epistery 2.0.4 → 2.2.0

package/test/config/.epistery/test-idempotent-1782325887610.local/config.ini

@@ -0,0 +1,20 @@
+domain=test-idempotent-1782325887610.local
+pending=true
+challenge_token=4a6b22e1c5fbcc409a6a7b2818cc59adcdc209c9f17a830f6597a154112a393d
+challenge_address=0xdcb8454e5ce6b911dba93c11ad530c61d2520d8e
+challenge_created=2026-06-24T18:31:27.654Z
+challenge_requester_ip=::ffff:127.0.0.1
+
+[provider]
+name=Polygon Amoy Testnet
+chainId=80002
+rpc=https://rpc-amoy.polygon.technology
+nativeCurrencySymbol=POL
+nativeCurrencyName=POL
+nativeCurrencyDecimals=18
+
+[wallet]
+address=0x3088095FfBcfB4c5c41bF2013aaC445925D97053
+mnemonic=jump youth pigeon erupt pigeon decorate pattern evil cage piece mean dawn
+publicKey=0x04a6c3b50b9c644e9165c694b2aa999cf68dcb2c84d0d25944e77dbbce02efab7415726e7d73117df9923431238d1b2ba9041c1f0dc623102fd57d3bf80ec662ba
+privateKey=0x759580a4cf6b6d0fe1903b59071186e2c6ecc6224d5c2852e76a031ea1218acf

package/test/config/.epistery/test-init-1782325888110.local/config.ini

@@ -0,0 +1,16 @@
+domain=test-init-1782325888110.local
+pending=true
+
+[provider]
+chainId=80002
+name=Polygon Amoy Testnet
+rpc=https://rpc-amoy.polygon.technology
+nativeCurrencyName=POL
+nativeCurrencySymbol=POL
+nativeCurrencyDecimals=18
+
+[wallet]
+address=0x8b9190A997E5b79f680cD8bC075E4aF867264c69
+mnemonic=copy blade pen core angry often manage tail vivid spice east allow
+publicKey=0x04ad07e52a39f18eeb50423b73a6769d880520fbfecad2b12e01da538c0f114297b63be8b10ac1a873e21c4d0c6887986d96207007208d0bebcd798bc15f6e77cc
+privateKey=0xce4633388ee13e3d516104f3f82b9a21bb8dc8e7c813c0261c70fd0b86b34d0a

package/test/routes/auth.test.ts

@@ -119,14 +119,18 @@ describe('Auth Routes', () => {
   });
 
   describe('GET /auth/dns/claim', () => {
-    it('should require address query parameter', async () => {
+    it('should error when no pending claim exists for the domain', async () => {
+      // localhost is regenerated clean by globalSetup (no pending claim), so the
+      // handler returns 400 from the no-pending guard before it ever reaches the
+      // missing-address check. (The 401 "Client address not found" path is only
+      // reachable once a pending claim exists for the domain.)
       const response = await testApp.supertest
         .get('/.well-known/epistery/auth/dns/claim')
         .set('Host', 'localhost')
-        .expect(401);
+        .expect(400);
 
       expect(response.body.status).toBe('error');
-      expect(response.body.message).toContain('address');
+      expect(response.body.message).toContain('pending');
     });
 
     it('should return error when no pending claim exists', async () => {

package/test/routes/identity.test.ts

@@ -18,47 +18,6 @@ describe('Identity Routes', () => {
     // Cleanup if needed
   });
 
-  describe('POST /identity/prepare-deploy', () => {
-    it('should require client address', async () => {
-      const response = await testApp.supertest
-        .post('/.well-known/epistery/identity/prepare-deploy')
-        .send({ domain: 'localhost' })
-        .expect(400);
-
-      expect(response.body.error).toContain('required fields');
-    });
-
-    it('should require domain', async () => {
-      const response = await testApp.supertest
-        .post('/.well-known/epistery/identity/prepare-deploy')
-        .send({ clientAddress: TEST_WALLETS.client1.address })
-        .expect(400);
-
-      expect(response.body.error).toContain('required fields');
-    });
-
-    it('should prepare unsigned deployment transaction', async () => {
-      if (!TEST_CONTRACT_ADDRESS) {
-        console.log('Skipping: TEST_CONTRACT_ADDRESS not set');
-        return;
-      }
-
-      const response = await testApp.supertest
-        .post('/.well-known/epistery/identity/prepare-deploy')
-        .send({
-          clientAddress: TEST_WALLETS.client1.address,
-          domain: 'localhost'
-        })
-        .timeout(60000);
-
-      if (response.status === 200) {
-        expect(response.body.unsignedTransaction).toBeDefined();
-      } else {
-        console.log('Prepare deploy failed:', response.body.error);
-      }
-    });
-  });
-
   describe('POST /identity/prepare-add-rivet', () => {
     it('should require all fields', async () => {
       const response = await testApp.supertest

package/test/routes/status.test.ts

@@ -25,43 +25,6 @@ describe('Status Routes', () => {
       expect(response.body.server).toBeDefined();
       expect(response.body.server.walletAddress).toBeDefined();
     });
-
-    it('should return HTML status page when Accept: text/html', async () => {
-      const response = await testApp.supertest
-        .get('/.well-known/epistery/')
-        .set('Accept', 'text/html')
-        .expect(200);
-
-      expect(response.text).toContain('<!DOCTYPE html>');
-    });
-
-    it('should return HTML by default for browser requests', async () => {
-      const response = await testApp.supertest
-        .get('/.well-known/epistery/')
-        .set('Accept', 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8')
-        .expect(200);
-
-      expect(response.text).toContain('<!DOCTYPE html>');
-    });
-  });
-
-  describe('GET /status', () => {
-    it('should return HTML status page', async () => {
-      const response = await testApp.supertest
-        .get('/.well-known/epistery/status')
-        .expect(200);
-
-      expect(response.text).toContain('<!DOCTYPE html>');
-    });
-
-    it('should include server domain in template', async () => {
-      const response = await testApp.supertest
-        .get('/.well-known/epistery/status')
-        .set('Host', 'localhost:3000')
-        .expect(200);
-
-      expect(response.text).toContain('localhost');
-    });
   });
 
   describe('GET /lib/:module', () => {
@@ -110,9 +73,12 @@ describe('Status Routes', () => {
   });
 
   describe('GET /artifacts/:contractFile', () => {
-    it('should serve Agent.json contract artifact', async () => {
+    it('should serve IdentityContract.json contract artifact', async () => {
+      // Agent.sol was removed in the identity-only refactor (its artifact is
+      // kept only as reference). IdentityContract is the live contract the
+      // client fetches, so the artifact route is exercised against that.
       const response = await testApp.supertest
-        .get('/.well-known/epistery/artifacts/Agent.json')
+        .get('/.well-known/epistery/artifacts/IdentityContract.json')
         .expect(200)
         .expect('Content-Type', /json/);
 

package/test/setup.ts

@@ -38,14 +38,14 @@ export default async function globalSetup() {
   process.env.CHAIN_ID = String(TEST_PROVIDER.chainId);
   process.env.SERVER_DOMAIN = 'localhost';
 
-  // 3. Generate test config files from environment variables
-  const localhostDir = path.join(testConfigPath, 'localhost');
-  if (!fs.existsSync(testConfigPath)) {
-    fs.mkdirSync(testConfigPath, { recursive: true });
-  }
-  if (!fs.existsSync(localhostDir)) {
-    fs.mkdirSync(localhostDir, { recursive: true });
-  }
+  // 3. Generate test config files from environment variables.
+  // Config reads HOME/.epistery (configDir = join(HOME, '.epistery')), so the
+  // fixtures must live under .epistery — NOT directly under HOME. (They used to
+  // be written one level too high, so Config never saw them and auto-seeded
+  // defaults + random wallets.)
+  const episteryDir = path.join(testConfigPath, '.epistery');
+  const localhostDir = path.join(episteryDir, 'localhost');
+  fs.mkdirSync(localhostDir, { recursive: true });
 
   // Write root config
   const rootConfig = `[profile]
@@ -63,7 +63,7 @@ nativeCurrencyDecimals=${TEST_PROVIDER.nativeCurrencyDecimals}
 [cli]
 default_domain=localhost
 `;
-  fs.writeFileSync(path.join(testConfigPath, 'config.ini'), rootConfig);
+  fs.writeFileSync(path.join(episteryDir, 'config.ini'), rootConfig);
 
   // Write localhost domain config
   const localhostConfig = `domain=localhost

package/test/utils.ts

@@ -180,11 +180,17 @@ export async function createBotAuthHeader(wallet: ethers.Wallet): Promise<string
 }
 
 /**
- * Create a session cookie for authenticated requests
+ * Create a session cookie for authenticated requests.
+ *
+ * Matches the three-fact session shape the auth middleware reads
+ * (index.mjs: s.signerAddress / s.contractAddress / s.publicKey). The old field
+ * name `rivetAddress` predated the identity-vocabulary migration and was silently
+ * ignored by the middleware (no signerAddress → unauthenticated).
  */
-export function createSessionCookie(rivetAddress: string, publicKey?: string): string {
+export function createSessionCookie(signerAddress: string, publicKey?: string, contractAddress?: string | null): string {
   const sessionData = {
-    rivetAddress,
+    signerAddress,
+    contractAddress: contractAddress || null,
     publicKey: publicKey || '',
     authenticated: true,
     timestamp: new Date().toISOString()