fix(api): tenant-проверка account/template в CreateDomain (HIGH), атомарный import через транзакцию (MEDIUM)

internal/store/store_test.go

@@ -7,6 +7,7 @@ import (
 	"github.com/google/uuid"
 	"github.com/jackc/pgx/v5/pgxpool"
 
+	"github.com/vasyakrg/dns-autoresolver/internal/provider"
 	"github.com/vasyakrg/dns-autoresolver/internal/store/db"
 	"github.com/vasyakrg/dns-autoresolver/internal/store/dto"
 )
@@ -88,3 +89,57 @@ func TestTemplateJSONBRoundTrip(t *testing.T) {
 		t.Fatal(err)
 	}
 }
+
+func TestImportDomains_CommitsAllOnSuccess(t *testing.T) {
+	s, ctx := newStore(t)
+	acc, err := s.Queries().CreateAccount(ctx, db.CreateAccountParams{
+		ID: uuid.New(), ProjectID: defaultProject, Provider: "selectel", SecretEnc: "enc-blob",
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+
+	zones := []provider.Zone{
+		{ID: "z1", Name: "a.example.com"},
+		{ID: "z2", Name: "b.example.com"},
+	}
+	doms, err := s.ImportDomains(ctx, defaultProject, acc.ID, zones)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(doms) != 2 {
+		t.Fatalf("expected 2 domains returned, got %d", len(doms))
+	}
+
+	list, err := s.ListDomains(ctx, defaultProject)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(list) != 2 {
+		t.Fatalf("expected 2 persisted domains, got %d", len(list))
+	}
+}
+
+// TestImportDomains_RollsBackAllOnError verifies the transactional contract:
+// if any zone in the batch fails to insert (here, an FK violation because
+// the account doesn't exist), none of the batch is left committed.
+func TestImportDomains_RollsBackAllOnError(t *testing.T) {
+	s, ctx := newStore(t)
+	bogusAccountID := uuid.New() // no matching provider_accounts row
+
+	zones := []provider.Zone{
+		{ID: "z1", Name: "a.example.com"},
+		{ID: "z2", Name: "b.example.com"},
+	}
+	if _, err := s.ImportDomains(ctx, defaultProject, bogusAccountID, zones); err == nil {
+		t.Fatal("expected FK violation error, got nil")
+	}
+
+	list, err := s.ListDomains(ctx, defaultProject)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(list) != 0 {
+		t.Fatalf("expected 0 domains after rollback, got %d", len(list))
+	}
+}