Initial curated itworx-knowledge-hub source from 3b1751d0d9dee551aa6994eee0093704dc334817

tests/backend/ItWorx.KnowledgeHub.IntegrationTests/Operations/SystemInfoTests.cs

@@ -0,0 +1,69 @@
+using System.Net;
+using System.Net.Http.Json;
+using ItWorx.KnowledgeHub.IntegrationTests.Infrastructure;
+
+namespace ItWorx.KnowledgeHub.IntegrationTests.Operations;
+
+/// <summary>docs/19-observability.md: "/api/v1/system/info" is permissioned
+/// information, distinct from the anonymous /health/live and /health/ready
+/// endpoints.</summary>
+[Collection(PostgresTestGroup.Name)]
+public sealed class SystemInfoTests(PostgresContainerFixture postgres) : OwnerSetupTestBase(postgres)
+{
+    [Fact]
+    public async Task An_authenticated_administrator_sees_the_current_schema_version()
+    {
+        using var client = Factory.CreateClient();
+        await SetupHelper.LoginAsync(client, OwnerEmail, OwnerPassword);
+
+        var response = await client.GetAsync("/api/v1/system/info");
+
+        Assert.Equal(HttpStatusCode.OK, response.StatusCode);
+        var payload = await response.Content.ReadFromJsonAsync<SystemInfoPayload>();
+        Assert.NotNull(payload);
+        Assert.Equal("ItWorx Knowledge Hub", payload.Product);
+        Assert.Equal("m7", payload.SchemaVersion);
+    }
+
+    [Fact]
+    public async Task An_anonymous_caller_is_rejected()
+    {
+        using var client = Factory.CreateClient();
+
+        var response = await client.GetAsync("/api/v1/system/info");
+
+        Assert.Equal(HttpStatusCode.Unauthorized, response.StatusCode);
+    }
+
+    /// <summary>docs/adr/ADR-029-v2-r5-final-hardening.md (brief Phase 9): the
+    /// canonical release identity always includes a live-computed database migration
+    /// range for whichever database the instance is actually connected to — this is
+    /// never baked into the build-time manifest, so it must be non-null once
+    /// migrations have run (which they always have, by the time an integration test's
+    /// database is usable at all). Build-time-only fields (openApiHash, etc.) are
+    /// honestly null in this test environment, since no release-manifest.json exists
+    /// on a local test run — never fabricated.</summary>
+    [Fact]
+    public async Task The_release_identity_always_reports_a_live_database_migration_range()
+    {
+        using var client = Factory.CreateClient();
+        await SetupHelper.LoginAsync(client, OwnerEmail, OwnerPassword);
+
+        var response = await client.GetAsync("/api/v1/system/info");
+
+        Assert.Equal(HttpStatusCode.OK, response.StatusCode);
+        var payload = await response.Content.ReadFromJsonAsync<SystemInfoWithReleasePayload>();
+        Assert.NotNull(payload);
+        Assert.NotNull(payload.Release);
+        Assert.False(string.IsNullOrWhiteSpace(payload.Release.DatabaseMigrationRange));
+        // No release-manifest.json is baked in for a local test run — this must
+        // degrade to null, never a fabricated value.
+        Assert.Null(payload.Release.OpenApiHash);
+    }
+
+    private sealed record SystemInfoPayload(string Product, string SchemaVersion);
+
+    private sealed record SystemInfoWithReleasePayload(string Product, ReleaseIdentityPayload Release);
+
+    private sealed record ReleaseIdentityPayload(string? DatabaseMigrationRange, string? OpenApiHash);
+}