@cofy-x/dsh-console 0.1.0-alpha.0 → 0.1.0-alpha.2

package/dist/{chunk-YNJGTXFJ.js → chunk-N3EQS35J.js}

@@ -1585,24 +1585,52 @@ var NEVER_ALLOWED_NAME_PATTERNS = [
 var NEVER_ALLOWED_VALUE_PATTERNS = [
   /-----BEGIN (RSA|OPENSSH|EC|PGP) PRIVATE KEY-----/i,
   /-----BEGIN CERTIFICATE-----/i,
-  // Credentials in URL
-  /(https?|ftp|smtp):\/\/[^:]+:[^@]+@/i,
   // GitHub tokens (classic, fine-grained, OAuth, etc.)
   /(ghp|gho|ghu|ghs|ghr|github_pat)_[a-zA-Z0-9_]{36,}/i,
   // Google API keys
   /AIzaSy[a-zA-Z0-9_\\-]{33}/i,
   // Amazon AWS Access Key ID
   /AKIA[A-Z0-9]{16}/i,
-  // Generic OAuth/JWT tokens
-  /eyJ[a-zA-Z0-9_-]*\.[a-zA-Z0-9_-]*\.[a-zA-Z0-9_-]*/i,
   // Stripe API keys
   /(s|r)k_(live|test)_[0-9a-zA-Z]{24}/i,
   // Slack tokens (bot, user, etc.)
   /xox[abpr]-[a-zA-Z0-9-]+/i
 ];
+var CREDENTIAL_URL_PROTOCOLS = /* @__PURE__ */ new Set([
+  "http:",
+  "https:",
+  "ftp:",
+  "smtp:"
+]);
+function containsUrlCredentials(value) {
+  try {
+    const url = new URL(value);
+    return CREDENTIAL_URL_PROTOCOLS.has(url.protocol) && (url.username.length > 0 || url.password.length > 0);
+  } catch {
+    return false;
+  }
+}
+function isBase64UrlSegment(value) {
+  if (value.length === 0) {
+    return false;
+  }
+  for (const character of value) {
+    const code = character.charCodeAt(0);
+    const isDigit = code >= 48 && code <= 57;
+    const isUppercase = code >= 65 && code <= 90;
+    const isLowercase = code >= 97 && code <= 122;
+    if (!isDigit && !isUppercase && !isLowercase && character !== "_" && character !== "-") {
+      return false;
+    }
+  }
+  return true;
+}
+function looksLikeJwt(value) {
+  const segments = value.split(".");
+  return segments.length === 3 && segments[0].startsWith("eyJ") && segments.every(isBase64UrlSegment);
+}
 function shouldRedactEnvironmentVariable(key, value, allowedSet, blockedSet, isStrictSanitization = false) {
   key = key.toUpperCase();
-  value = value?.toUpperCase();
   if (allowedSet?.has(key)) {
     return false;
   }
@@ -1624,6 +1652,9 @@ function shouldRedactEnvironmentVariable(key, value, allowedSet, blockedSet, isS
     }
   }
   if (value) {
+    if (containsUrlCredentials(value) || looksLikeJwt(value)) {
+      return true;
+    }
     for (const pattern of NEVER_ALLOWED_VALUE_PATTERNS) {
       if (pattern.test(value)) {
         return true;

package/dist/dsh/index.js

@@ -3,8 +3,8 @@ import {
   apply,
   inject,
   name
-} from "../chunk-Z7RUTXMO.js";
-import "../chunk-YNJGTXFJ.js";
+} from "../chunk-JFPTU3O3.js";
+import "../chunk-N3EQS35J.js";
 export {
   Config,
   apply,

package/dist/index.js

@@ -2,8 +2,8 @@ import {
   Config,
   apply,
   name
-} from "./chunk-Z7RUTXMO.js";
-import "./chunk-YNJGTXFJ.js";
+} from "./chunk-JFPTU3O3.js";
+import "./chunk-N3EQS35J.js";
 export {
   Config,
   apply,

package/dist/ui/renderers.js

@@ -1,6 +1,6 @@
 import {
   registerExtensionContentRenderer
-} from "../chunk-YNJGTXFJ.js";
+} from "../chunk-N3EQS35J.js";
 export {
   registerExtensionContentRenderer
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cofy-x/dsh-console",
-  "version": "0.1.0-alpha.0",
+  "version": "0.1.0-alpha.2",
   "description": "A TypeScript and React/Ink terminal frontend for DeepSeek Harness.",
   "repository": {
     "type": "git",
@@ -35,7 +35,8 @@
     "lint": "eslint . --ext .ts,.tsx",
     "format": "prettier --write .",
     "test": "vitest run",
-    "test:ci": "vitest run --coverage",
+    "test:ci": "vitest run --coverage --exclude '**/*.performance.test.ts'",
+    "test:performance": "vitest run --coverage.enabled=false --maxWorkers=1 src/ui/hooks/input/use-text-buffer.performance.test.ts",
     "typecheck": "tsc --noEmit",
     "example": "tsx --tsconfig examples/tsconfig.run.json",
     "example:debug": "TSX_TSCONFIG_PATH=examples/tsconfig.run.json node --inspect-brk --import tsx/esm",
@@ -78,13 +79,13 @@
     "ink-spinner": "^5.0.0",
     "lowlight": "^3.3.0",
     "mnemonist": "^0.40.3",
-    "picomatch": "^4.0.3",
+    "picomatch": "^4.0.7",
     "react": "^19.2.8",
     "string-width": "^8.1.0",
     "strip-ansi": "^7.1.2",
     "strip-json-comments": "^5.0.3",
     "tinygradient": "^2.0.1",
-    "undici": "^7.16.0",
+    "undici": "^7.29.0",
     "yargs": "^18.0.0",
     "zod": "^3.25.76"
   },
@@ -95,11 +96,13 @@
     "@deepseek-ai/dsh-agent": "0.1.1-rc.2",
     "@deepseek-ai/dsh-agent-default-model": "0.1.1-rc.2",
     "@deepseek-ai/dsh-attachment": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
     "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
     "@deepseek-ai/dsh-permission-presets": "0.1.1-rc.2",
     "@deepseek-ai/dsh-session": "0.1.1-rc.2",
     "@deepseek-ai/dsh-session-projection": "0.1.1-rc.2",
     "@deepseek-ai/dsh-session-query": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.1-rc.2",
     "@deepseek-ai/dsh-tools": "0.1.1-rc.2",
     "@deepseek-ai/dsh-user-approval": "0.1.1-rc.2",
     "@deepseek-ai/dsh-user-questions": "0.1.1-rc.2",
@@ -128,7 +131,9 @@
     "@deepseek-ai/dsh-tools": ">=0.1.0-rc.3 <0.2.0",
     "@deepseek-ai/dsh-user-approval": ">=0.1.0-rc.3 <0.2.0",
     "@deepseek-ai/dsh-user-questions": ">=0.1.0-rc.3 <0.2.0",
-    "@deepseek-ai/dsh-commands": ">=0.1.0-rc.3 <0.2.0"
+    "@deepseek-ai/dsh-commands": ">=0.1.0-rc.3 <0.2.0",
+    "@deepseek-ai/dsh-credentials": ">=0.1.0-rc.3 <0.2.0",
+    "@deepseek-ai/dsh-settings": ">=0.1.0-rc.3 <0.2.0"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -172,11 +177,16 @@
     },
     "@deepseek-ai/dsh-commands": {
       "optional": true
+    },
+    "@deepseek-ai/dsh-credentials": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-settings": {
+      "optional": true
     }
   },
   "license": "Apache-2.0",
   "publishConfig": {
-    "access": "public",
-    "tag": "alpha"
+    "access": "public"
   }
 }