
+class WebhookController extends Controller
+{
+    public function gate(GateWebhookRequest $request): JsonResponse
+    {
+        CertificationCompleted::fire(
+            repository: $request->validated('repository'),
+            sha: $request->validated('sha'),
+            verdict: $request->validated('verdict'),
+            reason: $request->validated('reason'),
+            checks: $request->validated('checks'),
+            triggeredBy: $request->validated('triggered_by'),
+            prNumber: $request->validated('pr_number'),
+        );
+
+        return response()->json(['status' => 'accepted']);
+    }
+}

app/Http/Requests/GateWebhookRequest.php

@@ -0,0 +1,32 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class GateWebhookRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'repository' => ['required', 'string'],
+            'sha' => ['required', 'string'],
+            'verdict' => ['required', Rule::in(['approved', 'rejected', 'escalate'])],
+            'reason' => ['nullable', 'string'],
+            'checks' => ['nullable', 'array'],
+            'triggered_by' => ['nullable', 'string'],
+            'pr_number' => ['nullable', 'integer'],
+        ];
+    }
+}

bootstrap/app.php

@@ -7,6 +7,7 @@
 return Application::configure(basePath: dirname(__DIR__))
     ->withRouting(
         web: __DIR__.'/../routes/web.php',
+        api: __DIR__.'/../routes/api.php',
         commands: __DIR__.'/../routes/console.php',
         health: '/up',
     )

routes/api.php

@@ -0,0 +1,9 @@
+<?php
+
+declare(strict_types=1);
+
+use App\Http\Controllers\WebhookController;
+use Illuminate\Support\Facades\Route;
+
+Route::post('/webhooks/gate', [WebhookController::class, 'gate'])
+    ->name('webhooks.gate');

tests/Feature/ExampleTest.php

@@ -1,7 +1,17 @@
 <?php
 
-test('the application returns a successful response', function () {
-    $response = $this->get('/');
+declare(strict_types=1);
 
-    $response->assertStatus(200);
+describe('Application', function () {
+    it('returns a successful response for the homepage', function () {
+        $response = $this->get('/');
+
+        $response->assertOk();
+    });
+
+    it('has a health check endpoint', function () {
+        $response = $this->get('/up');
+
+        $response->assertOk();
+    });
 });

tests/Feature/WebhookGateTest.php

@@ -0,0 +1,72 @@
+<?php
+
+declare(strict_types=1);
+
+describe('POST /api/webhooks/gate', function () {
+    it('accepts valid gate certification payload', function () {
+        $payload = [
+            'repository' => 'conduit-ui/pr',
+            'sha' => 'abc123def456',
+            'verdict' => 'approved',
+            'reason' => 'All checks passed',
+            'checks' => [
+                'tests' => ['status' => 'pass', 'coverage' => 100],
+                'security' => ['status' => 'pass'],
+                'syntax' => ['status' => 'pass'],
+            ],
+            'triggered_by' => 'pull_request',
+            'pr_number' => 42,
+        ];
+
+        $response = $this->postJson('/api/webhooks/gate', $payload);
+
+        $response->assertSuccessful();
+        $response->assertJson(['status' => 'accepted']);
+    });
+
+    it('rejects payload missing required repository field', function () {
+        $payload = [
+            'sha' => 'abc123',
+            'verdict' => 'approved',
+        ];
+
+        $response = $this->postJson('/api/webhooks/gate', $payload);
+
+        $response->assertUnprocessable();
+        $response->assertJsonValidationErrors(['repository']);
+    });
+
+    it('rejects payload with invalid verdict value', function () {
+        $payload = [
+            'repository' => 'conduit-ui/pr',
+            'sha' => 'abc123',
+            'verdict' => 'invalid_verdict',
+        ];
+
+        $response = $this->postJson('/api/webhooks/gate', $payload);
+
+        $response->assertUnprocessable();
+        $response->assertJsonValidationErrors(['verdict']);
+    });
+
+    it('stores certification event via Laravel Verbs', function () {
+        $payload = [
+            'repository' => 'conduit-ui/pr',
+            'sha' => 'abc123def456',
+            'verdict' => 'approved',
+            'reason' => 'All checks passed',
+            'checks' => [
+                'tests' => ['status' => 'pass', 'coverage' => 100],
+            ],
+            'triggered_by' => 'push',
+        ];
+
+        $response = $this->postJson('/api/webhooks/gate', $payload);
+
+        $response->assertSuccessful();
+
+        $this->assertDatabaseHas('verb_events', [
+            'type' => 'App\Events\CertificationCompleted',
+        ]);
+    });
+});

tests/Pest.php

@@ -12,7 +12,7 @@
 */
 
 pest()->extend(Tests\TestCase::class)
- // ->use(Illuminate\Foundation\Testing\RefreshDatabase::class)
+    ->use(Illuminate\Foundation\Testing\RefreshDatabase::class)
     ->in('Feature');
 
 /*

tests/Unit/ExampleTest.php

@@ -1,5 +1,9 @@
 <?php
 
-test('that true is true', function () {
-    expect(true)->toBeTrue();
+declare(strict_types=1);
+
+describe('Unit', function () {
+    it('confirms basic assertions work', function () {
+        expect(true)->toBeTrue();
+    });
 });