test(transport): cover endpoint policy integration gaps

Author: loong10k

src/test/java/io/github/easy4j/hermes/api/sse/SseLifecycleContractTest.java

@@ -131,4 +131,31 @@ void sessionDisconnectDoesNotReplayOriginalPost() throws Exception {
             }
         }
     }
+
+    @Test
+    void runIdentifierIsEncodedAsOneSsePathSegment() throws Exception {
+        try (MockWebServer server = new MockWebServer()) {
+            server.enqueue(new MockResponse()
+                    .setResponseCode(200)
+                    .setHeader("Content-Type", "text/event-stream")
+                    .setBody("data: [DONE]\\n\\n"));
+            server.start();
+
+            HermesHttpClientConfig config = new HermesHttpClientConfig()
+                    .setEndpointPolicy(io.github.easy4j.hermes.security.EndpointPolicy
+                            .trustedLocal("127.0.0.1", server.getPort()))
+                    .setBaseUrl("http://127.0.0.1:" + server.getPort());
+
+            try (HermesSseClient sse = new HermesSseClient(config, null, null)) {
+                SseSubscription subscription =
+                        sse.subscribeRunEvents("run/alpha?x=1", ignored -> { });
+                okhttp3.mockwebserver.RecordedRequest request =
+                        server.takeRequest(3, TimeUnit.SECONDS);
+                assertNotNull(request);
+                assertEquals("/v1/runs/run%2Falpha%3Fx%3D1/events", request.getPath());
+                subscription.cancel();
+            }
+        }
+    }
+
 }

src/test/java/io/github/easy4j/hermes/security/EndpointPolicyContractTest.java

@@ -1,5 +1,7 @@
 package io.github.easy4j.hermes.security;
 
+import io.github.easy4j.hermes.HermesClient;
+import io.github.easy4j.hermes.HermesCliConfig;
 import io.github.easy4j.hermes.HermesHttpClientConfig;
 import io.github.easy4j.hermes.api.HermesHttpClient;
 import io.github.easy4j.hermes.exception.HermesHttpException;
@@ -143,4 +145,23 @@ void testEp003S2EncodesReservedRunIdentifierAsOnePathSegment() throws Exception
         }
     }
 
+
+    @Test
+    void trustedLocalPolicySurvivesHermesClientConfigSnapshot() throws Exception {
+        try (MockWebServer server = new MockWebServer()) {
+            server.start();
+            HermesHttpClientConfig config = new HermesHttpClientConfig()
+                    .setEndpointPolicy(EndpointPolicy.trustedLocal("127.0.0.1", server.getPort()))
+                    .setBaseUrl("http://127.0.0.1:" + server.getPort());
+            HermesCliConfig cliConfig = new HermesCliConfig();
+            cliConfig.setEnabled(false);
+
+            assertDoesNotThrow(() -> {
+                try (HermesClient ignored = new HermesClient(config, cliConfig)) {
+                    // Construction is the contract: the copied config must retain the policy.
+                }
+            });
+        }
+    }
+
 }