pakstr 0.11.0 → 0.12.1

package/android-template/app/src/androidTest/java/com/pakstr/app/debug/AppDebugLoggerTest.kt

@@ -0,0 +1,28 @@
+package com.pakstr.app.debug
+
+import androidx.test.ext.junit.runners.AndroidJUnit4
+import org.junit.Assert.assertEquals
+import org.junit.Test
+import org.junit.runner.RunWith
+
+@RunWith(AndroidJUnit4::class)
+class AppDebugLoggerTest {
+
+    @Test
+    fun release_sanitizer_redacts_object_and_array_payloads() {
+        assertEquals(
+            "\"event\":\"***\"",
+            AppDebugLogger.sanitize(
+                "\"event\":{\"kind\":1}",
+                isDebugBuild = false
+            )
+        )
+        assertEquals(
+            "\"signing_payload\":\"***\"",
+            AppDebugLogger.sanitize(
+                "\"signing_payload\":[1,2,3]",
+                isDebugBuild = false
+            )
+        )
+    }
+}

package/android-template/app/src/main/java/com/pakstr/app/MainActivity.kt

@@ -209,6 +209,7 @@ class MainActivity : AppCompatActivity(), PermissionHandler {
     private fun setupSupportUnlockGesture() {
         supportUnlockGestureLayout.onUnlock = {
             SupportUnlock.unlock(this)
+            DeveloperToolsManager.enableDebug(this)
             WebViewDebugManager.enable(this)
             Toast.makeText(
                 this,

package/android-template/app/src/main/java/com/pakstr/app/debug/AppDebugLogger.kt

@@ -138,8 +138,15 @@ object AppDebugLogger {
     internal fun sanitize(
         message: String
     ): String {
+        return sanitize(message, BuildConfig.DEBUG)
+    }
+
+    internal fun sanitize(
+        message: String,
+        isDebugBuild: Boolean
+    ): String {
 
-        if (BuildConfig.DEBUG) {
+        if (isDebugBuild) {
             return message
         }
 
@@ -154,7 +161,7 @@ object AppDebugLogger {
             }
             .replace(
                 Regex(
-                    "(?i)\"(event|signing_?payload)\"\\s*:\\s*(\\{[^\\r\\n]*}|\\[[^\\r\\n]*])"
+                    "(?i)\"(event|signing_?payload)\"\\s*:\\s*(\\{[^\\r\\n]*\\}|\\[[^\\r\\n]*\\])"
                 )
             ) { match ->
                 val key = match.groupValues[1]

package/android-template/app/src/test/java/com/pakstr/app/debug/AppDebugLoggerTest.kt

@@ -0,0 +1,25 @@
+package com.pakstr.app.debug
+
+import org.junit.Assert.assertEquals
+import org.junit.Test
+
+class AppDebugLoggerTest {
+
+    @Test
+    fun release_sanitizer_redacts_object_and_array_payloads() {
+        assertEquals(
+            "\"event\":\"***\"",
+            AppDebugLogger.sanitize(
+                "\"event\":{\"kind\":1}",
+                isDebugBuild = false
+            )
+        )
+        assertEquals(
+            "\"signing_payload\":\"***\"",
+            AppDebugLogger.sanitize(
+                "\"signing_payload\":[1,2,3]",
+                isDebugBuild = false
+            )
+        )
+    }
+}

package/dist/cli.js

@@ -51,6 +51,7 @@ async function runCLI(argv) {
             await (0, run_1.runCommand)(configFlag ?? undefined, {
                 verifyPublish: args.includes("--verify-publish"),
                 publishOutJson: extractFlag(args, "--publish-out-json"),
+                dryRun: args.includes("--dry-run"),
             });
             return;
         default:
@@ -75,7 +76,7 @@ Usage:
   pakstr build [--config <path>]
   pakstr sign [--config <path>]
   pakstr publish [--config <path>] [--dry-run] [--verify] [--out-json <path>]
-  pakstr run [--config <path>] [--verify-publish] [--publish-out-json <path>]
+  pakstr run [--config <path>] [--dry-run] [--verify-publish] [--publish-out-json <path>]
 
   pakstr --version
   pakstr --help

package/dist/commands/run.js

@@ -17,6 +17,10 @@ const publish_1 = require("./publish");
  * Each step is atomic and fail-fast (§7). The signed APK at build.out is
  * preserved on a publish failure; only ephemeral/derived material is cleaned
  * up. `init` is NOT part of `run`.
+ *
+ * `--dry-run` skips build + sign (no Docker, no APK) and only runs a dry-run
+ * publish with stub values and a mock relay — a safe offline smoke test of
+ * the Nostr event-signing path.
  */
 async function runCommand(configPath, options = {}) {
     // Step 1: load & validate config, pre-validate nsecs.
@@ -41,6 +45,22 @@ async function runCommand(configPath, options = {}) {
     console.log("Web:", config.build.web);
     console.log("Out:", path_1.default.resolve(config.build.out));
     console.log("Publish:", config.publish.zapstoreEnabled ? "enabled" : "disabled");
+    if (options.dryRun) {
+        // Skip build + sign — no Docker, no APK. Only exercise the publish
+        // event-signing path with stub values and a mock relay.
+        if (config.publish.zapstoreEnabled) {
+            console.log("\n— Dry run: skipping build + sign, publish only —");
+            await (0, publish_1.publishCommand)(config.configPath || undefined, {
+                dryRun: true,
+                outJson: options.publishOutJson,
+            });
+        }
+        else {
+            console.log("\nDry run: publish disabled (publish.zapstore.enabled: false). Nothing to do.");
+        }
+        console.log("\n✅ pakstr run complete (dry-run)");
+        return;
+    }
     // Step 3: build the unsigned APK.
     console.log("\n— Step 1/3: build —");
     await (0, build_1.buildCommand)(config.configPath || undefined);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pakstr",
-  "version": "0.11.0",
+  "version": "0.12.1",
   "description": "CLI for packaging Nostr web apps into Android APKs",
   "type": "commonjs",
   "main": "dist/index.js",