From 5fe6e7f225cded87575fafdabebf3da105498ad5 Mon Sep 17 00:00:00 2001
From: Jannis Braun <151788261+TheZwiss@users.noreply.github.com>
Date: Sun, 3 May 2026 23:21:53 +0200
Subject: [PATCH] test(harness): hmacSign + seedSpaceWithStubOwner helpers

---
 packages/server/test/helpers/hmacSign.ts      |  9 ++++++
 .../test/helpers/seedSpaceWithStubOwner.ts    | 31 +++++++++++++++++++
 2 files changed, 40 insertions(+)
 create mode 100644 packages/server/test/helpers/hmacSign.ts
 create mode 100644 packages/server/test/helpers/seedSpaceWithStubOwner.ts

diff --git a/packages/server/test/helpers/hmacSign.ts b/packages/server/test/helpers/hmacSign.ts
new file mode 100644
index 00000000..7a855b0a
--- /dev/null
+++ b/packages/server/test/helpers/hmacSign.ts
@@ -0,0 +1,9 @@
+import { buildFederationHeaders } from '../../src/utils/federationAuth.js';
+
+/**
+ * Wrapper exposed for the malicious-peer test (#13). Builds the same headers
+ * production code uses, but lets the test pass an arbitrary X-Federation-Origin.
+ */
+export function buildHeadersForOrigin(body: string, secret: string, claimedOrigin: string): Record<string, string> {
+  return buildFederationHeaders(body, secret, claimedOrigin);
+}
diff --git a/packages/server/test/helpers/seedSpaceWithStubOwner.ts b/packages/server/test/helpers/seedSpaceWithStubOwner.ts
new file mode 100644
index 00000000..1e145f09
--- /dev/null
+++ b/packages/server/test/helpers/seedSpaceWithStubOwner.ts
@@ -0,0 +1,31 @@
+import Database from 'better-sqlite3';
+import crypto from 'node:crypto';
+import type { SpawnedInstance } from './twoInstanceHarness.js';
+
+/**
+ * Direct DB insert (test-only): create a space owned by an arbitrary userId.
+ * Used by tests #7 and #8 — there is no public path for a replicated stub to
+ * become a space owner, so we seed it directly.
+ *
+ * Note: the spaces table has no `updated_at` or `layout` columns — the plan's
+ * INSERT template was incorrect. Only the four required columns are supplied:
+ * id, name, owner_id, created_at.
+ */
+export function seedOwnedSpace(instance: SpawnedInstance, ownerUserId: string, name = 'test-space'): { spaceId: string } {
+  const db = new Database(instance.dbPath);
+  try {
+    db.pragma('journal_mode = WAL');
+    // Disable FK checks so we can seed a space owned by a stub user ID that
+    // does not yet exist in the users table (the point of this helper).
+    db.pragma('foreign_keys = OFF');
+    const spaceId = crypto.randomBytes(8).toString('hex');
+    const now = Date.now();
+    db.prepare(
+      `INSERT INTO spaces (id, name, owner_id, created_at)
+       VALUES (?, ?, ?, ?)`,
+    ).run(spaceId, name, ownerUserId, now);
+    return { spaceId };
+  } finally {
+    db.close();
+  }
+}