v0.3.8-pre.006

crates/ksp-app-store-desk/tests/desktop_security.rs

@@ -1,5 +1,5 @@
 // file: crates/ksp-app-store-desk/tests/desktop_security.rs
-// version: 3
+// version: 4
 
 //! Security boundary tests for the Store Desk scaffold.
 
@@ -61,7 +61,22 @@ fn pre_003_store_desk_development_logging_explicitly_selects_supertrace() {
     let constants = include_str!("../src/constants.rs");
     let bootstrap = include_str!("../src/bootstrap.rs");
     assert!(constants.contains("DEVELOPMENT_LOGGING_PROFILE: &str = \"supertrace\""));
-    assert!(bootstrap.contains("std::option::Option::Some(crate::DEVELOPMENT_LOGGING_PROFILE)"));
+    assert!(bootstrap.contains("FILE_ID_COMPOSITE_KSP_APP_STORE_DESK"));
+    assert!(bootstrap.contains("logging_profile.profile_id() != crate::DEVELOPMENT_LOGGING_PROFILE"));
     assert!(bootstrap.contains("LogFilterLevel::Trace"));
     return;
 }
+
+#[test]
+fn pre_006_store_status_ipc_is_backend_neutral_and_secret_free() {
+    let dto = include_str!("../src/dto_common.rs");
+    let runtime = include_str!("../src/store_runtime.rs");
+    let tauri = include_str!("../src/tauri.rs");
+    assert!(dto.contains("StoreRuntimeStatusDto"));
+    assert!(runtime.contains("runtime_snapshot"));
+    assert!(runtime.contains("health().await"));
+    assert!(tauri.contains("store_runtime_status"));
+    for forbidden in ["connection_uri", "connectionUri", "postgresql://", "password", "RawPayload", "RawAccountState", "tokio_postgres"] {
+        assert!(!dto.contains(forbidden), "Store status DTO source contains forbidden field/material: {forbidden}");
+    }
+}