// 已读取AGENTS.md
import * as fs from 'fs';
import * as path from 'path';

/**
 * 第七十三批回归闸门：移动端公开配置不得泄露密钥/风控数据。
 * 背景：/api/system/configs 无需登录，曾原样下发 map_location_config(含 SecretKey) 与 security_words(风控词库)。
 */
describe('第七十三批公开配置隐私闸门', () => {
  const root = path.resolve(__dirname, '../../');
  const repo = fs.readFileSync(path.join(root, 'server/src/db/repository.ts'), 'utf-8');

  it('公开配置排除风控词库与地图密钥配置', () => {
    expect(repo).toContain("const PUBLIC_EXCLUDED_KEYS = new Set(['security_words', 'map_location_config'])");
    expect(repo).toContain('if (PUBLIC_EXCLUDED_KEYS.has(r.configKey)) continue;');
  });

  it('公开配置递归剔除敏感字段', () => {
    expect(repo).toContain('const stripSensitive = (val: any)');
    expect(repo).toContain('if (SENSITIVE_FIELD.test(k)) continue;');
    expect(repo).toContain('result[r.configKey] = stripSensitive(val);');
  });
});