Function TestProtectionPutGetRoundTrip

internal/httpapi/protection_test.go:60–95

TestProtectionPutGetRoundTrip: PUT a posture, then confirm GET returns the nested shape with the written values.

(t *testing.T)

// TestProtectionPutGetRoundTrip: PUT a posture, then confirm GET returns the
// nested shape with the written values.
func TestProtectionPutGetRoundTrip(t *testing.T) {
	srv, _ := protectionServer(t)
	put := map[string]any{
		"inbound": map[string]any{
			"gate": map[string]any{"policy": "allowlist", "allowlist": []string{"partner@acme.com"}, "action": "review"},
			"scan": map[string]any{"sensitivity": "high"},
		},
		"outbound": map[string]any{
			"gate": map[string]any{"policy": "domain", "allowlist": []string{"acme.com"}, "action": "block"},
			"scan": map[string]any{"sensitivity": "off"},
		},
		"holds": map[string]any{"ttl_seconds": 3600, "on_expiry": "approve"},
	}
	code, body := sendJSON(t, "PUT", srv.URL+"/v1/agents/support%40acme.com/protection", "good", put)
	if code != 200 {
		t.Fatalf("PUT status %d body %v", code, body)
	}

	code, got := sendJSON(t, "GET", srv.URL+"/v1/agents/support%40acme.com/protection", "good", nil)
	if code != 200 {
		t.Fatalf("GET status %d body %v", code, got)
	}
	inbound, _ := got["inbound"].(map[string]any)
	gate, _ := inbound["gate"].(map[string]any)
	scan, _ := inbound["scan"].(map[string]any)
	if gate["policy"] != "allowlist" || gate["action"] != "review" {
		t.Errorf("inbound gate not persisted: %v", gate)
	}
	if scan["sensitivity"] != "high" {
		t.Errorf("inbound sensitivity = %v, want high", scan["sensitivity"])
	}
	holds, _ := got["holds"].(map[string]any)
	if holds["on_expiry"] != "approve" {
		t.Errorf("holds.on_expiry = %v, want approve", holds["on_expiry"])
	}
}

// TestProtectionPutRequiresTopLevelKeys: a body missing a top-level section is a
// 422 (D3 — no silent reset).