@pixelbyte-software/pixcode 1.54.7 → 1.54.8

package/server/utils/security-log.js

@@ -1,84 +1,84 @@
-import fs from 'node:fs';
-import path from 'node:path';
-import os from 'node:os';
-
-const LOG_DIR = path.join(os.homedir(), '.pixcode', 'logs');
-const SECURITY_LOG_PATH = path.join(LOG_DIR, 'security.log');
-const MAX_LOG_SIZE = 10 * 1024 * 1024;
-const MAX_LOG_FILES = 5;
-
-function ensureLogDir() {
-    try {
-        if (!fs.existsSync(LOG_DIR)) {
-            fs.mkdirSync(LOG_DIR, { recursive: true, mode: 0o700 });
-        }
-    } catch {
-        // Non-fatal: if we can't create the log dir, we fall back to console
-    }
-}
-
-function sanitizeForLog(value) {
-    if (typeof value !== 'string') {
-        try {
-            value = String(value ?? '');
-        } catch {
-            return '[unserializable]';
-        }
-    }
-    return value
-        .replace(/[\r\n\t]/g, ' ')
-        .replace(/\x1b\[[0-9;]*m/g, '')
-        .slice(0, 500);
-}
-
-function rotateLogIfNeeded() {
-    try {
-        if (!fs.existsSync(SECURITY_LOG_PATH)) return;
-        const stats = fs.statSync(SECURITY_LOG_PATH);
-        if (stats.size < MAX_LOG_SIZE) return;
-        for (let i = MAX_LOG_FILES - 1; i >= 1; i--) {
-            const oldPath = `${SECURITY_LOG_PATH}.${i}`;
-            const newPath = `${SECURITY_LOG_PATH}.${i + 1}`;
-            if (fs.existsSync(oldPath)) {
-                try { fs.renameSync(oldPath, newPath); } catch { /* noop */ }
-            }
-        }
-        try { fs.renameSync(SECURITY_LOG_PATH, `${SECURITY_LOG_PATH}.1`); } catch { /* noop */ }
-    } catch {
-        // Non-fatal
-    }
-}
-
-export function securityLog(event, details = {}) {
-    const entry = {
-        timestamp: new Date().toISOString(),
-        event,
-        ip: sanitizeForLog(details.ip),
-        userId: details.userId != null ? String(details.userId) : null,
-        username: details.username ? sanitizeForLog(details.username) : null,
-        endpoint: details.endpoint ? sanitizeForLog(details.endpoint) : null,
-        method: details.method ? sanitizeForLog(details.method) : null,
-        statusCode: details.statusCode || null,
-        reason: details.reason ? sanitizeForLog(details.reason) : null,
-        userAgent: details.userAgent ? sanitizeForLog(details.userAgent) : null,
-    };
-
-    const line = JSON.stringify(entry);
-
-    try {
-        ensureLogDir();
-        rotateLogIfNeeded();
-        fs.appendFileSync(SECURITY_LOG_PATH, line + '\n', { mode: 0o600 });
-    } catch {
-        // Fall back to console if file logging fails
-        console.warn('[SECURITY]', line);
-    }
-}
-
-export function getClientIp(req) {
-    const forwarded = req?.headers?.['x-forwarded-for'];
-    if (typeof forwarded === 'string' && forwarded.trim()) {
-        return forwarded.split(',')[0].trim();
-    }
-    return req?.socket?.remoteAddress || req?.ip || 'unknown';
-}
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+
+const LOG_DIR = path.join(os.homedir(), '.pixcode', 'logs');
+const SECURITY_LOG_PATH = path.join(LOG_DIR, 'security.log');
+const MAX_LOG_SIZE = 10 * 1024 * 1024;
+const MAX_LOG_FILES = 5;
+
+function ensureLogDir() {
+    try {
+        if (!fs.existsSync(LOG_DIR)) {
+            fs.mkdirSync(LOG_DIR, { recursive: true, mode: 0o700 });
+        }
+    } catch {
+        // Non-fatal: if we can't create the log dir, we fall back to console
+    }
+}
+
+function sanitizeForLog(value) {
+    if (typeof value !== 'string') {
+        try {
+            value = String(value ?? '');
+        } catch {
+            return '[unserializable]';
+        }
+    }
+    return value
+        .replace(/[\r\n\t]/g, ' ')
+        .replace(/\x1b\[[0-9;]*m/g, '')
+        .slice(0, 500);
+}
+
+function rotateLogIfNeeded() {
+    try {
+        if (!fs.existsSync(SECURITY_LOG_PATH)) return;
+        const stats = fs.statSync(SECURITY_LOG_PATH);
+        if (stats.size < MAX_LOG_SIZE) return;
+        for (let i = MAX_LOG_FILES - 1; i >= 1; i--) {
+            const oldPath = `${SECURITY_LOG_PATH}.${i}`;
+            const newPath = `${SECURITY_LOG_PATH}.${i + 1}`;
+            if (fs.existsSync(oldPath)) {
+                try { fs.renameSync(oldPath, newPath); } catch { /* noop */ }
+            }
+        }
+        try { fs.renameSync(SECURITY_LOG_PATH, `${SECURITY_LOG_PATH}.1`); } catch { /* noop */ }
+    } catch {
+        // Non-fatal
+    }
+}
+
+export function securityLog(event, details = {}) {
+    const entry = {
+        timestamp: new Date().toISOString(),
+        event,
+        ip: sanitizeForLog(details.ip),
+        userId: details.userId != null ? String(details.userId) : null,
+        username: details.username ? sanitizeForLog(details.username) : null,
+        endpoint: details.endpoint ? sanitizeForLog(details.endpoint) : null,
+        method: details.method ? sanitizeForLog(details.method) : null,
+        statusCode: details.statusCode || null,
+        reason: details.reason ? sanitizeForLog(details.reason) : null,
+        userAgent: details.userAgent ? sanitizeForLog(details.userAgent) : null,
+    };
+
+    const line = JSON.stringify(entry);
+
+    try {
+        ensureLogDir();
+        rotateLogIfNeeded();
+        fs.appendFileSync(SECURITY_LOG_PATH, line + '\n', { mode: 0o600 });
+    } catch {
+        // Fall back to console if file logging fails
+        console.warn('[SECURITY]', line);
+    }
+}
+
+export function getClientIp(req) {
+    const forwarded = req?.headers?.['x-forwarded-for'];
+    if (typeof forwarded === 'string' && forwarded.trim()) {
+        return forwarded.split(',')[0].trim();
+    }
+    return req?.socket?.remoteAddress || req?.ip || 'unknown';
+}

package/server/utils/url-detection.js

@@ -1,71 +1,71 @@
-const ANSI_ESCAPE_SEQUENCE_REGEX = /\x1B(?:\[[0-?]*[ -/]*[@-~]|\][^\x07\x1B\r\n]*(?:\x07|\x1B\\|$)|P[\s\S]*?(?:\x1B\\|$)|\^[\s\S]*?(?:\x1B\\|$)|_[\s\S]*?(?:\x1B\\|$)|[@-Z\\-_])|\x9B[0-?]*[ -/]*[@-~]/g;
-const TRAILING_URL_PUNCTUATION_REGEX = /[)\]}>.,;:!?]+$/;
-
-function stripAnsiSequences(value = '') {
-    return value.replace(ANSI_ESCAPE_SEQUENCE_REGEX, '');
-}
-
-function normalizeDetectedUrl(url) {
-    if (!url || typeof url !== 'string') return null;
-
-    const cleaned = url.trim().replace(TRAILING_URL_PUNCTUATION_REGEX, '');
-    if (!cleaned) return null;
-
-    try {
-        const parsed = new URL(cleaned);
-        if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
-            return null;
-        }
-        return parsed.toString();
-    } catch {
-        return null;
-    }
-}
-
-function extractUrlsFromText(value = '') {
-    const directMatches = value.match(/https?:\/\/[^\s<>"'`\\\x1b\x07]+/gi) || [];
-
-    // Handle wrapped terminal URLs split across lines by terminal width.
-    const wrappedMatches = [];
-    const continuationRegex = /^[A-Za-z0-9\-._~:/?#\[\]@!$&'()*+,;=%]+$/;
-    const lines = value.split(/\r?\n/);
-    for (let i = 0; i < lines.length; i++) {
-        const line = lines[i].trim();
-        const startMatch = line.match(/https?:\/\/[^\s<>"'`\\\x1b\x07]+/i);
-        if (!startMatch) continue;
-
-        let combined = startMatch[0];
-        let j = i + 1;
-        while (j < lines.length) {
-            const continuation = lines[j].trim();
-            if (!continuation) break;
-            if (!continuationRegex.test(continuation)) break;
-            combined += continuation;
-            j++;
-        }
-
-        wrappedMatches.push(combined.replace(/\r?\n\s*/g, ''));
-    }
-
-    return Array.from(new Set([...directMatches, ...wrappedMatches]));
-}
-
-function shouldAutoOpenUrlFromOutput(value = '') {
-    const normalized = value.toLowerCase();
-    return (
-        normalized.includes('browser didn\'t open') ||
-        normalized.includes('open this url') ||
-        normalized.includes('continue in your browser') ||
-        normalized.includes('press enter to open') ||
-        normalized.includes('open_url:')
-    );
-}
-
-export {
-    ANSI_ESCAPE_SEQUENCE_REGEX,
-    TRAILING_URL_PUNCTUATION_REGEX,
-    stripAnsiSequences,
-    normalizeDetectedUrl,
-    extractUrlsFromText,
-    shouldAutoOpenUrlFromOutput
-};
+const ANSI_ESCAPE_SEQUENCE_REGEX = /\x1B(?:\[[0-?]*[ -/]*[@-~]|\][^\x07\x1B\r\n]*(?:\x07|\x1B\\|$)|P[\s\S]*?(?:\x1B\\|$)|\^[\s\S]*?(?:\x1B\\|$)|_[\s\S]*?(?:\x1B\\|$)|[@-Z\\-_])|\x9B[0-?]*[ -/]*[@-~]/g;
+const TRAILING_URL_PUNCTUATION_REGEX = /[)\]}>.,;:!?]+$/;
+
+function stripAnsiSequences(value = '') {
+    return value.replace(ANSI_ESCAPE_SEQUENCE_REGEX, '');
+}
+
+function normalizeDetectedUrl(url) {
+    if (!url || typeof url !== 'string') return null;
+
+    const cleaned = url.trim().replace(TRAILING_URL_PUNCTUATION_REGEX, '');
+    if (!cleaned) return null;
+
+    try {
+        const parsed = new URL(cleaned);
+        if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+            return null;
+        }
+        return parsed.toString();
+    } catch {
+        return null;
+    }
+}
+
+function extractUrlsFromText(value = '') {
+    const directMatches = value.match(/https?:\/\/[^\s<>"'`\\\x1b\x07]+/gi) || [];
+
+    // Handle wrapped terminal URLs split across lines by terminal width.
+    const wrappedMatches = [];
+    const continuationRegex = /^[A-Za-z0-9\-._~:/?#\[\]@!$&'()*+,;=%]+$/;
+    const lines = value.split(/\r?\n/);
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i].trim();
+        const startMatch = line.match(/https?:\/\/[^\s<>"'`\\\x1b\x07]+/i);
+        if (!startMatch) continue;
+
+        let combined = startMatch[0];
+        let j = i + 1;
+        while (j < lines.length) {
+            const continuation = lines[j].trim();
+            if (!continuation) break;
+            if (!continuationRegex.test(continuation)) break;
+            combined += continuation;
+            j++;
+        }
+
+        wrappedMatches.push(combined.replace(/\r?\n\s*/g, ''));
+    }
+
+    return Array.from(new Set([...directMatches, ...wrappedMatches]));
+}
+
+function shouldAutoOpenUrlFromOutput(value = '') {
+    const normalized = value.toLowerCase();
+    return (
+        normalized.includes('browser didn\'t open') ||
+        normalized.includes('open this url') ||
+        normalized.includes('continue in your browser') ||
+        normalized.includes('press enter to open') ||
+        normalized.includes('open_url:')
+    );
+}
+
+export {
+    ANSI_ESCAPE_SEQUENCE_REGEX,
+    TRAILING_URL_PUNCTUATION_REGEX,
+    stripAnsiSequences,
+    normalizeDetectedUrl,
+    extractUrlsFromText,
+    shouldAutoOpenUrlFromOutput
+};

package/server/vite-daemon.js

@@ -1,79 +1,79 @@
-#!/usr/bin/env node
-
-import process from 'node:process';
-
-import { createServer } from 'vite';
-
-const DEFAULT_PORT = 5173;
-const DEFAULT_HOST = '0.0.0.0';
-
-function parseArgs(argv) {
-    const parsed = {
-        host: process.env.VITE_HOST || process.env.HOST || DEFAULT_HOST,
-        port: Number(process.env.VITE_PORT || DEFAULT_PORT),
-        strictPort: true,
-    };
-
-    for (let i = 0; i < argv.length; i++) {
-        const arg = argv[i];
-        if (arg === '--host') {
-            parsed.host = argv[++i];
-        } else if (arg.startsWith('--host=')) {
-            parsed.host = arg.split('=')[1];
-        } else if (arg === '--port' || arg === '-p') {
-            parsed.port = Number(argv[++i]);
-        } else if (arg.startsWith('--port=')) {
-            parsed.port = Number(arg.split('=')[1]);
-        } else if (arg === '--strictPort') {
-            parsed.strictPort = true;
-        } else if (arg === '--no-strictPort') {
-            parsed.strictPort = false;
-        } else if (arg === '--help' || arg === '-h') {
-            console.log('Usage: node server/vite-daemon.js [--host 0.0.0.0] [--port 5173] [--strictPort]');
-            process.exit(0);
-        } else {
-            throw new Error(`Unknown argument: ${arg}`);
-        }
-    }
-
-    if (!Number.isInteger(parsed.port) || parsed.port < 1 || parsed.port > 65535) {
-        throw new Error(`Invalid port "${parsed.port}". Expected an integer between 1 and 65535.`);
-    }
-
-    return parsed;
-}
-
-async function main() {
-    const options = parseArgs(process.argv.slice(2));
-    const server = await createServer({
-        root: process.cwd(),
-        server: {
-            host: options.host,
-            port: options.port,
-            strictPort: options.strictPort,
-        },
-        clearScreen: false,
-    });
-
-    await server.listen();
-    server.printUrls();
-
-    const shutdown = async (signal) => {
-        console.log(`[INFO] Frontend daemon received ${signal}, shutting down...`);
-        await server.close();
-        process.exit(0);
-    };
-
-    process.once('SIGTERM', () => {
-        void shutdown('SIGTERM');
-    });
-    process.once('SIGINT', () => {
-        void shutdown('SIGINT');
-    });
-}
-
-main().catch((error) => {
-    const message = error?.stack || error?.message || String(error);
-    console.error(`[ERROR] Frontend daemon failed to start: ${message}`);
-    process.exit(1);
-});
+#!/usr/bin/env node
+
+import process from 'node:process';
+
+import { createServer } from 'vite';
+
+const DEFAULT_PORT = 5173;
+const DEFAULT_HOST = '0.0.0.0';
+
+function parseArgs(argv) {
+    const parsed = {
+        host: process.env.VITE_HOST || process.env.HOST || DEFAULT_HOST,
+        port: Number(process.env.VITE_PORT || DEFAULT_PORT),
+        strictPort: true,
+    };
+
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === '--host') {
+            parsed.host = argv[++i];
+        } else if (arg.startsWith('--host=')) {
+            parsed.host = arg.split('=')[1];
+        } else if (arg === '--port' || arg === '-p') {
+            parsed.port = Number(argv[++i]);
+        } else if (arg.startsWith('--port=')) {
+            parsed.port = Number(arg.split('=')[1]);
+        } else if (arg === '--strictPort') {
+            parsed.strictPort = true;
+        } else if (arg === '--no-strictPort') {
+            parsed.strictPort = false;
+        } else if (arg === '--help' || arg === '-h') {
+            console.log('Usage: node server/vite-daemon.js [--host 0.0.0.0] [--port 5173] [--strictPort]');
+            process.exit(0);
+        } else {
+            throw new Error(`Unknown argument: ${arg}`);
+        }
+    }
+
+    if (!Number.isInteger(parsed.port) || parsed.port < 1 || parsed.port > 65535) {
+        throw new Error(`Invalid port "${parsed.port}". Expected an integer between 1 and 65535.`);
+    }
+
+    return parsed;
+}
+
+async function main() {
+    const options = parseArgs(process.argv.slice(2));
+    const server = await createServer({
+        root: process.cwd(),
+        server: {
+            host: options.host,
+            port: options.port,
+            strictPort: options.strictPort,
+        },
+        clearScreen: false,
+    });
+
+    await server.listen();
+    server.printUrls();
+
+    const shutdown = async (signal) => {
+        console.log(`[INFO] Frontend daemon received ${signal}, shutting down...`);
+        await server.close();
+        process.exit(0);
+    };
+
+    process.once('SIGTERM', () => {
+        void shutdown('SIGTERM');
+    });
+    process.once('SIGINT', () => {
+        void shutdown('SIGINT');
+    });
+}
+
+main().catch((error) => {
+    const message = error?.stack || error?.message || String(error);
+    console.error(`[ERROR] Frontend daemon failed to start: ${message}`);
+    process.exit(1);
+});