test: clickhouse — finops query history clamping and TLS credential detection

Cover the ClickHouse paths added with the ClickHouse driver (#574):
- buildHistoryQuery clamping logic (days 1-365, limit 1-10000, NaN defaults)
- isSensitiveField for tls_key, tls_cert, tls_ca_cert

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

https://claude.ai/code/session_012jvWsEtSUeZKaCe7Xp4StX

Author: claude

packages/opencode/test/altimate/connections.test.ts

@@ -257,6 +257,12 @@ describe("CredentialStore", () => {
     expect(CredentialStore.isSensitiveField("ssl_ca")).toBe(true)
     expect(CredentialStore.isSensitiveField("ssh_password")).toBe(true)
   })
+
+  test("isSensitiveField covers ClickHouse TLS credential fields", () => {
+    expect(CredentialStore.isSensitiveField("tls_key")).toBe(true)
+    expect(CredentialStore.isSensitiveField("tls_cert")).toBe(true)
+    expect(CredentialStore.isSensitiveField("tls_ca_cert")).toBe(true)
+  })
   // altimate_change end
 
   test("saveConnection strips inline private_key as sensitive", async () => {

packages/opencode/test/altimate/schema-finops-dbt.test.ts

@@ -158,6 +158,47 @@ describe("FinOps: SQL template generation", () => {
       const built = HistoryTemplates.buildHistoryQuery("databricks", 7, 50)
       expect(built?.sql).toContain("system.query.history")
     })
+
+    // altimate_change start — ClickHouse buildHistoryQuery coverage (added with ClickHouse driver)
+    test("builds ClickHouse history SQL with string substitution", () => {
+      const built = HistoryTemplates.buildHistoryQuery("clickhouse", 30, 500)
+      expect(built).not.toBeNull()
+      expect(built!.sql).toContain("system.query_log")
+      expect(built!.sql).toContain("- 30")
+      expect(built!.sql).toContain("LIMIT 500")
+      expect(built!.binds).toEqual([])
+    })
+
+    test("ClickHouse clamps days above 365 to 365", () => {
+      const built = HistoryTemplates.buildHistoryQuery("clickhouse", 999, 100)
+      expect(built!.sql).toContain("- 365")
+      expect(built!.sql).not.toContain("999")
+    })
+
+    test("ClickHouse clamps negative days to 1", () => {
+      const built = HistoryTemplates.buildHistoryQuery("clickhouse", -5, 100)
+      expect(built!.sql).toContain("- 1")
+      expect(built!.sql).not.toContain("-5")
+    })
+
+    test("ClickHouse clamps limit above 10000 to 10000", () => {
+      const built = HistoryTemplates.buildHistoryQuery("clickhouse", 7, 99999)
+      expect(built!.sql).toContain("LIMIT 10000")
+      expect(built!.sql).not.toContain("99999")
+    })
+
+    test("ClickHouse clamps zero limit to 1", () => {
+      const built = HistoryTemplates.buildHistoryQuery("clickhouse", 7, 0)
+      expect(built!.sql).toContain("LIMIT 1")
+    })
+
+    test("ClickHouse uses defaults when days/limit are NaN", () => {
+      const built = HistoryTemplates.buildHistoryQuery("clickhouse", NaN, NaN)
+      expect(built).not.toBeNull()
+      expect(built!.sql).toContain("- 30")
+      expect(built!.sql).toContain("LIMIT 100")
+    })
+    // altimate_change end
   })
 
   describe("warehouse-advisor", () => {