Function TestUpdateAgentScanConfigValidation

internal/identity/scanconfig_test.go:85–122

TestUpdateAgentScanConfigValidation rejects invalid postures with a clean error instead of a raw CHECK violation.

(t *testing.T)

// TestUpdateAgentScanConfigValidation rejects invalid postures with a clean error
// instead of a raw CHECK violation.
func TestUpdateAgentScanConfigValidation(t *testing.T) {
	pool := testutil.TestDB(t)
	store := identity.NewStore(pool)
	ctx := context.Background()

	user, _ := store.CreateOrGetUser(ctx, "owner@scanv.example.com", "Owner", "google-scanv")
	if _, err := store.ClaimOrCreateDomain(ctx, "scanv.example.com", user.ID); err != nil {
		t.Fatalf("ClaimOrCreateDomain: %v", err)
	}
	agent, err := store.CreateAgent(ctx, "agent@scanv.example.com", "scanv.example.com", "", "", "", user.ID)
	if err != nil {
		t.Fatalf("CreateAgent: %v", err)
	}

	base := identity.ScanConfig{
		InboundPolicyAction: "flag", OutboundPolicy: "open", OutboundPolicyAction: "flag",
		InboundScan: "off", OutboundScan: "off",
		InboundScanReviewThreshold: 0.5, InboundScanBlockThreshold: 0.9,
		OutboundScanReviewThreshold: 0.5, OutboundScanBlockThreshold: 0.9,
	}
	mut := func(f func(*identity.ScanConfig)) identity.ScanConfig {
		c := base
		f(&c)
		return c
	}
	cases := map[string]identity.ScanConfig{
		"invalid action":             mut(func(c *identity.ScanConfig) { c.InboundPolicyAction = "nope" }),
		"verified_only not outbound": mut(func(c *identity.ScanConfig) { c.OutboundPolicy = "verified_only" }),
		"invalid scan toggle":        mut(func(c *identity.ScanConfig) { c.InboundScan = "maybe" }),
		"review > block":             mut(func(c *identity.ScanConfig) { c.InboundScanReviewThreshold = 0.95; c.InboundScanBlockThreshold = 0.5 }),
		"threshold out of range":     mut(func(c *identity.ScanConfig) { c.OutboundScanBlockThreshold = 1.5 }),
	}
	for name, c := range cases {
		if err := store.UpdateAgentScanConfig(ctx, agent.ID, user.ID, c); err == nil {
			t.Errorf("%s: expected validation error, got nil", name)
		}
	}
}