too much for one commit

tests/EntKube.Provisioning.Tests/Features/RemoveAppSecretHandlerTests.cs

@@ -0,0 +1,77 @@
+using EntKube.Provisioning.Domain;
+using EntKube.Provisioning.Features.Apps.RemoveAppSecret;
+using EntKube.Provisioning.Infrastructure;
+using EntKube.SharedKernel.Domain;
+using FluentAssertions;
+
+namespace EntKube.Provisioning.Tests.Features;
+
+public class RemoveAppSecretHandlerTests
+{
+    private readonly InMemoryAppRepository repository;
+    private readonly RemoveAppSecretHandler handler;
+
+    public RemoveAppSecretHandlerTests()
+    {
+        repository = new InMemoryAppRepository();
+        handler = new RemoveAppSecretHandler(repository);
+    }
+
+    [Fact]
+    public async Task HandleAsync_ExistingSecret_RemovesSuccessfully()
+    {
+        // Arrange — An app with an environment that has a secret.
+
+        App app = App.Create(Guid.NewGuid(), Guid.NewGuid(), "API", "api", AppType.Deployment);
+        Guid envId = Guid.NewGuid();
+        AppEnvironment env = app.AddEnvironment(envId, Guid.NewGuid(), "api-dev");
+        env.AddSecret("DATABASE_URL", "db-conn");
+        await repository.AddAsync(app);
+
+        // Act
+
+        Result result = await handler.HandleAsync(
+            new RemoveAppSecretRequest(app.Id, envId, "DATABASE_URL"));
+
+        // Assert
+
+        result.IsSuccess.Should().BeTrue();
+        App? updated = await repository.GetByIdAsync(app.Id);
+        updated!.Environments[0].Secrets.Should().BeEmpty();
+    }
+
+    [Fact]
+    public async Task HandleAsync_NonexistentApp_ReturnsFailure()
+    {
+        // Act
+
+        Result result = await handler.HandleAsync(
+            new RemoveAppSecretRequest(Guid.NewGuid(), Guid.NewGuid(), "KEY"));
+
+        // Assert
+
+        result.IsFailure.Should().BeTrue();
+        result.Error.Should().Contain("not found");
+    }
+
+    [Fact]
+    public async Task HandleAsync_NonexistentSecret_ReturnsFailure()
+    {
+        // Arrange
+
+        App app = App.Create(Guid.NewGuid(), Guid.NewGuid(), "API", "api", AppType.Deployment);
+        Guid envId = Guid.NewGuid();
+        app.AddEnvironment(envId, Guid.NewGuid(), "api-dev");
+        await repository.AddAsync(app);
+
+        // Act
+
+        Result result = await handler.HandleAsync(
+            new RemoveAppSecretRequest(app.Id, envId, "MISSING"));
+
+        // Assert
+
+        result.IsFailure.Should().BeTrue();
+        result.Error.Should().Contain("not found");
+    }
+}