pulse/internal/ai/resource_context_policy_model_test.go

package ai

import (
	"reflect"
	"strings"
	"testing"

	unifiedresources "github.com/rcourtman/pulse-go-rewrite/internal/unifiedresources"
)

func TestBuildUnifiedResourcePolicyContext(t *testing.T) {
	resources := unifiedresources.RefreshCanonicalMetadataSlice([]unifiedresources.Resource{
		{
			ID:   "public-1",
			Name: "public-vm",
			Type: unifiedresources.ResourceTypeVM,
			Tags: []string{"public"},
		},
		{
			ID:     "sensitive-1",
			Name:   "db-1",
			Type:   unifiedresources.ResourceTypeVM,
			Status: unifiedresources.StatusOnline,
			Identity: unifiedresources.ResourceIdentity{
				Hostnames:   []string{"db.internal"},
				IPAddresses: []string{"10.0.0.10"},
			},
			Canonical: &unifiedresources.CanonicalIdentity{
				PlatformID: "db.internal",
				Aliases:    []string{"db-1"},
			},
		},
		{
			ID:     "restricted-1",
			Name:   "mail-gw",
			Type:   unifiedresources.ResourceTypePMG,
			Status: unifiedresources.StatusWarning,
			PMG:    &unifiedresources.PMGData{Hostname: "mail.internal"},
		},
		{
			ID:     "storage-1",
			Name:   "backup-volume",
			Type:   unifiedresources.ResourceTypeStorage,
			Status: unifiedresources.StatusOnline,
			Storage: &unifiedresources.StorageMeta{
				Path: "/mnt/pve/backups",
			},
		},
	})

	context := buildUnifiedResourcePolicyContext(unifiedresources.SummarizePolicyPosture(resources), "")

	if !context.hasGovernedResources() {
		t.Fatal("expected governed posture")
	}
	if context.localOnlyCount != 1 {
		t.Fatalf("localOnlyCount = %d, want 1", context.localOnlyCount)
	}

	wantHints := []unifiedresources.ResourceRedactionHint{
		unifiedresources.ResourceRedactionHostname,
		unifiedresources.ResourceRedactionIPAddress,
		unifiedresources.ResourceRedactionPlatformID,
		unifiedresources.ResourceRedactionAlias,
		unifiedresources.ResourceRedactionPath,
	}
	if !reflect.DeepEqual(context.redactionHints, wantHints) {
		t.Fatalf("redactionHints = %#v, want %#v", context.redactionHints, wantHints)
	}

	joined := strings.Join(context.appendSummarySections(nil), "\n")
	if !strings.Contains(joined, "### Data Governance") {
		t.Fatalf("expected data governance section, got %q", joined)
	}
	if !strings.Contains(joined, "Sensitivity: 1 Public, 0 Internal, 2 Sensitive, 1 Restricted") {
		t.Fatalf("expected canonical sensitivity summary, got %q", joined)
	}
	if !strings.Contains(joined, "Routing: 1 Cloud Summary, 2 Local First, 1 Local Only") {
		t.Fatalf("expected canonical routing summary, got %q", joined)
	}
	if count := strings.Count(joined, "### Policy Redaction Hints"); count != 1 {
		t.Fatalf("policy redaction hints count = %d, want 1 in %q", count, joined)
	}
	if !strings.Contains(joined, "Redactions in use: Hostname, IP Address, Platform ID, Alias, Path") {
		t.Fatalf("expected canonical redaction labels, got %q", joined)
	}
}

func TestBuildUnifiedResourcePolicyContextExternalModel(t *testing.T) {
	localOnly := unifiedresources.Resource{
		ID:     "mail-1",
		Name:   "customer-mail",
		Type:   unifiedresources.ResourceTypePMG,
		Status: unifiedresources.StatusWarning,
		PMG:    &unifiedresources.PMGData{Hostname: "mail.internal"},
	}
	cloudSummary := unifiedresources.Resource{
		ID:     "public-1",
		Name:   "public-node",
		Type:   unifiedresources.ResourceTypeAgent,
		Status: unifiedresources.StatusOnline,
		Tags:   []string{"public"},
	}
	resources := unifiedresources.RefreshCanonicalMetadataSlice([]unifiedresources.Resource{localOnly, cloudSummary})

	context := buildUnifiedResourcePolicyContext(unifiedresources.SummarizePolicyPosture(resources), "openai:gpt-4o")

	if !context.externalModel {
		t.Fatal("expected external model handling")
	}
	if context.includeResourceDetails(resources[0]) {
		t.Fatal("expected local-only resource details to be omitted")
	}
	if !context.includeResourceDetails(resources[1]) {
		t.Fatal("expected cloud-summary resource details to remain available")
	}
	if filtered := context.filterDetailedResources(resources); len(filtered) != 1 || filtered[0].ID != "public-1" {
		t.Fatalf("filtered resources = %#v, want only public-1", filtered)
	}

	joined := strings.Join(context.appendSummarySections(nil), "\n")
	if !strings.Contains(joined, "External model handling: 1 local-only resources are represented only in aggregate and omitted from detailed context.") {
		t.Fatalf("expected external handling summary, got %q", joined)
	}

	localContext := buildUnifiedResourcePolicyContext(unifiedresources.SummarizePolicyPosture(resources), "ollama:llama3")
	if localContext.externalModel {
		t.Fatal("expected ollama destination to stay local")
	}
	if !localContext.includeResourceDetails(resources[0]) {
		t.Fatal("expected local model context to include local-only resource details")
	}
}