@akasecurity/cli 0.9.13 → 0.9.14

package/web-ui/web-ui/.next/server/chunks/{300.js → 618.js}

@@ -1 +1 @@
-"use strict";exports.id=300,exports.ids=[300],exports.modules={53220:(a,b,c)=>{c.d(b,{W:()=>d});function d(){return Date.now()}},56673:(a,b,c)=>{c.d(b,{Vz:()=>o,hZ:()=>s});let d="api[_-]?key|apikey|private[_-]?key|access[_-]?key|access[_-]?token|token|secret|credentials?|password|passwd|pwd|authorization|sig|signature|sas|assertion",e="Bearer|Basic|Token|Digest|ApiKey|SSWS|AWS4-HMAC-SHA256";function f(a){return a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}RegExp(`((?:${d})['"\`]?\\s*[:=]\\s*['"\`]?)(?!(?:${e})[\\s'"\`])[^\\s'"\`&]+`,"gi"),RegExp(`((?:${d})['"\`]?\\s*[:=]\\s*['"\`]?)(${e})\\s+[^\\s'"\`]+`,"gi"),RegExp(`(https?://(?:${[{hosts:["hooks.slack.com"],prefix:"/services/"},{hosts:["discord.com","discordapp.com","ptb.discord.com","canary.discord.com"],prefix:"/api/webhooks/"},{hosts:["hooks.zapier.com"],prefix:"/hooks/"},{hosts:["outlook.office.com","outlook.office365.com"],prefix:"/webhook/"}].flatMap(a=>a.hosts.map(b=>`${f(b)}${f(a.prefix)}`)).join("|")}))[^\\s'"\`<>()[\\]{},;]+`,"gi");let g=new WeakMap,h=new WeakMap,i=new WeakMap;class j{match(a,b){if("keyword"!==b.matcher.type)return[];let{keywords:c,caseSensitive:d}=b.matcher,e=[];for(let f of function(a,b,c){let d="keyword"===a?h:i,e=d.get(b);if(void 0!==e){if(e.stateful)for(let a of e.entries)void 0!==a&&(a.lastIndex=0);return e.entries}let f=c();return d.set(b,{entries:f,stateful:f.some(a=>void 0!==a&&(a.global||a.sticky))}),f}("keyword",b.matcher,()=>c.map(a=>{if(0!==a.length)return new RegExp(a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),d?"gu":"giu")}))){let b;if(void 0!==f){if(e.length>=1e4)break;for(;null!==(b=f.exec(a))&&(e.push({start:b.index,end:b.index+b[0].length}),!(e.length>=1e4)););}}return e}}class k{match(a,b){let c;if("regex"!==b.matcher.type)return[];let{pattern:d,flags:e,captureGroup:f}=b.matcher,h=function(a,b){let c=g.get(a);if(void 0!==c)return c.lastIndex=0,c;let d=b();return g.set(a,d),d}(b.matcher,()=>new RegExp(d,e.includes("d")?e:`${e}d`)),i=a.length>2e5?a.slice(0,2e5):a,j=[],k=i.length+1,l=0;for(;null!==(c=h.exec(i))&&!(++l>k);){let a=null!=f?c[f]:c[0];if(0===c[0].length&&h.lastIndex++,a&&j.length<1e4){let b=null!=f?c.indices?.[f]:void 0,d=b?b[0]:c.index;j.push({start:d,end:d+a.length})}if(!e.includes("g")||j.length>=1e4)break}return j}}new j,new k;var l=c(58438);let m=new Set(["prettier","eslint","biome","black","ruff","gofmt","rustfmt","node","npx","npm","pnpm","yarn","make","git","jq","echo"]);JSON.stringify({kind:"hook-conflict",mutation:/(--write|--fix|\s-w\b|\s-i\b|(?<![\d&>])>\s?\S)/.source,note:"two hooks on the same event with overlapping matchers, both mutating the tool target"}),JSON.stringify({kind:"hook-unknown",knownTools:[...m]}),JSON.stringify({kind:"hook-external-egress",pattern:/\b(curl|wget|nc|ncat|netcat|ssh|scp|rsync)\b|https?:\/\//.source});let n=new Set(["blind","degraded"]),o={ruleId:"web-capture-drift",version:"1",name:"Web chat capture is not reading the site",category:"config",severity:"medium",definition:JSON.stringify({kind:"web-capture-drift",states:[...n],minParseFailures:2})};function p(a){return void 0===a?"unreported":0===a.conversationEndpoints?"standby":a.patched?a.blind?"blind":a.shapeMisses.length>0||a.parseFailures>=2?"degraded":a.live?"active":"idle":"unpatched"}let q={blind:0,degraded:1,unpatched:2,idle:3,standby:4,active:5,unreported:6},r={active:{headline:"turns are being observed on this site"},unreported:{headline:`no report in the last ${String(l.oz)} days — open the site in Chrome with the extension loaded`},standby:{headline:"this build declares no endpoints for the site, so nothing is observed yet"},unpatched:{headline:"the page tap captured neither fetch nor XHR — it may not have installed; reload the extension at chrome://extensions"},idle:{headline:"watching; no turn has been observed yet"},blind:{headline:"messages were sent in the page that the network capture never saw",remediation:"reload the tab. If it persists after `aka update` and reloading the extension at chrome://extensions, the site's send path has changed and needs a new extension build."},degraded:{headline:"the site's payloads no longer carry the fields the extension reads",remediation:"run `aka update`, then reload the extension at chrome://extensions. If it stays degraded after an update, the site's contract has changed and needs a new extension build."}};function s(a){return l.AKh.options.map(b=>{let c=function(a){let b,c="";for(let b of a)b.lastReportAt>c&&(c=b.lastReportAt);let d=a.filter(a=>!(a=>{if(a.closed)return!0;let b=Date.parse(c)-Date.parse(a.lastReportAt);return Number.isFinite(b)&&b>l.q6i})(a));for(let c of d.some(a=>(0,l.RbK)(a.status))?d:a)(void 0===b||function(a,b){let c=q[p(a.status)],d=q[p(b.status)];return c!==d?c<d:a.observedAt!==b.observedAt?a.observedAt>b.observedAt:(a.rootSessionId??"")>(b.rootSessionId??"")}(c,b))&&(b=c);return b}(a.filter(a=>a.tool===b)),d=p(c?.status),e=r[d];return{tool:b,state:d,headline:e.headline,...void 0!==e.remediation?{remediation:e.remediation}:{},drift:n.has(d),...void 0!==c?{observedAt:c.observedAt}:{}}})}["a","0"," ","x","ab","a.","a-","a_","a@","a/","a:","a=","a;","aA0","	"].flatMap(a=>[23,25].map(b=>a.repeat(Math.ceil(b/a.length)).slice(0,b)+"!")),["abc-","a.","a ","a=","x","0","a@","a/","ab"].map(a=>a.repeat(1e4).slice(0,4e4)+"!")}};
+"use strict";exports.id=618,exports.ids=[618],exports.modules={73076:(a,b,c)=>{c.d(b,{W:()=>d});function d(){return Date.now()}},76055:(a,b,c)=>{c.d(b,{Vz:()=>o,hZ:()=>s});let d="api[_-]?key|apikey|private[_-]?key|access[_-]?key|access[_-]?token|token|secret|credentials?|password|passwd|pwd|authorization|sig|signature|sas|assertion",e="Bearer|Basic|Token|Digest|ApiKey|SSWS|AWS4-HMAC-SHA256";function f(a){return a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}RegExp(`((?:${d})['"\`]?\\s*[:=]\\s*['"\`]?)(?!(?:${e})[\\s'"\`])[^\\s'"\`&]+`,"gi"),RegExp(`((?:${d})['"\`]?\\s*[:=]\\s*['"\`]?)(${e})\\s+[^\\s'"\`]+`,"gi"),RegExp(`(https?://(?:${[{hosts:["hooks.slack.com"],prefix:"/services/"},{hosts:["discord.com","discordapp.com","ptb.discord.com","canary.discord.com"],prefix:"/api/webhooks/"},{hosts:["hooks.zapier.com"],prefix:"/hooks/"},{hosts:["outlook.office.com","outlook.office365.com"],prefix:"/webhook/"}].flatMap(a=>a.hosts.map(b=>`${f(b)}${f(a.prefix)}`)).join("|")}))[^\\s'"\`<>()[\\]{},;]+`,"gi");let g=new WeakMap,h=new WeakMap,i=new WeakMap;class j{match(a,b){if("keyword"!==b.matcher.type)return[];let{keywords:c,caseSensitive:d}=b.matcher,e=[];for(let f of function(a,b,c){let d="keyword"===a?h:i,e=d.get(b);if(void 0!==e){if(e.stateful)for(let a of e.entries)void 0!==a&&(a.lastIndex=0);return e.entries}let f=c();return d.set(b,{entries:f,stateful:f.some(a=>void 0!==a&&(a.global||a.sticky))}),f}("keyword",b.matcher,()=>c.map(a=>{if(0!==a.length)return new RegExp(a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),d?"gu":"giu")}))){let b;if(void 0!==f){if(e.length>=1e4)break;for(;null!==(b=f.exec(a))&&(e.push({start:b.index,end:b.index+b[0].length}),!(e.length>=1e4)););}}return e}}class k{match(a,b){let c;if("regex"!==b.matcher.type)return[];let{pattern:d,flags:e,captureGroup:f}=b.matcher,h=function(a,b){let c=g.get(a);if(void 0!==c)return c.lastIndex=0,c;let d=b();return g.set(a,d),d}(b.matcher,()=>new RegExp(d,e.includes("d")?e:`${e}d`)),i=a.length>2e5?a.slice(0,2e5):a,j=[],k=i.length+1,l=0;for(;null!==(c=h.exec(i))&&!(++l>k);){let a=null!=f?c[f]:c[0];if(0===c[0].length&&h.lastIndex++,a&&j.length<1e4){let b=null!=f?c.indices?.[f]:void 0,d=b?b[0]:c.index;j.push({start:d,end:d+a.length})}if(!e.includes("g")||j.length>=1e4)break}return j}}new j,new k;var l=c(32932);let m=new Set(["prettier","eslint","biome","black","ruff","gofmt","rustfmt","node","npx","npm","pnpm","yarn","make","git","jq","echo"]);JSON.stringify({kind:"hook-conflict",mutation:/(--write|--fix|\s-w\b|\s-i\b|(?<![\d&>])>\s?\S)/.source,note:"two hooks on the same event with overlapping matchers, both mutating the tool target"}),JSON.stringify({kind:"hook-unknown",knownTools:[...m]}),JSON.stringify({kind:"hook-external-egress",pattern:/\b(curl|wget|nc|ncat|netcat|ssh|scp|rsync)\b|https?:\/\//.source});let n=new Set(["blind","degraded"]),o={ruleId:"web-capture-drift",version:"1",name:"Web chat capture is not reading the site",category:"config",severity:"medium",definition:JSON.stringify({kind:"web-capture-drift",states:[...n],minParseFailures:2})};function p(a){return void 0===a?"unreported":0===a.conversationEndpoints?"standby":a.patched?a.blind?"blind":a.shapeMisses.length>0||a.parseFailures>=2?"degraded":a.live?"active":"idle":"unpatched"}let q={blind:0,degraded:1,unpatched:2,idle:3,standby:4,active:5,unreported:6},r={active:{headline:"turns are being observed on this site"},unreported:{headline:`no report in the last ${String(l.oz)} days — open the site in Chrome with the extension loaded`},standby:{headline:"this build declares no endpoints for the site, so nothing is observed yet"},unpatched:{headline:"the page tap captured neither fetch nor XHR — it may not have installed; reload the extension at chrome://extensions"},idle:{headline:"watching; no turn has been observed yet"},blind:{headline:"messages were sent in the page that the network capture never saw",remediation:"reload the tab. If it persists after `aka update` and reloading the extension at chrome://extensions, the site's send path has changed and needs a new extension build."},degraded:{headline:"the site's payloads no longer carry the fields the extension reads",remediation:"run `aka update`, then reload the extension at chrome://extensions. If it stays degraded after an update, the site's contract has changed and needs a new extension build."}};function s(a){return l.AKh.options.map(b=>{let c=function(a){let b,c="";for(let b of a)b.lastReportAt>c&&(c=b.lastReportAt);let d=a.filter(a=>!(a=>{if(a.closed)return!0;let b=Date.parse(c)-Date.parse(a.lastReportAt);return Number.isFinite(b)&&b>l.q6i})(a));for(let c of d.some(a=>(0,l.RbK)(a.status))?d:a)(void 0===b||function(a,b){let c=q[p(a.status)],d=q[p(b.status)];return c!==d?c<d:a.observedAt!==b.observedAt?a.observedAt>b.observedAt:(a.rootSessionId??"")>(b.rootSessionId??"")}(c,b))&&(b=c);return b}(a.filter(a=>a.tool===b)),d=p(c?.status),e=r[d];return{tool:b,state:d,headline:e.headline,...void 0!==e.remediation?{remediation:e.remediation}:{},drift:n.has(d),...void 0!==c?{observedAt:c.observedAt}:{}}})}["a","0"," ","x","ab","a.","a-","a_","a@","a/","a:","a=","a;","aA0","	"].flatMap(a=>[23,25].map(b=>a.repeat(Math.ceil(b/a.length)).slice(0,b)+"!")),["abc-","a.","a ","a=","x","0","a@","a/","ab"].map(a=>a.repeat(1e4).slice(0,4e4)+"!")}};

package/web-ui/web-ui/.next/server/chunks/{121.js → 670.js}

@@ -1 +1 @@
-"use strict";exports.id=121,exports.ids=[121],exports.modules={10739:(a,b,c)=>{c.d(b,{Ah:()=>r,MR:()=>s});var d=c(75046),e=c(37067),f=c(44708);class g extends Error{constructor(a){super(`control-plane request failed with status ${String(a)}`),this.status=a,this.name="RemoteRequestError"}}class h extends Error{constructor(a){super(`control plane does not serve ${a}`),this.route=a,this.name="RemoteRouteAbsent"}}class i extends Error{constructor(a,b){super(`refusing to send a malformed body to ${a}`),this.cause=b,this.name="RemoteRequestInvalid"}}class j extends Error{constructor(a){super(`refusing to talk to an unsafe control-plane endpoint: ${(0,d.Vgn)(a)}`),this.name="RemoteEndpointRefused"}}class k extends Error{constructor(a,b){super(`control plane answered ${a} with ${b}`),this.name="RemoteResponseInvalid"}}class l extends Error{constructor(a,b){super(`control-plane request did not complete: ${a}`),this.status=b,this.name="RemoteTransportError"}}async function m(a){let b=new URL(a.url),c=a.timeoutMs??1e4,d="http:"===b.protocol?e.request:f.request,g={method:a.method,headers:{...a.headers,...void 0===a.apiKey?{}:{"x-api-key":a.apiKey},accept:"application/json",...void 0===a.body?{}:{"content-type":"application/json","content-length":String(Buffer.byteLength(a.body))}}};return new Promise((e,f)=>{let h=!1,i=(a,b)=>{h||(h=!0,f(new l(a,b)))},j=d(b,g,a=>{let b=[],c=0;a.on("data",d=>{if((c+=d.length)>8388608){i(`response exceeded ${String(8388608)} bytes`,a.statusCode),a.destroy(),j.destroy();return}b.push(d)}),a.on("aborted",()=>{i("the response was aborted",a.statusCode)}),a.on("end",()=>{h||(h=!0,e({status:a.statusCode??0,headers:a.headers,body:Buffer.concat(b).toString("utf8")}))})}),k=setTimeout(()=>{i(`no response within ${String(c)}ms`),j.destroy()},c);k.unref(),j.on("upgrade",(a,b)=>{i("the deployment answered with a protocol upgrade"),b.destroy()}),j.on("close",()=>{i("the connection closed before a response was read"),clearTimeout(k)}),j.on("error",a=>{i(a.message)}),void 0!==a.body&&j.write(a.body),j.end()})}let n={events:"/v1/events",auditEvents:"/v1/audit-events",auditEventsBatch:"/v1/audit-events/batch",inventory:"/v1/inventory",storePosture:"/v1/store-posture",policyBundle:"/v1/policy-bundle",whoami:"/v1/plugin/whoami",shares:"/v1/shares",commands:"/v1/plugin/commands"};function o(a,b){let c=a.headers[b];if(void 0!==c)return Array.isArray(c)?c[0]:c}function p(a){if(a.status<200||a.status>=300)throw new g(a.status);return a.body}function q(a,b,c){let d;try{d=JSON.parse(b)}catch{throw new k(c,"a body that is not JSON")}let e=a.safeParse(d);if(!e.success)throw new k(c,"a body this client cannot read");return e.data}function r(a){let b=function(a){if(!(0,d.lGs)(a))throw new j(a);let b=a.length;for(;b>0&&47===a.charCodeAt(b-1);)b-=1;return a.slice(0,b)}(a.endpoint),c=a=>`${b}${a}`,e={apiKey:a.apiKey,timeoutMs:a.timeoutMs},f=async a=>{let b=d.qhM.safeParse(a);if(!b.success)throw new i(n.auditEvents,b.error);p(await m({...e,method:"POST",url:c(n.auditEvents),body:JSON.stringify(b.data)}))};return{async ingestEvents(a){let b=await m({...e,method:"POST",url:c(n.events),body:JSON.stringify(a)});return q(d.kg1,p(b),n.events)},async ingestInventory(a){let b=await m({...e,method:"POST",url:c(n.inventory),body:JSON.stringify(a)});return q(d.PUD,p(b),n.inventory)},async recordAuditEvent(a){await f(a)},async recordAuditEvents(a,b){let g=d.lBn.safeParse({events:a});if(!g.success)throw new i(n.auditEventsBatch,g.error);let j=await m({...e,method:"POST",url:c(n.auditEventsBatch),body:JSON.stringify(g.data)});if(404===j.status){if(b?.fallbackToSingleEvents!==!0)throw new h(n.auditEventsBatch);for(let a of g.data.events)await f(a);return{accepted:g.data.events.length}}return q(d.t8P,p(j),n.auditEventsBatch)},async reportStorePosture(a){p(await m({...e,method:"POST",url:c(n.storePosture),body:JSON.stringify(a)}))},async getPolicyBundle(a){let b=await m({...e,method:"GET",url:c(n.policyBundle),...void 0===a?{}:{headers:{"if-none-match":a}}});return 304===b.status?{changed:!1,etag:o(b,"etag")??a}:{changed:!0,bundle:q(d.vap,p(b),n.policyBundle),etag:o(b,"etag")}},async whoami(){let a=await m({...e,method:"GET",url:c(n.whoami)});return q(d.NtJ,p(a),n.whoami)},async recordProjectEgress(a){let b=d.BZd.safeParse(a);if(!b.success)throw new i(n.shares,b.error);let f=await m({...e,method:"POST",url:c(n.shares),body:JSON.stringify(b.data)});if(404===f.status)throw new h(n.shares);p(f)},async pollCommand(){let a=await m({...e,method:"GET",url:c(n.commands)});return 404===a.status?null:q(d.CPm,p(a),n.commands).command},async ackCommand(a,b){let f=d.B0R.safeParse(b),g=`${n.commands}/${encodeURIComponent(a)}/ack`;if(!f.success)throw new i(g,f.error);p(await m({...e,method:"POST",url:c(g),body:JSON.stringify(f.data)}))}}}function s(a=15e3){return async(b,c)=>{try{return await r({...b,timeoutMs:a}).recordProjectEgress(c),{ok:!0}}catch(a){return{ok:!1,kind:function(a){switch("object"!=typeof a||null===a||!("name"in a)?null:"string"==typeof a.name?a.name:null){case"RemoteRouteAbsent":return"route-absent";case"RemoteRequestInvalid":case"RemoteEndpointRefused":return"invalid-request";case"RemoteResponseInvalid":return"rejected"}let b=function(a){if("object"!=typeof a||null===a||!("status"in a))return null;let{status:b}=a;return"number"==typeof b&&Number.isInteger(b)&&b>=100&&b<=599?b:null}(a);if(null===b)return"unreachable";switch(b){case 401:return"unauthorized";case 403:return"forbidden";case 429:case 404:return"unreachable";default:return b>=400&&b<=499?"rejected":"unreachable"}}(a)}}}}},60667:(a,b,c)=>{c.d(b,{db:()=>f});var d=c(9578);let e=globalThis;function f(){if(e.__akaDb)return e.__akaDb;let a=(0,d.Ji)((0,d.KS)());return a.purgeSampleData(),e.__akaDb=a,a}}};
+"use strict";exports.id=670,exports.ids=[670],exports.modules={55670:(a,b,c)=>{c.d(b,{Ah:()=>r,MR:()=>s});var d=c(88477),e=c(37067),f=c(44708);class g extends Error{constructor(a){super(`control-plane request failed with status ${String(a)}`),this.status=a,this.name="RemoteRequestError"}}class h extends Error{constructor(a){super(`control plane does not serve ${a}`),this.route=a,this.name="RemoteRouteAbsent"}}class i extends Error{constructor(a,b){super(`refusing to send a malformed body to ${a}`),this.cause=b,this.name="RemoteRequestInvalid"}}class j extends Error{constructor(a){super(`refusing to talk to an unsafe control-plane endpoint: ${(0,d.Vgn)(a)}`),this.name="RemoteEndpointRefused"}}class k extends Error{constructor(a,b){super(`control plane answered ${a} with ${b}`),this.name="RemoteResponseInvalid"}}class l extends Error{constructor(a,b){super(`control-plane request did not complete: ${a}`),this.status=b,this.name="RemoteTransportError"}}async function m(a){let b=new URL(a.url),c=a.timeoutMs??1e4,d="http:"===b.protocol?e.request:f.request,g={method:a.method,headers:{...a.headers,...void 0===a.apiKey?{}:{"x-api-key":a.apiKey},accept:"application/json",...void 0===a.body?{}:{"content-type":"application/json","content-length":String(Buffer.byteLength(a.body))}}};return new Promise((e,f)=>{let h=!1,i=(a,b)=>{h||(h=!0,f(new l(a,b)))},j=d(b,g,a=>{let b=[],c=0;a.on("data",d=>{if((c+=d.length)>8388608){i(`response exceeded ${String(8388608)} bytes`,a.statusCode),a.destroy(),j.destroy();return}b.push(d)}),a.on("aborted",()=>{i("the response was aborted",a.statusCode)}),a.on("end",()=>{h||(h=!0,e({status:a.statusCode??0,headers:a.headers,body:Buffer.concat(b).toString("utf8")}))})}),k=setTimeout(()=>{i(`no response within ${String(c)}ms`),j.destroy()},c);k.unref(),j.on("upgrade",(a,b)=>{i("the deployment answered with a protocol upgrade"),b.destroy()}),j.on("close",()=>{i("the connection closed before a response was read"),clearTimeout(k)}),j.on("error",a=>{i(a.message)}),void 0!==a.body&&j.write(a.body),j.end()})}let n={events:"/v1/events",auditEvents:"/v1/audit-events",auditEventsBatch:"/v1/audit-events/batch",inventory:"/v1/inventory",storePosture:"/v1/store-posture",policyBundle:"/v1/policy-bundle",whoami:"/v1/plugin/whoami",shares:"/v1/shares",commands:"/v1/plugin/commands"};function o(a,b){let c=a.headers[b];if(void 0!==c)return Array.isArray(c)?c[0]:c}function p(a){if(a.status<200||a.status>=300)throw new g(a.status);return a.body}function q(a,b,c){let d;try{d=JSON.parse(b)}catch{throw new k(c,"a body that is not JSON")}let e=a.safeParse(d);if(!e.success)throw new k(c,"a body this client cannot read");return e.data}function r(a){let b=function(a){if(!(0,d.lGs)(a))throw new j(a);let b=a.length;for(;b>0&&47===a.charCodeAt(b-1);)b-=1;return a.slice(0,b)}(a.endpoint),c=a=>`${b}${a}`,e={apiKey:a.apiKey,timeoutMs:a.timeoutMs},f=async a=>{let b=d.qhM.safeParse(a);if(!b.success)throw new i(n.auditEvents,b.error);p(await m({...e,method:"POST",url:c(n.auditEvents),body:JSON.stringify(b.data)}))};return{async ingestEvents(a){let b=await m({...e,method:"POST",url:c(n.events),body:JSON.stringify(a)});return q(d.kg1,p(b),n.events)},async ingestInventory(a){let b=await m({...e,method:"POST",url:c(n.inventory),body:JSON.stringify(a)});return q(d.PUD,p(b),n.inventory)},async recordAuditEvent(a){await f(a)},async recordAuditEvents(a,b){let g=d.lBn.safeParse({events:a});if(!g.success)throw new i(n.auditEventsBatch,g.error);let j=await m({...e,method:"POST",url:c(n.auditEventsBatch),body:JSON.stringify(g.data)});if(404===j.status){if(b?.fallbackToSingleEvents!==!0)throw new h(n.auditEventsBatch);for(let a of g.data.events)await f(a);return{accepted:g.data.events.length}}return q(d.t8P,p(j),n.auditEventsBatch)},async reportStorePosture(a){p(await m({...e,method:"POST",url:c(n.storePosture),body:JSON.stringify(a)}))},async getPolicyBundle(a){let b=await m({...e,method:"GET",url:c(n.policyBundle),...void 0===a?{}:{headers:{"if-none-match":a}}});return 304===b.status?{changed:!1,etag:o(b,"etag")??a}:{changed:!0,bundle:q(d.vap,p(b),n.policyBundle),etag:o(b,"etag")}},async whoami(){let a=await m({...e,method:"GET",url:c(n.whoami)});return q(d.NtJ,p(a),n.whoami)},async recordProjectEgress(a){let b=d.BZd.safeParse(a);if(!b.success)throw new i(n.shares,b.error);let f=await m({...e,method:"POST",url:c(n.shares),body:JSON.stringify(b.data)});if(404===f.status)throw new h(n.shares);p(f)},async pollCommand(){let a=await m({...e,method:"GET",url:c(n.commands)});return 404===a.status?null:q(d.CPm,p(a),n.commands).command},async ackCommand(a,b){let f=d.B0R.safeParse(b),g=`${n.commands}/${encodeURIComponent(a)}/ack`;if(!f.success)throw new i(g,f.error);p(await m({...e,method:"POST",url:c(g),body:JSON.stringify(f.data)}))}}}function s(a=15e3){return async(b,c)=>{try{return await r({...b,timeoutMs:a}).recordProjectEgress(c),{ok:!0}}catch(a){return{ok:!1,kind:function(a){switch("object"!=typeof a||null===a||!("name"in a)?null:"string"==typeof a.name?a.name:null){case"RemoteRouteAbsent":return"route-absent";case"RemoteRequestInvalid":case"RemoteEndpointRefused":return"invalid-request";case"RemoteResponseInvalid":return"rejected"}let b=function(a){if("object"!=typeof a||null===a||!("status"in a))return null;let{status:b}=a;return"number"==typeof b&&Number.isInteger(b)&&b>=100&&b<=599?b:null}(a);if(null===b)return"unreachable";switch(b){case 401:return"unauthorized";case 403:return"forbidden";case 429:case 404:return"unreachable";default:return b>=400&&b<=499?"rejected":"unreachable"}}(a)}}}}}};