Add Dart package tests (smoke + access-token round-trip)

Ship tests in support/dart/test, copied into the generated package by the
dart-package flow. Covers the FFI smoke path (buildVersion) and a real
JWT/HMAC round-trip (generate -> verify -> decode, plus wrong-secret rejection)
to exercise Rust logic across the boundary.

Author: jhugman

livekit-uniffi/Makefile.toml

@@ -679,14 +679,23 @@ script = """
 cp ${LIB_PATH} ${PACKAGES_DIR}/${LANG}/
 """
 
+[tasks.dart-copy-tests]
+private = true
+script_runner = "@shell"
+script = """
+mkdir -p ${PACKAGES_DIR}/${LANG}/test
+cp ${SUPPORT_DIR}/${LANG}/test/*.dart ${PACKAGES_DIR}/${LANG}/test/
+"""
+
 [tasks.dart-package-flow]
 private = true
 dependencies = [
     "bindgen-dart",
     "dart-move-code-into-lib",
     "dart-generate-manifest",
     "dart-copy-hook",
-    "dart-copy-lib"
+    "dart-copy-lib",
+    "dart-copy-tests"
 ]
 
 [tasks.dart-package]

livekit-uniffi/support/dart/test/access_token_test.dart

@@ -0,0 +1,51 @@
+import 'package:test/test.dart';
+import 'package:livekit_uniffi/livekit_uniffi.dart';
+
+void main() {
+  // Exercises real Rust JWT/HMAC logic across the FFI boundary: generate a
+  // token, then verify and decode it.
+  final creds = ApiCredentials(key: 'devkey', secret: 'devsecret');
+
+  group('access token', () {
+    test('generate produces a well-formed JWT', () {
+      final token = tokenGenerate(
+        options: TokenOptions(identity: 'alice', name: 'Alice'),
+        credentials: creds,
+      );
+      // header.payload.signature
+      expect(token.split('.'), hasLength(3));
+    });
+
+    test('verify round-trips identity, name, and issuer', () {
+      final token = tokenGenerate(
+        options: TokenOptions(identity: 'alice', name: 'Alice'),
+        credentials: creds,
+      );
+      final claims = tokenVerify(token: token, credentials: creds);
+      expect(claims.sub, equals('alice'));
+      expect(claims.name, equals('Alice'));
+      expect(claims.iss, equals('devkey'));
+    });
+
+    test('claims can be read without the secret', () {
+      final token = tokenGenerate(
+        options: TokenOptions(identity: 'bob'),
+        credentials: creds,
+      );
+      final claims = tokenClaimsFromUnverified(token: token);
+      expect(claims.sub, equals('bob'));
+    });
+
+    test('verify rejects a token signed with a different secret', () {
+      final token = tokenGenerate(
+        options: TokenOptions(identity: 'alice'),
+        credentials: creds,
+      );
+      final wrong = ApiCredentials(key: 'devkey', secret: 'wrongsecret');
+      expect(
+        () => tokenVerify(token: token, credentials: wrong),
+        throwsA(isA<AccessTokenException>()),
+      );
+    });
+  });
+}

livekit-uniffi/support/dart/test/build_version_test.dart

@@ -0,0 +1,10 @@
+import 'package:test/test.dart';
+import 'package:livekit_uniffi/livekit_uniffi.dart';
+
+void main() {
+  // Smoke test for the whole FFI path: the build hook resolves the native
+  // library, Dart calls a Rust function, and the result crosses back.
+  test('buildVersion returns a non-empty version string', () {
+    expect(buildVersion(), isNotEmpty);
+  });
+}