Phase 8: Production readiness — failover tests, security hardening, sandboxing, deployment docs

- WP-1-3: Central/site failover + dual-node recovery tests (17 tests)
- WP-4: Performance testing framework for target scale (7 tests)
- WP-5: Security hardening (LDAPS, JWT key length, no secrets in logs) (11 tests)
- WP-6: Script sandboxing adversarial tests (28 tests, all forbidden APIs)
- WP-7: Recovery drill test scaffolds (5 tests)
- WP-8: Observability validation (structured logs, correlation IDs, metrics) (6 tests)
- WP-9: Message contract compatibility (forward/backward compat) (18 tests)
- WP-10: Deployment packaging (installation guide, production checklist, topology)
- WP-11: Operational runbooks (failover, troubleshooting, maintenance)
92 new tests, all passing. Zero warnings.

src/ScadaLink.ConfigurationDatabase/Repositories/InboundApiRepository.cs

@@ -0,0 +1,74 @@
+using Microsoft.EntityFrameworkCore;
+using ScadaLink.Commons.Entities.InboundApi;
+using ScadaLink.Commons.Interfaces.Repositories;
+
+namespace ScadaLink.ConfigurationDatabase.Repositories;
+
+public class InboundApiRepository : IInboundApiRepository
+{
+    private readonly ScadaLinkDbContext _context;
+
+    public InboundApiRepository(ScadaLinkDbContext context)
+    {
+        _context = context;
+    }
+
+    public async Task<ApiKey?> GetApiKeyByIdAsync(int id, CancellationToken cancellationToken = default)
+        => await _context.Set<ApiKey>().FindAsync(new object[] { id }, cancellationToken);
+
+    public async Task<IReadOnlyList<ApiKey>> GetAllApiKeysAsync(CancellationToken cancellationToken = default)
+        => await _context.Set<ApiKey>().ToListAsync(cancellationToken);
+
+    public async Task<ApiKey?> GetApiKeyByValueAsync(string keyValue, CancellationToken cancellationToken = default)
+        => await _context.Set<ApiKey>().FirstOrDefaultAsync(k => k.KeyValue == keyValue, cancellationToken);
+
+    public async Task AddApiKeyAsync(ApiKey apiKey, CancellationToken cancellationToken = default)
+        => await _context.Set<ApiKey>().AddAsync(apiKey, cancellationToken);
+
+    public Task UpdateApiKeyAsync(ApiKey apiKey, CancellationToken cancellationToken = default)
+    { _context.Set<ApiKey>().Update(apiKey); return Task.CompletedTask; }
+
+    public async Task DeleteApiKeyAsync(int id, CancellationToken cancellationToken = default)
+    {
+        var entity = await GetApiKeyByIdAsync(id, cancellationToken);
+        if (entity != null) _context.Set<ApiKey>().Remove(entity);
+    }
+
+    public async Task<ApiMethod?> GetApiMethodByIdAsync(int id, CancellationToken cancellationToken = default)
+        => await _context.Set<ApiMethod>().FindAsync(new object[] { id }, cancellationToken);
+
+    public async Task<IReadOnlyList<ApiMethod>> GetAllApiMethodsAsync(CancellationToken cancellationToken = default)
+        => await _context.Set<ApiMethod>().ToListAsync(cancellationToken);
+
+    public async Task<ApiMethod?> GetMethodByNameAsync(string name, CancellationToken cancellationToken = default)
+        => await _context.Set<ApiMethod>().FirstOrDefaultAsync(m => m.Name == name, cancellationToken);
+
+    public async Task<IReadOnlyList<ApiKey>> GetApprovedKeysForMethodAsync(int methodId, CancellationToken cancellationToken = default)
+    {
+        var method = await _context.Set<ApiMethod>().FindAsync(new object[] { methodId }, cancellationToken);
+        if (method?.ApprovedApiKeyIds == null)
+            return new List<ApiKey>();
+
+        var keyIds = method.ApprovedApiKeyIds.Split(',', StringSplitOptions.RemoveEmptyEntries)
+            .Select(s => int.TryParse(s.Trim(), out var id) ? id : -1)
+            .Where(id => id > 0)
+            .ToList();
+
+        return await _context.Set<ApiKey>().Where(k => keyIds.Contains(k.Id)).ToListAsync(cancellationToken);
+    }
+
+    public async Task AddApiMethodAsync(ApiMethod method, CancellationToken cancellationToken = default)
+        => await _context.Set<ApiMethod>().AddAsync(method, cancellationToken);
+
+    public Task UpdateApiMethodAsync(ApiMethod method, CancellationToken cancellationToken = default)
+    { _context.Set<ApiMethod>().Update(method); return Task.CompletedTask; }
+
+    public async Task DeleteApiMethodAsync(int id, CancellationToken cancellationToken = default)
+    {
+        var entity = await GetApiMethodByIdAsync(id, cancellationToken);
+        if (entity != null) _context.Set<ApiMethod>().Remove(entity);
+    }
+
+    public async Task<int> SaveChangesAsync(CancellationToken cancellationToken = default)
+        => await _context.SaveChangesAsync(cancellationToken);
+}