test(wallet): cover WalletButton render branches + guard the removed keypair path

Adds jsdom + @testing-library/react (test-only) and extends the vitest include
to components/**/*.test.tsx.

WalletButton (mocking usePrivy / useWallet, asserting on i18n keys):
- authenticated via Privy, no wallet → connect-wallet prompt + sign-out, and NOT
  the sign-in button
- not authenticated, no wallet → sign-in button
- wallet connected via SWK → account panel, with and without Privy auth

Regression guard: no module under apps/web references Keypair.random /
molotov_stellar_kp / molotov_funded (needles assembled from fragments so this
test's own source doesn't match).

No component code changed. pnpm --filter=web test (104), typecheck, lint pass.

Author: mariaelisaaraya

apps/web/components/wallet-button.test.tsx

@@ -0,0 +1,125 @@
+// @vitest-environment jsdom
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+
+// Hooks the component depends on are mocked so each render branch can be driven
+// directly. i18n echoes the key, so assertions are on the i18n key (user-visible
+// text), never on class names or specific copy.
+const { usePrivyMock, useWalletMock, useWalletsMock } = vi.hoisted(() => ({
+  usePrivyMock: vi.fn(),
+  useWalletMock: vi.fn(),
+  useWalletsMock: vi.fn(() => ({ wallets: [] })),
+}));
+
+vi.mock("@privy-io/react-auth", () => ({
+  usePrivy: () => usePrivyMock(),
+  useWallets: () => useWalletsMock(),
+}));
+
+vi.mock("@/hooks/use-wallet", () => ({
+  useWallet: () => useWalletMock(),
+}));
+
+vi.mock("@/lib/i18n", () => ({
+  useI18n: () => ({ t: (k: string) => k, locale: "en" }),
+}));
+
+import { WalletButton } from "@/components/wallet-button";
+
+function walletCtx(over: Record<string, unknown> = {}) {
+  return {
+    address: null,
+    isConnected: false,
+    isConnecting: false,
+    connect: vi.fn(),
+    prewarm: vi.fn(),
+    disconnect: vi.fn(),
+    connectViaPrivy: vi.fn(),
+    signTransaction: vi.fn(),
+    ...over,
+  };
+}
+
+function privyCtx(over: Record<string, unknown> = {}) {
+  return {
+    ready: true,
+    authenticated: false,
+    user: null,
+    logout: vi.fn(),
+    login: vi.fn(),
+    ...over,
+  };
+}
+
+beforeEach(() => {
+  // The account panel reads Horizon for a balance; keep it off the network and
+  // pending so no state update fires outside act during these render assertions.
+  vi.stubGlobal(
+    "fetch",
+    vi.fn(() => new Promise(() => {})),
+  );
+});
+
+afterEach(() => {
+  cleanup();
+  vi.unstubAllGlobals();
+  vi.clearAllMocks();
+});
+
+describe("WalletButton render branches", () => {
+  it("authenticated via Privy, no wallet: connect-wallet prompt + sign-out, and NO sign-in button", () => {
+    useWalletMock.mockReturnValue(walletCtx()); // not connected
+    usePrivyMock.mockReturnValue(
+      privyCtx({ authenticated: true, user: { google: { email: "artist@example.com" } } }),
+    );
+
+    render(<WalletButton />);
+
+    // The anonymous sign-in button is not shown in this state.
+    expect(screen.queryByText("nav.signIn")).toBeNull();
+
+    // Identity is shown as the trigger; open it to reveal the prompt + controls.
+    fireEvent.click(screen.getByRole("button"));
+
+    expect(screen.getByText("wallet.noWalletHint")).toBeTruthy();
+    expect(screen.getByText("wallet.connect")).toBeTruthy();
+    expect(screen.getByText("account.signOut")).toBeTruthy();
+    expect(screen.queryByText("nav.signIn")).toBeNull();
+  });
+
+  it("not authenticated, no wallet: renders the sign-in button", () => {
+    useWalletMock.mockReturnValue(walletCtx());
+    usePrivyMock.mockReturnValue(privyCtx({ authenticated: false, user: null }));
+
+    render(<WalletButton />);
+
+    expect(screen.getByText("nav.signIn")).toBeTruthy();
+    expect(screen.queryByText("wallet.noWalletHint")).toBeNull();
+  });
+
+  it.each([
+    { label: "with Privy auth", authenticated: true, user: { google: { email: "a@b.com" } } },
+    { label: "without Privy auth", authenticated: false, user: null },
+  ])(
+    "wallet connected via SWK ($label): renders the account panel as before",
+    ({ authenticated, user }) => {
+      useWalletMock.mockReturnValue(
+        walletCtx({
+          address: "GABCDEFGHIJKLMNOPQRSTUVWXYZ234567ABCDEFGHIJKLMNOPQRST",
+          isConnected: true,
+        }),
+      );
+      usePrivyMock.mockReturnValue(privyCtx({ authenticated, user }));
+
+      render(<WalletButton />);
+      fireEvent.click(screen.getByRole("button")); // open the account menu
+
+      // Account-panel content (unchanged), not the no-wallet prompt or sign-in.
+      expect(screen.getByText("account.profile")).toBeTruthy();
+      expect(screen.getByText("account.balance")).toBeTruthy();
+      expect(screen.getByText("account.signOut")).toBeTruthy();
+      expect(screen.queryByText("wallet.noWalletHint")).toBeNull();
+      expect(screen.queryByText("nav.signIn")).toBeNull();
+    },
+  );
+});

apps/web/lib/no-localstorage-keypair.test.ts

@@ -0,0 +1,41 @@
+import { describe, expect, it } from "vitest";
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, join, resolve } from "node:path";
+
+// Regression guard for ADR 0002 (Option D): the Privy-derived keypair persisted to
+// localStorage was removed, not migrated. This fails if any of its fingerprints
+// reappear anywhere under apps/web.
+//
+// The needles are assembled from fragments on purpose, so this test's own source
+// does not contain the contiguous strings it searches for.
+const FORBIDDEN = ["Keypair" + ".random", "molotov_stellar" + "_kp", "molotov_" + "funded"];
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const WEB_ROOT = resolve(HERE, ".."); // apps/web
+const SKIP_DIRS = new Set(["node_modules", ".next", "dist", "coverage", ".turbo"]);
+const EXTS = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"];
+
+function walk(dir: string): string[] {
+  const out: string[] = [];
+  for (const name of readdirSync(dir)) {
+    if (SKIP_DIRS.has(name)) continue;
+    const full = join(dir, name);
+    if (statSync(full).isDirectory()) out.push(...walk(full));
+    else if (EXTS.some((e) => full.endsWith(e))) out.push(full);
+  }
+  return out;
+}
+
+describe("no localStorage keypair path (ADR 0002)", () => {
+  it("no module under apps/web references the removed keypair path", () => {
+    const offenders: string[] = [];
+    for (const file of walk(WEB_ROOT)) {
+      const src = readFileSync(file, "utf8");
+      for (const needle of FORBIDDEN) {
+        if (src.includes(needle)) offenders.push(`${file.slice(WEB_ROOT.length + 1)} → ${needle}`);
+      }
+    }
+    expect(offenders, `Removed keypair path resurfaced:\n${offenders.join("\n")}`).toEqual([]);
+  });
+});

apps/web/package.json

@@ -35,11 +35,13 @@
   },
   "devDependencies": {
     "@tailwindcss/postcss": "^4",
+    "@testing-library/react": "^16.3.2",
     "@types/node": "^20",
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "eslint": "^9",
     "eslint-config-next": "16.2.6",
+    "jsdom": "^30.0.1",
     "sharp": "^0.34.5",
     "tailwindcss": "^4",
     "typescript": "^5",

apps/web/vitest.config.ts

@@ -12,7 +12,12 @@ export default defineConfig({
     environment: "node",
     // Must cover lib/ too: a test file outside `include` does not fail, it simply
     // never runs — which looks identical to passing.
-    include: ["app/api/**/*.test.ts", "hooks/**/*.test.ts", "lib/**/*.test.ts"],
+    include: [
+      "app/api/**/*.test.ts",
+      "hooks/**/*.test.ts",
+      "lib/**/*.test.ts",
+      "components/**/*.test.tsx",
+    ],
     testTimeout: 120_000,
     hookTimeout: 120_000,
   },