license switch agpl -> busl1, sprints work, new product advisories

src/Cli/__Tests/StellaOps.Cli.Tests/Commands/TimestampCommandTests.cs

@@ -0,0 +1,76 @@
+// -----------------------------------------------------------------------------
+// TimestampCommandTests.cs
+// Sprint: SPRINT_20260119_010 Attestor TST Integration
+// Description: Unit tests for timestamp CLI commands.
+// -----------------------------------------------------------------------------
+using System.CommandLine;
+using System.Security.Cryptography;
+using System.Text;
+using StellaOps.Cli.Commands;
+using StellaOps.Cli.Tests.Testing;
+using StellaOps.TestKit;
+using Xunit;
+
+namespace StellaOps.Cli.Tests.Commands;
+
+public sealed class TimestampCommandTests
+{
+    private readonly Option<bool> _verboseOption = new("--verbose");
+    private readonly CancellationToken _ct = CancellationToken.None;
+
+    [Trait("Category", TestCategories.Unit)]
+    [Fact]
+    public void TimestampCommandGroup_ExposesSubcommands()
+    {
+        var command = TimestampCommandGroup.BuildTimestampCommand(_verboseOption, _ct);
+
+        Assert.Contains(command.Children, child => child.Name == "rfc3161");
+        Assert.Contains(command.Children, child => child.Name == "verify");
+        Assert.Contains(command.Children, child => child.Name == "info");
+    }
+
+    [Trait("Category", TestCategories.Unit)]
+    [Fact]
+    public async Task TimestampCommandGroup_Rfc3161ThenVerify_Succeeds()
+    {
+        using var temp = new TempDirectory();
+        var artifactPath = Path.Combine(temp.Path, "artifact.bin");
+        var tokenPath = Path.Combine(temp.Path, "artifact.tst");
+        var bytes = Encoding.UTF8.GetBytes("timestamp-test");
+        await File.WriteAllBytesAsync(artifactPath, bytes, _ct);
+
+        var digest = "sha256:" + Convert.ToHexString(SHA256.HashData(bytes)).ToLowerInvariant();
+        var root = new RootCommand { TimestampCommandGroup.BuildTimestampCommand(_verboseOption, _ct) };
+
+        var originalOut = Console.Out;
+        var writer = new StringWriter();
+        int exitCode;
+
+        try
+        {
+            Console.SetOut(writer);
+            exitCode = await root.Parse($"ts rfc3161 --hash {digest} --tsa https://tsa.example --out \"{tokenPath}\"").InvokeAsync();
+        }
+        finally
+        {
+            Console.SetOut(originalOut);
+        }
+
+        Assert.Equal(0, exitCode);
+        Assert.True(File.Exists(tokenPath));
+
+        var verifyWriter = new StringWriter();
+        try
+        {
+            Console.SetOut(verifyWriter);
+            exitCode = await root.Parse($"ts verify --tst \"{tokenPath}\" --artifact \"{artifactPath}\"").InvokeAsync();
+        }
+        finally
+        {
+            Console.SetOut(originalOut);
+        }
+
+        Assert.Equal(0, exitCode);
+        Assert.Contains("PASSED", verifyWriter.ToString());
+    }
+}