notarius/internal/modules/dnd/validate/locationoccurrences/registry/validator_test.go

package registry

import (
	"context"
	"encoding/json"
	"reflect"
	"strings"
	"testing"

	"gitea.maximumdirect.net/eric/notarius/internal/core/source"
	"gitea.maximumdirect.net/eric/notarius/internal/framework/contracts"
	"gitea.maximumdirect.net/eric/notarius/internal/framework/pipeline"
	"gitea.maximumdirect.net/eric/notarius/internal/modules/dnd"
	locationcodec "gitea.maximumdirect.net/eric/notarius/internal/modules/dnd/codec/locationregistry"
	"gitea.maximumdirect.net/eric/notarius/internal/modules/dnd/locations/identity"
	locationregistry "gitea.maximumdirect.net/eric/notarius/internal/modules/dnd/locations/registry"
)

func TestValidatorDistinguishesSameNameLocationsByID(t *testing.T) {
	references, first, second := registryReferences(t)
	value := dnd.LocationOccurrenceList{Occurrences: []dnd.LocationOccurrence{
		occurrence(first.ID, first.Name), occurrence(second.ID, second.Name),
	}}
	validator := newValidator(t, references)
	before := cloneList(value)
	result, err := validator.Validate(context.Background(), request(references, value))
	if err != nil || !result.Approved || !reflect.DeepEqual(value, before) {
		t.Fatalf("matching IDs = %#v, %v", result, err)
	}
	value.Occurrences[0].Name = "Sun Gate"
	result, err = validator.Validate(context.Background(), request(references, value))
	if err != nil || result.Approved || result.ReasonCode != ReasonCode || !strings.Contains(result.Message, "does not match registry location") {
		t.Fatalf("mismatched name = %#v, %v", result, err)
	}
	value.Occurrences[0].LocationID = "location:unknown"
	result, err = validator.Validate(context.Background(), request(references, value))
	if err != nil || result.Approved || !strings.Contains(result.Message, "is not in the location registry") {
		t.Fatalf("unknown ID = %#v, %v", result, err)
	}
}

func TestValidatorRequiresAndSafelyPreparesRegistry(t *testing.T) {
	value := dnd.LocationOccurrenceList{Occurrences: []dnd.LocationOccurrence{occurrence("location:one", "Moon Gate")}}
	result, err := newValidator(t).Validate(context.Background(), request(contracts.ReferenceSet{}, value))
	if err != nil || result.Approved || !strings.Contains(result.Message, "required") {
		t.Fatalf("missing registry = %#v, %v", result, err)
	}
	malformed := contracts.ReferenceSet{Slots: map[string]contracts.ResolvedReferenceSlot{locationregistry.ReferenceSlot: {Items: []contracts.ReferenceItem{{MediaType: "application/json", Content: []byte(`{"secret":"private"}`)}}}}}
	if _, err := New(Options{}, malformed); err == nil || strings.Contains(err.Error(), "private") {
		t.Fatalf("New() error = %v", err)
	}
	references, _, _ := registryReferences(t)
	metadata, err := json.Marshal(newValidator(t, references).ManifestMetadata())
	if err != nil || strings.Contains(string(metadata), "Moon Gate") {
		t.Fatalf("metadata = %s, %v", metadata, err)
	}
	if got := newValidator(t, references).CheckpointFingerprints(); len(got) != 2 || got[0].Value != policy || !strings.HasPrefix(got[1].Value, "sha256:") {
		t.Fatalf("fingerprints = %#v", got)
	}
}

func TestValidatorRegistersAndDefersShape(t *testing.T) {
	references, _, _ := registryReferences(t)
	result, err := newValidator(t, references).Validate(context.Background(), request(references, dnd.LocationOccurrenceList{Occurrences: []dnd.LocationOccurrence{{Name: "Missing"}}}))
	if err != nil || !result.Approved {
		t.Fatalf("shape deferral = %#v, %v", result, err)
	}
	registry := pipeline.NewValidatorRegistry()
	if err := Register(registry); err != nil {
		t.Fatal(err)
	}
	if got, ok := registry.Spec(Key); !ok || got != Spec() || got.ExecutionClass != contracts.ExecutionClassDeterministic {
		t.Fatalf("registered spec = %#v, ok = %t", got, ok)
	}
}

func newValidator(t *testing.T, references ...contracts.ReferenceSet) *Validator {
	t.Helper()
	validator, err := New(Options{}, references...)
	if err != nil {
		t.Fatal(err)
	}
	return validator
}
func request(references contracts.ReferenceSet, value dnd.LocationOccurrenceList) contracts.TypedValidationRequest[dnd.LocationOccurrenceList] {
	return contracts.TypedValidationRequest[dnd.LocationOccurrenceList]{References: references, Value: value}
}
func occurrence(id, name string) dnd.LocationOccurrence {
	return dnd.LocationOccurrence{LocationID: id, Name: name, Kind: dnd.LocationOccurrenceKindVisited, SourceRefs: []source.SourceRef{{SourceID: "session", StartUnitID: 1, EndUnitID: 1}}}
}
func cloneList(value dnd.LocationOccurrenceList) dnd.LocationOccurrenceList {
	cloned := dnd.LocationOccurrenceList{Occurrences: append([]dnd.LocationOccurrence(nil), value.Occurrences...)}
	for index := range cloned.Occurrences {
		cloned.Occurrences[index].SourceRefs = append([]source.SourceRef(nil), value.Occurrences[index].SourceRefs...)
	}
	return cloned
}
func registryReferences(t *testing.T) (contracts.ReferenceSet, dnd.Location, dnd.Location) {
	t.Helper()
	firstRefs := []source.SourceRef{{SourceID: "source", StartUnitID: 1, EndUnitID: 1}}
	secondRefs := []source.SourceRef{{SourceID: "source", StartUnitID: 2, EndUnitID: 2}}
	first := dnd.Location{ID: identity.DeriveID("Moon Gate", firstRefs), Name: "Moon Gate", SourceRefs: firstRefs}
	second := dnd.Location{ID: identity.DeriveID("Moon Gate", secondRefs), Name: "Moon Gate", SourceRefs: secondRefs}
	thirdRefs := []source.SourceRef{{SourceID: "source", StartUnitID: 3, EndUnitID: 3}}
	third := dnd.Location{ID: identity.DeriveID("Sun Gate", thirdRefs), Name: "Sun Gate", SourceRefs: thirdRefs}
	content, err := locationcodec.New().Encode(dnd.LocationRegistry{Locations: []dnd.Location{first, second, third}})
	if err != nil {
		t.Fatal(err)
	}
	return contracts.ReferenceSet{Slots: map[string]contracts.ResolvedReferenceSlot{locationregistry.ReferenceSlot: {Slot: contracts.ReferenceSlot{Name: locationregistry.ReferenceSlot}, Items: []contracts.ReferenceItem{{SlotName: locationregistry.ReferenceSlot, MediaType: locationcodec.MediaType, Content: content, Origin: contracts.ReferenceOrigin{Type: "generated"}}}}}}, first, second
}