feat: admit numbered iPhone companion

product-source/hololake-native-desktop/mobile/ios/Tests/HoloLakeMobileTests.swift

@@ -0,0 +1,44 @@
+import CryptoKit
+import XCTest
+@testable import HoloLakeMobile
+
+final class HoloLakeMobileTests: XCTestCase {
+    func testPairingCoordinateParsesOnlyCompleteLink() throws {
+        let secret = Data(repeating: 7, count: 32).base64URL
+        let id = UUID().uuidString.lowercased()
+        let url = try XCTUnwrap(URL(string: "hololake://pair?host=192.168.1.8&port=37421&id=\(id)&secret=\(secret)"))
+        let value = try PairingDescriptor(url: url)
+        XCTAssertEqual(value.host, "192.168.1.8")
+        XCTAssertEqual(value.port, 37421)
+        XCTAssertEqual(value.pairingID, id)
+        XCTAssertEqual(value.secret, Data(repeating: 7, count: 32))
+    }
+
+    func testPairingCoordinateRejectsMissingSecret() throws {
+        let url = try XCTUnwrap(URL(string: "hololake://pair?host=127.0.0.1&port=37421&id=\(UUID().uuidString)"))
+        XCTAssertThrowsError(try PairingDescriptor(url: url))
+    }
+
+    func testPairingCoordinateRejectsDuplicateKeys() throws {
+        let secret = Data(repeating: 7, count: 32).base64URL
+        let id = UUID().uuidString.lowercased()
+        let url = try XCTUnwrap(URL(string: "hololake://pair?host=192.168.1.8&host=127.0.0.1&port=37421&id=\(id)&secret=\(secret)"))
+        XCTAssertThrowsError(try PairingDescriptor(url: url))
+    }
+
+    func testCryptoKitPayloadMatchesServerWireShape() throws {
+        let key = SymmetricKey(data: Data(repeating: 3, count: 32))
+        let nonce = try ChaChaPoly.Nonce(data: Data(repeating: 9, count: 12))
+        let aad = Data("hololake.mobile.pair/v1".utf8)
+        let clear = Data("hello".utf8)
+        let sealed = try ChaChaPoly.seal(clear, using: key, nonce: nonce, authenticating: aad)
+        let wire = sealed.ciphertext + sealed.tag
+        XCTAssertEqual(wire.count, clear.count + 16)
+        let restored = try ChaChaPoly.open(
+            ChaChaPoly.SealedBox(nonce: nonce, ciphertext: wire.dropLast(16), tag: wire.suffix(16)),
+            using: key,
+            authenticating: aad
+        )
+        XCTAssertEqual(restored, clear)
+    }
+}