@akasecurity/cli 0.9.13 → 0.9.15

package/web-ui/web-ui/.next/server/chunks/537.js

@@ -0,0 +1 @@
+"use strict";exports.id=537,exports.ids=[537],exports.modules={44566:(a,b,c)=>{c.d(b,{Vz:()=>o,hZ:()=>s});let d="api[_-]?key|apikey|private[_-]?key|access[_-]?key|access[_-]?token|token|secret|credentials?|password|passwd|pwd|authorization|sig|signature|sas|assertion",e="Bearer|Basic|Token|Digest|ApiKey|SSWS|AWS4-HMAC-SHA256";function f(a){return a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}RegExp(`((?:${d})['"\`]?\\s*[:=]\\s*['"\`]?)(?!(?:${e})[\\s'"\`])[^\\s'"\`&]+`,"gi"),RegExp(`((?:${d})['"\`]?\\s*[:=]\\s*['"\`]?)(${e})\\s+[^\\s'"\`]+`,"gi"),RegExp(`(https?://(?:${[{hosts:["hooks.slack.com"],prefix:"/services/"},{hosts:["discord.com","discordapp.com","ptb.discord.com","canary.discord.com"],prefix:"/api/webhooks/"},{hosts:["hooks.zapier.com"],prefix:"/hooks/"},{hosts:["outlook.office.com","outlook.office365.com"],prefix:"/webhook/"}].flatMap(a=>a.hosts.map(b=>`${f(b)}${f(a.prefix)}`)).join("|")}))[^\\s'"\`<>()[\\]{},;]+`,"gi");let g=new WeakMap,h=new WeakMap,i=new WeakMap;class j{match(a,b){if("keyword"!==b.matcher.type)return[];let{keywords:c,caseSensitive:d}=b.matcher,e=[];for(let f of function(a,b,c){let d="keyword"===a?h:i,e=d.get(b);if(void 0!==e){if(e.stateful)for(let a of e.entries)void 0!==a&&(a.lastIndex=0);return e.entries}let f=c();return d.set(b,{entries:f,stateful:f.some(a=>void 0!==a&&(a.global||a.sticky))}),f}("keyword",b.matcher,()=>c.map(a=>{if(0!==a.length)return new RegExp(a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),d?"gu":"giu")}))){let b;if(void 0!==f){if(e.length>=1e4)break;for(;null!==(b=f.exec(a))&&(e.push({start:b.index,end:b.index+b[0].length}),!(e.length>=1e4)););}}return e}}class k{match(a,b){let c;if("regex"!==b.matcher.type)return[];let{pattern:d,flags:e,captureGroup:f}=b.matcher,h=function(a,b){let c=g.get(a);if(void 0!==c)return c.lastIndex=0,c;let d=b();return g.set(a,d),d}(b.matcher,()=>new RegExp(d,e.includes("d")?e:`${e}d`)),i=a.length>2e5?a.slice(0,2e5):a,j=[],k=i.length+1,l=0;for(;null!==(c=h.exec(i))&&!(++l>k);){let a=null!=f?c[f]:c[0];if(0===c[0].length&&h.lastIndex++,a&&j.length<1e4){let b=null!=f?c.indices?.[f]:void 0,d=b?b[0]:c.index;j.push({start:d,end:d+a.length})}if(!e.includes("g")||j.length>=1e4)break}return j}}new j,new k;var l=c(58692);let m=new Set(["prettier","eslint","biome","black","ruff","gofmt","rustfmt","node","npx","npm","pnpm","yarn","make","git","jq","echo"]);JSON.stringify({kind:"hook-conflict",mutation:/(--write|--fix|\s-w\b|\s-i\b|(?<![\d&>])>\s?\S)/.source,note:"two hooks on the same event with overlapping matchers, both mutating the tool target"}),JSON.stringify({kind:"hook-unknown",knownTools:[...m]}),JSON.stringify({kind:"hook-external-egress",pattern:/\b(curl|wget|nc|ncat|netcat|ssh|scp|rsync)\b|https?:\/\//.source});let n=new Set(["blind","degraded"]),o={ruleId:"web-capture-drift",version:"1",name:"Web chat capture is not reading the site",category:"config",severity:"medium",definition:JSON.stringify({kind:"web-capture-drift",states:[...n],minParseFailures:2})};function p(a){return void 0===a?"unreported":0===a.conversationEndpoints?"standby":a.patched?a.blind?"blind":a.shapeMisses.length>0||a.parseFailures>=2?"degraded":a.live?"active":"idle":"unpatched"}let q={blind:0,degraded:1,unpatched:2,idle:3,standby:4,active:5,unreported:6},r={active:{headline:"turns are being observed on this site"},unreported:{headline:`no report in the last ${String(l.oz)} days — open the site in Chrome with the extension loaded`},standby:{headline:"this build declares no endpoints for the site, so nothing is observed yet"},unpatched:{headline:"the page tap captured neither fetch nor XHR — it may not have installed; reload the extension at chrome://extensions"},idle:{headline:"watching; no turn has been observed yet"},blind:{headline:"messages were sent in the page that the network capture never saw",remediation:"reload the tab. If it persists after `aka update` and reloading the extension at chrome://extensions, the site's send path has changed and needs a new extension build."},degraded:{headline:"the site's payloads no longer carry the fields the extension reads",remediation:"run `aka update`, then reload the extension at chrome://extensions. If it stays degraded after an update, the site's contract has changed and needs a new extension build."}};function s(a){return l.AKh.options.map(b=>{let c=function(a){let b,c="";for(let b of a)b.lastReportAt>c&&(c=b.lastReportAt);let d=a.filter(a=>!(a=>{if(a.closed)return!0;let b=Date.parse(c)-Date.parse(a.lastReportAt);return Number.isFinite(b)&&b>l.q6i})(a));for(let c of d.some(a=>(0,l.RbK)(a.status))?d:a)(void 0===b||function(a,b){let c=q[p(a.status)],d=q[p(b.status)];return c!==d?c<d:a.observedAt!==b.observedAt?a.observedAt>b.observedAt:(a.rootSessionId??"")>(b.rootSessionId??"")}(c,b))&&(b=c);return b}(a.filter(a=>a.tool===b)),d=p(c?.status),e=r[d];return{tool:b,state:d,headline:e.headline,...void 0!==e.remediation?{remediation:e.remediation}:{},drift:n.has(d),...void 0!==c?{observedAt:c.observedAt}:{}}})}["a","0"," ","x","ab","a.","a-","a_","a@","a/","a:","a=","a;","aA0","	"].flatMap(a=>[23,25].map(b=>a.repeat(Math.ceil(b/a.length)).slice(0,b)+"!")),["abc-","a.","a ","a=","x","0","a@","a/","ab"].map(a=>a.repeat(1e4).slice(0,4e4)+"!")},72522:(a,b,c)=>{c.d(b,{W:()=>d});function d(){return Date.now()}}};