test(cli): exercise MCP grant on local retained daemon

[0thernet]

Change

Run the existing MCP grant boundary regression with retained local daemon sockets instead of binding the unrelated public peer listener. Poll readiness with a bounded sleep and startup budget. The test still checks the granted room, denied cross-room/admin requests, no credential/other-room leakage, and rejection after restart.

Checks

• cargo +1.98.1 fmt --all -- --check — passed.
• CARGO_HOME=$PWD/.xcb-cargo-home CARGO_NET_OFFLINE=true cargo +1.98.1 test -p vhalla-cli --bin vhalla --all-features --locked headless::mcp::tests:: -- --nocapture — 12 passed.
• CARGO_HOME=$PWD/.xcb-cargo-home CARGO_NET_OFFLINE=true cargo +1.98.1 clippy -p vhalla-cli --bin vhalla --all-features --tests --locked -- -D warnings — passed.
• git diff --cached --check — passed.
• The focused socket-backed grant test cannot run in the native workspace runner: it denies /private/tmp writes and local Unix socket binds (EPERM). It must pass in the PR's required Linux CLI suite; no headless/live qualification claim is made here.

Only crates/vhalla-cli/src/headless/commands_tests.rs is committed; local Cargo cache and validation log are untouched.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
valhalla	Ready	Preview	Oct 9, 2026 9:08pm UTC