@akasecurity/cli 0.8.0

package/web-ui/web-ui/.next/server/chunks/640.js

@@ -0,0 +1 @@
+"use strict";exports.id=640,exports.ids=[640],exports.modules={59640:(a,b,c)=>{c.d(b,{sE:()=>n,E$:()=>m,SQ:()=>k});class d{match(a,b){if("keyword"!==b.matcher.type)return[];let{keywords:c,caseSensitive:d}=b.matcher,e=d?a:a.toLowerCase(),f=[];for(let a of c){let b=d?a:a.toLowerCase(),c=0;for(;c<e.length;){let d=e.indexOf(b,c);if(-1===d)break;f.push({start:d,end:d+a.length}),c=d+1}}return f}}class e{match(a,b){let c;if("regex"!==b.matcher.type)return[];let{pattern:d,flags:e,captureGroup:f}=b.matcher,g=new RegExp(d,e.includes("d")?e:`${e}d`),h=[];for(;null!==(c=g.exec(a));){let a=null!=f?c[f]:c[0];if(0===c[0].length&&g.lastIndex++,a&&h.length<1e4){let b=null!=f?c.indices?.[f]:void 0,d=b?b[0]:c.index;h.push({start:d,end:d+a.length})}if(!e.includes("g")||h.length>=1e4)break}return h}}let f=new d,g=new e,h=new Map,i={entropy:(a,b)=>(function(a,b=3.5,c=20){return a.length>=c&&function(a){let b={};for(let c of a)b[c]=(b[c]??0)+1;let c=0;for(let d of Object.values(b)){let b=d/a.length;c-=b*Math.log2(b)}return c}(a)>=b})(a,j(b,"threshold"),j(b,"minLength")),luhn:a=>(function(a){let b=a.replace(/\D/g,"");if(b.length<13)return!1;let c=0,d=!0;for(let a=b.length-1;a>=0;a--){let e=parseInt(b[a]??"0",10);!d&&(e*=2)>9&&(e-=9),c+=e,d=!d}return c%10==0})(a)};function j(a,b){let c=a?.[b];return"number"==typeof c&&Number.isFinite(c)?c:void 0}function k(a,b,c){let d=b??[...h.values()].flatMap(a=>a.rules),e=c?.filePath?function(a){let b=a.slice(Math.max(a.lastIndexOf("/"),a.lastIndexOf("\\"))+1),c=b.lastIndexOf(".");return c>0?b.slice(c).toLowerCase():void 0}(c.filePath):void 0,j=[];for(let b of d){let c;if(function(a,b){return!a.appliesTo||void 0===b||a.appliesTo.extensions.some(a=>a.toLowerCase()===b)}(b,e)){if("keyword"===b.matcher.type)c=f.match(a,b);else{if("regex"!==b.matcher.type)continue;c=g.match(a,b)}for(let d of c){let c=a.slice(d.start,d.end);(function(a,b){let c=a.postValidators;if(!c||0===c.length)return!0;for(let a of c){let c="string"==typeof a?a:a.name,d="string"==typeof a?void 0:a.config,e=i[c];if(e&&!e(b,d))return!1}return!0})(b,c)&&j.push({rule:b,match:{ruleId:b.id,category:b.category,severity:b.severity,span:d,rawMatch:c,confidence:.9}})}}}let k=[];for(let b of j){let c=b.rule.requiresNearby;if(!c){k.push(b.match);continue}if(!function(a,b,c){let d=a.rule.requiresNearby;if(!d)return!0;let e=d.windowChars,{start:f,end:g}=a.match.span,h=f-e,i=g+e,j=d.categories,k=d.ruleIds;if(j?.length||k?.length)for(let c of b){if(c===a)continue;let b=c.match.span;if(!(b.end<h)&&!(b.start>i)&&(c.match.ruleId!==a.match.ruleId&&j?.includes(c.match.category)||k?.includes(c.match.ruleId)))return!0}let l=d.labels;if(l&&l.length>0){let a=c.slice(Math.max(0,h),i);for(let b of l){let c=b.trim();if(0!==c.length&&RegExp(`(?<![A-Za-z0-9])${c.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?![A-Za-z0-9])`,"i").test(a))return!0}}return!1}(b,j,a))continue;let d=c.confidenceBoost;k.push(d?{...b.match,confidence:Math.min(.99,b.match.confidence+d)}:b.match)}return k}let l={critical:3,high:2,medium:1,low:0};function m(a,b){if(0===b.length)return a;let c=[...b].sort((a,b)=>a.span.start-b.span.start||a.span.end-b.span.end),d=[];for(let a of c){let b=l[a.severity],c=d[d.length-1];c&&a.span.start<c.end?(c.end=Math.max(c.end,a.span.end),b>c.rank&&(c.rank=b,c.category=a.category)):d.push({start:a.span.start,end:a.span.end,category:a.category,rank:b})}let e=a;for(let a of[...d].reverse()){let b=`[REDACTED:${a.category.toUpperCase()}]`;e=e.slice(0,a.start)+b+e.slice(a.end)}return e}function n(a){if(a.length<=5)return"***";let b=a.indexOf("@");if(b>0&&b<a.length-1){let c=a.slice(b+1);if(c.includes(".")){let d=a.slice(0,b),e=d.length<=1?d:d.charAt(0)+"*".repeat(d.length-1);return`${e}@${c}`}}return`${a.charAt(0)}${"*".repeat(6)}${a.charAt(a.length-1)}`}let o=new Set(["prettier","eslint","biome","black","ruff","gofmt","rustfmt","node","npx","npm","pnpm","yarn","make","git","jq","echo"]);JSON.stringify({kind:"hook-conflict",mutation:/(--write|--fix|\s-w\b|\s-i\b|(?<![\d&>])>\s?\S)/.source,note:"two hooks on the same event with overlapping matchers, both mutating the tool target"}),JSON.stringify({kind:"hook-unknown",knownTools:[...o]}),JSON.stringify({kind:"hook-external-egress",pattern:/\b(curl|wget|nc|ncat|netcat|ssh|scp|rsync)\b|https?:\/\//.source})}};