@cyberhub/shieldpm 0.1.0

package/dist/fingerprint/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/fingerprint/profile.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAQ,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA0DzC,4EAA4E;AAE5E,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAEzC,SAAS,WAAW,CAAC,OAAe,EAAE,IAAY,EAAE,OAAe;IACjE,OAAO,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,OAAO,OAAO,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,OAAwB;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACvC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,IAAY,EACZ,OAAe;IAEf,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAE7E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AAEnG,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,UAAU,IAAI,CAAC,CAAS;QAC3B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACpE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,mBAAmB;IACnB,MAAM,SAAS,GAAG,0CAA0C,CAAC;IAC7D,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,aAAa;IACb,MAAM,QAAQ,GAAG,oDAAoD,CAAC;IACtE,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,iBAAiB;IACjB,MAAM,WAAW,GAAG,yCAAyC,CAAC;IAC9D,OAAO,CAAC,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc;IAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,eAAe;IACf,MAAM,KAAK,GAAG,mCAAmC,CAAC;IAClD,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACzC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,mFAAmF;IACnF,MAAM,MAAM,GAAG,iDAAiD,CAAC;IACjE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1C,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,iDAAiD;IACjD,MAAM,IAAI,GAAG,yHAAyH,CAAC;IACvI,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAe,EAAE,MAAc;IAC5D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,cAAc;IACd,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,MAAM,SAAS,GAAG,gDAAgD,CAAC;IACnE,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IAED,8CAA8C;IAC9C,IAAI,2DAA2D,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,4EAA4E;AAE5E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAkB,EAClB,IAAY,EACZ,OAAe;IAEf,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAEnD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,eAAe,GAAG,EAAE,CAAC;IAEzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChE,UAAU,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QAC3B,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACxC,eAAe,IAAI,OAAO,GAAG,IAAI,CAAC;QAElC,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/D,KAAK,MAAM,EAAE,IAAI,uBAAuB,CAAC,OAAO,CAAC;YAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,KAAK,MAAM,EAAE,IAAI,cAAc,CAAC,OAAO,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;SACrC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC/B,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,MAAM,cAAc,GAAG,qBAAqB,CAC1C,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EACzC,eAAe,CAChB,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,OAAO;QACP,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,WAAW;QACX,UAAU;QACV,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;QAC/B,cAAc;QACd,gBAAgB,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE;QAC1C,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;QAC/B,SAAS,EAAE,KAAK,CAAC,MAAM;QACvB,SAAS;KACV,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,SAAS,SAAS,CAAI,MAAW,EAAE,MAAW;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,UAA2B,EAAE,UAA2B;IACnF,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE/C,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAC7D,CAAC;IAEF,MAAM,kBAAkB,GAAG,UAAU,CAAC,WAAW,KAAK,UAAU,CAAC,WAAW,CAAC;IAE7E,gBAAgB;IAChB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAC;IACxF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,gBAAgB,CAAC,CAAC;IAChF,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,cAAc,CAAC,CAAC;IACtF,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAC9F,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,wBAAwB,CAAC,CAAC;IAC1F,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,sBAAsB,CAAC,CAAC;IAE9F,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;QAC9B,CAAC,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAChC,CAAC,CAAC,gCAAgC,CAAC;IAErC,OAAO;QACL,YAAY,EAAE,UAAU,CAAC,KAAK;QAC9B,cAAc,EAAE,UAAU,CAAC,OAAO;QAClC,qBAAqB,EAAE,OAAO,CAAC,KAAK;QACpC,uBAAuB,EAAE,OAAO,CAAC,OAAO;QACxC,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,cAAc,EAAE,MAAM,CAAC,OAAO;QAC9B,mBAAmB,EAAE,UAAU,CAAC,KAAK;QACrC,qBAAqB,EAAE,UAAU,CAAC,OAAO;QACzC,UAAU,EAAE,QAAQ,CAAC,KAAK;QAC1B,YAAY,EAAE,QAAQ,CAAC,OAAO;QAC9B,YAAY;QACZ,kBAAkB;QAClB,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * ShieldPM — Public API
+ * Runtime-aware package firewall for Node.js
+ *
+ * @module shieldpm
+ */
+export { analyzePackage, analyzeSource } from './analyzer/static.js';
+export type { Finding, RiskReport, Severity } from './analyzer/static.js';
+export { checkTyposquatting, checkMultiple, levenshtein, POPULAR_PACKAGES } from './analyzer/typosquat.js';
+export type { TyposquatResult, DetectionMethod } from './analyzer/typosquat.js';
+export { runSandboxed, runPostInstall } from './sandbox/runner.js';
+export type { SandboxOptions, SandboxResult } from './sandbox/runner.js';
+export { loadManifest, saveManifest, validateAccess, generateManifest } from './monitor/permissions.js';
+export type { PermissionManifest, PackagePermissions, AccessCheck, ResourceType } from './monitor/permissions.js';
+export { generateProfile, diffProfiles, saveProfile, loadProfile } from './fingerprint/profile.js';
+export type { BehaviorProfile, ProfileDiff } from './fingerprint/profile.js';
+export { diffLockfiles, diffLockfilesByPath } from './diff/dependency.js';
+export type { DependencyDiffReport, PackageDelta, DeltaFlag } from './diff/dependency.js';
+export { log } from './utils/logger.js';
+export * as colors from './utils/colors.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAG1E,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3G,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAGhF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACnE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACxG,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGlH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACnG,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG7E,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAG1F,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,22 @@
+/**
+ * ShieldPM — Public API
+ * Runtime-aware package firewall for Node.js
+ *
+ * @module shieldpm
+ */
+// Static analysis
+export { analyzePackage, analyzeSource } from './analyzer/static.js';
+// Typosquatting detection
+export { checkTyposquatting, checkMultiple, levenshtein, POPULAR_PACKAGES } from './analyzer/typosquat.js';
+// Sandbox execution
+export { runSandboxed, runPostInstall } from './sandbox/runner.js';
+// Permission manifest
+export { loadManifest, saveManifest, validateAccess, generateManifest } from './monitor/permissions.js';
+// Behavioral fingerprinting
+export { generateProfile, diffProfiles, saveProfile, loadProfile } from './fingerprint/profile.js';
+// Dependency diff
+export { diffLockfiles, diffLockfilesByPath } from './diff/dependency.js';
+// Utilities
+export { log } from './utils/logger.js';
+export * as colors from './utils/colors.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,kBAAkB;AAClB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrE,0BAA0B;AAC1B,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3G,oBAAoB;AACpB,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGnE,sBAAsB;AACtB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGxG,4BAA4B;AAC5B,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGnG,kBAAkB;AAClB,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAG1E,YAAY;AACZ,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC"}

package/dist/monitor/permissions.d.ts

@@ -0,0 +1,45 @@
+/**
+ * ShieldPM — Permission Manifest System
+ * Defines, loads, validates, and generates shieldpm.json permission manifests.
+ */
+export interface PackagePermissions {
+    /** Allowed network destinations (glob patterns), or false to block all */
+    net: string[] | false;
+    /** Allowed filesystem paths (relative or absolute), or false to block all */
+    fs: string[] | false;
+    /** Whether native/C++ addons are allowed */
+    native?: boolean;
+    /** Whether child_process spawning is allowed */
+    exec?: boolean;
+    /** Whether environment variable access is allowed */
+    env?: string[] | boolean;
+}
+export interface PermissionManifest {
+    /** Manifest format version */
+    version: 1;
+    /** Per-package permission declarations */
+    permissions: Record<string, PackagePermissions>;
+}
+export type ResourceType = 'net' | 'fs' | 'native' | 'exec' | 'env';
+export interface AccessCheck {
+    allowed: boolean;
+    rule: string;
+    details: string;
+}
+/**
+ * Load the permission manifest from disk.
+ */
+export declare function loadManifest(dir?: string): Promise<PermissionManifest | null>;
+/**
+ * Save a permission manifest to disk.
+ */
+export declare function saveManifest(manifest: PermissionManifest, dir?: string): Promise<string>;
+/**
+ * Check whether a package is allowed to access a resource.
+ */
+export declare function validateAccess(manifest: PermissionManifest, packageName: string, resource: ResourceType, target?: string): AccessCheck;
+/**
+ * Auto-generate a permission manifest by scanning installed packages.
+ */
+export declare function generateManifest(projectDir: string): Promise<PermissionManifest>;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/monitor/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/monitor/permissions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,MAAM,WAAW,kBAAkB;IACjC,0EAA0E;IAC1E,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACtB,6EAA6E;IAC7E,EAAE,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACrB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,qDAAqD;IACrD,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,8BAA8B;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CACjD;AAED,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,IAAI,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAEpE,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAYD;;GAEG;AACH,wBAAsB,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAqBnF;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAK9F;AAID;;GAEG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,kBAAkB,EAC5B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,YAAY,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,CAqIb;AAyBD;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAyEtF"}

package/dist/monitor/permissions.js

@@ -0,0 +1,265 @@
+/**
+ * ShieldPM — Permission Manifest System
+ * Defines, loads, validates, and generates shieldpm.json permission manifests.
+ */
+import { readFile, writeFile, readdir, stat } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { analyzePackage } from '../analyzer/static.js';
+// ── Default manifest path ────────────────────────────────────────────────
+const MANIFEST_FILENAME = 'shieldpm.json';
+function resolveManifestPath(dir) {
+    return join(dir ?? process.cwd(), MANIFEST_FILENAME);
+}
+// ── Load / Save ──────────────────────────────────────────────────────────
+/**
+ * Load the permission manifest from disk.
+ */
+export async function loadManifest(dir) {
+    const path = resolveManifestPath(dir);
+    try {
+        const raw = await readFile(path, 'utf-8');
+        const parsed = JSON.parse(raw);
+        // Basic shape validation
+        if (!parsed.permissions || typeof parsed.permissions !== 'object') {
+            throw new Error('Invalid manifest: missing "permissions" object');
+        }
+        return {
+            version: parsed.version ?? 1,
+            permissions: parsed.permissions,
+        };
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            return null; // No manifest yet
+        }
+        throw err;
+    }
+}
+/**
+ * Save a permission manifest to disk.
+ */
+export async function saveManifest(manifest, dir) {
+    const path = resolveManifestPath(dir);
+    const json = JSON.stringify(manifest, null, 2) + '\n';
+    await writeFile(path, json, 'utf-8');
+    return path;
+}
+// ── Access validation ────────────────────────────────────────────────────
+/**
+ * Check whether a package is allowed to access a resource.
+ */
+export function validateAccess(manifest, packageName, resource, target) {
+    const perms = manifest.permissions[packageName];
+    // No entry in manifest — default deny
+    if (!perms) {
+        return {
+            allowed: false,
+            rule: 'no-manifest-entry',
+            details: `Package "${packageName}" has no entry in the permission manifest`,
+        };
+    }
+    switch (resource) {
+        case 'net': {
+            if (perms.net === false) {
+                return {
+                    allowed: false,
+                    rule: 'net-blocked',
+                    details: `Network access is blocked for "${packageName}"`,
+                };
+            }
+            if (!target) {
+                return {
+                    allowed: Array.isArray(perms.net) && perms.net.length > 0,
+                    rule: 'net-general',
+                    details: Array.isArray(perms.net)
+                        ? `Network allowed to: ${perms.net.join(', ')}`
+                        : 'Network access not configured',
+                };
+            }
+            // Check target against allowed patterns
+            const allowed = matchesAnyPattern(target, perms.net);
+            return {
+                allowed,
+                rule: allowed ? 'net-allowed' : 'net-denied',
+                details: allowed
+                    ? `"${target}" matches allowed network pattern`
+                    : `"${target}" does not match any allowed network pattern for "${packageName}"`,
+            };
+        }
+        case 'fs': {
+            if (perms.fs === false) {
+                return {
+                    allowed: false,
+                    rule: 'fs-blocked',
+                    details: `Filesystem access is blocked for "${packageName}"`,
+                };
+            }
+            if (!target) {
+                return {
+                    allowed: Array.isArray(perms.fs) && perms.fs.length > 0,
+                    rule: 'fs-general',
+                    details: Array.isArray(perms.fs)
+                        ? `FS allowed in: ${perms.fs.join(', ')}`
+                        : 'FS access not configured',
+                };
+            }
+            const resolvedTarget = resolve(target);
+            const allowed = perms.fs.some((pattern) => {
+                const resolvedPattern = resolve(pattern);
+                return resolvedTarget.startsWith(resolvedPattern);
+            });
+            return {
+                allowed,
+                rule: allowed ? 'fs-allowed' : 'fs-denied',
+                details: allowed
+                    ? `"${target}" is within allowed filesystem paths`
+                    : `"${target}" is not within any allowed filesystem path for "${packageName}"`,
+            };
+        }
+        case 'native': {
+            const allowed = perms.native === true;
+            return {
+                allowed,
+                rule: allowed ? 'native-allowed' : 'native-denied',
+                details: allowed
+                    ? `Native modules allowed for "${packageName}"`
+                    : `Native modules blocked for "${packageName}"`,
+            };
+        }
+        case 'exec': {
+            const allowed = perms.exec === true;
+            return {
+                allowed,
+                rule: allowed ? 'exec-allowed' : 'exec-denied',
+                details: allowed
+                    ? `Process execution allowed for "${packageName}"`
+                    : `Process execution blocked for "${packageName}"`,
+            };
+        }
+        case 'env': {
+            if (perms.env === false || perms.env === undefined) {
+                return {
+                    allowed: false,
+                    rule: 'env-blocked',
+                    details: `Environment variable access blocked for "${packageName}"`,
+                };
+            }
+            if (perms.env === true) {
+                return {
+                    allowed: true,
+                    rule: 'env-allowed-all',
+                    details: `All environment variables allowed for "${packageName}"`,
+                };
+            }
+            if (!target) {
+                return {
+                    allowed: true,
+                    rule: 'env-general',
+                    details: `Env access allowed for: ${perms.env.join(', ')}`,
+                };
+            }
+            const allowed = perms.env.includes(target);
+            return {
+                allowed,
+                rule: allowed ? 'env-allowed' : 'env-denied',
+                details: allowed
+                    ? `Env var "${target}" is allowed for "${packageName}"`
+                    : `Env var "${target}" is not allowed for "${packageName}"`,
+            };
+        }
+        default:
+            return {
+                allowed: false,
+                rule: 'unknown-resource',
+                details: `Unknown resource type: ${resource}`,
+            };
+    }
+}
+// ── Pattern matching ─────────────────────────────────────────────────────
+/**
+ * Match a string against an array of glob-like patterns.
+ * Supports: * (any), *.domain.com, exact match.
+ */
+function matchesAnyPattern(value, patterns) {
+    for (const pattern of patterns) {
+        if (pattern === '*')
+            return true;
+        // Convert glob pattern to regex
+        const regexStr = pattern
+            .replace(/\./g, '\\.')
+            .replace(/\*/g, '.*');
+        const regex = new RegExp(`^${regexStr}$`, 'i');
+        if (regex.test(value))
+            return true;
+    }
+    return false;
+}
+// ── Manifest generation ──────────────────────────────────────────────────
+/**
+ * Auto-generate a permission manifest by scanning installed packages.
+ */
+export async function generateManifest(projectDir) {
+    const manifest = {
+        version: 1,
+        permissions: {},
+    };
+    const nodeModules = join(projectDir, 'node_modules');
+    let entries;
+    try {
+        entries = await readdir(nodeModules);
+    }
+    catch {
+        return manifest; // No node_modules
+    }
+    // Collect package directories (including scoped packages)
+    const packageDirs = [];
+    for (const entry of entries) {
+        if (entry.startsWith('.'))
+            continue;
+        const fullPath = join(nodeModules, entry);
+        const entryStat = await stat(fullPath).catch(() => null);
+        if (!entryStat?.isDirectory())
+            continue;
+        if (entry.startsWith('@')) {
+            // Scoped package — look one level deeper
+            const scopedEntries = await readdir(fullPath).catch(() => []);
+            for (const scopedEntry of scopedEntries) {
+                const scopedPath = join(fullPath, scopedEntry);
+                const scopedStat = await stat(scopedPath).catch(() => null);
+                if (scopedStat?.isDirectory()) {
+                    packageDirs.push({ name: `${entry}/${scopedEntry}`, dir: scopedPath });
+                }
+            }
+        }
+        else {
+            packageDirs.push({ name: entry, dir: fullPath });
+        }
+    }
+    // Analyze each package and build permissions
+    for (const { name, dir } of packageDirs) {
+        const report = await analyzePackage(dir);
+        const perms = {
+            net: false,
+            fs: false,
+        };
+        // If the package uses network, allow it (but default to restrictive)
+        if (report.categoryCounts['network']) {
+            perms.net = []; // User must fill in allowed destinations
+        }
+        // If the package uses filesystem
+        if (report.categoryCounts['filesystem']) {
+            perms.fs = []; // User must fill in allowed paths
+        }
+        // If the package uses child_process
+        if (report.categoryCounts['process']) {
+            perms.exec = false; // Default deny, user opts in
+        }
+        // If the package accesses env
+        if (report.categoryCounts['environment']) {
+            perms.env = []; // User must fill in allowed vars
+        }
+        manifest.permissions[name] = perms;
+    }
+    return manifest;
+}
+//# sourceMappingURL=permissions.js.map

package/dist/monitor/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/monitor/permissions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAgCvD,4EAA4E;AAE5E,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAE1C,SAAS,mBAAmB,CAAC,GAAY;IACvC,OAAO,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;AACvD,CAAC;AAED,4EAA4E;AAE5E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAY;IAC7C,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,yBAAyB;QACzB,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;YAC5B,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC,CAAC,kBAAkB;QACjC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAA4B,EAAE,GAAY;IAC3E,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACtD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAE5E;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,WAAmB,EACnB,QAAsB,EACtB,MAAe;IAEf,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAEhD,sCAAsC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,YAAY,WAAW,2CAA2C;SAC5E,CAAC;IACJ,CAAC;IAED,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;gBACxB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,kCAAkC,WAAW,GAAG;iBAC1D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;oBACzD,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;wBAC/B,CAAC,CAAC,uBAAuB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBAC/C,CAAC,CAAC,+BAA+B;iBACpC,CAAC;YACJ,CAAC;YACD,wCAAwC;YACxC,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YACrD,OAAO;gBACL,OAAO;gBACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY;gBAC5C,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,IAAI,MAAM,mCAAmC;oBAC/C,CAAC,CAAC,IAAI,MAAM,qDAAqD,WAAW,GAAG;aAClF,CAAC;QACJ,CAAC;QAED,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;gBACvB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,qCAAqC,WAAW,GAAG;iBAC7D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC;oBACvD,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC9B,CAAC,CAAC,kBAAkB,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBACzC,CAAC,CAAC,0BAA0B;iBAC/B,CAAC;YACJ,CAAC;YACD,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;gBACxC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;gBACzC,OAAO,cAAc,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,OAAO;gBACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW;gBAC1C,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,IAAI,MAAM,sCAAsC;oBAClD,CAAC,CAAC,IAAI,MAAM,oDAAoD,WAAW,GAAG;aACjF,CAAC;QACJ,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC;YACtC,OAAO;gBACL,OAAO;gBACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe;gBAClD,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,+BAA+B,WAAW,GAAG;oBAC/C,CAAC,CAAC,+BAA+B,WAAW,GAAG;aAClD,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YACpC,OAAO;gBACL,OAAO;gBACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa;gBAC9C,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,kCAAkC,WAAW,GAAG;oBAClD,CAAC,CAAC,kCAAkC,WAAW,GAAG;aACrD,CAAC;QACJ,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACnD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,4CAA4C,WAAW,GAAG;iBACpE,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,0CAA0C,WAAW,GAAG;iBAClE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,2BAA2B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAC3D,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3C,OAAO;gBACL,OAAO;gBACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY;gBAC5C,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,YAAY,MAAM,qBAAqB,WAAW,GAAG;oBACvD,CAAC,CAAC,YAAY,MAAM,yBAAyB,WAAW,GAAG;aAC9D,CAAC;QACJ,CAAC;QAED;YACE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,0BAA0B,QAAQ,EAAE;aAC9C,CAAC;IACN,CAAC;AACH,CAAC;AAED,4EAA4E;AAE5E;;;GAGG;AACH,SAAS,iBAAiB,CAAC,KAAa,EAAE,QAAkB;IAC1D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAEjC,gCAAgC;QAChC,MAAM,QAAQ,GAAG,OAAO;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC;QAE/C,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4EAA4E;AAE5E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IACvD,MAAM,QAAQ,GAAuB;QACnC,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,EAAE;KAChB,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACrD,IAAI,OAAiB,CAAC;IAEtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,CAAC,kBAAkB;IACrC,CAAC;IAED,0DAA0D;IAC1D,MAAM,WAAW,GAAoC,EAAE,CAAC;IAExD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE;YAAE,SAAS;QAExC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,yCAAyC;YACzC,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;YAC1E,KAAK,MAAM,WAAW,IAAI,aAAa,EAAE,CAAC;gBACxC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,UAAU,EAAE,WAAW,EAAE,EAAE,CAAC;oBAC9B,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,WAAW,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,WAAW,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAuB;YAChC,GAAG,EAAE,KAAK;YACV,EAAE,EAAE,KAAK;SACV,CAAC;QAEF,qEAAqE;QACrE,IAAI,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,yCAAyC;QAC3D,CAAC;QAED,iCAAiC;QACjC,IAAI,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,kCAAkC;QACnD,CAAC;QAED,oCAAoC;QACpC,IAAI,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,6BAA6B;QACnD,CAAC;QAED,8BAA8B;QAC9B,IAAI,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC;YACzC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,iCAAiC;QACnD,CAAC;QAED,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/sandbox/runner.d.ts

@@ -0,0 +1,46 @@
+/**
+ * ShieldPM — Sandbox Runner
+ * Executes commands (especially postinstall scripts) in a restricted environment
+ * with network blocking, timeout enforcement, and output capture.
+ */
+export interface SandboxOptions {
+    /** Working directory for the command */
+    cwd?: string;
+    /** Timeout in milliseconds (default: 30000) */
+    timeout?: number;
+    /** Block network access (default: true) */
+    blockNetwork?: boolean;
+    /** Block environment variables (default: true) */
+    blockEnv?: boolean;
+    /** Allowed environment variable names to pass through */
+    allowedEnvVars?: string[];
+    /** Maximum stdout/stderr size in bytes (default: 1MB) */
+    maxOutputSize?: number;
+    /** Enable verbose logging of sandbox decisions */
+    verbose?: boolean;
+}
+export interface SandboxResult {
+    /** Process exit code (null if killed) */
+    exitCode: number | null;
+    /** Captured stdout */
+    stdout: string;
+    /** Captured stderr */
+    stderr: string;
+    /** Warnings generated during execution */
+    warnings: string[];
+    /** Actions that were blocked */
+    blocked: string[];
+    /** Whether the process was killed due to timeout */
+    timedOut: boolean;
+    /** Duration in milliseconds */
+    durationMs: number;
+}
+/**
+ * Run a command inside a restricted sandbox environment.
+ */
+export declare function runSandboxed(command: string, args?: string[], options?: SandboxOptions): Promise<SandboxResult>;
+/**
+ * Run an npm postinstall script in the sandbox.
+ */
+export declare function runPostInstall(packageDir: string, script: string, options?: SandboxOptions): Promise<SandboxResult>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/sandbox/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/sandbox/runner.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,gCAAgC;IAChC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oDAAoD;IACpD,QAAQ,EAAE,OAAO,CAAC;IAClB,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB;AA8GD;;GAEG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,MAAM,EAAO,EACnB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,aAAa,CAAC,CA4HxB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAQxB"}