From 1e7b7311aaa984cbe7cc78820bd6736a2587de3b Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 13 Aug 2026 08:53:53 +0900
Subject: [PATCH 1/2] test: require bounded Homebrew cleanup feedback

---
 .../brewCleanupErrorPrivacyContract.test.ts   | 30 +++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 src/lib/brewCleanupErrorPrivacyContract.test.ts

diff --git a/src/lib/brewCleanupErrorPrivacyContract.test.ts b/src/lib/brewCleanupErrorPrivacyContract.test.ts
new file mode 100644
index 000000000..a83049f38
--- /dev/null
+++ b/src/lib/brewCleanupErrorPrivacyContract.test.ts
@@ -0,0 +1,30 @@
+import { readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+
+const repositoryRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
+
+function readSource(path: string): string {
+  return readFileSync(resolve(repositoryRoot, path), "utf8");
+}
+
+describe("BrewCleanup privacy-safe failure feedback", () => {
+  it("never renders arbitrary backend exception text", () => {
+    const source = readSource("src/lib/BrewCleanup.svelte");
+
+    expect(source).not.toContain("String(e)");
+    expect(source).toContain("Homebrew 정리 계획을 만들지 못했습니다.");
+    expect(source).toContain("Homebrew 정리를 실행하지 못했습니다.");
+    expect(source).toContain('role="alert"');
+  });
+
+  it("preserves the existing judgment and execution authority calls", () => {
+    const source = readSource("src/lib/BrewCleanup.svelte");
+
+    expect(source).toContain("api.judgeBrewCleanup()");
+    expect(source).toContain("api.executeBrewCleanup(");
+    expect(source).toContain("submittedJudgment.plan_fingerprint");
+    expect(source).toContain("submittedJudgment.judgment_id");
+  });
+});

From ded52e4b252c2e45b73053d0e31efd4d7678046a Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 13 Aug 2026 08:54:58 +0900
Subject: [PATCH 2/2] fix: bound Homebrew cleanup failure feedback

---
 src/lib/BrewCleanup.svelte | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/lib/BrewCleanup.svelte b/src/lib/BrewCleanup.svelte
index 3ac08ac9f..824ce8c47 100644
--- a/src/lib/BrewCleanup.svelte
+++ b/src/lib/BrewCleanup.svelte
@@ -25,8 +25,8 @@
     reset();
     try {
       judgment = await api.judgeBrewCleanup();
-    } catch (e) {
-      error = String(e);
+    } catch {
+      error = "Homebrew 정리 계획을 만들지 못했습니다.";
     } finally {
       planning = false;
     }
@@ -72,8 +72,8 @@
         confirmationPhrase.trim(),
         rationale.trim(),
       );
-    } catch (e) {
-      error = String(e);
+    } catch {
+      error = "Homebrew 정리를 실행하지 못했습니다.";
     } finally {
       judgment = null;
       confirmationPhrase = "";