@wirecat/cli-template 0.13.1 → 0.14.0

package/dist/bundle/{chunk-MJRSEUKG.js → chunk-VXOR76ZL.js}

@@ -1,21 +1,25 @@
 import { createRequire as __bundleRequire } from "node:module";
 const require = __bundleRequire(import.meta.url);
+import {
+  secretNamed,
+  withoutSecrets
+} from "./chunk-3WDYHOAF.js";
 import {
   errorCodes,
   isContentKey
-} from "./chunk-EFHLQXG6.js";
+} from "./chunk-IOJ2DTCY.js";
 import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.495.0_@wirecat+cli-base@0.65.0_commander@15.0.0_esbuild@0.28.2_type_24cca5e5c8b0984f2f26e7d1ba6b6d47/node_modules/@wirecat/cli-core/dist/runs/run-context.js
+// node_modules/.pnpm/@wirecat+cli-core@0.584.0_@wirecat+cli-base@0.77.1_commander@15.0.0_esbuild@0.28.2_type_ab8c0b68b8b4768d5b87d6e249ef10da/node_modules/@wirecat/cli-core/dist/runs/run-context.js
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash } from "node:crypto";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.495.0_@wirecat+cli-base@0.65.0_commander@15.0.0_esbuild@0.28.2_type_24cca5e5c8b0984f2f26e7d1ba6b6d47/node_modules/@wirecat/cli-core/dist/runs/error-detail.js
+// node_modules/.pnpm/@wirecat+cli-core@0.584.0_@wirecat+cli-base@0.77.1_commander@15.0.0_esbuild@0.28.2_type_ab8c0b68b8b4768d5b87d6e249ef10da/node_modules/@wirecat/cli-core/dist/runs/error-detail.js
 import { homedir } from "node:os";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.495.0_@wirecat+cli-base@0.65.0_commander@15.0.0_esbuild@0.28.2_type_24cca5e5c8b0984f2f26e7d1ba6b6d47/node_modules/@wirecat/cli-core/dist/errors/failures.js
+// node_modules/.pnpm/@wirecat+cli-core@0.584.0_@wirecat+cli-base@0.77.1_commander@15.0.0_esbuild@0.28.2_type_ab8c0b68b8b4768d5b87d6e249ef10da/node_modules/@wirecat/cli-core/dist/errors/failures.js
 var isCliFailure = /* @__PURE__ */ __name((value) => value instanceof Error && value.name === "CliError" && errorCodes.includes(value.code), "isCliFailure");
 var isCommanderFailure = /* @__PURE__ */ __name((value) => {
   const { code, exitCode } = value ?? {};
@@ -23,7 +27,7 @@ var isCommanderFailure = /* @__PURE__ */ __name((value) => {
 }, "isCommanderFailure");
 var failureKey = /* @__PURE__ */ __name((error) => isCliFailure(error) ? error.code : error instanceof Error ? error.name : "error", "failureKey");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.495.0_@wirecat+cli-base@0.65.0_commander@15.0.0_esbuild@0.28.2_type_24cca5e5c8b0984f2f26e7d1ba6b6d47/node_modules/@wirecat/cli-core/dist/runs/events.js
+// node_modules/.pnpm/@wirecat+cli-core@0.584.0_@wirecat+cli-base@0.77.1_commander@15.0.0_esbuild@0.28.2_type_ab8c0b68b8b4768d5b87d6e249ef10da/node_modules/@wirecat/cli-core/dist/runs/events.js
 var providerErrorKey = /* @__PURE__ */ __name((value) => typeof value === "string" && /^[A-Za-z][A-Za-z0-9._-]{0,63}$/.test(value) ? value : void 0, "providerErrorKey");
 var renderEvent = /* @__PURE__ */ __name((event) => {
   if (event.event === "warning") {
@@ -71,88 +75,7 @@ var MARK = { request: "\u2192", response: "\u2190", cache: "\u2022", warning: "!
 var age = /* @__PURE__ */ __name((ms) => ms < 1e3 ? `${ms}ms` : `${Math.round(ms / 1e3)}s`, "age");
 var size = /* @__PURE__ */ __name((bytes) => bytes < 1e3 ? `${bytes} B` : `${(bytes / 1e3).toFixed(1)} kB`, "size");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.495.0_@wirecat+cli-base@0.65.0_commander@15.0.0_esbuild@0.28.2_type_24cca5e5c8b0984f2f26e7d1ba6b6d47/node_modules/@wirecat/cli-core/dist/runs/secrets.js
-var SECRET_WORDS = /* @__PURE__ */ new Set([
-  "authorization",
-  "cookie",
-  "credential",
-  "credentials",
-  "passphrase",
-  "password",
-  "passwd",
-  "pwd",
-  "pass",
-  "passcode",
-  "pin",
-  "otp",
-  "2fa",
-  "secret",
-  "token",
-  "contrase\xF1a",
-  "contrasena",
-  "clave",
-  "\u043F\u0430\u0440\u043E\u043B\u044C",
-  "\u043F\u0438\u043D",
-  "\u043A\u043E\u0434",
-  ...["api", "auth", "service", "account", "db", "database", "priv", "private", "client"].map((word) => `${word}key`),
-  ...["db", "database", "key"].map((word) => `${word}pass`)
-]);
-var secretNamed = /* @__PURE__ */ __name((name) => {
-  const words = name.replace(/([a-z0-9])([A-Z])/g, "$1 $2").split(/[\s_.-]+/).map((word) => word.toLowerCase());
-  return words.some((word, at) => SECRET_WORDS.has(word) || SECRET_WORDS.has(word + (words[at + 1] ?? "")));
-}, "secretNamed");
-var START = "(?<![A-Za-z0-9_-])";
-var END = "(?![A-Za-z0-9_-])";
-var KNOWN_TOKENS = new RegExp(`${[
-  "gh[pousr]_[A-Za-z0-9]{36,}",
-  "github_pat_[A-Za-z0-9_]{22,}",
-  "sk-[A-Za-z0-9_-]{20,}",
-  "xox[abprs]-[A-Za-z0-9-]{10,}",
-  "(?:AKIA|ASIA)[A-Z0-9]{16}",
-  "AIza[A-Za-z0-9_-]{35}",
-  "(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{10,}",
-  "npm_[A-Za-z0-9]{36}",
-  "eyJ[A-Za-z0-9_-]{5,}\\.eyJ[A-Za-z0-9_-]{5,}\\.[A-Za-z0-9_-]*"
-].map((pattern) => `${START}${pattern}${END}`).join("|")}|(?<!\\d)\\d{8,10}:[A-Za-z0-9_-]{35}${END}`, "g");
-var PRIVATE_KEY = /-----BEGIN[A-Z ]* PRIVATE KEY-----[\s\S]*?(?:-----END[A-Z ]* PRIVATE KEY-----|$)/g;
-var SCHEME = /(?<![A-Za-z])(Bearer|Basic)(\s+)(?![A-Z]?[a-z]+(?![A-Za-z0-9]))[A-Za-z0-9._~+/=-]{8,}/g;
-var NAMED_PAIR = /(?<![\p{L}\p{N}])([\p{L}\p{N}_.-]*(?:token|pass|pwd|pin|otp|2fa|secret|credential|cookie|authorization|key|contrase|clave|пароль|пин|код)[\p{L}\p{N}_.-]*)(["']?\s*(?:=>|[:=])\s*["']?|\s+(?![\p{L}]+(?![\p{L}\p{N}])))((?:Bearer\s+|Basic\s+)?)([^\s"'&,;]+)/giu;
-var looksRandom = /* @__PURE__ */ __name((run) => {
-  if (run.length < 20)
-    return false;
-  const classes = [/[a-z]/, /[A-Z]/, /\d/, /[^A-Za-z0-9]/].filter((kind) => kind.test(run)).length;
-  if (classes < 3)
-    return false;
-  let switches = 0;
-  for (let at = 1; at < run.length; at++) {
-    const [before, after] = [run[at - 1], run[at]];
-    if (/[a-z]/.test(before) && /[A-Z]/.test(after) || /[A-Z]/.test(before) && /[a-z]/.test(after))
-      switches += 1;
-  }
-  if (switches / run.length < 0.15)
-    return false;
-  const pieces = run.match(/[A-Z]?[a-z]+|[A-Z]+(?![a-z])|\d+/g) ?? [];
-  if (pieces.join("").length / Math.max(pieces.length, 1) >= 2.75)
-    return false;
-  return entropy(run) >= 3.5;
-}, "looksRandom");
-var entropy = /* @__PURE__ */ __name((text) => {
-  const counts = /* @__PURE__ */ new Map();
-  for (const char of text)
-    counts.set(char, (counts.get(char) ?? 0) + 1);
-  let bits = 0;
-  for (const count of counts.values())
-    bits -= count / text.length * Math.log2(count / text.length);
-  return bits;
-}, "entropy");
-var withoutSecrets = /* @__PURE__ */ __name((text, mark = "[redacted]") => text.replace(PRIVATE_KEY, mark).replace(KNOWN_TOKENS, mark).replace(SCHEME, `$1$2${mark}`).replace(NAMED_PAIR, (whole, name, separator, scheme) => secretNamed(name) ? `${name}${separator}${scheme}${mark}` : whole).replace(/[!-~]{20,}/g, (token) => (
-  // A URL or a path is somebody's address, not a key; a credential in one is caught by the rules above.
-  token.includes("://") || /^(?:\/|~\/|\.\.?\/)/.test(token) ? token : token.replace(RUN, (run) => looksRandom(run) ? mark : run.replace(HEX, (hex) => entropy(hex) >= 3 ? mark : hex))
-)), "withoutSecrets");
-var RUN = /(?<![A-Za-z0-9_+/-])[A-Za-z0-9_+/-]{20,}/g;
-var HEX = /(?<![A-Za-z0-9])(?=[0-9]*[a-f])[0-9a-f]{20,}(?![A-Za-z0-9])/g;
-
-// node_modules/.pnpm/@wirecat+cli-core@0.495.0_@wirecat+cli-base@0.65.0_commander@15.0.0_esbuild@0.28.2_type_24cca5e5c8b0984f2f26e7d1ba6b6d47/node_modules/@wirecat/cli-core/dist/runs/error-detail.js
+// node_modules/.pnpm/@wirecat+cli-core@0.584.0_@wirecat+cli-base@0.77.1_commander@15.0.0_esbuild@0.28.2_type_ab8c0b68b8b4768d5b87d6e249ef10da/node_modules/@wirecat/cli-core/dist/runs/error-detail.js
 var MESSAGE_AT_MOST = 500;
 var CAUSES_AT_MOST = 5;
 var FRAMES_AT_MOST = 15;
@@ -253,14 +176,15 @@ var endpointTemplate = /* @__PURE__ */ __name((raw) => {
 }, "endpointTemplate");
 var INTERNATIONAL_PHONE = /\+\d[\d\s()-]{6,}\d/.source;
 var BARE_PHONE = /(^|[^\w-])\d{11,15}\b/.source;
+var MESSENGER_ID = /\b\d+(?:-\d+)?(?::\d+)?@(?:s\.whatsapp\.net|g\.us|c\.us|lid|broadcast|newsletter)\b/g;
 var redactText = /* @__PURE__ */ __name((text) => {
   const home = homedir();
   let out = home && home !== "/" ? text.split(home).join("~") : text;
-  out = withoutSecrets(out.replace(/"[^"\n]*"|“[^”\n]*”|«[^»\n]*»/g, '"[redacted]"')).replace(/\b(bearer|basic|token|key|password|secret)(\s*[:=]\s*|\s+)[^\s'"]+/gi, "$1$2[redacted]").replace(/[\w.+-]+@[\w-]+\.[\w.-]+/g, "[email]").replace(new RegExp(INTERNATIONAL_PHONE, "g"), "[number]").replace(new RegExp(BARE_PHONE, "g"), "$1[number]").replace(/\bbot\d+:[\w-]+/g, "bot[token]").replace(/\b\d{6,}:[\w-]{20,}\b/g, "[token]").replace(/(\?|&)[^\s#]*/g, "$1[redacted]").replace(/\b[A-Za-z0-9_-]{40,}\b/g, "[redacted]");
+  out = withoutSecrets(out.replace(/"[^"\n]*"|“[^”\n]*”|«[^»\n]*»/g, '"[redacted]"')).replace(/\b(bearer|basic|token|key|password|secret)(\s*[:=]\s*|\s+)[^\s'"]+/gi, "$1$2[redacted]").replace(MESSENGER_ID, "[id]").replace(/[\w.+-]+@[\w-]+\.[\w.-]+/g, "[email]").replace(new RegExp(INTERNATIONAL_PHONE, "g"), "[number]").replace(new RegExp(BARE_PHONE, "g"), "$1[number]").replace(/\bbot\d+:[\w-]+/g, "bot[token]").replace(/\b\d{6,}:[\w-]{20,}\b/g, "[token]").replace(/(\?|&)[^\s#]*/g, "$1[redacted]").replace(/\b[A-Za-z0-9_-]{40,}\b/g, "[redacted]");
   return out.length > MESSAGE_AT_MOST ? `${out.slice(0, MESSAGE_AT_MOST)}\u2026` : out;
 }, "redactText");
 
-// node_modules/.pnpm/@wirecat+cli-core@0.495.0_@wirecat+cli-base@0.65.0_commander@15.0.0_esbuild@0.28.2_type_24cca5e5c8b0984f2f26e7d1ba6b6d47/node_modules/@wirecat/cli-core/dist/runs/run-context.js
+// node_modules/.pnpm/@wirecat+cli-core@0.584.0_@wirecat+cli-base@0.77.1_commander@15.0.0_esbuild@0.28.2_type_ab8c0b68b8b4768d5b87d6e249ef10da/node_modules/@wirecat/cli-core/dist/runs/run-context.js
 var REDACTED = "[redacted]";
 var keepsSuccess = /* @__PURE__ */ __name(({ record, fromFlag, env, caller, persistent = false }) => {
   if (!record)

package/dist/bundle/{chunk-CXQXVKUY.js → chunk-YIVY2WI3.js}

@@ -4,7 +4,7 @@ import {
   __name
 } from "./chunk-ZVVMGPBJ.js";
 
-// node_modules/.pnpm/@wirecat+cli-core@0.495.0_@wirecat+cli-base@0.65.0_commander@15.0.0_esbuild@0.28.2_type_24cca5e5c8b0984f2f26e7d1ba6b6d47/node_modules/@wirecat/cli-core/dist/mcp/bot/instructions.js
+// node_modules/.pnpm/@wirecat+cli-core@0.584.0_@wirecat+cli-base@0.77.1_commander@15.0.0_esbuild@0.28.2_type_ab8c0b68b8b4768d5b87d6e249ef10da/node_modules/@wirecat/cli-core/dist/mcp/bot/instructions.js
 var botInstructions = /* @__PURE__ */ __name(({ command, name, profile, writes, skill }) => [
   `The owner's ${name} bot "${profile}", through the official Bot API \u2014 not the owner's personal account. What it writes, people see as the bot.`,
   "Use these tools to read the chats this bot is in, find a message or a person, and \u2014 when the profile allows \u2014 write as the bot.",