@agent-native/dispatch 0.15.2 → 0.15.3

package/dist/actions/provider-api-audit.js

@@ -1,74 +0,0 @@
-const REDACTED = "[redacted]";
-const CREDENTIAL_NAME = /^(?:api[-_]?key|access[-_]?token|auth(?:orization)?|bearer|credential|password|secret|signature|sig|token|x-amz-credential|x-amz-signature)$/i;
-function decodePathSegment(segment) {
-    try {
-        return decodeURIComponent(segment);
-    }
-    catch {
-        return segment;
-    }
-}
-function looksLikeCredentialValue(segment) {
-    const value = decodePathSegment(segment);
-    if (/^eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(value)) {
-        return true;
-    }
-    if (/^(?:sk|pk|rk|ghp|github_pat|xox[baprs]|ya29|AIza)[-_][A-Za-z0-9_-]+$/i.test(value)) {
-        return true;
-    }
-    return value.length >= 32 && /^[A-Za-z0-9._~-]+$/.test(value);
-}
-function sanitizePathname(pathname) {
-    let redactNext = false;
-    return pathname
-        .split("/")
-        .map((segment) => {
-        if (!segment)
-            return segment;
-        const decoded = decodePathSegment(segment);
-        if (redactNext) {
-            redactNext = false;
-            return REDACTED;
-        }
-        const assignment = decoded.match(/^([^=:]+)([=:])(.+)$/);
-        if (assignment && CREDENTIAL_NAME.test(assignment[1])) {
-            return `${assignment[1]}${assignment[2]}${REDACTED}`;
-        }
-        if (CREDENTIAL_NAME.test(decoded)) {
-            redactNext = true;
-            return segment;
-        }
-        return looksLikeCredentialValue(segment) ? REDACTED : segment;
-    })
-        .join("/");
-}
-function sanitizeQuery(search) {
-    if (!search)
-        return "";
-    const redacted = Array.from(new URLSearchParams(search).keys(), (key) => {
-        const safeKey = encodeURIComponent(key.slice(0, 100));
-        return `${safeKey}=${REDACTED}`;
-    });
-    return redacted.length > 0 ? `?${redacted.join("&")}` : "";
-}
-export function sanitizeProviderApiAuditPath(path) {
-    const raw = String(path ?? "");
-    const withoutFragment = raw.split("#", 1)[0] ?? "";
-    try {
-        const url = new URL(withoutFragment);
-        return `${url.protocol}//${url.host}${sanitizePathname(url.pathname)}${sanitizeQuery(url.search)}`;
-    }
-    catch {
-        const queryIndex = withoutFragment.indexOf("?");
-        const pathname = queryIndex >= 0 ? withoutFragment.slice(0, queryIndex) : withoutFragment;
-        const search = queryIndex >= 0 ? withoutFragment.slice(queryIndex + 1) : "";
-        return `${sanitizePathname(pathname)}${sanitizeQuery(search)}`;
-    }
-}
-export function buildProviderApiAuditSummary(args) {
-    const method = String(args.method || "GET").toUpperCase();
-    const provider = String(args.provider ?? "");
-    const path = sanitizeProviderApiAuditPath(args.path);
-    return `${method} ${provider} ${path}`.slice(0, 200);
-}
-//# sourceMappingURL=provider-api-audit.js.map

package/dist/actions/provider-api-audit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider-api-audit.js","sourceRoot":"","sources":["../../src/actions/provider-api-audit.ts"],"names":[],"mappings":"AAAA,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,eAAe,GACnB,+IAA+I,CAAC;AAElJ,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAC/C,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,qDAAqD,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,uEAAuE,CAAC,IAAI,CAC1E,KAAK,CACN,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,OAAO,QAAQ;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC;QAC7B,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,UAAU,EAAE,CAAC;YACf,UAAU,GAAG,KAAK,CAAC;YACnB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACzD,IAAI,UAAU,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YACvD,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAChE,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACtE,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAa;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/B,MAAM,eAAe,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QACrC,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,QAAQ,GACZ,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3E,MAAM,MAAM,GAAG,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAI5C;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,GAAG,MAAM,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC","sourcesContent":["const REDACTED = \"[redacted]\";\n\nconst CREDENTIAL_NAME =\n  /^(?:api[-_]?key|access[-_]?token|auth(?:orization)?|bearer|credential|password|secret|signature|sig|token|x-amz-credential|x-amz-signature)$/i;\n\nfunction decodePathSegment(segment: string): string {\n  try {\n    return decodeURIComponent(segment);\n  } catch {\n    return segment;\n  }\n}\n\nfunction looksLikeCredentialValue(segment: string): boolean {\n  const value = decodePathSegment(segment);\n  if (/^eyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+$/.test(value)) {\n    return true;\n  }\n  if (\n    /^(?:sk|pk|rk|ghp|github_pat|xox[baprs]|ya29|AIza)[-_][A-Za-z0-9_-]+$/i.test(\n      value,\n    )\n  ) {\n    return true;\n  }\n  return value.length >= 32 && /^[A-Za-z0-9._~-]+$/.test(value);\n}\n\nfunction sanitizePathname(pathname: string): string {\n  let redactNext = false;\n  return pathname\n    .split(\"/\")\n    .map((segment) => {\n      if (!segment) return segment;\n      const decoded = decodePathSegment(segment);\n      if (redactNext) {\n        redactNext = false;\n        return REDACTED;\n      }\n\n      const assignment = decoded.match(/^([^=:]+)([=:])(.+)$/);\n      if (assignment && CREDENTIAL_NAME.test(assignment[1]!)) {\n        return `${assignment[1]}${assignment[2]}${REDACTED}`;\n      }\n      if (CREDENTIAL_NAME.test(decoded)) {\n        redactNext = true;\n        return segment;\n      }\n      return looksLikeCredentialValue(segment) ? REDACTED : segment;\n    })\n    .join(\"/\");\n}\n\nfunction sanitizeQuery(search: string): string {\n  if (!search) return \"\";\n  const redacted = Array.from(new URLSearchParams(search).keys(), (key) => {\n    const safeKey = encodeURIComponent(key.slice(0, 100));\n    return `${safeKey}=${REDACTED}`;\n  });\n  return redacted.length > 0 ? `?${redacted.join(\"&\")}` : \"\";\n}\n\nexport function sanitizeProviderApiAuditPath(path: unknown): string {\n  const raw = String(path ?? \"\");\n  const withoutFragment = raw.split(\"#\", 1)[0] ?? \"\";\n\n  try {\n    const url = new URL(withoutFragment);\n    return `${url.protocol}//${url.host}${sanitizePathname(url.pathname)}${sanitizeQuery(url.search)}`;\n  } catch {\n    const queryIndex = withoutFragment.indexOf(\"?\");\n    const pathname =\n      queryIndex >= 0 ? withoutFragment.slice(0, queryIndex) : withoutFragment;\n    const search = queryIndex >= 0 ? withoutFragment.slice(queryIndex + 1) : \"\";\n    return `${sanitizePathname(pathname)}${sanitizeQuery(search)}`;\n  }\n}\n\nexport function buildProviderApiAuditSummary(args: {\n  method?: unknown;\n  provider?: unknown;\n  path?: unknown;\n}): string {\n  const method = String(args.method || \"GET\").toUpperCase();\n  const provider = String(args.provider ?? \"\");\n  const path = sanitizeProviderApiAuditPath(args.path);\n  return `${method} ${provider} ${path}`.slice(0, 200);\n}\n"]}

package/src/actions/provider-api-audit.ts

@@ -1,88 +0,0 @@
-const REDACTED = "[redacted]";
-
-const CREDENTIAL_NAME =
-  /^(?:api[-_]?key|access[-_]?token|auth(?:orization)?|bearer|credential|password|secret|signature|sig|token|x-amz-credential|x-amz-signature)$/i;
-
-function decodePathSegment(segment: string): string {
-  try {
-    return decodeURIComponent(segment);
-  } catch {
-    return segment;
-  }
-}
-
-function looksLikeCredentialValue(segment: string): boolean {
-  const value = decodePathSegment(segment);
-  if (/^eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(value)) {
-    return true;
-  }
-  if (
-    /^(?:sk|pk|rk|ghp|github_pat|xox[baprs]|ya29|AIza)[-_][A-Za-z0-9_-]+$/i.test(
-      value,
-    )
-  ) {
-    return true;
-  }
-  return value.length >= 32 && /^[A-Za-z0-9._~-]+$/.test(value);
-}
-
-function sanitizePathname(pathname: string): string {
-  let redactNext = false;
-  return pathname
-    .split("/")
-    .map((segment) => {
-      if (!segment) return segment;
-      const decoded = decodePathSegment(segment);
-      if (redactNext) {
-        redactNext = false;
-        return REDACTED;
-      }
-
-      const assignment = decoded.match(/^([^=:]+)([=:])(.+)$/);
-      if (assignment && CREDENTIAL_NAME.test(assignment[1]!)) {
-        return `${assignment[1]}${assignment[2]}${REDACTED}`;
-      }
-      if (CREDENTIAL_NAME.test(decoded)) {
-        redactNext = true;
-        return segment;
-      }
-      return looksLikeCredentialValue(segment) ? REDACTED : segment;
-    })
-    .join("/");
-}
-
-function sanitizeQuery(search: string): string {
-  if (!search) return "";
-  const redacted = Array.from(new URLSearchParams(search).keys(), (key) => {
-    const safeKey = encodeURIComponent(key.slice(0, 100));
-    return `${safeKey}=${REDACTED}`;
-  });
-  return redacted.length > 0 ? `?${redacted.join("&")}` : "";
-}
-
-export function sanitizeProviderApiAuditPath(path: unknown): string {
-  const raw = String(path ?? "");
-  const withoutFragment = raw.split("#", 1)[0] ?? "";
-
-  try {
-    const url = new URL(withoutFragment);
-    return `${url.protocol}//${url.host}${sanitizePathname(url.pathname)}${sanitizeQuery(url.search)}`;
-  } catch {
-    const queryIndex = withoutFragment.indexOf("?");
-    const pathname =
-      queryIndex >= 0 ? withoutFragment.slice(0, queryIndex) : withoutFragment;
-    const search = queryIndex >= 0 ? withoutFragment.slice(queryIndex + 1) : "";
-    return `${sanitizePathname(pathname)}${sanitizeQuery(search)}`;
-  }
-}
-
-export function buildProviderApiAuditSummary(args: {
-  method?: unknown;
-  provider?: unknown;
-  path?: unknown;
-}): string {
-  const method = String(args.method || "GET").toUpperCase();
-  const provider = String(args.provider ?? "");
-  const path = sanitizeProviderApiAuditPath(args.path);
-  return `${method} ${provider} ${path}`.slice(0, 200);
-}