v0.3.8-pre.010-fix.002

crates/ksp-app-store-desk/tests/desktop_security.rs

@@ -1,5 +1,5 @@
 // file: crates/ksp-app-store-desk/tests/desktop_security.rs
-// version: 11
+// version: 12
 
 //! Security boundary tests for the Store Desk scaffold.
 
@@ -123,7 +123,8 @@ fn pre_007_transaction_request_rejects_datatables_search_order_draw_and_physical
         assert!(!dto.contains(forbidden), "forbidden DataTables/physical request material present: {forbidden}");
     }
     assert!(runtime.contains("25 | 50 | 100"));
-    assert!(runtime.contains("request.offset.parse::<u64>()"));
+    assert!(runtime.contains("inspection_page_from_request(request.offset.as_str(), request.limit)"));
+    assert!(runtime.contains("offset_text.parse::<u64>()"));
     assert!(runtime.contains("RawSlotRange::new"));
     assert!(runtime.contains("\"ascending\" =>"));
     assert!(runtime.contains("\"descending\" =>"));
@@ -209,7 +210,8 @@ fn pre_008_account_request_rejects_datatables_search_order_draw_network_and_phys
         assert!(!dto.contains(forbidden), "forbidden DataTables/physical account request material present: {forbidden}");
     }
     assert!(runtime.contains("25 | 50 | 100"));
-    assert!(runtime.contains("request.offset.parse::<u64>()"));
+    assert!(runtime.contains("inspection_page_from_request(request.offset.as_str(), request.limit)"));
+    assert!(runtime.contains("offset_text.parse::<u64>()"));
     assert!(runtime.contains("parse_optional_pubkey(request.pubkey.as_deref())"));
     assert!(runtime.contains("RawSlotRange::new"));
     assert!(runtime.contains("request.pubkey.parse::<ksp_store_lib::Pubkey>()"));
@@ -247,8 +249,20 @@ fn pre_010_observation_ipc_and_tracing_keep_entity_values_and_source_bytes_out_o
     assert!(!frontend.contains(r#"query started", { signature"#));
     assert!(!frontend.contains(r#"query started", { pubkey"#));
     assert!(!frontend.contains(r#"query completed", { observationKey"#));
-    assert!(tauri.contains(r#"project_command_error("store_query_transaction_observations")"#));
-    assert!(tauri.contains(r#"project_command_error("store_query_account_observations")"#));
+    let transaction_command = tauri.find("fn store_query_transaction_observations");
+    let account_command = tauri.find("fn store_query_account_observations");
+    assert!(transaction_command.is_some());
+    assert!(account_command.is_some());
+    if let (std::option::Option::Some(transaction_start), std::option::Option::Some(account_start)) = (transaction_command, account_command) {
+        let transaction_source = &tauri[transaction_start..];
+        let account_source = &tauri[account_start..transaction_start];
+        assert!(transaction_source.contains("project_command_error"));
+        assert!(transaction_source.contains(r#""store_query_transaction_observations""#));
+        assert!(transaction_source.contains("crate::TRACING_DOMAIN_STORE"));
+        assert!(account_source.contains("project_command_error"));
+        assert!(account_source.contains(r#""store_query_account_observations""#));
+        assert!(account_source.contains("crate::TRACING_DOMAIN_STORE"));
+    }
 }
 
 #[test]