Add wiring-level test coverage for the Octane reset listener

[drbyte]

Add wiring-level test coverage for the Octane reset listener

PermissionServiceProvider::registerOctaneListener() wires two listeners for Laravel\Octane\Contracts\OperationTerminated, resetting the permissions team ID on every request, and (opt-in via permission.register_octane_reset_listener) clearing the in-memory permissions collection, but neither had any test coverage. The registration code bails out early via if ($this->app->runningInConsole() || ...), and since Pest/Testbench always runs under the CLI SAPI, runningInConsole() is always true in the test suite so this code path was silently never exercised.

This PR adds real coverage without requiring a running Swoole/RoadRunner server:

• Adds laravel/octane as a dev-only dependency: it's pure PHP with no extension requirement (swoole/roadrunner are only needed to actually serve traffic via octane:start, not to use Octane's Contracts/Events classes).
• tests/Integration/OctaneListenerTest.php forces Application::$isRunningInConsole to false via reflection (the real, memoized gate Laravel checks — see Illuminate\Foundation\Application::runningInConsole()), invokes the real (protected) registerOctaneListener() method, and dispatches an actual Laravel\Octane\Events\RequestTerminated event to exercise the genuine listener wiring end-to-end.
• Each test dispatches the event with a cloned sandbox app distinct from the base app (clone app() + forgetInstance(PermissionRegistrar::class)), so the assertions only pass if the listener acts on $event->sandbox() specifically, not $event->app(). The tests were confirmed to fail when the production code was temporarily changed to use $event->app() instead.

Also fixes a related correctness issue: registerOctaneListener() accessed $event->sandbox as a property, which isn't part of the OperationTerminated interface (only sandbox(): Application is). Adding laravel/octane as a dependency let PHPStan finally resolve the class and catch this once the stale @phpstan-ignore-next-line suppressions were removed. Fixed by calling $event->sandbox() instead — no behavior change, but now type-checked.

Coverage added:

• Listener is not registered when octane.listeners is disabled.
• PermissionRegistrar::getPermissionsTeamId() resets to null on the sandbox instance on operation termination, while the base app's instance is untouched.
• The permissions collection is cleared on the sandbox instance only when permission.register_octane_reset_listener is enabled, and left untouched (on both instances) when it isn't.

Maintenance trade-off: the tests reach into a protected framework property (Application::$isRunningInConsole) and a protected provider method via reflection. If Laravel renames that property, or Octane changes RequestTerminated's constructor signature, these tests could break for reasons unrelated to an actual regression here ... but we keep in sync with Laravel releases already.

[Copilot]

Pull request overview

Adds integration-level coverage to ensure the package’s Octane “operation terminated” listeners are actually wired and act on the Octane sandbox container, while also tightening the listener implementation to use the OperationTerminated contract API.

Changes:

• Add a new Pest integration test that forces the non-console code path, registers the real Octane listeners via reflection, and dispatches a real RequestTerminated event against a cloned sandbox container.
• Fix registerOctaneListener() to call $event->sandbox() (contract method) instead of accessing $event->sandbox (non-contract property), and remove PHPStan suppressions.
• Add laravel/octane as a dev dependency to make the Octane contracts/events available in tests and for static analysis.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
tests/Integration/OctaneListenerTest.php	Adds wiring-level integration tests validating the Octane listener registration gates and sandbox-only effects.
src/PermissionServiceProvider.php	Corrects Octane listener implementation to use OperationTerminated::sandbox() and removes now-unneeded PHPStan ignores.
composer.json	Adds Octane as a dev-only dependency to support tests and type resolution.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[drbyte]

Related: #2952