test: add unmountSslTmpfs tests to restore function coverage

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: Mossaka

src/ssl-bump.test.ts

@@ -2,7 +2,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import * as os from 'os';
 import execa from 'execa';
-import { parseUrlPatterns, generateSessionCa, initSslDb, isOpenSslAvailable, secureWipeFile, cleanupSslKeyMaterial, chownRecursive } from './ssl-bump';
+import { parseUrlPatterns, generateSessionCa, initSslDb, isOpenSslAvailable, secureWipeFile, cleanupSslKeyMaterial, chownRecursive, unmountSslTmpfs } from './ssl-bump';
 
 // Pattern constant for the safer URL character class (matches the implementation)
 const URL_CHAR_PATTERN = '[^\\s]*';
@@ -455,4 +455,17 @@ describe('SSL Bump', () => {
       expect(() => cleanupSslKeyMaterial(tempDir)).not.toThrow();
     });
   });
+
+  describe('unmountSslTmpfs', () => {
+    it('should call umount on the ssl directory', async () => {
+      mockExeca.mockResolvedValueOnce({ stdout: '', stderr: '' });
+      await unmountSslTmpfs('/tmp/test-ssl');
+      expect(mockExeca).toHaveBeenCalledWith('umount', ['/tmp/test-ssl']);
+    });
+
+    it('should handle umount failure gracefully', async () => {
+      mockExeca.mockRejectedValueOnce(new Error('not mounted'));
+      await expect(unmountSslTmpfs('/tmp/test-ssl')).resolves.not.toThrow();
+    });
+  });
 });