Export document reading with Remote lease safeguards

internal/tentacle/remote_policy_test.go

@@ -4,13 +4,56 @@
 package tentacle
 
 import (
+	"context"
 	"encoding/json"
 	"errors"
+	"strings"
 	"testing"
+	"time"
 
 	"git.stormux.org/storm/cthulhu/internal/tentaclewire"
 )
 
+func TestRemoteCloseBeforeRetirementCallback(t *testing.T) {
+	for _, state := range []string{"expired", "cancelled"} {
+		t.Run(state, func(t *testing.T) {
+			ctx, cancel := context.WithCancel(t.Context())
+			defer cancel()
+			access := &remoteAccess{lease: strings.Repeat("a", 32), epoch: 1,
+				ctx: ctx, cancel: cancel, deadline: time.Now().Add(time.Minute)}
+			if state == "expired" {
+				access.deadline = time.Now().Add(-time.Second)
+			} else {
+				cancel()
+			}
+			manager := &Manager{}
+			session := &Session{manager: manager, remote: access, remoteEpoch: 1,
+				outbound: make(chan outgoing, 4)}
+			manager.remoteOwner = session
+			operation := tentaclewire.RemoteOperation{Lease: access.lease, Epoch: 1, Sequence: 1}
+			data, _ := json.Marshal(operation)
+			if _, failure := session.remote_call_locked("remote.heartbeat", data); failure == nil {
+				t.Fatal("heartbeat revived retired authority")
+			}
+			wrong := operation
+			wrong.Lease = strings.Repeat("b", 32)
+			invalid, _ := json.Marshal(wrong)
+			if _, failure := session.remote_call_locked("remote.close", invalid); failure == nil {
+				t.Fatal("foreign token closed pending retirement")
+			}
+			if _, failure := session.remote_call_locked("remote.close", data); failure != nil {
+				t.Fatal("cleanup rejected before retirement callback", failure)
+			}
+			if session.remote != nil || manager.remoteOwner != nil {
+				t.Fatal("close retained remote ownership")
+			}
+			if _, failure := session.remote_call_locked("remote.close", data); failure != nil {
+				t.Fatal("repeated cleanup failed", failure)
+			}
+		})
+	}
+}
+
 func TestRemotePolicyRevokesPendingAndLiveSDKAccess(t *testing.T) {
 	for _, language := range []string{"go", "python"} {
 		t.Run(language, func(t *testing.T) {