@polymorphism-tech/morph-spec 4.9.0 → 4.10.0

package/src/sanitizer/patterns.js

@@ -1,163 +0,0 @@
-/**
- * @fileoverview Sanitization patterns - Whitelists, Blacklists, Secret patterns
- * @module morph-spec/sanitizer/patterns
- */
-
-/**
- * Whitelist: Files explicitly allowed to be read and sent to LLM
- */
-export const WHITELIST_FILES = [
-  'package.json',
-  'package-lock.json',
-  'yarn.lock',
-  'pnpm-lock.yaml',
-  '*.csproj',
-  '*.sln',
-  'README.md',
-  'CLAUDE.md',
-  'Dockerfile',
-  'docker-compose.yml',
-  'docker-compose.*.yml',
-  '*.bicep',
-  'azure-pipelines.yml',
-  '.github/workflows/*.yml',
-  '.gitlab-ci.yml',
-  'tsconfig.json',
-  'jsconfig.json',
-  '.eslintrc*',
-  '.prettierrc*',
-  'vite.config.*',
-  'next.config.*',
-  'nuxt.config.*'
-];
-
-/**
- * Blacklist: Directories to NEVER scan or read
- */
-export const BLACKLIST_DIRECTORIES = [
-  'node_modules',
-  '.git',
-  '.svn',
-  '.hg',
-  'bin',
-  'obj',
-  'dist',
-  'build',
-  'out',
-  '.next',
-  '.nuxt',
-  'coverage',
-  '__pycache__',
-  '.pytest_cache',
-  'venv',
-  'env',
-  '.venv',
-  '.env.*',
-  'temp',
-  'tmp',
-  '.cache'
-];
-
-/**
- * Blacklist: File patterns to NEVER read (even if matched by whitelist)
- */
-export const BLACKLIST_FILES = [
-  '.env',
-  '.env.local',
-  '.env.*.local',
-  '.env.production',
-  '*.key',
-  '*.pem',
-  '*.pfx',
-  '*.p12',
-  '*.cert',
-  '*.crt',
-  '*secret*',
-  '*password*',
-  '*credentials*',
-  '*token*',
-  'secrets.json',
-  'appsettings.Production.json',
-  'appsettings.Staging.json',
-  '*.log',
-  '*.sqlite',
-  '*.db'
-];
-
-/**
- * Secret patterns to redact from file contents
- * Each pattern has: regex, replacement text, description
- */
-export const SECRET_PATTERNS = [
-  {
-    name: 'api-key',
-    regex: /(?:api[_-]?key|apikey|api[_-]?secret)[\s:=]+["']?([a-zA-Z0-9_\-]{20,})["']?/gi,
-    replacement: 'API_KEY=***REDACTED***',
-    description: 'API keys'
-  },
-  {
-    name: 'bearer-token',
-    regex: /(?:bearer|authorization)[\s:=]+["']?([a-zA-Z0-9_\-\.]{20,})["']?/gi,
-    replacement: 'Bearer ***REDACTED***',
-    description: 'Bearer tokens'
-  },
-  {
-    name: 'connection-string',
-    regex: /(?:connection[_-]?string|connectionstring)[\s:=]+["']?([^"'\n]{30,})["']?/gi,
-    replacement: 'ConnectionString=***REDACTED***',
-    description: 'Connection strings'
-  },
-  {
-    name: 'sql-password',
-    regex: /(?:password|pwd)=([^;"\s]{6,})/gi,
-    replacement: 'Password=***REDACTED***',
-    description: 'SQL passwords in connection strings'
-  },
-  {
-    name: 'azure-key',
-    regex: /(?:account[_-]?key|accountkey)[\s:=]+["']?([a-zA-Z0-9+/=]{40,})["']?/gi,
-    replacement: 'AccountKey=***REDACTED***',
-    description: 'Azure Storage Account Keys'
-  },
-  {
-    name: 'jwt-secret',
-    regex: /(?:jwt[_-]?secret|jwtsecret)[\s:=]+["']?([a-zA-Z0-9_\-]{16,})["']?/gi,
-    replacement: 'JwtSecret=***REDACTED***',
-    description: 'JWT secrets'
-  },
-  {
-    name: 'private-key',
-    regex: /-----BEGIN (?:RSA |EC )?PRIVATE KEY-----[\s\S]+?-----END (?:RSA |EC )?PRIVATE KEY-----/gi,
-    replacement: '-----BEGIN PRIVATE KEY-----\n***REDACTED***\n-----END PRIVATE KEY-----',
-    description: 'Private keys (PEM format)'
-  },
-  {
-    name: 'github-token',
-    regex: /gh[pousr]_[a-zA-Z0-9]{36,}/gi,
-    replacement: 'ghp_***REDACTED***',
-    description: 'GitHub personal access tokens'
-  },
-  {
-    name: 'npm-token',
-    regex: /npm_[a-zA-Z0-9]{36,}/gi,
-    replacement: 'npm_***REDACTED***',
-    description: 'NPM tokens'
-  },
-  {
-    name: 'generic-secret',
-    regex: /(?:secret|password|pwd|pass|token)[\s:=]+["']([^"'\n]{8,})["']/gi,
-    replacement: 'secret=***REDACTED***',
-    description: 'Generic secrets'
-  }
-];
-
-/**
- * Maximum file size to include (50KB)
- * Files larger than this are truncated with a summary
- */
-export const MAX_FILE_SIZE = 50 * 1024; // 50KB
-
-/**
- * Maximum content length for README/CLAUDE.md summaries
- */
-export const MAX_SUMMARY_LENGTH = 500; // 500 chars

package/src/writer/file-writer.js

@@ -1,86 +0,0 @@
-/**
- * @fileoverview FileWriter - Saves generated configs to filesystem
- * @module morph-spec/writer/file-writer
- */
-
-import { writeFile, mkdir, access } from 'fs/promises';
-import { join, dirname } from 'path';
-import chalk from 'chalk';
-
-/**
- * @typedef {import('../types/index.js').GeneratedConfigs} GeneratedConfigs
- */
-
-/**
- * FileWriter - Saves configuration files to .morph/ directory
- * @class
- */
-export class FileWriter {
-  /**
-   * Save generated configs to filesystem
-   * @param {string} cwd - Current working directory
-   * @param {GeneratedConfigs} configs - Configs to save
-   * @returns {Promise<void>}
-   */
-  async save(cwd, configs) {
-    const morphDir = join(cwd, '.morph');
-    const configDir = join(morphDir, 'config');
-
-    // Ensure directories exist
-    await this.ensureDirectoryExists(morphDir);
-    await this.ensureDirectoryExists(configDir);
-
-    // Write files
-    const projectMdPath = join(morphDir, 'project.md');
-    const configJsonPath = join(configDir, 'config.json');
-
-    await Promise.all([
-      this.writeProjectMd(projectMdPath, configs.projectMd),
-      this.writeConfigJson(configJsonPath, configs.configJson)
-    ]);
-
-    // Display success message
-    console.log(chalk.bold.green('\n✅ Configuration files saved:\n'));
-    console.log(chalk.cyan(`  📄 ${projectMdPath}`));
-    console.log(chalk.cyan(`  ⚙️  ${configJsonPath}`));
-    console.log();
-  }
-
-  /**
-   * Write project.md file
-   * @param {string} filepath - File path
-   * @param {string} content - File content
-   * @returns {Promise<void>}
-   */
-  async writeProjectMd(filepath, content) {
-    await writeFile(filepath, content, 'utf-8');
-  }
-
-  /**
-   * Write config.json file (with pretty formatting)
-   * @param {string} filepath - File path
-   * @param {string} content - File content (JSON string)
-   * @returns {Promise<void>}
-   */
-  async writeConfigJson(filepath, content) {
-    // Parse and re-stringify with pretty formatting
-    const parsed = JSON.parse(content);
-    const formatted = JSON.stringify(parsed, null, 2);
-
-    await writeFile(filepath, formatted, 'utf-8');
-  }
-
-  /**
-   * Ensure directory exists (create if not)
-   * @param {string} dirPath - Directory path
-   * @returns {Promise<void>}
-   */
-  async ensureDirectoryExists(dirPath) {
-    try {
-      await access(dirPath);
-    } catch (error) {
-      // Directory doesn't exist, create it
-      await mkdir(dirPath, { recursive: true });
-    }
-  }
-}