patchwarden 1.5.1 → 1.6.2

package/src/test/unit/direct-guards.test.ts

@@ -1,467 +0,0 @@
-import { describe, it, beforeEach, afterEach } from "node:test";
-import { strict as assert } from "node:assert";
-import { mkdtempSync, rmSync, mkdirSync, writeFileSync } from "node:fs";
-import { join, resolve } from "node:path";
-import { tmpdir } from "node:os";
-import { guardDirectPath, guardDirectWritePath, guardDirectReadPath, guardDirectPatchSize, guardDirectFileSize, isBinaryFile } from "../../direct/directGuards.js";
-import { PatchWardenError } from "../../errors.js";
-import { reloadConfig } from "../../config.js";
-import type { PatchWardenConfig } from "../../config.js";
-
-function makeConfig(workspaceRoot: string): PatchWardenConfig {
-  return {
-    workspaceRoot,
-    plansDir: ".patchwarden/plans",
-    tasksDir: ".patchwarden/tasks",
-    assessmentsDir: ".patchwarden/assessments",
-    assessmentTtlSeconds: 3600,
-    agents: { codex: { command: "codex", args: ["exec", "{prompt}"] } },
-    allowedTestCommands: ["npm test"],
-    repoAllowedTestCommands: {},
-    maxReadFileBytes: 200_000,
-    defaultTaskTimeoutSeconds: 900,
-    maxTaskTimeoutSeconds: 3600,
-    watcherStaleSeconds: 30,
-    directSessionsDir: ".patchwarden/direct-sessions",
-    directSessionTtlSeconds: 3600,
-    directMaxPatchBytes: 200_000,
-    directMaxFileBytes: 500_000,
-    directAllowedCommands: ["npm test"],
-    repoDirectAllowedCommands: {},
-  };
-}
-
-describe("guardDirectPath", () => {
-  let tempDir: string;
-  let repoPath: string;
-
-  beforeEach(() => {
-    tempDir = mkdtempSync(join(tmpdir(), "pw-directpath-"));
-    repoPath = join(tempDir, "my-repo");
-    mkdirSync(repoPath, { recursive: true });
-    // Set up config so getConfig() works in guardDirectPath
-    process.env.PATCHWARDEN_CONFIG = "";
-  });
-
-  afterEach(() => {
-    rmSync(tempDir, { recursive: true, force: true });
-    delete process.env.PATCHWARDEN_CONFIG;
-  });
-
-  it("allows paths inside repo", () => {
-    const result = guardDirectPath("src/main.ts", repoPath, tempDir);
-    assert.equal(result, resolve(repoPath, "src/main.ts"));
-  });
-
-  it("allows nested paths inside repo", () => {
-    const result = guardDirectPath("src/components/Button.tsx", repoPath, tempDir);
-    assert.equal(result, resolve(repoPath, "src/components/Button.tsx"));
-  });
-
-  it("rejects paths outside repo but inside workspace", () => {
-    assert.throws(
-      () => guardDirectPath("../other-repo/file.ts", repoPath, tempDir),
-      PatchWardenError
-    );
-  });
-
-  it("rejects paths outside workspace", () => {
-    assert.throws(
-      () => guardDirectPath("../../../etc/passwd", repoPath, tempDir),
-      PatchWardenError
-    );
-  });
-
-  it("handles Windows backslash paths", () => {
-    const result = guardDirectPath("src\\subdir\\file.ts", repoPath, tempDir);
-    assert.ok(result.startsWith(repoPath));
-  });
-
-  it("rejects path traversal with ..", () => {
-    assert.throws(
-      () => guardDirectPath("src/../../etc/passwd", repoPath, tempDir),
-      PatchWardenError
-    );
-  });
-});
-
-describe("guardDirectWritePath", () => {
-  let tempDir: string;
-  let repoPath: string;
-
-  beforeEach(() => {
-    tempDir = mkdtempSync(join(tmpdir(), "pw-directwrite-"));
-    repoPath = join(tempDir, "my-repo");
-    mkdirSync(repoPath, { recursive: true });
-    mkdirSync(join(repoPath, "src"), { recursive: true });
-  });
-
-  afterEach(() => {
-    rmSync(tempDir, { recursive: true, force: true });
-  });
-
-  it("allows writing to source files in repo", () => {
-    const result = guardDirectWritePath("src/main.ts", repoPath, tempDir);
-    assert.ok(result.startsWith(repoPath));
-  });
-
-  it("blocks node_modules paths", () => {
-    assert.throws(
-      () => guardDirectWritePath("node_modules/evil/index.js", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "blocked_artifact_path"
-    );
-  });
-
-  it("blocks nested node_modules paths", () => {
-    assert.throws(
-      () => guardDirectWritePath("src/node_modules/evil/index.js", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "blocked_artifact_path"
-    );
-  });
-
-  it("blocks dist paths", () => {
-    assert.throws(
-      () => guardDirectWritePath("dist/main.js", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "blocked_artifact_path"
-    );
-  });
-
-  it("blocks release paths", () => {
-    assert.throws(
-      () => guardDirectWritePath("release/app.exe", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "blocked_artifact_path"
-    );
-  });
-
-  it("blocks .patchwarden internal paths", () => {
-    assert.throws(
-      () => guardDirectWritePath(".patchwarden/tasks/evil.json", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "internal_patchwarden_path_blocked"
-    );
-  });
-
-  it("blocks sensitive files", () => {
-    assert.throws(
-      () => guardDirectWritePath(".env", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "sensitive_path_blocked"
-    );
-    assert.throws(
-      () => guardDirectWritePath("config.json", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "sensitive_path_blocked"
-    );
-  });
-
-  it("blocks paths outside repo", () => {
-    assert.throws(
-      () => guardDirectWritePath("../other-repo/file.ts", repoPath, tempDir),
-      PatchWardenError
-    );
-  });
-});
-
-describe("guardDirectReadPath", () => {
-  let tempDir: string;
-  let repoPath: string;
-
-  beforeEach(() => {
-    tempDir = mkdtempSync(join(tmpdir(), "pw-directread-"));
-    repoPath = join(tempDir, "my-repo");
-    mkdirSync(repoPath, { recursive: true });
-    mkdirSync(join(repoPath, "src"), { recursive: true });
-    writeFileSync(join(repoPath, "src", "main.ts"), "console.log('hello');", "utf-8");
-  });
-
-  afterEach(() => {
-    rmSync(tempDir, { recursive: true, force: true });
-  });
-
-  it("allows reading source files in repo", () => {
-    const result = guardDirectReadPath("src/main.ts", repoPath, tempDir);
-    assert.ok(result.startsWith(repoPath));
-  });
-
-  it("blocks .patchwarden internal paths", () => {
-    assert.throws(
-      () => guardDirectReadPath(".patchwarden/tasks/status.json", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "internal_patchwarden_path_blocked"
-    );
-  });
-
-  it("blocks sensitive files", () => {
-    assert.throws(
-      () => guardDirectReadPath(".env", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "sensitive_path_blocked"
-    );
-  });
-});
-
-describe("guardDirectPatchSize", () => {
-  let tempDir: string;
-
-  beforeEach(() => {
-    tempDir = mkdtempSync(join(tmpdir(), "pw-patchsize-"));
-    // Write a real config file so getConfig() picks it up
-    const configPath = join(tempDir, "patchwarden.config.json");
-    writeFileSync(configPath, JSON.stringify({
-      workspaceRoot: tempDir,
-      agents: { codex: { command: "codex", args: ["exec", "{prompt}"] } },
-      allowedTestCommands: ["npm test"],
-      directMaxPatchBytes: 1000,
-      directMaxFileBytes: 5000,
-    }), "utf-8");
-    process.env.PATCHWARDEN_CONFIG = configPath;
-    reloadConfig();
-  });
-
-  afterEach(() => {
-    rmSync(tempDir, { recursive: true, force: true });
-    delete process.env.PATCHWARDEN_CONFIG;
-    reloadConfig();
-  });
-
-  it("allows patches within size limit", () => {
-    assert.doesNotThrow(() => guardDirectPatchSize(500));
-    assert.doesNotThrow(() => guardDirectPatchSize(1000));
-  });
-
-  it("rejects patches exceeding size limit", () => {
-    assert.throws(
-      () => guardDirectPatchSize(1001),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "patch_too_large"
-    );
-    assert.throws(
-      () => guardDirectPatchSize(999999),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "patch_too_large"
-    );
-  });
-
-  it("allows zero-size patch", () => {
-    assert.doesNotThrow(() => guardDirectPatchSize(0));
-  });
-});
-
-describe("guardDirectFileSize", () => {
-  let tempDir: string;
-
-  beforeEach(() => {
-    tempDir = mkdtempSync(join(tmpdir(), "pw-filesize-"));
-    const configPath = join(tempDir, "patchwarden.config.json");
-    writeFileSync(configPath, JSON.stringify({
-      workspaceRoot: tempDir,
-      agents: { codex: { command: "codex", args: ["exec", "{prompt}"] } },
-      allowedTestCommands: ["npm test"],
-      directMaxPatchBytes: 1000,
-      directMaxFileBytes: 5000,
-    }), "utf-8");
-    process.env.PATCHWARDEN_CONFIG = configPath;
-    reloadConfig();
-  });
-
-  afterEach(() => {
-    rmSync(tempDir, { recursive: true, force: true });
-    delete process.env.PATCHWARDEN_CONFIG;
-    reloadConfig();
-  });
-
-  it("allows files within size limit", () => {
-    assert.doesNotThrow(() => guardDirectFileSize(100));
-    assert.doesNotThrow(() => guardDirectFileSize(5000));
-  });
-
-  it("rejects files exceeding size limit", () => {
-    assert.throws(
-      () => guardDirectFileSize(5001),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "file_too_large"
-    );
-    assert.throws(
-      () => guardDirectFileSize(9999999),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "file_too_large"
-    );
-  });
-
-  it("allows zero-size file", () => {
-    assert.doesNotThrow(() => guardDirectFileSize(0));
-  });
-});
-
-describe("isBinaryFile", () => {
-  let tempDir: string;
-
-  beforeEach(() => {
-    tempDir = mkdtempSync(join(tmpdir(), "pw-binary-"));
-  });
-
-  afterEach(() => {
-    rmSync(tempDir, { recursive: true, force: true });
-  });
-
-  it("detects binary files by extension", () => {
-    assert.equal(isBinaryFile("test.exe"), true);
-    assert.equal(isBinaryFile("test.dll"), true);
-    assert.equal(isBinaryFile("test.zip"), true);
-    assert.equal(isBinaryFile("test.png"), true);
-    assert.equal(isBinaryFile("test.pdf"), true);
-    assert.equal(isBinaryFile("test.jar"), true);
-    assert.equal(isBinaryFile("test.pak"), true);
-  });
-
-  it("detects binary files with Windows backslash paths", () => {
-    assert.equal(isBinaryFile("path\\to\\test.exe"), true);
-    assert.equal(isBinaryFile("path\\to\\test.dll"), true);
-  });
-
-  it("does not flag text files as binary by extension", () => {
-    assert.equal(isBinaryFile("test.ts"), false);
-    assert.equal(isBinaryFile("test.js"), false);
-    assert.equal(isBinaryFile("test.md"), false);
-    assert.equal(isBinaryFile("test.json"), false);
-    assert.equal(isBinaryFile("test.txt"), false);
-  });
-
-  it("detects binary content by null bytes", () => {
-    const binaryFile = join(tempDir, "test.dat");
-    // Write a file with null bytes in the first 8KB
-    const buffer = Buffer.alloc(100, 0x41); // 'A' characters
-    buffer[50] = 0; // null byte
-    writeFileSync(binaryFile, buffer);
-    assert.equal(isBinaryFile(binaryFile), true);
-  });
-
-  it("does not flag text content as binary", () => {
-    const textFile = join(tempDir, "test.txt");
-    writeFileSync(textFile, "This is a text file with no null bytes.", "utf-8");
-    assert.equal(isBinaryFile(textFile), false);
-  });
-
-  it("handles 8KB boundary — text file just under 8KB", () => {
-    const textFile = join(tempDir, "boundary.txt");
-    // Write exactly 8192 bytes of text (no null bytes)
-    const content = "A".repeat(8192);
-    writeFileSync(textFile, content, "utf-8");
-    assert.equal(isBinaryFile(textFile), false);
-  });
-
-  it("handles 8KB boundary — null byte at position 8191", () => {
-    const binaryFile = join(tempDir, "boundary.dat");
-    const buffer = Buffer.alloc(8192, 0x41);
-    buffer[8191] = 0;
-    writeFileSync(binaryFile, buffer);
-    assert.equal(isBinaryFile(binaryFile), true);
-  });
-
-  it("returns false for non-existent files without binary extension", () => {
-    assert.equal(isBinaryFile(join(tempDir, "nonexistent.txt")), false);
-  });
-
-  // ── Adversarial: null byte beyond 8KB read window ──
-  it("detects null byte at position 8200 (beyond old 8KB window)", () => {
-    // Previously isBinaryFile only read the first 8192 bytes, so a null byte
-    // at position 8200 would bypass detection. Now we scan up to 1 MB.
-    const stealthBinary = join(tempDir, "stealth.txt");
-    const buffer = Buffer.alloc(8200, 0x41); // 8200 bytes of 'A'
-    buffer[8199] = 0; // null byte just beyond the old 8KB read window
-    writeFileSync(stealthBinary, buffer);
-    assert.equal(isBinaryFile(stealthBinary), true);
-  });
-
-  it("detects null byte at exactly position 8192 (first byte beyond old window)", () => {
-    const stealthBinary = join(tempDir, "boundary-plus.txt");
-    const buffer = Buffer.alloc(8193, 0x41);
-    buffer[8192] = 0; // first byte beyond the old 8KB read window
-    writeFileSync(stealthBinary, buffer);
-    assert.equal(isBinaryFile(stealthBinary), true);
-  });
-
-  it("detects null byte at 100KB offset", () => {
-    const deepBinary = join(tempDir, "deep.txt");
-    const buffer = Buffer.alloc(102400, 0x41);
-    buffer[102399] = 0;
-    writeFileSync(deepBinary, buffer);
-    assert.equal(isBinaryFile(deepBinary), true);
-  });
-
-  it("detects null byte at 1MB offset (scan limit boundary)", () => {
-    const limitBinary = join(tempDir, "limit.txt");
-    const buffer = Buffer.alloc(1_048_576, 0x41);
-    buffer[1_048_575] = 0;
-    writeFileSync(limitBinary, buffer);
-    assert.equal(isBinaryFile(limitBinary), true);
-  });
-
-  it("does not scan beyond 1MB limit", () => {
-    // A null byte just past the 1MB scan limit should NOT be detected.
-    // This documents the remaining scan boundary.
-    const overLimit = join(tempDir, "over-limit.txt");
-    const buffer = Buffer.alloc(1_048_577, 0x41);
-    buffer[1_048_576] = 0; // first byte beyond scan limit
-    writeFileSync(overLimit, buffer);
-    assert.equal(isBinaryFile(overLimit), false);
-  });
-});
-
-// ── Adversarial: Windows backslash prefix bypass attempts ──
-
-describe("guardDirectWritePath adversarial separator tests", () => {
-  let tempDir: string;
-  let repoPath: string;
-
-  beforeEach(() => {
-    tempDir = mkdtempSync(join(tmpdir(), "pw-directsep-"));
-    repoPath = join(tempDir, "my-repo");
-    mkdirSync(repoPath, { recursive: true });
-    mkdirSync(join(repoPath, "src"), { recursive: true });
-  });
-
-  afterEach(() => {
-    rmSync(tempDir, { recursive: true, force: true });
-  });
-
-  it("blocks node_modules with backslash prefix", () => {
-    assert.throws(
-      () => guardDirectWritePath("node_modules\\evil\\index.js", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "blocked_artifact_path"
-    );
-  });
-
-  it("blocks dist with backslash prefix", () => {
-    assert.throws(
-      () => guardDirectWritePath("dist\\main.js", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "blocked_artifact_path"
-    );
-  });
-
-  it("blocks release with backslash prefix", () => {
-    assert.throws(
-      () => guardDirectWritePath("release\\app.exe", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "blocked_artifact_path"
-    );
-  });
-
-  it("blocks nested node_modules with mixed separators", () => {
-    assert.throws(
-      () => guardDirectWritePath("src\\node_modules/evil\\index.js", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "blocked_artifact_path"
-    );
-  });
-
-  it("blocks .patchwarden with backslash prefix", () => {
-    assert.throws(
-      () => guardDirectWritePath(".patchwarden\\tasks\\evil.json", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "internal_patchwarden_path_blocked"
-    );
-  });
-
-  it("blocks .env with backslash prefix", () => {
-    assert.throws(
-      () => guardDirectWritePath("path\\to\\.env", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "sensitive_path_blocked"
-    );
-  });
-
-  it("blocks config.json with backslash path", () => {
-    assert.throws(
-      () => guardDirectWritePath("subdir\\config.json", repoPath, tempDir),
-      (err: unknown) => err instanceof PatchWardenError && err.reason === "sensitive_path_blocked"
-    );
-  });
-});

package/src/test/unit/discovery-token-store.test.ts

@@ -1,181 +0,0 @@
-import { describe, it, beforeEach } from "node:test";
-import { strict as assert } from "node:assert";
-import {
-  issueToken,
-  consumeToken,
-  peekToken,
-  revokeToken,
-  clearAllTokens,
-  getActiveTokenCount,
-  type IssueTokenInput,
-} from "../../security/discoveryTokenStore.js";
-import { PatchWardenError } from "../../errors.js";
-
-// ── Helpers ───────────────────────────────────────────────────────
-
-function todayDatePart(): string {
-  const now = new Date();
-  const y = now.getFullYear();
-  const m = String(now.getMonth() + 1).padStart(2, "0");
-  const d = String(now.getDate()).padStart(2, "0");
-  return `${y}${m}${d}`;
-}
-
-function sampleInput(overrides: Partial<IssueTokenInput> = {}): IssueTokenInput {
-  return {
-    toolName: "read_workspace_file",
-    risk: "workspace_read_sensitive",
-    query: "read file",
-    schemaDigest: "sha256:abc123",
-    profile: "full",
-    ...overrides,
-  };
-}
-
-// ── Tests ─────────────────────────────────────────────────────────
-
-describe("discoveryTokenStore", () => {
-  beforeEach(() => {
-    clearAllTokens();
-  });
-
-  describe("issueToken", () => {
-    it("返回 dst_ 前缀 + 日期 + 12 位 hex 格式", () => {
-      const token = issueToken(sampleInput());
-      const regex = new RegExp(`^dst_${todayDatePart()}_[a-f0-9]{12}$`);
-      assert.ok(regex.test(token), `token "${token}" should match dst_YYYYMMDD_hex12`);
-    });
-
-    it("默认 expiresAt 为 issuedAt + 10 分钟", () => {
-      const token = issueToken(sampleInput());
-      const record = peekToken(token);
-      assert.ok(record, "record should exist");
-      const diff = Date.parse(record!.expiresAt) - Date.parse(record!.issuedAt);
-      // 允许 50ms 容差（两次 Date.now 调用间微小差异）
-      assert.ok(
-        Math.abs(diff - 600000) <= 50,
-        `expected diff ~600000ms, got ${diff}ms`
-      );
-    });
-
-    it("自定义 ttlMs 反映到 expiresAt", () => {
-      const token = issueToken(sampleInput({ ttlMs: 30000 }));
-      const record = peekToken(token);
-      assert.ok(record);
-      const diff = Date.parse(record!.expiresAt) - Date.parse(record!.issuedAt);
-      assert.ok(
-        Math.abs(diff - 30000) <= 50,
-        `expected diff ~30000ms, got ${diff}ms`
-      );
-    });
-
-    it("保存 record 字段完整", () => {
-      const token = issueToken(sampleInput({ allowedScope: ["src/"] }));
-      const record = peekToken(token);
-      assert.ok(record);
-      assert.equal(record!.token, token);
-      assert.equal(record!.toolName, "read_workspace_file");
-      assert.equal(record!.risk, "workspace_read_sensitive");
-      assert.deepEqual(record!.allowedScope, ["src/"]);
-      assert.equal(record!.query, "read file");
-      assert.equal(record!.schemaDigest, "sha256:abc123");
-      assert.equal(record!.profile, "full");
-    });
-  });
-
-  describe("consumeToken", () => {
-    it("成功返回 record 并删除（单次使用）", () => {
-      const token = issueToken(sampleInput());
-      const record = consumeToken(token);
-      assert.equal(record.token, token);
-      // 再次 consume 应抛 token_not_found
-      assert.throws(
-        () => consumeToken(token),
-        (err: unknown) => {
-          assert.ok(err instanceof PatchWardenError);
-          assert.equal(err.reason, "token_not_found");
-          return true;
-        }
-      );
-    });
-
-    it("不存在抛 token_not_found", () => {
-      assert.throws(
-        () => consumeToken("dst_nonexistent_000000000000"),
-        (err: unknown) => {
-          assert.ok(err instanceof PatchWardenError);
-          assert.equal(err.reason, "token_not_found");
-          return true;
-        }
-      );
-    });
-
-    it("过期抛 token_expired", () => {
-      // 用负 ttlMs 构造已过期 token
-      const token = issueToken(sampleInput({ ttlMs: -1000 }));
-      assert.throws(
-        () => consumeToken(token),
-        (err: unknown) => {
-          assert.ok(err instanceof PatchWardenError);
-          assert.equal(err.reason, "token_expired");
-          return true;
-        }
-      );
-    });
-
-    it("过期 token 被消费后从 store 删除", () => {
-      const token = issueToken(sampleInput({ ttlMs: -1000 }));
-      assert.throws(() => consumeToken(token));
-      // peek 应返回 null（已删除）
-      assert.equal(peekToken(token), null);
-    });
-  });
-
-  describe("peekToken", () => {
-    it("不消费 token（peek 后 consume 仍成功）", () => {
-      const token = issueToken(sampleInput());
-      const peeked = peekToken(token);
-      assert.ok(peeked);
-      assert.equal(peeked!.token, token);
-      // peek 后 consume 仍能成功
-      const consumed = consumeToken(token);
-      assert.equal(consumed.token, token);
-    });
-
-    it("不存在返回 null", () => {
-      assert.equal(peekToken("dst_nonexistent_000000000000"), null);
-    });
-  });
-
-  describe("revokeToken", () => {
-    it("删除 token，返回 true", () => {
-      const token = issueToken(sampleInput());
-      assert.equal(revokeToken(token), true);
-      assert.equal(peekToken(token), null);
-    });
-
-    it("不存在返回 false", () => {
-      assert.equal(revokeToken("dst_nonexistent_000000000000"), false);
-    });
-  });
-
-  describe("clearAllTokens", () => {
-    it("清空所有 token", () => {
-      issueToken(sampleInput());
-      issueToken(sampleInput());
-      assert.equal(getActiveTokenCount(), 2);
-      clearAllTokens();
-      assert.equal(getActiveTokenCount(), 0);
-    });
-  });
-
-  describe("getActiveTokenCount", () => {
-    it("正确返回当前 token 数量", () => {
-      assert.equal(getActiveTokenCount(), 0);
-      issueToken(sampleInput());
-      assert.equal(getActiveTokenCount(), 1);
-      issueToken(sampleInput());
-      assert.equal(getActiveTokenCount(), 2);
-    });
-  });
-});