@mnemonik/cli 7.141.0 → 7.141.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth/credentials.js +266 -3
- package/dist/auth/index.js +266 -3
- package/dist/auth/installSession.js +262 -0
- package/dist/auth/status.js +262 -0
- package/dist/authorizationWords.js +262 -0
- package/dist/diagnostics.js +266 -3
- package/dist/digests.json +38 -38
- package/dist/hooksLog.js +4 -0
- package/dist/identity/migrate.js +266 -3
- package/dist/install/hosts.js +262 -0
- package/dist/install/journal.js +266 -3
- package/dist/install/journey.js +266 -3
- package/dist/install/ownership.js +266 -3
- package/dist/install/transaction.js +266 -3
- package/dist/install/ui.js +266 -3
- package/dist/installSession.js +262 -0
- package/dist/installation.js +266 -3
- package/dist/launcher.js +266 -3
- package/dist/preflight.js +354 -92
- package/dist/project/eligibility.js +266 -3
- package/dist/project/records.js +266 -3
- package/dist/project.js +270 -7
- package/dist/router.js +270 -7
- package/dist/runtime/releaseSource.js +266 -3
- package/dist/runtime/selfUpdate.js +266 -3
- package/dist/runtime/signers.js +67 -7
- package/dist/runtime/store.js +4 -0
- package/dist/runtime/updateCheck.js +266 -3
- package/dist/sbom.json +21 -21
- package/dist/scanner/control.js +266 -3
- package/dist/scanner/data.js +262 -0
- package/dist/scanner/discover.js +354 -92
- package/dist/scanner/enable.js +270 -7
- package/dist/scanner/picker.js +325 -63
- package/dist/scanner/service.js +266 -3
- package/dist/scanner/update.js +266 -3
- package/dist/scanner-release.json +24 -24
- package/dist/status.js +266 -3
- package/dist/vendor/local-setup.js +266 -3
- package/package.json +31 -31
package/dist/digests.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"dist/authorizationWords.d.ts": "1a1de1fa3e9b11676b8af98d26da1a0658632667c11911a63084fb45aea9c8bd",
|
|
3
3
|
"dist/authorizationWords.d.ts.map": "260ff8f1e21dae3eac3e5df35b098f3f1e18ad66938817acd0407f85edc49977",
|
|
4
|
-
"dist/authorizationWords.js": "
|
|
4
|
+
"dist/authorizationWords.js": "4d5da4c1b0db49859d047d23534bf353ddfb10afe2f91e51460f8374b80c79c0",
|
|
5
5
|
"dist/authorizationWords.js.map": "e6553632fa9fe8a1e145a228f740a1b0681c2bb49da936a65ce12952aa74c195",
|
|
6
6
|
"dist/bin.d.ts": "eacba108ec9dd580caa5068fe681580d84c4afa3473d19fd2b5b607237f3a25c",
|
|
7
7
|
"dist/bin.d.ts.map": "c5ed654e79ddd9ae0c330f5ea6b66d5f9e94d567b8880961b305c3e00b008127",
|
|
@@ -13,7 +13,7 @@
|
|
|
13
13
|
"dist/consent.js.map": "caa36a4d56ad058c43100794648f3fcdff13a29ee6da0044eb043f262a4d30c5",
|
|
14
14
|
"dist/diagnostics.d.ts": "419b5baee4bee84895b08c54b0761bbab6064cee4ae387c45b8f0dad25643e8b",
|
|
15
15
|
"dist/diagnostics.d.ts.map": "770d7e9aae1f897f14ec83e911f57bce583d5197a38c9581aba9f3be2cb5eb6c",
|
|
16
|
-
"dist/diagnostics.js": "
|
|
16
|
+
"dist/diagnostics.js": "3b8b949f9510126c3e1912797995319dbdbd6dcfc6c4726424550a2ea78f9943",
|
|
17
17
|
"dist/diagnostics.js.map": "26fc5a309012ae742562401dd5969a4c4c19b0f53364cbd1cbadd5746e14a38d",
|
|
18
18
|
"dist/help.d.ts": "d39f9bfe9eba143f1775a5f212dd7302ab8d15eef480c0caef43ef886f2b322a",
|
|
19
19
|
"dist/help.d.ts.map": "519b90447a74f24ab43cd58f59b884d0af11aadf825d23d0104a1f6807a9bfca",
|
|
@@ -21,7 +21,7 @@
|
|
|
21
21
|
"dist/help.js.map": "3575e3da92c72fad5bd86ce3670c535cb573df8942c3bd8b757ad5eb108af9b3",
|
|
22
22
|
"dist/hooksLog.d.ts": "3a9de944469513a7266410e92d6ac99ea8e8e7dd2fe17c7aa6414cc98b801088",
|
|
23
23
|
"dist/hooksLog.d.ts.map": "ba94ffb2a27b26b15fd641039958857f7ffc60479d67aaa30862822d0d97cceb",
|
|
24
|
-
"dist/hooksLog.js": "
|
|
24
|
+
"dist/hooksLog.js": "5161112f35e19b812b84b75e0cf3e0ea3360fbb09b80947cc1d22ecc707b71be",
|
|
25
25
|
"dist/hooksLog.js.map": "eb8895df6a2fb69ae68b4a15d20e4a557221bb51dfe62106cd25e134e3e09a60",
|
|
26
26
|
"dist/hostDiscovery.d.ts": "7ed39f9b4da7e9df762bc7a3d76637a0b3c271024ae78de31af408b3858c3920",
|
|
27
27
|
"dist/hostDiscovery.d.ts.map": "59a6632184d195e4d0f569d26cc2d00b0abe2a897402c476d754f440e36938e7",
|
|
@@ -37,15 +37,15 @@
|
|
|
37
37
|
"dist/index.js.map": "cdeb50386d1aa1615e6e67bb4c609cd16f1f314437463798f7d063e12a1f5c9c",
|
|
38
38
|
"dist/installSession.d.ts": "ad8b459885dd96ffc155827326ac5d8bda9b9f36ea1dff4686dcf639e05ee0b7",
|
|
39
39
|
"dist/installSession.d.ts.map": "7f901d81b02f52048cc650754e9838453f05be027abccbe018f3c919c10962f7",
|
|
40
|
-
"dist/installSession.js": "
|
|
40
|
+
"dist/installSession.js": "68424e43cdf2eb963598919de4bce12363499ef744a3f3fa25601801ab14b605",
|
|
41
41
|
"dist/installSession.js.map": "d38f26456e4504bdd038ce888c796589538e17f4cc6a90dbc7981984cb5426a0",
|
|
42
42
|
"dist/installation.d.ts": "88d4e47f7d48d104cdf67d882aaa3313cde8e9cd9232f160f38d1a77f49a37ea",
|
|
43
43
|
"dist/installation.d.ts.map": "43b04d7f3b2058b2665fb3e9f43ebaeb56c75a9dee9880ab60abe9761c569572",
|
|
44
|
-
"dist/installation.js": "
|
|
44
|
+
"dist/installation.js": "f052cee38ec5b6f2768b16c743753292a3745745ea489338249560eedffd36a2",
|
|
45
45
|
"dist/installation.js.map": "a9ad48929b3f9e92b0c0faa1a803276b2a3564cc7046b39501e09d16eacd1970",
|
|
46
46
|
"dist/launcher.d.ts": "f8ad93b83e6f57df9c2d4244f3713fdb3f5d7fb88f697d5c559f0220a017112c",
|
|
47
47
|
"dist/launcher.d.ts.map": "3a3383c49c2cd0f481ca84d63c76d8105b1498b90711dc8d0e41bbd7b913af4d",
|
|
48
|
-
"dist/launcher.js": "
|
|
48
|
+
"dist/launcher.js": "88d6b9a158ef542f05dd9498900dbb7879c47f14b7fed4d6610110df64c79c32",
|
|
49
49
|
"dist/launcher.js.map": "2c5e3b9c20483fbe53a0f7ba755a6596365f9e0c03d6245c8b435bc97b42c5e4",
|
|
50
50
|
"dist/output.d.ts": "42b742421ba5ef89e56d50d8fbae20150cb9f7197a154d86a3db50cf0cb4ac67",
|
|
51
51
|
"dist/output.d.ts.map": "0927960c51b81dac40c0625037e86f67a01767529f9eb1b60d1ec4e2c8715d65",
|
|
@@ -53,25 +53,25 @@
|
|
|
53
53
|
"dist/output.js.map": "241954e67e0dec98ddaea021987f5f81692fe66ab66812d24641265d603e1ebc",
|
|
54
54
|
"dist/preflight.d.ts": "343f123530adb2dfbac45c3f4081e4188a8052bb2a4da9c21af46cdaf4e89478",
|
|
55
55
|
"dist/preflight.d.ts.map": "6d8a4cfe7176686e9aa9e6c5f5913f718e3a45e9371fbf66332031e2ed2146c1",
|
|
56
|
-
"dist/preflight.js": "
|
|
56
|
+
"dist/preflight.js": "bd0754764aee62fd570060794e4b8fe64988a2b62807c872e9b08101f6cda139",
|
|
57
57
|
"dist/preflight.js.map": "f4a10cb59874fb7d163d27ec348bf717b9e529f54b6ed96c27d2b68985b8b4cf",
|
|
58
58
|
"dist/project.d.ts": "b3bcb4e900b14dbefbe182b896dd750f06d83fd1a306fba5d6242c9a223c7f3f",
|
|
59
59
|
"dist/project.d.ts.map": "71314e36ba36b3cc4a6e95e366519d6762fffd6d5ae5100362f8715f7cf4b580",
|
|
60
|
-
"dist/project.js": "
|
|
60
|
+
"dist/project.js": "327f595e50eb2f55fc3c2c37af637545394a29d0dd940812707dce09e1d465d5",
|
|
61
61
|
"dist/project.js.map": "926e28071ea230678afdc319c69b637c5058cd49fed31d6338c1829d7c92c16a",
|
|
62
62
|
"dist/router.d.ts": "592849076349d8805cd0e654036e060b3c4b8ce0eca4742580756834f829f918",
|
|
63
63
|
"dist/router.d.ts.map": "34a08fa1e02abb0d735dd299034bb8490a97a8d781e299d4a33e9e4128b383ac",
|
|
64
|
-
"dist/router.js": "
|
|
64
|
+
"dist/router.js": "bf7401c543b1935478aacfd08ff30dcedd79cd4fc431b335e5bc4862855ad013",
|
|
65
65
|
"dist/router.js.map": "39e552670c6591bda58e5efc412a0e13fbc0f8d50219a96ebaf3a4e94f5843a6",
|
|
66
|
-
"dist/sbom.json": "
|
|
67
|
-
"dist/scanner-release.json": "
|
|
66
|
+
"dist/sbom.json": "11480c12dad9ed62d5a8d9f54f407611e8ed1a98904f5f8936eaa163ca0b71cd",
|
|
67
|
+
"dist/scanner-release.json": "0bb3a418df4d513df3c2c928f721aa0dcf695fd0db898d63b8bb96e3da442c06",
|
|
68
68
|
"dist/screens.d.ts": "365071231380d4e1513575d6c5196976195836b2983027f626d61ea2951b4cdd",
|
|
69
69
|
"dist/screens.d.ts.map": "f905a74cd814586a12569acedf95b7375f72179ad979f5a6eea6aedc7c8291c3",
|
|
70
70
|
"dist/screens.js": "c4b8e563b6268552e97780460f46fd860c5a323f32df59290615f54ec7e84443",
|
|
71
71
|
"dist/screens.js.map": "92c71902f4eb8086ce0337cadf4ca169eb0377b844b6978b41a55220ffdafb00",
|
|
72
72
|
"dist/status.d.ts": "989b0fa46de345b7aa2a52db38aad3d8342604c75ee2669900e398b76f90b340",
|
|
73
73
|
"dist/status.d.ts.map": "153b7b7bb32bf38d0a2435eb6815da872701d5c4f4df0da481324cc2e9638a9a",
|
|
74
|
-
"dist/status.js": "
|
|
74
|
+
"dist/status.js": "c7e9d9e02433bf7eac01aeb9266974ddd647e7fe12dadd4f38a787bb568300d3",
|
|
75
75
|
"dist/status.js.map": "5e7521261db7b10f92101d8f0cd2d0625af818d3a9871b7819a383f8afb09888",
|
|
76
76
|
"dist/auth/claudeCodeSignIn.d.ts": "173aab8a1c3616ac7f72d7c495c45a7bde3755a70c9e5d4440f0c82c857ecbc4",
|
|
77
77
|
"dist/auth/claudeCodeSignIn.d.ts.map": "f088daa170871ee96d14096f6ca43ec959d69110a79a84c98421480f1eb64f9f",
|
|
@@ -83,7 +83,7 @@
|
|
|
83
83
|
"dist/auth/codexAuthorization.js.map": "3da00f1924a98866fbcc0f0f5b35e0c9f46f10b82fdacfb9fb88468a923505d1",
|
|
84
84
|
"dist/auth/credentials.d.ts": "6cbb63a8c50243770046f3d1dd56fb156d96344a5de79eb35b535b6ec0159480",
|
|
85
85
|
"dist/auth/credentials.d.ts.map": "9615a56dfec89fe88d470cded00eabaefd4950fc148e95536da8c5b810a4c27d",
|
|
86
|
-
"dist/auth/credentials.js": "
|
|
86
|
+
"dist/auth/credentials.js": "80e68ae029fbcb3436559e2f72e2021b95059c33de28008ad7fb84a9fccdc068",
|
|
87
87
|
"dist/auth/credentials.js.map": "7751d7e9e0e1140707879173eaabb320abfddb4f4a8d43a59f68955b3c10a80c",
|
|
88
88
|
"dist/auth/cursorAuthorization.d.ts": "e85e1af269a8d42a1bdd7c7f2a330704c177a55b3ca89e7e62432efc1b1213b2",
|
|
89
89
|
"dist/auth/cursorAuthorization.d.ts.map": "05e6a572f98d361dab86d495b899a07c3411e178ea355730b1539b711ac58a63",
|
|
@@ -95,11 +95,11 @@
|
|
|
95
95
|
"dist/auth/device.js.map": "0aa0dd9ca470e82b02e07d8fb52ee57b8967354c356ee49b8e5838a35fd7cf66",
|
|
96
96
|
"dist/auth/index.d.ts": "9ed95ab82eba373d54220dede98a2e8b8fc9eaccbc8671939e8d620cdef4f5d4",
|
|
97
97
|
"dist/auth/index.d.ts.map": "dea0cc099019e3b1daba03da1fe8ec3609f68cfe4fb0eccd2916d7f55a735269",
|
|
98
|
-
"dist/auth/index.js": "
|
|
98
|
+
"dist/auth/index.js": "c8d02d240bbbc72aa3da14609fbda96b312b10c242d040211626bfd8907c63bd",
|
|
99
99
|
"dist/auth/index.js.map": "41a979f9a4121dfd09b8b20933d69f17999e541cfc58dcfe0918ff170d9f19b4",
|
|
100
100
|
"dist/auth/installSession.d.ts": "ed8988db918345f6b7129c0ef5b4d6e56dd614ae49b9f24857ba69a69df90116",
|
|
101
101
|
"dist/auth/installSession.d.ts.map": "cf175e2b3a290c6316bf1668ac4a6480339b6f48fb6921ec6a4f3cf09ce13c83",
|
|
102
|
-
"dist/auth/installSession.js": "
|
|
102
|
+
"dist/auth/installSession.js": "1a589a6f663e2d23c67c28a31b96ef3038a4570d4037cb3e3349eefc9c769f8c",
|
|
103
103
|
"dist/auth/installSession.js.map": "a1b949763834411f84441c4ffc7ce493320217df5e8477717720c935c1559485",
|
|
104
104
|
"dist/auth/machineName.d.ts": "2c9287cf76d171da88a45b8859c721254b45f8fdae3710eb247ae48bf3a1bc82",
|
|
105
105
|
"dist/auth/machineName.d.ts.map": "432ee18e59b6d876a7fc32bef8fdc4c383d8cc4b0fa9339f68d9b61907f4b4ac",
|
|
@@ -111,7 +111,7 @@
|
|
|
111
111
|
"dist/auth/pkce.js.map": "46cfb493a0b3f59d34a3b3214db05b0473f566be8552f629750505de325bfa32",
|
|
112
112
|
"dist/auth/status.d.ts": "bec633d49f3a61206bd6245ec785417af2852dd2cbcc184a5615bb52dc752479",
|
|
113
113
|
"dist/auth/status.d.ts.map": "c9989de25590b3ded130e24294c30b06bd5d3b52dd9d10d0e82de2ed6e3be939",
|
|
114
|
-
"dist/auth/status.js": "
|
|
114
|
+
"dist/auth/status.js": "53a90ea66d6cc86cf54474644aea48124459e85ae86e666c31f5f5ac483a08d0",
|
|
115
115
|
"dist/auth/status.js.map": "f10b653847a3195b5b5a0c1b7a774663ca9d1c7924ab4e38bc5c20805e84760a",
|
|
116
116
|
"dist/auth/storedAuthorization.d.ts": "a5909b6cd5895e5b8e3bb42645db9dffc8a09a39a6a82c6555f72af8a7107a7b",
|
|
117
117
|
"dist/auth/storedAuthorization.d.ts.map": "12f2c9b29fc2afb4fd172826477ff18a5d9724de0324ac3fe130f98e5b4f7c69",
|
|
@@ -119,7 +119,7 @@
|
|
|
119
119
|
"dist/auth/storedAuthorization.js.map": "aa0fda8bc360f1a3463fb03fabfd2c6d917ab7277b71777226982133a47de75f",
|
|
120
120
|
"dist/identity/migrate.d.ts": "7493955bc95dd1876cef60481bda4808af7be2a9ccfc4cc02831e41043b16c29",
|
|
121
121
|
"dist/identity/migrate.d.ts.map": "0d3a9da77695c3f39e3c98fcc6089c62bb0518a75f2bde72948cd3d20712b2bf",
|
|
122
|
-
"dist/identity/migrate.js": "
|
|
122
|
+
"dist/identity/migrate.js": "872b5eff010ce57836030bcb167badc86ab799d4a1c007f2b2fec70a88b588a5",
|
|
123
123
|
"dist/identity/migrate.js.map": "0c2b6595648cac1f4328d418d05ab9b10d17c1292f880ab62fc02804d8c6d783",
|
|
124
124
|
"dist/install/adapters.d.ts": "434f0969014bb88273becf1424d44bd75a7af1b66ff0e82bcb7292e494d01043",
|
|
125
125
|
"dist/install/adapters.d.ts.map": "3748700f553d503d962cc56e68709f229e6657d9dee87da2fd9fca008d223e5f",
|
|
@@ -127,35 +127,35 @@
|
|
|
127
127
|
"dist/install/adapters.js.map": "2de4b94e31ef14f16cf4ec21ded8a41acbe8c8b514aeff7b75d1839ef1f0ce79",
|
|
128
128
|
"dist/install/hosts.d.ts": "83037a95c5baae06a1a3cd4609994f54d182bc84549fad2785a2a9b6cc9d2013",
|
|
129
129
|
"dist/install/hosts.d.ts.map": "85006328bbf6a876ed2324de77045c6246505059bf8821c22bb4e79d3ff60b61",
|
|
130
|
-
"dist/install/hosts.js": "
|
|
130
|
+
"dist/install/hosts.js": "2d006e175eed0b83e93e81bb786bf411cb3e847a69d6e8a5d0caf2b3891d8233",
|
|
131
131
|
"dist/install/hosts.js.map": "792bc157b09ae00ec565819b67f33f3f62d9467ba6284eaf3ab60b43bd6352e5",
|
|
132
132
|
"dist/install/journal.d.ts": "cb1540745df6e406cb915a47334bf6af7630c2950224b814d197ec1aa6ea6d1e",
|
|
133
133
|
"dist/install/journal.d.ts.map": "3ac23b8b40f673942246c29ba1e21537a2039c58ca9b4f2b1420b4cc449261ed",
|
|
134
|
-
"dist/install/journal.js": "
|
|
134
|
+
"dist/install/journal.js": "88f71c609ee2bea3845f30d994638fa6dba7c8406ae4ff1320ec43d22888c602",
|
|
135
135
|
"dist/install/journal.js.map": "48affa7d7173a87549e8a035da63248a4f6609374a678774ddab9995a26930fe",
|
|
136
136
|
"dist/install/journey.d.ts": "0e445a57e030fff9ecddb5da7b8fbe2871d6d9d447874e06cd7f9e6e4046474f",
|
|
137
137
|
"dist/install/journey.d.ts.map": "07a1839ffb6ed9353bb03c8aa345b5cd82a77eb555eb4999e62e4e718046e1c1",
|
|
138
|
-
"dist/install/journey.js": "
|
|
138
|
+
"dist/install/journey.js": "b051b2ad4105e0e3974d000c8322359b4c3f4097e73b249aeff6019339321b66",
|
|
139
139
|
"dist/install/journey.js.map": "06dfb525351f79f08be94b07d4f42a51d8e92f1b502f95b717a00d58299fe77d",
|
|
140
140
|
"dist/install/ownership.d.ts": "9ce76111b3424693a29036cd459ed14158ed11167f5f0aed13247df33941202b",
|
|
141
141
|
"dist/install/ownership.d.ts.map": "46300e7cd4219176701d7d9cff1cb1d45eac43c89e5ee639b2be81729d449984",
|
|
142
|
-
"dist/install/ownership.js": "
|
|
142
|
+
"dist/install/ownership.js": "6adf0fa85b1902959f11f3f3e81884ad28bef211c3c8ecf11da704dcdba74e34",
|
|
143
143
|
"dist/install/ownership.js.map": "89d2593b130a01ae65b42520c5703c359bf803be904cc401ca10e7f3560de269",
|
|
144
144
|
"dist/install/transaction.d.ts": "cb5bf2eef12f4f5bcc1036e7b5c8d9fd488d367a0e778660def8821393445869",
|
|
145
145
|
"dist/install/transaction.d.ts.map": "964d51dd02c97579f3471ad0d2a091e4eda0648714a40005aa9b3c1e3e2ad1a0",
|
|
146
|
-
"dist/install/transaction.js": "
|
|
146
|
+
"dist/install/transaction.js": "0c8ab99fc8ee0541420bbfa75039bb7eba214d6750d5afebe9ef3790425a2d89",
|
|
147
147
|
"dist/install/transaction.js.map": "0bf373afac1167eee7ae0911ba6502a428eb1a17e8686ba263fbb84be70e9d85",
|
|
148
148
|
"dist/install/ui.d.ts": "7ec8f2f4278af8ad311d2b1404e7081ad40290e2b69bcaea02e083e127d0b82b",
|
|
149
149
|
"dist/install/ui.d.ts.map": "c49464a959e41a287cc128f06c8df20bbbba43aa7c16255f18e953c9ae61ada1",
|
|
150
|
-
"dist/install/ui.js": "
|
|
150
|
+
"dist/install/ui.js": "d4b598860e12a4cbf9752f2f8ef254bbb69336ae5bcb2db2fb7bb4767ea1b65f",
|
|
151
151
|
"dist/install/ui.js.map": "d87677e5a0e3dc3a414197337b2556b6e489d4da5a4dd63f3d75e867c1c2e61d",
|
|
152
152
|
"dist/project/eligibility.d.ts": "120e0cfe62f9d2399f33902c3db27255f8bac7fe782c20c6640befef0977a76b",
|
|
153
153
|
"dist/project/eligibility.d.ts.map": "3501caf6830ac41ab99c8fc89158c91fc48603de96109a83ee54a0f000d7aa16",
|
|
154
|
-
"dist/project/eligibility.js": "
|
|
154
|
+
"dist/project/eligibility.js": "6266226dcb5c3192766b6967e92e5bbfd77541ac3ab4d23370f4ac1fcefce0c0",
|
|
155
155
|
"dist/project/eligibility.js.map": "a0b96a4badb12f15f6fc15d86947499157dcde87e129b20ba465d2bea4927a9c",
|
|
156
156
|
"dist/project/records.d.ts": "f67fa8b3ca81748a84065b2f5a89da2e4719b20e81cfdc53d851aa7e1a7f39ad",
|
|
157
157
|
"dist/project/records.d.ts.map": "1f572d8df5e71d6820ca3e5bf4e0d0878b6822375c78afb054d114b2a04dac0b",
|
|
158
|
-
"dist/project/records.js": "
|
|
158
|
+
"dist/project/records.js": "9391335f0f111cd49c73cc7c069cada083fbae24b5b2fa93bf0e332b732e8076",
|
|
159
159
|
"dist/project/records.js.map": "349fd9dca72f084d3c4747159f241bd6afab76295e42c326b75235adca3778fe",
|
|
160
160
|
"dist/runtime/bootstrap.d.ts": "b5584c6aa08e8b35c088edc10d9727fdbbcc9487ef1676cdabc665f484e92156",
|
|
161
161
|
"dist/runtime/bootstrap.d.ts.map": "c3d0afb5d4d0042e24a595aa0083af3ae86848eb3d336e3840180c690f76db3e",
|
|
@@ -163,51 +163,51 @@
|
|
|
163
163
|
"dist/runtime/bootstrap.js.map": "19360037319afe2380d4fd8e68226dd1297744788e50f21e8f862304bd2ff579",
|
|
164
164
|
"dist/runtime/releaseSource.d.ts": "bbcbc4df7d3aeff8469870e449a4eb9e0e653a1845ce52d07efd8f860a9755ae",
|
|
165
165
|
"dist/runtime/releaseSource.d.ts.map": "6d709b016e65352d4c853fc2a59a266142a4a8d85f3416467fc8a0e8410f0417",
|
|
166
|
-
"dist/runtime/releaseSource.js": "
|
|
166
|
+
"dist/runtime/releaseSource.js": "58ac902c91ea91d86456fe128cd7d93acc3b2c26cddc61cde20c464bfc0a77e3",
|
|
167
167
|
"dist/runtime/releaseSource.js.map": "388cc61e7e806993e9a29dfd7236dc7687603970e24b55eb8e7c4012e73d2db4",
|
|
168
168
|
"dist/runtime/selfUpdate.d.ts": "8435e9d392ebf8d13df53ae5865f359cae2e74e4dea328171a9175f3f852f5fd",
|
|
169
169
|
"dist/runtime/selfUpdate.d.ts.map": "6b7b7c7d838341705d01b0b489565b21f0384071884581cddbf1863644b5fa1b",
|
|
170
|
-
"dist/runtime/selfUpdate.js": "
|
|
170
|
+
"dist/runtime/selfUpdate.js": "90c7bd80b23d7a1e28ae0ddf50168a9c5e06fd02106a63d1a00d6d6f7bad0382",
|
|
171
171
|
"dist/runtime/selfUpdate.js.map": "0df30cc8e599b215e3f4523a75f167580327832b2543434f8de3df0986d0b5e3",
|
|
172
172
|
"dist/runtime/signers.d.ts": "17be1b960fecf7258349ad2908c365965d2cb10386adbb3e75e444948c5d8f0c",
|
|
173
173
|
"dist/runtime/signers.d.ts.map": "1f409bff90a743f3246eb7ca4071bae38af31df995c53d1409876a82fa208660",
|
|
174
|
-
"dist/runtime/signers.js": "
|
|
174
|
+
"dist/runtime/signers.js": "64bbebd6642565eddf62f4200467b7295bc14227c14352cff2ec105bd1aecfad",
|
|
175
175
|
"dist/runtime/signers.js.map": "65ec15f70d76c9547ab085302960e6dc6dd1fd94d0154c121e8dab6863acb123",
|
|
176
176
|
"dist/runtime/store.d.ts": "be061748a1967fab6cc077a4f66d45e85df252fb17fa3056daba15123d9fe8fa",
|
|
177
177
|
"dist/runtime/store.d.ts.map": "bd5fcee6910bcf4e5c3e615050931f3dc8126a365800c949a76a004fc6a791ca",
|
|
178
|
-
"dist/runtime/store.js": "
|
|
178
|
+
"dist/runtime/store.js": "2053fb9f010df0a00dcbfb07b570d3a624a209cf74b087ddeba1f0134d1b17ef",
|
|
179
179
|
"dist/runtime/store.js.map": "bbb50a2f1cc779bce7a727252e085b2b459fbd0552f3378f00c78cc369f30965",
|
|
180
180
|
"dist/runtime/updateCheck.d.ts": "2a1050b7a2b557bc7f7024e482d89b2dddc9dca473782943173566520513d7af",
|
|
181
181
|
"dist/runtime/updateCheck.d.ts.map": "78b9e7de5caf251579049f8bcacfbc4e843102efd013b87839987ef1537cc259",
|
|
182
|
-
"dist/runtime/updateCheck.js": "
|
|
182
|
+
"dist/runtime/updateCheck.js": "6913bca5049c0ddcf86eef74762278b97a997373e65b2a3c47b5bafc399f3480",
|
|
183
183
|
"dist/runtime/updateCheck.js.map": "975907c0a6bfd24d3de9148bd84de3e001004460327a2edfa0fd2498155330d3",
|
|
184
184
|
"dist/scanner/control.d.ts": "86034b1438e61a74ef8babb7c3434b13901179ea4dcc4bda82169652d2f6fd7e",
|
|
185
185
|
"dist/scanner/control.d.ts.map": "d7d35ef2f3c9e0217aafdd80c29ded5a7848053408f769e35e66e63b366dd775",
|
|
186
|
-
"dist/scanner/control.js": "
|
|
186
|
+
"dist/scanner/control.js": "301c1799c6e08b14d1eca4e30586397ac0d01af8db663cda4067c5649afa1471",
|
|
187
187
|
"dist/scanner/control.js.map": "3319fd0314fab4b6adbb7bd1f29d0c5760ad4bb9c03c035b37e9f16d33b8f741",
|
|
188
188
|
"dist/scanner/data.d.ts": "cfb3f35766ee44898849a54553b3b60386e80706b6c952c9e2e7807cff232c58",
|
|
189
189
|
"dist/scanner/data.d.ts.map": "997415437937f3c1c8848497198eb8a070fd5296adf6d5faffdfc5a885d26f7e",
|
|
190
|
-
"dist/scanner/data.js": "
|
|
190
|
+
"dist/scanner/data.js": "101665cc12d33d602584288755057338cd4efa8e61145dbb912fe603d21c0c3e",
|
|
191
191
|
"dist/scanner/data.js.map": "490a61e186b7be15e63cc846563e323e91add45e1ed4a28a185ec22b07c7e8bd",
|
|
192
192
|
"dist/scanner/discover.d.ts": "72c4b5424e17dda9aa256d31333310f5fc916b3e49d38e2bcd5faead71709338",
|
|
193
193
|
"dist/scanner/discover.d.ts.map": "d1e389b030d4380ec249d7676f8977199d2b054c31744ee43b0566de3ac70a69",
|
|
194
|
-
"dist/scanner/discover.js": "
|
|
194
|
+
"dist/scanner/discover.js": "486d8822b3a2c0220a8b9f7a03e4351fb0bf248d5d077a2734df4f7b69a72f69",
|
|
195
195
|
"dist/scanner/discover.js.map": "ab622bb5adb81dc0b35b18306ad1d33087415ca3d2f65aae0842b653771b648f",
|
|
196
196
|
"dist/scanner/enable.d.ts": "ca475c77c1659a076036770c3c040f2913af50e25019841eb27545c0e0ed277b",
|
|
197
197
|
"dist/scanner/enable.d.ts.map": "074ae32dd67ed2f6c14111786341be87f9c1a82cc4b2fbd0d55e1939e68304ba",
|
|
198
|
-
"dist/scanner/enable.js": "
|
|
198
|
+
"dist/scanner/enable.js": "4aa877b0233a4ba969dbe5fb95c7394d936a145cd84a9fd8e732acf26b7db3d9",
|
|
199
199
|
"dist/scanner/enable.js.map": "082c0cd153f0dd0323b693e1892ec9a8fd71fc1f6801b3d1c4eb2e7a27239e54",
|
|
200
200
|
"dist/scanner/picker.d.ts": "a120f20ef8644d23b6ed25f69e927b1f1f84f63016f5d43380922b9de1d8d35a",
|
|
201
201
|
"dist/scanner/picker.d.ts.map": "6cf2810586080007044c55c56e06fe15ef0dfd3dc86c53adca94fb713941ce7e",
|
|
202
|
-
"dist/scanner/picker.js": "
|
|
202
|
+
"dist/scanner/picker.js": "9c494f50d5b86b3b21f185c67d491f6011f0a58d50d34cb618765880776db378",
|
|
203
203
|
"dist/scanner/picker.js.map": "39eef53ff31f9a6407da795466854353213e7d989eb6e168e00805d25046b8c6",
|
|
204
204
|
"dist/scanner/service.d.ts": "02024a93c3d2ed915396029bbf2086ab8902ff71ed21c968b6d583b4c5aaf49e",
|
|
205
205
|
"dist/scanner/service.d.ts.map": "1edd946634661a654e8762e7dbd6dc1843cc003befcf5ae34bceb08900afabec",
|
|
206
|
-
"dist/scanner/service.js": "
|
|
206
|
+
"dist/scanner/service.js": "760f6ea71698bd41618278f43ef73d41475fc3cf6207c023b9f4b89d87eb46c3",
|
|
207
207
|
"dist/scanner/service.js.map": "5fd23d937d6251fb100ae21624b5e9361279ff28a186b926780925a8843eb32d",
|
|
208
208
|
"dist/scanner/update.d.ts": "4649e5af6224705a9a075171e2f1c61a88c6c4f8921aa6bbcc0c5669e312367e",
|
|
209
209
|
"dist/scanner/update.d.ts.map": "b7357d9a2faef7154572fb6dd942a2610c4a0ee277cceabbea339f6b60503694",
|
|
210
|
-
"dist/scanner/update.js": "
|
|
210
|
+
"dist/scanner/update.js": "082a0fcdfccdd5f3d6db2a1c5faba120daf19f9680d0cadec94cf4a607e52012",
|
|
211
211
|
"dist/scanner/update.js.map": "bebd2ddb56423303782beb7119a46ee2690d70be04d3d0923b76b0b1bf164f24",
|
|
212
212
|
"dist/screens/journey.d.ts": "1f77d84c36f5e480b2a28d741a0ff47e176ed02c213bfd9c65117525af89f8d8",
|
|
213
213
|
"dist/screens/journey.d.ts.map": "76500d5b4f7b41696c9bbf2f6dd3dd478b0890299cd4f39bd3c7917f3bc1720b",
|
|
@@ -217,7 +217,7 @@
|
|
|
217
217
|
"dist/transport/server.d.ts.map": "a2919525586b314f4964bc79c2fbbd819150755313dcd85340d7b656c16cd722",
|
|
218
218
|
"dist/transport/server.js": "e361b54c942a9ed8482fbfea45dac79608c6d718465cf36c4717bc836b28c684",
|
|
219
219
|
"dist/transport/server.js.map": "0a3707c7b0b6c6252dc5df6c2033818ca2619df7f420c4fa83ec60917e8bf033",
|
|
220
|
-
"dist/vendor/local-setup.js": "
|
|
220
|
+
"dist/vendor/local-setup.js": "a10fbdc11bf36dbcccc0224c42a2fe69d02e1087db842927cea59a1c8e8c1342",
|
|
221
221
|
"dist/vendor/shared/runtimeReader.js": "956e5ea529d290671a478cbbfcb092cd98eca997da7f8bb2201887950f7424c8",
|
|
222
222
|
"dist/vendor/shared/runtimeSigners.js": "b9f036b9d758f8701b323d4f6873fa0b1dfb52d1626449463b41ef59c0cf0666"
|
|
223
223
|
}
|
package/dist/hooksLog.js
CHANGED
|
@@ -59,9 +59,13 @@ var init_protectedPaths = __esm({
|
|
|
59
59
|
});
|
|
60
60
|
|
|
61
61
|
// packages/shared/dist/secretPatterns.js
|
|
62
|
+
var SECRET_LABEL, SECRET_LABEL_RE, LABELED_VALUE_RE;
|
|
62
63
|
var init_secretPatterns = __esm({
|
|
63
64
|
"packages/shared/dist/secretPatterns.js"() {
|
|
64
65
|
"use strict";
|
|
66
|
+
SECRET_LABEL = String.raw`[\w$-]*(?:api[_-]?key|secret|token|password|credential|auth)|aws_secret_access_key`;
|
|
67
|
+
SECRET_LABEL_RE = new RegExp(`^(?:${SECRET_LABEL}|MYSQL_PWD|SSHPASS)$`, "i");
|
|
68
|
+
LABELED_VALUE_RE = new RegExp(String.raw`(?<![\w$-])((["']?)(?:${SECRET_LABEL})\2\s*[:=]\s*)(?=\S)`, "gi");
|
|
65
69
|
}
|
|
66
70
|
});
|
|
67
71
|
|
package/dist/identity/migrate.js
CHANGED
|
@@ -886,9 +886,13 @@ var require_ignore = __commonJS({
|
|
|
886
886
|
});
|
|
887
887
|
|
|
888
888
|
// packages/shared/dist/secretPatterns.js
|
|
889
|
+
var SECRET_LABEL, SECRET_LABEL_RE, LABELED_VALUE_RE;
|
|
889
890
|
var init_secretPatterns = __esm({
|
|
890
891
|
"packages/shared/dist/secretPatterns.js"() {
|
|
891
892
|
"use strict";
|
|
893
|
+
SECRET_LABEL = String.raw`[\w$-]*(?:api[_-]?key|secret|token|password|credential|auth)|aws_secret_access_key`;
|
|
894
|
+
SECRET_LABEL_RE = new RegExp(`^(?:${SECRET_LABEL}|MYSQL_PWD|SSHPASS)$`, "i");
|
|
895
|
+
LABELED_VALUE_RE = new RegExp(String.raw`(?<![\w$-])((["']?)(?:${SECRET_LABEL})\2\s*[:=]\s*)(?=\S)`, "gi");
|
|
892
896
|
}
|
|
893
897
|
});
|
|
894
898
|
|
|
@@ -2785,9 +2789,6 @@ var MCP_INSTRUCTIONS = getMcpInstructions();
|
|
|
2785
2789
|
|
|
2786
2790
|
// packages/shared/dist/codeScanner.js
|
|
2787
2791
|
var import_ignore = __toESM(require_ignore(), 1);
|
|
2788
|
-
init_secretPatterns();
|
|
2789
|
-
init_protectedPaths();
|
|
2790
|
-
init_projectIdentityFile();
|
|
2791
2792
|
|
|
2792
2793
|
// node_modules/web-tree-sitter/web-tree-sitter.js
|
|
2793
2794
|
var __defProp2 = Object.defineProperty;
|
|
@@ -6840,7 +6841,269 @@ var WASM_DIR = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "wasm")
|
|
|
6840
6841
|
// packages/shared/dist/ast/astChunker.js
|
|
6841
6842
|
var MAX_AST_PARSE_BYTES = 2 * 1024 * 1024;
|
|
6842
6843
|
|
|
6844
|
+
// packages/shared/dist/redactCredentials.js
|
|
6845
|
+
var REDACTED = "<redacted credential>";
|
|
6846
|
+
var MAX_PEM_BODY_LENGTH = 8 * 1024;
|
|
6847
|
+
var LETTER_OR_DIGIT = /[A-Za-z0-9]/;
|
|
6848
|
+
function hasLetterOrDigit(value) {
|
|
6849
|
+
return LETTER_OR_DIGIT.test(value);
|
|
6850
|
+
}
|
|
6851
|
+
function redactContextValue(match, head = "", value = "") {
|
|
6852
|
+
return hasLetterOrDigit(value) ? `${head}${REDACTED}` : match;
|
|
6853
|
+
}
|
|
6854
|
+
var PLACEHOLDER_PASSWORD = /^(?:\[REDACTED(?::[A-Za-z0-9_-]+)?\]|redacted|<[^<>]*>|\{\{[^{}]*\}\}|\$\{[^{}]+\}|%[A-Za-z_][A-Za-z0-9_]*%|\*+|x{3,}|\.\.\.|\u2026|password|passwd|pass|pwd|pw|secret|changeme|change[_-]me|example|test|(?:your|my)[a-z_-]*?(?:password|passwd|pass|pwd|secret|key|token|here))$/i;
|
|
6855
|
+
var PLACEHOLDER_ENV_VAR = /^\$[A-Z_][A-Z0-9_]*$/;
|
|
6856
|
+
function isPlaceholderPassword(password) {
|
|
6857
|
+
return PLACEHOLDER_PASSWORD.test(password) || PLACEHOLDER_ENV_VAR.test(password);
|
|
6858
|
+
}
|
|
6859
|
+
function redactUrlPassword(match, head = "", password = "") {
|
|
6860
|
+
return isPlaceholderPassword(password) || !hasLetterOrDigit(password) ? match : `${head}${REDACTED}@`;
|
|
6861
|
+
}
|
|
6862
|
+
var SHELL_WORD = String.raw`'[^'\n]*'|"[^"\n]*"|(?!${REDACTED})[^\s'"\`;|&()[\]{}\\,/][^\s'"\`;|&]*`;
|
|
6863
|
+
var OPENING_QUOTE = String.raw`(["'\`]?)`;
|
|
6864
|
+
var TRAILING_PUNCTUATION = /[.,:;!?)\]}]+$/;
|
|
6865
|
+
var PROSE_WORDS = /* @__PURE__ */ new Set([
|
|
6866
|
+
"a",
|
|
6867
|
+
"an",
|
|
6868
|
+
"and",
|
|
6869
|
+
"as",
|
|
6870
|
+
"for",
|
|
6871
|
+
"in",
|
|
6872
|
+
"is",
|
|
6873
|
+
"it",
|
|
6874
|
+
"on",
|
|
6875
|
+
"or",
|
|
6876
|
+
"the",
|
|
6877
|
+
"to",
|
|
6878
|
+
"with",
|
|
6879
|
+
"flag",
|
|
6880
|
+
"option",
|
|
6881
|
+
"argument",
|
|
6882
|
+
"instead",
|
|
6883
|
+
"which",
|
|
6884
|
+
"that",
|
|
6885
|
+
"this",
|
|
6886
|
+
"puts",
|
|
6887
|
+
"passes",
|
|
6888
|
+
"leaks",
|
|
6889
|
+
"exposes"
|
|
6890
|
+
]);
|
|
6891
|
+
var REGEX_DELIMITER = /\/(?:[{}()[\];]|$)/;
|
|
6892
|
+
function shellWordSecret(word) {
|
|
6893
|
+
const quote = word[0];
|
|
6894
|
+
if ((quote === "'" || quote === '"') && word.length >= 2 && word.endsWith(quote)) {
|
|
6895
|
+
const inner = word.slice(1, -1);
|
|
6896
|
+
if (!hasLetterOrDigit(inner) || quote === '"' && inner.startsWith("$"))
|
|
6897
|
+
return null;
|
|
6898
|
+
if (inner !== inner.trim())
|
|
6899
|
+
return null;
|
|
6900
|
+
return isPlaceholderPassword(inner) ? null : inner;
|
|
6901
|
+
}
|
|
6902
|
+
if (word.startsWith("$"))
|
|
6903
|
+
return null;
|
|
6904
|
+
const core = word.replace(TRAILING_PUNCTUATION, "");
|
|
6905
|
+
if (!hasLetterOrDigit(core) || isPlaceholderPassword(core))
|
|
6906
|
+
return null;
|
|
6907
|
+
if (REGEX_DELIMITER.test(core))
|
|
6908
|
+
return null;
|
|
6909
|
+
return PROSE_WORDS.has(core.toLowerCase()) ? null : core;
|
|
6910
|
+
}
|
|
6911
|
+
function redactShellWord(match, head = "", word = "", tail = "") {
|
|
6912
|
+
return shellWordSecret(word) === null ? match : `${head}${REDACTED}${tail}`;
|
|
6913
|
+
}
|
|
6914
|
+
function redactQuotedShellWord(match, head = "", openingQuote = "", word = "", tail = "") {
|
|
6915
|
+
if (openingQuote !== "" && word.startsWith(openingQuote))
|
|
6916
|
+
return match;
|
|
6917
|
+
return redactShellWord(match, head, word, tail);
|
|
6918
|
+
}
|
|
6919
|
+
var SSHPASS_COMMAND = String.raw`ssh|scp|sftp|rsync|ssh-copy-id|ansible[\w-]*`;
|
|
6920
|
+
function redactSshpassWord(match, head = "", openingQuote = "", word = "", tail = "", command = "") {
|
|
6921
|
+
if (openingQuote !== "" && word.startsWith(openingQuote))
|
|
6922
|
+
return match;
|
|
6923
|
+
const secret = shellWordSecret(word);
|
|
6924
|
+
if (secret === null)
|
|
6925
|
+
return match;
|
|
6926
|
+
const bare = word[0] !== "'" && word[0] !== '"';
|
|
6927
|
+
if (bare && /^[a-z]+$/.test(secret) && command === "")
|
|
6928
|
+
return match;
|
|
6929
|
+
return `${head}${REDACTED}${tail}`;
|
|
6930
|
+
}
|
|
6931
|
+
var PATTERNS = [
|
|
6932
|
+
{
|
|
6933
|
+
kind: "bearer",
|
|
6934
|
+
pattern: /(\bBearer\s+)([^\s]{40,})/gi,
|
|
6935
|
+
replacement: redactContextValue,
|
|
6936
|
+
secretGroup: 2
|
|
6937
|
+
},
|
|
6938
|
+
{
|
|
6939
|
+
// Before openai, whose sk- shape would otherwise claim these keys.
|
|
6940
|
+
kind: "anthropic",
|
|
6941
|
+
pattern: /(?<![A-Za-z0-9_-])sk-ant-(?=[_-]*[A-Za-z0-9])[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g,
|
|
6942
|
+
replacement: REDACTED
|
|
6943
|
+
},
|
|
6944
|
+
{
|
|
6945
|
+
kind: "openai",
|
|
6946
|
+
pattern: /(?<![A-Za-z0-9_-])sk-(?:proj-)?(?=[_-]*[A-Za-z0-9])[A-Za-z0-9_-]{16,}(?![A-Za-z0-9_-])/g,
|
|
6947
|
+
replacement: REDACTED
|
|
6948
|
+
},
|
|
6949
|
+
{
|
|
6950
|
+
kind: "shopify",
|
|
6951
|
+
pattern: /(?<![A-Za-z0-9_])shp(?:at|ss|ca)_[A-Za-z0-9]{16,}(?![A-Za-z0-9])/g,
|
|
6952
|
+
replacement: REDACTED
|
|
6953
|
+
},
|
|
6954
|
+
{
|
|
6955
|
+
kind: "aws_access_key",
|
|
6956
|
+
pattern: /(?<![A-Z0-9])AKIA[A-Z0-9]{16}(?![A-Z0-9])/g,
|
|
6957
|
+
replacement: REDACTED
|
|
6958
|
+
},
|
|
6959
|
+
{
|
|
6960
|
+
kind: "github",
|
|
6961
|
+
pattern: /(?<![A-Za-z0-9_])gh[opu]_[A-Za-z0-9]{20,}(?![A-Za-z0-9])/g,
|
|
6962
|
+
replacement: REDACTED
|
|
6963
|
+
},
|
|
6964
|
+
{
|
|
6965
|
+
kind: "slack",
|
|
6966
|
+
pattern: /(?<![A-Za-z0-9-])xox[abp]-(?=-*[A-Za-z0-9])[A-Za-z0-9-]{10,}(?![A-Za-z0-9-])/g,
|
|
6967
|
+
replacement: REDACTED
|
|
6968
|
+
},
|
|
6969
|
+
{
|
|
6970
|
+
kind: "sentry",
|
|
6971
|
+
pattern: /(?<![A-Za-z0-9_])sntry[us]_(?=[_-]*[A-Za-z0-9])[A-Za-z0-9_-]{16,}(?![A-Za-z0-9_-])/g,
|
|
6972
|
+
replacement: REDACTED
|
|
6973
|
+
},
|
|
6974
|
+
{
|
|
6975
|
+
kind: "fly",
|
|
6976
|
+
pattern: /(?<![A-Za-z0-9_])(?:FlyV1\s+)?fm2_(?=[_-]*[A-Za-z0-9])[A-Za-z0-9_-]{16,}(?![A-Za-z0-9_-])/g,
|
|
6977
|
+
replacement: REDACTED
|
|
6978
|
+
},
|
|
6979
|
+
{
|
|
6980
|
+
kind: "google_api_key",
|
|
6981
|
+
pattern: /(?<![A-Za-z0-9_-])AIza(?=[_-]*[A-Za-z0-9])[0-9A-Za-z_-]{35}(?![A-Za-z0-9_-])/g,
|
|
6982
|
+
replacement: REDACTED
|
|
6983
|
+
},
|
|
6984
|
+
{
|
|
6985
|
+
kind: "jwt",
|
|
6986
|
+
// header.payload.signature, both JSON segments starting eyJ. The length
|
|
6987
|
+
// floors keep `eyJ...` prose and signature-less examples out.
|
|
6988
|
+
pattern: /(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{16,}(?![A-Za-z0-9_-])/g,
|
|
6989
|
+
replacement: REDACTED
|
|
6990
|
+
},
|
|
6991
|
+
{
|
|
6992
|
+
kind: "mnemonik_component_token",
|
|
6993
|
+
// mnc_ / mncr_ + 43 base64url (oauth/components.ts); 32+ also catches a
|
|
6994
|
+
// partial token. The body must contain an upper-case letter or digit, so a
|
|
6995
|
+
// snake_case identifier is not mistaken for one; the 8-character
|
|
6996
|
+
// display prefix (mnc_ + 8) is too short.
|
|
6997
|
+
pattern: /(?<![A-Za-z0-9_])mncr?_(?=[A-Za-z0-9_-]*[A-Z0-9])[A-Za-z0-9_-]{32,}/g,
|
|
6998
|
+
replacement: REDACTED
|
|
6999
|
+
},
|
|
7000
|
+
{
|
|
7001
|
+
kind: "stripe",
|
|
7002
|
+
// Secret and restricted keys (sk_/rk_ live|test) and webhook signing secrets.
|
|
7003
|
+
pattern: /(?<![A-Za-z0-9_])(?:(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{16,}|whsec_[A-Za-z0-9]{20,})(?![A-Za-z0-9])/g,
|
|
7004
|
+
replacement: REDACTED
|
|
7005
|
+
},
|
|
7006
|
+
{
|
|
7007
|
+
kind: "mnemonik_proxy_token",
|
|
7008
|
+
// pxt_ + 32 hex (the format server.ts validates). A bare prefix in prose is left.
|
|
7009
|
+
pattern: /(?<![A-Za-z0-9_])pxt_[0-9a-f]{32,}/g,
|
|
7010
|
+
replacement: REDACTED
|
|
7011
|
+
},
|
|
7012
|
+
{
|
|
7013
|
+
kind: "mnemonik_api_key",
|
|
7014
|
+
// mnk_ + 64 hex (AuthManager.generateApiKey); 32+ also catches a half key.
|
|
7015
|
+
// The stored 12-character key_prefix (mnk_ + 8 hex) is not a credential.
|
|
7016
|
+
pattern: /(?<![A-Za-z0-9_])mnk_[0-9a-f]{32,}/g,
|
|
7017
|
+
replacement: REDACTED
|
|
7018
|
+
},
|
|
7019
|
+
{
|
|
7020
|
+
kind: "mnemonik_api_key_legacy",
|
|
7021
|
+
// mnk_ + 43 base64url: keys minted by hand before AuthManager's hex form
|
|
7022
|
+
// (production's only key in 2026-10 has this shape, and one stored memory
|
|
7023
|
+
// held a development key in it). Authentication accepts any mnk_ bearer.
|
|
7024
|
+
// The body needs upper and lower case and a digit, so a snake_case
|
|
7025
|
+
// identifier that starts mnk_ is not taken for one.
|
|
7026
|
+
pattern: /(?<![A-Za-z0-9_])mnk_(?=[A-Za-z0-9_-]*[A-Z])(?=[A-Za-z0-9_-]*[a-z])(?=[A-Za-z0-9_-]*[0-9])[A-Za-z0-9_-]{40,}(?![A-Za-z0-9_-])/g,
|
|
7027
|
+
replacement: REDACTED
|
|
7028
|
+
},
|
|
7029
|
+
{
|
|
7030
|
+
kind: "named_value",
|
|
7031
|
+
pattern: /(\b[A-Za-z_][A-Za-z0-9_]*(?:_TOKEN|_KEY|_SECRET|_PASSWORD|_PASS|APIKEY|API_KEY)\s*(?:=|:)\s*)([^\s]{16,})/gi,
|
|
7032
|
+
replacement: redactContextValue,
|
|
7033
|
+
secretGroup: 2
|
|
7034
|
+
},
|
|
7035
|
+
{
|
|
7036
|
+
kind: "connection_string",
|
|
7037
|
+
// scheme://user:password@host: only the password is replaced; scheme,
|
|
7038
|
+
// user, host and database stay readable. The user may be empty
|
|
7039
|
+
// (redis://:password@host). The password runs to the last `@` before a
|
|
7040
|
+
// path, query, fragment, quote or whitespace, so an unencoded `@` inside
|
|
7041
|
+
// it is still covered. Runs after named_value, which already replaces a
|
|
7042
|
+
// whole URL assigned to a secret-named variable.
|
|
7043
|
+
pattern: /\b((?:postgres(?:ql)?|mysql|mariadb|mongodb|rediss?|amqps?|mssql|sqlserver)(?:\+[a-z0-9]+)?:\/\/[^\s:/?#@'"`<>]{0,256}:)([^\s/?#'"`]{1,512})@/gi,
|
|
7044
|
+
replacement: redactUrlPassword,
|
|
7045
|
+
secretGroup: 2
|
|
7046
|
+
},
|
|
7047
|
+
{
|
|
7048
|
+
kind: "url_basic_auth",
|
|
7049
|
+
// https://user:password@host: same shape and placeholder rules as a
|
|
7050
|
+
// connection string; only the password is replaced.
|
|
7051
|
+
pattern: /\b(https?:\/\/[^\s:/?#@'"`<>]{0,256}:)([^\s/?#'"`]{1,512})@/gi,
|
|
7052
|
+
replacement: redactUrlPassword,
|
|
7053
|
+
secretGroup: 2
|
|
7054
|
+
},
|
|
7055
|
+
// Command-line passwords. Each keeps the command and replaces only the
|
|
7056
|
+
// password word; an expansion or placeholder in that position is left.
|
|
7057
|
+
{
|
|
7058
|
+
// sshpass -p <password> (also -p'<password>' and -p"<password>"), after
|
|
7059
|
+
// any other sshpass flags. 13 memories, 11 scanner chunks, 15 versions and
|
|
7060
|
+
// 6 dated facts in production held one on 2026-10-12.
|
|
7061
|
+
kind: "sshpass_password",
|
|
7062
|
+
pattern: new RegExp(String.raw`(${OPENING_QUOTE}\bsshpass(?:[ \t]+-[a-oq-zA-Z]\S*)*[ \t]+-p[ \t]*)(${SHELL_WORD})()(?=((?:[ \t]+(?:${SSHPASS_COMMAND})(?![\w-]))?))`, "g"),
|
|
7063
|
+
replacement: redactSshpassWord,
|
|
7064
|
+
secretGroup: 3,
|
|
7065
|
+
commandLine: true
|
|
7066
|
+
},
|
|
7067
|
+
{
|
|
7068
|
+
// Environment variables whose only purpose is a password, in shell
|
|
7069
|
+
// assignment form (no space around `=`): libpq's PGPASSWORD (one memory,
|
|
7070
|
+
// version and fact in production), MySQL's MYSQL_PWD, sshpass -e's
|
|
7071
|
+
// SSHPASS. named_value needs an `_PASSWORD`-style suffix and 16
|
|
7072
|
+
// characters, so it misses all three. Not an awk program that matches or
|
|
7073
|
+
// prints the assignment: `/^PGPASSWORD=/ { print "PGPASSWORD=" pw }`.
|
|
7074
|
+
kind: "password_env_var",
|
|
7075
|
+
pattern: new RegExp(String.raw`(${OPENING_QUOTE}\b(?:PGPASSWORD|MYSQL_PWD|SSHPASS)=)(${SHELL_WORD})()`, "g"),
|
|
7076
|
+
replacement: redactQuotedShellWord,
|
|
7077
|
+
secretGroup: 3,
|
|
7078
|
+
commandLine: true
|
|
7079
|
+
},
|
|
7080
|
+
{
|
|
7081
|
+
// --password=<value>, the long option every CLI that takes one spells
|
|
7082
|
+
// this way. The `=` keeps prose about the option ("--password is
|
|
7083
|
+
// required") out; the spaced form is not matched for that reason.
|
|
7084
|
+
kind: "password_option",
|
|
7085
|
+
pattern: new RegExp(String.raw`(${OPENING_QUOTE}(?<![\w-])--password=)(${SHELL_WORD})()`, "g"),
|
|
7086
|
+
replacement: redactQuotedShellWord,
|
|
7087
|
+
secretGroup: 3,
|
|
7088
|
+
commandLine: true
|
|
7089
|
+
},
|
|
7090
|
+
{
|
|
7091
|
+
// echo <password> | sudo -S: sudo reads the password from stdin. One
|
|
7092
|
+
// memory, two versions and two facts in production.
|
|
7093
|
+
kind: "sudo_password",
|
|
7094
|
+
pattern: new RegExp(String.raw`(\becho[ \t]+(?:-[neE]+[ \t]+)?)(${SHELL_WORD})([ \t]*\|[ \t]*sudo\b[^|\n]*?[ \t](?:-[A-Za-z]*S[A-Za-z]*|--stdin)\b)`, "g"),
|
|
7095
|
+
replacement: redactShellWord,
|
|
7096
|
+
secretGroup: 2,
|
|
7097
|
+
commandLine: true
|
|
7098
|
+
}
|
|
7099
|
+
];
|
|
7100
|
+
|
|
7101
|
+
// packages/shared/dist/sourceRedaction.js
|
|
7102
|
+
init_secretPatterns();
|
|
7103
|
+
|
|
6843
7104
|
// packages/shared/dist/codeScanner.js
|
|
7105
|
+
init_protectedPaths();
|
|
7106
|
+
init_projectIdentityFile();
|
|
6844
7107
|
var MAX_SCANNED_FILE_BYTES = 10 * 1024 * 1024;
|
|
6845
7108
|
var BUILT_IN_IGNORE_DIRS = [
|
|
6846
7109
|
// JS / web
|