v0.3.7-pre.010

crates/ksp-app-backfill-desk/tests/desktop_security.rs

@@ -1,5 +1,5 @@
 // file: crates/ksp-app-backfill-desk/tests/desktop_security.rs
-// version: 12
+// version: 13
 
 //! Security and dependency-boundary checks for the Backfill Desk scaffold.
 
@@ -104,7 +104,7 @@ fn pre_002_tauri_commands_remain_centralized() {
             assert_eq!(count, 0, "{} declares a Tauri command outside tauri.rs", path.display());
         }
     }
-    assert_eq!(command_count, 7);
+    assert_eq!(command_count, 8);
 }
 
 #[test]
@@ -262,3 +262,36 @@ fn pre_009_monitoring_projection_exposes_counters_and_codes_without_checkpoint_o
         assert!(!dto.contains(forbidden), "monitoring DTO leaks forbidden field marker {forbidden}");
     }
 }
+
+#[test]
+fn pre_010_cancel_surface_targets_backend_job_identity_without_business_payloads() {
+    let root = app_root();
+    let dto_source = read_text(root.join("src/dto_backfill.rs").as_path());
+    let dto = struct_source(dto_source.as_str(), "BackfillCancelResponseDto");
+    for required in ["accepted", "job_id", "state"] {
+        assert!(dto.contains(required), "Cancel acknowledgement missing safe field {required}");
+    }
+    for forbidden in [
+        "pub(crate) address:",
+        "pub(crate) signature:",
+        "pub(crate) endpoint:",
+        "pub(crate) provider:",
+        "pub(crate) credential:",
+        "pub(crate) token:",
+        "pub(crate) checkpoint:",
+        "pub(crate) payload:",
+    ] {
+        assert!(!dto.contains(forbidden), "Cancel acknowledgement leaks forbidden field marker {forbidden}");
+    }
+    let frontend = read_text(root.join("frontend/ts/main.ts").as_path());
+    let cancel_marker = frontend.find("Backfill Desk cooperative cancellation requested");
+    assert!(cancel_marker.is_some());
+    let cancel_source = match cancel_marker {
+        std::option::Option::Some(index) => &frontend[index..std::cmp::min(index + 700, frontend.len())],
+        std::option::Option::None => "",
+    };
+    assert!(cancel_source.contains("jobId: status.jobId"));
+    for forbidden in ["address:", "anchorSignature:", "explicitSignatures:", "minContextSlot:"] {
+        assert!(!cancel_source.contains(forbidden), "Cancel tracing includes forbidden campaign payload marker {forbidden}");
+    }
+}