@event4u/agent-config 16.4.0 → 17.0.0

package/dist/cli-delegate/chunk-AL3RZ22D.js

@@ -1,74 +0,0 @@
-import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
-import {
-  write_target
-} from "./chunk-T6BP34WI.js";
-
-// src/scripts/_lib/update_check.ts
-var PACKAGE_NAME = "@event4u/agent-config";
-var NPM_REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
-var FETCH_TIMEOUT_S = 1;
-var CHECK_WINDOW_MS = 24 * 60 * 60 * 1e3;
-var STATE_FILENAME = "update-check.json";
-var DEFAULT_STATE_PATH = write_target(STATE_FILENAME);
-async function fetch_latest_from_npm(options = {}) {
-  const timeout = options.timeout ?? FETCH_TIMEOUT_S;
-  const url = options.url ?? NPM_REGISTRY_URL;
-  const fetch_impl = options.fetch_impl ?? fetch;
-  try {
-    const resp = await fetch_impl(url, {
-      headers: {
-        Accept: "application/json",
-        "User-Agent": "agent-config-update-check"
-      },
-      signal: AbortSignal.timeout(timeout * 1e3)
-    });
-    const payload = await resp.json();
-    if (payload !== null && typeof payload === "object" && !Array.isArray(payload)) {
-      const version = payload.version;
-      if (typeof version === "string" && version.trim()) {
-        return version.trim();
-      }
-    }
-  } catch {
-    return null;
-  }
-  return null;
-}
-function _int_or_zero(part) {
-  const trimmed = part.trim();
-  if (/^[+-]?\d+$/.test(trimmed)) {
-    return parseInt(trimmed, 10);
-  }
-  return 0;
-}
-function _is_newer(latest, installed) {
-  const parse = (v) => {
-    const core = v.replace(/^v+/, "").split("-")[0] ?? "";
-    const parts = core.split(".");
-    const out = [];
-    for (const p of parts.slice(0, 3)) {
-      out.push(_int_or_zero(p));
-    }
-    while (out.length < 3) {
-      out.push(0);
-    }
-    return [out[0], out[1], out[2]];
-  };
-  const a = parse(latest);
-  const b = parse(installed);
-  for (let i = 0; i < 3; i += 1) {
-    if (a[i] > b[i]) {
-      return true;
-    }
-    if (a[i] < b[i]) {
-      return false;
-    }
-  }
-  return false;
-}
-
-export {
-  DEFAULT_STATE_PATH,
-  fetch_latest_from_npm,
-  _is_newer
-};

package/dist/cli-delegate/chunk-KB5FZ655.js

@@ -1,208 +0,0 @@
-import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
-
-// src/scripts/_lib/secret_detector.ts
-var ENTROPY_MIN_TOKEN_LENGTH = 20;
-var BASE64_ENTROPY_THRESHOLD = 4.5;
-var HEX_ENTROPY_THRESHOLD = 3;
-var RULES = [
-  { rule: "anthropic-api-key", kind: "anthropic-api-key", regex: /sk-ant-[A-Za-z0-9_-]{20,}/g },
-  { rule: "anthropic-project-key", kind: "anthropic-api-key", regex: /sk-proj-[A-Za-z0-9_-]{20,}/g },
-  { rule: "aws-access-key", kind: "aws-access-key", regex: /AKIA[0-9A-Z]{16}/g },
-  { rule: "google-api-key", kind: "google-api-key", regex: /AIza[0-9A-Za-z_-]{35}/g },
-  { rule: "github-pat", kind: "github-pat", regex: /ghp_[0-9A-Za-z]{36}/g },
-  // Fine-grained PATs (github_pat_…) were a measured detector gap: the
-  // 2026-07-28 adversarial corpus pass flagged them as missed positives.
-  { rule: "github-fine-grained-pat", kind: "github-pat", regex: /github_pat_[0-9A-Za-z_]{22,}/g },
-  {
-    rule: "jwt",
-    kind: "jwt",
-    regex: /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g
-  },
-  // Extensions.
-  { rule: "stripe-secret-key", kind: "stripe-secret-key", regex: /sk_(?:live|test)_[0-9A-Za-z]{16,}/g },
-  { rule: "slack-token", kind: "slack-token", regex: /xox[baprs]-[0-9A-Za-z-]{10,}/g },
-  { rule: "pem-private-key", kind: "pem-private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----/g },
-  {
-    rule: "db-connection-uri",
-    kind: "db-connection-uri",
-    regex: /\b[a-z][a-z0-9+.-]*:\/\/[^\s:/@]+:[^\s:/@]+@/g
-  },
-  {
-    rule: "generic-assignment",
-    kind: "generic-assignment",
-    regex: /(?:password|passwd|pwd|secret|api[_-]?key|access[_-]?token|auth[_-]?token)\s*[:=]\s*['"]?([^'"\s]{8,})['"]?/gi,
-    valueGroup: 1
-  }
-];
-var SECRET_ALLOW = /secret-allow/;
-var PLACEHOLDER_PATTERNS = [
-  /x{4,}/i,
-  /example/i,
-  /changeme/i,
-  /your[_-].*here/i,
-  /<[^>]+>/,
-  /\.\.\./,
-  /^your[_-]/i,
-  /placeholder/i
-];
-var DATA_URI = /data:[\w.+-]+\/[\w.+-]+;base64,/i;
-var UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
-var KEYWORD_CONTEXT = /password|secret|token|api[_-]?key|credential/i;
-var ENTROPY_TOKEN = /[A-Za-z0-9+=_-]{20,}/g;
-var IS_HEX = /^[0-9a-fA-F]+$/;
-var HASH_HEX_LENGTHS = /* @__PURE__ */ new Set([32, 40, 64]);
-function isAllSameChar(value) {
-  return value.length > 0 && /^(.)\1*$/.test(value);
-}
-var GENERIC_MIN_LENGTH = 16;
-var GENERIC_MIN_ENTROPY = 3.3;
-var CODE_EXPR = /[()$`{}<>[\];,]|->|=>|\.\w/;
-function looksLikeSecretValue(value) {
-  if (value.length < GENERIC_MIN_LENGTH) {
-    return false;
-  }
-  if (CODE_EXPR.test(value)) {
-    return false;
-  }
-  const hasDigit = /[0-9]/.test(value);
-  const mixedCase = /[a-z]/.test(value) && /[A-Z]/.test(value);
-  if (!hasDigit && !mixedCase) {
-    return false;
-  }
-  return shannonEntropy(value) >= GENERIC_MIN_ENTROPY;
-}
-function isPlaceholderValue(value, pathHint) {
-  if (pathHint !== void 0) {
-    if (pathHint.endsWith(".example") || pathHint.endsWith(".sample") || pathHint.includes(".env.example")) {
-      return true;
-    }
-  }
-  if (isAllSameChar(value)) {
-    return true;
-  }
-  return PLACEHOLDER_PATTERNS.some((p) => p.test(value));
-}
-function maskSecret(value) {
-  const front = value.slice(0, 4);
-  const back = value.length > 6 ? value.slice(-2) : "";
-  if (front.length + back.length >= value.length) {
-    return `${value.slice(0, 1)}\u2026`;
-  }
-  return `${front}\u2026${back}`;
-}
-function shannonEntropy(value) {
-  const freq = /* @__PURE__ */ new Map();
-  for (const ch of value) {
-    freq.set(ch, (freq.get(ch) ?? 0) + 1);
-  }
-  const n = value.length;
-  let entropy = 0;
-  for (const count of freq.values()) {
-    const p = count / n;
-    entropy -= p * Math.log2(p);
-  }
-  return entropy;
-}
-function overlaps(spans, start, end) {
-  return spans.some(([s, e]) => start < e && s < end);
-}
-function scanText(text, opts = {}) {
-  const pathHint = opts.path;
-  const findings = [];
-  const lines = text.split(/\r\n|\r|\n/);
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i];
-    const lineNo = i + 1;
-    if (SECRET_ALLOW.test(line)) {
-      continue;
-    }
-    const covered = [];
-    for (const rule of RULES) {
-      rule.regex.lastIndex = 0;
-      let m;
-      while ((m = rule.regex.exec(line)) !== null) {
-        const value = rule.valueGroup !== void 0 ? m[rule.valueGroup] : m[0];
-        if (value === void 0) {
-          if (m.index === rule.regex.lastIndex) {
-            rule.regex.lastIndex += 1;
-          }
-          continue;
-        }
-        if (rule.rule === "generic-assignment" && !looksLikeSecretValue(value)) {
-          if (m.index === rule.regex.lastIndex) {
-            rule.regex.lastIndex += 1;
-          }
-          continue;
-        }
-        const valueStart = m.index + m[0].indexOf(value);
-        const confidence = isPlaceholderValue(value, pathHint) ? "low" : "high";
-        findings.push({
-          rule: rule.rule,
-          kind: rule.kind,
-          line: lineNo,
-          column: valueStart + 1,
-          masked: maskSecret(value),
-          confidence
-        });
-        covered.push([valueStart, valueStart + value.length]);
-        if (m.index === rule.regex.lastIndex) {
-          rule.regex.lastIndex += 1;
-        }
-      }
-    }
-    if (!DATA_URI.test(line)) {
-      const hasKeyword = KEYWORD_CONTEXT.test(line);
-      ENTROPY_TOKEN.lastIndex = 0;
-      let tm;
-      while ((tm = ENTROPY_TOKEN.exec(line)) !== null) {
-        const token = tm[0];
-        const start = tm.index;
-        const end = start + token.length;
-        if (token.length < ENTROPY_MIN_TOKEN_LENGTH) {
-          continue;
-        }
-        if (overlaps(covered, start, end)) {
-          continue;
-        }
-        if (UUID.test(token)) {
-          continue;
-        }
-        if (/^sha(?:256|384|512)-/.test(token)) {
-          continue;
-        }
-        const entropy = shannonEntropy(token);
-        const isHex = IS_HEX.test(token);
-        if (isHex && HASH_HEX_LENGTHS.has(token.length)) {
-          continue;
-        }
-        let confidence = null;
-        if (isHex) {
-          if (entropy >= HEX_ENTROPY_THRESHOLD && hasKeyword) {
-            confidence = "high";
-          }
-        } else if (entropy >= BASE64_ENTROPY_THRESHOLD) {
-          confidence = hasKeyword ? "high" : "medium";
-        }
-        if (confidence === null) {
-          continue;
-        }
-        if (isPlaceholderValue(token, pathHint)) {
-          confidence = "low";
-        }
-        findings.push({
-          rule: "entropy",
-          kind: "high-entropy-string",
-          line: lineNo,
-          column: start + 1,
-          masked: maskSecret(token),
-          confidence
-        });
-      }
-    }
-  }
-  return findings;
-}
-
-export {
-  scanText
-};