From 53bc663cbff683f0176c54d199ab3effa5502657 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= <mbombeck@gmail.com>
Date: Fri, 23 Oct 2026 14:04:03 +0200
Subject: [PATCH] test(security): follow a fresh-proof request into the hook
 that sends it

The backups section now hands its flow to the download, restore and
upload hooks. Each caller entry may name the file that sends the
request; the component still owns the flow and the dialog and must
import that hook and hand it the flow.
---
 .../__tests__/recent-proof-callers.test.tsx   | 41 +++++++++++++++----
 1 file changed, 34 insertions(+), 7 deletions(-)

diff --git a/src/components/settings/security-section/__tests__/recent-proof-callers.test.tsx b/src/components/settings/security-section/__tests__/recent-proof-callers.test.tsx
index 6d22165d5..b93f081a7 100644
--- a/src/components/settings/security-section/__tests__/recent-proof-callers.test.tsx
+++ b/src/components/settings/security-section/__tests__/recent-proof-callers.test.tsx
@@ -65,7 +65,12 @@ describe("recentProofErrorMessage", () => {
   });
 });
 
-describe.each([
+/**
+ * [component, gated route, the hook that sends it]. The component holds the
+ * flow and renders its dialog; the request runs through `recentProof.run`,
+ * in the component itself or in a hook the component hands the flow to.
+ */
+describe.each<[string, string, string?]>([
   ["components/settings/export-section.tsx", "/api/export/full-backup"],
   ["components/settings/export-section.tsx", "/api/export/encrypted"],
   ["components/settings/share-link-create-form.tsx", "/api/share-links"],
@@ -73,21 +78,43 @@ describe.each([
   ["components/settings/api-section.tsx", "/api/tokens/measurements"],
   ["components/settings/api-section.tsx", "/api/tokens/documents"],
   ["components/settings/api-section.tsx", "/api/tokens/workouts"],
-  ["components/admin/backups-section.tsx", "/download"],
-  ["components/admin/backups-section.tsx", "/restore"],
-  ["components/admin/backups-section.tsx", "/api/admin/backups/upload"],
+  [
+    "components/admin/backups-section.tsx",
+    "/download",
+    "components/admin/backups/use-backup-actions.ts",
+  ],
+  [
+    "components/admin/backups-section.tsx",
+    "/restore",
+    "components/admin/backups/use-backup-restores.ts",
+  ],
+  [
+    "components/admin/backups-section.tsx",
+    "/api/admin/backups/upload",
+    "components/admin/backups/use-backup-upload.ts",
+  ],
   ["components/admin/danger-zone-section.tsx", "/api/admin/data"],
   ["components/admin/user-management-section.tsx", "/reset-password"],
-])("%s → %s", (file, endpoint) => {
+])("%s → %s", (file, endpoint, caller = file) => {
   const source = read(file);
+  const calling = read(caller);
 
   it("calls the gated route", () => {
-    expect(source).toContain(endpoint);
+    expect(calling).toContain(endpoint);
   });
 
   it("runs it through the recent-proof hook and renders the dialog", () => {
     expect(source).toContain("useRecentProof()");
-    expect(source).toMatch(/recentProof\.run\(/);
+    expect(calling).toMatch(/recentProof\.run\(/);
     expect(source).toContain("{recentProof.dialog}");
+    if (caller !== file) {
+      // The component hands its flow to the hook that sends the request.
+      const hook = caller
+        .split("/")
+        .pop()!
+        .replace(/\.tsx?$/, "");
+      expect(source).toMatch(new RegExp(`from "\\./[\\w/-]*${hook}"`));
+      expect(source).toMatch(/\(recentProof\)/);
+    }
   });
 });