refactor: rename ScadaLink → ZB.MOM.WW.ScadaBridge (code + projects + namespaces)

Solution + 23 src projects + 26 test projects renamed; folders, csproj, namespaces, and ScadaLinkDbContext/ScadaBridgeDbContext class updated. ActorSystem "scadalink" → "scadabridge", Akka seed-node URLs migrated. SQL roles/logins, LDAP domains, CLI command name, and CLI config dir (~/.scadalink → ~/.scadabridge) also renamed. Build green; 5 Host.Tests fail awaiting SQL login rename in next commit. Pre-existing StaleTagMonitor timing flakes unchanged. Rename script committed at tools/rename-to-scadabridge.sh.
2026-05-28 09:37:45 -04:00
parent 6d87ee3c3b
commit 7b0b9c7365
1531 changed files with 11180 additions and 11054 deletions
@@ -0,0 +1,111 @@
+using Microsoft.Extensions.Logging.Abstractions;
+using ZB.MOM.WW.ScadaBridge.SiteRuntime.Scripts;
+
+namespace ZB.MOM.WW.ScadaBridge.SiteRuntime.Tests.Scripts;
+
+/// <summary>
+/// WP-19: Script Trust Model tests — validates forbidden API detection and compilation.
+/// </summary>
+public class ScriptCompilationServiceTests
+{
+    private readonly ScriptCompilationService _service;
+
+    public ScriptCompilationServiceTests()
+    {
+        _service = new ScriptCompilationService(NullLogger<ScriptCompilationService>.Instance);
+    }
+
+    [Fact]
+    public void Compile_ValidScript_Succeeds()
+    {
+        var result = _service.Compile("test", "1 + 1");
+        Assert.True(result.IsSuccess);
+        Assert.NotNull(result.CompiledScript);
+        Assert.Empty(result.Errors);
+    }
+
+    [Fact]
+    public void Compile_InvalidSyntax_ReturnsErrors()
+    {
+        var result = _service.Compile("bad", "this is not valid C# {{{");
+        Assert.False(result.IsSuccess);
+        Assert.NotEmpty(result.Errors);
+    }
+
+    [Fact]
+    public void ValidateTrustModel_SystemIO_Forbidden()
+    {
+        var violations = _service.ValidateTrustModel("System.IO.File.ReadAllText(\"test\")");
+        Assert.NotEmpty(violations);
+        Assert.Contains(violations, v => v.Contains("System.IO"));
+    }
+
+    [Fact]
+    public void ValidateTrustModel_Process_Forbidden()
+    {
+        var violations = _service.ValidateTrustModel(
+            "System.Diagnostics.Process.Start(\"cmd\")");
+        Assert.NotEmpty(violations);
+    }
+
+    [Fact]
+    public void ValidateTrustModel_Reflection_Forbidden()
+    {
+        var violations = _service.ValidateTrustModel(
+            "typeof(string).GetType().GetMethods(System.Reflection.BindingFlags.Public)");
+        Assert.NotEmpty(violations);
+    }
+
+    [Fact]
+    public void ValidateTrustModel_Sockets_Forbidden()
+    {
+        var violations = _service.ValidateTrustModel(
+            "new System.Net.Sockets.TcpClient()");
+        Assert.NotEmpty(violations);
+    }
+
+    [Fact]
+    public void ValidateTrustModel_HttpClient_Forbidden()
+    {
+        var violations = _service.ValidateTrustModel(
+            "new System.Net.Http.HttpClient()");
+        Assert.NotEmpty(violations);
+    }
+
+    [Fact]
+    public void ValidateTrustModel_AsyncAwait_Allowed()
+    {
+        // System.Threading.Tasks should be allowed (async/await support)
+        var violations = _service.ValidateTrustModel(
+            "await System.Threading.Tasks.Task.Delay(100)");
+        Assert.Empty(violations);
+    }
+
+    [Fact]
+    public void ValidateTrustModel_CancellationToken_Allowed()
+    {
+        var violations = _service.ValidateTrustModel(
+            "System.Threading.CancellationToken.None");
+        Assert.Empty(violations);
+    }
+
+    [Fact]
+    public void ValidateTrustModel_CleanCode_NoViolations()
+    {
+        var code = @"
+            var x = 1 + 2;
+            var list = new List<int> { 1, 2, 3 };
+            var sum = list.Sum();
+            sum";
+        var violations = _service.ValidateTrustModel(code);
+        Assert.Empty(violations);
+    }
+
+    [Fact]
+    public void Compile_ForbiddenApi_FailsValidation()
+    {
+        var result = _service.Compile("evil", "System.IO.File.Delete(\"/tmp/test\")");
+        Assert.False(result.IsSuccess);
+        Assert.NotEmpty(result.Errors);
+    }
+}