Pre-publish PII scrub per python.md rule

Six surgical scrubs to clear cluster-fingerprint references before the
PyPI release. Per `~/.claude/rules/python.md`'s pre-publish PII audit
section: specific build strings (`15.0.1.12900-234`-style maintenance
release IDs) and cluster role descriptors ("production") narrow the
fingerprint of which deployment the developer tested against. Replaced
with the more accurate Cisco user-facing version ("CUCM 15.0(1)" or
"CUCM 15") and operational descriptor ("live cluster" — same trust
signal without the prod disclosure).

Files:
  README.md
    "Tested against CUCM 15.0.1.12900" → "Tested against CUCM 15.0(1)"
    placeholder host hardened to "cucm-pub.example.com" (RFC-reserved
    `.example` TLD per the rule's documented convention)

  CHANGELOG.md
    "production CUCM 15.0.1.12900 cluster" → "live CUCM 15 cluster"

  src/mcaxl/risport.py
    Comment: "verified against CUCM 15.0.1.12900 documentation" →
            "verified against CUCM 15 RisPort70 docs"

  src/mcaxl/route_plan.py
    Comment: "the typepatternusage table in CUCM 15.0.1.12900" →
            "the typepatternusage table in CUCM 15"

  .env.example
    Normalized to RFC-reserved values:
      cucm-pub        → cucm-pub.example.com
      AxlUser         → axl-readonly  (descriptive function, not
                                       a real-account-shape name)
      TopSecret...    → replace-with-your-password (clearly a placeholder)

Audit verification:
  grep -rnE '15\.0\.1\.12900|bingham|SupportedSystems|CCX-AXL|CER-AXL|
             CUC-AXL|TabSync|variphy|production|10\.[0-9]+\.[0-9]+\.[0-9]+|
             172\.(1[6-9]|2[0-9]|3[01])\.[0-9]+\.[0-9]+|192\.168\.[0-9]+\.[0-9]+'
       src/ pyproject.toml README.md CHANGELOG.md .env.example
  → returns empty (verified)

Sdist verification:
  tar -tzf dist/mcaxl-2026.4.27.tar.gz | grep -iE 'CLAUDE|axlsqltoolkit|
                                                     bingham|tests/'
  → returns empty (verified)

  Tests directory IS excluded from sdist via
  `[tool.hatch.build.targets.sdist] exclude = ["tests/"]` — important
  because test fixtures contain real cluster hostnames in mock SOAP
  responses (test_risport.py SAMPLE_RESPONSE). Tests stay in the source
  repo for development; they don't ship to PyPI.

Tests still pass: 155/155.

Ready for `uv publish --token …`.
This commit is contained in:
Ryan Malloy 2026-04-27 13:00:35 -06:00
parent ca6956e826
commit 87d697f461
5 changed files with 8 additions and 8 deletions

View File

@ -1,3 +1,3 @@
AXL_URL=https://cucm-pub:8443/axl
AXL_USER=AxlUser
AXL_PASS=TopSecretPasswordNoSpecialCharacters
AXL_URL=https://cucm-pub.example.com:8443/axl/
AXL_USER=axl-readonly
AXL_PASS=replace-with-your-password

View File

@ -41,7 +41,7 @@ Schema-grounded conversation seeds: `route_plan_overview`,
2 Minor) addressed during pre-release hardening, each with a
regression test.
- **Live-cluster verified**: every tool path verified against a
production CUCM 15.0.1.12900 cluster before release.
live CUCM 15 cluster before release.
- **155 unit tests**, schema drift guard for all 71 known
`fkcallingsearchspace_*` columns (via
`test_complete_schema_coverage_against_known_columns`).

View File

@ -4,7 +4,7 @@ Read-only MCP server for **Cisco Unified Communications Manager (CUCM)** —
exposes the AXL SOAP API and RisPort70 real-time registration state to
LLMs for dial-plan analysis, configuration auditing, and impact analysis.
> Tested against CUCM 15.0.1.12900. Should work on any CUCM 12.5+.
> Tested against CUCM 15.0(1). Should work on any CUCM 12.5+.
## Why this exists
@ -55,7 +55,7 @@ claude mcp add cucm-axl -- uvx mcaxl
Set these env vars (most operators use a `.env` file in the working directory):
```env
AXL_URL=https://your-cucm-pub:8443/axl/
AXL_URL=https://cucm-pub.example.com:8443/axl/
AXL_USER=your-axl-service-account
AXL_PASS=your-password

View File

@ -20,7 +20,7 @@ codebase.
SOAP envelope structure cribbed from cisco-cucm-mcp's TypeScript
implementation (MIT licensed) namespaces and field names verified
against CUCM 15.0.1.12900 documentation.
against CUCM 15 RisPort70 docs.
"""
from __future__ import annotations

View File

@ -30,7 +30,7 @@ if TYPE_CHECKING:
# Pattern type codes (numplan.tkpatternusage), verified against the
# typepatternusage table in CUCM 15.0.1.12900. To inspect on a different
# typepatternusage table in CUCM 15. To inspect on a different
# cluster: SELECT enum, name FROM typepatternusage ORDER BY enum.
PATTERN_KINDS: dict[str, int] = {
"call_park": 0,