yuangs 5.40.0 → 5.41.0

package/dist/core/security/SecurityScanner.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultSecurityScanner = exports.SecurityScanner = exports.SecurityIssueType = void 0;
+var SecurityIssueType;
+(function (SecurityIssueType) {
+    SecurityIssueType["API_KEY"] = "api_key";
+    SecurityIssueType["EMAIL"] = "email";
+    SecurityIssueType["PHONE"] = "phone";
+    SecurityIssueType["TOKEN"] = "token";
+    SecurityIssueType["CREDENTIAL"] = "credential";
+    SecurityIssueType["SECRET"] = "secret";
+    SecurityIssueType["PASSWORD"] = "password";
+})(SecurityIssueType || (exports.SecurityIssueType = SecurityIssueType = {}));
+const DEFAULT_PATTERNS = {
+    [SecurityIssueType.API_KEY]: /(?:api[_-]?key|apikey)\s*[:=]\s*['"]?([a-zA-Z0-9_\-]{20,})['"]?/gi,
+    [SecurityIssueType.EMAIL]: /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g,
+    [SecurityIssueType.PHONE]: /(?:\+?86)?1[3-9]\d{9}/g,
+    [SecurityIssueType.TOKEN]: /(?:token|access[_-]?token)\s*[:=]\s*['"]?([a-zA-Z0-9_\-]{20,})['"]?/gi,
+    [SecurityIssueType.CREDENTIAL]: /(?:credential|password)\s*[:=]\s*['"]?([a-zA-Z0-9_\-]{8,})['"]?/gi,
+    [SecurityIssueType.SECRET]: /(?:secret)\s*[:=]\s*['"]?([a-zA-Z0-9_\-]{20,})['"]?/gi,
+    [SecurityIssueType.PASSWORD]: /(?:password)\s*[:=]\s*['"]?([a-zA-Z0-9_\-]{8,})['"]?/gi,
+};
+const DEFAULT_WHITELIST = [
+    'example@example.com',
+    'test@test.com',
+    'user@user.com',
+    'localhost',
+    '127.0.0.1',
+    '0.0.0.0',
+    '::1',
+];
+class SecurityScanner {
+    patterns;
+    whitelist;
+    constructor(options = {}) {
+        this.patterns = options.patterns ?? DEFAULT_PATTERNS;
+        this.whitelist = new Set(options.whitelist ?? DEFAULT_WHITELIST);
+    }
+    addToWhitelist(...items) {
+        items.forEach(item => this.whitelist.add(item));
+    }
+    isInWhitelist(match) {
+        return this.whitelist.has(match);
+    }
+    scan(content, filePath) {
+        const issues = [];
+        const lines = content.split('\n');
+        for (const [type, pattern] of Object.entries(this.patterns)) {
+            pattern.lastIndex = 0;
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i];
+                pattern.lastIndex = 0;
+                let match;
+                while ((match = pattern.exec(line)) !== null) {
+                    const matchedText = match[1] || match[0];
+                    if (this.isInWhitelist(matchedText)) {
+                        continue;
+                    }
+                    issues.push({
+                        type: type,
+                        match: matchedText,
+                        file: filePath,
+                        line: i + 1,
+                        description: this.getIssueDescription(type),
+                    });
+                }
+            }
+        }
+        return issues;
+    }
+    scanMultiple(files) {
+        const allIssues = [];
+        for (const [filePath, content] of files.entries()) {
+            const issues = this.scan(content, filePath);
+            allIssues.push(...issues);
+        }
+        return allIssues;
+    }
+    redact(content) {
+        let redacted = content;
+        for (const pattern of Object.values(this.patterns)) {
+            pattern.lastIndex = 0;
+            redacted = redacted.replace(pattern, (match) => {
+                if (this.isInWhitelist(match)) {
+                    return match;
+                }
+                return match.replace(/[a-zA-Z0-9]/g, '*').substring(0, Math.min(match.length, 10));
+            });
+        }
+        return redacted;
+    }
+    scanAndRedact(content, filePath) {
+        const issues = this.scan(content, filePath);
+        const redactedContent = issues.length > 0 ? this.redact(content) : content;
+        const summary = this.generateSummary(issues, filePath);
+        return {
+            issues,
+            summary,
+            redactedContent,
+        };
+    }
+    getIssueDescription(type) {
+        switch (type) {
+            case SecurityIssueType.API_KEY:
+                return 'Potential API key detected';
+            case SecurityIssueType.EMAIL:
+                return 'Email address detected';
+            case SecurityIssueType.PHONE:
+                return 'Phone number detected';
+            case SecurityIssueType.TOKEN:
+                return 'Potential access token detected';
+            case SecurityIssueType.CREDENTIAL:
+                return 'Potential credential detected';
+            case SecurityIssueType.SECRET:
+                return 'Potential secret detected';
+            case SecurityIssueType.PASSWORD:
+                return 'Potential password detected';
+        }
+    }
+    generateSummary(issues, filePath) {
+        if (issues.length === 0) {
+            return `No security issues found in ${filePath}`;
+        }
+        const typeCount = {};
+        for (const issue of issues) {
+            typeCount[issue.type] = (typeCount[issue.type] || 0) + 1;
+        }
+        const typeSummary = Object.entries(typeCount)
+            .map(([type, count]) => `${type}: ${count}`)
+            .join(', ');
+        return `Found ${issues.length} security issue(s) in ${filePath}: ${typeSummary}`;
+    }
+}
+exports.SecurityScanner = SecurityScanner;
+exports.defaultSecurityScanner = new SecurityScanner();
+//# sourceMappingURL=SecurityScanner.js.map

package/dist/core/security/SecurityScanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityScanner.js","sourceRoot":"","sources":["../../../src/core/security/SecurityScanner.ts"],"names":[],"mappings":";;;AAAA,IAAY,iBAQX;AARD,WAAY,iBAAiB;IACzB,wCAAmB,CAAA;IACnB,oCAAe,CAAA;IACf,oCAAe,CAAA;IACf,oCAAe,CAAA;IACf,8CAAyB,CAAA;IACzB,sCAAiB,CAAA;IACjB,0CAAqB,CAAA;AACzB,CAAC,EARW,iBAAiB,iCAAjB,iBAAiB,QAQ5B;AAqBD,MAAM,gBAAgB,GAAsC;IACxD,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,mEAAmE;IAChG,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,iDAAiD;IAC5E,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,wBAAwB;IACnD,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,uEAAuE;IAClG,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,mEAAmE;IACnG,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,uDAAuD;IACnF,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,wDAAwD;CACzF,CAAC;AAEF,MAAM,iBAAiB,GAAG;IACtB,qBAAqB;IACrB,eAAe;IACf,eAAe;IACf,WAAW;IACX,WAAW;IACX,SAAS;IACT,KAAK;CACR,CAAC;AAEF,MAAa,eAAe;IAChB,QAAQ,CAAoC;IAC5C,SAAS,CAAc;IAE/B,YAAY,UAAkC,EAAE;QAC5C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC;QACrD,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC;IACrE,CAAC;IAED,cAAc,CAAC,GAAG,KAAe;QAC7B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,aAAa,CAAC,KAAa;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,QAAgB;QAClC,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAEtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;gBAEtB,IAAI,KAAK,CAAC;gBACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;oBAEzC,IAAI,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;wBAClC,SAAS;oBACb,CAAC;oBAED,MAAM,CAAC,IAAI,CAAC;wBACR,IAAI,EAAE,IAAyB;wBAC/B,KAAK,EAAE,WAAW;wBAClB,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,WAAW,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAyB,CAAC;qBACnE,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,YAAY,CAAC,KAA0B;QACnC,MAAM,SAAS,GAAoB,EAAE,CAAC;QAEtC,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC5C,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,OAAe;QAClB,IAAI,QAAQ,GAAG,OAAO,CAAC;QAEvB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3C,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC5B,OAAO,KAAK,CAAC;gBACjB,CAAC;gBACD,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YACvF,CAAC,CAAC,CAAC;QACP,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,aAAa,CAAC,OAAe,EAAE,QAAgB;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEvD,OAAO;YACH,MAAM;YACN,OAAO;YACP,eAAe;SAClB,CAAC;IACN,CAAC;IAEO,mBAAmB,CAAC,IAAuB;QAC/C,QAAQ,IAAI,EAAE,CAAC;YACX,KAAK,iBAAiB,CAAC,OAAO;gBAC1B,OAAO,4BAA4B,CAAC;YACxC,KAAK,iBAAiB,CAAC,KAAK;gBACxB,OAAO,wBAAwB,CAAC;YACpC,KAAK,iBAAiB,CAAC,KAAK;gBACxB,OAAO,uBAAuB,CAAC;YACnC,KAAK,iBAAiB,CAAC,KAAK;gBACxB,OAAO,iCAAiC,CAAC;YAC7C,KAAK,iBAAiB,CAAC,UAAU;gBAC7B,OAAO,+BAA+B,CAAC;YAC3C,KAAK,iBAAiB,CAAC,MAAM;gBACzB,OAAO,2BAA2B,CAAC;YACvC,KAAK,iBAAiB,CAAC,QAAQ;gBAC3B,OAAO,6BAA6B,CAAC;QAC7C,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,MAAuB,EAAE,QAAgB;QAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,+BAA+B,QAAQ,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,SAAS,GAAsC,EAAS,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC;aAC3C,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhB,OAAO,SAAS,MAAM,CAAC,MAAM,yBAAyB,QAAQ,KAAK,WAAW,EAAE,CAAC;IACrF,CAAC;CACJ;AA5HD,0CA4HC;AAEY,QAAA,sBAAsB,GAAG,IAAI,eAAe,EAAE,CAAC"}

package/dist/core/security/index.d.ts

@@ -0,0 +1 @@
+export * from './SecurityScanner';

package/dist/core/security/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./SecurityScanner"), exports);
+//# sourceMappingURL=index.js.map

package/dist/core/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/security/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "yuangs",
-  "version": "5.40.0",
+  "version": "5.41.0",
   "description": "苑广山的个人应用集合 CLI（彩色版）",
   "author": "苑广山",
   "license": "ISC",
@@ -49,6 +49,7 @@
     "marked-terminal": "^7.3.0",
     "open": "^11.0.0",
     "ora": "^5.4.1",
+    "p-limit": "^7.2.0",
     "socket.io": "^4.8.3",
     "ssh2": "^1.17.0",
     "yuangs": "^2.29.0",