prepare code skeleton to develop remaining managers

auth_test.go

@@ -0,0 +1,58 @@
+package prism
+
+import (
+	"testing"
+)
+
+func TestAuthManager(t *testing.T) {
+	t.Run("challenge triggers callback and send", func(t *testing.T) {
+		// p, envoy := newMockEnvoy(t)
+		// signed := []byte(`{"kind":22242,...}`)
+		// callback records invocation, returns signed
+		// m := NewAuthManager(envoy, callback)
+		// t.Cleanup(m.Close)
+		// p.connect(); p.receive(envelope.EncloseAuthChallenge("abc"))
+		// Eventually: callback called with "abc"
+		// Eventually: p.sent contains AUTH response envelope wrapping signed
+		// assert ChallengeReceived and AuthResponseSent recorded on observer
+	})
+
+	t.Run("callback error recorded", func(t *testing.T) {
+		// callback returns errors.New("signing failed")
+		// p.receive(envelope.EncloseAuthChallenge("abc"))
+		// Never: anything on p.sent
+		// assert ChallengeReceived and AuthResponseFailed recorded
+	})
+
+	t.Run("send error recorded", func(t *testing.T) {
+		// callback succeeds
+		// send returns error
+		// assert AuthResponseFailed recorded
+	})
+
+	t.Run("disconnect resets state", func(t *testing.T) {
+		// p.connect(); feed AUTH "abc"; callback fires
+		// p.disconnect()
+		// assert m.challenge == "" (inspect via exported accessor or package-level test access)
+		// p.connect(); feed AUTH "def"
+		// assert callback fires again with "def"
+	})
+
+	t.Run("replacement challenge", func(t *testing.T) {
+		// feed AUTH "abc"; feed AUTH "def" without disconnect
+		// assert callback called twice; second call receives "def"
+		// assert two AUTH response envelopes sent
+	})
+
+	t.Run("malformed AUTH ignored", func(t *testing.T) {
+		// p.receive(envelope.EncloseAuthResponse([]byte("{}"))) — second element is object
+		// Never: callback called
+		// assert no panic
+	})
+
+	t.Run("close cleans up", func(t *testing.T) {
+		// m.Close()
+		// feed another AUTH
+		// Never: callback invoked after close
+	})
+}