v0.3.8-pre.00-fix.001

crates/ksp-app-store-desk/tests/desktop_security.rs

@@ -1,5 +1,5 @@
 // file: crates/ksp-app-store-desk/tests/desktop_security.rs
-// version: 5
+// version: 6
 
 //! Security boundary tests for the Store Desk scaffold.
 
@@ -128,3 +128,22 @@ fn pre_007_transaction_request_rejects_datatables_search_order_draw_and_physical
     assert!(runtime.contains("\"ascending\" =>"));
     assert!(runtime.contains("\"descending\" =>"));
 }
+
+#[test]
+fn pre_007_fix_001_copy_tracing_never_logs_long_identifier_values() {
+    let frontend = include_str!("../frontend/ts/main.ts");
+    assert!(frontend.contains("Store Desk long text copy requested"));
+    assert!(frontend.contains("Store Desk long text copy completed"));
+    assert!(frontend.contains("Store Desk long text copy failed"));
+    assert!(frontend.contains("{ fieldId }"));
+    for forbidden in [
+        "copy requested", { value",
+        "copy completed", { value",
+        "copy failed", { value",
+        "copy requested", { signature",
+        "copy completed", { signature",
+        "copy failed", { signature",
+    ] {
+        assert!(!frontend.contains(forbidden), "long identifier value leaked into copy tracing: {forbidden}");
+    }
+}