fix(auth): harden Windows storage bridge

tools/tht/internal/authstorage/storage_test.go

@@ -7,6 +7,7 @@ import (
 	"encoding/json"
 	"os"
 	"path/filepath"
+	"strings"
 	"sync"
 	"testing"
 
@@ -43,6 +44,44 @@ func TestProtocolCreatesReadsReplacesListsAndRemovesPrivateRecord(t *testing.T)
 	}
 }
 
+func TestProtocolListSerializesLowerCamelBridgeDTO(t *testing.T) {
+	root := filepath.Join(privateTestRoot(t), "auth")
+	filename := "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc.json"
+	runRequest(t, request{Version: 1, Operation: "create", Root: root, Directory: "sessions", Filename: filename, ContentBase64: base64.StdEncoding.EncodeToString([]byte("record"))})
+	input, err := json.Marshal(request{Version: 1, Operation: "list", Root: root, Directory: "sessions"})
+	if err != nil {
+		t.Fatal(err)
+	}
+	var stdout, stderr bytes.Buffer
+	if code := Run(context.Background(), nil, bytes.NewReader(input), &stdout, &stderr); code != 0 {
+		t.Fatalf("Run() code = %d stderr = %q", code, stderr.String())
+	}
+	if !strings.Contains(stdout.String(), `"name":"`+filename+`"`) || strings.Contains(stdout.String(), `"Name":`) {
+		t.Fatalf("list bridge JSON = %q, want lower-camel entry fields", stdout.String())
+	}
+}
+
+func TestRunRejectsProtocolOverflowAndTrailingJSONValues(t *testing.T) {
+	root := filepath.Join(privateTestRoot(t), "auth")
+	valid, err := json.Marshal(request{Version: 1, Operation: "list", Root: root, Directory: "sessions"})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(valid) >= maximumProtocolBytes {
+		t.Fatal("test request unexpectedly consumes protocol bound")
+	}
+
+	overflowWhitespace := append(append([]byte(nil), valid...), bytes.Repeat([]byte(" "), maximumProtocolBytes+1-len(valid))...)
+	runRawRejected(t, overflowWhitespace)
+
+	withinBound := append(append([]byte(nil), valid...), []byte("{}")...)
+	runRawRejected(t, withinBound)
+
+	crossingBound := append(append([]byte(nil), valid...), bytes.Repeat([]byte(" "), maximumProtocolBytes-len(valid)-1)...)
+	crossingBound = append(crossingBound, []byte("{}")...)
+	runRawRejected(t, crossingBound)
+}
+
 func TestProtocolClaimConsumeIsAtomicAcrossConcurrentRequests(t *testing.T) {
 	root := filepath.Join(privateTestRoot(t), "auth")
 	filename := "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd.json"
@@ -140,6 +179,14 @@ func runRejected(t *testing.T, value request) {
 	}
 }
 
+func runRawRejected(t *testing.T, input []byte) {
+	t.Helper()
+	var stdout, stderr bytes.Buffer
+	if code := Run(context.Background(), nil, bytes.NewReader(input), &stdout, &stderr); code == 0 || stdout.Len() != 0 || stderr.String() != "tht: auth storage request failed\n" {
+		t.Fatalf("Run() rejection code=%d stdout=%q stderr=%q", code, stdout.String(), stderr.String())
+	}
+}
+
 func decodeContent(t *testing.T, value response) string {
 	t.Helper()
 	contents, err := base64.StdEncoding.DecodeString(value.ContentBase64)