Refactor code structure and optimize performance across multiple modules

src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/ServiceCollectionExtensionsTests.cs

@@ -8,11 +8,14 @@ using StellaOps.Auth.Abstractions;
 using StellaOps.Auth.ServerIntegration;
 using Xunit;
 
+
+using StellaOps.TestKit;
 namespace StellaOps.Auth.ServerIntegration.Tests;
 
 public class ServiceCollectionExtensionsTests
 {
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void AddStellaOpsResourceServerAuthentication_ConfiguresJwtBearer()
     {
         var configuration = new ConfigurationBuilder()

src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj

@@ -7,5 +7,6 @@
   <ItemGroup>
     <ProjectReference Include="..\StellaOps.Auth.ServerIntegration\StellaOps.Auth.ServerIntegration.csproj" />
     <ProjectReference Include="..\StellaOps.Auth.Abstractions\StellaOps.Auth.Abstractions.csproj" />
+    <ProjectReference Include="../../../__Libraries/StellaOps.TestKit/StellaOps.TestKit.csproj" />
   </ItemGroup>
 </Project>

src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsResourceServerOptionsTests.cs

@@ -3,11 +3,13 @@ using System.Net;
 using StellaOps.Auth.ServerIntegration;
 using Xunit;
 
+using StellaOps.TestKit;
 namespace StellaOps.Auth.ServerIntegration.Tests;
 
 public class StellaOpsResourceServerOptionsTests
 {
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Validate_NormalisesCollections()
     {
         var options = new StellaOpsResourceServerOptions
@@ -43,7 +45,8 @@ public class StellaOpsResourceServerOptionsTests
         Assert.True(options.BypassMatcher.IsAllowed(IPAddress.IPv6Loopback));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Validate_Throws_When_AuthorityMissing()
     {
         var options = new StellaOpsResourceServerOptions();

src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsResourceServerPoliciesTests.cs

@@ -4,11 +4,13 @@ using StellaOps.Auth.Abstractions;
 using StellaOps.Auth.ServerIntegration;
 using Xunit;
 
+using StellaOps.TestKit;
 namespace StellaOps.Auth.ServerIntegration.Tests;
 
 public class StellaOpsResourceServerPoliciesTests
 {
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void AddObservabilityResourcePolicies_RegistersExpectedPolicies()
     {
         var options = new AuthorizationOptions();
@@ -28,7 +30,8 @@ public class StellaOpsResourceServerPoliciesTests
         AssertPolicy(options, StellaOpsResourceServerPolicies.ExportAdmin, StellaOpsScopes.ExportAdmin);
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void AddPacksResourcePolicies_RegistersExpectedPolicies()
     {
         var options = new AuthorizationOptions();

src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsScopeAuthorizationHandlerTests.cs

@@ -16,11 +16,13 @@ using StellaOps.Cryptography.Audit;
 using OpenIddict.Abstractions;
 using Xunit;
 
+using StellaOps.TestKit;
 namespace StellaOps.Auth.ServerIntegration.Tests;
 
 public class StellaOpsScopeAuthorizationHandlerTests
 {
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Succeeds_WhenScopePresent()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -52,7 +54,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.False(string.IsNullOrWhiteSpace(record.CorrelationId));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Fails_WhenTenantMismatch()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -83,7 +86,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.Equal("true", GetPropertyValue(record, "resource.tenant.mismatch"));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Succeeds_WhenBypassNetworkMatches()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -107,7 +111,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.Equal("true", GetPropertyValue(record, "resource.authorization.bypass"));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Fails_WhenScopeMissingAndNoBypass()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -130,7 +135,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.Equal("false", GetPropertyValue(record, "principal.authenticated"));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Fails_WhenDefaultScopeMissing()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -159,7 +165,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.Equal(StellaOpsScopes.PolicyRun, GetPropertyValue(record, "resource.scopes.missing"));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Succeeds_WhenDefaultScopePresent()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -187,7 +194,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.Equal("true", GetPropertyValue(record, "principal.authenticated"));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Fails_WhenIncidentAuthTimeMissing()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -220,7 +228,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.Equal("Sev1 drill", GetPropertyValue(record, "incident.reason"));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Fails_WhenIncidentAuthTimeStale()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -256,7 +265,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.Equal("Sev1 drill", GetPropertyValue(record, "incident.reason"));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Succeeds_WhenIncidentFreshAuthValid()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -291,7 +301,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.Equal("Sev1 drill", GetPropertyValue(record, "incident.reason"));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Fails_WhenBackfillMetadataMissing()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -321,7 +332,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.Equal("false", GetPropertyValue(record, "backfill.metadata_satisfied"));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Succeeds_WhenBackfillMetadataPresent()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -354,7 +366,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.Equal("INC-741", GetPropertyValue(record, "backfill.ticket"));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Fails_WhenPackApprovalMetadataMissing()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -385,7 +398,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.Equal(StellaOpsScopes.PacksApprove, Assert.Single(record.Scopes));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Fails_WhenPackApprovalFreshAuthStale()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>
@@ -421,7 +435,8 @@ public class StellaOpsScopeAuthorizationHandlerTests
         Assert.Equal(StellaOpsScopes.PacksApprove, Assert.Single(record.Scopes));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task HandleRequirement_Succeeds_WhenPackApprovalMetadataPresent()
     {
         var optionsMonitor = CreateOptionsMonitor(options =>