@claude-flow/security 3.0.0-alpha.1 → 3.0.0-alpha.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +292 -234
- package/__tests__/acceptance/security-compliance.test.ts +674 -674
- package/__tests__/authorization-propagator.test.ts +155 -0
- package/__tests__/credential-generator.test.ts +310 -310
- package/__tests__/fixtures/configurations.ts +425 -419
- package/__tests__/fixtures/index.ts +21 -21
- package/__tests__/helpers/create-mock.ts +469 -469
- package/__tests__/helpers/index.ts +32 -32
- package/__tests__/input-validator.test.ts +382 -381
- package/__tests__/integration/security-flow.test.ts +606 -606
- package/__tests__/keychain-adapter.test.ts +60 -0
- package/__tests__/oauth-browser.test.ts +13 -0
- package/__tests__/oauth-export-surface.test.ts +21 -0
- package/__tests__/oauth-pkce.test.ts +37 -0
- package/__tests__/password-hasher.test.ts +239 -239
- package/__tests__/path-validator.test.ts +302 -302
- package/__tests__/plugin-integrity-verifier.test.ts +199 -0
- package/__tests__/safe-executor.test.ts +292 -292
- package/__tests__/token-generator.test.ts +371 -371
- package/__tests__/tool-output-guardrail.test.ts +256 -0
- package/__tests__/unit/credential-generator.test.ts +182 -182
- package/__tests__/unit/password-hasher.test.ts +359 -359
- package/__tests__/unit/path-validator.test.ts +509 -509
- package/__tests__/unit/safe-executor.test.ts +667 -667
- package/__tests__/unit/token-generator.test.ts +310 -310
- package/dist/CVE-REMEDIATION.d.ts +17 -6
- package/dist/CVE-REMEDIATION.d.ts.map +1 -1
- package/dist/CVE-REMEDIATION.js +328 -12
- package/dist/CVE-REMEDIATION.js.map +1 -1
- package/dist/authorization/propagator.d.ts +148 -0
- package/dist/authorization/propagator.d.ts.map +1 -0
- package/dist/authorization/propagator.js +182 -0
- package/dist/authorization/propagator.js.map +1 -0
- package/dist/credential-generator.js +9 -9
- package/dist/domain/services/security-domain-service.js +1 -1
- package/dist/domain/services/security-domain-service.js.map +1 -1
- package/dist/index.d.ts +9 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +21 -1
- package/dist/index.js.map +1 -1
- package/dist/keychain-adapter.d.ts +48 -0
- package/dist/keychain-adapter.d.ts.map +1 -0
- package/dist/keychain-adapter.js +0 -0
- package/dist/keychain-adapter.js.map +1 -0
- package/dist/oauth/browser.d.ts +31 -0
- package/dist/oauth/browser.d.ts.map +1 -0
- package/dist/oauth/browser.js +55 -0
- package/dist/oauth/browser.js.map +1 -0
- package/dist/oauth/callback-server.d.ts +37 -0
- package/dist/oauth/callback-server.d.ts.map +1 -0
- package/dist/oauth/callback-server.js +86 -0
- package/dist/oauth/callback-server.js.map +1 -0
- package/dist/oauth/client.d.ts +57 -0
- package/dist/oauth/client.d.ts.map +1 -0
- package/dist/oauth/client.js +120 -0
- package/dist/oauth/client.js.map +1 -0
- package/dist/oauth/pkce.d.ts +25 -0
- package/dist/oauth/pkce.d.ts.map +1 -0
- package/dist/oauth/pkce.js +36 -0
- package/dist/oauth/pkce.js.map +1 -0
- package/dist/password-hasher.d.ts.map +1 -1
- package/dist/password-hasher.js +8 -1
- package/dist/password-hasher.js.map +1 -1
- package/dist/plugins/integrity-verifier.d.ts +125 -0
- package/dist/plugins/integrity-verifier.d.ts.map +1 -0
- package/dist/plugins/integrity-verifier.js +186 -0
- package/dist/plugins/integrity-verifier.js.map +1 -0
- package/dist/safe-executor.d.ts +7 -0
- package/dist/safe-executor.d.ts.map +1 -1
- package/dist/safe-executor.js +21 -1
- package/dist/safe-executor.js.map +1 -1
- package/dist/tool-output-guardrail.d.ts +126 -0
- package/dist/tool-output-guardrail.d.ts.map +1 -0
- package/dist/tool-output-guardrail.js +257 -0
- package/dist/tool-output-guardrail.js.map +1 -0
- package/node_modules-incomplete-release-test/.vite/vitest/da39a3ee5e6b4b0d3255bfef95601890afd80709/results.json +1 -0
- package/package.json +33 -28
- package/scripts/verify-oauth-exports.mjs +29 -0
- package/src/CVE-REMEDIATION.ts +591 -251
- package/src/application/index.ts +10 -10
- package/src/application/services/security-application-service.ts +193 -193
- package/src/authorization/propagator.ts +279 -0
- package/src/credential-generator.ts +368 -368
- package/src/domain/entities/security-context.ts +173 -173
- package/src/domain/index.ts +17 -17
- package/src/domain/services/security-domain-service.ts +296 -296
- package/src/index.ts +340 -271
- package/src/input-validator.ts +466 -466
- package/src/keychain-adapter.ts +0 -0
- package/src/oauth/browser.ts +58 -0
- package/src/oauth/callback-server.ts +97 -0
- package/src/oauth/client.ts +153 -0
- package/src/oauth/pkce.ts +45 -0
- package/src/password-hasher.ts +277 -270
- package/src/path-validator.ts +525 -525
- package/src/plugins/integrity-verifier.ts +265 -0
- package/src/safe-executor.ts +546 -525
- package/src/token-generator.ts +463 -463
- package/src/tool-output-guardrail.ts +360 -0
- package/tmp.json +0 -0
- package/tsconfig.json +9 -9
- package/tsconfig.tsbuildinfo +1 -1
- package/vitest.config.ts +20 -0
- package/.agentic-flow/intelligence.json +0 -16
- package/__tests__/coverage/base.css +0 -224
- package/__tests__/coverage/block-navigation.js +0 -87
- package/__tests__/coverage/coverage-final.json +0 -11
- package/__tests__/coverage/favicon.png +0 -0
- package/__tests__/coverage/index.html +0 -161
- package/__tests__/coverage/lcov-report/base.css +0 -224
- package/__tests__/coverage/lcov-report/block-navigation.js +0 -87
- package/__tests__/coverage/lcov-report/favicon.png +0 -0
- package/__tests__/coverage/lcov-report/index.html +0 -161
- package/__tests__/coverage/lcov-report/prettify.css +0 -1
- package/__tests__/coverage/lcov-report/prettify.js +0 -2
- package/__tests__/coverage/lcov-report/sort-arrow-sprite.png +0 -0
- package/__tests__/coverage/lcov-report/sorter.js +0 -210
- package/__tests__/coverage/lcov-report/src/CVE-REMEDIATION.ts.html +0 -838
- package/__tests__/coverage/lcov-report/src/application/services/index.html +0 -116
- package/__tests__/coverage/lcov-report/src/application/services/security-application-service.ts.html +0 -664
- package/__tests__/coverage/lcov-report/src/credential-generator.ts.html +0 -1189
- package/__tests__/coverage/lcov-report/src/domain/entities/index.html +0 -116
- package/__tests__/coverage/lcov-report/src/domain/entities/security-context.ts.html +0 -604
- package/__tests__/coverage/lcov-report/src/domain/services/index.html +0 -116
- package/__tests__/coverage/lcov-report/src/domain/services/security-domain-service.ts.html +0 -973
- package/__tests__/coverage/lcov-report/src/index.html +0 -206
- package/__tests__/coverage/lcov-report/src/input-validator.ts.html +0 -1483
- package/__tests__/coverage/lcov-report/src/password-hasher.ts.html +0 -895
- package/__tests__/coverage/lcov-report/src/path-validator.ts.html +0 -1660
- package/__tests__/coverage/lcov-report/src/safe-executor.ts.html +0 -1660
- package/__tests__/coverage/lcov-report/src/token-generator.ts.html +0 -1474
- package/__tests__/coverage/lcov.info +0 -3650
- package/__tests__/coverage/prettify.css +0 -1
- package/__tests__/coverage/prettify.js +0 -2
- package/__tests__/coverage/sort-arrow-sprite.png +0 -0
- package/__tests__/coverage/sorter.js +0 -210
- package/__tests__/coverage/src/CVE-REMEDIATION.ts.html +0 -838
- package/__tests__/coverage/src/application/services/index.html +0 -116
- package/__tests__/coverage/src/application/services/security-application-service.ts.html +0 -664
- package/__tests__/coverage/src/credential-generator.ts.html +0 -1189
- package/__tests__/coverage/src/domain/entities/index.html +0 -116
- package/__tests__/coverage/src/domain/entities/security-context.ts.html +0 -604
- package/__tests__/coverage/src/domain/services/index.html +0 -116
- package/__tests__/coverage/src/domain/services/security-domain-service.ts.html +0 -973
- package/__tests__/coverage/src/index.html +0 -206
- package/__tests__/coverage/src/input-validator.ts.html +0 -1483
- package/__tests__/coverage/src/password-hasher.ts.html +0 -895
- package/__tests__/coverage/src/path-validator.ts.html +0 -1660
- package/__tests__/coverage/src/safe-executor.ts.html +0 -1660
- package/__tests__/coverage/src/token-generator.ts.html +0 -1474
|
@@ -1,604 +0,0 @@
|
|
|
1
|
-
|
|
2
|
-
<!doctype html>
|
|
3
|
-
<html lang="en">
|
|
4
|
-
|
|
5
|
-
<head>
|
|
6
|
-
<title>Code coverage report for src/domain/entities/security-context.ts</title>
|
|
7
|
-
<meta charset="utf-8" />
|
|
8
|
-
<link rel="stylesheet" href="../../../prettify.css" />
|
|
9
|
-
<link rel="stylesheet" href="../../../base.css" />
|
|
10
|
-
<link rel="shortcut icon" type="image/x-icon" href="../../../favicon.png" />
|
|
11
|
-
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
|
12
|
-
<style type='text/css'>
|
|
13
|
-
.coverage-summary .sorter {
|
|
14
|
-
background-image: url(../../../sort-arrow-sprite.png);
|
|
15
|
-
}
|
|
16
|
-
</style>
|
|
17
|
-
</head>
|
|
18
|
-
|
|
19
|
-
<body>
|
|
20
|
-
<div class='wrapper'>
|
|
21
|
-
<div class='pad1'>
|
|
22
|
-
<h1><a href="../../../index.html">All files</a> / <a href="index.html">src/domain/entities</a> security-context.ts</h1>
|
|
23
|
-
<div class='clearfix'>
|
|
24
|
-
|
|
25
|
-
<div class='fl pad1y space-right2'>
|
|
26
|
-
<span class="strong">0% </span>
|
|
27
|
-
<span class="quiet">Statements</span>
|
|
28
|
-
<span class='fraction'>0/173</span>
|
|
29
|
-
</div>
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
<div class='fl pad1y space-right2'>
|
|
33
|
-
<span class="strong">0% </span>
|
|
34
|
-
<span class="quiet">Branches</span>
|
|
35
|
-
<span class='fraction'>0/1</span>
|
|
36
|
-
</div>
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
<div class='fl pad1y space-right2'>
|
|
40
|
-
<span class="strong">0% </span>
|
|
41
|
-
<span class="quiet">Functions</span>
|
|
42
|
-
<span class='fraction'>0/1</span>
|
|
43
|
-
</div>
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
<div class='fl pad1y space-right2'>
|
|
47
|
-
<span class="strong">0% </span>
|
|
48
|
-
<span class="quiet">Lines</span>
|
|
49
|
-
<span class='fraction'>0/173</span>
|
|
50
|
-
</div>
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
</div>
|
|
54
|
-
<p class="quiet">
|
|
55
|
-
Press <em>n</em> or <em>j</em> to go to the next uncovered block, <em>b</em>, <em>p</em> or <em>k</em> for the previous block.
|
|
56
|
-
</p>
|
|
57
|
-
<template id="filterTemplate">
|
|
58
|
-
<div class="quiet">
|
|
59
|
-
Filter:
|
|
60
|
-
<input type="search" id="fileSearch">
|
|
61
|
-
</div>
|
|
62
|
-
</template>
|
|
63
|
-
</div>
|
|
64
|
-
<div class='status-line low'></div>
|
|
65
|
-
<pre><table class="coverage">
|
|
66
|
-
<tr><td class="line-count quiet"><a name='L1'></a><a href='#L1'>1</a>
|
|
67
|
-
<a name='L2'></a><a href='#L2'>2</a>
|
|
68
|
-
<a name='L3'></a><a href='#L3'>3</a>
|
|
69
|
-
<a name='L4'></a><a href='#L4'>4</a>
|
|
70
|
-
<a name='L5'></a><a href='#L5'>5</a>
|
|
71
|
-
<a name='L6'></a><a href='#L6'>6</a>
|
|
72
|
-
<a name='L7'></a><a href='#L7'>7</a>
|
|
73
|
-
<a name='L8'></a><a href='#L8'>8</a>
|
|
74
|
-
<a name='L9'></a><a href='#L9'>9</a>
|
|
75
|
-
<a name='L10'></a><a href='#L10'>10</a>
|
|
76
|
-
<a name='L11'></a><a href='#L11'>11</a>
|
|
77
|
-
<a name='L12'></a><a href='#L12'>12</a>
|
|
78
|
-
<a name='L13'></a><a href='#L13'>13</a>
|
|
79
|
-
<a name='L14'></a><a href='#L14'>14</a>
|
|
80
|
-
<a name='L15'></a><a href='#L15'>15</a>
|
|
81
|
-
<a name='L16'></a><a href='#L16'>16</a>
|
|
82
|
-
<a name='L17'></a><a href='#L17'>17</a>
|
|
83
|
-
<a name='L18'></a><a href='#L18'>18</a>
|
|
84
|
-
<a name='L19'></a><a href='#L19'>19</a>
|
|
85
|
-
<a name='L20'></a><a href='#L20'>20</a>
|
|
86
|
-
<a name='L21'></a><a href='#L21'>21</a>
|
|
87
|
-
<a name='L22'></a><a href='#L22'>22</a>
|
|
88
|
-
<a name='L23'></a><a href='#L23'>23</a>
|
|
89
|
-
<a name='L24'></a><a href='#L24'>24</a>
|
|
90
|
-
<a name='L25'></a><a href='#L25'>25</a>
|
|
91
|
-
<a name='L26'></a><a href='#L26'>26</a>
|
|
92
|
-
<a name='L27'></a><a href='#L27'>27</a>
|
|
93
|
-
<a name='L28'></a><a href='#L28'>28</a>
|
|
94
|
-
<a name='L29'></a><a href='#L29'>29</a>
|
|
95
|
-
<a name='L30'></a><a href='#L30'>30</a>
|
|
96
|
-
<a name='L31'></a><a href='#L31'>31</a>
|
|
97
|
-
<a name='L32'></a><a href='#L32'>32</a>
|
|
98
|
-
<a name='L33'></a><a href='#L33'>33</a>
|
|
99
|
-
<a name='L34'></a><a href='#L34'>34</a>
|
|
100
|
-
<a name='L35'></a><a href='#L35'>35</a>
|
|
101
|
-
<a name='L36'></a><a href='#L36'>36</a>
|
|
102
|
-
<a name='L37'></a><a href='#L37'>37</a>
|
|
103
|
-
<a name='L38'></a><a href='#L38'>38</a>
|
|
104
|
-
<a name='L39'></a><a href='#L39'>39</a>
|
|
105
|
-
<a name='L40'></a><a href='#L40'>40</a>
|
|
106
|
-
<a name='L41'></a><a href='#L41'>41</a>
|
|
107
|
-
<a name='L42'></a><a href='#L42'>42</a>
|
|
108
|
-
<a name='L43'></a><a href='#L43'>43</a>
|
|
109
|
-
<a name='L44'></a><a href='#L44'>44</a>
|
|
110
|
-
<a name='L45'></a><a href='#L45'>45</a>
|
|
111
|
-
<a name='L46'></a><a href='#L46'>46</a>
|
|
112
|
-
<a name='L47'></a><a href='#L47'>47</a>
|
|
113
|
-
<a name='L48'></a><a href='#L48'>48</a>
|
|
114
|
-
<a name='L49'></a><a href='#L49'>49</a>
|
|
115
|
-
<a name='L50'></a><a href='#L50'>50</a>
|
|
116
|
-
<a name='L51'></a><a href='#L51'>51</a>
|
|
117
|
-
<a name='L52'></a><a href='#L52'>52</a>
|
|
118
|
-
<a name='L53'></a><a href='#L53'>53</a>
|
|
119
|
-
<a name='L54'></a><a href='#L54'>54</a>
|
|
120
|
-
<a name='L55'></a><a href='#L55'>55</a>
|
|
121
|
-
<a name='L56'></a><a href='#L56'>56</a>
|
|
122
|
-
<a name='L57'></a><a href='#L57'>57</a>
|
|
123
|
-
<a name='L58'></a><a href='#L58'>58</a>
|
|
124
|
-
<a name='L59'></a><a href='#L59'>59</a>
|
|
125
|
-
<a name='L60'></a><a href='#L60'>60</a>
|
|
126
|
-
<a name='L61'></a><a href='#L61'>61</a>
|
|
127
|
-
<a name='L62'></a><a href='#L62'>62</a>
|
|
128
|
-
<a name='L63'></a><a href='#L63'>63</a>
|
|
129
|
-
<a name='L64'></a><a href='#L64'>64</a>
|
|
130
|
-
<a name='L65'></a><a href='#L65'>65</a>
|
|
131
|
-
<a name='L66'></a><a href='#L66'>66</a>
|
|
132
|
-
<a name='L67'></a><a href='#L67'>67</a>
|
|
133
|
-
<a name='L68'></a><a href='#L68'>68</a>
|
|
134
|
-
<a name='L69'></a><a href='#L69'>69</a>
|
|
135
|
-
<a name='L70'></a><a href='#L70'>70</a>
|
|
136
|
-
<a name='L71'></a><a href='#L71'>71</a>
|
|
137
|
-
<a name='L72'></a><a href='#L72'>72</a>
|
|
138
|
-
<a name='L73'></a><a href='#L73'>73</a>
|
|
139
|
-
<a name='L74'></a><a href='#L74'>74</a>
|
|
140
|
-
<a name='L75'></a><a href='#L75'>75</a>
|
|
141
|
-
<a name='L76'></a><a href='#L76'>76</a>
|
|
142
|
-
<a name='L77'></a><a href='#L77'>77</a>
|
|
143
|
-
<a name='L78'></a><a href='#L78'>78</a>
|
|
144
|
-
<a name='L79'></a><a href='#L79'>79</a>
|
|
145
|
-
<a name='L80'></a><a href='#L80'>80</a>
|
|
146
|
-
<a name='L81'></a><a href='#L81'>81</a>
|
|
147
|
-
<a name='L82'></a><a href='#L82'>82</a>
|
|
148
|
-
<a name='L83'></a><a href='#L83'>83</a>
|
|
149
|
-
<a name='L84'></a><a href='#L84'>84</a>
|
|
150
|
-
<a name='L85'></a><a href='#L85'>85</a>
|
|
151
|
-
<a name='L86'></a><a href='#L86'>86</a>
|
|
152
|
-
<a name='L87'></a><a href='#L87'>87</a>
|
|
153
|
-
<a name='L88'></a><a href='#L88'>88</a>
|
|
154
|
-
<a name='L89'></a><a href='#L89'>89</a>
|
|
155
|
-
<a name='L90'></a><a href='#L90'>90</a>
|
|
156
|
-
<a name='L91'></a><a href='#L91'>91</a>
|
|
157
|
-
<a name='L92'></a><a href='#L92'>92</a>
|
|
158
|
-
<a name='L93'></a><a href='#L93'>93</a>
|
|
159
|
-
<a name='L94'></a><a href='#L94'>94</a>
|
|
160
|
-
<a name='L95'></a><a href='#L95'>95</a>
|
|
161
|
-
<a name='L96'></a><a href='#L96'>96</a>
|
|
162
|
-
<a name='L97'></a><a href='#L97'>97</a>
|
|
163
|
-
<a name='L98'></a><a href='#L98'>98</a>
|
|
164
|
-
<a name='L99'></a><a href='#L99'>99</a>
|
|
165
|
-
<a name='L100'></a><a href='#L100'>100</a>
|
|
166
|
-
<a name='L101'></a><a href='#L101'>101</a>
|
|
167
|
-
<a name='L102'></a><a href='#L102'>102</a>
|
|
168
|
-
<a name='L103'></a><a href='#L103'>103</a>
|
|
169
|
-
<a name='L104'></a><a href='#L104'>104</a>
|
|
170
|
-
<a name='L105'></a><a href='#L105'>105</a>
|
|
171
|
-
<a name='L106'></a><a href='#L106'>106</a>
|
|
172
|
-
<a name='L107'></a><a href='#L107'>107</a>
|
|
173
|
-
<a name='L108'></a><a href='#L108'>108</a>
|
|
174
|
-
<a name='L109'></a><a href='#L109'>109</a>
|
|
175
|
-
<a name='L110'></a><a href='#L110'>110</a>
|
|
176
|
-
<a name='L111'></a><a href='#L111'>111</a>
|
|
177
|
-
<a name='L112'></a><a href='#L112'>112</a>
|
|
178
|
-
<a name='L113'></a><a href='#L113'>113</a>
|
|
179
|
-
<a name='L114'></a><a href='#L114'>114</a>
|
|
180
|
-
<a name='L115'></a><a href='#L115'>115</a>
|
|
181
|
-
<a name='L116'></a><a href='#L116'>116</a>
|
|
182
|
-
<a name='L117'></a><a href='#L117'>117</a>
|
|
183
|
-
<a name='L118'></a><a href='#L118'>118</a>
|
|
184
|
-
<a name='L119'></a><a href='#L119'>119</a>
|
|
185
|
-
<a name='L120'></a><a href='#L120'>120</a>
|
|
186
|
-
<a name='L121'></a><a href='#L121'>121</a>
|
|
187
|
-
<a name='L122'></a><a href='#L122'>122</a>
|
|
188
|
-
<a name='L123'></a><a href='#L123'>123</a>
|
|
189
|
-
<a name='L124'></a><a href='#L124'>124</a>
|
|
190
|
-
<a name='L125'></a><a href='#L125'>125</a>
|
|
191
|
-
<a name='L126'></a><a href='#L126'>126</a>
|
|
192
|
-
<a name='L127'></a><a href='#L127'>127</a>
|
|
193
|
-
<a name='L128'></a><a href='#L128'>128</a>
|
|
194
|
-
<a name='L129'></a><a href='#L129'>129</a>
|
|
195
|
-
<a name='L130'></a><a href='#L130'>130</a>
|
|
196
|
-
<a name='L131'></a><a href='#L131'>131</a>
|
|
197
|
-
<a name='L132'></a><a href='#L132'>132</a>
|
|
198
|
-
<a name='L133'></a><a href='#L133'>133</a>
|
|
199
|
-
<a name='L134'></a><a href='#L134'>134</a>
|
|
200
|
-
<a name='L135'></a><a href='#L135'>135</a>
|
|
201
|
-
<a name='L136'></a><a href='#L136'>136</a>
|
|
202
|
-
<a name='L137'></a><a href='#L137'>137</a>
|
|
203
|
-
<a name='L138'></a><a href='#L138'>138</a>
|
|
204
|
-
<a name='L139'></a><a href='#L139'>139</a>
|
|
205
|
-
<a name='L140'></a><a href='#L140'>140</a>
|
|
206
|
-
<a name='L141'></a><a href='#L141'>141</a>
|
|
207
|
-
<a name='L142'></a><a href='#L142'>142</a>
|
|
208
|
-
<a name='L143'></a><a href='#L143'>143</a>
|
|
209
|
-
<a name='L144'></a><a href='#L144'>144</a>
|
|
210
|
-
<a name='L145'></a><a href='#L145'>145</a>
|
|
211
|
-
<a name='L146'></a><a href='#L146'>146</a>
|
|
212
|
-
<a name='L147'></a><a href='#L147'>147</a>
|
|
213
|
-
<a name='L148'></a><a href='#L148'>148</a>
|
|
214
|
-
<a name='L149'></a><a href='#L149'>149</a>
|
|
215
|
-
<a name='L150'></a><a href='#L150'>150</a>
|
|
216
|
-
<a name='L151'></a><a href='#L151'>151</a>
|
|
217
|
-
<a name='L152'></a><a href='#L152'>152</a>
|
|
218
|
-
<a name='L153'></a><a href='#L153'>153</a>
|
|
219
|
-
<a name='L154'></a><a href='#L154'>154</a>
|
|
220
|
-
<a name='L155'></a><a href='#L155'>155</a>
|
|
221
|
-
<a name='L156'></a><a href='#L156'>156</a>
|
|
222
|
-
<a name='L157'></a><a href='#L157'>157</a>
|
|
223
|
-
<a name='L158'></a><a href='#L158'>158</a>
|
|
224
|
-
<a name='L159'></a><a href='#L159'>159</a>
|
|
225
|
-
<a name='L160'></a><a href='#L160'>160</a>
|
|
226
|
-
<a name='L161'></a><a href='#L161'>161</a>
|
|
227
|
-
<a name='L162'></a><a href='#L162'>162</a>
|
|
228
|
-
<a name='L163'></a><a href='#L163'>163</a>
|
|
229
|
-
<a name='L164'></a><a href='#L164'>164</a>
|
|
230
|
-
<a name='L165'></a><a href='#L165'>165</a>
|
|
231
|
-
<a name='L166'></a><a href='#L166'>166</a>
|
|
232
|
-
<a name='L167'></a><a href='#L167'>167</a>
|
|
233
|
-
<a name='L168'></a><a href='#L168'>168</a>
|
|
234
|
-
<a name='L169'></a><a href='#L169'>169</a>
|
|
235
|
-
<a name='L170'></a><a href='#L170'>170</a>
|
|
236
|
-
<a name='L171'></a><a href='#L171'>171</a>
|
|
237
|
-
<a name='L172'></a><a href='#L172'>172</a>
|
|
238
|
-
<a name='L173'></a><a href='#L173'>173</a>
|
|
239
|
-
<a name='L174'></a><a href='#L174'>174</a></td><td class="line-coverage quiet"><span class="cline-any cline-no"> </span>
|
|
240
|
-
<span class="cline-any cline-no"> </span>
|
|
241
|
-
<span class="cline-any cline-no"> </span>
|
|
242
|
-
<span class="cline-any cline-no"> </span>
|
|
243
|
-
<span class="cline-any cline-no"> </span>
|
|
244
|
-
<span class="cline-any cline-no"> </span>
|
|
245
|
-
<span class="cline-any cline-no"> </span>
|
|
246
|
-
<span class="cline-any cline-no"> </span>
|
|
247
|
-
<span class="cline-any cline-no"> </span>
|
|
248
|
-
<span class="cline-any cline-no"> </span>
|
|
249
|
-
<span class="cline-any cline-no"> </span>
|
|
250
|
-
<span class="cline-any cline-no"> </span>
|
|
251
|
-
<span class="cline-any cline-no"> </span>
|
|
252
|
-
<span class="cline-any cline-no"> </span>
|
|
253
|
-
<span class="cline-any cline-no"> </span>
|
|
254
|
-
<span class="cline-any cline-no"> </span>
|
|
255
|
-
<span class="cline-any cline-no"> </span>
|
|
256
|
-
<span class="cline-any cline-no"> </span>
|
|
257
|
-
<span class="cline-any cline-no"> </span>
|
|
258
|
-
<span class="cline-any cline-no"> </span>
|
|
259
|
-
<span class="cline-any cline-no"> </span>
|
|
260
|
-
<span class="cline-any cline-no"> </span>
|
|
261
|
-
<span class="cline-any cline-no"> </span>
|
|
262
|
-
<span class="cline-any cline-no"> </span>
|
|
263
|
-
<span class="cline-any cline-no"> </span>
|
|
264
|
-
<span class="cline-any cline-no"> </span>
|
|
265
|
-
<span class="cline-any cline-no"> </span>
|
|
266
|
-
<span class="cline-any cline-no"> </span>
|
|
267
|
-
<span class="cline-any cline-no"> </span>
|
|
268
|
-
<span class="cline-any cline-no"> </span>
|
|
269
|
-
<span class="cline-any cline-no"> </span>
|
|
270
|
-
<span class="cline-any cline-no"> </span>
|
|
271
|
-
<span class="cline-any cline-no"> </span>
|
|
272
|
-
<span class="cline-any cline-no"> </span>
|
|
273
|
-
<span class="cline-any cline-no"> </span>
|
|
274
|
-
<span class="cline-any cline-no"> </span>
|
|
275
|
-
<span class="cline-any cline-no"> </span>
|
|
276
|
-
<span class="cline-any cline-no"> </span>
|
|
277
|
-
<span class="cline-any cline-no"> </span>
|
|
278
|
-
<span class="cline-any cline-no"> </span>
|
|
279
|
-
<span class="cline-any cline-no"> </span>
|
|
280
|
-
<span class="cline-any cline-no"> </span>
|
|
281
|
-
<span class="cline-any cline-no"> </span>
|
|
282
|
-
<span class="cline-any cline-no"> </span>
|
|
283
|
-
<span class="cline-any cline-no"> </span>
|
|
284
|
-
<span class="cline-any cline-no"> </span>
|
|
285
|
-
<span class="cline-any cline-no"> </span>
|
|
286
|
-
<span class="cline-any cline-no"> </span>
|
|
287
|
-
<span class="cline-any cline-no"> </span>
|
|
288
|
-
<span class="cline-any cline-no"> </span>
|
|
289
|
-
<span class="cline-any cline-no"> </span>
|
|
290
|
-
<span class="cline-any cline-no"> </span>
|
|
291
|
-
<span class="cline-any cline-no"> </span>
|
|
292
|
-
<span class="cline-any cline-no"> </span>
|
|
293
|
-
<span class="cline-any cline-no"> </span>
|
|
294
|
-
<span class="cline-any cline-no"> </span>
|
|
295
|
-
<span class="cline-any cline-no"> </span>
|
|
296
|
-
<span class="cline-any cline-no"> </span>
|
|
297
|
-
<span class="cline-any cline-no"> </span>
|
|
298
|
-
<span class="cline-any cline-no"> </span>
|
|
299
|
-
<span class="cline-any cline-no"> </span>
|
|
300
|
-
<span class="cline-any cline-no"> </span>
|
|
301
|
-
<span class="cline-any cline-no"> </span>
|
|
302
|
-
<span class="cline-any cline-no"> </span>
|
|
303
|
-
<span class="cline-any cline-no"> </span>
|
|
304
|
-
<span class="cline-any cline-no"> </span>
|
|
305
|
-
<span class="cline-any cline-no"> </span>
|
|
306
|
-
<span class="cline-any cline-no"> </span>
|
|
307
|
-
<span class="cline-any cline-no"> </span>
|
|
308
|
-
<span class="cline-any cline-no"> </span>
|
|
309
|
-
<span class="cline-any cline-no"> </span>
|
|
310
|
-
<span class="cline-any cline-no"> </span>
|
|
311
|
-
<span class="cline-any cline-no"> </span>
|
|
312
|
-
<span class="cline-any cline-no"> </span>
|
|
313
|
-
<span class="cline-any cline-no"> </span>
|
|
314
|
-
<span class="cline-any cline-no"> </span>
|
|
315
|
-
<span class="cline-any cline-no"> </span>
|
|
316
|
-
<span class="cline-any cline-no"> </span>
|
|
317
|
-
<span class="cline-any cline-no"> </span>
|
|
318
|
-
<span class="cline-any cline-no"> </span>
|
|
319
|
-
<span class="cline-any cline-no"> </span>
|
|
320
|
-
<span class="cline-any cline-no"> </span>
|
|
321
|
-
<span class="cline-any cline-no"> </span>
|
|
322
|
-
<span class="cline-any cline-no"> </span>
|
|
323
|
-
<span class="cline-any cline-no"> </span>
|
|
324
|
-
<span class="cline-any cline-no"> </span>
|
|
325
|
-
<span class="cline-any cline-no"> </span>
|
|
326
|
-
<span class="cline-any cline-no"> </span>
|
|
327
|
-
<span class="cline-any cline-no"> </span>
|
|
328
|
-
<span class="cline-any cline-no"> </span>
|
|
329
|
-
<span class="cline-any cline-no"> </span>
|
|
330
|
-
<span class="cline-any cline-no"> </span>
|
|
331
|
-
<span class="cline-any cline-no"> </span>
|
|
332
|
-
<span class="cline-any cline-no"> </span>
|
|
333
|
-
<span class="cline-any cline-no"> </span>
|
|
334
|
-
<span class="cline-any cline-no"> </span>
|
|
335
|
-
<span class="cline-any cline-no"> </span>
|
|
336
|
-
<span class="cline-any cline-no"> </span>
|
|
337
|
-
<span class="cline-any cline-no"> </span>
|
|
338
|
-
<span class="cline-any cline-no"> </span>
|
|
339
|
-
<span class="cline-any cline-no"> </span>
|
|
340
|
-
<span class="cline-any cline-no"> </span>
|
|
341
|
-
<span class="cline-any cline-no"> </span>
|
|
342
|
-
<span class="cline-any cline-no"> </span>
|
|
343
|
-
<span class="cline-any cline-no"> </span>
|
|
344
|
-
<span class="cline-any cline-no"> </span>
|
|
345
|
-
<span class="cline-any cline-no"> </span>
|
|
346
|
-
<span class="cline-any cline-no"> </span>
|
|
347
|
-
<span class="cline-any cline-no"> </span>
|
|
348
|
-
<span class="cline-any cline-no"> </span>
|
|
349
|
-
<span class="cline-any cline-no"> </span>
|
|
350
|
-
<span class="cline-any cline-no"> </span>
|
|
351
|
-
<span class="cline-any cline-no"> </span>
|
|
352
|
-
<span class="cline-any cline-no"> </span>
|
|
353
|
-
<span class="cline-any cline-no"> </span>
|
|
354
|
-
<span class="cline-any cline-no"> </span>
|
|
355
|
-
<span class="cline-any cline-no"> </span>
|
|
356
|
-
<span class="cline-any cline-no"> </span>
|
|
357
|
-
<span class="cline-any cline-no"> </span>
|
|
358
|
-
<span class="cline-any cline-no"> </span>
|
|
359
|
-
<span class="cline-any cline-no"> </span>
|
|
360
|
-
<span class="cline-any cline-no"> </span>
|
|
361
|
-
<span class="cline-any cline-no"> </span>
|
|
362
|
-
<span class="cline-any cline-no"> </span>
|
|
363
|
-
<span class="cline-any cline-no"> </span>
|
|
364
|
-
<span class="cline-any cline-no"> </span>
|
|
365
|
-
<span class="cline-any cline-no"> </span>
|
|
366
|
-
<span class="cline-any cline-no"> </span>
|
|
367
|
-
<span class="cline-any cline-no"> </span>
|
|
368
|
-
<span class="cline-any cline-no"> </span>
|
|
369
|
-
<span class="cline-any cline-no"> </span>
|
|
370
|
-
<span class="cline-any cline-no"> </span>
|
|
371
|
-
<span class="cline-any cline-no"> </span>
|
|
372
|
-
<span class="cline-any cline-no"> </span>
|
|
373
|
-
<span class="cline-any cline-no"> </span>
|
|
374
|
-
<span class="cline-any cline-no"> </span>
|
|
375
|
-
<span class="cline-any cline-no"> </span>
|
|
376
|
-
<span class="cline-any cline-no"> </span>
|
|
377
|
-
<span class="cline-any cline-no"> </span>
|
|
378
|
-
<span class="cline-any cline-no"> </span>
|
|
379
|
-
<span class="cline-any cline-no"> </span>
|
|
380
|
-
<span class="cline-any cline-no"> </span>
|
|
381
|
-
<span class="cline-any cline-no"> </span>
|
|
382
|
-
<span class="cline-any cline-no"> </span>
|
|
383
|
-
<span class="cline-any cline-no"> </span>
|
|
384
|
-
<span class="cline-any cline-no"> </span>
|
|
385
|
-
<span class="cline-any cline-no"> </span>
|
|
386
|
-
<span class="cline-any cline-no"> </span>
|
|
387
|
-
<span class="cline-any cline-no"> </span>
|
|
388
|
-
<span class="cline-any cline-no"> </span>
|
|
389
|
-
<span class="cline-any cline-no"> </span>
|
|
390
|
-
<span class="cline-any cline-no"> </span>
|
|
391
|
-
<span class="cline-any cline-no"> </span>
|
|
392
|
-
<span class="cline-any cline-no"> </span>
|
|
393
|
-
<span class="cline-any cline-no"> </span>
|
|
394
|
-
<span class="cline-any cline-no"> </span>
|
|
395
|
-
<span class="cline-any cline-no"> </span>
|
|
396
|
-
<span class="cline-any cline-no"> </span>
|
|
397
|
-
<span class="cline-any cline-no"> </span>
|
|
398
|
-
<span class="cline-any cline-no"> </span>
|
|
399
|
-
<span class="cline-any cline-no"> </span>
|
|
400
|
-
<span class="cline-any cline-no"> </span>
|
|
401
|
-
<span class="cline-any cline-no"> </span>
|
|
402
|
-
<span class="cline-any cline-no"> </span>
|
|
403
|
-
<span class="cline-any cline-no"> </span>
|
|
404
|
-
<span class="cline-any cline-no"> </span>
|
|
405
|
-
<span class="cline-any cline-no"> </span>
|
|
406
|
-
<span class="cline-any cline-no"> </span>
|
|
407
|
-
<span class="cline-any cline-no"> </span>
|
|
408
|
-
<span class="cline-any cline-no"> </span>
|
|
409
|
-
<span class="cline-any cline-no"> </span>
|
|
410
|
-
<span class="cline-any cline-no"> </span>
|
|
411
|
-
<span class="cline-any cline-no"> </span>
|
|
412
|
-
<span class="cline-any cline-neutral"> </span></td><td class="text"><pre class="prettyprint lang-js"><span class="cstat-no" title="statement not covered" >/**<span class="fstat-no" title="function not covered" ><span class="branch-0 cbranch-no" title="branch not covered" ></span></span></span>
|
|
413
|
-
<span class="cstat-no" title="statement not covered" > * Security Context Entity - Domain Layer</span>
|
|
414
|
-
<span class="cstat-no" title="statement not covered" > *</span>
|
|
415
|
-
<span class="cstat-no" title="statement not covered" > * Represents security context for operations with validation and policy enforcement.</span>
|
|
416
|
-
<span class="cstat-no" title="statement not covered" > *</span>
|
|
417
|
-
<span class="cstat-no" title="statement not covered" > * @module v3/security/domain/entities</span>
|
|
418
|
-
<span class="cstat-no" title="statement not covered" > */</span>
|
|
419
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
420
|
-
<span class="cstat-no" title="statement not covered" >import { randomUUID } from 'crypto';</span>
|
|
421
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
422
|
-
<span class="cstat-no" title="statement not covered" >/**</span>
|
|
423
|
-
<span class="cstat-no" title="statement not covered" > * Permission levels</span>
|
|
424
|
-
<span class="cstat-no" title="statement not covered" > */</span>
|
|
425
|
-
<span class="cstat-no" title="statement not covered" >export type PermissionLevel = 'read' | 'write' | 'execute' | 'admin';</span>
|
|
426
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
427
|
-
<span class="cstat-no" title="statement not covered" >/**</span>
|
|
428
|
-
<span class="cstat-no" title="statement not covered" > * Security context properties</span>
|
|
429
|
-
<span class="cstat-no" title="statement not covered" > */</span>
|
|
430
|
-
<span class="cstat-no" title="statement not covered" >export interface SecurityContextProps {</span>
|
|
431
|
-
<span class="cstat-no" title="statement not covered" > id?: string;</span>
|
|
432
|
-
<span class="cstat-no" title="statement not covered" > principalId: string;</span>
|
|
433
|
-
<span class="cstat-no" title="statement not covered" > principalType: 'agent' | 'user' | 'system';</span>
|
|
434
|
-
<span class="cstat-no" title="statement not covered" > permissions: PermissionLevel[];</span>
|
|
435
|
-
<span class="cstat-no" title="statement not covered" > allowedPaths?: string[];</span>
|
|
436
|
-
<span class="cstat-no" title="statement not covered" > blockedPaths?: string[];</span>
|
|
437
|
-
<span class="cstat-no" title="statement not covered" > allowedCommands?: string[];</span>
|
|
438
|
-
<span class="cstat-no" title="statement not covered" > blockedCommands?: string[];</span>
|
|
439
|
-
<span class="cstat-no" title="statement not covered" > metadata?: Record<string, unknown>;</span>
|
|
440
|
-
<span class="cstat-no" title="statement not covered" > expiresAt?: Date;</span>
|
|
441
|
-
<span class="cstat-no" title="statement not covered" > createdAt?: Date;</span>
|
|
442
|
-
<span class="cstat-no" title="statement not covered" >}</span>
|
|
443
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
444
|
-
<span class="cstat-no" title="statement not covered" >/**</span>
|
|
445
|
-
<span class="cstat-no" title="statement not covered" > * Security Context - Entity</span>
|
|
446
|
-
<span class="cstat-no" title="statement not covered" > */</span>
|
|
447
|
-
<span class="cstat-no" title="statement not covered" >export class SecurityContext {</span>
|
|
448
|
-
<span class="cstat-no" title="statement not covered" > private _id: string;</span>
|
|
449
|
-
<span class="cstat-no" title="statement not covered" > private _principalId: string;</span>
|
|
450
|
-
<span class="cstat-no" title="statement not covered" > private _principalType: 'agent' | 'user' | 'system';</span>
|
|
451
|
-
<span class="cstat-no" title="statement not covered" > private _permissions: Set<PermissionLevel>;</span>
|
|
452
|
-
<span class="cstat-no" title="statement not covered" > private _allowedPaths: Set<string>;</span>
|
|
453
|
-
<span class="cstat-no" title="statement not covered" > private _blockedPaths: Set<string>;</span>
|
|
454
|
-
<span class="cstat-no" title="statement not covered" > private _allowedCommands: Set<string>;</span>
|
|
455
|
-
<span class="cstat-no" title="statement not covered" > private _blockedCommands: Set<string>;</span>
|
|
456
|
-
<span class="cstat-no" title="statement not covered" > private _metadata: Record<string, unknown>;</span>
|
|
457
|
-
<span class="cstat-no" title="statement not covered" > private _expiresAt?: Date;</span>
|
|
458
|
-
<span class="cstat-no" title="statement not covered" > private _createdAt: Date;</span>
|
|
459
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
460
|
-
<span class="cstat-no" title="statement not covered" > private constructor(props: SecurityContextProps) {</span>
|
|
461
|
-
<span class="cstat-no" title="statement not covered" > this._id = props.id ?? randomUUID();</span>
|
|
462
|
-
<span class="cstat-no" title="statement not covered" > this._principalId = props.principalId;</span>
|
|
463
|
-
<span class="cstat-no" title="statement not covered" > this._principalType = props.principalType;</span>
|
|
464
|
-
<span class="cstat-no" title="statement not covered" > this._permissions = new Set(props.permissions);</span>
|
|
465
|
-
<span class="cstat-no" title="statement not covered" > this._allowedPaths = new Set(props.allowedPaths ?? []);</span>
|
|
466
|
-
<span class="cstat-no" title="statement not covered" > this._blockedPaths = new Set(props.blockedPaths ?? []);</span>
|
|
467
|
-
<span class="cstat-no" title="statement not covered" > this._allowedCommands = new Set(props.allowedCommands ?? []);</span>
|
|
468
|
-
<span class="cstat-no" title="statement not covered" > this._blockedCommands = new Set(props.blockedCommands ?? []);</span>
|
|
469
|
-
<span class="cstat-no" title="statement not covered" > this._metadata = props.metadata ?? {};</span>
|
|
470
|
-
<span class="cstat-no" title="statement not covered" > this._expiresAt = props.expiresAt;</span>
|
|
471
|
-
<span class="cstat-no" title="statement not covered" > this._createdAt = props.createdAt ?? new Date();</span>
|
|
472
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
473
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
474
|
-
<span class="cstat-no" title="statement not covered" > static create(props: SecurityContextProps): SecurityContext {</span>
|
|
475
|
-
<span class="cstat-no" title="statement not covered" > return new SecurityContext(props);</span>
|
|
476
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
477
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
478
|
-
<span class="cstat-no" title="statement not covered" > static fromPersistence(props: SecurityContextProps): SecurityContext {</span>
|
|
479
|
-
<span class="cstat-no" title="statement not covered" > return new SecurityContext(props);</span>
|
|
480
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
481
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
482
|
-
<span class="cstat-no" title="statement not covered" > get id(): string { return this._id; }</span>
|
|
483
|
-
<span class="cstat-no" title="statement not covered" > get principalId(): string { return this._principalId; }</span>
|
|
484
|
-
<span class="cstat-no" title="statement not covered" > get principalType(): string { return this._principalType; }</span>
|
|
485
|
-
<span class="cstat-no" title="statement not covered" > get permissions(): PermissionLevel[] { return Array.from(this._permissions); }</span>
|
|
486
|
-
<span class="cstat-no" title="statement not covered" > get allowedPaths(): string[] { return Array.from(this._allowedPaths); }</span>
|
|
487
|
-
<span class="cstat-no" title="statement not covered" > get blockedPaths(): string[] { return Array.from(this._blockedPaths); }</span>
|
|
488
|
-
<span class="cstat-no" title="statement not covered" > get allowedCommands(): string[] { return Array.from(this._allowedCommands); }</span>
|
|
489
|
-
<span class="cstat-no" title="statement not covered" > get blockedCommands(): string[] { return Array.from(this._blockedCommands); }</span>
|
|
490
|
-
<span class="cstat-no" title="statement not covered" > get metadata(): Record<string, unknown> { return { ...this._metadata }; }</span>
|
|
491
|
-
<span class="cstat-no" title="statement not covered" > get expiresAt(): Date | undefined { return this._expiresAt; }</span>
|
|
492
|
-
<span class="cstat-no" title="statement not covered" > get createdAt(): Date { return new Date(this._createdAt); }</span>
|
|
493
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
494
|
-
<span class="cstat-no" title="statement not covered" > // Business Logic</span>
|
|
495
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
496
|
-
<span class="cstat-no" title="statement not covered" > hasPermission(level: PermissionLevel): boolean {</span>
|
|
497
|
-
<span class="cstat-no" title="statement not covered" > return this._permissions.has(level) || this._permissions.has('admin');</span>
|
|
498
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
499
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
500
|
-
<span class="cstat-no" title="statement not covered" > isExpired(): boolean {</span>
|
|
501
|
-
<span class="cstat-no" title="statement not covered" > if (!this._expiresAt) return false;</span>
|
|
502
|
-
<span class="cstat-no" title="statement not covered" > return Date.now() > this._expiresAt.getTime();</span>
|
|
503
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
504
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
505
|
-
<span class="cstat-no" title="statement not covered" > canAccessPath(path: string): boolean {</span>
|
|
506
|
-
<span class="cstat-no" title="statement not covered" > if (this.isExpired()) return false;</span>
|
|
507
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
508
|
-
<span class="cstat-no" title="statement not covered" > // Check blocked paths first</span>
|
|
509
|
-
<span class="cstat-no" title="statement not covered" > for (const blocked of this._blockedPaths) {</span>
|
|
510
|
-
<span class="cstat-no" title="statement not covered" > if (path.startsWith(blocked) || this.matchGlob(path, blocked)) {</span>
|
|
511
|
-
<span class="cstat-no" title="statement not covered" > return false;</span>
|
|
512
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
513
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
514
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
515
|
-
<span class="cstat-no" title="statement not covered" > // If no allowed paths specified, allow all non-blocked</span>
|
|
516
|
-
<span class="cstat-no" title="statement not covered" > if (this._allowedPaths.size === 0) return true;</span>
|
|
517
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
518
|
-
<span class="cstat-no" title="statement not covered" > // Check allowed paths</span>
|
|
519
|
-
<span class="cstat-no" title="statement not covered" > for (const allowed of this._allowedPaths) {</span>
|
|
520
|
-
<span class="cstat-no" title="statement not covered" > if (path.startsWith(allowed) || this.matchGlob(path, allowed)) {</span>
|
|
521
|
-
<span class="cstat-no" title="statement not covered" > return true;</span>
|
|
522
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
523
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
524
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
525
|
-
<span class="cstat-no" title="statement not covered" > return false;</span>
|
|
526
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
527
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
528
|
-
<span class="cstat-no" title="statement not covered" > canExecuteCommand(command: string): boolean {</span>
|
|
529
|
-
<span class="cstat-no" title="statement not covered" > if (this.isExpired()) return false;</span>
|
|
530
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
531
|
-
<span class="cstat-no" title="statement not covered" > const cmdBase = command.split(' ')[0];</span>
|
|
532
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
533
|
-
<span class="cstat-no" title="statement not covered" > // Check blocked commands first</span>
|
|
534
|
-
<span class="cstat-no" title="statement not covered" > if (this._blockedCommands.has(cmdBase) || this._blockedCommands.has(command)) {</span>
|
|
535
|
-
<span class="cstat-no" title="statement not covered" > return false;</span>
|
|
536
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
537
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
538
|
-
<span class="cstat-no" title="statement not covered" > // If no allowed commands specified, allow all non-blocked</span>
|
|
539
|
-
<span class="cstat-no" title="statement not covered" > if (this._allowedCommands.size === 0) return true;</span>
|
|
540
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
541
|
-
<span class="cstat-no" title="statement not covered" > // Check allowed commands</span>
|
|
542
|
-
<span class="cstat-no" title="statement not covered" > return this._allowedCommands.has(cmdBase) || this._allowedCommands.has(command);</span>
|
|
543
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
544
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
545
|
-
<span class="cstat-no" title="statement not covered" > private matchGlob(path: string, pattern: string): boolean {</span>
|
|
546
|
-
<span class="cstat-no" title="statement not covered" > const regex = pattern</span>
|
|
547
|
-
<span class="cstat-no" title="statement not covered" > .replace(/\*\*/g, '.*')</span>
|
|
548
|
-
<span class="cstat-no" title="statement not covered" > .replace(/\*/g, '[^/]*')</span>
|
|
549
|
-
<span class="cstat-no" title="statement not covered" > .replace(/\?/g, '.');</span>
|
|
550
|
-
<span class="cstat-no" title="statement not covered" > return new RegExp(`^${regex}$`).test(path);</span>
|
|
551
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
552
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
553
|
-
<span class="cstat-no" title="statement not covered" > grantPermission(level: PermissionLevel): void {</span>
|
|
554
|
-
<span class="cstat-no" title="statement not covered" > this._permissions.add(level);</span>
|
|
555
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
556
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
557
|
-
<span class="cstat-no" title="statement not covered" > revokePermission(level: PermissionLevel): void {</span>
|
|
558
|
-
<span class="cstat-no" title="statement not covered" > this._permissions.delete(level);</span>
|
|
559
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
560
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
561
|
-
<span class="cstat-no" title="statement not covered" > addAllowedPath(path: string): void {</span>
|
|
562
|
-
<span class="cstat-no" title="statement not covered" > this._allowedPaths.add(path);</span>
|
|
563
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
564
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
565
|
-
<span class="cstat-no" title="statement not covered" > addBlockedPath(path: string): void {</span>
|
|
566
|
-
<span class="cstat-no" title="statement not covered" > this._blockedPaths.add(path);</span>
|
|
567
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
568
|
-
<span class="cstat-no" title="statement not covered" ></span>
|
|
569
|
-
<span class="cstat-no" title="statement not covered" > toPersistence(): Record<string, unknown> {</span>
|
|
570
|
-
<span class="cstat-no" title="statement not covered" > return {</span>
|
|
571
|
-
<span class="cstat-no" title="statement not covered" > id: this._id,</span>
|
|
572
|
-
<span class="cstat-no" title="statement not covered" > principalId: this._principalId,</span>
|
|
573
|
-
<span class="cstat-no" title="statement not covered" > principalType: this._principalType,</span>
|
|
574
|
-
<span class="cstat-no" title="statement not covered" > permissions: Array.from(this._permissions),</span>
|
|
575
|
-
<span class="cstat-no" title="statement not covered" > allowedPaths: Array.from(this._allowedPaths),</span>
|
|
576
|
-
<span class="cstat-no" title="statement not covered" > blockedPaths: Array.from(this._blockedPaths),</span>
|
|
577
|
-
<span class="cstat-no" title="statement not covered" > allowedCommands: Array.from(this._allowedCommands),</span>
|
|
578
|
-
<span class="cstat-no" title="statement not covered" > blockedCommands: Array.from(this._blockedCommands),</span>
|
|
579
|
-
<span class="cstat-no" title="statement not covered" > metadata: this._metadata,</span>
|
|
580
|
-
<span class="cstat-no" title="statement not covered" > expiresAt: this._expiresAt?.toISOString(),</span>
|
|
581
|
-
<span class="cstat-no" title="statement not covered" > createdAt: this._createdAt.toISOString(),</span>
|
|
582
|
-
<span class="cstat-no" title="statement not covered" > };</span>
|
|
583
|
-
<span class="cstat-no" title="statement not covered" > }</span>
|
|
584
|
-
<span class="cstat-no" title="statement not covered" >}</span>
|
|
585
|
-
</pre></td></tr></table></pre>
|
|
586
|
-
|
|
587
|
-
<div class='push'></div><!-- for sticky footer -->
|
|
588
|
-
</div><!-- /wrapper -->
|
|
589
|
-
<div class='footer quiet pad2 space-top1 center small'>
|
|
590
|
-
Code coverage generated by
|
|
591
|
-
<a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
|
|
592
|
-
at 2026-01-06T16:55:48.089Z
|
|
593
|
-
</div>
|
|
594
|
-
<script src="../../../prettify.js"></script>
|
|
595
|
-
<script>
|
|
596
|
-
window.onload = function () {
|
|
597
|
-
prettyPrint();
|
|
598
|
-
};
|
|
599
|
-
</script>
|
|
600
|
-
<script src="../../../sorter.js"></script>
|
|
601
|
-
<script src="../../../block-navigation.js"></script>
|
|
602
|
-
</body>
|
|
603
|
-
</html>
|
|
604
|
-
|