import { describe, expect, it } from "@effect/vitest"; import { endpointForTelemetry, endpointTelemetryAttributes } from "./telemetry-endpoint"; // Synthetic placeholders only.const QUERY_TOKEN = "synthetic-query-token";const USERINFO_PASSWORD = "synthetic-userinfo-password"; describe("endpointForTelemetry", () => {  it("strips a credential carried in the query string", () => {    // The shape the MCP preset list ships and the add-flow passes through raw.    expect(endpointForTelemetry(`https://mcp.example.test/mcp?token=${QUERY_TOKEN}`)).toBe(      "https://mcp.example.test/mcp",    );  });   it("strips a credential carried in URL userinfo", () => {    expect(endpointForTelemetry(`https://svc-user:${USERINFO_PASSWORD}@mcp.example.test/mcp`)).toBe(      "https://mcp.example.test/mcp",    );  });   it("strips query, fragment, and userinfo together", () => {    const scrubbed = endpointForTelemetry(      `https://svc-user:${USERINFO_PASSWORD}@mcp.example.test/mcp?token=${QUERY_TOKEN}#frag`,    );    expect(scrubbed).toBe("https://mcp.example.test/mcp");    expect(scrubbed).not.toContain(QUERY_TOKEN);    expect(scrubbed).not.toContain(USERINFO_PASSWORD);  });   it("leaves a credential-free endpoint intact", () => {    expect(endpointForTelemetry("https://mcp.example.test/mcp")).toBe(      "https://mcp.example.test/mcp",    );  });   it("returns credential-free unparseable input as-is", () => {    expect(endpointForTelemetry("not a url")).toBe("not a url");  });   it("truncates an unparseable paste at the first `?` instead of passing it through", () => {    // A space in the host makes this unparseable, but the `?token=…` shape is    // still a credential and must not be stamped verbatim.    const scrubbed = endpointForTelemetry(`http://exa mple.test/mcp?token=${QUERY_TOKEN}`);    expect(scrubbed).toBe("http://exa mple.test/mcp");    expect(scrubbed).not.toContain(QUERY_TOKEN);  });   it("drops a userinfo-looking prefix from an unparseable paste", () => {    const scrubbed = endpointForTelemetry(      `http://svc-user:${USERINFO_PASSWORD}@exa mple.test/mcp?token=${QUERY_TOKEN}`,    );    expect(scrubbed).toBe("exa mple.test/mcp");    expect(scrubbed).not.toContain(QUERY_TOKEN);    expect(scrubbed).not.toContain(USERINFO_PASSWORD);  });}); describe("endpointTelemetryAttributes", () => {  it("keeps the endpoint debuggable without exposing the credential", () => {    const attributes = endpointTelemetryAttributes(      "mcp.endpoint",      `https://svc-user:${USERINFO_PASSWORD}@mcp.example.test/mcp?token=${QUERY_TOKEN}`,    );     expect(attributes).toEqual({      "mcp.endpoint": "https://mcp.example.test/mcp",      "mcp.endpoint.origin": "https://mcp.example.test",      "mcp.endpoint.has_query": true,      "mcp.endpoint.has_fragment": false,      "mcp.endpoint.has_userinfo": true,    });    expect(JSON.stringify(attributes)).not.toContain(QUERY_TOKEN);    expect(JSON.stringify(attributes)).not.toContain(USERINFO_PASSWORD);  });   it("reports absence of both credential shapes for a plain endpoint", () => {    expect(endpointTelemetryAttributes("mcp.endpoint", "https://mcp.example.test/mcp")).toEqual({      "mcp.endpoint": "https://mcp.example.test/mcp",      "mcp.endpoint.origin": "https://mcp.example.test",      "mcp.endpoint.has_query": false,      "mcp.endpoint.has_fragment": false,      "mcp.endpoint.has_userinfo": false,    });  });   it("reports a fragment-only malformed endpoint honestly", () => {    // The `#` starts a fragment, not a query — `has_query` must not claim one,    // and the fragment's presence must be recorded as its own signal.    const attributes = endpointTelemetryAttributes(      "mcp.endpoint",      `http://exa mple.test/mcp#access_token=${QUERY_TOKEN}`,    );     expect(attributes["mcp.endpoint"]).toBe("http://exa mple.test/mcp");    expect(attributes["mcp.endpoint.has_query"]).toBe(false);    expect(attributes["mcp.endpoint.has_fragment"]).toBe(true);    expect(JSON.stringify(attributes)).not.toContain(QUERY_TOKEN);  });   it("reports a fragment on a parseable endpoint", () => {    const attributes = endpointTelemetryAttributes(      "mcp.endpoint",      `https://mcp.example.test/mcp#access_token=${QUERY_TOKEN}`,    );     expect(attributes["mcp.endpoint"]).toBe("https://mcp.example.test/mcp");    expect(attributes["mcp.endpoint.has_query"]).toBe(false);    expect(attributes["mcp.endpoint.has_fragment"]).toBe(true);    expect(JSON.stringify(attributes)).not.toContain(QUERY_TOKEN);  });   it("degrades an unparseable paste without leaking either credential shape", () => {    const attributes = endpointTelemetryAttributes(      "mcp.endpoint",      `http://svc-user:${USERINFO_PASSWORD}@exa mple.test/mcp?token=${QUERY_TOKEN}`,    );     expect(attributes).toEqual({      "mcp.endpoint": "exa mple.test/mcp",      "mcp.endpoint.has_query": true,      "mcp.endpoint.has_fragment": false,      "mcp.endpoint.has_userinfo": true,    });    expect(JSON.stringify(attributes)).not.toContain(QUERY_TOKEN);    expect(JSON.stringify(attributes)).not.toContain(USERINFO_PASSWORD);  });});