import stat

from cmdforge.signing import initialize_signing_key, load_signing_key


def test_signing_key_is_persistent_and_private(tmp_path):
    path = tmp_path / "release-key.json"
    created = initialize_signing_key(path)
    assert load_signing_key(path) == created
    assert stat.S_IMODE(path.stat().st_mode) == 0o600
    assert initialize_signing_key(path) == created