whitehat-security/tests/test_audit_core_runner.py

import importlib.util
import json
from argparse import Namespace
from pathlib import Path


SPEC = importlib.util.spec_from_file_location(
    "audit_core_e2_runner", Path("runners/audit_core_e2.py")
)
runner = importlib.util.module_from_spec(SPEC)
assert SPEC.loader is not None
SPEC.loader.exec_module(runner)


def test_equivalent_denial_includes_digest():
    base = {
        "status": 404, "content_type": "application/json", "count": 1,
        "schema": ["$", "$.error:str"], "run_digest": "same",
    }
    assert runner.equivalent(base, dict(base))
    changed = dict(base, run_digest="different")
    assert not runner.equivalent(base, changed)


def test_event_is_synthetic_and_correlation_bound():
    payload = runner.event("event-a", "tenant-a", "corr", "2026-08-21T23:00:00Z")
    assert payload["id"] == payload["data"]["fixture_id"]
    assert payload["tenant"] == "tenant-a"
    assert payload["correlation_id"] == "corr"
    assert payload["occurred_at"] == "2026-08-21T23:00:00Z"


def test_p95_is_conservative_for_small_runs():
    assert runner._p95([10, 20, 30]) == 30


def test_post_headers_bind_idempotency_key_to_event_id():
    headers = runner.request_headers(
        "secret-not-rendered", "eng-1", "corr-1", {"id": "event-1"}
    )
    assert headers["Idempotency-Key"] == "event-1"
    assert headers["User-Agent"] == "whitehat-security/eng-1"


def test_get_headers_have_no_idempotency_key():
    headers = runner.request_headers("secret", "eng-1", "corr-1", None)
    assert "Idempotency-Key" not in headers


def test_invocation_fixture_set_is_declared_by_current_engagement():
    engagement = json.loads(
        Path("engagements/2026-08-22-audit-core-e2.json").read_text()
    )
    args = Namespace(
        tenant_a="tenant:trial:whitehat-a-20260822",
        tenant_b="tenant:trial:whitehat-b-20260822",
        event_a="whitehat-e2-event-a-20260822",
        event_b="whitehat-e2-event-b-20260822",
        absent_event="whitehat-e2-absent-20260822",
        forged_event="whitehat-e2-forged-b-20260822",
        correlation="whitehat-e2-correlation-20260822",
    )

    assert runner.invocation_fixture_ids(args) <= set(engagement["fixture_ids"])