@contrast/agent-bundle 5.42.0 → 5.45.1

package/node_modules/undici-types/dispatcher.d.ts

@@ -97,7 +97,8 @@ declare class Dispatcher extends EventEmitter {
 
 declare namespace Dispatcher {
   export interface ComposedDispatcher extends Dispatcher {}
-  export type DispatcherComposeInterceptor = (dispatch: Dispatcher['dispatch']) => Dispatcher['dispatch']
+  export type Dispatch = Dispatcher['dispatch']
+  export type DispatcherComposeInterceptor = (dispatch: Dispatch) => Dispatch
   export interface DispatchOptions {
     origin?: string | URL;
     path: string;
@@ -276,6 +277,6 @@ declare namespace Dispatcher {
   }
 
   export interface DispatchInterceptor {
-    (dispatch: Dispatcher['dispatch']): Dispatcher['dispatch']
+    (dispatch: Dispatch): Dispatch
   }
 }

package/node_modules/undici-types/env-http-proxy-agent.d.ts

@@ -1,4 +1,5 @@
 import Agent from './agent'
+import ProxyAgent from './proxy-agent'
 import Dispatcher from './dispatcher'
 
 export default EnvHttpProxyAgent
@@ -10,7 +11,7 @@ declare class EnvHttpProxyAgent extends Dispatcher {
 }
 
 declare namespace EnvHttpProxyAgent {
-  export interface Options extends Agent.Options {
+  export interface Options extends Omit<ProxyAgent.Options, 'uri'> {
     /** Overrides the value of the HTTP_PROXY environment variable  */
     httpProxy?: string;
     /** Overrides the value of the HTTPS_PROXY environment variable  */

package/node_modules/undici-types/eventsource.d.ts

@@ -18,9 +18,9 @@ interface EventSource extends EventTarget {
   readonly CLOSED: 2
   readonly CONNECTING: 0
   readonly OPEN: 1
-  onerror: (this: EventSource, ev: ErrorEvent) => any
-  onmessage: (this: EventSource, ev: MessageEvent) => any
-  onopen: (this: EventSource, ev: Event) => any
+  onerror: ((this: EventSource, ev: ErrorEvent) => any) | null
+  onmessage: ((this: EventSource, ev: MessageEvent) => any) | null
+  onopen: ((this: EventSource, ev: Event) => any) | null
   readonly readyState: 0 | 1 | 2
   readonly url: string
   readonly withCredentials: boolean

package/node_modules/undici-types/fetch.d.ts

@@ -33,6 +33,7 @@ export class BodyMixin {
 
   readonly arrayBuffer: () => Promise<ArrayBuffer>
   readonly blob: () => Promise<Blob>
+  readonly bytes: () => Promise<Uint8Array>
   /**
    * @deprecated This method is not recommended for parsing multipart/form-data bodies in server environments.
    * It is recommended to use a library such as [@fastify/busboy](https://www.npmjs.com/package/@fastify/busboy) as follows:

package/node_modules/undici-types/handlers.d.ts

@@ -2,7 +2,7 @@ import Dispatcher from './dispatcher'
 
 export declare class RedirectHandler implements Dispatcher.DispatchHandler {
   constructor (
-    dispatch: Dispatcher,
+    dispatch: Dispatcher.Dispatch,
     maxRedirections: number,
     opts: Dispatcher.DispatchOptions,
     handler: Dispatcher.DispatchHandler,

package/node_modules/undici-types/mock-client.d.ts

@@ -14,6 +14,8 @@ declare class MockClient extends Client implements Interceptable {
   dispatch (options: Dispatcher.DispatchOptions, handlers: Dispatcher.DispatchHandler): boolean
   /** Closes the mock client and gracefully waits for enqueued requests to complete. */
   close (): Promise<void>
+  /** Clean up all the prepared mocks. */
+  cleanMocks (): void
 }
 
 declare namespace MockClient {

package/node_modules/undici-types/mock-interceptor.d.ts

@@ -84,6 +84,8 @@ declare namespace MockInterceptor {
 interface Interceptable extends Dispatcher {
   /** Intercepts any matching requests that use the same origin as this mock client. */
   intercept(options: MockInterceptor.Options): MockInterceptor;
+  /** Clean up all the prepared mocks. */
+  cleanMocks (): void
 }
 
 export {

package/node_modules/undici-types/mock-pool.d.ts

@@ -14,6 +14,8 @@ declare class MockPool extends Pool implements Interceptable {
   dispatch (options: Dispatcher.DispatchOptions, handlers: Dispatcher.DispatchHandler): boolean
   /** Closes the mock pool and gracefully waits for enqueued requests to complete. */
   close (): Promise<void>
+  /** Clean up all the prepared mocks. */
+  cleanMocks (): void
 }
 
 declare namespace MockPool {

package/node_modules/undici-types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "undici-types",
-  "version": "7.10.0",
+  "version": "7.12.0",
   "description": "A stand-alone types package for Undici",
   "homepage": "https://undici.nodejs.org",
   "bugs": {

package/node_modules/undici-types/retry-handler.d.ts

@@ -35,6 +35,15 @@ declare namespace RetryHandler {
   ) => void
 
   export interface RetryOptions {
+    /**
+     * If true, the retry handler will throw an error if the request fails,
+     * this will prevent the folling handlers from being called, and will destroy the socket.
+     *
+     * @type {boolean}
+     * @memberof RetryOptions
+     * @default true
+     */
+    throwOnError?: boolean;
     /**
      * Callback to be invoked on every retry iteration.
      * It receives the error, current state of the retry object and the options object

package/node_modules/undici-types/webidl.d.ts

@@ -16,9 +16,12 @@ interface ConvertToIntOpts {
 }
 
 interface WebidlErrors {
+  /**
+   * @description Instantiate an error
+   */
   exception (opts: { header: string, message: string }): TypeError
   /**
-   * @description Throw an error when conversion from one type to another has failed
+   * @description Instantiate an error when conversion from one type to another has failed
    */
   conversionFailed (opts: {
     prefix: string
@@ -75,7 +78,7 @@ interface WebidlUtil {
   ): number
 
   /**
-   * @see https://webidl.spec.whatwg.org/#abstract-opdef-converttoint
+   * @see https://webidl.spec.whatwg.org/#abstract-opdef-integerpart
    */
   IntegerPart (N: number): number
 
@@ -179,23 +182,34 @@ interface WebidlConverters {
 
   ['record<ByteString, ByteString>']: RecordConverter<string, string>
 
+  /**
+  * @see https://fetch.spec.whatwg.org/#requestinfo
+  */
+  RequestInfo (V: unknown): undici.Request | string
+
+  /**
+   * @see https://fetch.spec.whatwg.org/#requestinit
+   */
+  RequestInit (V: unknown): undici.RequestInit
+
   [Key: string]: (...args: any[]) => unknown
 }
 
-type IsAssertion<T> = (arg: any) => arg is T
+type WebidlIsFunction<T> = (arg: any) => arg is T
 
 interface WebidlIs {
-  Request: IsAssertion<undici.Request>
-  Response: IsAssertion<undici.Response>
-  ReadableStream: IsAssertion<ReadableStream>
-  Blob: IsAssertion<Blob>
-  URLSearchParams: IsAssertion<URLSearchParams>
-  File: IsAssertion<File>
-  FormData: IsAssertion<undici.FormData>
-  URL: IsAssertion<URL>
-  WebSocketError: IsAssertion<undici.WebSocketError>
-  AbortSignal: IsAssertion<AbortSignal>
-  MessagePort: IsAssertion<MessagePort>
+  Request: WebidlIsFunction<undici.Request>
+  Response: WebidlIsFunction<undici.Response>
+  ReadableStream: WebidlIsFunction<ReadableStream>
+  Blob: WebidlIsFunction<Blob>
+  URLSearchParams: WebidlIsFunction<URLSearchParams>
+  File: WebidlIsFunction<File>
+  FormData: WebidlIsFunction<undici.FormData>
+  URL: WebidlIsFunction<URL>
+  WebSocketError: WebidlIsFunction<undici.WebSocketError>
+  AbortSignal: WebidlIsFunction<AbortSignal>
+  MessagePort: WebidlIsFunction<MessagePort>
+  USVString: WebidlIsFunction<string>
 }
 
 export interface Webidl {
@@ -233,7 +247,7 @@ export interface Webidl {
    * Similar to {@link Webidl.brandCheck} but allows skipping the check if third party
    * interfaces are allowed.
    */
-  interfaceConverter <Interface>(typeCheck: IsAssertion<Interface>, name: string): (
+  interfaceConverter <Interface>(typeCheck: WebidlIsFunction<Interface>, name: string): (
     V: unknown,
     prefix: string,
     argument: string

package/node_modules/undici-types/websocket.d.ts

@@ -136,7 +136,7 @@ interface ErrorEvent extends Event {
   readonly filename: string
   readonly lineno: number
   readonly colno: number
-  readonly error: any
+  readonly error: Error
 }
 
 export declare const ErrorEvent: {
@@ -182,3 +182,5 @@ export declare const WebSocketError: {
   prototype: WebSocketError
   new (type: string, init?: WebSocketCloseInfo): WebSocketError
 }
+
+export declare const ping: (ws: WebSocket, body?: Buffer) => void

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/agent-bundle",
-  "version": "5.42.0",
+  "version": "5.45.1",
   "description": "Contrast Security Node.js Agent bundle with all dependencies included",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -21,13 +21,13 @@
   "main": "./lib/index.js",
   "engines": {
     "npm": ">=6.13.7 <7 || >= 8.3.1",
-    "node": ">=16.9.1 <17 || >=18.7.0 <19 || >=20.6.0 <21 || >= 22.5.1 <23"
+    "node": ">=18.7.0 <19 || >=20.6.0 <21 || >= 22.5.1 <23 || >= 24.0.1 <25"
   },
   "scripts": {
     "test": "bash ../scripts/test.sh"
   },
   "dependencies": {
-    "@contrast/agent": "5.42.0"
+    "@contrast/agent": "5.45.1"
   },
   "bundleDependencies": [
     "@contrast/agent"

package/node_modules/@contrast/core/lib/sensitive-data-masking/protect-listener.js

@@ -1,111 +0,0 @@
-/*
- * Copyright: 2025 Contrast Security, Inc
- * Contact: support@contrastsecurity.com
- * License: Commercial
-
- * NOTICE: This Software and the patented inventions embodied within may only be
- * used as part of Contrast Security’s commercial offerings. Even though it is
- * made available through public repositories, use of this Software is subject to
- * the applicable End User Licensing Agreement found at
- * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
- * between Contrast Security and the End User. The Software may not be reverse
- * engineered, modified, repackaged, sold, redistributed or otherwise used in a
- * way not consistent with the End User License Agreement.
- */
-
-'use strict';
-
-const { URLSearchParams } = require('url');
-const { Event, primordials: { StringPrototypeReplace } } = require('@contrast/common');
-
-const { CONTRAST_REDACTED } = require('./constants');
-
-module.exports = function (core) {
-  const {
-    messages,
-    logger,
-    sensitiveDataMasking: { policy, getRedactedText, traverseAndMask },
-  } = core;
-
-  messages.on(Event.PROTECT, (store) => {
-    if (!store.protect || !policy.keywordSets.length || !store.sourceInfo) {
-      return;
-    }
-
-    logger.trace('masking sensitive fields in %s message', Event.PROTECT);
-
-    const unmasked = policy.maskAttackVector ? new Set() : undefined;
-    if (policy.maskHttpBody) {
-      store.protect.parsedBody = `${CONTRAST_REDACTED}-body`;
-    } else {
-      traverseAndMask(store.protect?.parsedBody, unmasked);
-    }
-
-    traverseAndMask(store.protect?.parsedCookies, unmasked);
-    traverseAndMask(store.protect?.parsedQuery, unmasked);
-
-    // Do parsed URL path params and urlPath together
-    const params = store.protect?.parsedParams;
-    if (params) {
-      for (const [key, value] of Object.entries(params)) {
-        const redactedText = getRedactedText(key);
-        if (redactedText) {
-          const encoded = encodeURIComponent(value);
-          store.sourceInfo.uriPath = StringPrototypeReplace.call(
-            store.sourceInfo.uriPath,
-            encoded,
-            redactedText
-          );
-          store.protect.parsedParams[key] = redactedText;
-        }
-      }
-    }
-
-    // raw headers
-    const headers = store.sourceInfo.rawHeaders;
-    for (let i = 0; i <= headers.length - 2; i += 2) {
-      const key = headers[i];
-
-      const redactedText = getRedactedText(key);
-      if (redactedText) {
-        headers[i + 1] = redactedText;
-      }
-    }
-
-    // raw queries
-    if (store.sourceInfo?.queries) {
-      const searchParams = new URLSearchParams(store.sourceInfo.queries);
-      for (const [key] of searchParams) {
-        const redactedText = getRedactedText(key);
-        if (redactedText) {
-          searchParams.set(key, redactedText);
-        }
-      }
-      store.sourceInfo.queries = searchParams.toString();
-    }
-
-    if (policy.maskAttackVector) {
-      // attack values
-      const inputAnalysis = Object.entries(store.protect?.resultsMap);
-      for (const [, results] of inputAnalysis) {
-        for (const result of results) {
-          const redactedText = getRedactedText(result.key);
-          if (result.exploitMetadata.length) {
-            result.exploitMetadata.forEach((exploit) => {
-              unmasked.forEach((val) => {
-                exploit.sinkContext.value = StringPrototypeReplace.call(
-                  exploit.sinkContext.value,
-                  val,
-                  'contrast-redacted-vector'
-                );
-              });
-            });
-          }
-          if (redactedText) {
-            result.value = redactedText;
-          }
-        }
-      }
-    }
-  });
-};