gencow 0.1.111 → 0.1.112

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "gencow",
-    "version": "0.1.111",
+    "version": "0.1.112",
     "description": "Gencow — AI Backend Engine",
     "type": "module",
     "bin": {

package/server/index.js

@@ -81511,6 +81511,110 @@ function findTsFiles(dir) {
   }
   return results;
 }
+function auditAIBypass(functionsDir) {
+  const issues = [];
+  try {
+    const fs2 = __require("fs");
+    const path2 = __require("path");
+    const files = findTsFiles(functionsDir);
+    const SUSPECT_FILENAMES = /* @__PURE__ */ new Set([
+      "openai-direct.ts",
+      "openai-direct.tsx",
+      "ai-wrapper.ts",
+      "ai-wrapper.tsx",
+      "ai-helper.ts",
+      "ai-helper.tsx",
+      "ai-client.ts",
+      "ai-client.tsx",
+      "gpt.ts",
+      "gpt.tsx",
+      "openai.ts",
+      "openai.tsx",
+      "llm.ts",
+      "llm.tsx"
+    ]);
+    const DIRECT_OPENAI_FETCH = /fetch\s*\(\s*[`"']https?:\/\/api\.openai\.com/;
+    const DIRECT_OPENAI_CONSTRUCTOR = /new\s+OpenAI\s*\(/;
+    const INLINE_AI_FUNC = /(?:async\s+)?function\s+(?:callGPT|callOpenAI|callAI|fetchGPT|aiCall|directAI)\s*\(/;
+    const OPENAI_IMPORT = /(?:import|require)\s*\(?.*['"]openai['"]/;
+    for (const file3 of files) {
+      const basename = path2.basename(file3);
+      const relPath = path2.relative(functionsDir, file3);
+      if (basename === "ai.ts") continue;
+      if (SUSPECT_FILENAMES.has(basename)) {
+        issues.push({
+          file: relPath,
+          line: 0,
+          snippet: `\uD30C\uC77C\uBA85 "${basename}" \u2014 AI \uC6B0\uD68C \uB798\uD37C \uC758\uC2EC`,
+          type: "suspect-file"
+        });
+      }
+      const content = fs2.readFileSync(file3, "utf-8");
+      const lines = content.split("\n");
+      for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        const trimmed = line.trim();
+        if (trimmed.startsWith("//") || trimmed.startsWith("*") || trimmed.startsWith("/*")) continue;
+        if (DIRECT_OPENAI_FETCH.test(line)) {
+          issues.push({
+            file: relPath,
+            line: i + 1,
+            snippet: trimmed.slice(0, 100),
+            type: "direct-fetch"
+          });
+        }
+        if (DIRECT_OPENAI_CONSTRUCTOR.test(line)) {
+          issues.push({
+            file: relPath,
+            line: i + 1,
+            snippet: trimmed.slice(0, 100),
+            type: "openai-constructor"
+          });
+        }
+        if (INLINE_AI_FUNC.test(line)) {
+          issues.push({
+            file: relPath,
+            line: i + 1,
+            snippet: trimmed.slice(0, 100),
+            type: "inline-ai-func"
+          });
+        }
+        if (OPENAI_IMPORT.test(line)) {
+          issues.push({
+            file: relPath,
+            line: i + 1,
+            snippet: trimmed.slice(0, 100),
+            type: "openai-import"
+          });
+        }
+      }
+    }
+  } catch {
+  }
+  return { issues };
+}
+function printAIBypassReport(result) {
+  if (result.issues.length === 0) return;
+  const typeLabels = {
+    "suspect-file": "\u{1F5C2}\uFE0F  AI \uC6B0\uD68C \uB798\uD37C \uD30C\uC77C",
+    "direct-fetch": "\u{1F534} OpenAI API \uC9C1\uC811 \uD638\uCD9C",
+    "openai-constructor": "\u{1F534} OpenAI \uC0DD\uC131\uC790 \uC9C1\uC811 \uC0AC\uC6A9",
+    "inline-ai-func": "\u26A0\uFE0F  \uC778\uB77C\uC778 AI \uD568\uC218 \uC815\uC758",
+    "openai-import": "\u26A0\uFE0F  openai \uD328\uD0A4\uC9C0 \uC9C1\uC811 import"
+  };
+  console.log(`
+[auditor] \u{1F916} AI \uC6B0\uD68C \uD328\uD134 \uAC10\uC9C0 (${result.issues.length}\uAC74):`);
+  for (const issue3 of result.issues) {
+    const label = typeLabels[issue3.type] || "\u26A0\uFE0F  \uAE30\uD0C0";
+    const loc = issue3.line > 0 ? `${issue3.file}:${issue3.line}` : issue3.file;
+    console.log(`[auditor]   ${label} \u2014 ${loc}`);
+    console.log(`[auditor]     ${issue3.snippet}`);
+  }
+  console.log(`[auditor]   \u2192 AI \uD638\uCD9C\uC740 \uBC18\uB4DC\uC2DC import { ai } from "./ai" \uB97C \uC0AC\uC6A9\uD558\uC138\uC694.`);
+  console.log(`[auditor]   \u2192 ai.ts\uB294 \uB85C\uCEEC/\uD074\uB77C\uC6B0\uB4DC \uC790\uB3D9 \uC804\uD658\uC744 \uC9C0\uC6D0\uD569\uB2C8\uB2E4.`);
+  console.log(`[auditor]   \u2192 fetch()\uB85C OpenAI\uB97C \uC9C1\uC811 \uD638\uCD9C\uD558\uBA74 \uD074\uB77C\uC6B0\uB4DC\uC5D0\uC11C \uACFC\uAE08\uC774 \uC548 \uB429\uB2C8\uB2E4.
+`);
+}
 
 // ../server/src/admin.ts
 init_src();
@@ -82395,6 +82499,8 @@ async function main() {
       }
       const selfFetchResult = auditSelfFetch(functionsPath);
       printSelfFetchReport(selfFetchResult);
+      const aiBypassResult = auditAIBypass(functionsPath);
+      printAIBypassReport(aiBypassResult);
       const projectDir = resolve6(functionsPath, "..");
       const frontendResult = auditFrontendAntiPatterns(projectDir);
       printFrontendAntiPatternReport(frontendResult);