feat: reorganize to one flake one rust project

remote/noisebell-common/src/lib.rs

@@ -22,3 +22,44 @@ pub struct HistoryEntry {
     pub timestamp: u64,
     pub recorded_at: u64,
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn validate_bearer_accepts_correct_token() {
+        let mut headers = HeaderMap::new();
+        headers.insert("authorization", "Bearer secret123".parse().unwrap());
+        assert!(validate_bearer(&headers, "secret123"));
+    }
+
+    #[test]
+    fn validate_bearer_rejects_wrong_token() {
+        let mut headers = HeaderMap::new();
+        headers.insert("authorization", "Bearer wrong".parse().unwrap());
+        assert!(!validate_bearer(&headers, "secret123"));
+    }
+
+    #[test]
+    fn validate_bearer_rejects_missing_header() {
+        let headers = HeaderMap::new();
+        assert!(!validate_bearer(&headers, "secret123"));
+    }
+
+    #[test]
+    fn validate_bearer_rejects_non_bearer_scheme() {
+        let mut headers = HeaderMap::new();
+        headers.insert("authorization", "Basic secret123".parse().unwrap());
+        assert!(!validate_bearer(&headers, "secret123"));
+    }
+
+    #[test]
+    fn webhook_payload_round_trips() {
+        let payload = WebhookPayload { status: "open".into(), timestamp: 1234567890 };
+        let json = serde_json::to_string(&payload).unwrap();
+        let deserialized: WebhookPayload = serde_json::from_str(&json).unwrap();
+        assert_eq!(deserialized.status, "open");
+        assert_eq!(deserialized.timestamp, 1234567890);
+    }
+}