@planckspace/cli 0.1.0 → 0.2.0

package/dist/sync/__tests__/payload.privacy.test.js

@@ -1,100 +0,0 @@
-import { describe, it, expect, beforeAll, afterAll } from "vitest";
-import fs from "fs";
-import os from "os";
-import path from "path";
-import { initDb, upsertSessions, getUnsyncedSessions, closeDb, } from "../../db/store.js";
-import { buildTelemetryPayload } from "../payload.js";
-// Distinctive markers for the kinds of content that must NEVER leave the machine.
-// They are embedded in the session's turns (which become turnsJson in the DB).
-const PROMPT_SECRET = "SECRET_PROMPT_how_do_i_exfiltrate_the_database";
-const RESPONSE_SECRET = "SECRET_RESPONSE_here_is_the_full_answer_text";
-const FILE_CONTENT_SECRET = "SECRET_FILE_CONTENTS_const_apiKey_eq_sk_live_12345";
-const SECRETS = [PROMPT_SECRET, RESPONSE_SECRET, FILE_CONTENT_SECRET];
-let tmpDir;
-beforeAll(() => {
-    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "planck-privacy-"));
-    initDb(path.join(tmpDir, "local.db"));
-});
-afterAll(() => {
-    closeDb();
-    fs.rmSync(tmpDir, { recursive: true, force: true });
-});
-function fullyPopulatedSession() {
-    return {
-        sessionId: "privacy-test-session-0001",
-        tool: "claude_code",
-        model: "claude-opus-4-8",
-        startedAt: "2026-06-01T10:00:00.000Z",
-        endedAt: "2026-06-01T10:30:00.000Z",
-        inputTokens: 1234,
-        outputTokens: 5678,
-        cacheReadTokens: 900,
-        cacheWriteTokens: 100,
-        costUsd: 0.4242,
-        workingDir: "/home/dev/secret-project",
-        turnCount: 2,
-        filesTouchedCount: 1,
-        repoName: "secret-project",
-        gitBranch: "feature/keep-private",
-        // turnsJson is JSON.stringify(turns) — pack every flavour of secret in here.
-        turns: [
-            {
-                sequence: 1,
-                model: "claude-opus-4-8",
-                inputTokens: 1234,
-                outputTokens: 5678,
-                cacheReadTokens: 900,
-                cacheWriteTokens: 100,
-                costUsd: 0.4242,
-                toolCalls: [{ name: PROMPT_SECRET, count: 1 }],
-                filesTouched: [FILE_CONTENT_SECRET, RESPONSE_SECRET],
-                timestamp: "2026-06-01T10:00:00.000Z",
-            },
-        ],
-    };
-}
-describe("sync payload privacy guard", () => {
-    it("never includes prompt/response text, file contents, or turnsJson on the wire", () => {
-        const session = fullyPopulatedSession();
-        upsertSessions([session]);
-        const rows = getUnsyncedSessions();
-        const row = rows.find((r) => r.id === session.sessionId);
-        expect(row, "the inserted session should be unsynced").toBeDefined();
-        const payload = buildTelemetryPayload(row, "ws_real_workspace");
-        const serialized = JSON.stringify(payload);
-        // The metadata we DO want is present.
-        expect(payload.sessionId).toBe(session.sessionId);
-        expect(payload.costUsd).toBe(session.costUsd);
-        expect(payload.inputTokens).toBe(session.inputTokens);
-        expect(payload.workspaceId).toBe("ws_real_workspace");
-        // The content we must NEVER send is absent.
-        for (const secret of SECRETS) {
-            expect(serialized).not.toContain(secret);
-        }
-        expect(serialized).not.toContain("turnsJson");
-        expect(serialized).not.toContain("turns");
-        expect(serialized).not.toContain("workingDir");
-        // Belt and suspenders: the payload has exactly the agreed TelemetryPayload keys.
-        expect(Object.keys(payload).sort()).toEqual([
-            "cacheReadTokens",
-            "cacheWriteTokens",
-            "costUsd",
-            "endedAt",
-            "filesTouchedCount",
-            "gitAuthorEmail",
-            "gitBranch",
-            "inputTokens",
-            "model",
-            "outcome",
-            "outputTokens",
-            "repoName",
-            "sessionId",
-            "source",
-            "startedAt",
-            "tool",
-            "turnCount",
-            "workspaceId",
-        ].sort());
-    });
-});
-//# sourceMappingURL=payload.privacy.test.js.map

package/dist/sync/__tests__/payload.privacy.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.privacy.test.js","sourceRoot":"","sources":["../../../src/sync/__tests__/payload.privacy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EACL,MAAM,EACN,cAAc,EACd,mBAAmB,EACnB,OAAO,GACR,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEtD,kFAAkF;AAClF,+EAA+E;AAC/E,MAAM,aAAa,GAAG,gDAAgD,CAAC;AACvE,MAAM,eAAe,GAAG,8CAA8C,CAAC;AACvE,MAAM,mBAAmB,GAAG,oDAAoD,CAAC;AAEjF,MAAM,OAAO,GAAG,CAAC,aAAa,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC;AAEtE,IAAI,MAAc,CAAC;AAEnB,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,GAAG,EAAE;IACZ,OAAO,EAAE,CAAC;IACV,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,SAAS,qBAAqB;IAC5B,OAAO;QACL,SAAS,EAAE,2BAA2B;QACtC,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,iBAAiB;QACxB,SAAS,EAAE,0BAA0B;QACrC,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,GAAG;QACpB,gBAAgB,EAAE,GAAG;QACrB,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,0BAA0B;QACtC,SAAS,EAAE,CAAC;QACZ,iBAAiB,EAAE,CAAC;QACpB,QAAQ,EAAE,gBAAgB;QAC1B,SAAS,EAAE,sBAAsB;QACjC,6EAA6E;QAC7E,KAAK,EAAE;YACL;gBACE,QAAQ,EAAE,CAAC;gBACX,KAAK,EAAE,iBAAiB;gBACxB,WAAW,EAAE,IAAI;gBACjB,YAAY,EAAE,IAAI;gBAClB,eAAe,EAAE,GAAG;gBACpB,gBAAgB,EAAE,GAAG;gBACrB,OAAO,EAAE,MAAM;gBACf,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC9C,YAAY,EAAE,CAAC,mBAAmB,EAAE,eAAe,CAAC;gBACpD,SAAS,EAAE,0BAA0B;aACtC;SACF;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACxC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAE1B,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAC,WAAW,EAAE,CAAC;QAErE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAI,EAAE,mBAAmB,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAE3C,sCAAsC;QACtC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAEtD,4CAA4C;QAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAE/C,iFAAiF;QACjF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CACzC;YACE,iBAAiB;YACjB,kBAAkB;YAClB,SAAS;YACT,SAAS;YACT,mBAAmB;YACnB,gBAAgB;YAChB,WAAW;YACX,aAAa;YACb,OAAO;YACP,SAAS;YACT,cAAc;YACd,UAAU;YACV,WAAW;YACX,QAAQ;YACR,WAAW;YACX,MAAM;YACN,WAAW;YACX,aAAa;SACd,CAAC,IAAI,EAAE,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}