@futdevpro/fsm-dynamo 1.16.27 → 1.16.29

package/src/_collections/utils/round-list.util.spec.ts

@@ -1,79 +1,79 @@
-
-import { DyFM_RoundList } from './round-list.util';
-
-describe('| DyFM_RoundList', () => {
-
-  describe('| getOutboundedIndex', () => {
-    it('| should throw an error if listLength is 0', () => {
-      expect(() => DyFM_RoundList.getOutboundedIndex(0, 5)).toThrowError('roundListPlusIndex failed. list is empty!');
-    });
-
-    it('| should return correct index for positive outboundIndex within bounds', () => {
-      expect(DyFM_RoundList.getOutboundedIndex(5, 3)).toBe(3);
-    });
-
-    it('| should return correct index for positive outboundIndex out of bounds', () => {
-      expect(DyFM_RoundList.getOutboundedIndex(5, 7)).toBe(2);
-    });
-
-    it('| should return correct index for negative outboundIndex', () => {
-      expect(DyFM_RoundList.getOutboundedIndex(5, -2)).toBe(3);
-    });
-  });
-
-  describe('| getIndexOpposite', () => {
-    it('| should return the opposite index in a circular manner', () => {
-      expect(DyFM_RoundList.getIndexOpposite(8, 7)).toBe(3);
-    });
-
-    it('| should handle even length arrays correctly', () => {
-      expect(DyFM_RoundList.getIndexOpposite(4, 1)).toBe(3);
-    });
-
-    it('| should handle odd length arrays correctly', () => {
-      expect(DyFM_RoundList.getIndexOpposite(5, 2)).toBe(0);
-    });
-  });
-
-  describe('| getListIndex', () => {
-    it('| should return the correct element for a given outboundIndex', () => {
-      const list = ['a', 'b', 'c', 'd'];
-      expect(DyFM_RoundList.getListIndex(list, 5)).toBe('b');
-    });
-
-    it('| should handle negative outboundIndex', () => {
-      const list = ['a', 'b', 'c', 'd'];
-      expect(DyFM_RoundList.getListIndex(list, -1)).toBe('d');
-    });
-  });
-
-  describe('| getListOpposite', () => {
-    it('| should return the opposite element in a circular manner', () => {
-      const list = ['a', 'b', 'c', 'd', 'e', 'f', 'g', 'h'];
-      expect(DyFM_RoundList.getListOpposite(list, 'h')).toBe('d');
-    });
-
-    it('| should handle even length lists correctly', () => {
-      const list = ['a', 'b', 'c', 'd'];
-      expect(DyFM_RoundList.getListOpposite(list, 'b')).toBe('d');
-    });
-
-    it('| should handle odd length lists correctly', () => {
-      const list = ['a', 'b', 'c', 'd', 'e'];
-      expect(DyFM_RoundList.getListOpposite(list, 'c')).toBe('a');
-    });
-  });
-
-  describe('| getLast', () => {
-    it('| should return the last element of the list', () => {
-      const list = ['a', 'b', 'c'];
-      expect(DyFM_RoundList.getLast(list)).toBe('c');
-    });
-
-    it('| should return null for an empty list', () => {
-      const list: string[] = [];
-      expect(DyFM_RoundList.getLast(list)).toBeNull();
-    });
-  });
-
-});
+
+import { DyFM_RoundList } from './round-list.util';
+
+describe('| DyFM_RoundList', () => {
+
+  describe('| getOutboundedIndex', () => {
+    it('| should throw an error if listLength is 0', () => {
+      expect(() => DyFM_RoundList.getOutboundedIndex(0, 5)).toThrowError('roundListPlusIndex failed. list is empty!');
+    });
+
+    it('| should return correct index for positive outboundIndex within bounds', () => {
+      expect(DyFM_RoundList.getOutboundedIndex(5, 3)).toBe(3);
+    });
+
+    it('| should return correct index for positive outboundIndex out of bounds', () => {
+      expect(DyFM_RoundList.getOutboundedIndex(5, 7)).toBe(2);
+    });
+
+    it('| should return correct index for negative outboundIndex', () => {
+      expect(DyFM_RoundList.getOutboundedIndex(5, -2)).toBe(3);
+    });
+  });
+
+  describe('| getIndexOpposite', () => {
+    it('| should return the opposite index in a circular manner', () => {
+      expect(DyFM_RoundList.getIndexOpposite(8, 7)).toBe(3);
+    });
+
+    it('| should handle even length arrays correctly', () => {
+      expect(DyFM_RoundList.getIndexOpposite(4, 1)).toBe(3);
+    });
+
+    it('| should handle odd length arrays correctly', () => {
+      expect(DyFM_RoundList.getIndexOpposite(5, 2)).toBe(0);
+    });
+  });
+
+  describe('| getListIndex', () => {
+    it('| should return the correct element for a given outboundIndex', () => {
+      const list = ['a', 'b', 'c', 'd'];
+      expect(DyFM_RoundList.getListIndex(list, 5)).toBe('b');
+    });
+
+    it('| should handle negative outboundIndex', () => {
+      const list = ['a', 'b', 'c', 'd'];
+      expect(DyFM_RoundList.getListIndex(list, -1)).toBe('d');
+    });
+  });
+
+  describe('| getListOpposite', () => {
+    it('| should return the opposite element in a circular manner', () => {
+      const list = ['a', 'b', 'c', 'd', 'e', 'f', 'g', 'h'];
+      expect(DyFM_RoundList.getListOpposite(list, 'h')).toBe('d');
+    });
+
+    it('| should handle even length lists correctly', () => {
+      const list = ['a', 'b', 'c', 'd'];
+      expect(DyFM_RoundList.getListOpposite(list, 'b')).toBe('d');
+    });
+
+    it('| should handle odd length lists correctly', () => {
+      const list = ['a', 'b', 'c', 'd', 'e'];
+      expect(DyFM_RoundList.getListOpposite(list, 'c')).toBe('a');
+    });
+  });
+
+  describe('| getLast', () => {
+    it('| should return the last element of the list', () => {
+      const list = ['a', 'b', 'c'];
+      expect(DyFM_RoundList.getLast(list)).toBe('c');
+    });
+
+    it('| should return null for an empty list', () => {
+      const list: string[] = [];
+      expect(DyFM_RoundList.getLast(list)).toBeNull();
+    });
+  });
+
+});

package/src/_collections/utils/round-list.util.ts

@@ -1,162 +1,162 @@
-
-
-/**
- * This class is a collection of static methods for round list operations
- * A round list is a list that is circular
- * - after the last element, the first comes next
- */
-export class DyFM_RoundList {  
-  /**
-   * returns the outbound index of the list
-   * @param listLength 
-   * @param outboundIndex 
-   * @returns 
-   * 
-   * @example
-   * ```ts
-   * const listLength = 10;
-   * const outboundIndex = 15;
-   * const result = DyFM_RoundList.getOutboundedIndex(listLength, outboundIndex);
-   * console.log(result); // 5
-   * ```
-   */
-  static getOutboundedIndex(listLength: number, outboundIndex: number): number {
-    if (!listLength) {
-      throw new Error('roundListPlusIndex failed. list is empty!');
-    }
-  
-    if (outboundIndex < 0) {
-      outboundIndex = outboundIndex % listLength;
-      outboundIndex = listLength + outboundIndex;
-    }
-    
-    if (listLength <= outboundIndex) {
-      outboundIndex = outboundIndex % listLength;
-    }
-  
-    return outboundIndex;
-  }
-  
-  /**
-   * returns the index of the opposite element of the list
-   * - as they are circular, the opposite is at the half of the list
-   * - as it is circular, for the second half, the opposite is at the first half
-   * @param length 
-   * @param oppositeOf 
-   * @returns 
-   * 
-   * @example
-   * ```ts
-   * const length = 10;
-   * const oppositeOf = 5;
-   * const result = DyFM_RoundList.getIndexOpposite(length, oppositeOf);
-   * console.log(result); // 0
-   * ```
-   */
-  static getIndexOpposite(length: number, oppositeOf: number): number {
-    const plusIndex = oppositeOf + Math.round(length / 2);
-    const res = this.getOutboundedIndex(length, plusIndex);
-  
-    return res;
-  }
-  
-  /**
-   * returns the element at the outbound index of the list
-   * @param list 
-   * @param outboundIndex 
-   * @returns 
-   * 
-   * @example
-   * ```ts
-   * const list = [ 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 ];
-   * const outboundIndex = 15;
-   * const result = DyFM_RoundList.getListIndex(list, outboundIndex);
-   * console.log(result); // 5
-   * ```
-   */
-  static getListIndex<T>(list: T[], outboundIndex: number): T {
-    return list[this.getOutboundedIndex(list.length, outboundIndex)];
-  }
-  
-  /**
-   * returns the element at the opposite index of the list
-   * @param list 
-   * @param oppositeOf 
-   * @returns 
-   * 
-   * @example
-   * ```ts
-   * const list = [ 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 ];
-   * const oppositeOf = 5;
-   * const result = DyFM_RoundList.getListOpposite(list, oppositeOf);
-   * console.log(result); // 0
-   * ```
-   */
-  static getListOpposite<T>(list: T[], oppositeOf: T): T {
-    return list[this.getIndexOpposite(list.length, list.indexOf(oppositeOf))];
-  }
-  
-  /**
-   * returns the last element of the list
-   * returns null if the list is empty
-   * 
-   * @example
-   * ```ts
-   * const list = [ 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 ];
-   * const result = DyFM_RoundList.getLast(list);
-   * console.log(result); // 10
-   * ```
-   */
-  static getLast<T>(list: T[]): T | null {
-    if (0 < list.length) {
-      return list[list.length - 1];
-    } else {
-      return null;
-    }
-  }
-
-  /** 
-   * returns the opposite index as they circular
-   * so after the last index, the first comes next
-   * an array that has 8 elements, the opposite of 7 is 3
-   * */
-  /* static getRoundListOppositeIndex(
-    arrayLength: number, 
-    index: number, 
-    roundUp: boolean = false
-  ): number {
-    const oppositeIndex = index + (
-      roundUp ? 
-        Math.ceil(arrayLength / 2) : 
-        Math.floor(arrayLength / 2)
-    );
-
-    if (arrayLength <= oppositeIndex) {
-      return oppositeIndex - arrayLength;
-    } else {
-      return oppositeIndex;
-    }
-  }
-
-  static getRoundListOutboundIndex<T>(array: T[], index: number): T {
-    try {
-      while (array.length <= index) {
-        index -= array.length;
-      }
-  
-      while (index < 0) {
-        index += array.length;
-      }
-      
-      return array[index];
-    } catch (error) {
-      console.error(
-        'DyFM_Array.getRoundListOutboundIndex error:', error,
-        '\narray:', array,
-        '\nindex:', index
-      );
-      
-      return null;
-    }
-  } */
-}
+
+
+/**
+ * This class is a collection of static methods for round list operations
+ * A round list is a list that is circular
+ * - after the last element, the first comes next
+ */
+export class DyFM_RoundList {  
+  /**
+   * returns the outbound index of the list
+   * @param listLength 
+   * @param outboundIndex 
+   * @returns 
+   * 
+   * @example
+   * ```ts
+   * const listLength = 10;
+   * const outboundIndex = 15;
+   * const result = DyFM_RoundList.getOutboundedIndex(listLength, outboundIndex);
+   * console.log(result); // 5
+   * ```
+   */
+  static getOutboundedIndex(listLength: number, outboundIndex: number): number {
+    if (!listLength) {
+      throw new Error('roundListPlusIndex failed. list is empty!');
+    }
+  
+    if (outboundIndex < 0) {
+      outboundIndex = outboundIndex % listLength;
+      outboundIndex = listLength + outboundIndex;
+    }
+    
+    if (listLength <= outboundIndex) {
+      outboundIndex = outboundIndex % listLength;
+    }
+  
+    return outboundIndex;
+  }
+  
+  /**
+   * returns the index of the opposite element of the list
+   * - as they are circular, the opposite is at the half of the list
+   * - as it is circular, for the second half, the opposite is at the first half
+   * @param length 
+   * @param oppositeOf 
+   * @returns 
+   * 
+   * @example
+   * ```ts
+   * const length = 10;
+   * const oppositeOf = 5;
+   * const result = DyFM_RoundList.getIndexOpposite(length, oppositeOf);
+   * console.log(result); // 0
+   * ```
+   */
+  static getIndexOpposite(length: number, oppositeOf: number): number {
+    const plusIndex = oppositeOf + Math.round(length / 2);
+    const res = this.getOutboundedIndex(length, plusIndex);
+  
+    return res;
+  }
+  
+  /**
+   * returns the element at the outbound index of the list
+   * @param list 
+   * @param outboundIndex 
+   * @returns 
+   * 
+   * @example
+   * ```ts
+   * const list = [ 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 ];
+   * const outboundIndex = 15;
+   * const result = DyFM_RoundList.getListIndex(list, outboundIndex);
+   * console.log(result); // 5
+   * ```
+   */
+  static getListIndex<T>(list: T[], outboundIndex: number): T {
+    return list[this.getOutboundedIndex(list.length, outboundIndex)];
+  }
+  
+  /**
+   * returns the element at the opposite index of the list
+   * @param list 
+   * @param oppositeOf 
+   * @returns 
+   * 
+   * @example
+   * ```ts
+   * const list = [ 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 ];
+   * const oppositeOf = 5;
+   * const result = DyFM_RoundList.getListOpposite(list, oppositeOf);
+   * console.log(result); // 0
+   * ```
+   */
+  static getListOpposite<T>(list: T[], oppositeOf: T): T {
+    return list[this.getIndexOpposite(list.length, list.indexOf(oppositeOf))];
+  }
+  
+  /**
+   * returns the last element of the list
+   * returns null if the list is empty
+   * 
+   * @example
+   * ```ts
+   * const list = [ 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 ];
+   * const result = DyFM_RoundList.getLast(list);
+   * console.log(result); // 10
+   * ```
+   */
+  static getLast<T>(list: T[]): T | null {
+    if (0 < list.length) {
+      return list[list.length - 1];
+    } else {
+      return null;
+    }
+  }
+
+  /** 
+   * returns the opposite index as they circular
+   * so after the last index, the first comes next
+   * an array that has 8 elements, the opposite of 7 is 3
+   * */
+  /* static getRoundListOppositeIndex(
+    arrayLength: number, 
+    index: number, 
+    roundUp: boolean = false
+  ): number {
+    const oppositeIndex = index + (
+      roundUp ? 
+        Math.ceil(arrayLength / 2) : 
+        Math.floor(arrayLength / 2)
+    );
+
+    if (arrayLength <= oppositeIndex) {
+      return oppositeIndex - arrayLength;
+    } else {
+      return oppositeIndex;
+    }
+  }
+
+  static getRoundListOutboundIndex<T>(array: T[], index: number): T {
+    try {
+      while (array.length <= index) {
+        index -= array.length;
+      }
+  
+      while (index < 0) {
+        index += array.length;
+      }
+      
+      return array[index];
+    } catch (error) {
+      console.error(
+        'DyFM_Array.getRoundListOutboundIndex error:', error,
+        '\narray:', array,
+        '\nindex:', index
+      );
+      
+      return null;
+    }
+  } */
+}

package/src/_collections/utils/secret-mask.util.spec.ts

@@ -0,0 +1,66 @@
+import { DyFM_maskSecrets, DyFM_maskSecretsDeep } from './secret-mask.util';
+
+/**
+ * Spec: `DyFM_SecretMask_Util` (FR-093) — secret/kulcs redaction.
+ * Fokusz: az `url-cred` pattern BARMELY scheme-et fogja (nem csak http), es a nem-secret
+ * tartalom (commit-SHA / verzio / sima URL) valtozatlan marad.
+ */
+describe('| DyFM_maskSecrets — url-cred (any scheme)', () => {
+
+  it('| masks http(s) basic-auth creds (keeps scheme + host)', () => {
+    expect(DyFM_maskSecrets('https://user:p4ssw0rd123@api.example.com'))
+      .toBe('https://[redacted-url-cred]@api.example.com');
+  });
+
+  it('| masks mongodb / postgres / redis connection-string creds', () => {
+    expect(DyFM_maskSecrets('mongodb://admin:supersecretpw@db:27017/app'))
+      .toBe('mongodb://[redacted-url-cred]@db:27017/app');
+    expect(DyFM_maskSecrets('postgres://u:pw123456@h/db')).toContain('postgres://[redacted-url-cred]@');
+    expect(DyFM_maskSecrets('redis://:authpass99@cache:6379')).toContain('redis://[redacted-url-cred]@');
+    expect(DyFM_maskSecrets('mongodb://admin:supersecretpw@db:27017/app')).not.toContain('supersecretpw');
+  });
+
+  it('| is case-insensitive on the scheme', () => {
+    expect(DyFM_maskSecrets('MONGODB://a:secretval1@h')).toContain('[redacted-url-cred]');
+  });
+
+  it('| does NOT touch credential-less URLs (port is not a false positive)', () => {
+    expect(DyFM_maskSecrets('https://example.com:8080/path')).toBe('https://example.com:8080/path');
+    expect(DyFM_maskSecrets('mongodb://db:27017/app')).toBe('mongodb://db:27017/app');
+  });
+});
+
+describe('| DyFM_maskSecrets — token patterns (regression)', () => {
+
+  it('| masks a github PAT', () => {
+    const out: string = DyFM_maskSecrets('token ghp_0123456789abcdef0123456789abcdef0123 here');
+    expect(out).toContain('[redacted-github-pat]');
+    expect(out).not.toContain('ghp_0123456789abcdef0123456789abcdef0123');
+  });
+
+  it('| masks an env-style secret assignment', () => {
+    expect(DyFM_maskSecrets('GITHUB_TOKEN=ghp_0123456789abcdef0123456789abcdef0123')).toContain('[redacted');
+  });
+});
+
+describe('| DyFM_maskSecrets — non-secrets are untouched', () => {
+
+  it('| leaves a commit SHA and a version untouched', () => {
+    expect(DyFM_maskSecrets('a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2')).toBe('a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2');
+    expect(DyFM_maskSecrets('v01.15.204')).toBe('v01.15.204');
+  });
+});
+
+describe('| DyFM_maskSecretsDeep', () => {
+
+  it('| masks string values recursively, leaves non-secret structure intact', () => {
+    const out = DyFM_maskSecretsDeep({
+      steps: { deploy: { errors: [{ text: 'mongodb://admin:supersecretpw@db:27017' }] } },
+      version: '01.15.204',
+      sha: 'a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2',
+    });
+    expect(JSON.stringify(out)).not.toContain('supersecretpw');
+    expect(out.version).toBe('01.15.204');
+    expect(out.sha).toBe('a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2');
+  });
+});

package/src/_collections/utils/secret-mask.util.ts

@@ -106,10 +106,14 @@ const defaultRevealReplacement = (
 };
 
 export const DyFM_SECRET_PATTERNS: SecretPattern_Interface[] = [
-  // URL-embedded basic auth — sajat replace-pattern megorzi a scheme-et + host-ot.
+  // URL-embedded basic auth — BARMELY scheme (`http(s)`, `mongodb`, `postgres`, `redis`,
+  // `amqp`, `mysql` stb.), nem csak http: a `mongodb://user:pass@host` connection-string a
+  // leggyakoribb DB-secret-leak vektor a CI-logokban. A `user:pass@` szerkezet kotelezo →
+  // nincs false-positive a sima URL-ekre (port `host:8080/` sem, mert nincs utana `@`).
+  // A sajat replace-pattern megorzi a scheme-et ($1) + host-ot.
   {
     kind:        'url-cred',
-    regex:       /\b(https?:\/\/)([^/\s:@]+):([^\s@]+)@/g,
+    regex:       /\b([a-z][a-z0-9+.-]*:\/\/)([^/\s:@]*):([^\s@]+)@/gi,
     redactWith:  (_m: string): string => '$1[redacted-url-cred]@',
   },
   // GitHub PATs