Refactor code structure and optimize performance across multiple modules

src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClientProvisioningStoreTests.cs

@@ -10,11 +10,13 @@ using StellaOps.Authority.Storage.Documents;
 using StellaOps.Authority.Storage.InMemory.Stores;
 using Xunit;
 
+using StellaOps.TestKit;
 namespace StellaOps.Authority.Plugin.Standard.Tests;
 
 public class StandardClientProvisioningStoreTests
 {
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task CreateOrUpdateAsync_HashesSecretAndPersistsDocument()
     {
         var store = new TrackingClientStore();
@@ -45,7 +47,8 @@ public class StandardClientProvisioningStoreTests
         Assert.Contains("scopea", descriptor.AllowedScopes);
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task CreateOrUpdateAsync_NormalisesTenant()
     {
         var store = new TrackingClientStore();
@@ -71,7 +74,8 @@ public class StandardClientProvisioningStoreTests
         Assert.NotNull(descriptor);
         Assert.Equal("tenant-alpha", descriptor!.Tenant);
     }
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task CreateOrUpdateAsync_StoresAudiences()
     {
         var store = new TrackingClientStore();
@@ -99,7 +103,8 @@ public class StandardClientProvisioningStoreTests
         Assert.Equal(new[] { "attestor", "signer" }, descriptor!.AllowedAudiences.OrderBy(value => value, StringComparer.Ordinal));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task CreateOrUpdateAsync_MapsCertificateBindings()
     {
         var store = new TrackingClientStore();

src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginOptionsTests.cs

@@ -3,11 +3,13 @@ using System.IO;
 using StellaOps.Authority.Plugin.Standard;
 using StellaOps.Cryptography;
 
+using StellaOps.TestKit;
 namespace StellaOps.Authority.Plugin.Standard.Tests;
 
 public class StandardPluginOptionsTests
 {
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Validate_AllowsBootstrapWhenCredentialsProvided()
     {
         var options = new StandardPluginOptions
@@ -23,7 +25,8 @@ public class StandardPluginOptionsTests
         options.Validate("standard");
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Validate_Throws_WhenBootstrapUserIncomplete()
     {
         var options = new StandardPluginOptions
@@ -39,7 +42,8 @@ public class StandardPluginOptionsTests
         Assert.Contains("bootstrapUser", ex.Message, StringComparison.OrdinalIgnoreCase);
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Validate_Throws_WhenLockoutWindowMinutesInvalid()
     {
         var options = new StandardPluginOptions
@@ -56,7 +60,8 @@ public class StandardPluginOptionsTests
         Assert.Contains("lockout.windowMinutes", ex.Message, StringComparison.OrdinalIgnoreCase);
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Normalize_ResolvesRelativeTokenSigningDirectory()
     {
         var configDir = Path.Combine(Path.GetTempPath(), "stellaops-standard-plugin", Guid.NewGuid().ToString("N"));
@@ -84,7 +89,8 @@ public class StandardPluginOptionsTests
         }
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Normalize_PreservesAbsoluteTokenSigningDirectory()
     {
         var absolute = Path.Combine(Path.GetTempPath(), "stellaops-standard-plugin", Guid.NewGuid().ToString("N"), "keys");
@@ -98,7 +104,8 @@ public class StandardPluginOptionsTests
         Assert.Equal(Path.GetFullPath(absolute), options.TokenSigning.KeyDirectory);
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Validate_Throws_WhenPasswordHashingMemoryInvalid()
     {
         var options = new StandardPluginOptions
@@ -113,7 +120,8 @@ public class StandardPluginOptionsTests
         Assert.Contains("memory", ex.Message, StringComparison.OrdinalIgnoreCase);
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Validate_Throws_WhenPasswordHashingIterationsInvalid()
     {
         var options = new StandardPluginOptions
@@ -128,7 +136,8 @@ public class StandardPluginOptionsTests
         Assert.Contains("iteration", ex.Message, StringComparison.OrdinalIgnoreCase);
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Validate_Throws_WhenPasswordHashingParallelismInvalid()
     {
         var options = new StandardPluginOptions

src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs

@@ -17,11 +17,14 @@ using StellaOps.Authority.Storage.Documents;
 using StellaOps.Authority.Storage.InMemory.Stores;
 using StellaOps.Cryptography.Audit;
 
+
+using StellaOps.TestKit;
 namespace StellaOps.Authority.Plugin.Standard.Tests;
 
 public class StandardPluginRegistrarTests
 {
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task Register_ConfiguresIdentityProviderAndSeedsBootstrapUser()
     {
         var client = new InMemoryClient();
@@ -83,7 +86,8 @@ public class StandardPluginRegistrarTests
         Assert.True(verification.User?.RequiresPasswordReset);
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Register_LogsWarning_WhenPasswordPolicyWeaker()
     {
         var client = new InMemoryClient();
@@ -128,7 +132,8 @@ public class StandardPluginRegistrarTests
             entry.Message.Contains("weaker password policy", StringComparison.OrdinalIgnoreCase));
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Register_ForcesPasswordCapability_WhenManifestMissing()
     {
         var client = new InMemoryClient();
@@ -160,7 +165,8 @@ public class StandardPluginRegistrarTests
         Assert.True(plugin.Capabilities.SupportsClientProvisioning);
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Register_Throws_WhenBootstrapConfigurationIncomplete()
     {
         var client = new InMemoryClient();
@@ -194,7 +200,8 @@ public class StandardPluginRegistrarTests
         Assert.Throws<InvalidOperationException>(() => scope.ServiceProvider.GetRequiredService<IIdentityProviderPlugin>());
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public void Register_NormalizesTokenSigningKeyDirectory()
     {
         var client = new InMemoryClient();

src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardUserCredentialStoreTests.cs

@@ -12,6 +12,7 @@ using StellaOps.Authority.Plugin.Standard.Storage;
 using StellaOps.Cryptography;
 using StellaOps.Cryptography.Audit;
 
+using StellaOps.TestKit;
 namespace StellaOps.Authority.Plugin.Standard.Tests;
 
 public class StandardUserCredentialStoreTests : IAsyncLifetime
@@ -60,7 +61,8 @@ public class StandardUserCredentialStoreTests : IAsyncLifetime
             NullLogger<StandardUserCredentialStore>.Instance);
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task VerifyPasswordAsync_ReturnsSuccess_ForValidCredentials()
     {
         auditLogger.Reset();
@@ -87,7 +89,8 @@ public class StandardUserCredentialStoreTests : IAsyncLifetime
         Assert.Null(auditEntry.FailureCode);
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task VerifyPasswordAsync_EnforcesLockout_AfterRepeatedFailures()
     {
         auditLogger.Reset();
@@ -135,7 +138,8 @@ public class StandardUserCredentialStoreTests : IAsyncLifetime
         Assert.Contains(lastAudit.Properties, property => property.Name == "plugin.retry_after_seconds");
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task VerifyPasswordAsync_RehashesLegacyHashesToArgon2()
     {
         auditLogger.Reset();
@@ -179,7 +183,8 @@ public class StandardUserCredentialStoreTests : IAsyncLifetime
         Assert.StartsWith("$argon2id$", updated!.PasswordHash, StringComparison.Ordinal);
     }
 
-    [Fact]
+    [Trait("Category", TestCategories.Unit)]
+        [Fact]
     public async Task VerifyPasswordAsync_RecordsAudit_ForUnknownUser()
     {
         auditLogger.Reset();

src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj

@@ -8,6 +8,7 @@
   <ItemGroup>
     <ProjectReference Include="..\StellaOps.Authority.Plugin.Standard\StellaOps.Authority.Plugin.Standard.csproj" />
     <ProjectReference Include="..\StellaOps.Authority.Plugins.Abstractions\StellaOps.Authority.Plugins.Abstractions.csproj" />
+    <ProjectReference Include="../../../__Libraries/StellaOps.TestKit/StellaOps.TestKit.csproj" />
   </ItemGroup>
   <!-- Storage now uses PostgreSQL via Plugin.Standard project reference -->
 </Project>