@aexol/spectral 0.9.269 → 0.9.270

package/dist/extensions/dataset-uploader/cleaner.js

@@ -17,7 +17,7 @@ import { existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { dirname } from "node:path";
 import { loadJsonl, sampleChars } from "./analyzer.js";
 import { scrub } from "./scrubber.js";
-const REDACTION_KINDS = ["api_key", "jwt", "bearer", "home_path", "secret_value"];
+const REDACTION_KINDS = ["api_key", "jwt", "bearer", "home_path", "user_path", "secret_value"];
 /**
  * Walk a JSON tree and scrub every string leaf. Objects/arrays are rebuilt
  * (structure and key order preserved); non-string leaves pass through.

package/dist/extensions/dataset-uploader/scrubber.d.ts

@@ -6,6 +6,8 @@
  *   - jwt         — bare JWTs (eyJ... payload ... signature)
  *   - bearer      — "Bearer <token>" and Authorization header values
  *   - home_path   — /Users/<name>/ → /home/
+ *   - user_path   — Wine/Windows user segments (drive_c/users/<name>,
+ *                    <drive>:\Users\<name>) → <name> replaced with "user"
  *   - secret_value — opaque values passed in by the caller (secret-store
  *                    values, .env values). The scrubber NEVER reads any
  *                    store itself; callers decide what to pass.

package/dist/extensions/dataset-uploader/scrubber.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scrubber.d.ts","sourceRoot":"","sources":["../../../src/extensions/dataset-uploader/scrubber.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,cAAc,EAAE,CAAC;CAC9B;AA6CD;;;;;;;;;GASG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,WAAW,CAiDvE"}
+{"version":3,"file":"scrubber.d.ts","sourceRoot":"","sources":["../../../src/extensions/dataset-uploader/scrubber.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,cAAc,EAAE,CAAC;CAC9B;AAiED;;;;;;;;;GASG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,WAAW,CAyDvE"}

package/dist/extensions/dataset-uploader/scrubber.js

@@ -6,6 +6,8 @@
  *   - jwt         — bare JWTs (eyJ... payload ... signature)
  *   - bearer      — "Bearer <token>" and Authorization header values
  *   - home_path   — /Users/<name>/ → /home/
+ *   - user_path   — Wine/Windows user segments (drive_c/users/<name>,
+ *                    <drive>:\Users\<name>) → <name> replaced with "user"
  *   - secret_value — opaque values passed in by the caller (secret-store
  *                    values, .env values). The scrubber NEVER reads any
  *                    store itself; callers decide what to pass.
@@ -44,8 +46,27 @@ const JWT_PARTIAL_PATTERN = /\beyJ[A-Za-z0-9_-]{10,}(?:\.[A-Za-z0-9_-]+){0,2}\b/
  * Normalized to /home (the marker would break the surrounding path).
  */
 const HOME_PATH_PATTERN = /\/Users\/[A-Za-z0-9._-]+(?=\/|$)/g;
+/**
+ * Wine / Windows user segment inside a path:
+ *   - drive_c/users/<name>  (Wine prefix, e.g. /home/.wine/drive_c/users/<name>)
+ *   - <drive>:\Users\<name> (native Windows path, backslashes)
+ * Only the user segment is replaced with "user" — the surrounding path is
+ * kept intact (a full-path marker would break the surrounding text).
+ * The normalized "user" value itself never re-matches (lookahead), so
+ * scrubbing is idempotent: re-scrubbing redacted text produces no new
+ * redactions, not even no-op ones.
+ */
+const WINE_USER_PATH_PATTERN = /drive_c\/users\/(?!user(?=[/\\.\s-]|$))[A-Za-z0-9._-]+/g;
+const WINDOWS_USER_PATH_PATTERN = /([A-Za-z]:\\Users\\)(?!user(?=[/\\.\s-]|$))[A-Za-z0-9._-]+/g;
 /** Stable ordering of kinds in the returned redactions array. */
-const REDACTION_KINDS = ["api_key", "jwt", "bearer", "home_path", "secret_value"];
+const REDACTION_KINDS = [
+    "api_key",
+    "jwt",
+    "bearer",
+    "home_path",
+    "user_path",
+    "secret_value",
+];
 /**
  * Scrub `text` for secrets.
  *
@@ -96,6 +117,14 @@ export function scrub(text, extraValues) {
         counts.home_path = (counts.home_path ?? 0) + 1;
         return "/home";
     });
+    out = out.replace(WINE_USER_PATH_PATTERN, () => {
+        counts.user_path = (counts.user_path ?? 0) + 1;
+        return "drive_c/users/user";
+    });
+    out = out.replace(WINDOWS_USER_PATH_PATTERN, (match, prefix) => {
+        counts.user_path = (counts.user_path ?? 0) + 1;
+        return `${prefix}user`;
+    });
     const redactions = [];
     for (const kind of REDACTION_KINDS) {
         const count = counts[kind];

package/dist/generated/zeus/index.d.ts

@@ -2836,7 +2836,6 @@ export type ValueTypes = {
     ["AdminCustomLyceumModelInput"]: {
         model: string | Variable<any, string>;
         image?: string | undefined | null | Variable<any, string>;
-        dockerfile?: string | undefined | null | Variable<any, string>;
         env?: Array<ValueTypes["AdminLyceumEnvOverrideInput"]> | undefined | null | Variable<any, string>;
         extraArgs?: Array<string> | undefined | null | Variable<any, string>;
         startCommand?: string | undefined | null | Variable<any, string>;
@@ -5957,7 +5956,6 @@ export type ResolverInputTypes = {
     ["AdminCustomLyceumModelInput"]: {
         model: string;
         image?: string | undefined | null;
-        dockerfile?: string | undefined | null;
         env?: Array<ResolverInputTypes["AdminLyceumEnvOverrideInput"]> | undefined | null;
         extraArgs?: Array<string> | undefined | null;
         startCommand?: string | undefined | null;
@@ -8255,7 +8253,6 @@ export type ModelTypes = {
     ["AdminCustomLyceumModelInput"]: {
         model: string;
         image?: string | undefined | null;
-        dockerfile?: string | undefined | null;
         env?: Array<ModelTypes["AdminLyceumEnvOverrideInput"]> | undefined | null;
         extraArgs?: Array<string> | undefined | null;
         startCommand?: string | undefined | null;
@@ -10717,7 +10714,6 @@ export type GraphQLTypes = {
     ["AdminCustomLyceumModelInput"]: {
         model: string;
         image?: string | undefined | null;
-        dockerfile?: string | undefined | null;
         env?: Array<GraphQLTypes["AdminLyceumEnvOverrideInput"]> | undefined | null;
         extraArgs?: Array<string> | undefined | null;
         startCommand?: string | undefined | null;