@araminix/platform 1.0.0 → 1.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (59) hide show
  1. package/README.md +73 -1
  2. package/dist/src/Platform.d.ts +12 -1
  3. package/dist/src/Platform.d.ts.map +1 -1
  4. package/dist/src/Platform.js +217 -77
  5. package/dist/src/Platform.js.map +1 -1
  6. package/dist/src/agent/AgentController.d.ts +24 -3
  7. package/dist/src/agent/AgentController.d.ts.map +1 -1
  8. package/dist/src/agent/AgentController.js +168 -60
  9. package/dist/src/agent/AgentController.js.map +1 -1
  10. package/dist/src/agent/worker.js +5 -0
  11. package/dist/src/agent/worker.js.map +1 -1
  12. package/dist/src/executor/Instance.d.ts +9 -3
  13. package/dist/src/executor/Instance.d.ts.map +1 -1
  14. package/dist/src/executor/Instance.js +148 -36
  15. package/dist/src/executor/Instance.js.map +1 -1
  16. package/dist/src/server/AuthProvider.d.ts +70 -1
  17. package/dist/src/server/AuthProvider.d.ts.map +1 -1
  18. package/dist/src/server/AuthProvider.js +12 -1
  19. package/dist/src/server/AuthProvider.js.map +1 -1
  20. package/dist/src/server/Endpoint.d.ts +30 -1
  21. package/dist/src/server/Endpoint.d.ts.map +1 -1
  22. package/dist/src/server/Endpoint.js +467 -72
  23. package/dist/src/server/Endpoint.js.map +1 -1
  24. package/dist/src/server/index.d.ts +1 -0
  25. package/dist/src/server/index.d.ts.map +1 -1
  26. package/dist/src/server/index.js +1 -0
  27. package/dist/src/server/index.js.map +1 -1
  28. package/dist/src/utils/log_middleware.d.ts.map +1 -1
  29. package/dist/src/utils/log_middleware.js +2 -1
  30. package/dist/src/utils/log_middleware.js.map +1 -1
  31. package/dist/src/utils/minioService.d.ts +1 -0
  32. package/dist/src/utils/minioService.d.ts.map +1 -1
  33. package/dist/src/utils/minioService.js +6 -3
  34. package/dist/src/utils/minioService.js.map +1 -1
  35. package/dist/tests/agentWorker.test.d.ts +2 -0
  36. package/dist/tests/agentWorker.test.d.ts.map +1 -0
  37. package/dist/tests/agentWorker.test.js +225 -0
  38. package/dist/tests/agentWorker.test.js.map +1 -0
  39. package/dist/tests/authProvider.test.js +15 -0
  40. package/dist/tests/authProvider.test.js.map +1 -1
  41. package/dist/tests/endpointSecurity.test.d.ts +2 -0
  42. package/dist/tests/endpointSecurity.test.d.ts.map +1 -0
  43. package/dist/tests/endpointSecurity.test.js +1007 -0
  44. package/dist/tests/endpointSecurity.test.js.map +1 -0
  45. package/dist/tests/logMiddleware.test.js +50 -0
  46. package/dist/tests/logMiddleware.test.js.map +1 -1
  47. package/dist/tests/minioService.test.js +178 -1
  48. package/dist/tests/minioService.test.js.map +1 -1
  49. package/dist/tests/platform.test.js +245 -0
  50. package/dist/tests/platform.test.js.map +1 -1
  51. package/dist/tests/unhandledRejections.test.d.ts +2 -0
  52. package/dist/tests/unhandledRejections.test.d.ts.map +1 -0
  53. package/dist/tests/unhandledRejections.test.js +204 -0
  54. package/dist/tests/unhandledRejections.test.js.map +1 -0
  55. package/dist/tests/uploadSecurity.test.d.ts +2 -0
  56. package/dist/tests/uploadSecurity.test.d.ts.map +1 -0
  57. package/dist/tests/uploadSecurity.test.js +219 -0
  58. package/dist/tests/uploadSecurity.test.js.map +1 -0
  59. package/package.json +4 -3
@@ -1 +1 @@
1
- {"version":3,"file":"platform.test.js","sourceRoot":"","sources":["../../tests/platform.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,QAAQ,MAAM,oBAAoB,CAAC;AAG1C,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACxD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAElD,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,QAAQ,GAAiB;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAChC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
1
+ {"version":3,"file":"platform.test.js","sourceRoot":"","sources":["../../tests/platform.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAExC,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,QAAQ,MAAM,6BAA6B,CAAC;AACnD,OAAO,QAAQ,MAAM,oBAAoB,CAAC;AAG1C,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACxD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAElD,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,QAAQ,GAAiB;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAChC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QAC/E,MAAM,QAAQ,GAAiB;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAChC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;YACpB,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;SAChD,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAE,QAAQ,CAAC,QAAgB,CAAC,eAAe,CAAC,CAAC;QAEtD,MAAM,aAAa,GAAQ;YACvB,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE;gBACN,UAAU,EAAE;oBACR,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,eAAe;oBACvB,IAAI,EAAE,aAAa;iBACtB;aACJ;SACJ,CAAC;QAEF,MAAM,SAAS,GAAI,QAAgB,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACtE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACpE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IACxD,MAAM,QAAQ,GAAiB;QAC3B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QAChC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;QAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;KAC1C,CAAC;IAEF,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACrF,MAAM,cAAc,GAAG,EAAS,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAEjK,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAEhD,IAAI,YAAY,GAAG,CAAC,CAAC;QACpB,QAAgB,CAAC,SAAS,GAAG,GAAG,EAAE;YAC/B,YAAY,EAAE,CAAC;QACnB,CAAC,CAAC;QAEF,+DAA+D;QAC/D,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE;YACrB,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAEpC,qFAAqF;QACrF,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE;YACrB,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnB,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,cAAc,GAAG,EAAS,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAE5H,0CAA0C;QAC1C,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,QAAgB,CAAC,MAAM,GAAG,WAAW,CAAC;QAEvC,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACxB,cAAc,GAAG,IAAI,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,mEAAmE;QACnE,QAAQ,CAAC,OAAO,EAAE,CAAC;QAEnB,8CAA8C;QAC9C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACtG,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,mBAAmB,CAAC;QACtC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;QAClD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAEjD,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,cAAc,GAAG,CAAC,EAAU,EAAE,OAAe,EAAE,EAAE;YACnD,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAS,CAAC,CAAC;YACtF,IAAY,CAAC,EAAE,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtB,WAAW,EAAE,CAAC;YAClB,CAAC,CAAC;YACF,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC;QAEF,uEAAuE;QACvE,MAAM,KAAK,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,cAAc,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,cAAc,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAEjD,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACnC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACnC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACnC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAEnC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAE1C,yDAAyD;QACzD,MAAM,KAAK,GAAI,QAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACzD,OAAO,aAAa,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;YACjC,IAAI,MAA4B,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC3C,MAAM,GAAG,IAAI,CAAC;gBAClB,CAAC;YACL,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC;QAED,8CAA8C;QAC9C,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,2FAA2F;QAC3F,MAAM,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,aAAa,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QAE5C,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC3E,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACnC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;QAClD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAEjD,6DAA6D;QAC7D,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAS,CAAC,CAAC;QACxF,MAAc,CAAC,EAAE,GAAG,UAAU,CAAC;QAC/B,MAAc,CAAC,SAAS,GAAG,SAAS,CAAC;QACtC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAErC,MAAM,KAAK,GAAI,QAAgB,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACzD,OAAO,aAAa,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;YACjC,IAAI,MAA4B,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC3C,MAAM,GAAG,IAAI,CAAC;gBAClB,CAAC;YACL,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC;QAED,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE7C,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;YACpB,YAAY,EAAE,CAAC;SAClB,CAAC,CAAC;QAEH,oEAAoE;QACpE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;QACzC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACzC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAEzC,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAS,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAS,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAS,CAAC,CAAC;QAEzF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAE5B,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAE/C,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,oBAAoB,GAAG,KAAK,CAAC;QACjC,MAAM,UAAU,GAAG;YACf,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;YAC7C,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE;YACvB,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,QAAQ,EAAE,GAAG,EAAE;gBACX,mBAAmB,GAAG,IAAI,CAAC;YAC/B,CAAC;SACJ,CAAC;QAEF,MAAM,UAAU,GAAG;YACf,cAAc,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBACnC,IAAI,IAAI,KAAK,gBAAgB,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBACrD,oBAAoB,GAAG,IAAI,CAAC;oBAC5B,OAAO,IAAI,EAAE,CAAC,UAAiB,CAAC,CAAC;gBACrC,CAAC;gBACD,OAAO,GAAG,EAAE,CAAC;YACjB,CAAC;SACJ,CAAC;QAED,QAAgB,CAAC,QAAQ,GAAG;YACzB,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SACtF,CAAC;QAEF,qEAAqE;QACpE,QAAgB,CAAC,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,UAAiB,CAAC,CAAC;QAEhF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,WAAW,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAE/C,oDAAoD;QACpD,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvB,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAE/C,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC3D,MAAM,cAAc,GAAG,EAAS,CAAC;QACjC,MAAM,YAAY,GAAG;YACjB,sBAAsB,EAAE,GAAG;YAC3B,WAAW,EAAE,CAAC;SACjB,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;QAE3H,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=unhandledRejections.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"unhandledRejections.test.d.ts","sourceRoot":"","sources":["../../tests/unhandledRejections.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,204 @@
1
+ import { deal, err, Ok, ok, StreamCloseCodes, WsCloseCodes } from '@araminix/lib';
2
+ import assert from 'node:assert';
3
+ import fs from 'node:fs';
4
+ import os from 'node:os';
5
+ import path from 'node:path';
6
+ import { afterEach, beforeEach, describe, it } from 'node:test';
7
+ import AgentController from '../src/agent/AgentController.js';
8
+ import Platform from '../src/Platform.js';
9
+ import { AgentInfo, UserInfo } from '../src/server/AuthProvider.js';
10
+ import Endpoint from '../src/server/Endpoint.js';
11
+ describe('Unhandled Rejections and Uncaught Exceptions Defense', () => {
12
+ let tempDir;
13
+ beforeEach(() => {
14
+ tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'araminix-test-'));
15
+ });
16
+ afterEach(() => {
17
+ fs.rmSync(tempDir, { recursive: true, force: true });
18
+ });
19
+ it('Endpoint: corrupt index.json returns 404 without uncaught exception', async () => {
20
+ const fileId = 'corrupt-file-123';
21
+ const fileDir = path.join(tempDir, fileId);
22
+ fs.mkdirSync(fileDir, { recursive: true });
23
+ fs.writeFileSync(path.join(fileDir, 'index.json'), '{corrupt-json-data');
24
+ const mockAuth = {
25
+ getInfo: async () => new Ok(new UserInfo('user-1', 'john', 'John Doe', 'rt-1', 'john@example.com', [], { _key: 'u1', name: 'Unit 1', code: 'U1' })),
26
+ auth: async () => ({}),
27
+ googleAuth: async () => ({}),
28
+ destroy: async () => { },
29
+ refreshToken: async () => ({}),
30
+ request2FA: async () => ({}),
31
+ verify2FA: async () => ({}),
32
+ enable2FA: async () => ({}),
33
+ disable2FA: async () => ({}),
34
+ requestUploadUrl: async () => ({}),
35
+ requestDownloadUrl: async () => ({}),
36
+ mobileRequests: async () => ({}),
37
+ };
38
+ const endpoint = new Endpoint({
39
+ authProvider: mockAuth,
40
+ port: 0,
41
+ uploadDir: tempDir,
42
+ });
43
+ endpoint.open();
44
+ const address = endpoint.server?.address();
45
+ const port = typeof address === 'object' && address ? address.port : 3000;
46
+ try {
47
+ const res = await fetch(`http://127.0.0.1:${port}/file/${fileId}`, {
48
+ headers: {
49
+ 'x-token': 'valid-token',
50
+ },
51
+ });
52
+ assert.strictEqual(res.status, 404);
53
+ }
54
+ finally {
55
+ endpoint.close();
56
+ }
57
+ });
58
+ it('Endpoint: ws route handles authProvider throwing without unhandled rejection and closes with code 1011', async () => {
59
+ const mockAuth = {
60
+ getInfo: async () => {
61
+ throw new Error('Database connection unexpectedly dropped');
62
+ },
63
+ auth: async () => ({}),
64
+ googleAuth: async () => ({}),
65
+ destroy: async () => { },
66
+ refreshToken: async () => ({}),
67
+ request2FA: async () => ({}),
68
+ verify2FA: async () => ({}),
69
+ enable2FA: async () => ({}),
70
+ disable2FA: async () => ({}),
71
+ requestUploadUrl: async () => ({}),
72
+ requestDownloadUrl: async () => ({}),
73
+ mobileRequests: async () => ({}),
74
+ };
75
+ const endpoint = new Endpoint({
76
+ authProvider: mockAuth,
77
+ port: 0,
78
+ uploadDir: tempDir,
79
+ });
80
+ endpoint.open();
81
+ const address = endpoint.server?.address();
82
+ const port = typeof address === 'object' && address ? address.port : 3000;
83
+ const [closePromise, resolveClose] = deal();
84
+ const ws = new WebSocket(`ws://127.0.0.1:${port}/ws-token/some-token/platform`);
85
+ ws.onclose = (event) => {
86
+ resolveClose({ code: event.code, reason: event.reason });
87
+ };
88
+ try {
89
+ const result = await closePromise;
90
+ assert.strictEqual(result.code, WsCloseCodes.InternalError);
91
+ assert.strictEqual(result.code, 1011);
92
+ }
93
+ finally {
94
+ endpoint.close();
95
+ }
96
+ });
97
+ it('Platform: custom stream handler exception is caught and closes stream with error', async () => {
98
+ let streamCloseCalled = false;
99
+ let closedCode = null;
100
+ const mockStream = {
101
+ args: { test: true },
102
+ write: async () => ok(),
103
+ closeOk: () => { },
104
+ closeErr: () => {
105
+ streamCloseCalled = true;
106
+ closedCode = StreamCloseCodes.Error;
107
+ },
108
+ };
109
+ const mockSocket = {
110
+ incomingStream: async (name) => {
111
+ if (name === 'custom/exploding') {
112
+ if (!streamCloseCalled) {
113
+ return new Ok(mockStream);
114
+ }
115
+ }
116
+ return err();
117
+ },
118
+ };
119
+ const mockAuth = {
120
+ getInfo: async () => ({}),
121
+ auth: async () => ({}),
122
+ googleAuth: async () => ({}),
123
+ destroy: async () => { },
124
+ refreshToken: async () => ({}),
125
+ request2FA: async () => ({}),
126
+ verify2FA: async () => ({}),
127
+ enable2FA: async () => ({}),
128
+ disable2FA: async () => ({}),
129
+ requestUploadUrl: async () => ({}),
130
+ requestDownloadUrl: async () => ({}),
131
+ mobileRequests: async () => ({}),
132
+ };
133
+ const platform = new Platform({
134
+ appIndexPath: new URL('file:///d:/dummy/apps.js'),
135
+ agentIndexPath: new URL('file:///d:/dummy/agents.js'),
136
+ authProvider: mockAuth,
137
+ instanceUserLimit: 5,
138
+ onCustomStream: {
139
+ exploding: async () => {
140
+ throw new Error('Custom stream catastrophic error');
141
+ },
142
+ },
143
+ });
144
+ try {
145
+ platform.processCustomStreams({ id: 'user-1' }, mockSocket);
146
+ await new Promise((resolve) => setTimeout(resolve, 50));
147
+ assert.strictEqual(streamCloseCalled, true);
148
+ assert.strictEqual(closedCode, StreamCloseCodes.Error);
149
+ }
150
+ finally {
151
+ platform.stop();
152
+ }
153
+ });
154
+ it('AgentController: incoming post stream with null or invalid args closes stream with error without throwing', async () => {
155
+ let streamCloseErrCount = 0;
156
+ let streamCount = 0;
157
+ const mockStreams = [
158
+ { args: null }, // remote trigger case: null args
159
+ { args: { name: 12345 } }, // invalid name type
160
+ { args: undefined }, // undefined args
161
+ ];
162
+ const [finishPromise, resolveFinish] = deal();
163
+ const mockSocket = {
164
+ waitClose: async () => 'Intentional',
165
+ destroy: () => { },
166
+ incomingStream: async (name) => {
167
+ if (name === 'post' && streamCount < mockStreams.length) {
168
+ const current = mockStreams[streamCount++];
169
+ const stream = {
170
+ args: current.args,
171
+ closeErr: () => {
172
+ streamCloseErrCount++;
173
+ if (streamCloseErrCount === mockStreams.length) {
174
+ resolveFinish();
175
+ }
176
+ },
177
+ closeOk: () => { },
178
+ write: async () => ok(),
179
+ };
180
+ return new Ok(stream);
181
+ }
182
+ return err();
183
+ },
184
+ };
185
+ const controller = new AgentController(new URL('file:///d:/dummy/agents.js'));
186
+ const origSet = controller.instances.set;
187
+ controller.instances.set = function (key, val) {
188
+ val.init = async () => ok();
189
+ return origSet.call(this, key, val);
190
+ };
191
+ const agentInfo = new AgentInfo('agent-1', 'test');
192
+ const mockRequest = {
193
+ info: agentInfo,
194
+ arg: '',
195
+ accept: () => new Ok(mockSocket),
196
+ deny: () => ok(),
197
+ };
198
+ const connectResult = await controller.connect(agentInfo, mockRequest);
199
+ assert.ok(connectResult.isOk());
200
+ await finishPromise;
201
+ assert.strictEqual(streamCloseErrCount, 3);
202
+ });
203
+ });
204
+ //# sourceMappingURL=unhandledRejections.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"unhandledRejections.test.js","sourceRoot":"","sources":["../../tests/unhandledRejections.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAEhE,OAAO,eAAe,MAAM,iCAAiC,CAAC;AAC9D,OAAO,QAAQ,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAgB,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAElF,OAAO,QAAQ,MAAM,2BAA2B,CAAC;AAEjD,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAClE,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACZ,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACX,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAEzE,MAAM,QAAQ,GAAiB;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAQ;YAC1J,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC;YACP,SAAS,EAAE,OAAO;SACrB,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,OAAO,GAAI,QAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAE1E,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,SAAS,MAAM,EAAE,EAAE;gBAC/D,OAAO,EAAE;oBACL,SAAS,EAAE,aAAa;iBAC3B;aACJ,CAAC,CAAC;YACH,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACP,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wGAAwG,EAAE,KAAK,IAAI,EAAE;QACpH,MAAM,QAAQ,GAAiB;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC;YACP,SAAS,EAAE,OAAO;SACrB,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,OAAO,GAAI,QAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAE1E,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,IAAI,EAAoC,CAAC;QAE9E,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,kBAAkB,IAAI,+BAA+B,CAAC,CAAC;QAChF,EAAE,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE;YACnB,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC;QAEF,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;YAClC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5D,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACP,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAC9F,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,IAAI,UAAU,GAAQ,IAAI,CAAC;QAE3B,MAAM,UAAU,GAAG;YACf,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACpB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE;YACvB,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,QAAQ,EAAE,GAAG,EAAE;gBACX,iBAAiB,GAAG,IAAI,CAAC;gBACzB,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC;YACxC,CAAC;SACJ,CAAC;QAEF,MAAM,UAAU,GAAG;YACf,cAAc,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBACnC,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;oBAC9B,IAAI,CAAC,iBAAiB,EAAE,CAAC;wBACrB,OAAO,IAAI,EAAE,CAAC,UAAiB,CAAC,CAAC;oBACrC,CAAC;gBACL,CAAC;gBACD,OAAO,GAAG,EAAE,CAAC;YACjB,CAAC;SACJ,CAAC;QAEF,MAAM,QAAQ,GAAiB;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAChC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC7B,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACrC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,0BAA0B,CAAC;YACjD,cAAc,EAAE,IAAI,GAAG,CAAC,4BAA4B,CAAC;YACrD,YAAY,EAAE,QAAQ;YACtB,iBAAiB,EAAE,CAAC;YACpB,cAAc,EAAE;gBACZ,SAAS,EAAE,KAAK,IAAI,EAAE;oBAClB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACxD,CAAC;aACJ;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC;YACD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAS,EAAE,UAAiB,CAAC,CAAC;YAC1E,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YACxD,MAAM,CAAC,WAAW,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACP,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2GAA2G,EAAE,KAAK,IAAI,EAAE;QACvH,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAC5B,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,MAAM,WAAW,GAAG;YAChB,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,iCAAiC;YACjD,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,oBAAoB;YAC/C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,iBAAiB;SACzC,CAAC;QAEF,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,IAAI,EAAQ,CAAC;QAEpD,MAAM,UAAU,GAAG;YACf,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,aAAa;YACpC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,cAAc,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBACnC,IAAI,IAAI,KAAK,MAAM,IAAI,WAAW,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;oBACtD,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;oBAC3C,MAAM,MAAM,GAAG;wBACX,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,QAAQ,EAAE,GAAG,EAAE;4BACX,mBAAmB,EAAE,CAAC;4BACtB,IAAI,mBAAmB,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;gCAC7C,aAAa,EAAE,CAAC;4BACpB,CAAC;wBACL,CAAC;wBACD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;wBACjB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE;qBAC1B,CAAC;oBACF,OAAO,IAAI,EAAE,CAAC,MAAa,CAAC,CAAC;gBACjC,CAAC;gBACD,OAAO,GAAG,EAAE,CAAC;YACjB,CAAC;SACJ,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,IAAI,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAI,UAAkB,CAAC,SAAS,CAAC,GAAG,CAAC;QACjD,UAAkB,CAAC,SAAS,CAAC,GAAG,GAAG,UAAU,GAAQ,EAAE,GAAQ;YAC5D,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG;YAChB,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,EAAE;YACP,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,UAAiB,CAAC;YACvC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE;SACU,CAAC;QAE/B,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvE,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;QAEhC,MAAM,aAAa,CAAC;QACpB,MAAM,CAAC,WAAW,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=uploadSecurity.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"uploadSecurity.test.d.ts","sourceRoot":"","sources":["../../tests/uploadSecurity.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,219 @@
1
+ import { Ok } from '@araminix/lib';
2
+ import assert from 'node:assert';
3
+ import fs from 'node:fs';
4
+ import os from 'node:os';
5
+ import path from 'node:path';
6
+ import { afterEach, beforeEach, describe, it } from 'node:test';
7
+ import request from 'supertest';
8
+ import { UserInfo } from '../src/server/AuthProvider.js';
9
+ import Endpoint from '../src/server/Endpoint.js';
10
+ describe('Endpoint Upload Security and Stored XSS Defenses', () => {
11
+ let mockAuth;
12
+ let endpoint;
13
+ let tempDir;
14
+ beforeEach(() => {
15
+ tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'araminix-upload-test-'));
16
+ mockAuth = {
17
+ getInfo: async (token) => {
18
+ if (token === 'valid-token') {
19
+ return new Ok(new UserInfo('user-1', 'john', 'John Doe', 'rt-1', 'john@example.com', [], { _key: 'u1', name: 'Unit 1', code: 'U1' }));
20
+ }
21
+ return { isErr: () => true, isOk: () => false, unwrap: () => null };
22
+ },
23
+ auth: async () => new Ok('token'),
24
+ googleAuth: async () => new Ok('token'),
25
+ destroy: async () => { },
26
+ refreshToken: async () => new Ok('token'),
27
+ request2FA: async () => ({}),
28
+ verify2FA: async () => new Ok('token'),
29
+ enable2FA: async () => ({}),
30
+ disable2FA: async () => ({}),
31
+ requestUploadUrl: async () => ({}),
32
+ requestDownloadUrl: async () => ({}),
33
+ mobileRequests: async () => ({}),
34
+ };
35
+ });
36
+ afterEach(() => {
37
+ if (endpoint) {
38
+ endpoint.close();
39
+ }
40
+ if (tempDir && fs.existsSync(tempDir)) {
41
+ fs.rmSync(tempDir, { recursive: true, force: true });
42
+ }
43
+ });
44
+ it('rejects unauthenticated upload requests with 401 Unauthorized', async () => {
45
+ endpoint = new Endpoint({
46
+ authProvider: mockAuth,
47
+ uploadDir: tempDir,
48
+ port: 0,
49
+ });
50
+ const res = await request(endpoint.express).post('/file').attach('file', Buffer.from('hello'), 'test.txt');
51
+ assert.strictEqual(res.status, 401);
52
+ });
53
+ it('uploads valid file within size limit and stores sanitized metadata', async () => {
54
+ endpoint = new Endpoint({
55
+ authProvider: mockAuth,
56
+ uploadDir: tempDir,
57
+ port: 0,
58
+ });
59
+ const fileContent = 'Hello secure world!';
60
+ const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from(fileContent), 'document.txt');
61
+ assert.strictEqual(res.status, 200);
62
+ assert.ok(res.body.id, 'Response must contain file ID');
63
+ assert.strictEqual(res.body.name, 'document.txt');
64
+ assert.strictEqual(res.body.size, Buffer.byteLength(fileContent));
65
+ assert.strictEqual(res.body.userId, 'user-1');
66
+ const savedFilePath = path.join(tempDir, res.body.id, 'document.txt');
67
+ assert.ok(fs.existsSync(savedFilePath), 'Uploaded file must exist in UUID directory on disk');
68
+ assert.strictEqual(fs.readFileSync(savedFilePath, 'utf8'), fileContent);
69
+ const indexJsonPath = path.join(tempDir, res.body.id, 'index.json');
70
+ assert.ok(fs.existsSync(indexJsonPath), 'index.json metadata file must exist on disk');
71
+ const metadata = JSON.parse(fs.readFileSync(indexJsonPath, 'utf8'));
72
+ assert.strictEqual(metadata.name, 'document.txt');
73
+ assert.strictEqual(metadata.userId, 'user-1');
74
+ });
75
+ it('rejects upload exceeding maxUploadBytes with HTTP 413 Payload Too Large', async () => {
76
+ const maxBytes = 100;
77
+ endpoint = new Endpoint({
78
+ authProvider: mockAuth,
79
+ uploadDir: tempDir,
80
+ port: 0,
81
+ maxUploadBytes: maxBytes,
82
+ });
83
+ const oversizedData = Buffer.alloc(maxBytes + 50, 'a');
84
+ const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', oversizedData, 'oversized.txt');
85
+ assert.strictEqual(res.status, 413);
86
+ assert.ok(res.body.error, 'Response must return error message');
87
+ assert.ok(res.body.error.includes('File exceeds maximum allowed size of 100 bytes'));
88
+ });
89
+ it('rejects upload with disallowed extension with HTTP 415 Unsupported Media Type', async () => {
90
+ endpoint = new Endpoint({
91
+ authProvider: mockAuth,
92
+ uploadDir: tempDir,
93
+ port: 0,
94
+ uploadAllowlist: {
95
+ extensions: ['png', 'jpg', 'pdf'],
96
+ },
97
+ });
98
+ const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('<script>alert(1)</script>'), 'malicious.html');
99
+ assert.strictEqual(res.status, 415);
100
+ assert.strictEqual(res.body.error, 'File extension not allowed');
101
+ });
102
+ it('rejects upload with disallowed MIME type with HTTP 415 Unsupported Media Type', async () => {
103
+ endpoint = new Endpoint({
104
+ authProvider: mockAuth,
105
+ uploadDir: tempDir,
106
+ port: 0,
107
+ uploadAllowlist: {
108
+ mimetypes: ['image/png', 'image/jpeg'],
109
+ },
110
+ });
111
+ const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('<svg xmlns="http://www.w3.org/2000/svg"></svg>'), {
112
+ filename: 'graphic.svg',
113
+ contentType: 'image/svg+xml',
114
+ });
115
+ assert.strictEqual(res.status, 415);
116
+ assert.strictEqual(res.body.error, 'MIME type not allowed');
117
+ });
118
+ it('allows upload when both extension and MIME type match configured allowlist', async () => {
119
+ endpoint = new Endpoint({
120
+ authProvider: mockAuth,
121
+ uploadDir: tempDir,
122
+ port: 0,
123
+ uploadAllowlist: {
124
+ extensions: ['png'],
125
+ mimetypes: ['image/png'],
126
+ },
127
+ });
128
+ const res = await request(endpoint.express)
129
+ .post('/file')
130
+ .set('x-token', 'valid-token')
131
+ .attach('file', Buffer.from([0x89, 0x50, 0x4e, 0x47]), {
132
+ filename: 'icon.png',
133
+ contentType: 'image/png',
134
+ });
135
+ assert.strictEqual(res.status, 200);
136
+ assert.strictEqual(res.body.name, 'icon.png');
137
+ });
138
+ it('sanitizes filename by stripping directory traversal, control characters, and capping length', async () => {
139
+ endpoint = new Endpoint({
140
+ authProvider: mockAuth,
141
+ uploadDir: tempDir,
142
+ port: 0,
143
+ });
144
+ // Test 1: directory traversal and control characters
145
+ const traversalName = '../../../../etc/passwd\ttest.txt';
146
+ const res1 = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('safe payload'), traversalName);
147
+ assert.strictEqual(res1.status, 200);
148
+ assert.strictEqual(res1.body.name, 'passwdtest.txt');
149
+ // Test 2: unit verification of fallback for empty, dot-only, and complex traversal names
150
+ assert.strictEqual(endpoint.sanitizeFilename('..'), 'upload');
151
+ assert.strictEqual(endpoint.sanitizeFilename('.'), 'upload');
152
+ assert.strictEqual(endpoint.sanitizeFilename(''), 'upload');
153
+ assert.strictEqual(endpoint.sanitizeFilename(' '), 'upload');
154
+ assert.strictEqual(endpoint.sanitizeFilename('foo/../../bar'), 'bar');
155
+ assert.strictEqual(endpoint.sanitizeFilename('file\x00\r\n\tname.txt'), 'filename.txt');
156
+ // Test 3: excessively long filename is capped at 255 chars
157
+ const longBase = 'a'.repeat(300) + '.txt';
158
+ const res3 = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('long payload'), longBase);
159
+ assert.strictEqual(res3.status, 200);
160
+ assert.strictEqual(res3.body.name.length, 255);
161
+ });
162
+ it('rejects upload missing file field with HTTP 400 Bad Request', async () => {
163
+ endpoint = new Endpoint({
164
+ authProvider: mockAuth,
165
+ uploadDir: tempDir,
166
+ port: 0,
167
+ });
168
+ const res = await request(endpoint.express).post('/file').set('x-token', 'valid-token').send({ otherField: 'some-value' });
169
+ assert.strictEqual(res.status, 400);
170
+ assert.strictEqual(res.body.error, 'No file uploaded');
171
+ });
172
+ it('serves static files with nosniff, attachment, and CSP sandbox headers', async () => {
173
+ endpoint = new Endpoint({
174
+ authProvider: mockAuth,
175
+ uploadDir: tempDir,
176
+ port: 0,
177
+ });
178
+ const htmlPayload = '<html><script>alert("XSS")</script></html>';
179
+ const uploadRes = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from(htmlPayload), 'page.html');
180
+ assert.strictEqual(uploadRes.status, 200);
181
+ const fileId = uploadRes.body.id;
182
+ const downloadRes = await request(endpoint.express).get(`/file/${fileId}/page.html`).set('x-token', 'valid-token');
183
+ assert.strictEqual(downloadRes.status, 200);
184
+ assert.strictEqual(downloadRes.text, htmlPayload);
185
+ // Verify Stored XSS defense headers
186
+ assert.strictEqual(downloadRes.headers['x-content-type-options'], 'nosniff');
187
+ assert.strictEqual(downloadRes.headers['content-disposition'], 'attachment');
188
+ assert.strictEqual(downloadRes.headers['content-security-policy'], "default-src 'none'; sandbox");
189
+ });
190
+ it('denies access to dotfiles', async () => {
191
+ endpoint = new Endpoint({
192
+ authProvider: mockAuth,
193
+ uploadDir: tempDir,
194
+ port: 0,
195
+ });
196
+ // Pre-create a dotfile directly in an upload folder
197
+ const folderId = 'dotfile-folder-id';
198
+ const folderPath = path.join(tempDir, folderId);
199
+ fs.mkdirSync(folderPath, { recursive: true });
200
+ fs.writeFileSync(path.join(folderPath, '.env'), 'SECRET_KEY=12345');
201
+ const res = await request(endpoint.express).get(`/file/${folderId}/.env`).set('x-token', 'valid-token');
202
+ assert.ok(res.status === 403 || res.status === 404, 'Dotfiles must be denied access');
203
+ assert.notStrictEqual(res.text, 'SECRET_KEY=12345', 'Dotfile contents must never be served');
204
+ });
205
+ it('redirects /file/:fileId to /file/:fileId/:safeName for backward compatibility', async () => {
206
+ endpoint = new Endpoint({
207
+ authProvider: mockAuth,
208
+ uploadDir: tempDir,
209
+ port: 0,
210
+ });
211
+ const uploadRes = await request(endpoint.express).post('/file').set('x-token', 'valid-token').attach('file', Buffer.from('my report'), 'my report.txt');
212
+ assert.strictEqual(uploadRes.status, 200);
213
+ const fileId = uploadRes.body.id;
214
+ const redirectRes = await request(endpoint.express).get(`/file/${fileId}`).set('x-token', 'valid-token');
215
+ assert.strictEqual(redirectRes.status, 302);
216
+ assert.strictEqual(redirectRes.headers.location, `/file/${fileId}/my%20report.txt`);
217
+ });
218
+ });
219
+ //# sourceMappingURL=uploadSecurity.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"uploadSecurity.test.js","sourceRoot":"","sources":["../../tests/uploadSecurity.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,EAAE,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,OAAO,MAAM,WAAW,CAAC;AAEhC,OAAO,EAAgB,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,QAAQ,MAAM,2BAA2B,CAAC;AAEjD,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC9D,IAAI,QAAsB,CAAC;IAC3B,IAAI,QAAkB,CAAC;IACvB,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACZ,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAC1E,QAAQ,GAAG;YACP,OAAO,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBAC7B,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;oBAC1B,OAAO,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC1I,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAS,CAAC;YAC/E,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC;YACjC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC;YACvC,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC;YACzC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC;YACtC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAClC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACnC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;YAC3C,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAQ;SAC1C,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACX,IAAI,QAAQ,EAAE,CAAC;YACX,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC3E,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;QAE3G,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAChF,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,qBAAqB,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC,CAAC;QAEjJ,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAC;QACxD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE9C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,oDAAoD,CAAC,CAAC;QAC9F,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;QAExE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QACpE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,6CAA6C,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,QAAQ,GAAG,GAAG,CAAC;QACrB,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;YACP,cAAc,EAAE,QAAQ;SAC3B,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;QAEvI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC3F,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;YACP,eAAe,EAAE;gBACb,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;aACpC;SACJ,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAEnK,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC3F,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;YACP,eAAe,EAAE;gBACb,SAAS,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;aACzC;SACJ,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,EAAE;YAClK,QAAQ,EAAE,aAAa;YACvB,WAAW,EAAE,eAAe;SAC/B,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QACxF,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;YACP,eAAe,EAAE;gBACb,UAAU,EAAE,CAAC,KAAK,CAAC;gBACnB,SAAS,EAAE,CAAC,WAAW,CAAC;aAC3B;SACJ,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;aACtC,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC;aAC7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE;YACnD,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,WAAW;SAC3B,CAAC,CAAC;QAEP,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QACzG,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,qDAAqD;QACrD,MAAM,aAAa,GAAG,kCAAkC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC,CAAC;QAEpJ,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAErD,yFAAyF;QACzF,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QACvE,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtE,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrE,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxE,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/E,MAAM,CAAC,WAAW,CAAE,QAAgB,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,EAAE,cAAc,CAAC,CAAC;QAEjG,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAC;QAE/I,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QACzE,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;QAE3H,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACnF,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,4CAA4C,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QAEpJ,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAEjC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,MAAM,YAAY,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAEnH,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAElD,oCAAoC;QACpC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7E,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,YAAY,CAAC,CAAC;QAC7E,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,6BAA6B,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACvC,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,oDAAoD;QACpD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,QAAQ,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAExG,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,gCAAgC,CAAC,CAAC;QACtF,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,uCAAuC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC3F,QAAQ,GAAG,IAAI,QAAQ,CAAC;YACpB,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,CAAC;QAExJ,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAEjC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAEzG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,MAAM,kBAAkB,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@araminix/platform",
3
3
  "description": "Enterprise-grade actor runtime, WebSocket endpoint platform, and agent execution engine",
4
- "version": "1.0.0",
4
+ "version": "1.7.0",
5
5
  "main": "./dist/index.js",
6
6
  "types": "./dist/index.d.ts",
7
7
  "type": "module",
@@ -45,6 +45,7 @@
45
45
  "axios": "1.20.0",
46
46
  "cookie-parser": "1.4.7",
47
47
  "express": "5.3.0",
48
+ "express-rate-limit": "8.7.1",
48
49
  "express-ws": "5.0.2",
49
50
  "minio": "8.0.7",
50
51
  "multer": "2.5.0"
@@ -66,7 +67,7 @@
66
67
  "build": "tsc",
67
68
  "format": "prettier --write .",
68
69
  "format:check": "prettier --check .",
69
- "test": "node --test dist/tests/i18n.test.js dist/tests/actors.test.js dist/tests/builder.test.js dist/tests/workerSocket.test.js dist/tests/proto.test.js dist/tests/platform.test.js dist/tests/authProvider.test.js dist/tests/connectRequest.test.js dist/tests/endpointController.test.js dist/tests/minioService.test.js dist/tests/logMiddleware.test.js",
70
- "test:coverage": "node --experimental-test-coverage --test dist/tests/i18n.test.js dist/tests/actors.test.js dist/tests/builder.test.js dist/tests/workerSocket.test.js dist/tests/proto.test.js dist/tests/platform.test.js dist/tests/authProvider.test.js dist/tests/connectRequest.test.js dist/tests/endpointController.test.js dist/tests/minioService.test.js dist/tests/logMiddleware.test.js"
70
+ "test": "node --test 'dist/tests/**/*.test.js'",
71
+ "test:coverage": "node --experimental-test-coverage --test 'dist/tests/**/*.test.js'"
71
72
  }
72
73
  }