@js-recon/js-recon 1.4.4 → 2.0.1-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (440) hide show
  1. package/.claude-sync/sync.sh +1 -1
  2. package/.github/dependabot.yml +50 -0
  3. package/.github/workflows/build-and-prettify.yaml +49 -19
  4. package/.github/workflows/codeql.yml +33 -0
  5. package/.github/workflows/exploit-smoke-test.yaml +160 -0
  6. package/.github/workflows/framework-detection-smoke-test.yaml +135 -0
  7. package/.github/workflows/plumber.yml +20 -0
  8. package/.github/workflows/promote-js-recon.yml +5 -3
  9. package/.github/workflows/publish-js-recon.yml +31 -2
  10. package/.github/workflows/rules-smoke-test.yaml +13 -5
  11. package/.nvmrc +1 -0
  12. package/.plumber.yaml +151 -0
  13. package/CHANGELOG.md +55 -0
  14. package/CONTRIBUTING.md +32 -0
  15. package/Dockerfile +1 -0
  16. package/README.md +3 -2
  17. package/SECURITY.md +1 -1
  18. package/build/analyze/engine/astEngine.js +10 -9
  19. package/build/analyze/engine/astEngine.js.map +1 -1
  20. package/build/analyze/engine/csMastSEngine.js +6 -6
  21. package/build/analyze/engine/csMastSEngine.js.map +1 -1
  22. package/build/analyze/engine/index.js +1 -1
  23. package/build/analyze/engine/index.js.map +1 -1
  24. package/build/analyze/engine/requestEngine.js +6 -6
  25. package/build/analyze/engine/requestEngine.js.map +1 -1
  26. package/build/analyze/helpers/determineCompatibleVersion.js +70 -0
  27. package/build/analyze/helpers/determineCompatibleVersion.js.map +1 -0
  28. package/build/analyze/helpers/engineHelpers/findMemberExpressionAssignment.js +9 -3
  29. package/build/analyze/helpers/engineHelpers/findMemberExpressionAssignment.js.map +1 -1
  30. package/build/analyze/helpers/initRules.js +9 -9
  31. package/build/analyze/helpers/initRules.js.map +1 -1
  32. package/build/analyze/helpers/outputHelper.js +3 -3
  33. package/build/analyze/helpers/outputHelper.js.map +1 -1
  34. package/build/analyze/helpers/schemas.js +1 -0
  35. package/build/analyze/helpers/schemas.js.map +1 -1
  36. package/build/analyze/helpers/validate.js +9 -5
  37. package/build/analyze/helpers/validate.js.map +1 -1
  38. package/build/analyze/index.js +26 -16
  39. package/build/analyze/index.js.map +1 -1
  40. package/build/cliProgram.js +733 -0
  41. package/build/cliProgram.js.map +1 -0
  42. package/build/completion/index.js +247 -382
  43. package/build/completion/index.js.map +1 -1
  44. package/build/completion/introspect.js +17 -0
  45. package/build/completion/introspect.js.map +1 -0
  46. package/build/config/applicationConfig.js +3 -2
  47. package/build/config/applicationConfig.js.map +1 -1
  48. package/build/cs_mast/index.js +18 -17
  49. package/build/cs_mast/index.js.map +1 -1
  50. package/build/endpoints/gen_report/gen_json.js +2 -2
  51. package/build/endpoints/gen_report/gen_json.js.map +1 -1
  52. package/build/endpoints/gen_report/utility/iterate_n_store.js +1 -1
  53. package/build/endpoints/gen_report/utility/iterate_n_store.js.map +1 -1
  54. package/build/endpoints/index.js +12 -12
  55. package/build/endpoints/index.js.map +1 -1
  56. package/build/endpoints/next_js/client_jsFilesHref.js +3 -3
  57. package/build/endpoints/next_js/client_jsFilesHref.js.map +1 -1
  58. package/build/endpoints/next_js/client_jsonParse.js +4 -4
  59. package/build/endpoints/next_js/client_jsonParse.js.map +1 -1
  60. package/build/endpoints/next_js/client_mappedJsonFile.js +6 -6
  61. package/build/endpoints/next_js/client_mappedJsonFile.js.map +1 -1
  62. package/build/endpoints/next_js/client_subsequentRequests.js +5 -5
  63. package/build/endpoints/next_js/client_subsequentRequests.js.map +1 -1
  64. package/build/exploit/angular/cve-2026-68945.js +61 -0
  65. package/build/exploit/angular/cve-2026-68945.js.map +1 -0
  66. package/build/exploit/index.js +60 -0
  67. package/build/exploit/index.js.map +1 -0
  68. package/build/exploit/next/cve-2025-29927.js +65 -0
  69. package/build/exploit/next/cve-2025-29927.js.map +1 -0
  70. package/build/exploit/next/cve-2026-64645.js +51 -0
  71. package/build/exploit/next/cve-2026-64645.js.map +1 -0
  72. package/build/exploit/nuxt/cve-2026-71315.js +47 -0
  73. package/build/exploit/nuxt/cve-2026-71315.js.map +1 -0
  74. package/build/exploit/nuxt/cve-2026-71320.js +114 -0
  75. package/build/exploit/nuxt/cve-2026-71320.js.map +1 -0
  76. package/build/exploit/react/cve-2025-55182.js +116 -0
  77. package/build/exploit/react/cve-2025-55182.js.map +1 -0
  78. package/build/exploit/registry/cveRegistry.js +115 -0
  79. package/build/exploit/registry/cveRegistry.js.map +1 -0
  80. package/build/exploit/types.js +2 -0
  81. package/build/exploit/types.js.map +1 -0
  82. package/build/exploit/utility/compareResponses.js +29 -0
  83. package/build/exploit/utility/compareResponses.js.map +1 -0
  84. package/build/exploit/utility/outputHelper.js +22 -0
  85. package/build/exploit/utility/outputHelper.js.map +1 -0
  86. package/build/exploit/utility/rawRequest.js +56 -0
  87. package/build/exploit/utility/rawRequest.js.map +1 -0
  88. package/build/exploit/utility/sandboxRce.js +49 -0
  89. package/build/exploit/utility/sandboxRce.js.map +1 -0
  90. package/build/exploit/utility/toEngineOutput.js +28 -0
  91. package/build/exploit/utility/toEngineOutput.js.map +1 -0
  92. package/build/exploit/utility/wsClient.js +78 -0
  93. package/build/exploit/utility/wsClient.js.map +1 -0
  94. package/build/exploit/vite/cve-2025-30208.js +44 -0
  95. package/build/exploit/vite/cve-2025-30208.js.map +1 -0
  96. package/build/exploit/vite/cve-2026-39363.js +60 -0
  97. package/build/exploit/vite/cve-2026-39363.js.map +1 -0
  98. package/build/fingerprint/index.js +3 -2
  99. package/build/fingerprint/index.js.map +1 -1
  100. package/build/globalConfig.js +2 -2
  101. package/build/globalConfig.js.map +1 -1
  102. package/build/index.js +5 -596
  103. package/build/index.js.map +1 -1
  104. package/build/lazyLoad/angular/angular_getFromPageSource.js +3 -3
  105. package/build/lazyLoad/angular/angular_getFromPageSource.js.map +1 -1
  106. package/build/lazyLoad/downloadFilesUtil.js +14 -11
  107. package/build/lazyLoad/downloadFilesUtil.js.map +1 -1
  108. package/build/lazyLoad/downloadQueue.js +9 -1
  109. package/build/lazyLoad/downloadQueue.js.map +1 -1
  110. package/build/lazyLoad/downloadResponse.js +1 -0
  111. package/build/lazyLoad/downloadResponse.js.map +1 -1
  112. package/build/lazyLoad/generic/generic_crawlPages.js +186 -0
  113. package/build/lazyLoad/generic/generic_crawlPages.js.map +1 -0
  114. package/build/lazyLoad/generic/generic_downloadFiles.js +81 -0
  115. package/build/lazyLoad/generic/generic_downloadFiles.js.map +1 -0
  116. package/build/lazyLoad/generic/generic_extractLinks.js +79 -0
  117. package/build/lazyLoad/generic/generic_extractLinks.js.map +1 -0
  118. package/build/lazyLoad/generic/generic_getScriptTags.js +152 -0
  119. package/build/lazyLoad/generic/generic_getScriptTags.js.map +1 -0
  120. package/build/lazyLoad/generic/generic_importMapDiscovery.js +87 -0
  121. package/build/lazyLoad/generic/generic_importMapDiscovery.js.map +1 -0
  122. package/build/lazyLoad/generic/generic_resolveScope.js +66 -0
  123. package/build/lazyLoad/generic/generic_resolveScope.js.map +1 -0
  124. package/build/lazyLoad/generic/generic_scanAttributesForJs.js +122 -0
  125. package/build/lazyLoad/generic/generic_scanAttributesForJs.js.map +1 -0
  126. package/build/lazyLoad/generic/generic_stringsDiscovery.js +103 -0
  127. package/build/lazyLoad/generic/generic_stringsDiscovery.js.map +1 -0
  128. package/build/lazyLoad/generic/generic_webpackChunkPaths.js +56 -0
  129. package/build/lazyLoad/generic/generic_webpackChunkPaths.js.map +1 -0
  130. package/build/lazyLoad/globals.js +31 -0
  131. package/build/lazyLoad/globals.js.map +1 -1
  132. package/build/lazyLoad/index.js +172 -75
  133. package/build/lazyLoad/index.js.map +1 -1
  134. package/build/lazyLoad/methodFilter.js +9 -1
  135. package/build/lazyLoad/methodFilter.js.map +1 -1
  136. package/build/lazyLoad/next_js/NextJsCrawler.js +98 -14
  137. package/build/lazyLoad/next_js/NextJsCrawler.js.map +1 -1
  138. package/build/lazyLoad/next_js/next_GetJSScript.js +3 -3
  139. package/build/lazyLoad/next_js/next_GetJSScript.js.map +1 -1
  140. package/build/lazyLoad/next_js/next_GetLazyResourcesBuildManifestJs.js +4 -4
  141. package/build/lazyLoad/next_js/next_GetLazyResourcesBuildManifestJs.js.map +1 -1
  142. package/build/lazyLoad/next_js/next_GetLazyResourcesWebpackJs.js +17 -11
  143. package/build/lazyLoad/next_js/next_GetLazyResourcesWebpackJs.js.map +1 -1
  144. package/build/lazyLoad/next_js/next_SubsequentRequests.js +7 -6
  145. package/build/lazyLoad/next_js/next_SubsequentRequests.js.map +1 -1
  146. package/build/lazyLoad/next_js/next_bruteForceJsFiles.js +1 -1
  147. package/build/lazyLoad/next_js/next_bruteForceJsFiles.js.map +1 -1
  148. package/build/lazyLoad/next_js/next_buildId.js +2 -2
  149. package/build/lazyLoad/next_js/next_buildId.js.map +1 -1
  150. package/build/lazyLoad/next_js/next_getClientSidePaths.js +2 -2
  151. package/build/lazyLoad/next_js/next_getClientSidePaths.js.map +1 -1
  152. package/build/lazyLoad/next_js/next_parseLayoutJs.js +6 -6
  153. package/build/lazyLoad/next_js/next_parseLayoutJs.js.map +1 -1
  154. package/build/lazyLoad/next_js/next_promiseResolve.js +1 -1
  155. package/build/lazyLoad/next_js/next_promiseResolve.js.map +1 -1
  156. package/build/lazyLoad/next_js/next_routerStateForge.js +407 -0
  157. package/build/lazyLoad/next_js/next_routerStateForge.js.map +1 -0
  158. package/build/lazyLoad/next_js/next_scriptTagsSubsequentRequests.js +1 -1
  159. package/build/lazyLoad/next_js/next_scriptTagsSubsequentRequests.js.map +1 -1
  160. package/build/lazyLoad/next_js/next_serverActionIdScan.js +77 -0
  161. package/build/lazyLoad/next_js/next_serverActionIdScan.js.map +1 -0
  162. package/build/lazyLoad/nuxt_js/nuxt_astParse.js +15 -13
  163. package/build/lazyLoad/nuxt_js/nuxt_astParse.js.map +1 -1
  164. package/build/lazyLoad/nuxt_js/nuxt_getBuildsManifest.js +2 -2
  165. package/build/lazyLoad/nuxt_js/nuxt_getBuildsManifest.js.map +1 -1
  166. package/build/lazyLoad/nuxt_js/nuxt_getFromPageSource.js +3 -3
  167. package/build/lazyLoad/nuxt_js/nuxt_getFromPageSource.js.map +1 -1
  168. package/build/lazyLoad/nuxt_js/nuxt_stringAnalysisJSFiles.js +29 -5
  169. package/build/lazyLoad/nuxt_js/nuxt_stringAnalysisJSFiles.js.map +1 -1
  170. package/build/lazyLoad/react/react_sourcemapUrls.js +7 -28
  171. package/build/lazyLoad/react/react_sourcemapUrls.js.map +1 -1
  172. package/build/lazyLoad/react/react_webpackChunkPaths.js +10 -202
  173. package/build/lazyLoad/react/react_webpackChunkPaths.js.map +1 -1
  174. package/build/lazyLoad/researchUtils.js +15 -0
  175. package/build/lazyLoad/researchUtils.js.map +1 -0
  176. package/build/lazyLoad/shared/webpackChunkParsers.js +218 -0
  177. package/build/lazyLoad/shared/webpackChunkParsers.js.map +1 -0
  178. package/build/lazyLoad/sourcemap.js +120 -0
  179. package/build/lazyLoad/sourcemap.js.map +1 -1
  180. package/build/lazyLoad/stagnation/stagnationMonitor.js +63 -0
  181. package/build/lazyLoad/stagnation/stagnationMonitor.js.map +1 -0
  182. package/build/lazyLoad/svelte/svelte_discoverPagesFromJs.js +1 -0
  183. package/build/lazyLoad/svelte/svelte_discoverPagesFromJs.js.map +1 -1
  184. package/build/lazyLoad/svelte/svelte_getFromPageSource.js +5 -5
  185. package/build/lazyLoad/svelte/svelte_getFromPageSource.js.map +1 -1
  186. package/build/lazyLoad/svelte/svelte_getVersionJson.js +2 -2
  187. package/build/lazyLoad/svelte/svelte_getVersionJson.js.map +1 -1
  188. package/build/lazyLoad/svelte/svelte_recursivePageCrawl.js +6 -6
  189. package/build/lazyLoad/svelte/svelte_recursivePageCrawl.js.map +1 -1
  190. package/build/lazyLoad/svelte/svelte_stringAnalysisJSFiles.js +15 -6
  191. package/build/lazyLoad/svelte/svelte_stringAnalysisJSFiles.js.map +1 -1
  192. package/build/lazyLoad/techDetect/checkAngularJS.js +1 -1
  193. package/build/lazyLoad/techDetect/checkAngularJS.js.map +1 -1
  194. package/build/lazyLoad/techDetect/checkNuxtJS.js +3 -3
  195. package/build/lazyLoad/techDetect/checkNuxtJS.js.map +1 -1
  196. package/build/lazyLoad/techDetect/checkSvelte.js +0 -1
  197. package/build/lazyLoad/techDetect/checkSvelte.js.map +1 -1
  198. package/build/lazyLoad/techDetect/checkVueJS.js +6 -6
  199. package/build/lazyLoad/techDetect/checkVueJS.js.map +1 -1
  200. package/build/lazyLoad/techDetect/index.js +17 -1
  201. package/build/lazyLoad/techDetect/index.js.map +1 -1
  202. package/build/lazyLoad/vue/vue_SingleJsFileOnHome.js +2 -2
  203. package/build/lazyLoad/vue/vue_SingleJsFileOnHome.js.map +1 -1
  204. package/build/lazyLoad/vue/vue_discoverJsFiles.js +13 -11
  205. package/build/lazyLoad/vue/vue_discoverJsFiles.js.map +1 -1
  206. package/build/lazyLoad/vue/vue_getClientSidePaths.js +1 -1
  207. package/build/lazyLoad/vue/vue_getClientSidePaths.js.map +1 -1
  208. package/build/lazyLoad/vue/vue_pageSrc.js +1 -1
  209. package/build/lazyLoad/vue/vue_pageSrc.js.map +1 -1
  210. package/build/lazyLoad/vue/vue_reconstructSourceMaps.js +12 -3
  211. package/build/lazyLoad/vue/vue_reconstructSourceMaps.js.map +1 -1
  212. package/build/lazyLoad/vue/vue_recursiveClientSidePathDownload.js +2 -2
  213. package/build/lazyLoad/vue/vue_recursiveClientSidePathDownload.js.map +1 -1
  214. package/build/lazyLoad/vue/vue_severalJsFilesHome.js +3 -3
  215. package/build/lazyLoad/vue/vue_severalJsFilesHome.js.map +1 -1
  216. package/build/load/index.js +28 -38
  217. package/build/load/index.js.map +1 -1
  218. package/build/map/angular_js/getAngularConnections.js +6 -6
  219. package/build/map/angular_js/getAngularConnections.js.map +1 -1
  220. package/build/map/graphql/resolveGraphql.js +6 -6
  221. package/build/map/graphql/resolveGraphql.js.map +1 -1
  222. package/build/map/index.js +17 -17
  223. package/build/map/index.js.map +1 -1
  224. package/build/map/interactive-mode/commandHandler.js +278 -0
  225. package/build/map/interactive-mode/commandHandler.js.map +1 -0
  226. package/build/map/interactive-mode/commandHelpers.js +189 -0
  227. package/build/map/interactive-mode/commandHelpers.js.map +1 -0
  228. package/build/map/interactive-mode/esqueryGen.js.map +1 -0
  229. package/build/map/interactive-mode/helpMenu.js +11 -0
  230. package/build/map/interactive-mode/helpMenu.js.map +1 -0
  231. package/build/map/interactive-mode/inputPatch.js.map +1 -0
  232. package/build/map/interactive-mode/interactive.js +71 -0
  233. package/build/map/interactive-mode/interactive.js.map +1 -0
  234. package/build/map/interactive-mode/keybindings.js.map +1 -0
  235. package/build/map/interactive-mode/printer.js.map +1 -0
  236. package/build/map/interactive-mode/ui.js.map +1 -0
  237. package/build/map/next_js/getAxiosInstances.js +5 -5
  238. package/build/map/next_js/getAxiosInstances.js.map +1 -1
  239. package/build/map/next_js/getExports.js +4 -4
  240. package/build/map/next_js/getExports.js.map +1 -1
  241. package/build/map/next_js/getFetchInstances.js +10 -10
  242. package/build/map/next_js/getFetchInstances.js.map +1 -1
  243. package/build/map/next_js/getTurbopackConnections.js +8 -8
  244. package/build/map/next_js/getTurbopackConnections.js.map +1 -1
  245. package/build/map/next_js/getWebpackConnections.js +27 -16
  246. package/build/map/next_js/getWebpackConnections.js.map +1 -1
  247. package/build/map/next_js/interactive.js +3 -65
  248. package/build/map/next_js/interactive.js.map +1 -1
  249. package/build/map/next_js/interactive_helpers/commandHandler.js +38 -290
  250. package/build/map/next_js/interactive_helpers/commandHandler.js.map +1 -1
  251. package/build/map/next_js/interactive_helpers/commandHelpers.js +0 -184
  252. package/build/map/next_js/interactive_helpers/commandHelpers.js.map +1 -1
  253. package/build/map/next_js/interactive_helpers/helpMenu.js +2 -10
  254. package/build/map/next_js/interactive_helpers/helpMenu.js.map +1 -1
  255. package/build/map/next_js/resolveAxios.js +6 -6
  256. package/build/map/next_js/resolveAxios.js.map +1 -1
  257. package/build/map/next_js/resolveAxiosHelpers/findAxiosClients.js +4 -4
  258. package/build/map/next_js/resolveAxiosHelpers/findAxiosClients.js.map +1 -1
  259. package/build/map/next_js/resolveAxiosHelpers/findAxiosInstance.js +2 -2
  260. package/build/map/next_js/resolveAxiosHelpers/findAxiosInstance.js.map +1 -1
  261. package/build/map/next_js/resolveAxiosHelpers/findCrossChunkParams.js +5 -5
  262. package/build/map/next_js/resolveAxiosHelpers/findCrossChunkParams.js.map +1 -1
  263. package/build/map/next_js/resolveAxiosHelpers/handleAxiosCreate.js +10 -10
  264. package/build/map/next_js/resolveAxiosHelpers/handleAxiosCreate.js.map +1 -1
  265. package/build/map/next_js/resolveAxiosHelpers/handleZDotCreate.js +13 -9
  266. package/build/map/next_js/resolveAxiosHelpers/handleZDotCreate.js.map +1 -1
  267. package/build/map/next_js/resolveAxiosHelpers/processAxiosCall.js +12 -8
  268. package/build/map/next_js/resolveAxiosHelpers/processAxiosCall.js.map +1 -1
  269. package/build/map/next_js/resolveAxiosHelpers/processDirectAxiosCall.js +12 -8
  270. package/build/map/next_js/resolveAxiosHelpers/processDirectAxiosCall.js.map +1 -1
  271. package/build/map/next_js/resolveAxiosHelpers/processExportedEndpoints.js +11 -11
  272. package/build/map/next_js/resolveAxiosHelpers/processExportedEndpoints.js.map +1 -1
  273. package/build/map/next_js/resolveAxiosHelpers/traceAxiosInstanceExports.js +16 -16
  274. package/build/map/next_js/resolveAxiosHelpers/traceAxiosInstanceExports.js.map +1 -1
  275. package/build/map/next_js/resolveFetch.js +23 -23
  276. package/build/map/next_js/resolveFetch.js.map +1 -1
  277. package/build/map/next_js/resolveNewRequest.js +10 -10
  278. package/build/map/next_js/resolveNewRequest.js.map +1 -1
  279. package/build/map/next_js/resolveServerActions.js +4 -4
  280. package/build/map/next_js/resolveServerActions.js.map +1 -1
  281. package/build/map/next_js/utils.js +8 -2
  282. package/build/map/next_js/utils.js.map +1 -1
  283. package/build/map/react_js/getReactConnections.js +21 -14
  284. package/build/map/react_js/getReactConnections.js.map +1 -1
  285. package/build/map/svelte_js/interactive.js +3 -54
  286. package/build/map/svelte_js/interactive.js.map +1 -1
  287. package/build/map/vue_js/getViteConnections.js +23 -16
  288. package/build/map/vue_js/getViteConnections.js.map +1 -1
  289. package/build/map/vue_js/interactive.js +3 -63
  290. package/build/map/vue_js/interactive.js.map +1 -1
  291. package/build/map/vue_js/interactive_helpers/commandHandler.js +34 -283
  292. package/build/map/vue_js/interactive_helpers/commandHandler.js.map +1 -1
  293. package/build/map/vue_js/interactive_helpers/helpMenu.js +2 -10
  294. package/build/map/vue_js/interactive_helpers/helpMenu.js.map +1 -1
  295. package/build/map/vue_js/taint_utils.js +1 -1
  296. package/build/map/vue_js/taint_utils.js.map +1 -1
  297. package/build/map/vue_js/vue_resolveFetch.js +12 -12
  298. package/build/map/vue_js/vue_resolveFetch.js.map +1 -1
  299. package/build/map/vue_js/vue_resolveHttpClient.js +18 -18
  300. package/build/map/vue_js/vue_resolveHttpClient.js.map +1 -1
  301. package/build/map/vue_js/vue_resolveXhr.js +11 -11
  302. package/build/map/vue_js/vue_resolveXhr.js.map +1 -1
  303. package/build/mcp/chatOneShot.js +7 -7
  304. package/build/mcp/chatOneShot.js.map +1 -1
  305. package/build/mcp/claudeCodeCreds.js +5 -5
  306. package/build/mcp/claudeCodeCreds.js.map +1 -1
  307. package/build/mcp/cli.js +36 -35
  308. package/build/mcp/cli.js.map +1 -1
  309. package/build/mcp/config.js +4 -4
  310. package/build/mcp/config.js.map +1 -1
  311. package/build/mcp/index.js +7 -7
  312. package/build/mcp/index.js.map +1 -1
  313. package/build/mcp/mcpServer.js +4 -3
  314. package/build/mcp/mcpServer.js.map +1 -1
  315. package/build/mcp/skills.js +1 -0
  316. package/build/mcp/skills.js.map +1 -1
  317. package/build/mcp/tools.js +6 -5
  318. package/build/mcp/tools.js.map +1 -1
  319. package/build/proxy/detectBlockedResponse.js +2 -0
  320. package/build/proxy/detectBlockedResponse.js.map +1 -1
  321. package/build/proxy/index.js +3 -3
  322. package/build/proxy/index.js.map +1 -1
  323. package/build/refactor/index.js +83 -79
  324. package/build/refactor/index.js.map +1 -1
  325. package/build/refactor/next/index.js +69 -26
  326. package/build/refactor/next/index.js.map +1 -1
  327. package/build/refactor/next/transform.js +11 -4
  328. package/build/refactor/next/transform.js.map +1 -1
  329. package/build/refactor/next/validator.js +7 -7
  330. package/build/refactor/next/validator.js.map +1 -1
  331. package/build/refactor/react/index.js +13 -13
  332. package/build/refactor/react/index.js.map +1 -1
  333. package/build/refactor/react/validator.js +7 -7
  334. package/build/refactor/react/validator.js.map +1 -1
  335. package/build/refactor/react-vite/index.js +3 -3
  336. package/build/refactor/react-vite/index.js.map +1 -1
  337. package/build/refactor/remote/hf-client.js +1 -0
  338. package/build/refactor/remote/hf-client.js.map +1 -1
  339. package/build/refactor/remote/version-detect.js +12 -12
  340. package/build/refactor/remote/version-detect.js.map +1 -1
  341. package/build/refactor/vue/index.js +6 -6
  342. package/build/refactor/vue/index.js.map +1 -1
  343. package/build/refactor/vue/vite.js +6 -6
  344. package/build/refactor/vue/vite.js.map +1 -1
  345. package/build/report/index.js +30 -8
  346. package/build/report/index.js.map +1 -1
  347. package/build/report/swaggerJacker.js +63 -0
  348. package/build/report/swaggerJacker.js.map +1 -0
  349. package/build/report/utility/dataTables/genDataTablesPage.js +2 -1
  350. package/build/report/utility/dataTables/genDataTablesPage.js.map +1 -1
  351. package/build/report/utility/genHtml.js +316 -25
  352. package/build/report/utility/genHtml.js.map +1 -1
  353. package/build/report/utility/markdownGen/addAnalyze.js +2 -1
  354. package/build/report/utility/markdownGen/addAnalyze.js.map +1 -1
  355. package/build/report/utility/populateDb/populateAnalysisFindings.js +2 -2
  356. package/build/report/utility/populateDb/populateAnalysisFindings.js.map +1 -1
  357. package/build/report/utility/populateDb/populateEndpoints.js +3 -3
  358. package/build/report/utility/populateDb/populateEndpoints.js.map +1 -1
  359. package/build/report/utility/populateDb/populateMappedJson.js +2 -2
  360. package/build/report/utility/populateDb/populateMappedJson.js.map +1 -1
  361. package/build/report/utility/populateDb/populateMappedOpenapi.js +3 -3
  362. package/build/report/utility/populateDb/populateMappedOpenapi.js.map +1 -1
  363. package/build/report/utility/severityColors.js +35 -0
  364. package/build/report/utility/severityColors.js.map +1 -0
  365. package/build/run/bundler-detect.js +45 -9
  366. package/build/run/bundler-detect.js.map +1 -1
  367. package/build/run/dashboard/dashboardHtml.js +150 -0
  368. package/build/run/dashboard/dashboardHtml.js.map +1 -0
  369. package/build/run/dashboard/fsBrowser.js +43 -0
  370. package/build/run/dashboard/fsBrowser.js.map +1 -0
  371. package/build/run/dashboard/server.js +123 -0
  372. package/build/run/dashboard/server.js.map +1 -0
  373. package/build/run/dashboard/state.js +97 -0
  374. package/build/run/dashboard/state.js.map +1 -0
  375. package/build/run/index.js +177 -110
  376. package/build/run/index.js.map +1 -1
  377. package/build/run/interruptHandler.js +18 -0
  378. package/build/run/interruptHandler.js.map +1 -1
  379. package/build/sourcemaps/index.js +7 -6
  380. package/build/sourcemaps/index.js.map +1 -1
  381. package/build/strings/index.js +27 -24
  382. package/build/strings/index.js.map +1 -1
  383. package/build/strings/openapi.js +4 -4
  384. package/build/strings/openapi.js.map +1 -1
  385. package/build/strings/permutate.js +4 -4
  386. package/build/strings/permutate.js.map +1 -1
  387. package/build/strings/secrets.js +1 -0
  388. package/build/strings/secrets.js.map +1 -1
  389. package/build/strings/trufflehog.js +66 -19
  390. package/build/strings/trufflehog.js.map +1 -1
  391. package/build/strings/trufflehogConfig.js +36 -0
  392. package/build/strings/trufflehogConfig.js.map +1 -0
  393. package/build/strings/trufflehogDownload.js +115 -0
  394. package/build/strings/trufflehogDownload.js.map +1 -0
  395. package/build/utility/ai.js +33 -4
  396. package/build/utility/ai.js.map +1 -1
  397. package/build/utility/banner.js +4 -3
  398. package/build/utility/banner.js.map +1 -1
  399. package/build/utility/cacheDb.js +78 -0
  400. package/build/utility/cacheDb.js.map +1 -0
  401. package/build/utility/configureSandbox.js +2 -2
  402. package/build/utility/configureSandbox.js.map +1 -1
  403. package/build/utility/customHeaders.js +30 -0
  404. package/build/utility/customHeaders.js.map +1 -0
  405. package/build/utility/globals.js +37 -12
  406. package/build/utility/globals.js.map +1 -1
  407. package/build/utility/heap.js +2 -1
  408. package/build/utility/heap.js.map +1 -1
  409. package/build/utility/makeReq.js +38 -87
  410. package/build/utility/makeReq.js.map +1 -1
  411. package/build/utility/openapiGenerator.js +2 -2
  412. package/build/utility/openapiGenerator.js.map +1 -1
  413. package/build/utility/printMsg.js +53 -0
  414. package/build/utility/printMsg.js.map +1 -0
  415. package/build/utility/progressLog.js +4 -3
  416. package/build/utility/progressLog.js.map +1 -1
  417. package/build/utility/resolvePath.js +2 -1
  418. package/build/utility/resolvePath.js.map +1 -1
  419. package/build/utility/ruleVersionMap.js +73 -0
  420. package/build/utility/ruleVersionMap.js.map +1 -0
  421. package/config.dist.yaml +3 -3
  422. package/contributing/testing.md +106 -0
  423. package/eslint.config.js +24 -0
  424. package/package.json +22 -6
  425. package/scripts/exploit-smoke-test.js +82 -0
  426. package/scripts/framework-detect-smoke-test.js +64 -0
  427. package/scripts/postinstall-completion.mjs +40 -0
  428. package/scripts/smoke-test.js +12 -0
  429. package/build/lazyLoad/downloadLoadedJsUtil.js +0 -98
  430. package/build/lazyLoad/downloadLoadedJsUtil.js.map +0 -1
  431. package/build/map/next_js/interactive_helpers/esqueryGen.js.map +0 -1
  432. package/build/map/next_js/interactive_helpers/inputPatch.js.map +0 -1
  433. package/build/map/next_js/interactive_helpers/keybindings.js.map +0 -1
  434. package/build/map/next_js/interactive_helpers/printer.js.map +0 -1
  435. package/build/map/next_js/interactive_helpers/ui.js.map +0 -1
  436. /package/build/map/{next_js/interactive_helpers → interactive-mode}/esqueryGen.js +0 -0
  437. /package/build/map/{next_js/interactive_helpers → interactive-mode}/inputPatch.js +0 -0
  438. /package/build/map/{next_js/interactive_helpers → interactive-mode}/keybindings.js +0 -0
  439. /package/build/map/{next_js/interactive_helpers → interactive-mode}/printer.js +0 -0
  440. /package/build/map/{next_js/interactive_helpers → interactive-mode}/ui.js +0 -0
@@ -7,7 +7,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
7
7
  step((generator = generator.apply(thisArg, _arguments || [])).next());
8
8
  });
9
9
  };
10
- import chalk from "chalk";
10
+ import { printMsg, MSG } from "../../../utility/printMsg.js";
11
11
  /**
12
12
  * Populates the mapped JSON table in the database with the given chunks.
13
13
  *
@@ -26,6 +26,6 @@ export const populateMappedJson = (db, chunks) => __awaiter(void 0, void 0, void
26
26
  }
27
27
  });
28
28
  insertMany(Object.values(chunks));
29
- console.log(chalk.green("[✓] Populated mapped data into the database..."));
29
+ printMsg(MSG.Run, "[✓] Populated mapped data into the database...");
30
30
  });
31
31
  //# sourceMappingURL=populateMappedJson.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"populateMappedJson.js","sourceRoot":"","sources":["../../../../src/report/utility/populateDb/populateMappedJson.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAO,EAAqB,EAAE,MAAc,EAAE,EAAE;IAC9E,4CAA4C;IAC5C,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,GAAG,EAAE,CAAC;IAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACrB,6JAA6J,CAChK,CAAC;IAEF,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CACN,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC7B,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC1B,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC1B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAC9B,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAC5B,IAAI,CAAC,IAAI,CACZ,CAAC;QACN,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAA,CAAC"}
1
+ {"version":3,"file":"populateMappedJson.js","sourceRoot":"","sources":["../../../../src/report/utility/populateDb/populateMappedJson.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AAG7D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAO,EAAqB,EAAE,MAAc,EAAE,EAAE;IAC9E,4CAA4C;IAC5C,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,GAAG,EAAE,CAAC;IAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACrB,6JAA6J,CAChK,CAAC;IAEF,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CACN,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC7B,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC1B,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC1B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAC9B,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAC5B,IAAI,CAAC,IAAI,CACZ,CAAC;QACN,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,gDAAgD,CAAC,CAAC;AACxE,CAAC,CAAA,CAAC"}
@@ -7,7 +7,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
7
7
  step((generator = generator.apply(thisArg, _arguments || [])).next());
8
8
  });
9
9
  };
10
- import chalk from "chalk";
10
+ import { printMsg, MSG } from "../../../utility/printMsg.js";
11
11
  /**
12
12
  * Populates the mapped OpenAPI table in the database with the given OpenAPI data.
13
13
  *
@@ -38,12 +38,12 @@ const populateMappedOpenapi = (db, openapi) => __awaiter(void 0, void 0, void 0,
38
38
  });
39
39
  }
40
40
  catch (error) {
41
- console.error(`Error inserting OpenAPI path: ${path} [${method}]`, error);
41
+ printMsg(MSG.Err, `Error inserting OpenAPI path: ${path} [${method}] - ${error}`);
42
42
  }
43
43
  }
44
44
  }
45
45
  })();
46
- console.log(chalk.green("[✓] Populated mapped openapi into the database..."));
46
+ printMsg(MSG.Run, "[✓] Populated mapped openapi into the database...");
47
47
  });
48
48
  export default populateMappedOpenapi;
49
49
  //# sourceMappingURL=populateMappedOpenapi.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"populateMappedOpenapi.js","sourceRoot":"","sources":["../../../../src/report/utility/populateDb/populateMappedOpenapi.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,CAAO,EAAqB,EAAE,OAAY,EAAE,EAAE;IACxE,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACrB;6EACqE,CACxE,CAAC;IAEF,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAChB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO;QACX,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChC,IAAI,CAAC;oBACD,MAAM,CAAC,GAAG,CAAC;wBACP,IAAI,EAAE,IAAI;wBACV,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;wBAChC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;wBAC1E,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;wBAC7E,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;qBAC3D,CAAC,CAAC;gBACP,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,iCAAiC,IAAI,KAAK,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC9E,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;AAClF,CAAC,CAAA,CAAC;AAEF,eAAe,qBAAqB,CAAC"}
1
+ {"version":3,"file":"populateMappedOpenapi.js","sourceRoot":"","sources":["../../../../src/report/utility/populateDb/populateMappedOpenapi.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,CAAO,EAAqB,EAAE,OAAY,EAAE,EAAE;IACxE,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACrB;6EACqE,CACxE,CAAC;IAEF,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAChB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO;QACX,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChC,IAAI,CAAC;oBACD,MAAM,CAAC,GAAG,CAAC;wBACP,IAAI,EAAE,IAAI;wBACV,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;wBAChC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;wBAC1E,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;wBAC7E,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;qBAC3D,CAAC,CAAC;gBACP,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACb,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,iCAAiC,IAAI,KAAK,MAAM,OAAO,KAAK,EAAE,CAAC,CAAC;gBACtF,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC,CAAC,EAAE,CAAC;IAEL,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAC;AAC3E,CAAC,CAAA,CAAC;AAEF,eAAe,qBAAqB,CAAC"}
@@ -0,0 +1,35 @@
1
+ /**
2
+ * Shared severity → color mapping and badge rendering, used by both the
3
+ * DataTables findings table and the markdown finding write-up so the two
4
+ * surfaces stay visually consistent.
5
+ */
6
+ export const SEVERITY_COLORS = {
7
+ info: { bg: "var(--sev-info-bg)", text: "var(--sev-info-text)", border: "var(--sev-info-border)" },
8
+ low: { bg: "var(--sev-low-bg)", text: "var(--sev-low-text)", border: "var(--sev-low-border)" },
9
+ medium: { bg: "var(--sev-medium-bg)", text: "var(--sev-medium-text)", border: "var(--sev-medium-border)" },
10
+ high: { bg: "var(--sev-high-bg)", text: "var(--sev-high-text)", border: "var(--sev-high-border)" },
11
+ };
12
+ const escapeHtml = (value) => {
13
+ const str = value === null || value === undefined ? "" : String(value);
14
+ return str
15
+ .replace(/&/g, "&")
16
+ .replace(/</g, "&lt;")
17
+ .replace(/>/g, "&gt;")
18
+ .replace(/"/g, "&quot;")
19
+ .replace(/'/g, "&#39;");
20
+ };
21
+ /**
22
+ * Renders a severity value as a colored badge span.
23
+ *
24
+ * @param severity - The severity string (e.g. "info", "low", "medium", "high")
25
+ * @returns HTML for a `<span class="badge badge-<severity>">` element. Unknown
26
+ * severities fall back to a neutral "badge-unknown" style.
27
+ */
28
+ export const severityBadgeHtml = (severity) => {
29
+ const key = (severity || "").toString().toLowerCase().trim();
30
+ const known = Object.prototype.hasOwnProperty.call(SEVERITY_COLORS, key);
31
+ const cls = known ? `badge-${key}` : "badge-unknown";
32
+ const label = escapeHtml(severity !== null && severity !== void 0 ? severity : "unknown");
33
+ return `<span class="badge ${cls}">${label}</span>`;
34
+ };
35
+ //# sourceMappingURL=severityColors.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"severityColors.js","sourceRoot":"","sources":["../../../src/report/utility/severityColors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,MAAM,CAAC,MAAM,eAAe,GAAkC;IAC1D,IAAI,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,wBAAwB,EAAE;IAClG,GAAG,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,uBAAuB,EAAE;IAC9F,MAAM,EAAE,EAAE,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,0BAA0B,EAAE;IAC1G,IAAI,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,wBAAwB,EAAE;CACrG,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE;IAC1C,MAAM,GAAG,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,GAAG;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAmC,EAAU,EAAE;IAC7E,MAAM,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,SAAS,CAAC,CAAC;IAChD,OAAO,sBAAsB,GAAG,KAAK,KAAK,SAAS,CAAC;AACxD,CAAC,CAAC"}
@@ -12,11 +12,11 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
12
12
  });
13
13
  };
14
14
  import fs from "fs";
15
- import chalk from "chalk";
16
15
  import { TECH_TO_BRANCH, validateRemoteBranch, listCollisionsFiles, listCollisionsFileHashes, fetchCollisionsJson, getHfRawUrl, } from "../refactor/remote/hf-client.js";
17
16
  import { isSignatureCacheFresh, loadCachedSignature, saveSignatureToCache, loadListCache, saveListCache, shouldRefreshListCache, } from "../refactor/remote/cache.js";
18
17
  import { loadRefactorConfig } from "../refactor/remote/config.js";
19
18
  import { generateBundleSignatures } from "../refactor/remote/version-detect.js";
19
+ import { printMsg, MSG } from "../utility/printMsg.js";
20
20
  // Maps run-module framework names to candidate refactor tech identifiers.
21
21
  const FRAMEWORK_TO_TECHS = {
22
22
  react: ["react-webpack", "react-vite"],
@@ -26,7 +26,38 @@ const FRAMEWORK_TO_TECHS = {
26
26
  };
27
27
  const DETECTION_SCAT = ["lit", "decl", "loop", "cond"];
28
28
  const DETECTION_SCAT_DIR = "lit-decl-loop-cond";
29
- const DETECTION_SAMPLE_SIZE = 15;
29
+ // Current react-webpack/react-vite buckets hold ~36 collision files each for this scat.
30
+ // Sampling only 15 of them left match counts sensitive to which random subset was drawn —
31
+ // close calls (e.g. two candidates within a few percent of each other) could flip which
32
+ // tech "won" between identical runs against the same bundle. Set high enough to cover the
33
+ // full bucket at its current size; `randomSample` still caps it if the bucket grows well
34
+ // past this.
35
+ const DETECTION_SAMPLE_SIZE = 200;
36
+ // Literal bundler-runtime markers, checked before the CS-MAST-S structural comparison.
37
+ // Module-loader glue and preload polyfills are emitted verbatim by the bundler itself —
38
+ // unlike app/library code, minifiers don't rename these literal property/string
39
+ // accesses, so they're a cheap, high-confidence signal when exactly one candidate's
40
+ // markers are present. CS-MAST-S structural signatures can't discriminate reliably here:
41
+ // they're computed over app + vendored library code, which is largely bundler-agnostic,
42
+ // so two candidates can score closely even when only one bundler's runtime is actually
43
+ // present in the bundle.
44
+ const BUNDLER_MARKERS = {
45
+ "react-webpack": [/__webpack_require__/, /__webpack_modules__/, /webpackJsonp/],
46
+ "react-vite": [/\.supports\(\s*["']modulepreload["']\s*\)/, /__vite__mapDeps/, /__vitePreload/],
47
+ };
48
+ /**
49
+ * Checks bundle code for literal bundler-runtime markers unique to each candidate tech.
50
+ * Returns the matching tech only when exactly one candidate's markers are present —
51
+ * ambiguous (multiple or zero matches) cases are left to the CS-MAST-S comparison.
52
+ */
53
+ export function detectByMarker(chunks, candidateTechs) {
54
+ const allCode = Object.values(chunks)
55
+ .map((c) => c.code)
56
+ .filter(Boolean)
57
+ .join("\n");
58
+ const matched = candidateTechs.filter((tech) => { var _a; return ((_a = BUNDLER_MARKERS[tech]) !== null && _a !== void 0 ? _a : []).some((re) => re.test(allCode)); });
59
+ return matched.length === 1 ? matched[0] : null;
60
+ }
30
61
  function randomSample(arr, n) {
31
62
  const copy = [...arr];
32
63
  const result = [];
@@ -67,12 +98,17 @@ export function detectBundler(mappedJsonPath_1, framework_1, threshold_1) {
67
98
  chunks = JSON.parse(fs.readFileSync(mappedJsonPath, "utf8"));
68
99
  }
69
100
  catch (_d) {
70
- console.log(chalk.yellow("[!] Bundler detection: could not read mapped.json — skipping refactor."));
101
+ printMsg(MSG.Warn, "[!] Bundler detection: could not read mapped.json — skipping refactor.");
71
102
  return null;
72
103
  }
104
+ const markerTech = detectByMarker(chunks, availableTechs);
105
+ if (markerTech) {
106
+ printMsg(MSG.Header, `[i] Bundler detection: ${markerTech} — matched via bundler runtime marker (skipping CS-MAST-S sampling)`);
107
+ return markerTech;
108
+ }
73
109
  const bundleSigs = generateBundleSignatures(chunks, DETECTION_SCAT);
74
110
  if (bundleSigs.size === 0) {
75
- console.log(chalk.yellow("[!] Bundler detection: bundle produced no CS-MAST signatures — skipping refactor."));
111
+ printMsg(MSG.Warn, "[!] Bundler detection: bundle produced no CS-MAST signatures — skipping refactor.");
76
112
  return null;
77
113
  }
78
114
  const config = yield loadRefactorConfig();
@@ -83,14 +119,14 @@ export function detectBundler(mappedJsonPath_1, framework_1, threshold_1) {
83
119
  // Validate the HF bucket branch exists.
84
120
  const branchOk = yield validateRemoteBranch(branch);
85
121
  if (!branchOk) {
86
- console.log(chalk.yellow(`[!] Bundler detection: no signatures for ${tech} in remote bucket — skipping.`));
122
+ printMsg(MSG.Warn, `[!] Bundler detection: no signatures for ${tech} in remote bucket — skipping.`);
87
123
  continue;
88
124
  }
89
125
  // Resolve the list of collision files, using the list cache when fresh.
90
126
  let listCache = loadListCache();
91
127
  const branchMissingFromCache = !(listCache === null || listCache === void 0 ? void 0 : listCache.branches[branch]);
92
128
  if (shouldRefreshListCache(listCache, { refreshCache: false, skipCacheChecks }) || branchMissingFromCache) {
93
- console.log(chalk.cyan(`[i] Refreshing file list cache for ${branch}...`));
129
+ printMsg(MSG.Header, `[i] Refreshing file list cache for ${branch}...`);
94
130
  const paths = yield listCollisionsFiles(branch, DETECTION_SCAT_DIR);
95
131
  const now = Date.now();
96
132
  const branches = (_a = listCache === null || listCache === void 0 ? void 0 : listCache.branches) !== null && _a !== void 0 ? _a : {};
@@ -100,7 +136,7 @@ export function detectBundler(mappedJsonPath_1, framework_1, threshold_1) {
100
136
  }
101
137
  const allPaths = ((_b = listCache === null || listCache === void 0 ? void 0 : listCache.branches[branch]) !== null && _b !== void 0 ? _b : []).filter((p) => p.endsWith(`/${DETECTION_SCAT_DIR}/collisions.json`));
102
138
  if (allPaths.length === 0) {
103
- console.log(chalk.yellow(`[!] Bundler detection: no collision files for scat "${DETECTION_SCAT_DIR}" in branch "${branch}" — skipping.`));
139
+ printMsg(MSG.Warn, `[!] Bundler detection: no collision files for scat "${DETECTION_SCAT_DIR}" in branch "${branch}" — skipping.`);
104
140
  continue;
105
141
  }
106
142
  // Sample a random subset to keep detection fast.
@@ -115,7 +151,7 @@ export function detectBundler(mappedJsonPath_1, framework_1, threshold_1) {
115
151
  remoteHashes = yield listCollisionsFileHashes(branch, DETECTION_SCAT_DIR);
116
152
  }
117
153
  catch (e) {
118
- console.log(chalk.yellow(`[!] Could not fetch upstream content hashes for cache validation (${e.message}) — falling back to age-based cache checks.`));
154
+ printMsg(MSG.Warn, `[!] Could not fetch upstream content hashes for cache validation (${e.message}) — falling back to age-based cache checks.`);
119
155
  }
120
156
  }
121
157
  let matchCount = 0;
@@ -139,7 +175,7 @@ export function detectBundler(mappedJsonPath_1, framework_1, threshold_1) {
139
175
  }
140
176
  }
141
177
  }
142
- console.log(chalk.cyan(`[i] Bundler detection: ${tech} — ${matchCount} signature match(es) (threshold: ${threshold})`));
178
+ printMsg(MSG.Header, `[i] Bundler detection: ${tech} — ${matchCount} signature match(es) (threshold: ${threshold})`);
143
179
  if (matchCount > bestMatchCount) {
144
180
  bestMatchCount = matchCount;
145
181
  bestTech = tech;
@@ -1 +1 @@
1
- {"version":3,"file":"bundler-detect.js","sourceRoot":"","sources":["../../src/run/bundler-detect.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,8EAA8E;AAC9E,6EAA6E;AAC7E,sEAAsE;;;;;;;;;;AAEtE,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,WAAW,GACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACH,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,sBAAsB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAGhF,0EAA0E;AAC1E,MAAM,kBAAkB,GAA6B;IACjD,KAAK,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC;IACtC,GAAG,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC;IAChC,IAAI,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC;IACjC,IAAI,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAC;CAC3C,CAAC;AAEF,MAAM,cAAc,GAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACvE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC,SAAS,YAAY,CAAI,GAAQ,EAAE,CAAS;IACxC,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IACtB,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAgB,aAAa;yDAC/B,cAAsB,EACtB,SAAiB,EACjB,SAAiB,EACjB,eAAe,GAAG,KAAK;;QAEvB,MAAM,cAAc,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QAEjC,+EAA+E;QAC/E,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7C,oFAAoF;QACpF,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAW,CAAC;QAC3E,CAAC;QAAC,WAAM,CAAC;YACL,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,wEAAwE,CAAC,CAAC,CAAC;YACpG,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACpE,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,mFAAmF,CAAC,CAAC,CAAC;YAC/G,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAC1C,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YAEpC,wCAAwC;YACxC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,4CAA4C,IAAI,+BAA+B,CAAC,CAAC,CAAC;gBAC3G,SAAS;YACb,CAAC;YAED,wEAAwE;YACxE,IAAI,SAAS,GAAG,aAAa,EAAE,CAAC;YAChC,MAAM,sBAAsB,GAAG,CAAC,CAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,QAAQ,CAAC,MAAM,CAAC,CAAA,CAAC;YAC5D,IAAI,sBAAsB,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,IAAI,sBAAsB,EAAE,CAAC;gBACxG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,sCAAsC,MAAM,KAAK,CAAC,CAAC,CAAC;gBAC3E,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;gBACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAA6B,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,QAAQ,mCAAI,EAAE,CAAC;gBACrE,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;gBACzB,SAAS,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;gBAC3C,aAAa,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;YAED,MAAM,QAAQ,GAAG,CAAC,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,QAAQ,CAAC,MAAM,CAAC,mCAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9D,CAAC,CAAC,QAAQ,CAAC,IAAI,kBAAkB,kBAAkB,CAAC,CACvD,CAAC;YAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CACP,KAAK,CAAC,MAAM,CACR,uDAAuD,kBAAkB,gBAAgB,MAAM,eAAe,CACjH,CACJ,CAAC;gBACF,SAAS;YACb,CAAC;YAED,iDAAiD;YACjD,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;YAE9D,8EAA8E;YAC9E,qFAAqF;YACrF,mFAAmF;YACnF,oFAAoF;YACpF,IAAI,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC7C,IAAI,CAAC,eAAe,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACD,YAAY,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;gBAC9E,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACT,OAAO,CAAC,GAAG,CACP,KAAK,CAAC,MAAM,CACR,qEAAsE,CAAW,CAAC,OAAO,6CAA6C,CACzI,CACJ,CAAC;gBACN,CAAC;YACL,CAAC;YAED,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC;gBACZ,MAAM,UAAU,GAAG,MAAA,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,mCAAI,IAAI,CAAC;gBACrD,IAAI,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,CAAC;oBACtE,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACnD,CAAC;qBAAM,CAAC;oBACJ,OAAO,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;oBAClE,IAAI,OAAO,EAAE,CAAC;wBACV,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;oBACtF,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAEvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC3B,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;wBACnC,UAAU,EAAE,CAAC;oBACjB,CAAC;gBACL,CAAC;YACL,CAAC;YAED,OAAO,CAAC,GAAG,CACP,KAAK,CAAC,IAAI,CAAC,0BAA0B,IAAI,MAAM,UAAU,oCAAoC,SAAS,GAAG,CAAC,CAC7G,CAAC;YAEF,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;gBAC9B,cAAc,GAAG,UAAU,CAAC;gBAC5B,QAAQ,GAAG,IAAI,CAAC;YACpB,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,KAAK,IAAI,IAAI,cAAc,IAAI,SAAS,EAAE,CAAC;YACnD,OAAO,QAAQ,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CAAA"}
1
+ {"version":3,"file":"bundler-detect.js","sourceRoot":"","sources":["../../src/run/bundler-detect.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,8EAA8E;AAC9E,6EAA6E;AAC7E,sEAAsE;;;;;;;;;;AAEtE,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EACH,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,WAAW,GACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACH,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,sBAAsB,GACzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAEhF,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAEvD,0EAA0E;AAC1E,MAAM,kBAAkB,GAA6B;IACjD,KAAK,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC;IACtC,GAAG,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC;IAChC,IAAI,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC;IACjC,IAAI,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAC;CAC3C,CAAC;AAEF,MAAM,cAAc,GAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACvE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,wFAAwF;AACxF,0FAA0F;AAC1F,wFAAwF;AACxF,0FAA0F;AAC1F,yFAAyF;AACzF,aAAa;AACb,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,uFAAuF;AACvF,wFAAwF;AACxF,gFAAgF;AAChF,oFAAoF;AACpF,yFAAyF;AACzF,wFAAwF;AACxF,uFAAuF;AACvF,yBAAyB;AACzB,MAAM,eAAe,GAA6B;IAC9C,eAAe,EAAE,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,cAAc,CAAC;IAC/E,YAAY,EAAE,CAAC,2CAA2C,EAAE,iBAAiB,EAAE,eAAe,CAAC;CAClG,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,cAAwB;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,WAAC,OAAA,CAAC,MAAA,eAAe,CAAC,IAAI,CAAC,mCAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA,EAAA,CAAC,CAAC;IAC9G,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,SAAS,YAAY,CAAI,GAAQ,EAAE,CAAS;IACxC,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IACtB,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAgB,aAAa;yDAC/B,cAAsB,EACtB,SAAiB,EACjB,SAAiB,EACjB,eAAe,GAAG,KAAK;;QAEvB,MAAM,cAAc,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QAEjC,+EAA+E;QAC/E,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7C,oFAAoF;QACpF,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAW,CAAC;QAC3E,CAAC;QAAC,WAAM,CAAC;YACL,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,wEAAwE,CAAC,CAAC;YAC7F,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC1D,IAAI,UAAU,EAAE,CAAC;YACb,QAAQ,CACJ,GAAG,CAAC,MAAM,EACV,0BAA0B,UAAU,qEAAqE,CAC5G,CAAC;YACF,OAAO,UAAU,CAAC;QACtB,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACpE,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,mFAAmF,CAAC,CAAC;YACxG,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAC1C,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YAEpC,wCAAwC;YACxC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,4CAA4C,IAAI,+BAA+B,CAAC,CAAC;gBACpG,SAAS;YACb,CAAC;YAED,wEAAwE;YACxE,IAAI,SAAS,GAAG,aAAa,EAAE,CAAC;YAChC,MAAM,sBAAsB,GAAG,CAAC,CAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,QAAQ,CAAC,MAAM,CAAC,CAAA,CAAC;YAC5D,IAAI,sBAAsB,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,IAAI,sBAAsB,EAAE,CAAC;gBACxG,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,sCAAsC,MAAM,KAAK,CAAC,CAAC;gBACxE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;gBACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAA6B,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,QAAQ,mCAAI,EAAE,CAAC;gBACrE,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;gBACzB,SAAS,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;gBAC3C,aAAa,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;YAED,MAAM,QAAQ,GAAG,CAAC,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,QAAQ,CAAC,MAAM,CAAC,mCAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9D,CAAC,CAAC,QAAQ,CAAC,IAAI,kBAAkB,kBAAkB,CAAC,CACvD,CAAC;YAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,QAAQ,CACJ,GAAG,CAAC,IAAI,EACR,uDAAuD,kBAAkB,gBAAgB,MAAM,eAAe,CACjH,CAAC;gBACF,SAAS;YACb,CAAC;YAED,iDAAiD;YACjD,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;YAE9D,8EAA8E;YAC9E,qFAAqF;YACrF,mFAAmF;YACnF,oFAAoF;YACpF,IAAI,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC7C,IAAI,CAAC,eAAe,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACD,YAAY,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;gBAC9E,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACT,QAAQ,CACJ,GAAG,CAAC,IAAI,EACR,qEAAsE,CAAW,CAAC,OAAO,6CAA6C,CACzI,CAAC;gBACN,CAAC;YACL,CAAC;YAED,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC;gBACZ,MAAM,UAAU,GAAG,MAAA,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,mCAAI,IAAI,CAAC;gBACrD,IAAI,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,CAAC;oBACtE,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACnD,CAAC;qBAAM,CAAC;oBACJ,OAAO,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;oBAClE,IAAI,OAAO,EAAE,CAAC;wBACV,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;oBACtF,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAEvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC3B,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;wBACnC,UAAU,EAAE,CAAC;oBACjB,CAAC;gBACL,CAAC;YACL,CAAC;YAED,QAAQ,CACJ,GAAG,CAAC,MAAM,EACV,0BAA0B,IAAI,MAAM,UAAU,oCAAoC,SAAS,GAAG,CACjG,CAAC;YAEF,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;gBAC9B,cAAc,GAAG,UAAU,CAAC;gBAC5B,QAAQ,GAAG,IAAI,CAAC;YACpB,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,KAAK,IAAI,IAAI,cAAc,IAAI,SAAS,EAAE,CAAC;YACnD,OAAO,QAAQ,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CAAA"}
@@ -0,0 +1,150 @@
1
+ import { getLocalDataTablesAssets, getLocalJqueryAsset } from "../../report/utility/genHtml.js";
2
+ /**
3
+ * Renders the single-page live dashboard (served at `/` by server.ts). Follows the
4
+ * same "inline local assets, fall back to CDN" pattern as ../../report/utility/genHtml.ts
5
+ * so the dashboard works even without network access to a CDN.
6
+ */
7
+ export const dashboardHtml = () => {
8
+ const dtAssets = getLocalDataTablesAssets();
9
+ const jqueryJs = getLocalJqueryAsset();
10
+ return `<!DOCTYPE html>
11
+ <html>
12
+ <head>
13
+ <meta charset="UTF-8">
14
+ <title>js-recon — run dashboard</title>
15
+ ${dtAssets.css
16
+ ? `<style id="dt-inline-css">${dtAssets.css}</style>`
17
+ : `<link rel="stylesheet" href="https://cdn.datatables.net/2.0.8/css/dataTables.dataTables.min.css">`}
18
+ <style>
19
+ body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; margin: 20px; }
20
+ h1 { font-size: 1.3rem; }
21
+ table.dataTable { font-size: 0.9rem; }
22
+ .status-queued { color: #888; }
23
+ .status-running { color: #0366d6; font-weight: bold; }
24
+ .status-completed { color: #22863a; }
25
+ .status-skipped { color: #b08800; }
26
+ .status-error { color: #d73a49; font-weight: bold; }
27
+ button.skip-btn { cursor: pointer; }
28
+ #file-panel { display: none; margin-top: 20px; border-top: 1px solid #ddd; padding-top: 15px; }
29
+ #file-tree { width: 30%; float: left; max-height: 500px; overflow: auto; }
30
+ #file-content { width: 68%; float: left; margin-left: 2%; }
31
+ #file-content pre { white-space: pre-wrap; word-break: break-word; max-height: 500px; overflow: auto; background: #f6f8fa; padding: 10px; }
32
+ .tree-dir > span { cursor: default; font-weight: bold; }
33
+ .tree-file { cursor: pointer; color: #0366d6; }
34
+ .tree-file:hover { text-decoration: underline; }
35
+ ul.tree, ul.tree ul { list-style: none; padding-left: 16px; }
36
+ </style>
37
+ </head>
38
+ <body>
39
+ <h1>js-recon — live run dashboard</h1>
40
+ <table id="targets" class="display" style="width:100%">
41
+ <thead>
42
+ <tr><th>Target</th><th>Status</th><th>Step</th><th>Elapsed</th><th>Files</th><th>Action</th></tr>
43
+ </thead>
44
+ <tbody></tbody>
45
+ </table>
46
+
47
+ <div id="file-panel">
48
+ <h2 id="file-panel-title"></h2>
49
+ <div id="file-tree"></div>
50
+ <div id="file-content"><pre>Select a file to view its contents.</pre></div>
51
+ <div style="clear:both"></div>
52
+ </div>
53
+
54
+ ${jqueryJs ? `<script>${jqueryJs}</script>` : `<script src="https://code.jquery.com/jquery-3.7.1.min.js"></script>`}
55
+ ${dtAssets.js
56
+ ? `<script>${dtAssets.js}</script>`
57
+ : `<script src="https://cdn.datatables.net/2.0.8/js/dataTables.min.js"></script>`}
58
+ <script>
59
+ const fmtElapsed = (startedAt, finishedAt) => {
60
+ if (!startedAt) return "-";
61
+ const end = finishedAt || Date.now();
62
+ const secs = Math.floor((end - startedAt) / 1000);
63
+ const m = Math.floor(secs / 60);
64
+ const s = secs % 60;
65
+ return m + "m " + s + "s";
66
+ };
67
+
68
+ let table;
69
+ $(document).ready(function () {
70
+ table = $("#targets").DataTable({
71
+ paging: false,
72
+ searching: true,
73
+ info: false,
74
+ columns: [
75
+ { data: "url" },
76
+ { data: "status", render: (d) => '<span class="status-' + d + '">' + d + "</span>" },
77
+ { data: "step", render: (d) => d || "-" },
78
+ { data: null, render: (row) => fmtElapsed(row.startedAt, row.finishedAt) },
79
+ {
80
+ data: "hostDir",
81
+ render: (d) => '<button class="files-btn" data-host="' + d + '">Browse</button>',
82
+ },
83
+ {
84
+ data: null,
85
+ render: (row) =>
86
+ row.status === "running" || row.status === "queued"
87
+ ? '<button class="skip-btn" data-host="' + row.hostDir + '">Skip</button>'
88
+ : "-",
89
+ },
90
+ ],
91
+ });
92
+ });
93
+
94
+ const render = (targets) => {
95
+ table.clear();
96
+ table.rows.add(targets).draw(false);
97
+ };
98
+
99
+ $(document).on("click", ".skip-btn", function () {
100
+ const host = $(this).data("host");
101
+ $.post("/api/targets/" + host + "/skip");
102
+ });
103
+
104
+ const renderTree = (entries, container) => {
105
+ const ul = $('<ul class="tree"></ul>');
106
+ entries.forEach((entry) => {
107
+ const li = $("<li></li>");
108
+ if (entry.type === "directory") {
109
+ li.addClass("tree-dir");
110
+ li.append($("<span></span>").text(entry.name + "/"));
111
+ renderTree(entry.children || [], li);
112
+ } else {
113
+ li.addClass("tree-file").attr("data-path", entry.path).text(entry.name);
114
+ }
115
+ ul.append(li);
116
+ });
117
+ container.append(ul);
118
+ };
119
+
120
+ $(document).on("click", ".files-btn", function () {
121
+ const host = $(this).data("host");
122
+ $("#file-panel").show();
123
+ $("#file-panel-title").text(host);
124
+ $("#file-tree").empty();
125
+ $("#file-content").html("<pre>Select a file to view its contents.</pre>");
126
+ $.getJSON("/api/targets/" + host + "/files", (entries) => {
127
+ renderTree(entries, $("#file-tree"));
128
+ $("#file-tree").data("host", host);
129
+ });
130
+ });
131
+
132
+ $(document).on("click", ".tree-file", function () {
133
+ const host = $("#file-tree").data("host");
134
+ const filePath = $(this).data("path");
135
+ $.get("/api/targets/" + host + "/files/" + filePath, (content) => {
136
+ $("#file-content").html($("<pre></pre>").text(content));
137
+ }).fail((xhr) => {
138
+ $("#file-content").html($("<pre></pre>").text("Error: " + xhr.responseText));
139
+ });
140
+ });
141
+
142
+ const source = new EventSource("/api/events");
143
+ source.onmessage = (event) => {
144
+ render(JSON.parse(event.data));
145
+ };
146
+ </script>
147
+ </body>
148
+ </html>`;
149
+ };
150
+ //# sourceMappingURL=dashboardHtml.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dashboardHtml.js","sourceRoot":"","sources":["../../../src/run/dashboard/dashboardHtml.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEhG;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,GAAW,EAAE;IACtC,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IAEvC,OAAO;;;;;IAML,QAAQ,CAAC,GAAG;QACR,CAAC,CAAC,6BAA6B,QAAQ,CAAC,GAAG,UAAU;QACrD,CAAC,CAAC,mGACV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAqCE,QAAQ,CAAC,CAAC,CAAC,WAAW,QAAQ,WAAW,CAAC,CAAC,CAAC,qEAAqE;IAE/G,QAAQ,CAAC,EAAE;QACP,CAAC,CAAC,WAAW,QAAQ,CAAC,EAAE,WAAW;QACnC,CAAC,CAAC,+EACV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA2FM,CAAC;AACT,CAAC,CAAC"}
@@ -0,0 +1,43 @@
1
+ import fs from "fs";
2
+ import path from "path";
3
+ /**
4
+ * Resolves a user-supplied relative path against a target's output directory,
5
+ * rejecting anything that escapes it (path traversal via `../`, absolute paths, etc).
6
+ * Returns null if the resolved path is outside `baseDir`.
7
+ */
8
+ export const resolveSafePath = (baseDir, relativePath) => {
9
+ const resolvedBase = path.resolve(baseDir);
10
+ const resolved = path.resolve(resolvedBase, relativePath || ".");
11
+ if (resolved !== resolvedBase && !resolved.startsWith(resolvedBase + path.sep)) {
12
+ return null;
13
+ }
14
+ return resolved;
15
+ };
16
+ /**
17
+ * Recursively builds a file tree for the dashboard's per-target file browser.
18
+ */
19
+ export const buildFileTree = (baseDir, dir = baseDir) => {
20
+ if (!fs.existsSync(dir))
21
+ return [];
22
+ const entries = fs.readdirSync(dir, { withFileTypes: true });
23
+ return entries
24
+ .map((entry) => {
25
+ const fullPath = path.join(dir, entry.name);
26
+ const relativePath = path.relative(baseDir, fullPath).split(path.sep).join("/");
27
+ if (entry.isDirectory()) {
28
+ return {
29
+ name: entry.name,
30
+ type: "directory",
31
+ path: relativePath,
32
+ children: buildFileTree(baseDir, fullPath),
33
+ };
34
+ }
35
+ return { name: entry.name, type: "file", path: relativePath };
36
+ })
37
+ .sort((a, b) => {
38
+ if (a.type !== b.type)
39
+ return a.type === "directory" ? -1 : 1;
40
+ return a.name.localeCompare(b.name);
41
+ });
42
+ };
43
+ //# sourceMappingURL=fsBrowser.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"fsBrowser.js","sourceRoot":"","sources":["../../../src/run/dashboard/fsBrowser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AASxB;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAe,EAAE,YAAoB,EAAiB,EAAE;IACpF,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,IAAI,GAAG,CAAC,CAAC;IACjE,IAAI,QAAQ,KAAK,YAAY,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,MAAc,OAAO,EAAmB,EAAE;IACrF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,OAAO;SACT,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACX,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChF,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,OAAO;gBACH,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,WAAoB;gBAC1B,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC;aAC7C,CAAC;QACN,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC3E,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACX,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACX,CAAC,CAAC"}
@@ -0,0 +1,123 @@
1
+ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
2
+ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
3
+ return new (P || (P = Promise))(function (resolve, reject) {
4
+ function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
5
+ function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
6
+ function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
7
+ step((generator = generator.apply(thisArg, _arguments || [])).next());
8
+ });
9
+ };
10
+ import express from "express";
11
+ import http from "http";
12
+ import fs from "fs";
13
+ import { getAll, getByHostDir, requestSkip } from "./state.js";
14
+ import { buildFileTree, resolveSafePath } from "./fsBrowser.js";
15
+ import { dashboardHtml } from "./dashboardHtml.js";
16
+ const MAX_FILE_VIEW_BYTES = 5 * 1024 * 1024;
17
+ const SSE_PUSH_INTERVAL_MS = 5000;
18
+ /**
19
+ * Tries `startPort`, then `startPort + 1`, ... until one is free (or `maxAttempts`
20
+ * is exhausted). Returns the port the server ended up listening on.
21
+ */
22
+ export const listenWithFallback = (server, startPort, maxAttempts = 50) => {
23
+ return new Promise((resolve, reject) => {
24
+ let attempt = 0;
25
+ const tryListen = (port) => {
26
+ const onError = (err) => {
27
+ server.removeListener("listening", onListening);
28
+ if (err.code === "EADDRINUSE" && attempt < maxAttempts) {
29
+ attempt++;
30
+ tryListen(port + 1);
31
+ }
32
+ else {
33
+ reject(err);
34
+ }
35
+ };
36
+ const onListening = () => {
37
+ server.removeListener("error", onError);
38
+ resolve(port);
39
+ };
40
+ server.once("error", onError);
41
+ server.once("listening", onListening);
42
+ // Loopback-only: this dashboard is a local progress viewer, never meant to be
43
+ // reachable off-host. Binding to 127.0.0.1 is the actual mitigation for
44
+ // unauthenticated, unrate-limited file-read routes below.
45
+ server.listen(port, "127.0.0.1");
46
+ };
47
+ tryListen(startPort);
48
+ });
49
+ };
50
+ const buildApp = () => {
51
+ const app = express();
52
+ app.get("/", (_req, res) => {
53
+ res.type("html").send(dashboardHtml());
54
+ });
55
+ app.get("/api/targets", (_req, res) => {
56
+ res.json(getAll());
57
+ });
58
+ app.get("/api/events", (req, res) => {
59
+ res.writeHead(200, {
60
+ "Content-Type": "text/event-stream",
61
+ "Cache-Control": "no-cache",
62
+ Connection: "keep-alive",
63
+ });
64
+ const push = () => res.write(`data: ${JSON.stringify(getAll())}\n\n`);
65
+ push();
66
+ const interval = setInterval(push, SSE_PUSH_INTERVAL_MS);
67
+ req.on("close", () => clearInterval(interval));
68
+ });
69
+ app.get("/api/targets/:host/files", (req, res) => {
70
+ const target = getByHostDir(req.params.host);
71
+ if (!target) {
72
+ res.status(404).json({ error: "Unknown target" });
73
+ return;
74
+ }
75
+ res.json(buildFileTree(target.dir));
76
+ });
77
+ app.get("/api/targets/:host/files/*splat", (req, res) => {
78
+ // lgtm[js/missing-rate-limiting]: server binds to 127.0.0.1 only (see listenWithFallback above); no unauthenticated network-reachable surface to rate-limit.
79
+ const target = getByHostDir(req.params.host);
80
+ if (!target) {
81
+ res.status(404).json({ error: "Unknown target" });
82
+ return;
83
+ }
84
+ // Express 5 (path-to-regexp v6) captures a trailing `*splat` wildcard as an
85
+ // array of path segments rather than a single string.
86
+ const splat = req.params.splat;
87
+ const relativePath = Array.isArray(splat) ? splat.join("/") : String(splat !== null && splat !== void 0 ? splat : "");
88
+ const resolved = resolveSafePath(target.dir, relativePath);
89
+ if (!resolved) {
90
+ res.status(400).json({ error: "Invalid path" });
91
+ return;
92
+ }
93
+ if (!fs.existsSync(resolved) || !fs.statSync(resolved).isFile()) {
94
+ res.status(404).json({ error: "File not found" });
95
+ return;
96
+ }
97
+ if (fs.statSync(resolved).size > MAX_FILE_VIEW_BYTES) {
98
+ res.status(413).json({ error: "File too large to view" });
99
+ return;
100
+ }
101
+ res.type("text/plain").send(fs.readFileSync(resolved, "utf-8"));
102
+ });
103
+ app.post("/api/targets/:host/skip", (req, res) => {
104
+ const target = getByHostDir(req.params.host);
105
+ if (!target) {
106
+ res.status(404).json({ error: "Unknown target" });
107
+ return;
108
+ }
109
+ requestSkip(target.url);
110
+ res.json({ ok: true });
111
+ });
112
+ return app;
113
+ };
114
+ export const startDashboardServer = (preferredPort) => __awaiter(void 0, void 0, void 0, function* () {
115
+ const app = buildApp();
116
+ const server = http.createServer(app);
117
+ const port = yield listenWithFallback(server, preferredPort);
118
+ const stop = () => new Promise((resolve) => {
119
+ server.close(() => resolve());
120
+ });
121
+ return { port, url: `http://localhost:${port}`, stop };
122
+ });
123
+ //# sourceMappingURL=server.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/run/dashboard/server.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5C,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAC9B,MAAmB,EACnB,SAAiB,EACjB,cAAsB,EAAE,EACT,EAAE;IACjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE;YAC/B,MAAM,OAAO,GAAG,CAAC,GAA0B,EAAE,EAAE;gBAC3C,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBAChD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;oBACrD,OAAO,EAAE,CAAC;oBACV,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACJ,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChB,CAAC;YACL,CAAC,CAAC;YACF,MAAM,WAAW,GAAG,GAAG,EAAE;gBACrB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACtC,8EAA8E;YAC9E,wEAAwE;YACxE,0DAA0D;YAC1D,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACrC,CAAC,CAAC;QAEF,SAAS,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,GAAY,EAAE;IAC3B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACf,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;SAC3B,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,EAAE,CAAC;QACP,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QAEzD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpD,6JAA6J;QAC7J,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACX,CAAC;QAED,4EAA4E;QAC5E,sDAAsD;QACtD,MAAM,KAAK,GAAI,GAAG,CAAC,MAAyC,CAAC,KAAK,CAAC;QACnE,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,EAAE,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAChD,OAAO;QACX,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACX,CAAC;QACD,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1D,OAAO;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACX,CAAC;QACD,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAChC,aAAqB,EAC4C,EAAE;IACnE,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAE7D,MAAM,IAAI,GAAG,GAAkB,EAAE,CAC7B,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACpB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEP,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,oBAAoB,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;AAC3D,CAAC,CAAA,CAAC"}