Jakob WennbergandClaude Sonnet 5
ec27228a8e
Em dashes (—) and en dashes (–) had spread across comments, docs, tests, and a few UI strings, reading as AI-generated boilerplate rather than house style. Replaced each with punctuation matching its context: colon for explanatory clauses, comma for asides, plain hyphen for numeric/legal ranges (e.g. "21-23§"), "to"/"till" for date ranges, parentheses for paired-dash asides. messages/en.json and messages/sv.json were fixed by hand together to keep sv/en in sync. Left untouched where the dash is the functional subject rather than decorative punctuation: date-range-parser.ts's separator regex, charset-repair.ts's CP1252 byte-mapping table (and its test), the SIE encoding mojibake docs, generic-csv.ts's minus-sign normalizer, the agent system-prompt files that already instruct against em dashes, and a golden iXBRL test fixture compared byte-for-byte. Also fixes two bugs surfaced along the way: an off-by-one in ApiKeysPanel's scope-label split (a leftover from an earlier partial pass), and a charset-repair test that had lost the literal en-dash it exists to verify. Regenerated the agent atom seed migration (skills:generate) since 27 SKILL.md files changed. Added a CLAUDE.md rule against em/en dashes, with an explicit carve-out for the functional-dash cases above. Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
38 lines
1.2 KiB
TypeScript
38 lines
1.2 KiB
TypeScript
import { randomUUID } from 'node:crypto'
|
|
import { describe, expect, it } from 'vitest'
|
|
import { getPool } from '@/tests/pg/setup'
|
|
import { insertAuthUser } from '@/tests/pg/fixtures'
|
|
|
|
describe('audit-log.pg: append-only immutability', () => {
|
|
it('rejects UPDATE on audit_log rows', async () => {
|
|
const userId = await insertAuthUser()
|
|
const auditId = randomUUID()
|
|
await getPool().query(
|
|
`INSERT INTO public.audit_log (id, user_id, action, description)
|
|
VALUES ($1, $2, 'SECURITY_EVENT', 'pg-real seed')`,
|
|
[auditId, userId],
|
|
)
|
|
|
|
await expect(
|
|
getPool().query(
|
|
`UPDATE public.audit_log SET description = 'tampered' WHERE id = $1`,
|
|
[auditId],
|
|
),
|
|
).rejects.toThrow(/cannot be modified or deleted/i)
|
|
})
|
|
|
|
it('rejects DELETE on audit_log rows', async () => {
|
|
const userId = await insertAuthUser()
|
|
const auditId = randomUUID()
|
|
await getPool().query(
|
|
`INSERT INTO public.audit_log (id, user_id, action, description)
|
|
VALUES ($1, $2, 'SECURITY_EVENT', 'pg-real seed')`,
|
|
[auditId, userId],
|
|
)
|
|
|
|
await expect(
|
|
getPool().query(`DELETE FROM public.audit_log WHERE id = $1`, [auditId]),
|
|
).rejects.toThrow(/cannot be modified or deleted/i)
|
|
})
|
|
})
|