@unbrained/pm-cli 2026.6.6 → 2026.6.7

package/dist/core/telemetry/runtime.js

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="553d6dd0-b2d8-5ff4-8ea8-83dc48210694")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="7fe9c7b3-ae13-549f-836e-c102d9920b7b")}catch(e){}}();
 import crypto from "node:crypto";
 import { spawn } from "node:child_process";
 import { mkdirSync, rmSync, statSync } from "node:fs";
@@ -70,7 +70,6 @@ const SENSITIVE_INLINE_KEY_PATTERN = "(?:token|secret|password|passwd|api[_-]?ke
 const INLINE_SENSITIVE_ASSIGNMENT_PATTERN = new RegExp(`\\b(${SENSITIVE_INLINE_KEY_PATTERN})\\s*([:=])\\s*([^\\s,;]+)`, "giu");
 const INLINE_SENSITIVE_FLAG_PATTERN = new RegExp(`(--${SENSITIVE_INLINE_KEY_PATTERN})(=|\\s+)([^\\s,;]+)`, "giu");
 const ABSOLUTE_PATH_TOKEN_PATTERN = /(^|[\s"'`(=])\/(?:[^\s"'`),;]+)/g;
-const EMAIL_PATTERN = /[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/giu;
 const BEARER_TOKEN_PATTERN = /bearer\s+[a-z0-9._=-]+/giu;
 const PRIVATE_IP_PATTERN = /\b(?:10\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)|172\.(?:1[6-9]|2\d|3[01])\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)|192\.168\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d))\b/g;
 function queuePath(globalPmRoot) {
@@ -145,8 +144,90 @@ function redactInlineSensitiveAssignments(input) {
 function redactAbsolutePathTokens(input) {
     return input.replaceAll(ABSOLUTE_PATH_TOKEN_PATTERN, (_match, prefix) => `${prefix}[redacted_path]`);
 }
+function isAsciiLetterOrDigitCode(code) {
+    const isUpper = code >= 65 && code <= 90;
+    const isLower = code >= 97 && code <= 122;
+    const isDigit = code >= 48 && code <= 57;
+    return isUpper || isLower || isDigit;
+}
+function isEmailLocalCharacter(character) {
+    if (!character) {
+        return false;
+    }
+    const code = character.charCodeAt(0);
+    if (isAsciiLetterOrDigitCode(code)) {
+        return true;
+    }
+    return character === "." || character === "_" || character === "%" || character === "+" || character === "-";
+}
+function isEmailDomainCharacter(character) {
+    if (!character) {
+        return false;
+    }
+    const code = character.charCodeAt(0);
+    if (isAsciiLetterOrDigitCode(code)) {
+        return true;
+    }
+    return character === "." || character === "-";
+}
+function looksLikeEmailToken(token) {
+    const atIndex = token.indexOf("@");
+    if (atIndex <= 0 || atIndex !== token.lastIndexOf("@") || atIndex === token.length - 1) {
+        return false;
+    }
+    const localPart = token.slice(0, atIndex);
+    const domainPart = token.slice(atIndex + 1);
+    const lastDot = domainPart.lastIndexOf(".");
+    if (lastDot <= 0 || lastDot === domainPart.length - 1) {
+        return false;
+    }
+    if (domainPart.length - (lastDot + 1) < 2) {
+        return false;
+    }
+    for (const character of localPart) {
+        if (!isEmailLocalCharacter(character)) {
+            return false;
+        }
+    }
+    for (const character of domainPart) {
+        if (!isEmailDomainCharacter(character)) {
+            return false;
+        }
+    }
+    return true;
+}
+function redactEmailTokens(input) {
+    let redacted = "";
+    let cursor = 0;
+    while (cursor < input.length) {
+        const atIndex = input.indexOf("@", cursor);
+        if (atIndex < 0) {
+            redacted += input.slice(cursor);
+            break;
+        }
+        let start = atIndex - 1;
+        while (start >= cursor && isEmailLocalCharacter(input[start])) {
+            start -= 1;
+        }
+        start += 1;
+        let end = atIndex + 1;
+        while (end < input.length && isEmailDomainCharacter(input[end])) {
+            end += 1;
+        }
+        const candidate = input.slice(start, end);
+        if (looksLikeEmailToken(candidate)) {
+            redacted += input.slice(cursor, start);
+            redacted += "[redacted_email]";
+            cursor = end;
+            continue;
+        }
+        redacted += input.slice(cursor, atIndex + 1);
+        cursor = atIndex + 1;
+    }
+    return redacted;
+}
 function sanitizeCommonSensitiveTokens(input) {
-    const withoutEmails = input.replaceAll(EMAIL_PATTERN, "[redacted_email]");
+    const withoutEmails = redactEmailTokens(input);
     const withoutBearer = withoutEmails.replaceAll(BEARER_TOKEN_PATTERN, "bearer [redacted_token]");
     return withoutBearer.replaceAll(PRIVATE_IP_PATTERN, "[redacted_ip]");
 }
@@ -1342,4 +1423,4 @@ export async function emitTelemetryErrorEvent(context) {
     }
 }
 //# sourceMappingURL=runtime.js.map
-//# debugId=553d6dd0-b2d8-5ff4-8ea8-83dc48210694
+//# debugId=7fe9c7b3-ae13-549f-836e-c102d9920b7b