@rogatio/cli 6.16.3 → 6.16.4

package/dist/editor/index.js

@@ -531,7 +531,11 @@ function createAIAssistPanel(_container, _editor, onApply, onClose, onSend) {
       `;
       const addDetail = (label, value) => {
         const detail = document.createElement("div");
-        detail.innerHTML = `<span style="color:#666;">${label}:</span> ${value}`;
+        const labelEl = document.createElement("span");
+        labelEl.style.color = "#666";
+        labelEl.textContent = `${label}:`;
+        detail.appendChild(labelEl);
+        detail.appendChild(document.createTextNode(` ${value}`));
         ruleDetails.appendChild(detail);
       };
       if (rule.source) {

package/dist/node/index.js

@@ -20073,7 +20073,7 @@ var require_x509_cjs = __commonJS({
     var _X509Certificate_signature;
     var _X509Certificate_extensions;
     var _X509Certificate_publicKey;
-    var X509Certificate5 = class extends PemData {
+    var X509Certificate4 = class extends PemData {
       get publicKey() {
         if (!tslib.__classPrivateFieldGet(this, _X509Certificate_publicKey, "f")) {
           tslib.__classPrivateFieldSet(this, _X509Certificate_publicKey, new PublicKey(this.asn.tbsCertificate.subjectPublicKeyInfo, this.parseOptions), "f");
@@ -20316,7 +20316,7 @@ var require_x509_cjs = __commonJS({
       }
     };
     _X509Certificate_tbs = /* @__PURE__ */ new WeakMap(), _X509Certificate_serialNumber = /* @__PURE__ */ new WeakMap(), _X509Certificate_subjectName = /* @__PURE__ */ new WeakMap(), _X509Certificate_subject = /* @__PURE__ */ new WeakMap(), _X509Certificate_issuerName = /* @__PURE__ */ new WeakMap(), _X509Certificate_issuer = /* @__PURE__ */ new WeakMap(), _X509Certificate_notBefore = /* @__PURE__ */ new WeakMap(), _X509Certificate_notAfter = /* @__PURE__ */ new WeakMap(), _X509Certificate_signatureAlgorithm = /* @__PURE__ */ new WeakMap(), _X509Certificate_signature = /* @__PURE__ */ new WeakMap(), _X509Certificate_extensions = /* @__PURE__ */ new WeakMap(), _X509Certificate_publicKey = /* @__PURE__ */ new WeakMap();
-    X509Certificate5.NAME = "Certificate";
+    X509Certificate4.NAME = "Certificate";
     var _X509Certificates_options;
     var X509Certificates = class extends Array {
       constructor(param, options) {
@@ -20324,7 +20324,7 @@ var require_x509_cjs = __commonJS({
         _X509Certificates_options.set(this, void 0);
         if (PemData.isAsnEncoded(param)) {
           this.import(param, options);
-        } else if (param instanceof X509Certificate5) {
+        } else if (param instanceof X509Certificate4) {
           this.push(param);
         } else if (Array.isArray(param)) {
           for (const item of param) {
@@ -20362,7 +20362,7 @@ var require_x509_cjs = __commonJS({
         const certificates = [];
         for (const item of signedData.certificates || []) {
           if (item.certificate) {
-            certificates.push(new X509Certificate5(item.certificate, options));
+            certificates.push(new X509Certificate4(item.certificate, options));
           }
         }
         this.clear();
@@ -20554,7 +20554,7 @@ var require_x509_cjs = __commonJS({
           throw Error("Cannot convert ASN.1 signature value to WebCrypto format");
         }
         asnX509.signatureValue = asnSignature;
-        return new X509Certificate5(asn1Schema.AsnConvert.serialize(asnX509));
+        return new X509Certificate4(asn1Schema.AsnConvert.serialize(asnX509));
       }
     };
     var _X509CrlEntry_serialNumber;
@@ -20775,7 +20775,7 @@ var require_x509_cjs = __commonJS({
         let publicKey;
         const paramsKey = params.publicKey;
         try {
-          if (paramsKey instanceof X509Certificate5) {
+          if (paramsKey instanceof X509Certificate4) {
             keyAlgorithm = {
               ...paramsKey.publicKey.algorithm,
               ...paramsKey.signatureAlgorithm
@@ -20979,7 +20979,7 @@ var require_x509_cjs = __commonJS({
     exports.TextObject = TextObject;
     exports.UPN = UPN;
     exports.URL = URL2;
-    exports.X509Certificate = X509Certificate5;
+    exports.X509Certificate = X509Certificate4;
     exports.X509CertificateGenerator = X509CertificateGenerator2;
     exports.X509Certificates = X509Certificates;
     exports.X509ChainBuilder = X509ChainBuilder;
@@ -24442,11 +24442,6 @@ function parseMockRedirect(rawUrl) {
   if (!isSingleSegment(token) || !isSingleSegment(digest)) return null;
   return { token, digest };
 }
-function supportedContentType(value) {
-  if (value === void 0) return false;
-  const mediaType = value.split(";", 1)[0]?.trim().toLowerCase() ?? "";
-  return mediaType === "application/json" || mediaType.startsWith("application/") && mediaType.endsWith("+json") || mediaType === "application/x-www-form-urlencoded" || mediaType.startsWith("text/");
-}
 var REGEX_WORKER_SOURCE = `
 const workerThreads =
   typeof process.getBuiltinModule === "function"
@@ -24604,6 +24599,11 @@ function runRegexReplace(text, pattern, replacement, deadlineMs) {
     }
   );
 }
+function supportedContentType(value) {
+  if (value === void 0) return false;
+  const mediaType = value.split(";", 1)[0]?.trim().toLowerCase() ?? "";
+  return mediaType === "application/json" || mediaType.startsWith("application/") && mediaType.endsWith("+json") || mediaType === "application/x-www-form-urlencoded" || mediaType.startsWith("text/");
+}
 async function rewriteRequestBody(input, action, captureContext) {
   if (!supportedContentType(input.contentType)) {
     return failure("runtime.request-body-unsupported-mime-type");
@@ -24882,8 +24882,12 @@ async function rewriteResponseBody(input, replacements, replaceAction, captureCo
     for (const entry of replacements) {
       if (entry.pattern.length === 0 || entry.pattern.length > LIMITS.maxResponseBodyPatternLength || entry.replacement.length > LIMITS.maxResponseBodyReplacementLength)
         return failure("runtime.size-limit");
-      const regex = new RegExp(entry.pattern, "gu");
-      text = text.replace(regex, entry.replacement);
+      text = await runRegexReplace(
+        text,
+        entry.pattern,
+        entry.replacement,
+        RUNTIME_LIMITS.maxRegexDeadlineMs
+      );
       if (new TextEncoder().encode(text).byteLength > RUNTIME_LIMITS.maxResponseBodyBytes)
         return failure("runtime.size-limit");
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rogatio/cli",
-  "version": "6.16.3",
+  "version": "6.16.4",
   "private": false,
   "type": "module",
   "description": "Local-first browser request and response rules — editor host, file verification, test runner, and runtime dispatch.",