@wrongstack/telegram 0.317.0 → 0.318.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +8 -2
- package/package.json +3 -3
package/dist/index.js
CHANGED
|
@@ -1020,9 +1020,15 @@ var SENSITIVE_FLAG_PATTERNS = [
|
|
|
1020
1020
|
// is daily. The lookbehind `(?<![-\w])` rejects `-t` inside `--token`
|
|
1021
1021
|
// where the preceding char is another `-`.
|
|
1022
1022
|
/(?<![-\w])-t(?:[\s=][^\s,]+)/g,
|
|
1023
|
-
|
|
1023
|
+
// `-a` is redis-cli auth (`redis-cli -a <password>`); synced with the
|
|
1024
|
+
// canonical redactCommand set (core observability / tools _redact-command),
|
|
1025
|
+
// which has always carried it. Same separated-form semantics as -p below.
|
|
1026
|
+
/(?<![-\w])-(?:p|password|a)(?:[\s=][^\s,]+)/gi,
|
|
1024
1027
|
// env-var style: TOKEN=x, API_KEY=y, DATABASE_URL=z, …
|
|
1025
|
-
|
|
1028
|
+
// PASSPHRASE is part of the canonical redactCommand env set; a short
|
|
1029
|
+
// (sub-20-char) value is not caught by the core scrubber's high_entropy_env
|
|
1030
|
+
// pattern, so this labelled-flag layer is the only guard for it.
|
|
1031
|
+
/(?:TOKEN|API_KEY|API_SECRET|AUTH_TOKEN|GITHUB_TOKEN|GH_TOKEN|BEARER|JWT|OAUTH|CREDENTIAL|SECRET|PRIVATE_KEY|PASSWORD|PASSWD|PASSPHRASE|DATABASE_URL|CONNECTION_STRING)\s*[=:][^\s,]+/gi,
|
|
1026
1032
|
// Generic high-entropy look — only when preceded by a flag name.
|
|
1027
1033
|
/--\w*(?:token|key|secret|password|passwd|auth|credential)\w*[=\s,][A-Za-z0-9+/=]{32,}/g
|
|
1028
1034
|
];
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@wrongstack/telegram",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.318.0",
|
|
4
4
|
"license": "MIT",
|
|
5
5
|
"description": "WrongStack plugin — Telegram bridge: send messages, receive prompts, get notified.",
|
|
6
6
|
"repository": {
|
|
@@ -26,11 +26,11 @@
|
|
|
26
26
|
"!dist/**/*.map"
|
|
27
27
|
],
|
|
28
28
|
"peerDependencies": {
|
|
29
|
-
"@wrongstack/core": "0.
|
|
29
|
+
"@wrongstack/core": "0.318.0"
|
|
30
30
|
},
|
|
31
31
|
"devDependencies": {
|
|
32
32
|
"@types/node": "^26.2.0",
|
|
33
|
-
"@wrongstack/core": "0.
|
|
33
|
+
"@wrongstack/core": "0.318.0",
|
|
34
34
|
"typescript": "^7.0.2"
|
|
35
35
|
},
|
|
36
36
|
"publishConfig": {
|