Prepare ForgeFlow for public release

tests/diagnostics.test.mjs

@@ -41,7 +41,9 @@ test('writes structured local diagnostics and exports a secret-free support bund
     authorization: `token ${secret}`,
     password: 'unsafe-password',
     message: `request failed with ${secret}`,
-    path: path.join(os.homedir(), 'private', 'repository')
+    path: path.join(os.homedir(), 'private', 'repository'),
+    host: '192.168.10.20',
+    basePath: '/mnt/user/appdata/private-app'
   });
   await service.flush();
 
@@ -57,7 +59,7 @@ test('writes structured local diagnostics and exports a secret-free support bund
   const result = await service.exportSupportBundle({
     destinationPath: destination,
     privacyMode: 'strict',
-    publicState: { gitea: { baseUrl: 'https://gitea.example.test', hasToken: true, encryptedToken: 'ciphertext' }, preferences: {} },
+    publicState: { gitea: { baseUrl: 'https://gitea.example.test', hasToken: true, encryptedToken: 'ciphertext' }, servers: [{ host: '192.168.10.20', username: 'deploy', basePath: '/mnt/user/appdata/private-app' }], preferences: {} },
     repositories: [{ id: 1, fullName: 'jens/private-repo', localPath: path.join(os.homedir(), 'private-repo'), localStatus: { head: 'a'.repeat(40), branch: { head: 'main' }, counts: {}, clean: true } }],
     operations: [{ repository: 'jens/private-repo', status: 'failed', runnerLog: `Authorization: token ${secret}` }],
     preflight: { checks: [] }
@@ -67,6 +69,7 @@ test('writes structured local diagnostics and exports a secret-free support bund
   const bundleText = [...entries.values()].map((value) => value.toString('utf8')).join('\n');
   assert.doesNotMatch(bundleText, new RegExp(secret));
   assert.doesNotMatch(bundleText, /ciphertext|unsafe-password|jens\/private-repo/);
+  assert.doesNotMatch(bundleText, /192\.168\.10\.20|\/mnt\/user\/appdata\/private-app/);
   assert.match(entries.get('manifest.json').toString(), /"containsSecrets": false/);
   assert.match(entries.get('repositories-sanitized.json').toString(), /fullname-[a-f0-9]{12}/);