up

src/AirGap/StellaOps.AirGap.Storage.Postgres.Tests/AirGapPostgresFixture.cs

@@ -0,0 +1,30 @@
+using System.Reflection;
+using StellaOps.AirGap.Storage.Postgres;
+using StellaOps.Infrastructure.Postgres.Testing;
+using Xunit;
+
+namespace StellaOps.AirGap.Storage.Postgres.Tests;
+
+/// <summary>
+/// PostgreSQL integration test fixture for the AirGap module.
+/// Runs migrations from embedded resources and provides test isolation.
+/// </summary>
+public sealed class AirGapPostgresFixture : PostgresIntegrationFixture, ICollectionFixture<AirGapPostgresFixture>
+{
+    protected override Assembly? GetMigrationAssembly()
+        => typeof(AirGapDataSource).Assembly;
+
+    protected override string GetModuleName() => "AirGap";
+
+    protected override string? GetResourcePrefix() => "Migrations";
+}
+
+/// <summary>
+/// Collection definition for AirGap PostgreSQL integration tests.
+/// Tests in this collection share a single PostgreSQL container instance.
+/// </summary>
+[CollectionDefinition(Name)]
+public sealed class AirGapPostgresCollection : ICollectionFixture<AirGapPostgresFixture>
+{
+    public const string Name = "AirGapPostgres";
+}

src/AirGap/StellaOps.AirGap.Storage.Postgres.Tests/PostgresAirGapStateStoreTests.cs

@@ -0,0 +1,167 @@
+using FluentAssertions;
+using Microsoft.Extensions.Logging.Abstractions;
+using Microsoft.Extensions.Options;
+using StellaOps.AirGap.Controller.Domain;
+using StellaOps.AirGap.Storage.Postgres;
+using StellaOps.AirGap.Storage.Postgres.Repositories;
+using StellaOps.AirGap.Time.Models;
+using StellaOps.Infrastructure.Postgres.Options;
+using Xunit;
+
+namespace StellaOps.AirGap.Storage.Postgres.Tests;
+
+[Collection(AirGapPostgresCollection.Name)]
+public sealed class PostgresAirGapStateStoreTests : IAsyncLifetime
+{
+    private readonly AirGapPostgresFixture _fixture;
+    private readonly PostgresAirGapStateStore _store;
+    private readonly AirGapDataSource _dataSource;
+    private readonly string _tenantId = "tenant-" + Guid.NewGuid().ToString("N")[..8];
+
+    public PostgresAirGapStateStoreTests(AirGapPostgresFixture fixture)
+    {
+        _fixture = fixture;
+        var options = Options.Create(new PostgresOptions
+        {
+            ConnectionString = fixture.ConnectionString,
+            SchemaName = AirGapDataSource.DefaultSchemaName,
+            AutoMigrate = false
+        });
+
+        _dataSource = new AirGapDataSource(options, NullLogger<AirGapDataSource>.Instance);
+        _store = new PostgresAirGapStateStore(_dataSource, NullLogger<PostgresAirGapStateStore>.Instance);
+    }
+
+    public async Task InitializeAsync()
+    {
+        await _fixture.TruncateAllTablesAsync();
+    }
+
+    public async Task DisposeAsync()
+    {
+        await _dataSource.DisposeAsync();
+    }
+
+    [Fact]
+    public async Task GetAsync_ReturnsDefaultStateForNewTenant()
+    {
+        // Act
+        var state = await _store.GetAsync(_tenantId);
+
+        // Assert
+        state.Should().NotBeNull();
+        state.TenantId.Should().Be(_tenantId);
+        state.Sealed.Should().BeFalse();
+        state.PolicyHash.Should().BeNull();
+    }
+
+    [Fact]
+    public async Task SetAndGet_RoundTripsState()
+    {
+        // Arrange
+        var timeAnchor = new TimeAnchor(
+            DateTimeOffset.UtcNow,
+            "tsa.example.com",
+            "RFC3161",
+            "sha256:fingerprint123",
+            "sha256:tokendigest456");
+
+        var state = new AirGapState
+        {
+            Id = Guid.NewGuid().ToString("N"),
+            TenantId = _tenantId,
+            Sealed = true,
+            PolicyHash = "sha256:policy789",
+            TimeAnchor = timeAnchor,
+            LastTransitionAt = DateTimeOffset.UtcNow,
+            StalenessBudget = new StalenessBudget(1800, 3600),
+            DriftBaselineSeconds = 5,
+            ContentBudgets = new Dictionary<string, StalenessBudget>
+            {
+                ["advisories"] = new StalenessBudget(7200, 14400),
+                ["vex"] = new StalenessBudget(3600, 7200)
+            }
+        };
+
+        // Act
+        await _store.SetAsync(state);
+        var fetched = await _store.GetAsync(_tenantId);
+
+        // Assert
+        fetched.Should().NotBeNull();
+        fetched.Sealed.Should().BeTrue();
+        fetched.PolicyHash.Should().Be("sha256:policy789");
+        fetched.TimeAnchor.Source.Should().Be("tsa.example.com");
+        fetched.TimeAnchor.Format.Should().Be("RFC3161");
+        fetched.StalenessBudget.WarningSeconds.Should().Be(1800);
+        fetched.StalenessBudget.BreachSeconds.Should().Be(3600);
+        fetched.DriftBaselineSeconds.Should().Be(5);
+        fetched.ContentBudgets.Should().HaveCount(2);
+        fetched.ContentBudgets["advisories"].WarningSeconds.Should().Be(7200);
+    }
+
+    [Fact]
+    public async Task SetAsync_UpdatesExistingState()
+    {
+        // Arrange
+        var state1 = new AirGapState
+        {
+            Id = Guid.NewGuid().ToString("N"),
+            TenantId = _tenantId,
+            Sealed = false,
+            TimeAnchor = TimeAnchor.Unknown,
+            StalenessBudget = StalenessBudget.Default
+        };
+
+        var state2 = new AirGapState
+        {
+            Id = state1.Id,
+            TenantId = _tenantId,
+            Sealed = true,
+            PolicyHash = "sha256:updated",
+            TimeAnchor = new TimeAnchor(DateTimeOffset.UtcNow, "updated-source", "rfc3161", "", ""),
+            LastTransitionAt = DateTimeOffset.UtcNow,
+            StalenessBudget = new StalenessBudget(600, 1200)
+        };
+
+        // Act
+        await _store.SetAsync(state1);
+        await _store.SetAsync(state2);
+        var fetched = await _store.GetAsync(_tenantId);
+
+        // Assert
+        fetched.Sealed.Should().BeTrue();
+        fetched.PolicyHash.Should().Be("sha256:updated");
+        fetched.TimeAnchor.Source.Should().Be("updated-source");
+        fetched.StalenessBudget.WarningSeconds.Should().Be(600);
+    }
+
+    [Fact]
+    public async Task SetAsync_PersistsContentBudgets()
+    {
+        // Arrange
+        var state = new AirGapState
+        {
+            Id = Guid.NewGuid().ToString("N"),
+            TenantId = _tenantId,
+            TimeAnchor = TimeAnchor.Unknown,
+            StalenessBudget = StalenessBudget.Default,
+            ContentBudgets = new Dictionary<string, StalenessBudget>
+            {
+                ["advisories"] = new StalenessBudget(3600, 7200),
+                ["vex"] = new StalenessBudget(1800, 3600),
+                ["policy"] = new StalenessBudget(900, 1800)
+            }
+        };
+
+        // Act
+        await _store.SetAsync(state);
+        var fetched = await _store.GetAsync(_tenantId);
+
+        // Assert
+        fetched.ContentBudgets.Should().HaveCount(3);
+        fetched.ContentBudgets.Should().ContainKey("advisories");
+        fetched.ContentBudgets.Should().ContainKey("vex");
+        fetched.ContentBudgets.Should().ContainKey("policy");
+    }
+}

src/AirGap/StellaOps.AirGap.Storage.Postgres.Tests/StellaOps.AirGap.Storage.Postgres.Tests.csproj

@@ -0,0 +1,33 @@
+<?xml version="1.0" ?>
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+    <LangVersion>preview</LangVersion>
+    <IsPackable>false</IsPackable>
+    <IsTestProject>true</IsTestProject>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <PackageReference Include="FluentAssertions" Version="6.12.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.0" />
+    <PackageReference Include="xunit" Version="2.9.3" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="2.8.2">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+    <PackageReference Include="coverlet.collector" Version="6.0.4">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+  </ItemGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\StellaOps.AirGap.Storage.Postgres\StellaOps.AirGap.Storage.Postgres.csproj" />
+    <ProjectReference Include="..\StellaOps.AirGap.Controller\StellaOps.AirGap.Controller.csproj" />
+    <ProjectReference Include="..\..\__Libraries\StellaOps.Infrastructure.Postgres.Testing\StellaOps.Infrastructure.Postgres.Testing.csproj" />
+  </ItemGroup>
+
+</Project>