From e22be58c89daf89f5596049e167c8ee796657b0c Mon Sep 17 00:00:00 2001
From: andreihasna <hasna@station01.taild59be2.ts.net>
Date: Mon, 20 Jul 2026 10:57:39 +0300
Subject: [PATCH] fix(security): remove internal infra hostnames from published
 package

---
 src/http-store.test.ts | 16 ++++++++--------
 src/http-store.ts      |  2 +-
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/src/http-store.test.ts b/src/http-store.test.ts
index d8962e8..ea70b88 100644
--- a/src/http-store.test.ts
+++ b/src/http-store.test.ts
@@ -42,7 +42,7 @@ function mockFetch(handler: (call: RecordedCall) => { status?: number; json?: un
   };
 }
 
-const CONFIG = { apiUrl: "https://identities.hasna.xyz", apiKey: "test-key-abc" };
+const CONFIG = { apiUrl: "https://identities.your-deployment.example", apiKey: "test-key-abc" };
 const SAMPLE = { id: "agent:demo", kind: "agent", fullName: "Demo Agent", identifiers: [], emails: [], phones: [] };
 
 let active: { restore(): void } | undefined;
@@ -61,10 +61,10 @@ describe("resolveCloudHttpConfig", () => {
   test("returns config when both vars are set", () => {
     expect(
       resolveCloudHttpConfig({
-        HASNA_IDENTITIES_API_URL: "https://identities.hasna.xyz",
+        HASNA_IDENTITIES_API_URL: "https://identities.your-deployment.example",
         HASNA_IDENTITIES_API_KEY: "k",
       }),
-    ).toEqual({ apiUrl: "https://identities.hasna.xyz", apiKey: "k" });
+    ).toEqual({ apiUrl: "https://identities.your-deployment.example", apiKey: "k" });
   });
 
   test("throws when only one var is set (no silent local drift)", () => {
@@ -81,14 +81,14 @@ describe("resolveIdentityStore", () => {
   });
 
   test("uses cloud store when both env vars are set", () => {
-    process.env["HASNA_IDENTITIES_API_URL"] = "https://identities.hasna.xyz";
+    process.env["HASNA_IDENTITIES_API_URL"] = "https://identities.your-deployment.example";
     process.env["HASNA_IDENTITIES_API_KEY"] = "k";
     const store = resolveIdentityStore();
     expect(store).toBeInstanceOf(CloudHttpIdentityStore);
   });
 
   test("preferLocal forces the local store even when env is set", () => {
-    process.env["HASNA_IDENTITIES_API_URL"] = "https://identities.hasna.xyz";
+    process.env["HASNA_IDENTITIES_API_URL"] = "https://identities.your-deployment.example";
     process.env["HASNA_IDENTITIES_API_KEY"] = "k";
     const store = resolveIdentityStore({ preferLocal: true });
     expect(store).not.toBeInstanceOf(CloudHttpIdentityStore);
@@ -102,7 +102,7 @@ describe("CloudHttpIdentityStore CRUD mapping", () => {
     const store = new CloudHttpIdentityStore(CONFIG);
     const list = await store.list();
     expect(list).toHaveLength(1);
-    expect(m.calls[0].url).toBe("https://identities.hasna.xyz/v1/identities");
+    expect(m.calls[0].url).toBe("https://identities.your-deployment.example/v1/identities");
     expect(m.calls[0].method).toBe("GET");
     expect(m.calls[0].headers["Authorization"]).toBe("Bearer test-key-abc");
   });
@@ -124,7 +124,7 @@ describe("CloudHttpIdentityStore CRUD mapping", () => {
     const created = await store.create({ kind: "agent", fullName: "Demo Agent" });
     expect(created.id).toBe("agent:demo");
     expect(m.calls[0].method).toBe("POST");
-    expect(m.calls[0].url).toBe("https://identities.hasna.xyz/v1/identities");
+    expect(m.calls[0].url).toBe("https://identities.your-deployment.example/v1/identities");
     expect(m.calls[0].headers["Idempotency-Key"]).toBeTruthy();
   });
 
@@ -153,7 +153,7 @@ describe("CloudHttpIdentityStore CRUD mapping", () => {
     active = m;
     const store = new CloudHttpIdentityStore(CONFIG);
     await store.linkEmail("agent:demo", "demo@hasna.com");
-    expect(m.calls[0].url).toBe("https://identities.hasna.xyz/v1/identities/agent%3Ademo/emails");
+    expect(m.calls[0].url).toBe("https://identities.your-deployment.example/v1/identities/agent%3Ademo/emails");
     expect(m.calls[0].body).toEqual({ address: "demo@hasna.com" });
   });
 
diff --git a/src/http-store.ts b/src/http-store.ts
index d33a6bf..e483cf7 100644
--- a/src/http-store.ts
+++ b/src/http-store.ts
@@ -43,7 +43,7 @@ import type {
 } from "./types.js";
 
 export interface CloudHttpConfig {
-  /** Base URL, e.g. https://identities.hasna.xyz (the `/v1` prefix is appended). */
+  /** Base URL, e.g. https://identities.your-deployment.example (the `/v1` prefix is appended). */
   apiUrl: string;
   /** Bearer API key (never logged). */
   apiKey: string;