Add end-to-end integration tests for Vaultik

- Create comprehensive integration tests with mock S3 client
- Add in-memory filesystem and SQLite database support for testing
- Test full backup workflow including chunking, packing, and uploading
- Add test to verify encrypted blob content
- Fix scanner to use afero filesystem for temp file cleanup
- Demonstrate successful backup and verification with mock dependencies

internal/vaultik/vaultik.go

@@ -0,0 +1,124 @@
+package vaultik
+
+import (
+	"context"
+	"fmt"
+	"io"
+	"os"
+
+	"git.eeqj.de/sneak/vaultik/internal/config"
+	"git.eeqj.de/sneak/vaultik/internal/crypto"
+	"git.eeqj.de/sneak/vaultik/internal/database"
+	"git.eeqj.de/sneak/vaultik/internal/globals"
+	"git.eeqj.de/sneak/vaultik/internal/s3"
+	"git.eeqj.de/sneak/vaultik/internal/snapshot"
+	"github.com/spf13/afero"
+	"go.uber.org/fx"
+)
+
+// Vaultik contains all dependencies needed for vaultik operations
+type Vaultik struct {
+	Globals         *globals.Globals
+	Config          *config.Config
+	DB              *database.DB
+	Repositories    *database.Repositories
+	S3Client        *s3.Client
+	ScannerFactory  snapshot.ScannerFactory
+	SnapshotManager *snapshot.SnapshotManager
+	Shutdowner      fx.Shutdowner
+	Fs              afero.Fs
+
+	// Context management
+	ctx    context.Context
+	cancel context.CancelFunc
+
+	// IO
+	Stdout io.Writer
+	Stderr io.Writer
+	Stdin  io.Reader
+}
+
+// VaultikParams contains all parameters for New that can be provided by fx
+type VaultikParams struct {
+	fx.In
+
+	Globals         *globals.Globals
+	Config          *config.Config
+	DB              *database.DB
+	Repositories    *database.Repositories
+	S3Client        *s3.Client
+	ScannerFactory  snapshot.ScannerFactory
+	SnapshotManager *snapshot.SnapshotManager
+	Shutdowner      fx.Shutdowner
+	Fs              afero.Fs `optional:"true"`
+}
+
+// New creates a new Vaultik instance with proper context management
+// It automatically includes crypto capabilities if age_secret_key is configured
+func New(params VaultikParams) *Vaultik {
+	ctx, cancel := context.WithCancel(context.Background())
+
+	// Use provided filesystem or default to OS filesystem
+	fs := params.Fs
+	if fs == nil {
+		fs = afero.NewOsFs()
+	}
+
+	// Set filesystem on SnapshotManager
+	params.SnapshotManager.SetFilesystem(fs)
+
+	return &Vaultik{
+		Globals:         params.Globals,
+		Config:          params.Config,
+		DB:              params.DB,
+		Repositories:    params.Repositories,
+		S3Client:        params.S3Client,
+		ScannerFactory:  params.ScannerFactory,
+		SnapshotManager: params.SnapshotManager,
+		Shutdowner:      params.Shutdowner,
+		Fs:              fs,
+		ctx:             ctx,
+		cancel:          cancel,
+		Stdout:          os.Stdout,
+		Stderr:          os.Stderr,
+		Stdin:           os.Stdin,
+	}
+}
+
+// Context returns the Vaultik's context
+func (v *Vaultik) Context() context.Context {
+	return v.ctx
+}
+
+// Cancel cancels the Vaultik's context
+func (v *Vaultik) Cancel() {
+	v.cancel()
+}
+
+// CanDecrypt returns true if this Vaultik instance has decryption capabilities
+func (v *Vaultik) CanDecrypt() bool {
+	return v.Config.AgeSecretKey != ""
+}
+
+// GetEncryptor creates a new Encryptor instance based on the configured age recipients
+// Returns an error if no recipients are configured
+func (v *Vaultik) GetEncryptor() (*crypto.Encryptor, error) {
+	if len(v.Config.AgeRecipients) == 0 {
+		return nil, fmt.Errorf("no age recipients configured")
+	}
+	return crypto.NewEncryptor(v.Config.AgeRecipients)
+}
+
+// GetDecryptor creates a new Decryptor instance based on the configured age secret key
+// Returns an error if no secret key is configured
+func (v *Vaultik) GetDecryptor() (*crypto.Decryptor, error) {
+	if v.Config.AgeSecretKey == "" {
+		return nil, fmt.Errorf("no age secret key configured")
+	}
+	return crypto.NewDecryptor(v.Config.AgeSecretKey)
+}
+
+// GetFilesystem returns the filesystem instance used by Vaultik
+func (v *Vaultik) GetFilesystem() afero.Fs {
+	return v.Fs
+}