Add wiring-level test coverage for the Octane reset listener

`PermissionServiceProvider::registerOctaneListener()` wires two listeners for `Laravel\Octane\Contracts\OperationTerminated` — resetting the permissions team ID on every request, and (opt-in via `permission.register_octane_reset_listener`) clearing the in-memory permissions collection — but neither had any test coverage. The registration code bails out early via `if ($this->app->runningInConsole() || ...)`, and since Pest/Testbench always runs under the CLI SAPI, `runningInConsole()` is always `true` in the test suite, so this code path was silently never exercised.

This PR adds real coverage without requiring a running Swoole/RoadRunner server:

- Adds `laravel/octane` as a **dev-only** dependency: it's pure PHP with no extension requirement — swoole/roadrunner are only needed to actually *serve* traffic via `octane:start`, not to use Octane's `Contracts`/`Events` classes.
- `tests/Integration/OctaneListenerTest.php` forces `Application::$isRunningInConsole` to `false` via reflection (the real, memoized gate Laravel checks (see `Illuminate\Foundation\Application::runningInConsole()`), invokes the real (protected) `registerOctaneListener()` method, and dispatches an actual `Laravel\Octane\Events\RequestTerminated` event to exercise the genuine listener wiring end-to-end.

**Coverage added:**
- Listener is not registered when `octane.listeners` is disabled.
- `PermissionRegistrar::getPermissionsTeamId()` resets to `null` on operation termination.
- The permissions collection is cleared on termination only when `permission.register_octane_reset_listener` is enabled, and left untouched when it isn't.

**Maintenance Trade-off:** the tests reach into a protected framework property (`Application::$isRunningInConsole`) and a protected provider method via reflection. If Laravel renames that property, or Octane changes `RequestTerminated`'s constructor signature, these tests could break for reasons unrelated to an actual regression here ... but we keep in sync with Laravel releases already.

**No behavior change** — this is test-only coverage plus a dev dependency.

Author: drbyte

composer.json

@@ -31,6 +31,7 @@
     },
     "require-dev": {
         "larastan/larastan": "^3.9",
+        "laravel/octane": "^2.0",
         "laravel/passport": "^13.0",
         "laravel/pint": "^1.0",
         "orchestra/testbench": "^10.0|^11.0",

tests/Integration/OctaneListenerTest.php

@@ -0,0 +1,96 @@
+<?php
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Response;
+use Laravel\Octane\Events\RequestTerminated;
+use Spatie\Permission\PermissionRegistrar;
+use Spatie\Permission\PermissionServiceProvider;
+
+/**
+ * PermissionServiceProvider::registerOctaneListener() bails out early when
+ * running in console. Pest/Testbench always runs under the CLI SAPI,
+ * so runningInConsole() would otherwise always be true. Here we force it false
+ * (it's memoized on Application, checked before falling back to PHP_SAPI)
+ * so the real registration code path actually runs, then invoke it directly
+ * since it's protected and normally only called from packageBooted().
+ */
+function registerOctaneListenerForTest(): void
+{
+    $app = app();
+
+    $isRunningInConsole = new ReflectionProperty($app, 'isRunningInConsole');
+    $isRunningInConsole->setAccessible(true);
+    $isRunningInConsole->setValue($app, false);
+
+    $registerOctaneListener = new ReflectionMethod(PermissionServiceProvider::class, 'registerOctaneListener');
+    $registerOctaneListener->setAccessible(true);
+    $registerOctaneListener->invoke(new PermissionServiceProvider($app));
+}
+
+function dispatchOctaneRequestTerminated(): void
+{
+    event(new RequestTerminated(app(), app(), Request::create('/'), new Response()));
+}
+
+it('does not register octane listeners when octane.listeners is not enabled', function () {
+    config(['octane.listeners' => false]);
+
+    registerOctaneListenerForTest();
+
+    app(PermissionRegistrar::class)->setPermissionsTeamId(1);
+
+    dispatchOctaneRequestTerminated();
+
+    expect(app(PermissionRegistrar::class)->getPermissionsTeamId())->toBe(1);
+});
+
+it('resets the permissions team id when an octane operation terminates', function () {
+    config(['octane.listeners' => true]);
+
+    registerOctaneListenerForTest();
+
+    app(PermissionRegistrar::class)->setPermissionsTeamId(1);
+    expect(app(PermissionRegistrar::class)->getPermissionsTeamId())->toBe(1);
+
+    dispatchOctaneRequestTerminated();
+
+    expect(app(PermissionRegistrar::class)->getPermissionsTeamId())->toBeNull();
+});
+
+it('clears the loaded permissions collection on octane termination when register_octane_reset_listener is enabled', function () {
+    config([
+        'octane.listeners' => true,
+        'permission.register_octane_reset_listener' => true,
+    ]);
+
+    registerOctaneListenerForTest();
+
+    $permissions = new ReflectionProperty(PermissionRegistrar::class, 'permissions');
+    $permissions->setAccessible(true);
+
+    app(PermissionRegistrar::class)->getPermissions();
+    expect($permissions->getValue(app(PermissionRegistrar::class)))->not->toBeNull();
+
+    dispatchOctaneRequestTerminated();
+
+    expect($permissions->getValue(app(PermissionRegistrar::class)))->toBeNull();
+});
+
+it('does not clear the loaded permissions collection on octane termination unless register_octane_reset_listener is enabled', function () {
+    config([
+        'octane.listeners' => true,
+        'permission.register_octane_reset_listener' => false,
+    ]);
+
+    registerOctaneListenerForTest();
+
+    $permissions = new ReflectionProperty(PermissionRegistrar::class, 'permissions');
+    $permissions->setAccessible(true);
+
+    app(PermissionRegistrar::class)->getPermissions();
+    expect($permissions->getValue(app(PermissionRegistrar::class)))->not->toBeNull();
+
+    dispatchOctaneRequestTerminated();
+
+    expect($permissions->getValue(app(PermissionRegistrar::class)))->not->toBeNull();
+});