@spilno/herald-mcp 1.28.2 → 1.30.0

package/dist/sanitization.spec.js

@@ -0,0 +1,90 @@
+/**
+ * CEDA-65: Sanitization Tests
+ */
+import { sanitize, previewSanitization, DataClassification, SensitiveDataType } from "./sanitization.js";
+describe("sanitization", () => {
+    describe("sanitize", () => {
+        it("should pass through clean text unchanged", () => {
+            const result = sanitize("This is a clean pattern about error handling");
+            expect(result.sanitizedText).toBe("This is a clean pattern about error handling");
+            expect(result.redactionCount).toBe(0);
+            expect(result.dataClass).toBe(DataClassification.PUBLIC);
+        });
+        it("should redact API keys", () => {
+            const result = sanitize("Found issue with api_key=sk-proj-abc123xyz789abc123xyz789");
+            expect(result.sanitizedText).toContain("[API_KEY_REDACTED]");
+            expect(result.detectedTypes).toContain(SensitiveDataType.API_KEY);
+            expect(result.dataClass).toBe(DataClassification.CONFIDENTIAL);
+        });
+        it("should redact Stripe-style keys", () => {
+            const result = sanitize("Using sk-live-abc123xyz789abc123xyz789abc");
+            expect(result.sanitizedText).toContain("[API_KEY_REDACTED]");
+        });
+        it("should redact JWT tokens", () => {
+            const result = sanitize("Token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dozjgNryP4J3jVmNHl0w5N_XgL0n3I9PlFUP0THsR8U");
+            expect(result.sanitizedText).toContain("[JWT_TOKEN_REDACTED]");
+        });
+        it("should redact file paths with usernames", () => {
+            const result = sanitize("Error in /Users/john/project/src/auth.ts");
+            expect(result.sanitizedText).toContain("[PATH_REDACTED]");
+            expect(result.detectedTypes).toContain(SensitiveDataType.FILE_PATH);
+        });
+        it("should redact email addresses", () => {
+            const result = sanitize("Contact user at john.doe@company.com for help");
+            expect(result.sanitizedText).toContain("[EMAIL_REDACTED]");
+        });
+        it("should redact phone numbers", () => {
+            const result = sanitize("Call support at 555-123-4567");
+            expect(result.sanitizedText).toContain("[PHONE_REDACTED]");
+        });
+        it("should redact IP addresses", () => {
+            const result = sanitize("Server at 192.168.1.100 is down");
+            expect(result.sanitizedText).toContain("[IP_REDACTED]");
+        });
+        it("should block private keys entirely", () => {
+            const result = sanitize(`-----BEGIN PRIVATE KEY-----
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC7
+-----END PRIVATE KEY-----`);
+            expect(result.blocked).toBe(true);
+            expect(result.sanitizedText).toBe("");
+            expect(result.detectedTypes).toContain(SensitiveDataType.PRIVATE_KEY);
+        });
+        it("should block AWS access keys", () => {
+            const result = sanitize("Using AKIAIOSFODNN7EXAMPLE for S3");
+            expect(result.blocked).toBe(true);
+            expect(result.detectedTypes).toContain(SensitiveDataType.AWS_KEY);
+        });
+        it("should redact passwords", () => {
+            const result = sanitize("Set password=mysecretpass123");
+            expect(result.sanitizedText).toContain("[PASSWORD_REDACTED]");
+        });
+        it("should redact SSN patterns", () => {
+            const result = sanitize("SSN: 123-45-6789");
+            expect(result.sanitizedText).toContain("[SSN_REDACTED]");
+        });
+        it("should handle multiple redactions", () => {
+            const result = sanitize("User john@test.com at 192.168.1.1 with api_key=abc123xyz789abc123xyz789");
+            expect(result.redactionCount).toBeGreaterThan(2);
+            expect(result.sanitizedText).not.toContain("john@test.com");
+            expect(result.sanitizedText).not.toContain("192.168.1.1");
+        });
+    });
+    describe("previewSanitization", () => {
+        it("should show original and sanitized side by side", () => {
+            const result = previewSanitization("Contact john@example.com");
+            expect(result.original).toBe("Contact john@example.com");
+            expect(result.sanitized).toContain("[EMAIL_REDACTED]");
+            expect(result.wouldSanitize).toBe(true);
+        });
+        it("should indicate clean content", () => {
+            const result = previewSanitization("Clean pattern description");
+            expect(result.wouldSanitize).toBe(false);
+            expect(result.classification).toBe(DataClassification.PUBLIC);
+        });
+        it("should indicate blocked content", () => {
+            const result = previewSanitization("Key: AKIAIOSFODNN7EXAMPLE");
+            expect(result.wouldBlock).toBe(true);
+        });
+    });
+});
+//# sourceMappingURL=sanitization.spec.js.map

package/dist/sanitization.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitization.spec.js","sourceRoot":"","sources":["../src/sanitization.spec.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEzG,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAClF,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;YAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,2DAA2D,CAAC,CAAC;YACrF,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;YAC7D,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YACrE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,qHAAqH,CAAC,CAAC;YAC/I,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,0CAA0C,CAAC,CAAC;YACpE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC1D,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,+CAA+C,CAAC,CAAC;YACzE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,8BAA8B,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,iCAAiC,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC;;0BAEJ,CAAC,CAAC;YACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,mCAAmC,CAAC,CAAC;YAC7D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;YACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,8BAA8B,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,yEAAyE,CAAC,CAAC;YACnG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,MAAM,GAAG,mBAAmB,CAAC,0BAA0B,CAAC,CAAC;YAC/D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACzD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;YAChE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,MAAM,GAAG,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;YAChE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spilno/herald-mcp",
-  "version": "1.28.2",
+  "version": "1.30.0",
   "description": "Herald MCP - AI-native interface to CEDA (Cognitive Event-Driven Architecture)",
   "main": "dist/index.js",
   "type": "module",
@@ -28,7 +28,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/Spilno-me/ceda.git",
+    "url": "git+https://github.com/Spilno-me/ceda.git",
     "directory": "herald-mcp"
   },
   "homepage": "https://getceda.com",