@claude-flow/cli 3.32.26 → 3.32.30

package/node_modules/@claude-flow/security/dist/token-generator.js

@@ -0,0 +1,351 @@
+/**
+ * Token Generator - Secure Token Generation
+ *
+ * Provides cryptographically secure token generation for:
+ * - JWT tokens
+ * - Session tokens
+ * - CSRF tokens
+ * - API tokens
+ * - Verification codes
+ *
+ * Security Properties:
+ * - Uses crypto.randomBytes for all randomness
+ * - Configurable entropy levels
+ * - Timing-safe comparison
+ * - Token expiration handling
+ *
+ * @module v3/security/token-generator
+ */
+import { randomBytes, createHmac, timingSafeEqual } from 'crypto';
+export class TokenGeneratorError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'TokenGeneratorError';
+    }
+}
+/**
+ * Secure token generator.
+ *
+ * @example
+ * ```typescript
+ * const generator = new TokenGenerator({ hmacSecret: 'secret' });
+ *
+ * // Generate session token
+ * const session = generator.generateSessionToken();
+ *
+ * // Generate signed token
+ * const signed = generator.generateSignedToken({ userId: '123' });
+ *
+ * // Verify signed token
+ * const isValid = generator.verifySignedToken(signed.combined);
+ * ```
+ */
+export class TokenGenerator {
+    config;
+    constructor(config = {}) {
+        this.config = {
+            defaultLength: config.defaultLength ?? 32,
+            encoding: config.encoding ?? 'base64url',
+            hmacSecret: config.hmacSecret ?? '',
+            defaultExpiration: config.defaultExpiration ?? 3600,
+        };
+        if (this.config.defaultLength < 16) {
+            throw new TokenGeneratorError('Token length must be at least 16 bytes', 'INVALID_LENGTH');
+        }
+    }
+    /**
+     * Generates a random token.
+     *
+     * @param length - Token length in bytes
+     * @returns Random token string
+     */
+    generate(length) {
+        const len = length ?? this.config.defaultLength;
+        const buffer = randomBytes(len);
+        return this.encode(buffer);
+    }
+    /**
+     * Generates a token with expiration.
+     *
+     * @param expirationSeconds - Expiration time in seconds
+     * @param metadata - Optional metadata to attach
+     * @returns Token with expiration
+     */
+    generateWithExpiration(expirationSeconds, metadata) {
+        const expiration = expirationSeconds ?? this.config.defaultExpiration;
+        const now = new Date();
+        const expiresAt = new Date(now.getTime() + expiration * 1000);
+        return {
+            value: this.generate(),
+            createdAt: now,
+            expiresAt,
+            metadata,
+        };
+    }
+    /**
+     * Generates a session token (URL-safe).
+     *
+     * @param length - Token length in bytes (default: 32)
+     * @returns Session token
+     */
+    generateSessionToken(length = 32) {
+        return this.generateWithExpiration(this.config.defaultExpiration);
+    }
+    /**
+     * Generates a CSRF token.
+     *
+     * @returns CSRF token (shorter expiration)
+     */
+    generateCsrfToken() {
+        return this.generateWithExpiration(1800); // 30 minutes
+    }
+    /**
+     * Generates an API token with prefix.
+     *
+     * @param prefix - Token prefix (e.g., 'cf_')
+     * @returns Prefixed API token
+     */
+    generateApiToken(prefix = 'cf_') {
+        const tokenBody = this.generate(32);
+        const now = new Date();
+        return {
+            value: `${prefix}${tokenBody}`,
+            createdAt: now,
+            expiresAt: new Date(now.getTime() + 365 * 24 * 60 * 60 * 1000), // 1 year
+        };
+    }
+    /**
+     * Generates a numeric verification code.
+     *
+     * @param length - Number of digits (default: 6)
+     * @param expirationMinutes - Expiration in minutes (default: 10)
+     * @param maxAttempts - Maximum verification attempts (default: 3)
+     * @returns Verification code
+     */
+    generateVerificationCode(length = 6, expirationMinutes = 10, maxAttempts = 3) {
+        const buffer = randomBytes(length);
+        let code = '';
+        for (let i = 0; i < length; i++) {
+            code += (buffer[i] % 10).toString();
+        }
+        const now = new Date();
+        return {
+            code,
+            createdAt: now,
+            expiresAt: new Date(now.getTime() + expirationMinutes * 60 * 1000),
+            attempts: 0,
+            maxAttempts,
+        };
+    }
+    /**
+     * Generates a signed token using HMAC.
+     *
+     * @param payload - Data to include in token
+     * @param expirationSeconds - Token expiration
+     * @returns Signed token
+     */
+    generateSignedToken(payload, expirationSeconds) {
+        if (!this.config.hmacSecret) {
+            throw new TokenGeneratorError('HMAC secret required for signed tokens', 'NO_SECRET');
+        }
+        const expiration = expirationSeconds ?? this.config.defaultExpiration;
+        const now = new Date();
+        const expiresAt = new Date(now.getTime() + expiration * 1000);
+        const tokenData = {
+            ...payload,
+            iat: now.getTime(),
+            exp: expiresAt.getTime(),
+            nonce: this.generate(8),
+        };
+        const token = Buffer.from(JSON.stringify(tokenData)).toString('base64url');
+        const signature = this.sign(token);
+        return {
+            token,
+            signature,
+            combined: `${token}.${signature}`,
+            createdAt: now,
+            expiresAt,
+        };
+    }
+    /**
+     * Verifies a signed token.
+     *
+     * @param combined - Combined token string (token.signature)
+     * @returns Decoded payload if valid, null otherwise
+     */
+    verifySignedToken(combined) {
+        if (!this.config.hmacSecret) {
+            throw new TokenGeneratorError('HMAC secret required for signed tokens', 'NO_SECRET');
+        }
+        const parts = combined.split('.');
+        if (parts.length !== 2) {
+            return null;
+        }
+        const [token, signature] = parts;
+        // Verify signature
+        const expectedSignature = this.sign(token);
+        try {
+            const sigBuffer = Buffer.from(signature, 'base64url');
+            const expectedBuffer = Buffer.from(expectedSignature, 'base64url');
+            if (sigBuffer.length !== expectedBuffer.length) {
+                return null;
+            }
+            if (!timingSafeEqual(sigBuffer, expectedBuffer)) {
+                return null;
+            }
+        }
+        catch {
+            return null;
+        }
+        // Decode and validate payload
+        try {
+            const payload = JSON.parse(Buffer.from(token, 'base64url').toString());
+            // Check expiration
+            if (payload.exp && payload.exp < Date.now()) {
+                return null;
+            }
+            return payload;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Generates a refresh token pair.
+     *
+     * @returns Access and refresh tokens
+     */
+    generateTokenPair() {
+        return {
+            accessToken: this.generateWithExpiration(900), // 15 minutes
+            refreshToken: this.generateWithExpiration(604800), // 7 days
+        };
+    }
+    /**
+     * Generates a password reset token.
+     *
+     * @returns Password reset token (short expiration)
+     */
+    generatePasswordResetToken() {
+        return this.generateWithExpiration(1800); // 30 minutes
+    }
+    /**
+     * Generates an email verification token.
+     *
+     * @returns Email verification token
+     */
+    generateEmailVerificationToken() {
+        return this.generateWithExpiration(86400); // 24 hours
+    }
+    /**
+     * Generates a unique request ID.
+     *
+     * @returns Request ID (shorter, for logging)
+     */
+    generateRequestId() {
+        return this.generate(8);
+    }
+    /**
+     * Generates a correlation ID for distributed tracing.
+     *
+     * @returns Correlation ID
+     */
+    generateCorrelationId() {
+        const timestamp = Date.now().toString(36);
+        const random = this.generate(8);
+        return `${timestamp}-${random}`;
+    }
+    /**
+     * Checks if a token has expired.
+     *
+     * @param token - Token to check
+     * @returns True if expired
+     */
+    isExpired(token) {
+        return token.expiresAt < new Date();
+    }
+    /**
+     * Compares two tokens in constant time.
+     *
+     * @param a - First token
+     * @param b - Second token
+     * @returns True if equal
+     */
+    compare(a, b) {
+        if (a.length !== b.length) {
+            return false;
+        }
+        try {
+            const bufferA = Buffer.from(a);
+            const bufferB = Buffer.from(b);
+            return timingSafeEqual(bufferA, bufferB);
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Signs data using HMAC-SHA256.
+     */
+    sign(data) {
+        return createHmac('sha256', this.config.hmacSecret)
+            .update(data)
+            .digest('base64url');
+    }
+    /**
+     * Encodes bytes according to configuration.
+     */
+    encode(buffer) {
+        switch (this.config.encoding) {
+            case 'hex':
+                return buffer.toString('hex');
+            case 'base64':
+                return buffer.toString('base64');
+            case 'base64url':
+            default:
+                return buffer.toString('base64url');
+        }
+    }
+}
+/**
+ * Factory function to create a production token generator.
+ *
+ * @param hmacSecret - HMAC secret for signed tokens
+ * @returns Configured TokenGenerator
+ */
+export function createTokenGenerator(hmacSecret) {
+    return new TokenGenerator({
+        hmacSecret,
+        defaultLength: 32,
+        encoding: 'base64url',
+    });
+}
+/**
+ * Singleton instance for quick token generation without configuration.
+ */
+let defaultGenerator = null;
+/**
+ * Gets or creates the default token generator.
+ * Note: Does not support signed tokens without configuration.
+ */
+export function getDefaultGenerator() {
+    if (!defaultGenerator) {
+        defaultGenerator = new TokenGenerator();
+    }
+    return defaultGenerator;
+}
+/**
+ * Quick token generation functions.
+ */
+export const quickGenerate = {
+    token: (length = 32) => getDefaultGenerator().generate(length),
+    sessionToken: () => getDefaultGenerator().generateSessionToken(),
+    csrfToken: () => getDefaultGenerator().generateCsrfToken(),
+    apiToken: (prefix = 'cf_') => getDefaultGenerator().generateApiToken(prefix),
+    verificationCode: (length = 6) => getDefaultGenerator().generateVerificationCode(length),
+    requestId: () => getDefaultGenerator().generateRequestId(),
+    correlationId: () => getDefaultGenerator().generateCorrelationId(),
+};
+//# sourceMappingURL=token-generator.js.map

package/node_modules/@claude-flow/security/dist/token-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-generator.js","sourceRoot":"","sources":["../src/token-generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAkDlE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAG1B;IAFlB,YACE,OAAe,EACC,IAAY;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,cAAc;IACR,MAAM,CAAwB;IAE/C,YAAY,SAAsB,EAAE;QAClC,IAAI,CAAC,MAAM,GAAG;YACZ,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,WAAW;YACxC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;YACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,IAAI;SACpD,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,mBAAmB,CAC3B,wCAAwC,EACxC,gBAAgB,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,MAAe;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;QAChD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,sBAAsB,CACpB,iBAA0B,EAC1B,QAAkC;QAElC,MAAM,UAAU,GAAG,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC;QAE9D,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE;YACtB,SAAS,EAAE,GAAG;YACd,SAAS;YACT,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,oBAAoB,CAAC,MAAM,GAAG,EAAE;QAC9B,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa;IACzD,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,MAAM,GAAG,KAAK;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,OAAO;YACL,KAAK,EAAE,GAAG,MAAM,GAAG,SAAS,EAAE;YAC9B,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,SAAS;SAC1E,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,wBAAwB,CACtB,MAAM,GAAG,CAAC,EACV,iBAAiB,GAAG,EAAE,EACtB,WAAW,GAAG,CAAC;QAEf,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,IAAI,GAAG,EAAE,CAAC;QAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,OAAO;YACL,IAAI;YACJ,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;YAClE,QAAQ,EAAE,CAAC;YACX,WAAW;SACZ,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,mBAAmB,CACjB,OAAgC,EAChC,iBAA0B;QAE1B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,IAAI,mBAAmB,CAC3B,wCAAwC,EACxC,WAAW,CACZ,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC;QAE9D,MAAM,SAAS,GAAG;YAChB,GAAG,OAAO;YACV,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE;YAClB,GAAG,EAAE,SAAS,CAAC,OAAO,EAAE;YACxB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;SACxB,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnC,OAAO;YACL,KAAK;YACL,SAAS;YACT,QAAQ,EAAE,GAAG,KAAK,IAAI,SAAS,EAAE;YACjC,SAAS,EAAE,GAAG;YACd,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,QAAgB;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,IAAI,mBAAmB,CAC3B,wCAAwC,EACxC,WAAW,CACZ,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QAEjC,mBAAmB;QACnB,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE3C,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACtD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;YAEnE,IAAI,SAAS,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC/C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,CAAC;gBAChD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEvE,mBAAmB;YACnB,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QAIf,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,aAAa;YAC5D,YAAY,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,SAAS;SAC7D,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,0BAA0B;QACxB,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa;IACzD,CAAC;IAED;;;;OAIG;IACH,8BAA8B;QAC5B,OAAO,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW;IACxD,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,qBAAqB;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,KAA+B;QACvC,OAAO,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,CAAS,EAAE,CAAS;QAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,IAAY;QACvB,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;aAChD,MAAM,CAAC,IAAI,CAAC;aACZ,MAAM,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,MAAc;QAC3B,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC7B,KAAK,KAAK;gBACR,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAChC,KAAK,QAAQ;gBACX,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnC,KAAK,WAAW,CAAC;YACjB;gBACE,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,OAAO,IAAI,cAAc,CAAC;QACxB,UAAU;QACV,aAAa,EAAE,EAAE;QACjB,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,IAAI,gBAAgB,GAA0B,IAAI,CAAC;AAEnD;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,gBAAgB,GAAG,IAAI,cAAc,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,KAAK,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,mBAAmB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9D,YAAY,EAAE,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,oBAAoB,EAAE;IAChE,SAAS,EAAE,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,iBAAiB,EAAE;IAC1D,QAAQ,EAAE,CAAC,MAAM,GAAG,KAAK,EAAE,EAAE,CAAC,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC;IAC5E,gBAAgB,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,mBAAmB,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC;IACxF,SAAS,EAAE,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,iBAAiB,EAAE;IAC1D,aAAa,EAAE,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,qBAAqB,EAAE;CACnE,CAAC"}

package/node_modules/@claude-flow/security/dist/tool-output-guardrail.d.ts

@@ -0,0 +1,126 @@
+/**
+ * ToolOutputGuardrail — semantic screening of content returned by MCP tool
+ * calls, memory reads, and external API responses before that content enters
+ * agent reasoning. Closes the OWASP ASI01 (Agent Goal Hijacking) gap
+ * identified in ruvnet/ruflo#2149 / ADR-131.
+ *
+ * Threat model
+ * ------------
+ * Attackers embed malicious instructions in content the agent retrieves
+ * autonomously (web page, MCP tool response, memory entry). An LLM cannot
+ * reliably distinguish instructions from data once both are in the prompt.
+ * System-level per-boundary guardrails are the only category with
+ * sub-millisecond latency and no model dependency (arXiv:2601.17548,
+ * Jan 2026 systematic review).
+ *
+ * Scope
+ * -----
+ * - Detection only — does NOT modify the running prompt; callers decide
+ *   what action to take (allow, flag, redact, reject) via `scanAndEnforce`.
+ * - Synchronous pattern match — designed for <1ms p99 on typical tool
+ *   responses (≤32KB). Large content is capped at `maxScanBytes` and the
+ *   truncation itself is reported as a low-severity finding.
+ * - Pure-function shape — no I/O, no async, no model calls. Safe to invoke
+ *   in hot paths (every MCP tool result, every memory read).
+ *
+ * Non-goals
+ * ---------
+ * - Not a replacement for input validation at HTTP/CLI boundaries
+ *   (InputValidator handles that). This is the *content* boundary.
+ * - Not a model-based classifier. False-positive rate is bounded by
+ *   pattern specificity; tune via `customPatterns` and `policy`.
+ *
+ * Reference: ADR-131, OpenAI Agents SDK ToolGuardrail API (March 2025).
+ */
+export type InjectionSeverity = 'low' | 'medium' | 'high' | 'critical';
+export type InjectionCategory = 'instruction-override' | 'role-hijack' | 'exfiltration' | 'jailbreak' | 'hidden-unicode' | 'embedded-system' | 'tool-spoofing' | 'truncation';
+export interface InjectionFinding {
+    /** Short label for the matched pattern (stable identifier for telemetry). */
+    pattern: string;
+    /** Risk weight assigned to this pattern. */
+    severity: InjectionSeverity;
+    /** Category for downstream classification + OWASP mapping. */
+    category: InjectionCategory;
+    /** Char offset of the first match in the scanned content. */
+    position: number;
+    /** Up to 80 chars of surrounding context for human triage (redacted in `sanitized`). */
+    context: string;
+}
+export interface GuardrailResult {
+    /** True iff no findings, or all findings under the `flag` policy threshold. */
+    safe: boolean;
+    /** Findings in the order they were detected. */
+    findings: InjectionFinding[];
+    /** Highest severity observed; `none` if findings is empty. */
+    highest: InjectionSeverity | 'none';
+}
+export type GuardrailAction = 'allow' | 'flag' | 'redact' | 'reject';
+export interface GuardrailConfig {
+    /**
+     * Per-severity action.
+     * Defaults:
+     *   low      → allow
+     *   medium   → flag
+     *   high     → redact
+     *   critical → reject
+     *
+     * `allow`  — content passes through unchanged, no logging required.
+     * `flag`   — content passes through; caller SHOULD log + monitor.
+     * `redact` — matched substrings replaced with `[REDACTED:<pattern>]`.
+     * `reject` — caller MUST drop the content and treat the tool call
+     *            as failed (signal the agent that the tool returned an
+     *            unsafe payload rather than letting the payload through).
+     */
+    policy?: Partial<Record<InjectionSeverity, GuardrailAction>>;
+    /** Add domain-specific patterns without subclassing. */
+    customPatterns?: Array<{
+        label: string;
+        regex: RegExp;
+        severity: InjectionSeverity;
+        category: InjectionCategory;
+    }>;
+    /**
+     * Maximum bytes of content to scan. Beyond this, the tail is ignored and
+     * a `truncation` finding is added at `medium`. Default: 1 MiB.
+     * Set to 0 to disable truncation (scan everything; slower on huge blobs).
+     */
+    maxScanBytes?: number;
+}
+export declare class ToolOutputGuardrail {
+    private readonly patterns;
+    private readonly policy;
+    private readonly maxScanBytes;
+    constructor(config?: GuardrailConfig);
+    /**
+     * Pure scan — no side effects, no content modification. Useful when the
+     * caller wants to log findings but cannot drop the content (e.g. read-only
+     * audit mode).
+     */
+    scan(content: string): GuardrailResult;
+    /**
+     * Scan + enforce policy. Returns the content to pass forward (possibly
+     * redacted or empty) plus the scan result and the action that was taken.
+     * Callers should treat `reject` as "drop the tool result and signal an
+     * error" — do NOT silently substitute empty content.
+     */
+    scanAndEnforce(content: string): {
+        content: string;
+        result: GuardrailResult;
+        action: GuardrailAction;
+    };
+    /**
+     * Replace each non-truncation finding's matched substring with
+     * `[REDACTED:<pattern>]`. Truncation findings have no substring to redact
+     * (their `position` is a length, not an offset into the content) and are
+     * skipped. Idempotent for already-redacted strings.
+     */
+    private redact;
+}
+/** Convenience factory that returns a guardrail with the default policy. */
+export declare function createToolOutputGuardrail(config?: GuardrailConfig): ToolOutputGuardrail;
+/**
+ * One-shot helper for callers that just want a yes/no answer without
+ * constructing a guardrail. Uses the default policy.
+ */
+export declare function isToolOutputSafe(content: string): boolean;
+//# sourceMappingURL=tool-output-guardrail.d.ts.map

package/node_modules/@claude-flow/security/dist/tool-output-guardrail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-output-guardrail.d.ts","sourceRoot":"","sources":["../src/tool-output-guardrail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAEvE,MAAM,MAAM,iBAAiB,GACzB,sBAAsB,GACtB,aAAa,GACb,cAAc,GACd,WAAW,GACX,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,GACf,YAAY,CAAC;AAEjB,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,8DAA8D;IAC9D,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,+EAA+E;IAC/E,IAAI,EAAE,OAAO,CAAC;IACd,gDAAgD;IAChD,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAAC;CACrC;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAErE,MAAM,WAAW,eAAe;IAC9B;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC,CAAC;IAE7D,wDAAwD;IACxD,cAAc,CAAC,EAAE,KAAK,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,iBAAiB,CAAC;QAC5B,QAAQ,EAAE,iBAAiB,CAAC;KAC7B,CAAC,CAAC;IAEH;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAiID,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiD;IAC1E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmD;IAC1E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,MAAM,GAAE,eAAoB;IAMxC;;;;OAIG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe;IA+CtC;;;;;OAKG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG;QAC/B,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,eAAe,CAAC;QACxB,MAAM,EAAE,eAAe,CAAC;KACzB;IAgBD;;;;;OAKG;IACH,OAAO,CAAC,MAAM;CAmBf;AAED,4EAA4E;AAC5E,wBAAgB,yBAAyB,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,mBAAmB,CAEvF;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEzD"}