fix(rust/guards): fix set -e interaction with expected-panicking canister calls

The panicking calls return a non-zero exit code (canister rejection).
In the old script, 'A && B; C' meant if B failed, set -e exited before
C ran — so the assertion after the panic was never checked.

Fix: split setup and panicking call onto separate lines, add '|| true'
to the panicking call to explicitly allow failure. The setup call still
uses '&&' so it fails loudly if the state reset itself fails.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: marc0olo

rust/guards/test.sh

@@ -9,35 +9,39 @@ icp canister call backend set_non_processed_items '(vec { "mint" })' && \
   echo "PASS" || (echo "FAIL" && exit 1)
 
 echo "=== Test 2: guard marks item as processed despite panicking callback (TrueAsyncCall) ==="
-icp canister call backend set_non_processed_items '(vec { "mint" })' && \
-  icp canister call backend process_single_item_with_panicking_callback '("mint", variant { TrueAsyncCall })' 2>/dev/null; \
-  result=$(icp canister call --query backend is_item_processed '("mint")') && \
+# The panicking call is expected to return a rejection — ic-cdk uses call_on_cleanup to
+# drop locals after the panic, committing the guard's state change before the rollback.
+icp canister call backend set_non_processed_items '(vec { "mint" })'
+icp canister call backend process_single_item_with_panicking_callback '("mint", variant { TrueAsyncCall })' 2>/dev/null || true
+result=$(icp canister call --query backend is_item_processed '("mint")') && \
   echo "$result" && \
   echo "$result" | grep -q 'true' && \
   echo "PASS" || (echo "FAIL" && exit 1)
 
 echo "=== Test 3: guard fails to mark item as processed when no true async call (FalseAsyncCall) ==="
-icp canister call backend set_non_processed_items '(vec { "mint" })' && \
-  icp canister call backend process_single_item_with_panicking_callback '("mint", variant { FalseAsyncCall })' 2>/dev/null; \
-  result=$(icp canister call --query backend is_item_processed '("mint")') && \
+# Without a true async await boundary, the entire function runs in one message.
+# The panic rolls back all state changes including the guard's drop.
+icp canister call backend set_non_processed_items '(vec { "mint" })'
+icp canister call backend process_single_item_with_panicking_callback '("mint", variant { FalseAsyncCall })' 2>/dev/null || true
+result=$(icp canister call --query backend is_item_processed '("mint")') && \
   echo "$result" && \
   echo "$result" | grep -q 'false' && \
   echo "PASS" || (echo "FAIL" && exit 1)
 
 echo "=== Test 4: guard marks first item as processed when processing multiple items (TrueAsyncCall) ==="
-icp canister call backend set_non_processed_items '(vec { "mint1"; "mint2"; "mint3" })' && \
-  icp canister call backend process_all_items_with_panicking_callback '("mint2", variant { TrueAsyncCall })' 2>/dev/null; \
-  result1=$(icp canister call --query backend is_item_processed '("mint1")') && \
+icp canister call backend set_non_processed_items '(vec { "mint1"; "mint2"; "mint3" })'
+icp canister call backend process_all_items_with_panicking_callback '("mint2", variant { TrueAsyncCall })' 2>/dev/null || true
+result1=$(icp canister call --query backend is_item_processed '("mint1")') && \
   result2=$(icp canister call --query backend is_item_processed '("mint2")') && \
   echo "mint1: $result1, mint2: $result2" && \
   echo "$result1" | grep -q 'true' && \
   echo "$result2" | grep -q 'false' && \
   echo "PASS" || (echo "FAIL" && exit 1)
 
 echo "=== Test 5: set_non_processed_items resets state ==="
+icp canister call backend set_non_processed_items '(vec { "mint" })'
+icp canister call backend process_single_item_with_panicking_callback '("mint", variant { TrueAsyncCall })' 2>/dev/null || true
 icp canister call backend set_non_processed_items '(vec { "mint" })' && \
-  icp canister call backend process_single_item_with_panicking_callback '("mint", variant { TrueAsyncCall })' 2>/dev/null; \
-  icp canister call backend set_non_processed_items '(vec { "mint" })' && \
   result=$(icp canister call --query backend is_item_processed '("mint")') && \
   echo "$result" && \
   echo "$result" | grep -q 'false' && \