fix(tests): unbreak npm test on Windows + close 20-day CI gap

Eight tests have been failing on Windows since (a) 2026-03-17 dfedc25 (3 stale fixtures cross-platform) and (b) forever (5 POSIX assumptions). CI never noticed because its bash glob 'src/**/*.test.ts' silently skips top-level src files when globstar is off (the default). Fixes:

1. src/keystore.test.ts: drop 'tier' and 'lease_expires_at' from test fixtures (loadKeyStore strips them since dfedc25). 3 tests fixed cross-platform.

2. src/keystore.test.ts + core/src/keystore.test.ts + core/src/allowance.test.ts: skip 'creates file with 0600 permissions' on Windows with explicit reason. Windows NTFS doesn't enforce POSIX file modes.

3. core/src/config.test.ts: use path.join() in expected values for path-derivation tests so backslash paths on Windows match.

4. .github/workflows/test.yml: enable bash globstar and add core/src/**/*.test.ts to the CI test command. Without this, root-level src test files (keystore, client, errors, paid-fetch) were silently skipped by CI.

Result: npm test on Windows is now 262/262 + 56/56 = 318 pass, 3 skip (POSIX file mode), 0 fail. Linux CI will now actually execute the previously-skipped 4 src/*.test.ts files plus all core/src/*.test.ts files.

Author: volinskey

.github/workflows/test.yml

@@ -20,6 +20,13 @@ jobs:
       - run: npm run build
       - run: npm run test:skill
       - run: npm run test:sync
-      - run: node --experimental-test-module-mocks --test --import tsx src/**/*.test.ts
+      # Use bash globstar so `**` recurses into nested dirs AND matches files
+      # at depth 0. Without this, files like src/keystore.test.ts (at depth 0)
+      # were silently skipped by CI for 20+ days. Also explicitly run the
+      # core/src tests, which were never matched by the old glob.
+      - shell: bash
+        run: |
+          shopt -s globstar
+          node --experimental-test-module-mocks --test --import tsx src/**/*.test.ts core/src/**/*.test.ts
       - run: npm run test:e2e
       - run: npm run test:integration

core/src/allowance.test.ts

@@ -35,7 +35,7 @@ describe("allowance", () => {
     assert.deepEqual(loaded, allowance);
   });
 
-  it("creates file with 0600 permissions", () => {
+  it("creates file with 0600 permissions", { skip: process.platform === "win32" ? "POSIX file modes not enforced on Windows NTFS" : false }, () => {
     saveAllowance({ address: "0x1", privateKey: "0x2" }, allowancePath);
     const stats = statSync(allowancePath);
     const mode = stats.mode & 0o777;

core/src/config.test.ts

@@ -42,13 +42,15 @@ describe("config", () => {
 
   it("derives keystore path from config dir", () => {
     process.env.RUN402_CONFIG_DIR = "/tmp/test-config";
-    assert.equal(getKeystorePath(), "/tmp/test-config/projects.json");
+    // Use path.join in the expected value so the test passes on both POSIX
+    // and Windows (Windows produces backslashes via path.join).
+    assert.equal(getKeystorePath(), join("/tmp/test-config", "projects.json"));
   });
 
   it("derives allowance path from config dir", () => {
     process.env.RUN402_CONFIG_DIR = "/tmp/test-config";
     delete process.env.RUN402_ALLOWANCE_PATH;
-    assert.equal(getAllowancePath(), "/tmp/test-config/allowance.json");
+    assert.equal(getAllowancePath(), join("/tmp/test-config", "allowance.json"));
   });
 
   it("returns custom allowance path from RUN402_ALLOWANCE_PATH env", () => {

core/src/keystore.test.ts

@@ -34,7 +34,7 @@ describe("core keystore", () => {
     assert.deepEqual(loaded, project);
   });
 
-  it("creates file with 0600 permissions", () => {
+  it("creates file with 0600 permissions", { skip: process.platform === "win32" ? "POSIX file modes not enforced on Windows NTFS" : false }, () => {
     saveProject("proj-002", {
       anon_key: "ak", service_key: "sk",
     }, storePath);

src/keystore.test.ts

@@ -28,21 +28,17 @@ describe("keystore", () => {
     const project: StoredProject = {
       anon_key: "anon-key-123",
       service_key: "svc-key-456",
-      tier: "prototype",
-      lease_expires_at: "2026-03-06T00:00:00Z",
     };
     saveProject("proj-001", project, storePath);
 
     const loaded = getProject("proj-001", storePath);
     assert.deepEqual(loaded, project);
   });
 
-  it("creates file with 0600 permissions", () => {
+  it("creates file with 0600 permissions", { skip: process.platform === "win32" ? "POSIX file modes not enforced on Windows NTFS" : false }, () => {
     const project: StoredProject = {
       anon_key: "ak",
       service_key: "sk",
-      tier: "hobby",
-      lease_expires_at: "2026-04-01T00:00:00Z",
     };
     saveProject("proj-002", project, storePath);
 
@@ -55,14 +51,10 @@ describe("keystore", () => {
     const p1: StoredProject = {
       anon_key: "ak1",
       service_key: "sk1",
-      tier: "prototype",
-      lease_expires_at: "2026-03-01T00:00:00Z",
     };
     const p2: StoredProject = {
       anon_key: "ak2",
       service_key: "sk2",
-      tier: "team",
-      lease_expires_at: "2026-04-01T00:00:00Z",
     };
 
     saveProject("proj-a", p1, storePath);
@@ -80,14 +72,10 @@ describe("keystore", () => {
     const v1: StoredProject = {
       anon_key: "old",
       service_key: "old",
-      tier: "prototype",
-      lease_expires_at: "2026-03-01T00:00:00Z",
     };
     const v2: StoredProject = {
       anon_key: "new",
       service_key: "new",
-      tier: "hobby",
-      lease_expires_at: "2026-04-01T00:00:00Z",
     };
 
     saveProject("proj-x", v1, storePath);
@@ -112,8 +100,6 @@ describe("keystore", () => {
     const project: StoredProject = {
       anon_key: "ak",
       service_key: "sk",
-      tier: "prototype",
-      lease_expires_at: "2026-03-01T00:00:00Z",
     };
     saveProject("proj-atomic", project, storePath);