fixing test

Author: spectral-mesh

CHANGELOG.md

@@ -2,7 +2,7 @@
 
 ## Unreleased
 
-- **Observability:** New scripts **`scripts/simulate_mesh_ingest.sh`**, **`simulate_mesh_grafana.sh`**, **`simulate_capture_demo.sh`**, **`simulate_edge_scan.sh`**; Grafana dashboards **`monitoring/grafana/dashboards/spectral-mesh.json`** (cleartext/ingest wording + metric semantics row) and **`spectral-edge.json`** (**Job**/**Instance** variables, **HTTP 429** rate on throughput panel, simulation note). **`monitoring/README.md`** documents the script matrix.
+- **Observability:** New scripts **`scripts/simulate_mesh_ingest.sh`**, **`simulate_mesh_grafana.sh`**, **`simulate_capture_demo.sh`**, **`simulate_edge_scan.sh`**; fix **`simulate_mesh_ingest.sh`** under **`set -u`** when **`INGEST_TOKEN`** is unset (avoid empty **`extra[@]`** expansion). Grafana dashboards **`monitoring/grafana/dashboards/spectral-mesh.json`** (cleartext/ingest wording + metric semantics row) and **`spectral-edge.json`** (**Job**/**Instance** variables, **HTTP 429** rate on throughput panel, simulation note). **`monitoring/README.md`** documents the script matrix.
 - **Docs:** Refresh **Windows/macOS** descriptions across **`README.md`**, **`docs/EDGE_VS_MESH.md`**, **`docs/EDGE.md`**, **`docs/POLICY_MESH_AND_EDGE.md`**, **`docs/ENTERPRISE_SELF_HOSTED.md`**, **`docs/SAAS_ARCHITECTURE.md`**, **`docs/INFOSEC_SUMMARY.md`**, **`docs/BACKGROUND_OF_INVENTION.md`**, and **`docs/INVENTION_DISCLOSURE_OUTLINE_US.md`** to match **ingest**, **hookwire**, optional **hooks**, and **edge** vs host rolling-buffer behavior (replacing outdated “capture stub” wording).
 - **Windows OpenSSL discovery:** **`-windows-openssl-discovery-interval`** polls module lists via Toolhelp32 and logs **`windows_openssl_module_mapped`** (`internal/capture/winssl`).
 - **macOS Endpoint Security (opt-in build):** **`-darwin-es-mmap-watch`** with **`go build -tags spectral_es`** (CGO) subscribes to **`ES_EVENT_TYPE_NOTIFY_MMAP`** and logs **`es_openssl_mmap`** when mapped paths look like OpenSSL (`internal/capture/esmmap`, **`internal/capture/platformhint`**). Default macOS binaries omit ES linkage; use an SDK-equipped toolchain to link **EndpointSecurity.framework**.

scripts/simulate_mesh_ingest.sh

@@ -37,13 +37,17 @@ b64_encode() {
 
 post_json() {
 	local json="$1"
-	local extra=()
+	# With set -u, "${empty_array[@]}" errors on some Bash versions — branch instead of optional array.
 	if [[ -n "${INGEST_TOKEN}" ]]; then
-		extra+=(-H "X-Spectral-Capture-Token: ${INGEST_TOKEN}")
+		curl -fsS --max-time 15 -H "Content-Type: application/json" \
+			-H "X-Spectral-Capture-Token: ${INGEST_TOKEN}" \
+			-X POST "$MESH_INGEST_URL" -d "$json" \
+			-o /dev/null -w "%{http_code}\n" || true
+	else
+		curl -fsS --max-time 15 -H "Content-Type: application/json" \
+			-X POST "$MESH_INGEST_URL" -d "$json" \
+			-o /dev/null -w "%{http_code}\n" || true
 	fi
-	curl -fsS --max-time 15 -H "Content-Type: application/json" "${extra[@]}" \
-		-X POST "$MESH_INGEST_URL" -d "$json" \
-		-o /dev/null -w "%{http_code}\n" || true
 }
 
 run_one() {