fix: when --seed is used AND code-first is enabled, it still syncs al… (#38)

Fixes an issue where using the --seed flag with code-first mode enabled would not sync all discovered definitions before seeding assignments. The fix ensures that when --seed is used with code-first enabled, all permissions, roles, and capabilities are synced from code-first definitions before applying the configured assignments.

Author: shavonn

src/Commands/SyncCommand.php

@@ -78,7 +78,10 @@ public function handle(
         $isDryRun = (bool) $this->option('dry-run');
         /** @var string|null $guard */
         $guard = $this->option('guard') ?: null;
-        $syncAll = ! $this->option('permissions') && ! $this->option('roles') && ! $this->option('capabilities') && ! $seedOnly;
+        // Sync all if no specific flags passed, or if --seed is used with code-first enabled
+        // This ensures discovered permissions are synced before seeding assignments
+        $syncAll = ! $this->option('permissions') && ! $this->option('roles') && ! $this->option('capabilities')
+            && (! $seedOnly || $codeFirstEnabled);
 
         if ($isDryRun) {
             $this->components->info('Dry run mode - no changes will be made.');

tests/Feature/Commands/SyncCommandTest.php

@@ -264,4 +264,31 @@
         expect($role->hasCapability('test-capability'))->toBeTrue();
         expect($role->hasCapability('another-capability'))->toBeTrue();
     });
+
+    it('syncs all discovered permissions when using --seed with code-first enabled', function () {
+        config(['mandate.code_first.enabled' => true]);
+        config(['mandate.code_first.paths.permissions' => __DIR__.'/../../Fixtures/CodeFirst']);
+        config(['mandate.code_first.paths.roles' => __DIR__.'/../../Fixtures/CodeFirst']);
+
+        // Only assign one permission, but all should be synced
+        config(['mandate.assignments' => [
+            'partial-role' => [
+                'permissions' => ['article:view'],
+            ],
+        ]]);
+
+        $this->artisan('mandate:sync', ['--seed' => true])
+            ->assertSuccessful();
+
+        // All permissions from code-first should be synced, not just those in assignments
+        expect(Permission::where('name', 'article:view')->exists())->toBeTrue();
+        expect(Permission::where('name', 'article:create')->exists())->toBeTrue();
+        expect(Permission::where('name', 'article:edit')->exists())->toBeTrue();
+        expect(Permission::where('name', 'article:delete')->exists())->toBeTrue();
+
+        // But only article:view should be assigned to the role
+        $role = Role::where('name', 'partial-role')->first();
+        expect($role->hasPermission('article:view'))->toBeTrue();
+        expect($role->hasPermission('article:create'))->toBeFalse();
+    });
 });