Function TestComputeFirewallDiff_CompleteScenario

pkg/cli/audit_diff_test.go:229–264

(t *testing.T)

}

func TestComputeFirewallDiff_CompleteScenario(t *testing.T) {
	run1 := &FirewallAnalysis{
		TotalRequests:   46,
		AllowedRequests: 38,
		BlockedRequests: 8,
		RequestsByDomain: map[string]DomainRequestStats{
			"api.github.com:443":       {Allowed: 23, Blocked: 0},
			"old-api.internal.com:443": {Allowed: 8, Blocked: 0},
			"staging.api.com:443":      {Allowed: 7, Blocked: 0},
			"blocked.example.com:443":  {Allowed: 0, Blocked: 8},
		},
	}
	run2 := &FirewallAnalysis{
		TotalRequests:   108,
		AllowedRequests: 106,
		BlockedRequests: 2,
		RequestsByDomain: map[string]DomainRequestStats{
			"api.github.com:443":        {Allowed: 89, Blocked: 0},
			"registry.npmjs.org:443":    {Allowed: 15, Blocked: 0},
			"telemetry.example.com:443": {Allowed: 0, Blocked: 2},
			"staging.api.com:443":       {Allowed: 0, Blocked: 0}, // no requests (edge case)
			"blocked.example.com:443":   {Allowed: 0, Blocked: 0}, // no longer any requests (edge case)
		},
	}

	diff := computeFirewallDiff(12345, 12346, run1, run2)

	// Verify new domains
	assert.Len(t, diff.NewDomains, 2, "Should have 2 new domains")

	// Verify removed domains
	assert.Len(t, diff.RemovedDomains, 1, "Should have 1 removed domain (old-api.internal.com)")

	// api.github.com: 23 → 89 = +287%
	assert.GreaterOrEqual(t, len(diff.VolumeChanges), 1, "Should have at least 1 volume change")
}

func TestDomainStatus(t *testing.T) {
	tests := []struct {