@contrast/common 1.1.0 → 1.1.2

package/lib/constants.d.ts

@@ -3,6 +3,12 @@ export declare enum Event {
     PROTECT = "protect",
     SERVER_SETTINGS_UPDATE = "server-settings-update"
 }
+export declare enum ProtectRuleMode {
+    OFF = "off",
+    MONITOR = "monitor",
+    BLOCK = "block",
+    BLOCK_AT_PERIMETER = "block_at_perimeter"
+}
 export declare enum Rule {
     BOT_BLOCKER = "bot-blocker",
     CMD_INJECTION = "cmd-injection",
@@ -14,6 +20,7 @@ export declare enum Rule {
     NOSQL_INJECTION = "nosql-injection",
     NOSQL_INJECTION_MONGO = "nosql-injection-mongo",
     PATH_TRAVERSAL = "path-traversal",
+    PATH_TRAVERSAL_SEMANTIC_FILE_SECURITY_BYPASS = "path-traversal-semantic-file-security-bypass",
     REFLECTED_XSS = "reflected-xss",
     SQL_INJECTION = "sql-injection",
     SSJS_INJECTION = "ssjs-injection",

package/lib/constants.js

@@ -14,13 +14,20 @@
  * way not consistent with the End User License Agreement.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BLOCKING_MODES = exports.InputType = exports.Rule = exports.Event = void 0;
+exports.BLOCKING_MODES = exports.InputType = exports.Rule = exports.ProtectRuleMode = exports.Event = void 0;
 var Event;
 (function (Event) {
     Event["ASSESS"] = "assess";
     Event["PROTECT"] = "protect";
     Event["SERVER_SETTINGS_UPDATE"] = "server-settings-update";
 })(Event = exports.Event || (exports.Event = {}));
+var ProtectRuleMode;
+(function (ProtectRuleMode) {
+    ProtectRuleMode["OFF"] = "off";
+    ProtectRuleMode["MONITOR"] = "monitor";
+    ProtectRuleMode["BLOCK"] = "block";
+    ProtectRuleMode["BLOCK_AT_PERIMETER"] = "block_at_perimeter";
+})(ProtectRuleMode = exports.ProtectRuleMode || (exports.ProtectRuleMode = {}));
 var Rule;
 (function (Rule) {
     Rule["BOT_BLOCKER"] = "bot-blocker";
@@ -33,6 +40,7 @@ var Rule;
     Rule["NOSQL_INJECTION"] = "nosql-injection";
     Rule["NOSQL_INJECTION_MONGO"] = "nosql-injection-mongo";
     Rule["PATH_TRAVERSAL"] = "path-traversal";
+    Rule["PATH_TRAVERSAL_SEMANTIC_FILE_SECURITY_BYPASS"] = "path-traversal-semantic-file-security-bypass";
     Rule["REFLECTED_XSS"] = "reflected-xss";
     Rule["SQL_INJECTION"] = "sql-injection";
     Rule["SSJS_INJECTION"] = "ssjs-injection";

package/lib/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAEH,IAAY,KAIX;AAJD,WAAY,KAAK;IACf,0BAAiB,CAAA;IACjB,4BAAmB,CAAA;IACnB,0DAAiD,CAAA;AACnD,CAAC,EAJW,KAAK,GAAL,aAAK,KAAL,aAAK,QAIhB;AAED,IAAY,IAkBX;AAlBD,WAAY,IAAI;IACd,mCAA2B,CAAA;IAC3B,uCAA+B,CAAA;IAC/B,2EAAmE,CAAA;IACnE,2FAAmF,CAAA;IACnF,yFAAiF,CAAA;IACjF,mCAA2B,CAAA;IAC3B,6CAAqC,CAAA;IACrC,2CAAmC,CAAA;IACnC,uDAA+C,CAAA;IAC/C,yCAAiC,CAAA;IACjC,uCAA+B,CAAA;IAC/B,uCAA+B,CAAA;IAC/B,yCAAiC,CAAA;IACjC,uCAA+B,CAAA;IAC/B,+DAAuD,CAAA;IACvD,iDAAyC,CAAA;IACzC,mBAAW,CAAA;AACb,CAAC,EAlBW,IAAI,GAAJ,YAAI,KAAJ,YAAI,QAkBf;AAED,IAAY,SAuBX;AAvBD,WAAY,SAAS;IACnB,8CAAiC,CAAA;IACjC,0BAAa,CAAA;IACb,wCAA2B,CAAA;IAC3B,0CAA6B,CAAA;IAC7B,8BAAiB,CAAA;IACjB,8CAAiC,CAAA;IACjC,gDAAmC,CAAA;IACnC,wCAA2B,CAAA;IAC3B,wBAAW,CAAA;IACX,8BAAiB,CAAA;IACjB,sCAAyB,CAAA;IACzB,sDAAyC,CAAA;IACzC,8DAAiD,CAAA;IACjD,gDAAmC,CAAA;IACnC,0DAA6C,CAAA;IAC7C,8CAAiC,CAAA;IACjC,oCAAuB,CAAA;IACvB,oCAAuB,CAAA;IACvB,8BAAiB,CAAA;IACjB,gCAAmB,CAAA;IACnB,4CAA+B,CAAA;IAC/B,gCAAmB,CAAA;AACrB,CAAC,EAvBW,SAAS,GAAT,iBAAS,KAAT,iBAAS,QAuBpB;AAEY,QAAA,cAAc,GAAG,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAEH,IAAY,KAIX;AAJD,WAAY,KAAK;IACf,0BAAiB,CAAA;IACjB,4BAAmB,CAAA;IACnB,0DAAiD,CAAA;AACnD,CAAC,EAJW,KAAK,GAAL,aAAK,KAAL,aAAK,QAIhB;AACD,IAAY,eAKX;AALD,WAAY,eAAe;IACzB,8BAAW,CAAA;IACX,sCAAmB,CAAA;IACnB,kCAAe,CAAA;IACf,4DAAyC,CAAA;AAC3C,CAAC,EALW,eAAe,GAAf,uBAAe,KAAf,uBAAe,QAK1B;AAED,IAAY,IAmBX;AAnBD,WAAY,IAAI;IACd,mCAA2B,CAAA;IAC3B,uCAA+B,CAAA;IAC/B,2EAAmE,CAAA;IACnE,2FAAmF,CAAA;IACnF,yFAAiF,CAAA;IACjF,mCAA2B,CAAA;IAC3B,6CAAqC,CAAA;IACrC,2CAAmC,CAAA;IACnC,uDAA+C,CAAA;IAC/C,yCAAiC,CAAA;IACjC,qGAA6F,CAAA;IAC7F,uCAA+B,CAAA;IAC/B,uCAA+B,CAAA;IAC/B,yCAAiC,CAAA;IACjC,uCAA+B,CAAA;IAC/B,+DAAuD,CAAA;IACvD,iDAAyC,CAAA;IACzC,mBAAW,CAAA;AACb,CAAC,EAnBW,IAAI,GAAJ,YAAI,KAAJ,YAAI,QAmBf;AAED,IAAY,SAuBX;AAvBD,WAAY,SAAS;IACnB,8CAAiC,CAAA;IACjC,0BAAa,CAAA;IACb,wCAA2B,CAAA;IAC3B,0CAA6B,CAAA;IAC7B,8BAAiB,CAAA;IACjB,8CAAiC,CAAA;IACjC,gDAAmC,CAAA;IACnC,wCAA2B,CAAA;IAC3B,wBAAW,CAAA;IACX,8BAAiB,CAAA;IACjB,sCAAyB,CAAA;IACzB,sDAAyC,CAAA;IACzC,8DAAiD,CAAA;IACjD,gDAAmC,CAAA;IACnC,0DAA6C,CAAA;IAC7C,8CAAiC,CAAA;IACjC,oCAAuB,CAAA;IACvB,oCAAuB,CAAA;IACvB,8BAAiB,CAAA;IACjB,gCAAmB,CAAA;IACnB,4CAA+B,CAAA;IAC/B,gCAAmB,CAAA;AACrB,CAAC,EAvBW,SAAS,GAAT,iBAAS,KAAT,iBAAS,QAuBpB;AAEY,QAAA,cAAc,GAAG,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC"}

package/lib/index.d.ts

@@ -8,3 +8,4 @@ export declare function isString(value: unknown): value is string | String;
 export declare function isNonEmptyObject(value: unknown): value is object;
 export declare function encodeString(str: string): string;
 export declare function simpleTraverse(obj: any, cb: Function): void;
+export declare function installChildComponentsSync(parent: any, order: string[]): void;

package/lib/index.js

@@ -28,7 +28,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.simpleTraverse = exports.encodeString = exports.isNonEmptyObject = exports.isString = void 0;
+exports.installChildComponentsSync = exports.simpleTraverse = exports.encodeString = exports.isNonEmptyObject = exports.isString = void 0;
 __exportStar(require("./constants"), exports);
 __exportStar(require("./types"), exports);
 /**
@@ -91,4 +91,14 @@ function simpleTraverse(obj, cb) {
     traverse(obj);
 }
 exports.simpleTraverse = simpleTraverse;
+function installChildComponentsSync(parent, order) {
+    const keys = order || Object.keys(parent);
+    for (const key of keys) {
+        const component = parent[key];
+        if (typeof component.install === 'function') {
+            component.install();
+        }
+    }
+}
+exports.installChildComponentsSync = installChildComponentsSync;
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;AAEH,8CAA4B;AAC5B,0CAAwB;AAExB;;;GAGG;AACH,wDAAwD;AACxD,SAAgB,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,MAAM,CAAC;AAC9D,CAAC;AAFD,4BAEC;AAED,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/E,CAAC;AAFD,4CAEC;AAED,sBAAsB;AACtB,SAAgB,YAAY,CAAC,GAAW;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAFD,oCAEC;AAED,SAAgB,cAAc,CAAC,GAAQ,EAAE,EAAY;IACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;QAC3C,OAAO;KACR;IACD,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,+BAA+B;IAC/B,SAAS,QAAQ,CAAC,GAAQ;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE;YACnB,IAAI,OAAO,EAAE;gBACX,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACrB,iEAAiE;gBACjE,iEAAiE;gBACjE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACd,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;oBACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;iBACnB;qBAAM,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC,EAAE;oBACjD,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;iBACjC;gBACD,IAAI,CAAC,GAAG,EAAE,CAAC;aACZ;iBAAM,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;gBACxD,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjB,IAAI,CAAC,GAAG,EAAE,CAAC;aACZ;iBAAM;gBACL,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBACxB,mDAAmD;gBACnD,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE;oBACxC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACb,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;iBACZ;aACF;SACF;IACH,CAAC;IAED,QAAQ,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAtCD,wCAsCC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;AAEH,8CAA4B;AAC5B,0CAAwB;AAExB;;;GAGG;AACH,wDAAwD;AACxD,SAAgB,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,MAAM,CAAC;AAC9D,CAAC;AAFD,4BAEC;AAED,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/E,CAAC;AAFD,4CAEC;AAED,sBAAsB;AACtB,SAAgB,YAAY,CAAC,GAAW;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAFD,oCAEC;AAED,SAAgB,cAAc,CAAC,GAAQ,EAAE,EAAY;IACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;QAC3C,OAAO;KACR;IACD,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,+BAA+B;IAC/B,SAAS,QAAQ,CAAC,GAAQ;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE;YACnB,IAAI,OAAO,EAAE;gBACX,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACrB,iEAAiE;gBACjE,iEAAiE;gBACjE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACd,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;oBACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;iBACnB;qBAAM,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC,EAAE;oBACjD,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;iBACjC;gBACD,IAAI,CAAC,GAAG,EAAE,CAAC;aACZ;iBAAM,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;gBACxD,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjB,IAAI,CAAC,GAAG,EAAE,CAAC;aACZ;iBAAM;gBACL,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBACxB,mDAAmD;gBACnD,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE;oBACxC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACb,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;iBACZ;aACF;SACF;IACH,CAAC;IAED,QAAQ,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAtCD,wCAsCC;AAED,SAAgB,0BAA0B,CAAC,MAAW,EAAE,KAAe;IACrE,MAAM,IAAI,GAAG,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;QACtB,MAAM,SAAS,GAAQ,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,UAAU,EAAE;YAC3C,SAAS,CAAC,OAAO,EAAE,CAAC;SACrB;KACF;AACH,CAAC;AARD,gEAQC"}

package/lib/types.d.ts

@@ -1,12 +1,7 @@
 /// <reference types="node" />
-import { Event, Rule } from './constants';
+import { Event, Rule, ProtectRuleMode } from './constants';
 import { EventEmitter } from 'events';
-export interface RuleConfig {
-    mode: 'monitor' | 'block' | 'block_at_perimeter' | 'off';
-}
 export declare type SemanticAnalysisRules = Rule.CMD_INJECTION_SEMANTIC_CHAINED_COMMANDS | Rule.CMD_INJECTION_COMMAND_BACKDOORS | Rule.CMD_INJECTION_SEMANTIC_DANGEROUS_PATHS;
-export interface RulesConfig extends Record<Rule, RuleConfig> {
-}
 export interface Result {
     blocked: boolean;
     ruleId: Rule;
@@ -14,8 +9,10 @@ export interface Result {
     path?: string[];
     key?: string;
     value: string;
+    score: number;
     details?: any[];
     mongoExpansionResult?: boolean;
+    idsList?: string[];
 }
 export interface SemanticAnalysisResult extends Result {
     findings?: {
@@ -50,7 +47,7 @@ export interface ReqData {
 }
 export interface Findings {
     trackRequest: boolean;
-    securityException?: [mode: string, ruleId: string];
+    securityException?: [mode: ProtectRuleMode, ruleId: string];
     bodyType?: 'json' | 'urlencoded';
     resultsMap: Record<Rule, Result[]>;
     semanticResultsMap: Record<Rule, SemanticAnalysisResult[]>;
@@ -63,11 +60,7 @@ export interface RequestStore {
 export interface ProtectMessage {
     reqData: ReqData;
     block: (mode: string, ruleId: string) => void;
-    rules: {
-        agentLibRules: RulesConfig;
-        agentLibRulesMask: number;
-        agentRules: RulesConfig;
-    };
+    policy: any;
     exclusions: any[];
     virtualPatches: any[];
     findings: Findings;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/common",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "description": "Shared constants and utilities for all Contrast Agent modules",
   "license": "UNLICENSED",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",

package/src/constants.ts

@@ -18,6 +18,12 @@ export enum Event {
   PROTECT = 'protect',
   SERVER_SETTINGS_UPDATE = 'server-settings-update',
 }
+export enum ProtectRuleMode {
+  OFF = 'off',
+  MONITOR = 'monitor',
+  BLOCK = 'block',
+  BLOCK_AT_PERIMETER = 'block_at_perimeter',
+}
 
 export enum Rule {
   BOT_BLOCKER = 'bot-blocker',
@@ -30,6 +36,7 @@ export enum Rule {
   NOSQL_INJECTION = 'nosql-injection',
   NOSQL_INJECTION_MONGO = 'nosql-injection-mongo',
   PATH_TRAVERSAL = 'path-traversal',
+  PATH_TRAVERSAL_SEMANTIC_FILE_SECURITY_BYPASS = 'path-traversal-semantic-file-security-bypass',
   REFLECTED_XSS = 'reflected-xss',
   SQL_INJECTION = 'sql-injection',
   SSJS_INJECTION = 'ssjs-injection',

package/src/index.ts

@@ -73,3 +73,13 @@ export function simpleTraverse(obj: any, cb: Function) {
 
   traverse(obj);
 }
+
+export function installChildComponentsSync(parent: any, order: string[]) {
+  const keys = order || Object.keys(parent);
+  for (const key of keys) {
+    const component: any = parent[key];
+    if (typeof component.install === 'function') {
+      component.install();
+    }
+  }
+}

package/src/types.ts

@@ -13,17 +13,11 @@
  * way not consistent with the End User License Agreement.
  */
 
-import { Event, Rule } from './constants';
+import { Event, Rule, ProtectRuleMode } from './constants';
 import { EventEmitter } from 'events';
 
-export interface RuleConfig {
-  mode: 'monitor' | 'block' | 'block_at_perimeter' | 'off';
-}
-
 export type SemanticAnalysisRules = Rule.CMD_INJECTION_SEMANTIC_CHAINED_COMMANDS | Rule.CMD_INJECTION_COMMAND_BACKDOORS | Rule.CMD_INJECTION_SEMANTIC_DANGEROUS_PATHS;
 
-export interface RulesConfig extends Record<Rule, RuleConfig> { }
-
 export interface Result {
   blocked: boolean;
   ruleId: Rule,
@@ -31,8 +25,10 @@ export interface Result {
   path?: string[],
   key?: string,
   value: string,
+  score: number,
   details?: any[], // TODO
-  mongoExpansionResult?: boolean
+  mongoExpansionResult?: boolean,
+  idsList?: string[],
 }
 
 export interface SemanticAnalysisResult extends Result {
@@ -73,7 +69,7 @@ export interface ReqData {
 
 export interface Findings {
   trackRequest: boolean;
-  securityException?: [mode: string, ruleId: string];
+  securityException?: [mode: ProtectRuleMode, ruleId: string];
   bodyType?: 'json' | 'urlencoded';
   resultsMap: Record<Rule, Result[]>;
   semanticResultsMap: Record<Rule, SemanticAnalysisResult[]>;
@@ -99,11 +95,7 @@ export interface RequestStore {
 export interface ProtectMessage {
   reqData: ReqData;
   block: (mode: string, ruleId: string) => void;
-  rules: {
-    agentLibRules: RulesConfig;
-    agentLibRulesMask: number;
-    agentRules: RulesConfig;
-  };
+  policy: any;
   exclusions: any[]; // TODO
   virtualPatches: any[]; // TODO
   findings: Findings;