package sink import ( "encoding/json" "os" "path/filepath" "testing" ) func TestStoreWriteCreatesAtomicFile(t *testing.T) { dir := t.TempDir() s := Store{DataDir: dir} payload := map[string]any{"workflow_id": "WF-0042", "amount": 42.5} res, err := s.Write("decision-abc", payload) if err != nil { t.Fatalf("Write: %v", err) } want := filepath.Join(dir, "decision-abc.json") if res.Path != want { t.Fatalf("Path = %q, want %q", res.Path, want) } raw, err := os.ReadFile(res.Path) if err != nil { t.Fatalf("ReadFile: %v", err) } var got map[string]any if err := json.Unmarshal(raw, &got); err != nil { t.Fatalf("json.Unmarshal: %v", err) } if got["workflow_id"] != "WF-0042" { t.Fatalf("workflow_id = %v, want WF-0042", got["workflow_id"]) } if got["amount"].(float64) != 42.5 { t.Fatalf("amount = %v, want 42.5", got["amount"]) } // No lingering .tmp. entries, _ := os.ReadDir(dir) for _, e := range entries { if filepath.Ext(e.Name()) == ".tmp" { t.Fatalf("left stray tmp file %q", e.Name()) } } } func TestStoreWriteRejectsPathTraversal(t *testing.T) { s := Store{DataDir: t.TempDir()} for _, bad := range []string{ "", "../etc/passwd", "./x", "with/slash", "with:colon-but-starts-with-/", } { _, err := s.Write(bad, map[string]any{"a": 1}) if err == nil { t.Fatalf("Write(%q) = nil err, want rejection", bad) } } } func TestStoreWriteOverwritesExisting(t *testing.T) { dir := t.TempDir() s := Store{DataDir: dir} if _, err := s.Write("dec1", map[string]any{"v": 1}); err != nil { t.Fatalf("first Write: %v", err) } if _, err := s.Write("dec1", map[string]any{"v": 2}); err != nil { t.Fatalf("second Write: %v", err) } raw, err := os.ReadFile(filepath.Join(dir, "dec1.json")) if err != nil { t.Fatalf("ReadFile: %v", err) } var got map[string]any _ = json.Unmarshal(raw, &got) if got["v"].(float64) != 2 { t.Fatalf("v = %v, want 2", got["v"]) } }