@araminix/platform 0.0.0-stage → 1.7.0

package/dist/tests/uploadSecurity.test.js

@@ -0,0 +1,219 @@
+import { Ok } from '@araminix/lib';
+import assert from 'node:assert';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { afterEach, beforeEach, describe, it } from 'node:test';
+import request from 'supertest';
+import { UserInfo } from '../src/server/AuthProvider.js';
+import Endpoint from '../src/server/Endpoint.js';
+describe('Endpoint Upload Security and Stored XSS Defenses', () => {
+    let mockAuth;
+    let endpoint;
+    let tempDir;
+    beforeEach(() => {
+        tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'araminix-upload-test-'));
+        mockAuth = {
+            getInfo: async (token) => {
+                if (token === 'valid-token') {
+                    return new Ok(new UserInfo('user-1', 'john', 'John Doe', 'rt-1', 'john@example.com', [], { _key: 'u1', name: 'Unit 1', code: 'U1' }));
+                }
+                return { isErr: () => true, isOk: () => false, unwrap: () => null };
+            },
+            auth: async () => new Ok('token'),
+            googleAuth: async () => new Ok('token'),
+            destroy: async () => { },
+            refreshToken: async () => new Ok('token'),
+            request2FA: async () => ({}),
+            verify2FA: async () => new Ok('token'),
+            enable2FA: async () => ({}),
+            disable2FA: async () => ({}),
+            requestUploadUrl: async () => ({}),
+            requestDownloadUrl: async () => ({}),
+            mobileRequests: async () => ({}),
+        };
+    });
+    afterEach(() => {
+        if (endpoint) {
+            endpoint.close();
+        }
+        if (tempDir && fs.existsSync(tempDir)) {
+            fs.rmSync(tempDir, { recursive: true, force: true });
+        }
+    });
+    it('rejects unauthenticated upload requests with 401 Unauthorized', async () => {
+        endpoint = new Endpoint({
+            authProvider: mockAuth,
+            uploadDir: tempDir,
+            port: 0,
+        });
+        const res = await request(endpoint.express).post('/file').attach('file', Buffer.from('hello'), 'test.txt');
+        assert.strictEqual(res.status, 401);
+    });
+    it('uploads valid file within size limit and stores sanitized metadata', async () => {
+        endpoint = new Endpoint({
+            authProvider: mockAuth,
+            uploadDir: tempDir,
+            port: 0,
+        });
+        const fileContent = 'Hello secure world!';
+        const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from(fileContent), 'document.txt');
+        assert.strictEqual(res.status, 200);
+        assert.ok(res.body.id, 'Response must contain file ID');
+        assert.strictEqual(res.body.name, 'document.txt');
+        assert.strictEqual(res.body.size, Buffer.byteLength(fileContent));
+        assert.strictEqual(res.body.userId, 'user-1');
+        const savedFilePath = path.join(tempDir, res.body.id, 'document.txt');
+        assert.ok(fs.existsSync(savedFilePath), 'Uploaded file must exist in UUID directory on disk');
+        assert.strictEqual(fs.readFileSync(savedFilePath, 'utf8'), fileContent);
+        const indexJsonPath = path.join(tempDir, res.body.id, 'index.json');
+        assert.ok(fs.existsSync(indexJsonPath), 'index.json metadata file must exist on disk');
+        const metadata = JSON.parse(fs.readFileSync(indexJsonPath, 'utf8'));
+        assert.strictEqual(metadata.name, 'document.txt');
+        assert.strictEqual(metadata.userId, 'user-1');
+    });
+    it('rejects upload exceeding maxUploadBytes with HTTP 413 Payload Too Large', async () => {
+        const maxBytes = 100;
+        endpoint = new Endpoint({
+            authProvider: mockAuth,
+            uploadDir: tempDir,
+            port: 0,
+            maxUploadBytes: maxBytes,
+        });
+        const oversizedData = Buffer.alloc(maxBytes + 50, 'a');
+        const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', oversizedData, 'oversized.txt');
+        assert.strictEqual(res.status, 413);
+        assert.ok(res.body.error, 'Response must return error message');
+        assert.ok(res.body.error.includes('File exceeds maximum allowed size of 100 bytes'));
+    });
+    it('rejects upload with disallowed extension with HTTP 415 Unsupported Media Type', async () => {
+        endpoint = new Endpoint({
+            authProvider: mockAuth,
+            uploadDir: tempDir,
+            port: 0,
+            uploadAllowlist: {
+                extensions: ['png', 'jpg', 'pdf'],
+            },
+        });
+        const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('<script>alert(1)</script>'), 'malicious.html');
+        assert.strictEqual(res.status, 415);
+        assert.strictEqual(res.body.error, 'File extension not allowed');
+    });
+    it('rejects upload with disallowed MIME type with HTTP 415 Unsupported Media Type', async () => {
+        endpoint = new Endpoint({
+            authProvider: mockAuth,
+            uploadDir: tempDir,
+            port: 0,
+            uploadAllowlist: {
+                mimetypes: ['image/png', 'image/jpeg'],
+            },
+        });
+        const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('<svg xmlns="http://www.w3.org/2000/svg"></svg>'), {
+            filename: 'graphic.svg',
+            contentType: 'image/svg+xml',
+        });
+        assert.strictEqual(res.status, 415);
+        assert.strictEqual(res.body.error, 'MIME type not allowed');
+    });
+    it('allows upload when both extension and MIME type match configured allowlist', async () => {
+        endpoint = new Endpoint({
+            authProvider: mockAuth,
+            uploadDir: tempDir,
+            port: 0,
+            uploadAllowlist: {
+                extensions: ['png'],
+                mimetypes: ['image/png'],
+            },
+        });
+        const res = await request(endpoint.express)
+            .post('/file')
+            .set('x-token', 'valid-token')
+            .attach('file', Buffer.from([0x89, 0x50, 0x4e, 0x47]), {
+            filename: 'icon.png',
+            contentType: 'image/png',
+        });
+        assert.strictEqual(res.status, 200);
+        assert.strictEqual(res.body.name, 'icon.png');
+    });
+    it('sanitizes filename by stripping directory traversal, control characters, and capping length', async () => {
+        endpoint = new Endpoint({
+            authProvider: mockAuth,
+            uploadDir: tempDir,
+            port: 0,
+        });
+        // Test 1: directory traversal and control characters
+        const traversalName = '../../../../etc/passwd\ttest.txt';
+        const res1 = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('safe payload'), traversalName);
+        assert.strictEqual(res1.status, 200);
+        assert.strictEqual(res1.body.name, 'passwdtest.txt');
+        // Test 2: unit verification of fallback for empty, dot-only, and complex traversal names
+        assert.strictEqual(endpoint.sanitizeFilename('..'), 'upload');
+        assert.strictEqual(endpoint.sanitizeFilename('.'), 'upload');
+        assert.strictEqual(endpoint.sanitizeFilename(''), 'upload');
+        assert.strictEqual(endpoint.sanitizeFilename('   '), 'upload');
+        assert.strictEqual(endpoint.sanitizeFilename('foo/../../bar'), 'bar');
+        assert.strictEqual(endpoint.sanitizeFilename('file\x00\r\n\tname.txt'), 'filename.txt');
+        // Test 3: excessively long filename is capped at 255 chars
+        const longBase = 'a'.repeat(300) + '.txt';
+        const res3 = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('long payload'), longBase);
+        assert.strictEqual(res3.status, 200);
+        assert.strictEqual(res3.body.name.length, 255);
+    });
+    it('rejects upload missing file field with HTTP 400 Bad Request', async () => {
+        endpoint = new Endpoint({
+            authProvider: mockAuth,
+            uploadDir: tempDir,
+            port: 0,
+        });
+        const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').send({ otherField: 'some-value' });
+        assert.strictEqual(res.status, 400);
+        assert.strictEqual(res.body.error, 'No file uploaded');
+    });
+    it('serves static files with nosniff, attachment, and CSP sandbox headers', async () => {
+        endpoint = new Endpoint({
+            authProvider: mockAuth,
+            uploadDir: tempDir,
+            port: 0,
+        });
+        const htmlPayload = '<html><script>alert("XSS")</script></html>';
+        const uploadRes = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from(htmlPayload), 'page.html');
+        assert.strictEqual(uploadRes.status, 200);
+        const fileId = uploadRes.body.id;
+        const downloadRes = await request(endpoint.express).get(`/file/${fileId}/page.html`).set('x-token', 'valid-token');
+        assert.strictEqual(downloadRes.status, 200);
+        assert.strictEqual(downloadRes.text, htmlPayload);
+        // Verify Stored XSS defense headers
+        assert.strictEqual(downloadRes.headers['x-content-type-options'], 'nosniff');
+        assert.strictEqual(downloadRes.headers['content-disposition'], 'attachment');
+        assert.strictEqual(downloadRes.headers['content-security-policy'], "default-src 'none'; sandbox");
+    });
+    it('denies access to dotfiles', async () => {
+        endpoint = new Endpoint({
+            authProvider: mockAuth,
+            uploadDir: tempDir,
+            port: 0,
+        });
+        // Pre-create a dotfile directly in an upload folder
+        const folderId = 'dotfile-folder-id';
+        const folderPath = path.join(tempDir, folderId);
+        fs.mkdirSync(folderPath, { recursive: true });
+        fs.writeFileSync(path.join(folderPath, '.env'), 'SECRET_KEY=12345');
+        const res = await request(endpoint.express).get(`/file/${folderId}/.env`).set('x-token', 'valid-token');
+        assert.ok(res.status === 403 || res.status === 404, 'Dotfiles must be denied access');
+        assert.notStrictEqual(res.text, 'SECRET_KEY=12345', 'Dotfile contents must never be served');
+    });
+    it('redirects /file/:fileId to /file/:fileId/:safeName for backward compatibility', async () => {
+        endpoint = new Endpoint({
+            authProvider: mockAuth,
+            uploadDir: tempDir,
+            port: 0,
+        });
+        const uploadRes = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('my report'), 'my report.txt');
+        assert.strictEqual(uploadRes.status, 200);
+        const fileId = uploadRes.body.id;
+        const redirectRes = await request(endpoint.express).get(`/file/${fileId}`).set('x-token', 'valid-token');
+        assert.strictEqual(redirectRes.status, 302);
+        assert.strictEqual(redirectRes.headers.location, `/file/${fileId}/my%20report.txt`);
+    });
+});
+//# sourceMappingURL=uploadSecurity.test.js.map

package/dist/tests/uploadSecurity.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploadSecurity.test.js","sourceRoot":"","sources":["../../tests/uploadSecurity.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,EAAE,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,OAAO,MAAM,WAAW,CAAC;AAEhC,OAAO,EAAgB,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,QAAQ,MAAM,2BAA2B,CAAC;AAEjD,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC9D,IAAI,QAAsB,CAAC;IAC3B,IAAI,QAAkB,CAAC;IACvB,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACZ,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAC1E,QAAQ,GAAG;YACP,OAAO,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBAC7B,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;oBAC1B,OAAO,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC1I,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAS,CAAC;YAC/E,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC;YACjC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC;YACvC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC;YACzC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC;YACtC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACX,IAAI,QAAQ,EAAE,CAAC;YACX,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC3E,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;QAE3G,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAChF,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,qBAAqB,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC,CAAC;QAEjJ,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAC;QACxD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE9C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,oDAAoD,CAAC,CAAC;QAC9F,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;QAExE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QACpE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,6CAA6C,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,QAAQ,GAAG,GAAG,CAAC;QACrB,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;YACP,cAAc,EAAE,QAAQ;SAC3B,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;QAEvI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC3F,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;YACP,eAAe,EAAE;gBACb,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;aACpC;SACJ,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAEnK,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC3F,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;YACP,eAAe,EAAE;gBACb,SAAS,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;aACzC;SACJ,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,EAAE;YAClK,QAAQ,EAAE,aAAa;YACvB,WAAW,EAAE,eAAe;SAC/B,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QACxF,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;YACP,eAAe,EAAE;gBACb,UAAU,EAAE,CAAC,KAAK,CAAC;gBACnB,SAAS,EAAE,CAAC,WAAW,CAAC;aAC3B;SACJ,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;aACtC,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC;aAC7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE;YACnD,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,WAAW;SAC3B,CAAC,CAAC;QAEP,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QACzG,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,qDAAqD;QACrD,MAAM,aAAa,GAAG,kCAAkC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC,CAAC;QAEpJ,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAErD,yFAAyF;QACzF,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QACvE,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtE,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrE,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxE,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/E,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EAAE,cAAc,CAAC,CAAC;QAEjG,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAC;QAE/I,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QACzE,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;QAE3H,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACnF,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,4CAA4C,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QAEpJ,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAEjC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,MAAM,YAAY,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAEnH,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAElD,oCAAoC;QACpC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7E,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,YAAY,CAAC,CAAC;QAC7E,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,6BAA6B,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACvC,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,oDAAoD;QACpD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,QAAQ,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAExG,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,gCAAgC,CAAC,CAAC;QACtF,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,uCAAuC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC3F,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,CAAC;QAExJ,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAEjC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAEzG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,MAAM,kBAAkB,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/tests/workerSocket.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=workerSocket.test.d.ts.map

package/dist/tests/workerSocket.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerSocket.test.d.ts","sourceRoot":"","sources":["../../tests/workerSocket.test.ts"],"names":[],"mappings":""}

package/dist/tests/workerSocket.test.js

@@ -0,0 +1,53 @@
+import assert from 'node:assert';
+import { describe, it } from 'node:test';
+import { MessageChannel } from 'worker_threads';
+import { Rej, Req, RequestSocket, Res, ResponseSocket } from '../src/lib/worker_socket.js';
+class CustomReq extends Req {
+    payload;
+    constructor(payload) {
+        super();
+        this.payload = payload;
+    }
+}
+class CustomRes extends Res {
+    answer;
+    constructor(answer) {
+        super();
+        this.answer = answer;
+    }
+}
+function deserialize(data) {
+    if (!data)
+        return undefined;
+    if (data._type === 'CustomReq')
+        return new CustomReq(data.payload);
+    if (data._type === 'CustomRes')
+        return new CustomRes(data.answer);
+    if (data._type === 'Res')
+        return new Res();
+    if (data._type === 'Rej')
+        return new Rej();
+    return undefined;
+}
+describe('WorkerSocket', () => {
+    it('communicates over MessageChannel', async () => {
+        const channel = new MessageChannel();
+        const reqSocket = new RequestSocket(channel.port1, deserialize);
+        const resSocket = new ResponseSocket(channel.port2, deserialize);
+        const serverPromise = (async () => {
+            const readRes = await resSocket.read();
+            assert.ok(readRes.isOk());
+            const req = readRes.unwrap();
+            assert.ok(req instanceof CustomReq);
+            assert.strictEqual(req.payload, 'ping');
+            resSocket.resolve(new CustomRes(42));
+        })();
+        const clientRes = await reqSocket.writeRead(new CustomReq('ping'));
+        assert.ok(clientRes.isOk());
+        assert.strictEqual(clientRes.unwrap().answer, 42);
+        await serverPromise;
+        reqSocket.close();
+        resSocket.close();
+    });
+});
+//# sourceMappingURL=workerSocket.test.js.map

package/dist/tests/workerSocket.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerSocket.test.js","sourceRoot":"","sources":["../../tests/workerSocket.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAe,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAExG,MAAM,SAAU,SAAQ,GAAG;IACvB,OAAO,CAAS;IAChB,YAAY,OAAe;QACvB,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;CACJ;AAED,MAAM,SAAU,SAAQ,GAAG;IACvB,MAAM,CAAS;IACf,YAAY,MAAc;QACtB,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;CACJ;AAED,SAAS,WAAW,CAAC,IAAS;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC3C,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAEjE,MAAM,aAAa,GAAG,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,EAAE,CAAC,GAAG,YAAY,SAAS,CAAC,CAAC;YACpC,MAAM,CAAC,WAAW,CAAE,GAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvD,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,SAAS,CAAuB,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACzF,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5B,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAElD,MAAM,aAAa,CAAC;QACpB,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,SAAS,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,73 @@
 {
   "name": "@araminix/platform",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "description": "Enterprise-grade actor runtime, WebSocket endpoint platform, and agent execution engine",
+  "version": "1.7.0",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "type": "module",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/araminix/platform.git"
+  },
+  "bugs": {
+    "url": "https://github.com/araminix/platform/issues"
+  },
+  "homepage": "https://github.com/araminix/platform#readme",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "araminix",
+    "actor-model",
+    "realtime",
+    "platform",
+    "websocket",
+    "agent",
+    "worker-threads",
+    "express-ws",
+    "microservices"
+  ],
+  "author": "Amin Abbasi",
+  "license": "MIT",
+  "dependencies": {
+    "@araminix/lib": "1.0.0",
+    "axios": "1.20.0",
+    "cookie-parser": "1.4.7",
+    "express": "5.3.0",
+    "express-rate-limit": "8.7.1",
+    "express-ws": "5.0.2",
+    "minio": "8.0.7",
+    "multer": "2.5.0"
+  },
+  "devDependencies": {
+    "@trivago/prettier-plugin-sort-imports": "6.0.2",
+    "@types/cookie-parser": "1.4.10",
+    "@types/express": "5.0.6",
+    "@types/express-ws": "3.0.6",
+    "@types/multer": "2.3.0",
+    "@types/node": "26.6.5",
+    "@types/supertest": "7.2.1",
+    "@types/ws": "8.18.2",
+    "prettier": "3.9.10",
+    "supertest": "7.3.1",
+    "typescript": "7.0.2"
+  },
+  "scripts": {
+    "build": "tsc",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "test": "node --test 'dist/tests/**/*.test.js'",
+    "test:coverage": "node --experimental-test-coverage --test 'dist/tests/**/*.test.js'"
+  }
 }