feat(FN-004): merge fusion/fn-004

apps/api/tests/test_routers/test_projects.py

@@ -0,0 +1,35 @@
+import pytest
+from httpx import AsyncClient
+
+
+@pytest.mark.asyncio
+async def test_project_crud(auth_client: AsyncClient) -> None:
+    # Create
+    resp = await auth_client.post("/api/v1/projects", json={"name": "Test", "slug": "test"})
+    assert resp.status_code == 201
+    data = resp.json()
+    assert data["name"] == "Test"
+    project_id = data["id"]
+
+    # List
+    resp = await auth_client.get("/api/v1/projects")
+    assert resp.status_code == 200
+    assert len(resp.json()) == 1
+
+    # Get
+    resp = await auth_client.get(f"/api/v1/projects/{project_id}")
+    assert resp.status_code == 200
+    assert resp.json()["slug"] == "test"
+
+    # Update
+    resp = await auth_client.put(f"/api/v1/projects/{project_id}", json={"name": "Updated"})
+    assert resp.status_code == 200
+    assert resp.json()["name"] == "Updated"
+
+    # Delete
+    resp = await auth_client.delete(f"/api/v1/projects/{project_id}")
+    assert resp.status_code == 204
+
+    # Verify deletion
+    resp = await auth_client.get(f"/api/v1/projects/{project_id}")
+    assert resp.status_code == 404

apps/api/tests/test_routers/test_repositories.py

@@ -0,0 +1,40 @@
+import pytest
+from httpx import AsyncClient
+
+
+@pytest.mark.asyncio
+async def test_repository_crud(auth_client: AsyncClient) -> None:
+    # Create project first
+    resp = await auth_client.post(
+        "/api/v1/projects", json={"name": "RepoTest", "slug": "repo-test"}
+    )
+    project_id = resp.json()["id"]
+
+    # Create repo
+    resp = await auth_client.post(
+        f"/api/v1/projects/{project_id}/repositories",
+        json={"name": "repo1", "git_url": "https://git.example.com/repo1.git"},
+    )
+    assert resp.status_code == 201
+    repo_id = resp.json()["id"]
+
+    # List
+    resp = await auth_client.get(f"/api/v1/projects/{project_id}/repositories")
+    assert resp.status_code == 200
+    assert len(resp.json()) == 1
+
+    # Get
+    resp = await auth_client.get(f"/api/v1/projects/{project_id}/repositories/{repo_id}")
+    assert resp.status_code == 200
+
+    # Update
+    resp = await auth_client.put(
+        f"/api/v1/projects/{project_id}/repositories/{repo_id}",
+        json={"name": "repo1-updated"},
+    )
+    assert resp.status_code == 200
+    assert resp.json()["name"] == "repo1-updated"
+
+    # Delete
+    resp = await auth_client.delete(f"/api/v1/projects/{project_id}/repositories/{repo_id}")
+    assert resp.status_code == 204

apps/api/tests/test_routers/test_secrets.py

@@ -0,0 +1,72 @@
+from typing import Any
+
+import pytest
+from httpx import AsyncClient
+from sqlalchemy import select
+from sqlalchemy.ext.asyncio import async_sessionmaker
+
+from app.models.secret import Secret
+
+
+@pytest.mark.asyncio
+async def test_secret_encrypt_decrypt(
+    auth_client: AsyncClient, db_session: async_sessionmaker[Any]
+) -> None:
+    resp = await auth_client.post(
+        "/api/v1/projects",
+        json={"name": "SecretTest", "slug": "secret-test"},
+    )
+    project_id = resp.json()["id"]
+
+    resp = await auth_client.post(
+        "/api/v1/secrets",
+        json={
+            "scope_type": "project",
+            "scope_id": str(project_id),
+            "key": "api_key",
+            "value": "super-secret",
+        },
+    )
+    assert resp.status_code == 201
+    data = resp.json()
+    assert data["value"] == "super-secret"
+    secret_id = data["id"]
+
+    resp = await auth_client.get(f"/api/v1/secrets/{secret_id}")
+    assert resp.status_code == 200
+    assert resp.json()["value"] == "super-secret"
+
+    async with db_session() as session:
+        result = await session.execute(select(Secret).where(Secret.id == secret_id))
+        secret = result.scalar_one()
+        assert secret.encrypted_value != "super-secret"
+
+    resp = await auth_client.put(
+        f"/api/v1/secrets/{secret_id}",
+        json={"value": "new-secret"},
+    )
+    assert resp.status_code == 200
+    assert resp.json()["value"] == "new-secret"
+
+    resp = await auth_client.delete(f"/api/v1/secrets/{secret_id}")
+    assert resp.status_code == 204
+
+
+@pytest.mark.asyncio
+async def test_secret_ownership_enforced(auth_client: AsyncClient) -> None:
+    resp = await auth_client.post("/api/v1/projects", json={"name": "P1", "slug": "p1"})
+    p1 = resp.json()["id"]
+
+    resp = await auth_client.post("/api/v1/projects", json={"name": "P2", "slug": "p2"})
+    p2 = resp.json()["id"]
+
+    resp = await auth_client.post(
+        "/api/v1/secrets",
+        json={"scope_type": "project", "scope_id": str(p1), "key": "k1", "value": "v1"},
+    )
+
+    resp = await auth_client.get("/api/v1/secrets", params={"scope_id": str(p2)})
+    assert resp.status_code == 200
+    secrets = resp.json()
+    for s in secrets:
+        assert s["scope_id"] != str(p1) or s["scope_type"] != "project"

apps/api/tests/test_routers/test_tool_definitions.py

@@ -0,0 +1,26 @@
+import pytest
+from httpx import AsyncClient
+
+
+@pytest.mark.asyncio
+async def test_tool_definition_crud(auth_client: AsyncClient) -> None:
+    resp = await auth_client.post(
+        "/api/v1/tool-definitions",
+        json={"key": "runfusion", "name": "RunFusion", "image": "runfusion:latest"},
+    )
+    assert resp.status_code == 201
+    td_id = resp.json()["id"]
+
+    resp = await auth_client.get("/api/v1/tool-definitions")
+    assert resp.status_code == 200
+    assert len(resp.json()) >= 1
+
+    resp = await auth_client.get(f"/api/v1/tool-definitions/{td_id}")
+    assert resp.status_code == 200
+
+    resp = await auth_client.put(f"/api/v1/tool-definitions/{td_id}", json={"name": "RunFusionV2"})
+    assert resp.status_code == 200
+    assert resp.json()["name"] == "RunFusionV2"
+
+    resp = await auth_client.delete(f"/api/v1/tool-definitions/{td_id}")
+    assert resp.status_code == 204