@testsmith/api-spector-agent 0.6.3 → 0.6.5

package/dist/index.cjs

@@ -44178,7 +44178,7 @@ var StreamFramer = class {
   carry = "";
   /** Feed a decoded text chunk; returns the frames that completed. */
   push(text) {
-    this.carry += text.replace(/\r\n?/g, "\n");
+    this.carry += text.replaceAll(/\r\n?/g, "\n");
     return this.mode === "sse" ? this.drainSse() : this.drainNdjson();
   }
   /** Emit whatever remains once the stream closes (a last line/block with no
@@ -44241,7 +44241,7 @@ var StreamFramer = class {
 function toEvent(frame, kind, seq, tMs) {
   let json;
   const trimmed = frame.data.trim();
-  if (trimmed && (trimmed[0] === "{" || trimmed[0] === "[")) {
+  if (trimmed && (trimmed.startsWith("{") || trimmed.startsWith("["))) {
     try {
       json = JSON.parse(trimmed);
     } catch {
@@ -44335,7 +44335,7 @@ async function readStream(body, kind, startMs, opts = {}) {
     } catch {
     }
   }
-  return { events, text, close, firstEventMs: firstEventMs < 0 ? 0 : firstEventMs };
+  return { events, text, close, firstEventMs: Math.max(firstEventMs, 0) };
 }
 
 // src/main/secrets/registry.ts
@@ -44530,13 +44530,13 @@ function sha256hex(data) {
   return (0, import_node_crypto.createHash)("sha256").update(data, "utf8").digest("hex");
 }
 function signSigV4(input) {
-  const amzDate = input.now.toISOString().replace(/[:-]|\.\d{3}/g, "");
+  const amzDate = input.now.toISOString().replaceAll(/[:-]|\.\d{3}/g, "");
   const dateStamp = amzDate.slice(0, 8);
   const headers = { ...input.headers, host: input.host, "x-amz-date": amzDate };
   if (input.sessionToken) headers["x-amz-security-token"] = input.sessionToken;
   const lower = {};
-  for (const k68 of Object.keys(headers)) lower[k68.toLowerCase()] = headers[k68].trim().replace(/\s+/g, " ");
-  const sortedKeys = Object.keys(lower).sort();
+  for (const k68 of Object.keys(headers)) lower[k68.toLowerCase()] = headers[k68].trim().replaceAll(/\s+/g, " ");
+  const sortedKeys = Object.keys(lower).sort((a38, b69) => a38.localeCompare(b69));
   const canonicalHeaders = sortedKeys.map((k68) => `${k68}:${lower[k68]}
 `).join("");
   const signedHeaders = sortedKeys.join(";");
@@ -44795,7 +44795,7 @@ async function resolve3(refBody) {
     if (!sectionLabel) return true;
     return String(f74?.section?.label ?? "").toLowerCase() === sectionLabel.toLowerCase();
   });
-  if (!match || match.value === void 0) {
+  if (match?.value === void 0) {
     throw new Error(`1Password: field '${fieldLabel}' not found on item '${item}'`);
   }
   return String(match.value);
@@ -44829,7 +44829,7 @@ async function getSecret(ref) {
   const stored = secretStore[ref];
   if (stored) {
     const ss = getSafeStorage();
-    if (ss && ss.isEncryptionAvailable()) {
+    if (ss?.isEncryptionAvailable()) {
       try {
         return ss.decryptString(Buffer.from(stored, "base64"));
       } catch {
@@ -44841,10 +44841,10 @@ async function getSecret(ref) {
 
 // src/main/interpolation.ts
 var import_dayjs2 = __toESM(require_dayjs_min());
-var vm = __toESM(require("vm"));
+var vm = __toESM(require("node:vm"));
 var _fakerCache = null;
 async function getFaker() {
-  if (!_fakerCache) _fakerCache = await Promise.resolve().then(() => (init_dist(), dist_exports));
+  _fakerCache ??= await Promise.resolve().then(() => (init_dist(), dist_exports));
   return _fakerCache.faker;
 }
 var _exprContext = null;
@@ -44873,7 +44873,7 @@ async function buildDynamicVars() {
   };
 }
 function interpolate(str, vars) {
-  return str.replace(/\{\{([^}]+)\}\}/g, (match, key) => {
+  return str.replaceAll(/\{\{([^}]+)\}\}/g, (match, key) => {
     const trimmed = key.trim();
     if (trimmed in vars) return vars[trimmed];
     if (_exprContext && (trimmed.includes(".") || trimmed.includes("("))) {
@@ -44893,7 +44893,7 @@ function resolveDataRow(row, scope) {
 }
 function buildUrl(baseUrl, params, vars) {
   const templateTokens = /* @__PURE__ */ new Set();
-  baseUrl.replace(/\{\{([^}]+)\}\}/g, (_m, name) => {
+  baseUrl.replaceAll(/\{\{([^}]+)\}\}/g, (_m, name) => {
     templateTokens.add(String(name).trim());
     return "";
   });
@@ -44920,8 +44920,8 @@ function mergeVars(envVars, collectionVars, globals2, localVars = {}, dynamicVar
 }
 
 // src/main/script-runner.ts
-var vm3 = __toESM(require("vm"));
-var crypto = __toESM(require("crypto"));
+var vm3 = __toESM(require("node:vm"));
+var crypto = __toESM(require("node:crypto"));
 var import_dayjs3 = __toESM(require_dayjs_min());
 var import_tv4 = __toESM(require_tv4());
 
@@ -46631,14 +46631,14 @@ function xmlFindAll(node, tag, nth) {
 }
 function xmlQuerySelector(root, selector) {
   const parts = selector.trim().split(/\s*>\s*/);
-  const m0 = parts[0].match(/^([A-Za-z0-9_:.-]+?)(?::nth-of-type\((\d+)\))?$/);
+  const m0 = /^([A-Za-z0-9_:.-]+?)(?::nth-of-type\((\d+)\))?$/.exec(parts[0]);
   if (!m0) return null;
-  let candidates = xmlFindAll(root, m0[1], m0[2] ? parseInt(m0[2]) - 1 : 0);
+  let candidates = xmlFindAll(root, m0[1], m0[2] ? Number.parseInt(m0[2]) - 1 : 0);
   for (let i68 = 1; i68 < parts.length; i68++) {
-    const m75 = parts[i68].match(/^([A-Za-z0-9_:.-]+?)(?::nth-of-type\((\d+)\))?$/);
+    const m75 = /^([A-Za-z0-9_:.-]+?)(?::nth-of-type\((\d+)\))?$/.exec(parts[i68]);
     if (!m75) return null;
     const tag = m75[1];
-    const idx = m75[2] ? parseInt(m75[2]) - 1 : 0;
+    const idx = m75[2] ? Number.parseInt(m75[2]) - 1 : 0;
     const next = [];
     for (const node of candidates) {
       const children = Array.from(node.childNodes).filter((c70) => c70.nodeType === 1 && c70.tagName === tag);
@@ -46659,7 +46659,7 @@ function makeSandboxDOMParser() {
 }
 var _fakerCache2 = null;
 async function getFaker2() {
-  if (!_fakerCache2) _fakerCache2 = await Promise.resolve().then(() => (init_dist(), dist_exports));
+  _fakerCache2 ??= await Promise.resolve().then(() => (init_dist(), dist_exports));
   return _fakerCache2.faker;
 }
 function makeAsserter(value, negated = false) {
@@ -46858,7 +46858,7 @@ function buildAt(ctx, testResults, consoleOutput) {
       const period = options?.period ?? 30;
       const algorithm = options?.algorithm ?? "sha1";
       const base32chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-      const cleaned = secret.replace(/[\s=-]/g, "").toUpperCase();
+      const cleaned = secret.replaceAll(/[\s=-]/g, "").toUpperCase();
       let bits = "";
       for (const c70 of cleaned) {
         const val = base32chars.indexOf(c70);
@@ -46867,7 +46867,7 @@ function buildAt(ctx, testResults, consoleOutput) {
       }
       const keyBytes = Buffer.alloc(Math.floor(bits.length / 8));
       for (let i68 = 0; i68 < keyBytes.length; i68++) {
-        keyBytes[i68] = parseInt(bits.slice(i68 * 8, i68 * 8 + 8), 2);
+        keyBytes[i68] = Number.parseInt(bits.slice(i68 * 8, i68 * 8 + 8), 2);
       }
       const counter = Math.floor(Date.now() / 1e3 / period);
       const counterBuf = Buffer.alloc(8);
@@ -46946,8 +46946,9 @@ async function runScript(code, ctx, timeoutMs = 5e3) {
     JSON,
     Math,
     Date,
-    parseInt,
-    parseFloat,
+    parseInt: Number.parseInt,
+    parseFloat: Number.parseFloat,
+    // isNaN/isFinite intentionally expose the global (coercing) semantics user scripts expect
     isNaN,
     isFinite,
     encodeURIComponent,
@@ -46983,12 +46984,12 @@ async function runScript(code, ctx, timeoutMs = 5e3) {
 }
 
 // src/main/globals-store.ts
-var import_promises = require("fs/promises");
-var import_path = require("path");
+var import_promises = require("node:fs/promises");
+var import_node_path2 = require("node:path");
 var globals = {};
 var currentDir = null;
 function globalsPath(dir) {
-  return (0, import_path.join)(dir, "globals.json");
+  return (0, import_node_path2.join)(dir, "globals.json");
 }
 async function persistGlobals() {
   if (!currentDir) return;
@@ -46999,12 +47000,12 @@ function patchGlobals(patch) {
 }
 
 // src/main/auth-builder.ts
-var import_crypto2 = __toESM(require("crypto"));
-var import_http = require("http");
-var import_promises2 = require("fs/promises");
+var import_node_crypto3 = __toESM(require("node:crypto"));
+var import_node_http = require("node:http");
+var import_promises2 = require("node:fs/promises");
 
 // src/main/ntlm.ts
-var import_crypto = __toESM(require("crypto"));
+var import_node_crypto2 = __toESM(require("node:crypto"));
 var SIGNATURE = Buffer.from("NTLMSSP\0", "latin1");
 var F_UNICODE = 1;
 var F_OEM = 2;
@@ -47070,7 +47071,7 @@ function md4(msg) {
   return out;
 }
 var utf16le = (s71) => Buffer.from(s71, "utf16le");
-var hmacMd5 = (key, data) => import_crypto.default.createHmac("md5", key).update(data).digest();
+var hmacMd5 = (key, data) => import_node_crypto2.default.createHmac("md5", key).update(data).digest();
 function ntowfv2(user, domain, password) {
   const ntHash = md4(utf16le(password));
   return hmacMd5(ntHash, utf16le(user.toUpperCase() + domain));
@@ -47128,7 +47129,7 @@ function computeNtlmV2Response(opts) {
 function createType3Message(opts) {
   const domain = opts.domain ?? "";
   const workstation = opts.workstation ?? "";
-  const clientChallenge = opts.clientChallenge ?? import_crypto.default.randomBytes(8);
+  const clientChallenge = opts.clientChallenge ?? import_node_crypto2.default.randomBytes(8);
   const timestamp = filetime(opts.timestamp ?? Date.now());
   const { ntResponse, lmResponse } = computeNtlmV2Response({
     user: opts.user,
@@ -47222,7 +47223,7 @@ function parseDigestChallenge(wwwAuth) {
   };
 }
 function md5(s71) {
-  return import_crypto2.default.createHash("md5").update(s71).digest("hex");
+  return import_node_crypto3.default.createHash("md5").update(s71).digest("hex");
 }
 function buildDigestAuthHeader(challenge, username, password, method, uri) {
   const { realm, nonce, qop, algorithm, opaque } = challenge;
@@ -47234,7 +47235,7 @@ function buildDigestAuthHeader(challenge, username, password, method, uri) {
   let cnonce;
   if (qop === "auth" || qop === "auth-int") {
     nc = "00000001";
-    cnonce = import_crypto2.default.randomBytes(8).toString("hex");
+    cnonce = import_node_crypto3.default.randomBytes(8).toString("hex");
     response = md5(`${ha1}:${nonce}:${nc}:${cnonce}:${qop}:${ha22}`);
   } else {
     response = md5(`${ha1}:${nonce}:${ha22}`);
@@ -47323,7 +47324,7 @@ async function performNtlmRequest(opts) {
     }
     return {
       status: statusCode,
-      statusText: import_http.STATUS_CODES[statusCode] ?? "",
+      statusText: import_node_http.STATUS_CODES[statusCode] ?? "",
       headers: { forEach: (cb) => entries.forEach(([k68, v60]) => cb(v60, k68)) },
       text: () => Promise.resolve(bodyText)
     };
@@ -47491,11 +47492,11 @@ function maskObject(obj, patterns) {
 }
 function maskHeaders(headers, patterns) {
   if (!patterns.length) return headers;
-  const alwaysMask = ["authorization", "cookie", "set-cookie"];
+  const alwaysMask = /* @__PURE__ */ new Set(["authorization", "cookie", "set-cookie"]);
   const result = {};
   for (const [k68, v60] of Object.entries(headers)) {
     const lower = k68.toLowerCase();
-    if (alwaysMask.includes(lower) || patterns.some((p74) => lower.includes(p74.toLowerCase()))) {
+    if (alwaysMask.has(lower) || patterns.some((p74) => lower.includes(p74.toLowerCase()))) {
       result[k68] = "[REDACTED]";
     } else {
       result[k68] = v60;
@@ -47588,7 +47589,7 @@ function applyRequestDefaults(req) {
 }
 var _defaultAgent;
 function defaultAgent() {
-  if (!_defaultAgent) _defaultAgent = new import_undici.Agent({ allowH2: true });
+  _defaultAgent ??= new import_undici.Agent({ allowH2: true });
   return _defaultAgent;
 }
 async function buildDispatcher(proxy, tls) {
@@ -47961,7 +47962,7 @@ var APP_URL = (process.env.APP_URL || "").replace(/\/+$/, "");
 var AGENT_TOKEN = process.env.AGENT_TOKEN || "";
 var RUNTIME_TOKEN = process.env.RUNTIME_TOKEN || "";
 var POLL_MS = Number(process.env.POLL_INTERVAL_MS || 5e3);
-var VERSION = true ? "0.6.3" : "";
+var VERSION = true ? "0.6.5" : "";
 var authHeaders = AGENT_TOKEN ? { Authorization: `Bearer ${AGENT_TOKEN}` } : RUNTIME_TOKEN ? { "X-Runtime-Token": RUNTIME_TOKEN } : {};
 async function postResult(m75, fields) {
   await fetch(`${APP_URL}/api/monitor-runtime/${m75.id}/result`, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@testsmith/api-spector-agent",
-  "version": "0.6.3",
+  "version": "0.6.5",
   "description": "API Spector private runner: monitor internal/local APIs the cloud cannot reach, with no inbound connections.",
   "license": "MIT",
   "homepage": "https://api-spector.dev",