yunti-browser-runtime 0.1.2 → 0.2.0

package/mcp/redaction.js

@@ -1,5 +1,14 @@
 const SENSITIVE_KEY_RE =
   /cookie|authorization|token|secret|password|passwd|pwd|sid|session|ticket|tgc|captcha|验证码|密码/i
+const JWT_RE = /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g
+const BEARER_RE = /\bBearer\s+[A-Za-z0-9._~+/=-]{12,}\b/gi
+const PRIVATE_KEY_RE = /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g
+const LONG_RANDOM_RE = /\b[A-Za-z0-9_-]{32,}\b/g
+const EMAIL_RE = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi
+const PHONE_RE = /(?:\+?\d[\d\s().-]{7,}\d)/g
+const PAYMENT_CARD_RE = /(?:^|[^\d])((?:\d[ -]?){13,19})(?=$|[^\d])/g
+const ADDRESS_RE =
+  /\b\d{1,6}\s+[\p{L}0-9 .'-]{2,}\s+(street|st|road|rd|avenue|ave|lane|ln|boulevard|blvd|drive|dr|way|court|ct)\b|[\p{Script=Han}]{1,20}(省|市|区|县|路|街|号楼|单元|室)/giu
 
 export function clampNumber(value, min, max, fallback = min) {
   const number = Number(value)
@@ -17,12 +26,52 @@ export function redactValue(key, value) {
 }
 
 export function redactLikelySecrets(text) {
-  return truncateText(text, 1500).replace(
-    /(cookie|authorization|token|secret|password|passwd|pwd|sid|session|ticket|tgc|captcha)(["'\s:=]+)([^"',\s}&]+)/gi,
+  return redactLikelySensitiveText(text, 1500)
+}
+
+export function redactLikelySensitiveText(text, max = 1500) {
+  const redacted = truncateText(text, max)
+    .replace(PRIVATE_KEY_RE, "[REDACTED_PRIVATE_KEY]")
+    .replace(JWT_RE, "[REDACTED_JWT]")
+    .replace(BEARER_RE, "Bearer [REDACTED]")
+    .replace(
+      /(cookie|authorization|token|secret|password|passwd|pwd|sid|session|ticket|tgc|captcha|api[-_]?key)(["'\s:=]+)([^"',\s}&]+)/gi,
+      "$1$2[REDACTED]"
+    )
+    .replace(LONG_RANDOM_RE, "[REDACTED_TOKEN]")
+    .replace(EMAIL_RE, "[REDACTED_EMAIL]")
+    .replace(PAYMENT_CARD_RE, (match, digitsPart) => {
+      const digits = String(digitsPart || "").replace(/\D/g, "")
+      if (!isPaymentCardLike(digits)) return match
+      return match.replace(digitsPart, "[REDACTED_PAYMENT_CARD]")
+    })
+    .replace(PHONE_RE, "[REDACTED_PHONE]")
+    .replace(ADDRESS_RE, "[REDACTED_ADDRESS]")
+  return redacted.replace(
+    /\b(authorization|cookie|token|secret|password|passwd|pwd|sid|session|ticket|tgc|captcha|api[-_]?key)(["'\s:=]+)\[REDACTED\](?:\s+\[REDACTED(?:_[A-Z]+)?\])+/gi,
     "$1$2[REDACTED]"
   )
 }
 
+function isPaymentCardLike(digits) {
+  return digits.length >= 13 && digits.length <= 19 && passesLuhn(digits)
+}
+
+function passesLuhn(digits) {
+  let sum = 0
+  let shouldDouble = false
+  for (let index = digits.length - 1; index >= 0; index -= 1) {
+    let digit = Number(digits[index])
+    if (shouldDouble) {
+      digit *= 2
+      if (digit > 9) digit -= 9
+    }
+    sum += digit
+    shouldDouble = !shouldDouble
+  }
+  return sum % 10 === 0
+}
+
 export function sanitizeUrl(rawUrl) {
   try {
     const url = new URL(String(rawUrl || ""))
@@ -51,7 +100,7 @@ export function sanitizeRequestBody(body) {
     }
   }
   if (Number.isFinite(Number(body.rawBytes))) out.rawBytes = Number(body.rawBytes)
-  if (typeof body.preview === "string") out.preview = redactLikelySecrets(body.preview)
+  if (typeof body.preview === "string") out.preview = redactLikelySensitiveText(body.preview)
   return Object.keys(out).length ? out : null
 }
 

package/mcp/server.js

@@ -214,6 +214,7 @@ export async function runStdio() {
     console.error(
       `[yunti-browser-runtime] bridge ${bridge.mode} on http://${bridge.host}:${bridge.port}`
     )
+    console.error(`[yunti-browser-runtime] console http://${bridge.host}:${bridge.port}/console`)
     if (bridge.mode === "owner") {
       if (bridge.authRequired) {
         console.error(
@@ -253,6 +254,7 @@ export async function runBridgeOnly() {
   console.error(
     `[yunti-browser-runtime] bridge ${bridge.mode} on http://${bridge.host}:${bridge.port}`
   )
+  console.error(`[yunti-browser-runtime] console http://${bridge.host}:${bridge.port}/console`)
   if (bridge.mode === "owner") {
     if (bridge.authRequired) {
       console.error(