pulse/cmd/pulse-control-plane/mobile_proof_cmd_test.go

package main

import (
	"path/filepath"
	"testing"

	"github.com/rcourtman/pulse-go-rewrite/internal/cloudcp/registry"
)

func TestLooksLikeMobileProofAccount(t *testing.T) {
	tests := []struct {
		name    string
		account *registry.Account
		want    bool
	}{
		{
			name:    "nil",
			account: nil,
			want:    false,
		},
		{
			name: "explicit proof display",
			account: &registry.Account{
				ID:          "a_live",
				DisplayName: "Pulse Mobile Proof",
			},
			want: true,
		},
		{
			name: "synthetic msp proof id",
			account: &registry.Account{
				ID:          "a_msp_prod_fix_20260313111348",
				DisplayName: "Pulse",
			},
			want: true,
		},
		{
			name: "customer-shaped account",
			account: &registry.Account{
				ID:          "a_W3PT2W0YFR",
				DisplayName: "Customer Account",
			},
			want: false,
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			if got := looksLikeMobileProofAccount(tt.account); got != tt.want {
				t.Fatalf("looksLikeMobileProofAccount() = %t, want %t", got, tt.want)
			}
		})
	}
}

func TestLooksLikeMobileProofTenant(t *testing.T) {
	tests := []struct {
		name    string
		tenant  *registry.Tenant
		account *registry.Account
		want    bool
	}{
		{
			name:   "nil",
			tenant: nil,
			want:   false,
		},
		{
			name: "proof display",
			tenant: &registry.Tenant{
				ID:          "t-123",
				DisplayName: "Pulse Mobile GA Proof",
			},
			want: true,
		},
		{
			name: "proof account fallback",
			tenant: &registry.Tenant{
				ID:        "t-123",
				AccountID: "a_msp_prod_fix_20260313111348",
			},
			account: &registry.Account{
				ID: "a_msp_prod_fix_20260313111348",
			},
			want: true,
		},
		{
			name: "customer tenant",
			tenant: &registry.Tenant{
				ID:          "t-123",
				AccountID:   "a_customer",
				DisplayName: "Customer Workspace",
			},
			account: &registry.Account{
				ID:          "a_customer",
				DisplayName: "Customer Account",
			},
			want: false,
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			if got := looksLikeMobileProofTenant(tt.tenant, tt.account); got != tt.want {
				t.Fatalf("looksLikeMobileProofTenant() = %t, want %t", got, tt.want)
			}
		})
	}
}

func TestMobileProofBaseDomainFromURL(t *testing.T) {
	tests := map[string]string{
		"https://cloud.pulserelay.pro":       "cloud.pulserelay.pro",
		"http://cloud.pulserelay.pro:8080/x": "cloud.pulserelay.pro",
		"cloud.pulserelay.pro/path":          "cloud.pulserelay.pro",
		" cloud.pulserelay.pro ":             "cloud.pulserelay.pro",
	}

	for input, want := range tests {
		t.Run(input, func(t *testing.T) {
			if got := mobileProofBaseDomainFromURL(input); got != want {
				t.Fatalf("mobileProofBaseDomainFromURL(%q) = %q, want %q", input, got, want)
			}
		})
	}
}

func TestMobileProofCommandExposesAccountAndWorkspaceLifecycle(t *testing.T) {
	cmd := newMobileProofCmd()
	found := map[string]bool{}
	for _, sub := range cmd.Commands() {
		found[sub.Name()] = true
	}
	for _, name := range []string{"create-account", "create-workspace", "delete-workspace", "purge-account"} {
		if !found[name] {
			t.Fatalf("mobile-proof subcommand %q is not registered", name)
		}
	}
}

func TestSafeMobileProofTenantDataDir(t *testing.T) {
	root := t.TempDir()
	got, err := safeMobileProofTenantDataDir(root, "t-TEST00001")
	if err != nil {
		t.Fatalf("safeMobileProofTenantDataDir: %v", err)
	}
	want := filepath.Join(root, "t-TEST00001")
	if got != want {
		t.Fatalf("safeMobileProofTenantDataDir = %q, want %q", got, want)
	}

	for _, tenantID := range []string{"", "../escape", "nested/t-TEST00001", `nested\t-TEST00001`} {
		t.Run(tenantID, func(t *testing.T) {
			if _, err := safeMobileProofTenantDataDir(root, tenantID); err == nil {
				t.Fatalf("expected unsafe tenant id %q to fail", tenantID)
			}
		})
	}
}