@mycadet/cli 0.12.11 → 0.13.0

package/src/__tests__/root-signing-key.test.ts

@@ -0,0 +1,50 @@
+import { afterEach, expect, test } from "bun:test";
+import {
+  mkdtempSync,
+  readFileSync,
+  rmSync,
+  statSync,
+  symlinkSync,
+  writeFileSync,
+} from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { persistRootSigningKey } from "../lib/root-signing-key.js";
+const directories: string[] = [];
+function fixture() {
+  const root = mkdtempSync(join(tmpdir(), "root-signing-key-"));
+  directories.push(root);
+  return root;
+}
+afterEach(() => {
+  for (const root of directories.splice(0)) {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+test("persists the raw key privately so offline capture retains installation identity", () => {
+  const root = fixture();
+  persistRootSigningKey(root, "07".repeat(32));
+  const file = join(root, "gateway-security", "actor-token-signing-key");
+  expect(readFileSync(file)).toEqual(Buffer.alloc(32, 7));
+  if (process.platform !== "win32") {
+    expect(statSync(file).mode & 0o777).toBe(0o600);
+  }
+});
+test("replaces a key file link without changing its target", () => {
+  const root = fixture();
+  persistRootSigningKey(root, "07".repeat(32));
+  const target = join(root, "other");
+  writeFileSync(target, "unchanged");
+  const file = join(root, "gateway-security", "actor-token-signing-key");
+  rmSync(file);
+  symlinkSync(target, file);
+  persistRootSigningKey(root, "09".repeat(32));
+  expect(readFileSync(target, "utf8")).toBe("unchanged");
+  expect(readFileSync(file)).toEqual(Buffer.alloc(32, 9));
+});
+test("rejects invalid key data before writing service state", () => {
+  const root = fixture();
+  expect(() => persistRootSigningKey(root, "bad")).toThrow(
+    "Invalid gateway signing key",
+  );
+});

package/src/__tests__/setup.test.ts

@@ -291,7 +291,7 @@ describe("setup command", () => {
       assistantId: "assistant-123",
       runtimeUrl: "https://assistant.example",
       bearerToken: "entry-token",
-      cloud: "cadet",
+      cloud: "cloud",
     });
 
     await setup();
@@ -310,7 +310,7 @@ describe("setup command", () => {
       assistantId: "assistant-123",
       runtimeUrl: "https://assistant.example",
       bearerToken: "entry-token",
-      cloud: "cadet",
+      cloud: "cloud",
     });
     saveGuardianToken(
       "assistant-123",
@@ -339,7 +339,7 @@ describe("setup command", () => {
       assistantId: "assistant-123",
       runtimeUrl: "https://assistant.example",
       bearerToken: "entry-token",
-      cloud: "cadet",
+      cloud: "cloud",
     });
     saveGuardianToken(
       "assistant-123",

package/src/__tests__/sleep.test.ts

@@ -216,6 +216,12 @@ describe("sleep command", () => {
     expect(stopProcessByPidFileMock).toHaveBeenCalledTimes(3);
   });
 
+  test("default sleep passes the non-escalating service stopper", async () => {
+    process.argv = ["bun", "cadet", "sleep", "sleep-test"];
+    await sleep();
+    expect(stopProcessByPidFileMock).toHaveBeenNthCalledWith(1, join(assistantRootDir, "workspace", "cadet.pid"), "assistant", undefined, 45_000, realProcess.stopProcessGracefully);
+  });
+
   test("force stops the assistant even when an active call lease exists", async () => {
     writeLeaseFile(["call-active-1"]);
     process.argv = ["bun", "cadet", "sleep", "sleep-test", "--force"];
@@ -238,6 +244,7 @@ describe("sleep command", () => {
       "assistant",
       undefined,
       45_000,
+      expect.any(Function),
     );
     expect(stopProcessByPidFileMock).toHaveBeenNthCalledWith(
       2,
@@ -245,12 +252,16 @@ describe("sleep command", () => {
       "gateway",
       undefined,
       7000,
+      expect.any(Function),
     );
     // The CES sibling is stopped by its PID file; a no-op when absent.
     expect(stopProcessByPidFileMock).toHaveBeenNthCalledWith(
       3,
       join(assistantRootDir, "ces.pid"),
       "credential-executor",
+      undefined,
+      45_000,
+      expect.any(Function),
     );
   });