Track VersionCreated event

Author: stevenrombauts

src/Audit/AuditRecordType.php

@@ -23,6 +23,7 @@ enum AuditRecordType: string
     case PackageCreated = 'package_created';
     case PackageDeleted = 'package_deleted';
     case CanonicalUrlChanged = 'canonical_url_changed';
+    case VersionCreated = 'version_created';
     case VersionDeleted = 'version_deleted';
 
     case VersionReferenceChanged = 'version_reference_changed';

src/Entity/AuditRecord.php

@@ -80,6 +80,13 @@ public static function packageTransferred(Package $package, ?User $actor, array
         return new self(AuditRecordType::PackageTransferred, ['name' => $package->getName(), 'actor' => self::getUserData($actor, 'admin'), 'previous_maintainers' => $previous, 'current_maintainers' => $current], $actor?->getId(), $package->getVendor(), $package->getId());
     }
 
+    public static function versionCreated(Version $version, ?User $actor): self
+    {
+        $package = $version->getPackage();
+
+        return new self(AuditRecordType::VersionCreated, ['name' => $package->getName(), 'version' => $version->getVersion(), 'actor' => self::getUserData($actor, 'automation')], $actor?->getId(), $package->getVendor(), $package->getId());
+    }
+
     public static function versionDeleted(Version $version, ?User $actor): self
     {
         $package = $version->getPackage();

src/EventListener/VersionListener.php

@@ -25,6 +25,7 @@
 
 #[AsEntityListener(event: 'preRemove', entity: Version::class)]
 #[AsEntityListener(event: 'preUpdate', entity: Version::class)]
+#[AsEntityListener(event: 'postPersist', entity: Version::class)]
 #[AsEntityListener(event: 'postUpdate', entity: Version::class)]
 class VersionListener
 {
@@ -39,6 +40,15 @@ public function __construct(
     ) {
     }
 
+    /**
+     * @param LifecycleEventArgs<EntityManager> $event
+     */
+    public function postPersist(Version $version, LifecycleEventArgs $event): void
+    {
+        $record = AuditRecord::versionCreated($version, $this->getUser());
+        $this->getEM()->getRepository(AuditRecord::class)->insert($record);
+    }
+
     /**
      * @param LifecycleEventArgs<EntityManager> $event
      */

tests/Audit/VersionAuditRecordTest.php

@@ -13,6 +13,7 @@
 namespace App\Tests\Controller;
 
 use App\Audit\AuditRecordType;
+use App\Entity\AuditRecord;
 use App\Entity\Package;
 use App\Entity\Version;
 use Doctrine\DBAL\Connection;
@@ -36,35 +37,42 @@ protected function tearDown(): void
         parent::tearDown();
     }
 
-    public function testVersionChangesGetRecorded(): void
+    public function testVersionCreationGetsRecorded(): void
     {
         $container = static::getContainer();
         $em = $container->get(ManagerRegistry::class)->getManager();
 
-        $package = new Package();
-        $package->setRepository('https://github.com/composer/composer');
+        $version = $this->createPackageAndVersion();
+
+        $log = $em->getRepository(AuditRecord::class)->findOneBy([
+            'type' => AuditRecordType::VersionCreated,
+            'packageId' => $version->getPackage()->getId(),
+        ]);
+
+        self::assertNotNull($log, 'No audit record created for new version');
+        self::assertSame('automation', $log->attributes['actor']);
+        self::assertSame('composer', $log->vendor);
+        self::assertEqualsCanonicalizing([
+            'name' => 'composer/composer',
+            'actor' => 'automation',
+            'version' => '1.0.0',
+        ], $log->attributes);
+    }
 
-        $version = new Version();
-        $version->setPackage($package);
-        $version->setName($package->getName());
-        $version->setVersion('1.0.0');
-        $version->setNormalizedVersion('1.0.0.0');
-        $version->setDevelopment(false);
-        $version->setLicense([]);
-        $version->setAutoload([]);
-        $version->setDist(['reference' => 'old-dist-ref', 'type' => 'zip', 'url' => 'https://example.org/dist.zip']);
+    public function testVersionChangesGetRecorded(): void
+    {
+        $container = static::getContainer();
+        $em = $container->get(ManagerRegistry::class)->getManager();
 
-        $em->persist($package);
-        $em->persist($version);
-        $em->flush();
+        $version = $this->createPackageAndVersion();
 
         $version->setDist(['reference' => 'new-dist-ref', 'type' => 'zip', 'url' => 'https://example.org/dist.zip']);
         $version->setSource(['reference' => 'new-source-ref', 'type' => 'git', 'url' => 'git://example.org/dist.zip']);
         $em->persist($version);
         $em->flush();
 
         $logs = $container->get(Connection::class)->fetchAllAssociative('SELECT * FROM audit_log ORDER BY id DESC');
-        self::assertCount(2, $logs); // package creation + version reference change
+        self::assertCount(3, $logs); // package creation + version creation + version reference change
         self::assertSame(AuditRecordType::VersionReferenceChanged->value, $logs[0]['type']);
         self::assertSame('{"name": "composer/composer", "dist_to": "new-dist-ref", "version": "1.0.0", "dist_from": "old-dist-ref", "source_to": "new-source-ref", "source_from": null}', $logs[0]['attributes']);
 
@@ -74,15 +82,15 @@ public function testVersionChangesGetRecorded(): void
         $em->flush();
 
         $logs = $container->get(Connection::class)->fetchAllAssociative('SELECT * FROM audit_log ORDER BY id DESC');
-        self::assertCount(2, $logs); // package creation + version reference change
+        self::assertCount(3, $logs); // package creation + version creation + version reference change
 
         // verify that changing dist only without ref change does not create new audit log and does not crash
         $version->setDist(['reference' => 'new-dist-ref', 'type' => 'zip2', 'url' => 'https://example.org/dist.zip2']);
         $em->persist($version);
         $em->flush();
 
         $logs = $container->get(Connection::class)->fetchAllAssociative('SELECT * FROM audit_log ORDER BY id DESC');
-        self::assertCount(2, $logs); // package creation + version reference change
+        self::assertCount(3, $logs); // package creation + version creation + version reference change
 
         // verify that only reference changes triggers a new audit log
         $version->setDist(['reference' => 'new-dist-ref', 'type' => 'zip3', 'url' => 'https://example.org/dist.zip2']);
@@ -91,13 +99,38 @@ public function testVersionChangesGetRecorded(): void
         $em->flush();
 
         $logs = $container->get(Connection::class)->fetchAllAssociative('SELECT * FROM audit_log ORDER BY id DESC');
-        self::assertCount(2, $logs);
+        self::assertCount(3, $logs);
 
         $em->remove($version);
         $em->flush();
 
         $logs = $container->get(Connection::class)->fetchAllAssociative('SELECT * FROM audit_log ORDER BY id DESC');
-        self::assertCount(3, $logs);
+        self::assertCount(4, $logs);
         self::assertSame(AuditRecordType::VersionDeleted->value, $logs[0]['type']);
     }
+
+    private function createPackageAndVersion(): Version
+    {
+        $container = static::getContainer();
+        $em = $container->get(ManagerRegistry::class)->getManager();
+
+        $package = new Package();
+        $package->setRepository('https://github.com/composer/composer');
+
+        $version = new Version();
+        $version->setPackage($package);
+        $version->setName($package->getName());
+        $version->setVersion('1.0.0');
+        $version->setNormalizedVersion('1.0.0.0');
+        $version->setDevelopment(false);
+        $version->setLicense([]);
+        $version->setAutoload([]);
+        $version->setDist(['reference' => 'old-dist-ref', 'type' => 'zip', 'url' => 'https://example.org/dist.zip']);
+
+        $em->persist($package);
+        $em->persist($version);
+        $em->flush();
+
+        return $version;
+    }
 }