@akasecurity/cli 0.9.3 → 0.9.5

package/extension/background.js

@@ -0,0 +1 @@
+"use strict";(()=>{var a="com.akasecurity.aka";var u=3e3,r=null,d=0,o=new Map;function l(e){let n=e,t=n.requestId;if(t===void 0)return;let s=o.get(t);s&&(o.delete(t),s(n))}function f(){r=null;for(let[e,n]of o)n({type:"error",requestId:e,ok:!1,message:"native host disconnected"});o.clear()}function g(){let e=chrome.runtime.connectNative(a);return e.onMessage.addListener(l),e.onDisconnect.addListener(f),e}function m(e){let n=`${Date.now().toString()}-${(d++).toString()}`;return new Promise(t=>{let s=setTimeout(()=>{o.delete(n)&&t({type:"error",requestId:n,ok:!1,message:"the AKA native host did not respond in time"})},u),i=c=>{clearTimeout(s),t(c)};o.set(n,i);try{(r??(r=g())).postMessage({...e,requestId:n})}catch{o.delete(n),i({type:"error",requestId:n,ok:!1,message:"failed to reach the AKA native host \u2014 is it installed? Run `aka extension install`."})}})}function p(e){return typeof e=="object"&&e!==null&&"type"in e}chrome.runtime.onMessage.addListener((e,n,t)=>p(e)?(m(e).then(t).catch(()=>{t({type:"error",requestId:void 0,ok:!1,message:"relay failed"})}),!0):!1);})();

package/extension/content.js

@@ -0,0 +1 @@
+"use strict";(()=>{function T(t){let{adapter:e,sessionId:s,relay:r,showBanner:n}=t,d=!1,u=!1;function c(i){return d=!0,setTimeout(()=>{d=!1},0),e.submit(i)?!0:(d=!1,n("AKA could not send this message \u2014 the send button was not found, so the site may have changed. Your text is still in the composer and was NOT sent.","block"),!1)}async function m(i,l){let o=await r({type:"capture",sessionId:s,tool:e.id,kind:"prompt",text:l}).catch(()=>({type:"error",requestId:void 0,ok:!1,message:"relay failed"}));if(o.type!=="capture"){c(i);return}if(o.action==="block"){n(`AKA blocked this message \u2014 flagged ${o.ruleIds.join(", ")}. Remove it and resend.`,"block");return}if(o.action==="redact"){if(typeof o.text!="string"){n(`AKA could not redact this message (${o.ruleIds.join(", ")}) \u2014 remove the flagged content and resend.`,"block");return}if(e.setText(i,o.text),e.extractText(i).trim()!==o.text.trim()){n("AKA could not redact this message \u2014 remove the flagged content and resend.","block");return}if(!c(i))return;n(`AKA redacted sensitive content (${o.ruleIds.join(", ")}) before sending.`,"redact");return}if(o.action==="warn"){if(!c(i))return;n(`AKA flagged sensitive content (${o.ruleIds.join(", ")}) \u2014 sent unchanged.`,"warn");return}c(i)}return{handleSubmit(i,l){if(d){d=!1;return}let o=e.extractText(l);o.trim()!==""&&(i.preventDefault(),i.stopImmediatePropagation(),!u&&(u=!0,m(l,o).finally(()=>{u=!1})))}}}function p(t){for(let e of t){let s=document.querySelector(e);if(s)return s}return null}function f(t){return t.innerText}function h(t,e){t.focus(),t.textContent=e,t.dispatchEvent(new InputEvent("input",{bubbles:!0,cancelable:!0}))}function b(t,e){let s=r=>{r.key==="Enter"&&!r.shiftKey&&!r.isComposing&&e(r)};return t.addEventListener("keydown",s,!0),()=>{t.removeEventListener("keydown",s,!0)}}function x(t,e){return t.addEventListener("click",e,!0),()=>{t.removeEventListener("click",e,!0)}}var R=["#prompt-textarea",'form [contenteditable="true"][role="textbox"]','form [contenteditable="true"]'],L=['[data-testid="send-button"]','button[aria-label*="send" i]'];function g(){return p(L)}var v={id:"chatgpt",hostnames:["chatgpt.com","chat.openai.com"],findComposer(){return p(R)},findSendButton:g,extractText:f,setText:h,watchSubmit(t,e){let s=b(t,e),r=g(),n=r?x(r,e):void 0;return()=>{s(),n?.()}},submit(){let t=g();return t?(t.click(),!0):!1}};var M=['div[contenteditable="true"][aria-label*="claude" i]','fieldset [contenteditable="true"]','form [contenteditable="true"]'],P=['button[aria-label*="send" i]','fieldset button[type="submit"]'];function y(){return p(P)}var k={id:"claude-ai",hostnames:["claude.ai"],findComposer(){return p(M)},findSendButton:y,extractText:f,setText:h,watchSubmit(t,e){let s=b(t,e),r=y(),n=r?x(r,e):void 0;return()=>{s(),n?.()}},submit(){let t=y();return t?(t.click(),!0):!1}};var w=[v,k],$=w.flatMap(t=>t.hostnames);function S(t){return w.find(e=>e.hostnames.includes(t))??null}var A=S(location.hostname);A&&H(A);function H(t){let e=crypto.randomUUID(),s=T({adapter:t,sessionId:e,relay:B,showBanner:I}),r=null,n=null,d=null,u=!1;function c(){u=!1;let i=t.findComposer(),l=t.findSendButton();if(!(i===r&&l===n))if(d?.(),r=i,n=l,r&&n){let o=r;d=t.watchSubmit(o,C=>{s.handleSubmit(C,o)})}else d=null}function m(){u||(u=!0,requestAnimationFrame(c))}m(),new MutationObserver(m).observe(document.body,{childList:!0,subtree:!0}),B({type:"session_start",sessionId:e,tool:t.id,hostname:location.hostname}).catch(()=>{})}function B(t){return chrome.runtime.sendMessage(t)}var a=null,E=null;function I(t,e){a||(a=document.createElement("div"),a.style.all="initial",a.style.position="fixed",a.style.zIndex="2147483647",a.style.bottom="24px",a.style.left="50%",a.style.transform="translateX(-50%)",document.body.append(a));let s=a.shadowRoot??a.attachShadow({mode:"open"}),r=e==="block"?"#dc2626":e==="redact"?"#d97706":"#2563eb",n=document.createElement("div");n.style.font="13px/1.4 system-ui, sans-serif",n.style.background=r,n.style.color="white",n.style.padding="8px 14px",n.style.borderRadius="8px",n.style.boxShadow="0 4px 12px rgba(0,0,0,0.25)",n.style.maxWidth="480px",n.textContent=t,s.replaceChildren(n),E&&clearTimeout(E),E=setTimeout(()=>{a?.remove(),a=null},6e3)}})();

package/extension/manifest.json

@@ -0,0 +1,39 @@
+{
+  "manifest_version": 3,
+  "name": "AI Traffic Control",
+  "version": "0.9.5",
+  "description": "Local secret detection and redaction for ChatGPT and Claude.ai web chat.",
+  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnwx5Snbi3oZ7mDBC78NaTHO6dTKYRtCqr29YnOImR47UM21tP1us3KF6FjQMtR6tAsffflRok1PThQpjBNwYdRM+stvPIUr5GqBRQL1Ge///kZaVz7eCptCjKg00ygk2HwelaCNt6nWy6czIcM3/HssrNflw42IKsBORW7qQ+KhhKqlABjkRUDvBcuhwOU34HHMJxeP2XdyI5T5msqVJN1nVA+X9T/18dP7cCSzkp9RwLN1hvQMS6n3A1R0HUCmfra1lb1KqQhy3EBdm2VwxTDGVPfGYbTdNSyRT70wzcZy1IdQkfT6YOy1M//+yT7Vu9p/aajs+dNNn/zUn0qJyQIDAQAB",
+  "icons": {
+    "16": "icons/icon16.png",
+    "48": "icons/icon48.png",
+    "128": "icons/icon128.png"
+  },
+  "background": {
+    "service_worker": "background.js"
+  },
+  "content_scripts": [
+    {
+      "matches": [
+        "https://chatgpt.com/*",
+        "https://chat.openai.com/*",
+        "https://claude.ai/*"
+      ],
+      "js": [
+        "content.js"
+      ],
+      "run_at": "document_idle"
+    }
+  ],
+  "action": {
+    "default_popup": "popup.html",
+    "default_icon": {
+      "16": "icons/icon16.png",
+      "48": "icons/icon48.png",
+      "128": "icons/icon128.png"
+    }
+  },
+  "permissions": [
+    "nativeMessaging"
+  ]
+}

package/extension/popup.html

@@ -0,0 +1,69 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <title>AI Traffic Control</title>
+    <style>
+      body {
+        width: 280px;
+        margin: 0;
+        padding: 16px;
+        font:
+          13px/1.4 system-ui,
+          sans-serif;
+        color: #1f2937;
+      }
+      h1 {
+        font-size: 14px;
+        margin: 0 0 12px;
+      }
+      .row {
+        display: flex;
+        align-items: center;
+        gap: 8px;
+        margin-bottom: 10px;
+      }
+      .dot {
+        width: 8px;
+        height: 8px;
+        border-radius: 50%;
+        background: #9ca3af;
+        flex: none;
+      }
+      .dot.ok {
+        background: #16a34a;
+      }
+      .dot.error {
+        background: #dc2626;
+      }
+      .muted {
+        color: #6b7280;
+      }
+      button {
+        width: 100%;
+        margin-top: 8px;
+        padding: 8px;
+        border: 1px solid #d1d5db;
+        border-radius: 6px;
+        background: white;
+        cursor: pointer;
+        font: inherit;
+      }
+      button:hover {
+        background: #f3f4f6;
+      }
+    </style>
+  </head>
+  <body>
+    <h1>AI Traffic Control</h1>
+    <div class="row">
+      <span id="status-dot" class="dot"></span>
+      <span id="status-text">Checking native host…</span>
+    </div>
+    <div id="findings-row" class="row muted" hidden>
+      <span id="findings-text"></span>
+    </div>
+    <button id="open-dashboard">Open dashboard</button>
+    <script src="popup.js"></script>
+  </body>
+</html>

package/extension/popup.js

@@ -0,0 +1 @@
+"use strict";(()=>{var d="http://localhost:4319/security";function s(e){return chrome.runtime.sendMessage(e)}function r(e,t){let n=document.getElementById("status-dot"),o=document.getElementById("status-text");n&&(n.className=`dot ${t==="pending"?"":t}`.trim()),o&&(o.textContent=e)}function a(e){let t=document.getElementById("findings-row"),n=document.getElementById("findings-text");!t||!n||(n.textContent=`${e.toString()} finding${e===1?"":"s"} recorded (all time)`,t.hidden=!1)}async function i(){let e=await s({type:"ping"}).catch(()=>({type:"error",requestId:void 0,ok:!1,message:"relay failed"}));if(e.type!=="ping"){r("Native host not reachable \u2014 run `aka extension install`","error");return}r(e.onboarded?"Connected":"Connected (not onboarded \u2014 run aka:setup)","ok");let t=await s({type:"health"}).catch(()=>({type:"error",requestId:void 0,ok:!1,message:"relay failed"}));t.type==="health"&&a(t.findings)}document.getElementById("open-dashboard")?.addEventListener("click",()=>{chrome.tabs.create({url:d})});i();})();