shieldcortex 2.20.1 → 3.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +248 -122
- package/dashboard/.next/standalone/dashboard/.next/BUILD_ID +1 -1
- package/dashboard/.next/standalone/dashboard/.next/build-manifest.json +5 -5
- package/dashboard/.next/standalone/dashboard/.next/prerender-manifest.json +3 -3
- package/dashboard/.next/standalone/dashboard/.next/server/app/_global-error/page/build-manifest.json +3 -3
- package/dashboard/.next/standalone/dashboard/.next/server/app/_global-error.html +2 -2
- package/dashboard/.next/standalone/dashboard/.next/server/app/_global-error.rsc +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/_global-error.segments/__PAGE__.segment.rsc +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/_global-error.segments/_full.segment.rsc +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/_global-error.segments/_head.segment.rsc +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/_global-error.segments/_index.segment.rsc +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/_global-error.segments/_tree.segment.rsc +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/_not-found/page/build-manifest.json +3 -3
- package/dashboard/.next/standalone/dashboard/.next/server/app/_not-found/page_client-reference-manifest.js +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/_not-found.html +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/_not-found.rsc +3 -3
- package/dashboard/.next/standalone/dashboard/.next/server/app/_not-found.segments/_full.segment.rsc +3 -3
- package/dashboard/.next/standalone/dashboard/.next/server/app/_not-found.segments/_head.segment.rsc +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/_not-found.segments/_index.segment.rsc +3 -3
- package/dashboard/.next/standalone/dashboard/.next/server/app/_not-found.segments/_not-found/__PAGE__.segment.rsc +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/_not-found.segments/_not-found.segment.rsc +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/_not-found.segments/_tree.segment.rsc +2 -2
- package/dashboard/.next/standalone/dashboard/.next/server/app/index.html +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/index.rsc +4 -4
- package/dashboard/.next/standalone/dashboard/.next/server/app/index.segments/__PAGE__.segment.rsc +2 -2
- package/dashboard/.next/standalone/dashboard/.next/server/app/index.segments/_full.segment.rsc +4 -4
- package/dashboard/.next/standalone/dashboard/.next/server/app/index.segments/_head.segment.rsc +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/index.segments/_index.segment.rsc +3 -3
- package/dashboard/.next/standalone/dashboard/.next/server/app/index.segments/_tree.segment.rsc +2 -2
- package/dashboard/.next/standalone/dashboard/.next/server/app/page/build-manifest.json +3 -3
- package/dashboard/.next/standalone/dashboard/.next/server/app/page/react-loadable-manifest.json +2 -2
- package/dashboard/.next/standalone/dashboard/.next/server/app/page.js.nft.json +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/app/page_client-reference-manifest.js +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/chunks/ssr/9f1d4_next_dist_esm_build_templates_app-page_f7d4354e.js +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/chunks/ssr/9f1d4_next_dist_fe6a9400._.js +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/chunks/ssr/[root-of-the-server]__c95102dd._.js +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/chunks/ssr/dashboard_1cd9d700._.js +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/chunks/ssr/dashboard_3051539d._.js +11 -0
- package/dashboard/.next/standalone/dashboard/.next/server/middleware-build-manifest.js +3 -3
- package/dashboard/.next/standalone/dashboard/.next/server/pages/404.html +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/pages/500.html +2 -2
- package/dashboard/.next/standalone/dashboard/.next/server/server-reference-manifest.js +1 -1
- package/dashboard/.next/standalone/dashboard/.next/server/server-reference-manifest.json +1 -1
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/{d334b69bff7779be.js → 215ce64499260c25.js} +1 -1
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/{acf32ffeb20e4854.js → 39e59c45c12073c2.js} +1 -1
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/3cc7e8d4f73cf5d2.js +1 -0
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/{da96df828f9a0188.js → 6ba7a5c1a80a6791.js} +1 -1
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/{fc4e920d4281c89e.js → 7d08316952ccdcef.js} +1 -1
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/be6970da20a17c0b.js +9 -0
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/da64d159c042f5ae.js +1 -0
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/e63d2228780629dd.css +3 -0
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/f69fd1c5e71fbbfd.js +1 -0
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/{26118d592a545e00.js → fa5217550a8ab9a6.js} +2 -2
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/{turbopack-7cf1ece01d32a474.js → turbopack-c2d84e7d37269ac1.js} +1 -1
- package/dist/api/control.d.ts +0 -1
- package/dist/api/control.js +0 -1
- package/dist/api/events.d.ts +0 -1
- package/dist/api/events.js +0 -1
- package/dist/api/session-token.d.ts +0 -1
- package/dist/api/session-token.js +0 -1
- package/dist/api/version.d.ts +0 -1
- package/dist/api/version.js +0 -1
- package/dist/api/visualization-server.d.ts +0 -1
- package/dist/api/visualization-server.js +117 -3
- package/dist/audit/env-scanner.d.ts +0 -1
- package/dist/audit/env-scanner.js +0 -1
- package/dist/audit/index.d.ts +0 -1
- package/dist/audit/index.js +0 -1
- package/dist/audit/mcp-config-scanner.d.ts +0 -1
- package/dist/audit/mcp-config-scanner.js +0 -1
- package/dist/audit/memory-scanner.d.ts +0 -1
- package/dist/audit/memory-scanner.js +0 -1
- package/dist/audit/report-formatter.d.ts +0 -1
- package/dist/audit/report-formatter.js +0 -1
- package/dist/audit/rules-file-scanner.d.ts +0 -1
- package/dist/audit/rules-file-scanner.js +0 -1
- package/dist/audit/types.d.ts +0 -1
- package/dist/audit/types.js +0 -1
- package/dist/cli/audit.d.ts +0 -1
- package/dist/cli/audit.js +0 -1
- package/dist/cli/doctor.d.ts +0 -1
- package/dist/cli/doctor.js +0 -1
- package/dist/cli/iron-dome.d.ts +0 -1
- package/dist/cli/iron-dome.js +0 -1
- package/dist/cloud/cli.d.ts +0 -1
- package/dist/cloud/cli.js +0 -1
- package/dist/cloud/config.d.ts +0 -1
- package/dist/cloud/config.js +1 -2
- package/dist/cloud/iron-dome-sync.d.ts +0 -1
- package/dist/cloud/iron-dome-sync.js +0 -1
- package/dist/cloud/quarantine-sync.d.ts +0 -1
- package/dist/cloud/quarantine-sync.js +0 -1
- package/dist/cloud/sync-queue.d.ts +0 -1
- package/dist/cloud/sync-queue.js +0 -1
- package/dist/cloud/sync.d.ts +0 -1
- package/dist/cloud/sync.js +0 -1
- package/dist/cloud/verify.d.ts +0 -1
- package/dist/cloud/verify.js +0 -1
- package/dist/context/project-context.d.ts +0 -1
- package/dist/context/project-context.js +0 -1
- package/dist/database/init.d.ts +0 -1
- package/dist/database/init.js +0 -1
- package/dist/defence/audit/export.d.ts +0 -1
- package/dist/defence/audit/export.js +0 -1
- package/dist/defence/audit/index.d.ts +0 -1
- package/dist/defence/audit/index.js +0 -1
- package/dist/defence/audit/logger.d.ts +0 -1
- package/dist/defence/audit/logger.js +0 -1
- package/dist/defence/audit/queries.d.ts +22 -1
- package/dist/defence/audit/queries.js +179 -1
- package/dist/defence/credential-leak/entropy.d.ts +0 -1
- package/dist/defence/credential-leak/entropy.js +0 -1
- package/dist/defence/credential-leak/index.d.ts +0 -1
- package/dist/defence/credential-leak/index.js +0 -1
- package/dist/defence/credential-leak/patterns.d.ts +0 -1
- package/dist/defence/credential-leak/patterns.js +0 -1
- package/dist/defence/custom-patterns/store.d.ts +0 -1
- package/dist/defence/custom-patterns/store.js +0 -1
- package/dist/defence/custom-rules/store.d.ts +0 -1
- package/dist/defence/custom-rules/store.js +0 -1
- package/dist/defence/firewall/anomaly-scorer.d.ts +0 -1
- package/dist/defence/firewall/anomaly-scorer.js +0 -1
- package/dist/defence/firewall/encoding-detector.d.ts +0 -1
- package/dist/defence/firewall/encoding-detector.js +0 -1
- package/dist/defence/firewall/index.d.ts +0 -1
- package/dist/defence/firewall/index.js +0 -1
- package/dist/defence/firewall/instruction-detector.d.ts +0 -1
- package/dist/defence/firewall/instruction-detector.js +0 -1
- package/dist/defence/firewall/privilege-detector.d.ts +0 -1
- package/dist/defence/firewall/privilege-detector.js +0 -1
- package/dist/defence/fragmentation/assembly-detector.d.ts +0 -1
- package/dist/defence/fragmentation/assembly-detector.js +0 -1
- package/dist/defence/fragmentation/entity-extractor.d.ts +0 -1
- package/dist/defence/fragmentation/entity-extractor.js +0 -1
- package/dist/defence/fragmentation/index.d.ts +0 -1
- package/dist/defence/fragmentation/index.js +0 -1
- package/dist/defence/fragmentation/temporal-analyzer.d.ts +0 -1
- package/dist/defence/fragmentation/temporal-analyzer.js +0 -1
- package/dist/defence/index.d.ts +0 -1
- package/dist/defence/index.js +0 -1
- package/dist/defence/input-sanitisation/index.d.ts +0 -1
- package/dist/defence/input-sanitisation/index.js +0 -1
- package/dist/defence/iron-dome/action-gate.d.ts +0 -1
- package/dist/defence/iron-dome/action-gate.js +0 -1
- package/dist/defence/iron-dome/audit.d.ts +0 -1
- package/dist/defence/iron-dome/audit.js +0 -1
- package/dist/defence/iron-dome/config.d.ts +0 -1
- package/dist/defence/iron-dome/config.js +0 -1
- package/dist/defence/iron-dome/confirmation-gate.d.ts +0 -1
- package/dist/defence/iron-dome/confirmation-gate.js +0 -1
- package/dist/defence/iron-dome/custom-policies.d.ts +0 -1
- package/dist/defence/iron-dome/custom-policies.js +0 -1
- package/dist/defence/iron-dome/gateway.d.ts +0 -1
- package/dist/defence/iron-dome/gateway.js +0 -1
- package/dist/defence/iron-dome/index.d.ts +0 -1
- package/dist/defence/iron-dome/index.js +0 -1
- package/dist/defence/iron-dome/injection-scanner.d.ts +0 -1
- package/dist/defence/iron-dome/injection-scanner.js +0 -1
- package/dist/defence/iron-dome/kill-switch.d.ts +0 -1
- package/dist/defence/iron-dome/kill-switch.js +0 -1
- package/dist/defence/iron-dome/pii-guard.d.ts +0 -1
- package/dist/defence/iron-dome/pii-guard.js +0 -1
- package/dist/defence/pipeline.d.ts +0 -1
- package/dist/defence/pipeline.js +0 -1
- package/dist/defence/quarantine/auto-expire.d.ts +0 -1
- package/dist/defence/quarantine/auto-expire.js +0 -1
- package/dist/defence/scanner/index.d.ts +0 -1
- package/dist/defence/scanner/index.js +0 -1
- package/dist/defence/scanner/scan-existing.d.ts +0 -1
- package/dist/defence/scanner/scan-existing.js +0 -1
- package/dist/defence/sensitivity/classifier.d.ts +0 -1
- package/dist/defence/sensitivity/classifier.js +0 -1
- package/dist/defence/sensitivity/index.d.ts +0 -1
- package/dist/defence/sensitivity/index.js +0 -1
- package/dist/defence/sensitivity/patterns.d.ts +0 -1
- package/dist/defence/sensitivity/patterns.js +0 -1
- package/dist/defence/sensitivity/redaction.d.ts +0 -1
- package/dist/defence/sensitivity/redaction.js +0 -1
- package/dist/defence/skill-scanner/deep-scan.d.ts +0 -1
- package/dist/defence/skill-scanner/deep-scan.js +0 -1
- package/dist/defence/skill-scanner/discover.d.ts +0 -1
- package/dist/defence/skill-scanner/discover.js +0 -1
- package/dist/defence/skill-scanner/index.d.ts +0 -1
- package/dist/defence/skill-scanner/index.js +0 -1
- package/dist/defence/skill-scanner/parser.d.ts +0 -1
- package/dist/defence/skill-scanner/parser.js +0 -1
- package/dist/defence/skill-scanner/patterns.d.ts +0 -1
- package/dist/defence/skill-scanner/patterns.js +0 -1
- package/dist/defence/skill-scanner/scan-skill.d.ts +0 -1
- package/dist/defence/skill-scanner/scan-skill.js +0 -1
- package/dist/defence/tool-response-scanner.d.ts +0 -1
- package/dist/defence/tool-response-scanner.js +0 -1
- package/dist/defence/trust/access-control.d.ts +0 -1
- package/dist/defence/trust/access-control.js +0 -1
- package/dist/defence/trust/agent-scorer.d.ts +0 -1
- package/dist/defence/trust/agent-scorer.js +0 -1
- package/dist/defence/trust/env-detector.d.ts +0 -1
- package/dist/defence/trust/env-detector.js +0 -1
- package/dist/defence/trust/index.d.ts +0 -1
- package/dist/defence/trust/index.js +0 -1
- package/dist/defence/trust/recall-filter.d.ts +0 -1
- package/dist/defence/trust/recall-filter.js +0 -1
- package/dist/defence/trust/source-scorer.d.ts +0 -1
- package/dist/defence/trust/source-scorer.js +0 -1
- package/dist/defence/types.d.ts +0 -1
- package/dist/defence/types.js +0 -1
- package/dist/embeddings/generator.d.ts +0 -1
- package/dist/embeddings/generator.js +0 -1
- package/dist/embeddings/index.d.ts +0 -1
- package/dist/embeddings/index.js +0 -1
- package/dist/embeddings/worker.d.ts +0 -1
- package/dist/embeddings/worker.js +0 -1
- package/dist/errors.d.ts +0 -1
- package/dist/errors.js +0 -1
- package/dist/events/webhooks.d.ts +0 -1
- package/dist/events/webhooks.js +0 -1
- package/dist/graph/backfill.d.ts +0 -1
- package/dist/graph/backfill.js +0 -1
- package/dist/graph/extract.d.ts +0 -1
- package/dist/graph/extract.js +0 -1
- package/dist/graph/resolve.d.ts +0 -1
- package/dist/graph/resolve.js +0 -1
- package/dist/index.d.ts +1 -1
- package/dist/index.js +10 -2
- package/dist/integrations/index.d.ts +0 -1
- package/dist/integrations/index.js +0 -1
- package/dist/integrations/langchain.d.ts +0 -1
- package/dist/integrations/langchain.js +0 -1
- package/dist/integrations/openclaw.d.ts +0 -1
- package/dist/integrations/openclaw.js +0 -1
- package/dist/integrations/universal.d.ts +0 -1
- package/dist/integrations/universal.js +0 -1
- package/dist/lib.d.ts +0 -1
- package/dist/lib.js +0 -1
- package/dist/license/cli.d.ts +0 -1
- package/dist/license/cli.js +0 -1
- package/dist/license/gate.d.ts +0 -1
- package/dist/license/gate.js +0 -1
- package/dist/license/index.d.ts +0 -1
- package/dist/license/index.js +0 -1
- package/dist/license/keys.d.ts +0 -1
- package/dist/license/keys.js +0 -1
- package/dist/license/store.d.ts +0 -1
- package/dist/license/store.js +0 -1
- package/dist/license/types.d.ts +0 -1
- package/dist/license/types.js +0 -1
- package/dist/license/validate.d.ts +0 -1
- package/dist/license/validate.js +0 -1
- package/dist/license/verify.d.ts +0 -1
- package/dist/license/verify.js +0 -1
- package/dist/memory/activation.d.ts +0 -1
- package/dist/memory/activation.js +0 -1
- package/dist/memory/consolidate.d.ts +0 -1
- package/dist/memory/consolidate.js +0 -1
- package/dist/memory/contradiction.d.ts +0 -1
- package/dist/memory/contradiction.js +0 -1
- package/dist/memory/decay.d.ts +0 -1
- package/dist/memory/decay.js +0 -1
- package/dist/memory/embedding-cache.d.ts +0 -1
- package/dist/memory/embedding-cache.js +0 -1
- package/dist/memory/embedding.d.ts +7 -2
- package/dist/memory/embedding.js +68 -7
- package/dist/memory/expiry.d.ts +0 -1
- package/dist/memory/expiry.js +0 -1
- package/dist/memory/salience.d.ts +0 -1
- package/dist/memory/salience.js +0 -1
- package/dist/memory/similarity.d.ts +0 -1
- package/dist/memory/similarity.js +0 -1
- package/dist/memory/store.d.ts +3 -1
- package/dist/memory/store.js +204 -123
- package/dist/memory/types.d.ts +21 -1
- package/dist/memory/types.js +0 -1
- package/dist/server.d.ts +0 -1
- package/dist/server.js +0 -1
- package/dist/service/install.d.ts +0 -1
- package/dist/service/install.js +0 -1
- package/dist/service/templates.d.ts +0 -1
- package/dist/service/templates.js +0 -1
- package/dist/setup/claude-md.d.ts +0 -1
- package/dist/setup/claude-md.js +0 -1
- package/dist/setup/copilot.d.ts +0 -1
- package/dist/setup/copilot.js +0 -1
- package/dist/setup/doctor.d.ts +0 -1
- package/dist/setup/doctor.js +0 -1
- package/dist/setup/hooks.d.ts +0 -1
- package/dist/setup/hooks.js +0 -1
- package/dist/setup/migrate.d.ts +0 -1
- package/dist/setup/migrate.js +0 -1
- package/dist/setup/openclaw.d.ts +0 -1
- package/dist/setup/openclaw.js +0 -1
- package/dist/setup/quickstart.d.ts +8 -0
- package/dist/setup/quickstart.js +108 -0
- package/dist/setup/settings-hooks.d.ts +0 -1
- package/dist/setup/settings-hooks.js +0 -1
- package/dist/setup/status.d.ts +0 -1
- package/dist/setup/status.js +0 -1
- package/dist/setup/uninstall.d.ts +0 -1
- package/dist/setup/uninstall.js +0 -1
- package/dist/tools/context.d.ts +0 -1
- package/dist/tools/context.js +0 -1
- package/dist/tools/forget.d.ts +0 -1
- package/dist/tools/forget.js +0 -1
- package/dist/tools/graph.d.ts +0 -1
- package/dist/tools/graph.js +0 -1
- package/dist/tools/recall.d.ts +0 -1
- package/dist/tools/recall.js +1 -1
- package/dist/tools/remember.d.ts +0 -1
- package/dist/tools/remember.js +0 -1
- package/dist/worker/brain-worker.d.ts +1 -1
- package/dist/worker/brain-worker.js +9 -2
- package/dist/worker/link-discovery.d.ts +0 -1
- package/dist/worker/link-discovery.js +0 -1
- package/dist/worker/predictive-consolidation.d.ts +0 -1
- package/dist/worker/predictive-consolidation.js +0 -1
- package/dist/worker/types.d.ts +0 -1
- package/dist/worker/types.js +0 -1
- package/hooks/openclaw/cortex-memory/handler.ts +62 -8
- package/package.json +9 -8
- package/scripts/run-jest.mjs +44 -0
- package/dashboard/.next/standalone/dashboard/.next/server/chunks/ssr/dashboard_25b1b286._.js +0 -11
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/364656baa57adaa7.js +0 -1
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/6a6ccfb7834de00a.js +0 -9
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/6b11a7d29e9abffd.js +0 -1
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/ab13d81ce0e121f2.css +0 -3
- package/dashboard/.next/standalone/dashboard/.next/static/chunks/cf05262adfab5818.js +0 -1
- package/dist/__tests__/consolidation-merge.test.d.ts +0 -9
- package/dist/__tests__/consolidation-merge.test.d.ts.map +0 -1
- package/dist/__tests__/consolidation-merge.test.js +0 -137
- package/dist/__tests__/consolidation-merge.test.js.map +0 -1
- package/dist/__tests__/contradictions.test.d.ts +0 -8
- package/dist/__tests__/contradictions.test.d.ts.map +0 -1
- package/dist/__tests__/contradictions.test.js +0 -78
- package/dist/__tests__/contradictions.test.js.map +0 -1
- package/dist/__tests__/format-memory.test.d.ts +0 -11
- package/dist/__tests__/format-memory.test.d.ts.map +0 -1
- package/dist/__tests__/format-memory.test.js +0 -69
- package/dist/__tests__/format-memory.test.js.map +0 -1
- package/dist/__tests__/salience-evolution.test.d.ts +0 -7
- package/dist/__tests__/salience-evolution.test.d.ts.map +0 -1
- package/dist/__tests__/salience-evolution.test.js +0 -151
- package/dist/__tests__/salience-evolution.test.js.map +0 -1
- package/dist/__tests__/store.test.d.ts +0 -7
- package/dist/__tests__/store.test.d.ts.map +0 -1
- package/dist/__tests__/store.test.js +0 -583
- package/dist/__tests__/store.test.js.map +0 -1
- package/dist/api/control.d.ts.map +0 -1
- package/dist/api/control.js.map +0 -1
- package/dist/api/events.d.ts.map +0 -1
- package/dist/api/events.js.map +0 -1
- package/dist/api/session-token.d.ts.map +0 -1
- package/dist/api/session-token.js.map +0 -1
- package/dist/api/version.d.ts.map +0 -1
- package/dist/api/version.js.map +0 -1
- package/dist/api/visualization-server.d.ts.map +0 -1
- package/dist/api/visualization-server.js.map +0 -1
- package/dist/audit/env-scanner.d.ts.map +0 -1
- package/dist/audit/env-scanner.js.map +0 -1
- package/dist/audit/index.d.ts.map +0 -1
- package/dist/audit/index.js.map +0 -1
- package/dist/audit/mcp-config-scanner.d.ts.map +0 -1
- package/dist/audit/mcp-config-scanner.js.map +0 -1
- package/dist/audit/memory-scanner.d.ts.map +0 -1
- package/dist/audit/memory-scanner.js.map +0 -1
- package/dist/audit/report-formatter.d.ts.map +0 -1
- package/dist/audit/report-formatter.js.map +0 -1
- package/dist/audit/rules-file-scanner.d.ts.map +0 -1
- package/dist/audit/rules-file-scanner.js.map +0 -1
- package/dist/audit/types.d.ts.map +0 -1
- package/dist/audit/types.js.map +0 -1
- package/dist/cli/audit.d.ts.map +0 -1
- package/dist/cli/audit.js.map +0 -1
- package/dist/cli/doctor.d.ts.map +0 -1
- package/dist/cli/doctor.js.map +0 -1
- package/dist/cli/iron-dome.d.ts.map +0 -1
- package/dist/cli/iron-dome.js.map +0 -1
- package/dist/cloud/cli.d.ts.map +0 -1
- package/dist/cloud/cli.js.map +0 -1
- package/dist/cloud/config.d.ts.map +0 -1
- package/dist/cloud/config.js.map +0 -1
- package/dist/cloud/iron-dome-sync.d.ts.map +0 -1
- package/dist/cloud/iron-dome-sync.js.map +0 -1
- package/dist/cloud/quarantine-sync.d.ts.map +0 -1
- package/dist/cloud/quarantine-sync.js.map +0 -1
- package/dist/cloud/sync-queue.d.ts.map +0 -1
- package/dist/cloud/sync-queue.js.map +0 -1
- package/dist/cloud/sync.d.ts.map +0 -1
- package/dist/cloud/sync.js.map +0 -1
- package/dist/cloud/verify.d.ts.map +0 -1
- package/dist/cloud/verify.js.map +0 -1
- package/dist/context/project-context.d.ts.map +0 -1
- package/dist/context/project-context.js.map +0 -1
- package/dist/database/init.d.ts.map +0 -1
- package/dist/database/init.js.map +0 -1
- package/dist/defence/__tests__/access-control.test.d.ts +0 -5
- package/dist/defence/__tests__/access-control.test.d.ts.map +0 -1
- package/dist/defence/__tests__/access-control.test.js +0 -89
- package/dist/defence/__tests__/access-control.test.js.map +0 -1
- package/dist/defence/__tests__/agent-scorer.test.d.ts +0 -5
- package/dist/defence/__tests__/agent-scorer.test.d.ts.map +0 -1
- package/dist/defence/__tests__/agent-scorer.test.js +0 -75
- package/dist/defence/__tests__/agent-scorer.test.js.map +0 -1
- package/dist/defence/__tests__/credential-leak.test.d.ts +0 -8
- package/dist/defence/__tests__/credential-leak.test.d.ts.map +0 -1
- package/dist/defence/__tests__/credential-leak.test.js +0 -403
- package/dist/defence/__tests__/credential-leak.test.js.map +0 -1
- package/dist/defence/__tests__/env-detector.test.d.ts +0 -5
- package/dist/defence/__tests__/env-detector.test.d.ts.map +0 -1
- package/dist/defence/__tests__/env-detector.test.js +0 -100
- package/dist/defence/__tests__/env-detector.test.js.map +0 -1
- package/dist/defence/__tests__/firewall.test.d.ts +0 -8
- package/dist/defence/__tests__/firewall.test.d.ts.map +0 -1
- package/dist/defence/__tests__/firewall.test.js +0 -123
- package/dist/defence/__tests__/firewall.test.js.map +0 -1
- package/dist/defence/__tests__/fragmentation.test.d.ts +0 -7
- package/dist/defence/__tests__/fragmentation.test.d.ts.map +0 -1
- package/dist/defence/__tests__/fragmentation.test.js +0 -51
- package/dist/defence/__tests__/fragmentation.test.js.map +0 -1
- package/dist/defence/__tests__/pipeline.test.d.ts +0 -8
- package/dist/defence/__tests__/pipeline.test.d.ts.map +0 -1
- package/dist/defence/__tests__/pipeline.test.js +0 -106
- package/dist/defence/__tests__/pipeline.test.js.map +0 -1
- package/dist/defence/__tests__/sensitivity.test.d.ts +0 -7
- package/dist/defence/__tests__/sensitivity.test.d.ts.map +0 -1
- package/dist/defence/__tests__/sensitivity.test.js +0 -61
- package/dist/defence/__tests__/sensitivity.test.js.map +0 -1
- package/dist/defence/__tests__/tool-response-scanner.test.d.ts +0 -8
- package/dist/defence/__tests__/tool-response-scanner.test.d.ts.map +0 -1
- package/dist/defence/__tests__/tool-response-scanner.test.js +0 -106
- package/dist/defence/__tests__/tool-response-scanner.test.js.map +0 -1
- package/dist/defence/__tests__/trust.test.d.ts +0 -7
- package/dist/defence/__tests__/trust.test.d.ts.map +0 -1
- package/dist/defence/__tests__/trust.test.js +0 -50
- package/dist/defence/__tests__/trust.test.js.map +0 -1
- package/dist/defence/__tests__/verify.test.d.ts +0 -7
- package/dist/defence/__tests__/verify.test.d.ts.map +0 -1
- package/dist/defence/__tests__/verify.test.js +0 -143
- package/dist/defence/__tests__/verify.test.js.map +0 -1
- package/dist/defence/audit/export.d.ts.map +0 -1
- package/dist/defence/audit/export.js.map +0 -1
- package/dist/defence/audit/index.d.ts.map +0 -1
- package/dist/defence/audit/index.js.map +0 -1
- package/dist/defence/audit/logger.d.ts.map +0 -1
- package/dist/defence/audit/logger.js.map +0 -1
- package/dist/defence/audit/queries.d.ts.map +0 -1
- package/dist/defence/audit/queries.js.map +0 -1
- package/dist/defence/credential-leak/entropy.d.ts.map +0 -1
- package/dist/defence/credential-leak/entropy.js.map +0 -1
- package/dist/defence/credential-leak/index.d.ts.map +0 -1
- package/dist/defence/credential-leak/index.js.map +0 -1
- package/dist/defence/credential-leak/patterns.d.ts.map +0 -1
- package/dist/defence/credential-leak/patterns.js.map +0 -1
- package/dist/defence/custom-patterns/store.d.ts.map +0 -1
- package/dist/defence/custom-patterns/store.js.map +0 -1
- package/dist/defence/custom-rules/store.d.ts.map +0 -1
- package/dist/defence/custom-rules/store.js.map +0 -1
- package/dist/defence/firewall/anomaly-scorer.d.ts.map +0 -1
- package/dist/defence/firewall/anomaly-scorer.js.map +0 -1
- package/dist/defence/firewall/encoding-detector.d.ts.map +0 -1
- package/dist/defence/firewall/encoding-detector.js.map +0 -1
- package/dist/defence/firewall/index.d.ts.map +0 -1
- package/dist/defence/firewall/index.js.map +0 -1
- package/dist/defence/firewall/instruction-detector.d.ts.map +0 -1
- package/dist/defence/firewall/instruction-detector.js.map +0 -1
- package/dist/defence/firewall/privilege-detector.d.ts.map +0 -1
- package/dist/defence/firewall/privilege-detector.js.map +0 -1
- package/dist/defence/fragmentation/assembly-detector.d.ts.map +0 -1
- package/dist/defence/fragmentation/assembly-detector.js.map +0 -1
- package/dist/defence/fragmentation/entity-extractor.d.ts.map +0 -1
- package/dist/defence/fragmentation/entity-extractor.js.map +0 -1
- package/dist/defence/fragmentation/index.d.ts.map +0 -1
- package/dist/defence/fragmentation/index.js.map +0 -1
- package/dist/defence/fragmentation/temporal-analyzer.d.ts.map +0 -1
- package/dist/defence/fragmentation/temporal-analyzer.js.map +0 -1
- package/dist/defence/index.d.ts.map +0 -1
- package/dist/defence/index.js.map +0 -1
- package/dist/defence/input-sanitisation/index.d.ts.map +0 -1
- package/dist/defence/input-sanitisation/index.js.map +0 -1
- package/dist/defence/iron-dome/__tests__/action-gate.test.d.ts +0 -5
- package/dist/defence/iron-dome/__tests__/action-gate.test.d.ts.map +0 -1
- package/dist/defence/iron-dome/__tests__/action-gate.test.js +0 -71
- package/dist/defence/iron-dome/__tests__/action-gate.test.js.map +0 -1
- package/dist/defence/iron-dome/__tests__/confirmation-gate.test.d.ts +0 -5
- package/dist/defence/iron-dome/__tests__/confirmation-gate.test.d.ts.map +0 -1
- package/dist/defence/iron-dome/__tests__/confirmation-gate.test.js +0 -144
- package/dist/defence/iron-dome/__tests__/confirmation-gate.test.js.map +0 -1
- package/dist/defence/iron-dome/__tests__/gateway.test.d.ts +0 -5
- package/dist/defence/iron-dome/__tests__/gateway.test.d.ts.map +0 -1
- package/dist/defence/iron-dome/__tests__/gateway.test.js +0 -60
- package/dist/defence/iron-dome/__tests__/gateway.test.js.map +0 -1
- package/dist/defence/iron-dome/__tests__/injection-scanner.test.d.ts +0 -7
- package/dist/defence/iron-dome/__tests__/injection-scanner.test.d.ts.map +0 -1
- package/dist/defence/iron-dome/__tests__/injection-scanner.test.js +0 -230
- package/dist/defence/iron-dome/__tests__/injection-scanner.test.js.map +0 -1
- package/dist/defence/iron-dome/__tests__/pii-guard.test.d.ts +0 -5
- package/dist/defence/iron-dome/__tests__/pii-guard.test.d.ts.map +0 -1
- package/dist/defence/iron-dome/__tests__/pii-guard.test.js +0 -130
- package/dist/defence/iron-dome/__tests__/pii-guard.test.js.map +0 -1
- package/dist/defence/iron-dome/action-gate.d.ts.map +0 -1
- package/dist/defence/iron-dome/action-gate.js.map +0 -1
- package/dist/defence/iron-dome/audit.d.ts.map +0 -1
- package/dist/defence/iron-dome/audit.js.map +0 -1
- package/dist/defence/iron-dome/config.d.ts.map +0 -1
- package/dist/defence/iron-dome/config.js.map +0 -1
- package/dist/defence/iron-dome/confirmation-gate.d.ts.map +0 -1
- package/dist/defence/iron-dome/confirmation-gate.js.map +0 -1
- package/dist/defence/iron-dome/custom-policies.d.ts.map +0 -1
- package/dist/defence/iron-dome/custom-policies.js.map +0 -1
- package/dist/defence/iron-dome/gateway.d.ts.map +0 -1
- package/dist/defence/iron-dome/gateway.js.map +0 -1
- package/dist/defence/iron-dome/index.d.ts.map +0 -1
- package/dist/defence/iron-dome/index.js.map +0 -1
- package/dist/defence/iron-dome/injection-scanner.d.ts.map +0 -1
- package/dist/defence/iron-dome/injection-scanner.js.map +0 -1
- package/dist/defence/iron-dome/kill-switch.d.ts.map +0 -1
- package/dist/defence/iron-dome/kill-switch.js.map +0 -1
- package/dist/defence/iron-dome/pii-guard.d.ts.map +0 -1
- package/dist/defence/iron-dome/pii-guard.js.map +0 -1
- package/dist/defence/pipeline.d.ts.map +0 -1
- package/dist/defence/pipeline.js.map +0 -1
- package/dist/defence/quarantine/auto-expire.d.ts.map +0 -1
- package/dist/defence/quarantine/auto-expire.js.map +0 -1
- package/dist/defence/scanner/index.d.ts.map +0 -1
- package/dist/defence/scanner/index.js.map +0 -1
- package/dist/defence/scanner/scan-existing.d.ts.map +0 -1
- package/dist/defence/scanner/scan-existing.js.map +0 -1
- package/dist/defence/sensitivity/classifier.d.ts.map +0 -1
- package/dist/defence/sensitivity/classifier.js.map +0 -1
- package/dist/defence/sensitivity/index.d.ts.map +0 -1
- package/dist/defence/sensitivity/index.js.map +0 -1
- package/dist/defence/sensitivity/patterns.d.ts.map +0 -1
- package/dist/defence/sensitivity/patterns.js.map +0 -1
- package/dist/defence/sensitivity/redaction.d.ts.map +0 -1
- package/dist/defence/sensitivity/redaction.js.map +0 -1
- package/dist/defence/skill-scanner/__tests__/skill-scanner.test.d.ts +0 -12
- package/dist/defence/skill-scanner/__tests__/skill-scanner.test.d.ts.map +0 -1
- package/dist/defence/skill-scanner/__tests__/skill-scanner.test.js +0 -471
- package/dist/defence/skill-scanner/__tests__/skill-scanner.test.js.map +0 -1
- package/dist/defence/skill-scanner/deep-scan.d.ts.map +0 -1
- package/dist/defence/skill-scanner/deep-scan.js.map +0 -1
- package/dist/defence/skill-scanner/discover.d.ts.map +0 -1
- package/dist/defence/skill-scanner/discover.js.map +0 -1
- package/dist/defence/skill-scanner/index.d.ts.map +0 -1
- package/dist/defence/skill-scanner/index.js.map +0 -1
- package/dist/defence/skill-scanner/parser.d.ts.map +0 -1
- package/dist/defence/skill-scanner/parser.js.map +0 -1
- package/dist/defence/skill-scanner/patterns.d.ts.map +0 -1
- package/dist/defence/skill-scanner/patterns.js.map +0 -1
- package/dist/defence/skill-scanner/scan-skill.d.ts.map +0 -1
- package/dist/defence/skill-scanner/scan-skill.js.map +0 -1
- package/dist/defence/tool-response-scanner.d.ts.map +0 -1
- package/dist/defence/tool-response-scanner.js.map +0 -1
- package/dist/defence/trust/access-control.d.ts.map +0 -1
- package/dist/defence/trust/access-control.js.map +0 -1
- package/dist/defence/trust/agent-scorer.d.ts.map +0 -1
- package/dist/defence/trust/agent-scorer.js.map +0 -1
- package/dist/defence/trust/env-detector.d.ts.map +0 -1
- package/dist/defence/trust/env-detector.js.map +0 -1
- package/dist/defence/trust/index.d.ts.map +0 -1
- package/dist/defence/trust/index.js.map +0 -1
- package/dist/defence/trust/recall-filter.d.ts.map +0 -1
- package/dist/defence/trust/recall-filter.js.map +0 -1
- package/dist/defence/trust/source-scorer.d.ts.map +0 -1
- package/dist/defence/trust/source-scorer.js.map +0 -1
- package/dist/defence/types.d.ts.map +0 -1
- package/dist/defence/types.js.map +0 -1
- package/dist/embeddings/generator.d.ts.map +0 -1
- package/dist/embeddings/generator.js.map +0 -1
- package/dist/embeddings/index.d.ts.map +0 -1
- package/dist/embeddings/index.js.map +0 -1
- package/dist/embeddings/worker.d.ts.map +0 -1
- package/dist/embeddings/worker.js.map +0 -1
- package/dist/errors.d.ts.map +0 -1
- package/dist/errors.js.map +0 -1
- package/dist/events/webhooks.d.ts.map +0 -1
- package/dist/events/webhooks.js.map +0 -1
- package/dist/graph/backfill.d.ts.map +0 -1
- package/dist/graph/backfill.js.map +0 -1
- package/dist/graph/extract.d.ts.map +0 -1
- package/dist/graph/extract.js.map +0 -1
- package/dist/graph/resolve.d.ts.map +0 -1
- package/dist/graph/resolve.js.map +0 -1
- package/dist/index.d.ts.map +0 -1
- package/dist/index.js.map +0 -1
- package/dist/integrations/__tests__/openclaw.test.d.ts +0 -2
- package/dist/integrations/__tests__/openclaw.test.d.ts.map +0 -1
- package/dist/integrations/__tests__/openclaw.test.js +0 -72
- package/dist/integrations/__tests__/openclaw.test.js.map +0 -1
- package/dist/integrations/__tests__/universal.test.d.ts +0 -2
- package/dist/integrations/__tests__/universal.test.d.ts.map +0 -1
- package/dist/integrations/__tests__/universal.test.js +0 -144
- package/dist/integrations/__tests__/universal.test.js.map +0 -1
- package/dist/integrations/index.d.ts.map +0 -1
- package/dist/integrations/index.js.map +0 -1
- package/dist/integrations/langchain.d.ts.map +0 -1
- package/dist/integrations/langchain.js.map +0 -1
- package/dist/integrations/openclaw.d.ts.map +0 -1
- package/dist/integrations/openclaw.js.map +0 -1
- package/dist/integrations/universal.d.ts.map +0 -1
- package/dist/integrations/universal.js.map +0 -1
- package/dist/lib.d.ts.map +0 -1
- package/dist/lib.js.map +0 -1
- package/dist/license/__tests__/feature-gating.test.d.ts +0 -10
- package/dist/license/__tests__/feature-gating.test.d.ts.map +0 -1
- package/dist/license/__tests__/feature-gating.test.js +0 -188
- package/dist/license/__tests__/feature-gating.test.js.map +0 -1
- package/dist/license/cli.d.ts.map +0 -1
- package/dist/license/cli.js.map +0 -1
- package/dist/license/gate.d.ts.map +0 -1
- package/dist/license/gate.js.map +0 -1
- package/dist/license/index.d.ts.map +0 -1
- package/dist/license/index.js.map +0 -1
- package/dist/license/keys.d.ts.map +0 -1
- package/dist/license/keys.js.map +0 -1
- package/dist/license/store.d.ts.map +0 -1
- package/dist/license/store.js.map +0 -1
- package/dist/license/types.d.ts.map +0 -1
- package/dist/license/types.js.map +0 -1
- package/dist/license/validate.d.ts.map +0 -1
- package/dist/license/validate.js.map +0 -1
- package/dist/license/verify.d.ts.map +0 -1
- package/dist/license/verify.js.map +0 -1
- package/dist/memory/activation.d.ts.map +0 -1
- package/dist/memory/activation.js.map +0 -1
- package/dist/memory/consolidate.d.ts.map +0 -1
- package/dist/memory/consolidate.js.map +0 -1
- package/dist/memory/contradiction.d.ts.map +0 -1
- package/dist/memory/contradiction.js.map +0 -1
- package/dist/memory/decay.d.ts.map +0 -1
- package/dist/memory/decay.js.map +0 -1
- package/dist/memory/embedding-cache.d.ts.map +0 -1
- package/dist/memory/embedding-cache.js.map +0 -1
- package/dist/memory/embedding.d.ts.map +0 -1
- package/dist/memory/embedding.js.map +0 -1
- package/dist/memory/expiry.d.ts.map +0 -1
- package/dist/memory/expiry.js.map +0 -1
- package/dist/memory/salience.d.ts.map +0 -1
- package/dist/memory/salience.js.map +0 -1
- package/dist/memory/similarity.d.ts.map +0 -1
- package/dist/memory/similarity.js.map +0 -1
- package/dist/memory/store.d.ts.map +0 -1
- package/dist/memory/store.js.map +0 -1
- package/dist/memory/types.d.ts.map +0 -1
- package/dist/memory/types.js.map +0 -1
- package/dist/server.d.ts.map +0 -1
- package/dist/server.js.map +0 -1
- package/dist/service/install.d.ts.map +0 -1
- package/dist/service/install.js.map +0 -1
- package/dist/service/templates.d.ts.map +0 -1
- package/dist/service/templates.js.map +0 -1
- package/dist/setup/claude-md.d.ts.map +0 -1
- package/dist/setup/claude-md.js.map +0 -1
- package/dist/setup/copilot.d.ts.map +0 -1
- package/dist/setup/copilot.js.map +0 -1
- package/dist/setup/doctor.d.ts.map +0 -1
- package/dist/setup/doctor.js.map +0 -1
- package/dist/setup/hooks.d.ts.map +0 -1
- package/dist/setup/hooks.js.map +0 -1
- package/dist/setup/migrate.d.ts.map +0 -1
- package/dist/setup/migrate.js.map +0 -1
- package/dist/setup/openclaw.d.ts.map +0 -1
- package/dist/setup/openclaw.js.map +0 -1
- package/dist/setup/settings-hooks.d.ts.map +0 -1
- package/dist/setup/settings-hooks.js.map +0 -1
- package/dist/setup/status.d.ts.map +0 -1
- package/dist/setup/status.js.map +0 -1
- package/dist/setup/uninstall.d.ts.map +0 -1
- package/dist/setup/uninstall.js.map +0 -1
- package/dist/tools/context.d.ts.map +0 -1
- package/dist/tools/context.js.map +0 -1
- package/dist/tools/forget.d.ts.map +0 -1
- package/dist/tools/forget.js.map +0 -1
- package/dist/tools/graph.d.ts.map +0 -1
- package/dist/tools/graph.js.map +0 -1
- package/dist/tools/recall.d.ts.map +0 -1
- package/dist/tools/recall.js.map +0 -1
- package/dist/tools/remember.d.ts.map +0 -1
- package/dist/tools/remember.js.map +0 -1
- package/dist/worker/brain-worker.d.ts.map +0 -1
- package/dist/worker/brain-worker.js.map +0 -1
- package/dist/worker/link-discovery.d.ts.map +0 -1
- package/dist/worker/link-discovery.js.map +0 -1
- package/dist/worker/predictive-consolidation.d.ts.map +0 -1
- package/dist/worker/predictive-consolidation.js.map +0 -1
- package/dist/worker/types.d.ts.map +0 -1
- package/dist/worker/types.js.map +0 -1
- package/plugins/openclaw/README.md +0 -93
- package/plugins/openclaw/index.ts +0 -432
- package/plugins/openclaw/openclaw.plugin.json +0 -10
- /package/dashboard/.next/standalone/dashboard/.next/static/{3NPHem1lidYcerzR28Shs → QB0u2SMOnB24QHhhlDrIU}/_buildManifest.js +0 -0
- /package/dashboard/.next/standalone/dashboard/.next/static/{3NPHem1lidYcerzR28Shs → QB0u2SMOnB24QHhhlDrIU}/_clientMiddlewareManifest.json +0 -0
- /package/dashboard/.next/standalone/dashboard/.next/static/{3NPHem1lidYcerzR28Shs → QB0u2SMOnB24QHhhlDrIU}/_ssgManifest.js +0 -0
|
@@ -1,403 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Credential Leak Detection Tests
|
|
3
|
-
*
|
|
4
|
-
* Tests each credential type, entropy calculation, redaction,
|
|
5
|
-
* false positive handling, and pipeline integration.
|
|
6
|
-
*/
|
|
7
|
-
import { describe, it, expect, beforeAll, afterAll } from '@jest/globals';
|
|
8
|
-
import { scanForCredentials, redactCredentials, shannonEntropy } from '../credential-leak/index.js';
|
|
9
|
-
import { initDatabase, closeDatabase } from '../../database/init.js';
|
|
10
|
-
// ── API Key Detection ──
|
|
11
|
-
describe('Credential Leak Detection', () => {
|
|
12
|
-
describe('OpenAI API Keys', () => {
|
|
13
|
-
it('should detect OpenAI sk- keys', () => {
|
|
14
|
-
const result = scanForCredentials('My key is sk-abcdefghijklmnopqrstuvwxyz1234');
|
|
15
|
-
expect(result.leaked).toBe(true);
|
|
16
|
-
expect(result.findings).toHaveLength(1);
|
|
17
|
-
expect(result.findings[0].type).toBe('api_key');
|
|
18
|
-
expect(result.findings[0].provider).toBe('openai');
|
|
19
|
-
expect(result.findings[0].severity).toBe('critical');
|
|
20
|
-
expect(result.findings[0].action).toBe('blocked');
|
|
21
|
-
});
|
|
22
|
-
it('should not trigger on short sk- prefixes like "sk-etch"', () => {
|
|
23
|
-
const result = scanForCredentials('I like to sk-etch drawings');
|
|
24
|
-
expect(result.leaked).toBe(false);
|
|
25
|
-
expect(result.findings).toHaveLength(0);
|
|
26
|
-
});
|
|
27
|
-
it('should not trigger on "sk-ip" or similar short words', () => {
|
|
28
|
-
const result = scanForCredentials('Let me sk-ip that part');
|
|
29
|
-
expect(result.leaked).toBe(false);
|
|
30
|
-
});
|
|
31
|
-
});
|
|
32
|
-
describe('Anthropic API Keys', () => {
|
|
33
|
-
it('should detect Anthropic sk-ant- keys', () => {
|
|
34
|
-
const result = scanForCredentials('export ANTHROPIC_API_KEY=sk-ant-api03-abcdefghijklmnopqrstuvwxyz');
|
|
35
|
-
expect(result.leaked).toBe(true);
|
|
36
|
-
expect(result.findings.some(f => f.provider === 'anthropic')).toBe(true);
|
|
37
|
-
expect(result.findings.find(f => f.provider === 'anthropic')?.severity).toBe('critical');
|
|
38
|
-
});
|
|
39
|
-
});
|
|
40
|
-
describe('AWS Keys', () => {
|
|
41
|
-
it('should detect AWS Access Key IDs', () => {
|
|
42
|
-
const result = scanForCredentials('AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE');
|
|
43
|
-
expect(result.leaked).toBe(true);
|
|
44
|
-
expect(result.findings.some(f => f.provider === 'aws')).toBe(true);
|
|
45
|
-
expect(result.findings.find(f => f.provider === 'aws')?.severity).toBe('critical');
|
|
46
|
-
});
|
|
47
|
-
it('should detect AWS Secret Access Keys', () => {
|
|
48
|
-
const result = scanForCredentials('aws_secret_access_key=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY');
|
|
49
|
-
expect(result.leaked).toBe(true);
|
|
50
|
-
expect(result.findings.some(f => f.provider === 'aws')).toBe(true);
|
|
51
|
-
});
|
|
52
|
-
});
|
|
53
|
-
describe('GitHub Tokens', () => {
|
|
54
|
-
it('should detect GitHub personal access tokens (ghp_)', () => {
|
|
55
|
-
const result = scanForCredentials('token: ghp_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghij');
|
|
56
|
-
expect(result.leaked).toBe(true);
|
|
57
|
-
expect(result.findings.some(f => f.provider === 'github')).toBe(true);
|
|
58
|
-
expect(result.findings.find(f => f.provider === 'github')?.severity).toBe('critical');
|
|
59
|
-
});
|
|
60
|
-
it('should detect GitHub OAuth tokens (gho_)', () => {
|
|
61
|
-
const result = scanForCredentials('gho_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghij');
|
|
62
|
-
expect(result.leaked).toBe(true);
|
|
63
|
-
expect(result.findings.some(f => f.provider === 'github')).toBe(true);
|
|
64
|
-
});
|
|
65
|
-
it('should detect GitHub fine-grained PATs', () => {
|
|
66
|
-
const result = scanForCredentials('github_pat_11ABCDEFG0abcdefghijklmn');
|
|
67
|
-
expect(result.leaked).toBe(true);
|
|
68
|
-
expect(result.findings.some(f => f.provider === 'github')).toBe(true);
|
|
69
|
-
});
|
|
70
|
-
});
|
|
71
|
-
describe('Stripe Keys', () => {
|
|
72
|
-
it('should detect Stripe live keys as critical', () => {
|
|
73
|
-
// Split to avoid GitHub push protection false positive
|
|
74
|
-
const key = 'sk_live_' + '51ABCDEFGHIJKLMNOPQRSTUVwx';
|
|
75
|
-
const result = scanForCredentials(key);
|
|
76
|
-
expect(result.leaked).toBe(true);
|
|
77
|
-
expect(result.findings.find(f => f.provider === 'stripe')?.severity).toBe('critical');
|
|
78
|
-
});
|
|
79
|
-
it('should detect Stripe test keys as medium', () => {
|
|
80
|
-
const key = 'sk_test_' + '51ABCDEFGHIJKLMNOPQRSTUVwx';
|
|
81
|
-
const result = scanForCredentials(key);
|
|
82
|
-
expect(result.leaked).toBe(true);
|
|
83
|
-
expect(result.findings.find(f => f.provider === 'stripe')?.severity).toBe('medium');
|
|
84
|
-
});
|
|
85
|
-
});
|
|
86
|
-
describe('Other API Keys', () => {
|
|
87
|
-
it('should detect SendGrid keys', () => {
|
|
88
|
-
const result = scanForCredentials('SG.abcdefghijklmnopqrstuv.wxyzABCDEFGHIJKLMNOPQRS');
|
|
89
|
-
expect(result.leaked).toBe(true);
|
|
90
|
-
expect(result.findings.some(f => f.provider === 'sendgrid')).toBe(true);
|
|
91
|
-
});
|
|
92
|
-
it('should detect Google API keys', () => {
|
|
93
|
-
const result = scanForCredentials('key=AIzaSyDabcdefghijklmnopqrstuvwxyz123456');
|
|
94
|
-
expect(result.leaked).toBe(true);
|
|
95
|
-
expect(result.findings.some(f => f.provider === 'google')).toBe(true);
|
|
96
|
-
});
|
|
97
|
-
it('should detect npm tokens', () => {
|
|
98
|
-
const result = scanForCredentials('//registry.npmjs.org/:_authToken=npm_abcdefghijklmnopqrstuvwxyz1234567890');
|
|
99
|
-
expect(result.leaked).toBe(true);
|
|
100
|
-
expect(result.findings.some(f => f.provider === 'npm')).toBe(true);
|
|
101
|
-
});
|
|
102
|
-
it('should detect Slack bot tokens', () => {
|
|
103
|
-
// Split to avoid GitHub push protection false positive
|
|
104
|
-
const token = 'xoxb-' + '1234567890-abcdefghijklmnopqrstuvwx';
|
|
105
|
-
const result = scanForCredentials(`SLACK_BOT_TOKEN=${token}`);
|
|
106
|
-
expect(result.leaked).toBe(true);
|
|
107
|
-
expect(result.findings.some(f => f.provider === 'slack')).toBe(true);
|
|
108
|
-
});
|
|
109
|
-
});
|
|
110
|
-
// ── JWT Tokens ──
|
|
111
|
-
describe('JWT Tokens', () => {
|
|
112
|
-
it('should detect JWT tokens', () => {
|
|
113
|
-
const jwt = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dozjgNryP4J3jVmNHl0w5N_XgL0n3I9PlFUP0THsR8U';
|
|
114
|
-
const result = scanForCredentials(`Authorization: Bearer ${jwt}`);
|
|
115
|
-
expect(result.leaked).toBe(true);
|
|
116
|
-
expect(result.findings.some(f => f.type === 'jwt')).toBe(true);
|
|
117
|
-
});
|
|
118
|
-
});
|
|
119
|
-
// ── Bearer/Basic Auth ──
|
|
120
|
-
describe('Auth Headers', () => {
|
|
121
|
-
it('should detect Bearer token headers', () => {
|
|
122
|
-
const result = scanForCredentials('Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.dG9rZW4.sig');
|
|
123
|
-
expect(result.leaked).toBe(true);
|
|
124
|
-
});
|
|
125
|
-
it('should detect Basic auth headers', () => {
|
|
126
|
-
const result = scanForCredentials('Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=');
|
|
127
|
-
expect(result.leaked).toBe(true);
|
|
128
|
-
});
|
|
129
|
-
});
|
|
130
|
-
// ── Private Keys ──
|
|
131
|
-
describe('Private Keys', () => {
|
|
132
|
-
it('should detect RSA private keys', () => {
|
|
133
|
-
const pem = '-----BEGIN RSA PRIVATE KEY-----\nMIIBogIBAAJBALRiMLAHudeSA...\n-----END RSA PRIVATE KEY-----';
|
|
134
|
-
const result = scanForCredentials(pem);
|
|
135
|
-
expect(result.leaked).toBe(true);
|
|
136
|
-
expect(result.findings.some(f => f.type === 'private_key')).toBe(true);
|
|
137
|
-
expect(result.findings.find(f => f.type === 'private_key')?.severity).toBe('critical');
|
|
138
|
-
});
|
|
139
|
-
it('should detect EC private keys', () => {
|
|
140
|
-
const pem = '-----BEGIN EC PRIVATE KEY-----\nMHQCAQEEIBLtbW...\n-----END EC PRIVATE KEY-----';
|
|
141
|
-
const result = scanForCredentials(pem);
|
|
142
|
-
expect(result.leaked).toBe(true);
|
|
143
|
-
expect(result.findings.some(f => f.type === 'private_key')).toBe(true);
|
|
144
|
-
});
|
|
145
|
-
it('should detect SSH private keys', () => {
|
|
146
|
-
const pem = '-----BEGIN OPENSSH PRIVATE KEY-----\nb3BlbnNzaC1r...\n-----END OPENSSH PRIVATE KEY-----';
|
|
147
|
-
const result = scanForCredentials(pem);
|
|
148
|
-
expect(result.leaked).toBe(true);
|
|
149
|
-
expect(result.findings.some(f => f.type === 'private_key')).toBe(true);
|
|
150
|
-
});
|
|
151
|
-
it('should detect generic private keys', () => {
|
|
152
|
-
const pem = '-----BEGIN PRIVATE KEY-----\nMIIEvAIBADANBg...\n-----END PRIVATE KEY-----';
|
|
153
|
-
const result = scanForCredentials(pem);
|
|
154
|
-
expect(result.leaked).toBe(true);
|
|
155
|
-
});
|
|
156
|
-
});
|
|
157
|
-
// ── Connection Strings ──
|
|
158
|
-
describe('Connection Strings', () => {
|
|
159
|
-
it('should detect PostgreSQL connection strings with passwords', () => {
|
|
160
|
-
const result = scanForCredentials('DATABASE_URL=postgres://admin:s3cretP4ss@db.example.com:5432/mydb');
|
|
161
|
-
expect(result.leaked).toBe(true);
|
|
162
|
-
expect(result.findings.some(f => f.type === 'connection_string')).toBe(true);
|
|
163
|
-
expect(result.findings.find(f => f.type === 'connection_string')?.provider).toBe('postgres');
|
|
164
|
-
});
|
|
165
|
-
it('should detect MySQL connection strings', () => {
|
|
166
|
-
const result = scanForCredentials('mysql://root:password123@localhost:3306/app');
|
|
167
|
-
expect(result.leaked).toBe(true);
|
|
168
|
-
expect(result.findings.some(f => f.provider === 'mysql')).toBe(true);
|
|
169
|
-
});
|
|
170
|
-
it('should detect MongoDB connection strings', () => {
|
|
171
|
-
const result = scanForCredentials('mongodb+srv://user:pass123@cluster0.example.mongodb.net/db');
|
|
172
|
-
expect(result.leaked).toBe(true);
|
|
173
|
-
expect(result.findings.some(f => f.provider === 'mongodb')).toBe(true);
|
|
174
|
-
});
|
|
175
|
-
it('should detect Redis connection strings', () => {
|
|
176
|
-
const result = scanForCredentials('redis://default:mypassword@redis.example.com:6379');
|
|
177
|
-
expect(result.leaked).toBe(true);
|
|
178
|
-
expect(result.findings.some(f => f.provider === 'redis')).toBe(true);
|
|
179
|
-
});
|
|
180
|
-
});
|
|
181
|
-
// ── Environment Variable Patterns ──
|
|
182
|
-
describe('Environment Variable Secrets', () => {
|
|
183
|
-
it('should detect PASSWORD= assignments', () => {
|
|
184
|
-
const result = scanForCredentials('DB_PASSWORD=super_secret_password_123');
|
|
185
|
-
expect(result.leaked).toBe(true);
|
|
186
|
-
expect(result.findings.some(f => f.type === 'env_secret')).toBe(true);
|
|
187
|
-
});
|
|
188
|
-
it('should detect SECRET= assignments', () => {
|
|
189
|
-
const result = scanForCredentials('JWT_SECRET="my-super-secret-jwt-key-12345"');
|
|
190
|
-
expect(result.leaked).toBe(true);
|
|
191
|
-
});
|
|
192
|
-
it('should detect TOKEN= assignments', () => {
|
|
193
|
-
const result = scanForCredentials('API_TOKEN=abcdef1234567890ghijklmn');
|
|
194
|
-
expect(result.leaked).toBe(true);
|
|
195
|
-
});
|
|
196
|
-
it('should detect API_KEY= assignments', () => {
|
|
197
|
-
const result = scanForCredentials('API_KEY=some-long-api-key-value-here');
|
|
198
|
-
expect(result.leaked).toBe(true);
|
|
199
|
-
});
|
|
200
|
-
it('should not trigger on short values', () => {
|
|
201
|
-
const result = scanForCredentials('PASSWORD=short');
|
|
202
|
-
// Value "short" is < 8 chars, should not trigger env_secret
|
|
203
|
-
const envFindings = result.findings.filter(f => f.type === 'env_secret');
|
|
204
|
-
expect(envFindings).toHaveLength(0);
|
|
205
|
-
});
|
|
206
|
-
});
|
|
207
|
-
// ── Entropy Calculation ──
|
|
208
|
-
describe('Shannon Entropy', () => {
|
|
209
|
-
it('should calculate entropy of uniform distribution', () => {
|
|
210
|
-
// All unique chars in "abcdefgh" → log2(8) = 3.0
|
|
211
|
-
const e = shannonEntropy('abcdefgh');
|
|
212
|
-
expect(e).toBeCloseTo(3.0, 1);
|
|
213
|
-
});
|
|
214
|
-
it('should return 0 for empty string', () => {
|
|
215
|
-
expect(shannonEntropy('')).toBe(0);
|
|
216
|
-
});
|
|
217
|
-
it('should return 0 for single repeated char', () => {
|
|
218
|
-
expect(shannonEntropy('aaaaaaa')).toBe(0);
|
|
219
|
-
});
|
|
220
|
-
it('should have higher entropy for random-looking strings', () => {
|
|
221
|
-
const lowEntropy = shannonEntropy('aaabbbccc');
|
|
222
|
-
const highEntropy = shannonEntropy('Kx9$mQ2!pL7@nR4^');
|
|
223
|
-
expect(highEntropy).toBeGreaterThan(lowEntropy);
|
|
224
|
-
});
|
|
225
|
-
});
|
|
226
|
-
// ── High Entropy Detection ──
|
|
227
|
-
describe('High Entropy Detection', () => {
|
|
228
|
-
it('should flag high-entropy strings 20+ chars as potential secrets', () => {
|
|
229
|
-
// This is a high-entropy random string
|
|
230
|
-
const result = scanForCredentials('token: aB3xK9mQ2pL7nR4cT8vY1wZ5fH6jD0s');
|
|
231
|
-
// Should detect either via pattern or entropy
|
|
232
|
-
expect(result.leaked).toBe(true);
|
|
233
|
-
});
|
|
234
|
-
it('should not flag normal English text', () => {
|
|
235
|
-
const result = scanForCredentials('The quick brown fox jumps over the lazy dog');
|
|
236
|
-
// No API key patterns, low entropy for English
|
|
237
|
-
const highEntropyFindings = result.findings.filter(f => f.type === 'high_entropy');
|
|
238
|
-
expect(highEntropyFindings).toHaveLength(0);
|
|
239
|
-
});
|
|
240
|
-
});
|
|
241
|
-
// ── Redaction ──
|
|
242
|
-
describe('Redaction', () => {
|
|
243
|
-
it('should redact detected secrets in content', () => {
|
|
244
|
-
const content = 'My key is sk-abcdefghijklmnopqrstuvwxyz1234';
|
|
245
|
-
const redacted = redactCredentials(content);
|
|
246
|
-
expect(redacted).not.toContain('sk-abcdefghijklmnopqrstuvwxyz1234');
|
|
247
|
-
expect(redacted).toContain('[REDACTED-');
|
|
248
|
-
});
|
|
249
|
-
it('should redact multiple secrets', () => {
|
|
250
|
-
const content = 'OpenAI: sk-abcdefghijklmnopqrstuvwxyz1234\nGitHub: ghp_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghij';
|
|
251
|
-
const redacted = redactCredentials(content);
|
|
252
|
-
expect(redacted).not.toContain('sk-abcdefghijklmnopqrstuvwx');
|
|
253
|
-
expect(redacted).not.toContain('ghp_ABCDEFGHIJKLMNOPQR');
|
|
254
|
-
expect(redacted).toContain('[REDACTED-');
|
|
255
|
-
});
|
|
256
|
-
it('should return original content if no secrets found', () => {
|
|
257
|
-
const content = 'Just some normal text with no secrets';
|
|
258
|
-
const redacted = redactCredentials(content);
|
|
259
|
-
expect(redacted).toBe(content);
|
|
260
|
-
});
|
|
261
|
-
it('should show first/last 4 chars in match field for long secrets', () => {
|
|
262
|
-
const result = scanForCredentials('key is sk-abcdefghijklmnopqrstuvwxyz1234');
|
|
263
|
-
expect(result.findings.length).toBeGreaterThan(0);
|
|
264
|
-
const match = result.findings[0].match;
|
|
265
|
-
// Should look like "sk-a...1234" (first 4 + ... + last 4)
|
|
266
|
-
expect(match).toContain('...');
|
|
267
|
-
});
|
|
268
|
-
it('should redact private keys', () => {
|
|
269
|
-
const content = 'Here is my key:\n-----BEGIN RSA PRIVATE KEY-----\nMIIBogIBAAJBALRiMLAH\n-----END RSA PRIVATE KEY-----\nDone';
|
|
270
|
-
const redacted = redactCredentials(content);
|
|
271
|
-
expect(redacted).toContain('[REDACTED-private_key');
|
|
272
|
-
expect(redacted).not.toContain('MIIBogIBAAJBALRiMLAH');
|
|
273
|
-
});
|
|
274
|
-
});
|
|
275
|
-
// ── False Positive Handling ──
|
|
276
|
-
describe('False Positive Handling', () => {
|
|
277
|
-
it('should not trigger on common words starting with "sk-"', () => {
|
|
278
|
-
const texts = [
|
|
279
|
-
'I want to sk-ip this',
|
|
280
|
-
'Let me sk-etch it out',
|
|
281
|
-
'The sk-ill level is high',
|
|
282
|
-
];
|
|
283
|
-
for (const text of texts) {
|
|
284
|
-
const result = scanForCredentials(text);
|
|
285
|
-
const apiKeyFindings = result.findings.filter(f => f.type === 'api_key' && f.provider === 'openai');
|
|
286
|
-
expect(apiKeyFindings).toHaveLength(0);
|
|
287
|
-
}
|
|
288
|
-
});
|
|
289
|
-
it('should not trigger on example/placeholder API keys in documentation', () => {
|
|
290
|
-
// Allow "sk-..." only when actually long enough to be a real key
|
|
291
|
-
const result = scanForCredentials('Example: sk-your-key-here');
|
|
292
|
-
// "sk-your-key-here" is only 16 chars; the minLength is 24
|
|
293
|
-
const openaiFindings = result.findings.filter(f => f.provider === 'openai');
|
|
294
|
-
expect(openaiFindings).toHaveLength(0);
|
|
295
|
-
});
|
|
296
|
-
it('should not flag CSS class names as high-entropy', () => {
|
|
297
|
-
const result = scanForCredentials('class="flex-items-center-justify-between-px-4"');
|
|
298
|
-
const entropyFindings = result.findings.filter(f => f.type === 'high_entropy');
|
|
299
|
-
expect(entropyFindings).toHaveLength(0);
|
|
300
|
-
});
|
|
301
|
-
it('should respect allowlist', () => {
|
|
302
|
-
const result = scanForCredentials('sk-abcdefghijklmnopqrstuvwxyz1234', { allowlist: ['sk-abcdefg'] });
|
|
303
|
-
expect(result.findings.filter(f => f.provider === 'openai')).toHaveLength(0);
|
|
304
|
-
});
|
|
305
|
-
});
|
|
306
|
-
// ── Config Options ──
|
|
307
|
-
describe('Configuration', () => {
|
|
308
|
-
it('should not scan when disabled', () => {
|
|
309
|
-
const result = scanForCredentials('sk-abcdefghijklmnopqrstuvwxyz1234', { enabled: false });
|
|
310
|
-
expect(result.leaked).toBe(false);
|
|
311
|
-
expect(result.findings).toHaveLength(0);
|
|
312
|
-
});
|
|
313
|
-
it('should warn instead of block when blockOnCritical is false', () => {
|
|
314
|
-
const result = scanForCredentials('sk-abcdefghijklmnopqrstuvwxyz1234', {
|
|
315
|
-
blockOnCritical: false,
|
|
316
|
-
blockOnHigh: false,
|
|
317
|
-
});
|
|
318
|
-
expect(result.leaked).toBe(true);
|
|
319
|
-
expect(result.findings[0].action).not.toBe('blocked');
|
|
320
|
-
});
|
|
321
|
-
it('should support custom patterns', () => {
|
|
322
|
-
const result = scanForCredentials('my-custom-secret-XYZ123ABC', {
|
|
323
|
-
customPatterns: [{
|
|
324
|
-
name: 'Custom Secret',
|
|
325
|
-
type: 'api_key',
|
|
326
|
-
provider: 'custom',
|
|
327
|
-
regex: /my-custom-secret-[A-Z0-9]+/g,
|
|
328
|
-
severity: 'high',
|
|
329
|
-
confidence: 0.90,
|
|
330
|
-
}],
|
|
331
|
-
});
|
|
332
|
-
expect(result.leaked).toBe(true);
|
|
333
|
-
expect(result.findings.some(f => f.provider === 'custom')).toBe(true);
|
|
334
|
-
});
|
|
335
|
-
});
|
|
336
|
-
// ── Multiple Credentials in Single Content ──
|
|
337
|
-
describe('Multiple Credentials', () => {
|
|
338
|
-
it('should detect multiple different credential types', () => {
|
|
339
|
-
const content = `
|
|
340
|
-
OPENAI_API_KEY=sk-abcdefghijklmnopqrstuvwxyz1234
|
|
341
|
-
DATABASE_URL=postgres://admin:password@db.example.com:5432/mydb
|
|
342
|
-
-----BEGIN RSA PRIVATE KEY-----
|
|
343
|
-
MIIBogIBAAJBALRiMLAHudeSA
|
|
344
|
-
-----END RSA PRIVATE KEY-----
|
|
345
|
-
`;
|
|
346
|
-
const result = scanForCredentials(content);
|
|
347
|
-
expect(result.leaked).toBe(true);
|
|
348
|
-
expect(result.findings.length).toBeGreaterThanOrEqual(3);
|
|
349
|
-
const types = result.findings.map(f => f.type);
|
|
350
|
-
expect(types).toContain('api_key');
|
|
351
|
-
expect(types).toContain('connection_string');
|
|
352
|
-
expect(types).toContain('private_key');
|
|
353
|
-
});
|
|
354
|
-
});
|
|
355
|
-
// ── Position Tracking ──
|
|
356
|
-
describe('Position Tracking', () => {
|
|
357
|
-
it('should report correct character offset positions', () => {
|
|
358
|
-
const prefix = 'prefix text ';
|
|
359
|
-
const content = `${prefix}sk-abcdefghijklmnopqrstuvwxyz1234`;
|
|
360
|
-
const result = scanForCredentials(content);
|
|
361
|
-
expect(result.findings.length).toBeGreaterThan(0);
|
|
362
|
-
expect(result.findings[0].position).toBe(prefix.length);
|
|
363
|
-
});
|
|
364
|
-
});
|
|
365
|
-
});
|
|
366
|
-
// ── Pipeline Integration ──
|
|
367
|
-
describe('Pipeline Integration', () => {
|
|
368
|
-
beforeAll(() => {
|
|
369
|
-
initDatabase(':memory:');
|
|
370
|
-
});
|
|
371
|
-
afterAll(() => {
|
|
372
|
-
closeDatabase();
|
|
373
|
-
});
|
|
374
|
-
const testConfig = {
|
|
375
|
-
mode: 'balanced',
|
|
376
|
-
enableFragmentationDetection: false,
|
|
377
|
-
fragmentationWindowHours: 24,
|
|
378
|
-
trustThresholdForActions: 0.7,
|
|
379
|
-
autoQuarantineThreshold: 0.3,
|
|
380
|
-
flagThreshold: 0.5,
|
|
381
|
-
strictSourceMode: false,
|
|
382
|
-
};
|
|
383
|
-
it('should block content with critical credentials via pipeline', async () => {
|
|
384
|
-
const { runDefencePipeline } = await import('../pipeline.js');
|
|
385
|
-
const result = runDefencePipeline('Save this: my API key is sk-abcdefghijklmnopqrstuvwxyz1234', 'API key note', { type: 'agent', identifier: 'test-agent' }, testConfig);
|
|
386
|
-
expect(result.allowed).toBe(false);
|
|
387
|
-
expect(result.firewall.result).toBe('BLOCK');
|
|
388
|
-
expect(result.firewall.threatIndicators).toContain('credential_leak');
|
|
389
|
-
});
|
|
390
|
-
it('should include credentialScan in pipeline result when leaked', async () => {
|
|
391
|
-
const { runDefencePipeline } = await import('../pipeline.js');
|
|
392
|
-
const result = runDefencePipeline('postgres://admin:secret@db.host.com:5432/mydb', 'Database config', { type: 'cli', identifier: 'test' }, testConfig);
|
|
393
|
-
expect(result.credentialScan).toBeDefined();
|
|
394
|
-
expect(result.credentialScan.leaked).toBe(true);
|
|
395
|
-
expect(result.credentialScan.findings.length).toBeGreaterThan(0);
|
|
396
|
-
});
|
|
397
|
-
it('should not include credentialScan when no leaks found', async () => {
|
|
398
|
-
const { runDefencePipeline } = await import('../pipeline.js');
|
|
399
|
-
const result = runDefencePipeline('Just a normal note about architecture decisions', 'Meeting notes', { type: 'user', identifier: 'direct' }, testConfig);
|
|
400
|
-
expect(result.credentialScan).toBeUndefined();
|
|
401
|
-
});
|
|
402
|
-
});
|
|
403
|
-
//# sourceMappingURL=credential-leak.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"credential-leak.test.js","sourceRoot":"","sources":["../../../src/defence/__tests__/credential-leak.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAEpG,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGrE,0BAA0B;AAE1B,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IAEzC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,6CAA6C,CAAC,CAAC;YACjF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,MAAM,MAAM,GAAG,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;YAChE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,MAAM,GAAG,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,kEAAkE,CAAC,CAAC;YACtG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,wCAAwC,CAAC,CAAC;YAC5E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,gEAAgE,CAAC,CAAC;YACpG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,MAAM,GAAG,kBAAkB,CAAC,iDAAiD,CAAC,CAAC;YACrF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,MAAM,GAAG,kBAAkB,CAAC,0CAA0C,CAAC,CAAC;YAC9E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,MAAM,GAAG,kBAAkB,CAAC,qCAAqC,CAAC,CAAC;YACzE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,uDAAuD;YACvD,MAAM,GAAG,GAAG,UAAU,GAAG,4BAA4B,CAAC;YACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,GAAG,GAAG,UAAU,GAAG,4BAA4B,CAAC;YACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,MAAM,GAAG,kBAAkB,CAAC,mDAAmD,CAAC,CAAC;YACvF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,6CAA6C,CAAC,CAAC;YACjF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,2EAA2E,CAAC,CAAC;YAC/G,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,uDAAuD;YACvD,MAAM,KAAK,GAAG,OAAO,GAAG,qCAAqC,CAAC;YAC9D,MAAM,MAAM,GAAG,kBAAkB,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,mBAAmB;IAEnB,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,GAAG,GAAG,8GAA8G,CAAC;YAC3H,MAAM,MAAM,GAAG,kBAAkB,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAE1B,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,MAAM,GAAG,kBAAkB,CAAC,wDAAwD,CAAC,CAAC;YAC5F,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,+CAA+C,CAAC,CAAC;YACnF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,qBAAqB;IAErB,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,GAAG,GAAG,8FAA8F,CAAC;YAC3G,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,GAAG,GAAG,iFAAiF,CAAC;YAC9F,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,GAAG,GAAG,yFAAyF,CAAC;YACtG,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,GAAG,GAAG,2EAA2E,CAAC;YACxF,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,2BAA2B;IAE3B,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YACpE,MAAM,MAAM,GAAG,kBAAkB,CAAC,mEAAmE,CAAC,CAAC;YACvG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,MAAM,GAAG,kBAAkB,CAAC,6CAA6C,CAAC,CAAC;YACjF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,MAAM,GAAG,kBAAkB,CAAC,4DAA4D,CAAC,CAAC;YAChG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,MAAM,GAAG,kBAAkB,CAAC,mDAAmD,CAAC,CAAC;YACvF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,sCAAsC;IAEtC,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,MAAM,GAAG,kBAAkB,CAAC,uCAAuC,CAAC,CAAC;YAC3E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,MAAM,GAAG,kBAAkB,CAAC,4CAA4C,CAAC,CAAC;YAChF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,MAAM,GAAG,kBAAkB,CAAC,sCAAsC,CAAC,CAAC;YAC1E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,MAAM,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;YACpD,4DAA4D;YAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;YACzE,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAE5B,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,iDAAiD;YACjD,MAAM,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,CAAC;YACvD,MAAM,CAAC,WAAW,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+BAA+B;IAE/B,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,uCAAuC;YACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,wCAAwC,CAAC,CAAC;YAC5E,8CAA8C;YAC9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,MAAM,GAAG,kBAAkB,CAAC,6CAA6C,CAAC,CAAC;YACjF,+CAA+C;YAC/C,MAAM,mBAAmB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;YACnF,MAAM,CAAC,mBAAmB,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAElB,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,OAAO,GAAG,6CAA6C,CAAC;YAC9D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;YACpE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,OAAO,GAAG,6FAA6F,CAAC;YAC9G,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;YAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;YACzD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,OAAO,GAAG,uCAAuC,CAAC;YACxD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;YACxE,MAAM,MAAM,GAAG,kBAAkB,CAAC,0CAA0C,CAAC,CAAC;YAC9E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACvC,0DAA0D;YAC1D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,MAAM,OAAO,GAAG,6GAA6G,CAAC;YAC9H,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;YACpD,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,gCAAgC;IAEhC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,MAAM,KAAK,GAAG;gBACZ,sBAAsB;gBACtB,uBAAuB;gBACvB,0BAA0B;aAC3B,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;gBACpG,MAAM,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACzC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;YAC7E,iEAAiE;YACjE,MAAM,MAAM,GAAG,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;YAC/D,2DAA2D;YAC3D,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YAC5E,MAAM,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,MAAM,GAAG,kBAAkB,CAAC,gDAAgD,CAAC,CAAC;YACpF,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;YAC/E,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,MAAM,GAAG,kBAAkB,CAC/B,mCAAmC,EACnC,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,CAC9B,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,uBAAuB;IAEvB,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,mCAAmC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3F,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YACpE,MAAM,MAAM,GAAG,kBAAkB,CAAC,mCAAmC,EAAE;gBACrE,eAAe,EAAE,KAAK;gBACtB,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,MAAM,GAAG,kBAAkB,CAAC,4BAA4B,EAAE;gBAC9D,cAAc,EAAE,CAAC;wBACf,IAAI,EAAE,eAAe;wBACrB,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,QAAQ;wBAClB,KAAK,EAAE,6BAA6B;wBACpC,QAAQ,EAAE,MAAM;wBAChB,UAAU,EAAE,IAAI;qBACjB,CAAC;aACH,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAE/C,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,OAAO,GAAG;;;;;;OAMf,CAAC;YACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;YAEzD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAE1B,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,MAAM,GAAG,cAAc,CAAC;YAC9B,MAAM,OAAO,GAAG,GAAG,MAAM,mCAAmC,CAAC;YAC7D,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,6BAA6B;AAE7B,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,SAAS,CAAC,GAAG,EAAE;QACb,YAAY,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE;QACZ,aAAa,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAkB;QAChC,IAAI,EAAE,UAAU;QAChB,4BAA4B,EAAE,KAAK;QACnC,wBAAwB,EAAE,EAAE;QAC5B,wBAAwB,EAAE,GAAG;QAC7B,uBAAuB,EAAE,GAAG;QAC5B,aAAa,EAAE,GAAG;QAClB,gBAAgB,EAAE,KAAK;KACxB,CAAC;IAEF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,kBAAkB,CAC/B,4DAA4D,EAC5D,cAAc,EACd,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,EAC3C,UAAU,CACX,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,kBAAkB,CAC/B,+CAA+C,EAC/C,iBAAiB,EACjB,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,EACnC,UAAU,CACX,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,cAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,cAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,kBAAkB,CAC/B,iDAAiD,EACjD,eAAe,EACf,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,EACtC,UAAU,CACX,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,aAAa,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"env-detector.test.d.ts","sourceRoot":"","sources":["../../../src/defence/__tests__/env-detector.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}
|
|
@@ -1,100 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Environment-Based Source Inference Tests
|
|
3
|
-
*/
|
|
4
|
-
import { describe, it, expect, beforeEach, afterEach } from '@jest/globals';
|
|
5
|
-
import { inferSourceFromEnvironment, resolveSource } from '../trust/env-detector.js';
|
|
6
|
-
describe('Environment-Based Source Inference', () => {
|
|
7
|
-
const originalEnv = { ...process.env };
|
|
8
|
-
beforeEach(() => {
|
|
9
|
-
// Clear all relevant env vars
|
|
10
|
-
delete process.env.CLAUDE_CODE_ENTRYPOINT;
|
|
11
|
-
delete process.env.CLAUDE_AGENT_CONTEXT;
|
|
12
|
-
delete process.env.SHIELDCORTEX_AGENT_SOURCE;
|
|
13
|
-
});
|
|
14
|
-
afterEach(() => {
|
|
15
|
-
// Restore original env
|
|
16
|
-
process.env = { ...originalEnv };
|
|
17
|
-
});
|
|
18
|
-
describe('inferSourceFromEnvironment', () => {
|
|
19
|
-
it('should detect direct Claude Code CLI', () => {
|
|
20
|
-
process.env.CLAUDE_CODE_ENTRYPOINT = 'cli';
|
|
21
|
-
const result = inferSourceFromEnvironment();
|
|
22
|
-
expect(result.source).toEqual({ type: 'cli', identifier: 'mcp' });
|
|
23
|
-
expect(result.method).toBe('env:CLAUDE_CODE_ENTRYPOINT');
|
|
24
|
-
expect(result.confidence).toBe('high');
|
|
25
|
-
});
|
|
26
|
-
it('should detect Claude Code sub-agent', () => {
|
|
27
|
-
process.env.CLAUDE_CODE_ENTRYPOINT = 'subagent';
|
|
28
|
-
const result = inferSourceFromEnvironment();
|
|
29
|
-
expect(result.source).toEqual({ type: 'agent', identifier: 'agent-spawned' });
|
|
30
|
-
expect(result.confidence).toBe('high');
|
|
31
|
-
});
|
|
32
|
-
it('should detect CLAUDE_AGENT_CONTEXT=subagent', () => {
|
|
33
|
-
process.env.CLAUDE_AGENT_CONTEXT = 'subagent';
|
|
34
|
-
const result = inferSourceFromEnvironment();
|
|
35
|
-
expect(result.source.type).toBe('agent');
|
|
36
|
-
expect(result.source.identifier).toBe('agent-spawned');
|
|
37
|
-
expect(result.method).toBe('env:CLAUDE_AGENT_CONTEXT');
|
|
38
|
-
});
|
|
39
|
-
it('should detect CLAUDE_AGENT_CONTEXT=hook', () => {
|
|
40
|
-
process.env.CLAUDE_AGENT_CONTEXT = 'hook';
|
|
41
|
-
const result = inferSourceFromEnvironment();
|
|
42
|
-
expect(result.source.identifier).toBe('hook');
|
|
43
|
-
});
|
|
44
|
-
it('should parse SHIELDCORTEX_AGENT_SOURCE with type prefix', () => {
|
|
45
|
-
process.env.SHIELDCORTEX_AGENT_SOURCE = 'agent:user-spawned>task-1';
|
|
46
|
-
const result = inferSourceFromEnvironment();
|
|
47
|
-
expect(result.source).toEqual({ type: 'agent', identifier: 'user-spawned>task-1' });
|
|
48
|
-
expect(result.method).toBe('env:SHIELDCORTEX_AGENT_SOURCE');
|
|
49
|
-
expect(result.confidence).toBe('high');
|
|
50
|
-
});
|
|
51
|
-
it('should handle SHIELDCORTEX_AGENT_SOURCE without type prefix', () => {
|
|
52
|
-
process.env.SHIELDCORTEX_AGENT_SOURCE = 'some-agent';
|
|
53
|
-
const result = inferSourceFromEnvironment();
|
|
54
|
-
expect(result.source.type).toBe('agent'); // defaults to agent
|
|
55
|
-
expect(result.source.identifier).toBe('some-agent');
|
|
56
|
-
});
|
|
57
|
-
it('should prioritise SHIELDCORTEX_AGENT_SOURCE over CLAUDE_CODE_ENTRYPOINT', () => {
|
|
58
|
-
process.env.SHIELDCORTEX_AGENT_SOURCE = 'cli:custom-tool';
|
|
59
|
-
process.env.CLAUDE_CODE_ENTRYPOINT = 'subagent';
|
|
60
|
-
const result = inferSourceFromEnvironment();
|
|
61
|
-
expect(result.source).toEqual({ type: 'cli', identifier: 'custom-tool' });
|
|
62
|
-
});
|
|
63
|
-
it('should return unknown:default with low confidence when no env vars set', () => {
|
|
64
|
-
const result = inferSourceFromEnvironment();
|
|
65
|
-
// Unknown sources default to 'agent' type for lower trust (security fix)
|
|
66
|
-
expect(result.source).toEqual({ type: 'agent', identifier: 'unknown' });
|
|
67
|
-
expect(result.method).toBe('default');
|
|
68
|
-
expect(result.confidence).toBe('low');
|
|
69
|
-
});
|
|
70
|
-
});
|
|
71
|
-
describe('resolveSource', () => {
|
|
72
|
-
it('should use declared source when provided', () => {
|
|
73
|
-
const declared = { type: 'agent', identifier: 'user-spawned>task-1' };
|
|
74
|
-
const result = resolveSource(declared);
|
|
75
|
-
expect(result.source).toEqual(declared);
|
|
76
|
-
expect(result.inferred).toBe(false);
|
|
77
|
-
expect(result.detection).toBeUndefined();
|
|
78
|
-
});
|
|
79
|
-
it('should infer from environment when no source declared', () => {
|
|
80
|
-
process.env.CLAUDE_CODE_ENTRYPOINT = 'cli';
|
|
81
|
-
const result = resolveSource(undefined);
|
|
82
|
-
expect(result.source).toEqual({ type: 'cli', identifier: 'mcp' });
|
|
83
|
-
expect(result.inferred).toBe(true);
|
|
84
|
-
expect(result.detection).toBeDefined();
|
|
85
|
-
});
|
|
86
|
-
it('should downgrade unknown sources in strict mode', () => {
|
|
87
|
-
// No env vars → unknown
|
|
88
|
-
const result = resolveSource(undefined, true);
|
|
89
|
-
expect(result.source).toEqual({ type: 'agent', identifier: 'unknown:strict' });
|
|
90
|
-
expect(result.inferred).toBe(true);
|
|
91
|
-
});
|
|
92
|
-
it('should not downgrade env-detected sources in strict mode', () => {
|
|
93
|
-
process.env.CLAUDE_CODE_ENTRYPOINT = 'cli';
|
|
94
|
-
const result = resolveSource(undefined, true);
|
|
95
|
-
// Not default method, so no downgrade
|
|
96
|
-
expect(result.source).toEqual({ type: 'cli', identifier: 'mcp' });
|
|
97
|
-
});
|
|
98
|
-
});
|
|
99
|
-
});
|
|
100
|
-
//# sourceMappingURL=env-detector.test.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"env-detector.test.js","sourceRoot":"","sources":["../../../src/defence/__tests__/env-detector.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAErF,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEvC,UAAU,CAAC,GAAG,EAAE;QACd,8BAA8B;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,uBAAuB;QACvB,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,KAAK,CAAC;YAC3C,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YACzD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,UAAU,CAAC;YAChD,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;YAC9E,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,UAAU,CAAC;YAC9C,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,MAAM,CAAC;YAC1C,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,2BAA2B,CAAC;YACpE,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACpF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,YAAY,CAAC;YACrD,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB;YAC9D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;YACjF,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,iBAAiB,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,UAAU,CAAC;YAChD,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;YAChF,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAC5C,yEAAyE;YACzE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,OAAgB,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC;YAC/E,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,KAAK,CAAC;YAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,wBAAwB;YACxB,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC/E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,KAAK,CAAC;YAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC9C,sCAAsC;YACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"firewall.test.d.ts","sourceRoot":"","sources":["../../../src/defence/__tests__/firewall.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}
|