Separate BizTalk collection from Checkmk agent

tests/BizTalkCheckmkPulse.Tests/Program.cs

@@ -1,7 +1,9 @@
 using System;
 using System.Collections.Generic;
+using System.IO;
 using System.Linq;
 using System.Runtime.InteropServices;
+using System.Text;
 
 namespace BizTalkCheckmkPulse.Tests
 {
@@ -21,6 +23,12 @@ namespace BizTalkCheckmkPulse.Tests
             Run("ProviderSqlLoginFailureIsPermission", ProviderSqlLoginFailureIsPermission);
             Run("RejectedSqlPrincipalIsExtracted", RejectedSqlPrincipalIsExtracted);
             Run("PlatformPermissionPropagatesToSqlDiscovery", PlatformPermissionPropagatesToSqlDiscovery);
+            Run("SnapshotRoundTripPreservesLines", SnapshotRoundTripPreservesLines);
+            Run("SnapshotRejectsTampering", SnapshotRejectsTampering);
+            Run("SnapshotRejectsStaleData", SnapshotRejectsStaleData);
+            Run("SnapshotRejectsDifferentMachine", SnapshotRejectsDifferentMachine);
+            Run("SnapshotReportsMissingFile", SnapshotReportsMissingFile);
+            Run("SnapshotFailureEmitsStableUnknownServices", SnapshotFailureEmitsStableUnknownServices);
 
             if (Failures.Count == 0)
             {
@@ -81,6 +89,7 @@ namespace BizTalkCheckmkPulse.Tests
             var query = WmiBizTalkProbe.GroupSettingQuery;
             Assert(query.Contains("FROM MSBTS_GroupSetting"), "MSBTS_GroupSetting query missing");
             Assert(query.Contains("BizTalkOperatorGroup"), "configured operator group property missing");
+            Assert(query.Contains("BizTalkReadOnlyUserGroup"), "configured read-only group property missing");
             Assert(query.Contains("SubscriptionDBServerName"), "master MessageBox server property missing");
             Assert(query.Contains("SubscriptionDBName"), "master MessageBox database property missing");
             Assert(query.IndexOf("MessageBoxSetting", StringComparison.OrdinalIgnoreCase) < 0, "unsupported MessageBoxSetting class present");
@@ -128,6 +137,114 @@ namespace BizTalkCheckmkPulse.Tests
                 "SQL discovery classification");
         }
 
+        private static void SnapshotRoundTripPreservesLines()
+        {
+            WithTemporarySnapshot((path, store) =>
+            {
+                var lines = new CheckmkLocalFormatter(new MonitoringOptions()).FormatSelfTest().ToArray();
+                var generated = DateTime.UtcNow;
+                store.Write(lines, generated, "DOMAIN\\collector$");
+                var result = store.Read(generated.AddSeconds(10), TimeSpan.FromMinutes(3));
+
+                Assert(result.IsSuccess, "snapshot should be readable: " + result.Error);
+                AssertEqual(lines.Length, result.Lines.Count, "snapshot line count");
+                Assert(lines.SequenceEqual(result.Lines), "snapshot payload changed");
+
+                var replacement = lines.Select(x => x.Replace("Self test OK", "Replacement OK")).ToArray();
+                store.Write(replacement, generated.AddSeconds(30), "DOMAIN\\collector$");
+                var replaced = store.Read(generated.AddSeconds(40), TimeSpan.FromMinutes(3));
+                Assert(replaced.IsSuccess, "replaced snapshot should be readable");
+                Assert(replacement.SequenceEqual(replaced.Lines), "atomic replacement payload changed");
+            });
+        }
+
+        private static void SnapshotRejectsTampering()
+        {
+            WithTemporarySnapshot((path, store) =>
+            {
+                var lines = new CheckmkLocalFormatter(new MonitoringOptions()).FormatSelfTest().ToArray();
+                store.Write(lines, DateTime.UtcNow, "DOMAIN\\collector$");
+                var content = File.ReadAllText(path, Encoding.UTF8);
+                File.WriteAllText(path, content.Replace("Self test OK", "Tampered output"), new UTF8Encoding(false));
+
+                var result = store.Read(DateTime.UtcNow, TimeSpan.FromMinutes(3));
+                Assert(!result.IsSuccess, "tampered snapshot must be rejected");
+                Assert(result.Error.IndexOf("SHA-256", StringComparison.OrdinalIgnoreCase) >= 0, "tamper reason should mention SHA-256");
+            });
+        }
+
+        private static void SnapshotRejectsStaleData()
+        {
+            WithTemporarySnapshot((path, store) =>
+            {
+                var lines = new CheckmkLocalFormatter(new MonitoringOptions()).FormatSelfTest().ToArray();
+                var generated = DateTime.UtcNow.AddMinutes(-10);
+                store.Write(lines, generated, "DOMAIN\\collector$");
+
+                var result = store.Read(DateTime.UtcNow, TimeSpan.FromMinutes(3));
+                Assert(!result.IsSuccess, "stale snapshot must be rejected");
+                Assert(result.Error.IndexOf("stale", StringComparison.OrdinalIgnoreCase) >= 0, "stale reason missing");
+            });
+        }
+
+        private static void SnapshotRejectsDifferentMachine()
+        {
+            WithTemporarySnapshot((path, store) =>
+            {
+                var lines = new CheckmkLocalFormatter(new MonitoringOptions()).FormatSelfTest().ToArray();
+                store.Write(lines, DateTime.UtcNow, "DOMAIN\\collector$");
+                var content = File.ReadAllText(path, Encoding.UTF8);
+                var currentMachine = Convert.ToBase64String(Encoding.UTF8.GetBytes(Environment.MachineName));
+                var otherMachine = Convert.ToBase64String(Encoding.UTF8.GetBytes("OTHER-SERVER"));
+                File.WriteAllText(
+                    path,
+                    content.Replace("machineBase64=" + currentMachine, "machineBase64=" + otherMachine),
+                    new UTF8Encoding(false));
+
+                var result = store.Read(DateTime.UtcNow, TimeSpan.FromMinutes(3));
+                Assert(!result.IsSuccess, "snapshot for another machine must be rejected");
+                Assert(result.Error.IndexOf("different machine", StringComparison.OrdinalIgnoreCase) >= 0, "machine mismatch reason missing");
+            });
+        }
+
+        private static void SnapshotReportsMissingFile()
+        {
+            WithTemporarySnapshot((path, store) =>
+            {
+                var result = store.Read(DateTime.UtcNow, TimeSpan.FromMinutes(3));
+                Assert(!result.IsSuccess, "missing snapshot must be rejected");
+                Assert(result.Error.IndexOf("does not exist", StringComparison.OrdinalIgnoreCase) >= 0, "missing file reason missing");
+            });
+        }
+
+        private static void SnapshotFailureEmitsStableUnknownServices()
+        {
+            var lines = new CheckmkLocalFormatter(new MonitoringOptions())
+                .FormatSnapshotFailure("Snapshot file does not exist.")
+                .ToArray();
+            AssertEqual(6, lines.Length, "snapshot failure stable service count");
+            Assert(lines.All(x => x.StartsWith("3 \"BizTalk ", StringComparison.Ordinal)), "snapshot failure must be UNKNOWN");
+            Assert(lines.All(x => x.Contains("Scheduled Task")), "snapshot failure must contain provider action");
+        }
+
+        private static void WithTemporarySnapshot(Action<string, SnapshotStore> test)
+        {
+            var directory = Path.Combine(Path.GetTempPath(), "BizTalkCheckmkPulse.Tests." + Guid.NewGuid().ToString("N"));
+            Directory.CreateDirectory(directory);
+            var path = Path.Combine(directory, "snapshot.txt");
+            try
+            {
+                test(path, new SnapshotStore(path, 1048576));
+            }
+            finally
+            {
+                if (Directory.Exists(directory))
+                {
+                    Directory.Delete(directory, true);
+                }
+            }
+        }
+
         private static ProbeResult CreateSuspensionResult(string applicationName)
         {
             var result = new ProbeResult();