fix(auth): make local verification portable

Keep upstream identity visible while limiting logout to local auth. Inject the restore privilege gate so the deterministic core tests do not depend on the host OS, and confine descriptor-backed projection tests to Linux. Accept the real remaining Pi timeout budget instead of an exact millisecond.
2026-08-25 10:50:30 +02:00
parent e9c65ef2db
commit 610ae8c85a
10 changed files with 60 additions and 38 deletions
@@ -198,7 +198,10 @@ test("smoke uses the configured timeout and reports a sanitized timeout", async
    message: "Pi smoke check timed out",
    checkedAt: "2026-08-05T10:00:00.000Z",
  });
-  expect(calls).toEqual([{ command: "/usr/local/bin/pi", args: ["--version"], timeout: 750 }]);
+  expect(calls).toHaveLength(1);
+  expect(calls[0]).toMatchObject({ command: "/usr/local/bin/pi", args: ["--version"] });
+  expect(calls[0]!.timeout).toBeGreaterThan(0);
+  expect(calls[0]!.timeout).toBeLessThanOrEqual(750);
 });

 // Catches a smoke endpoint that validates only the Pi binary/model catalogue and never makes a