up

src/Policy/__Tests/StellaOps.Policy.Tests/PolicyValidationCliTests.cs

@@ -0,0 +1,55 @@
+using System;
+using System.IO;
+using System.Threading.Tasks;
+using FluentAssertions;
+using StellaOps.Policy;
+using Xunit;
+
+namespace StellaOps.Policy.Tests;
+
+public class PolicyValidationCliTests
+{
+    [Fact]
+    public async Task RunAsync_EmitsCanonicalDigest_OnValidPolicy()
+    {
+        var tmp = Path.GetTempFileName();
+        try
+        {
+            await File.WriteAllTextAsync(tmp, """
+            {
+              "apiVersion": "spl.stellaops/v1",
+              "kind": "Policy",
+              "metadata": { "name": "demo" },
+              "spec": {
+                "defaultEffect": "deny",
+                "statements": [
+                  { "id": "ALLOW", "effect": "allow", "match": { "resource": "*", "actions": ["read"] } }
+                ]
+              }
+            }
+            """);
+
+            var options = new PolicyValidationCliOptions
+            {
+                Inputs = new[] { tmp },
+                OutputJson = false,
+                Strict = false,
+            };
+
+            using var output = new StringWriter();
+            using var error = new StringWriter();
+            var cli = new PolicyValidationCli(output, error);
+
+            var exit = await cli.RunAsync(options);
+
+            exit.Should().Be(0);
+            var text = output.ToString();
+            text.Should().Contain("OK");
+            text.Should().Contain("canonical.spl.digest:");
+        }
+        finally
+        {
+            File.Delete(tmp);
+        }
+    }
+}