1 files changed, 29 insertions, 1 deletions
diff --git a/packages/meshbay-hub/tests/test_index_seal_client.py b/packages/meshbay-hub/tests/test_index_seal_client.py
index ca2c7a2..e1135da 100644
--- a/packages/meshbay-hub/tests/test_index_seal_client.py
+++ b/packages/meshbay-hub/tests/test_index_seal_client.py
@@ -45,10 +45,15 @@ def _frame(msg: dict) -> str:
     return (struct.pack(">I", len(body)) + body).hex()
 
 
-def _sync_frame(gek: bytes, *names: str, version: int = 3) -> str:
+def _sync_frame(gek: bytes, *names: str, version: int = 3,
+                req_id: int | None = None) -> str:
     payload = {"version": version, "entries": [_entry(n) for n in names],
                "dirs": ["library"], "roots": [{"name": "library"}]}
+    # `req_id` is what a current node stamps on a *reply*; the push it sends a
+    # newly connected peer answers no request and carries none. Both shapes
+    # arrive here, and only one of them may resolve a waiting fetchIndex.
     return _frame({"type": "index_sync", "v": "1.0", "group_id": GROUP,
+                   **({"req_id": req_id} if req_id is not None else {}),
                    **seal(gek, PURPOSE_INDEX, "index_sync", GROUP, payload)})
 
 
@@ -141,3 +146,26 @@ def test_deltas_are_applied_in_arrival_order():
     assert [e["additions"][0] for e in out["events"][1:]] == [
         "added-0.mkv", "added-1.mkv", "added-2.mkv"]
     assert [e["base_version"] for e in out["events"][1:]] == [3, 4, 5]
+
+
+def test_a_sealed_reply_is_opened_before_it_reaches_its_caller():
+    """A stamped index_sync must not be short-circuited by its `req_id`.
+
+    Every other reply a node stamps is resolved straight out of the pending
+    map, which is the whole point of the id. An index message cannot be: it is
+    sealed, opening it is asynchronous, and `_dispatch` is not. Handing it over
+    on the strength of the id alone gives `fetchIndex` the envelope — nonce and
+    ciphertext, no entries — and never calls `onIndexSync` at all.
+
+    `req_id` is 0 here because it is the transport's first request, and a
+    falsy id is exactly the one a presence check gets wrong.
+    """
+    out = _run([_sync_frame(GEK, "a-film.mkv", req_id=0)])
+
+    assert [e["event"] for e in out["events"]] == ["index_sync"], (
+        "the consumer was never told about an index that arrived as a reply")
+    assert out["events"][0]["entries"] == ["a-film.mkv"]
+    assert out["events"][0]["hasCiphertext"] is False
+    assert out["fetchIndex"]["state"] == "resolved"
+    assert out["fetchIndex"]["entries"] == ["a-film.mkv"], (
+        "the caller was handed the sealed envelope instead of the index")