@dollhousemcp/mcp-server 1.3.0

package/dist/src/update/UpdateChecker.d.ts

@@ -0,0 +1,127 @@
+/**
+ * UpdateChecker - Secure GitHub release update checking with comprehensive sanitization
+ *
+ * Security measures implemented:
+ * 1. XSS Protection: DOMPurify with strict no-tags/no-attributes policy
+ * 2. Command Injection Prevention: Multiple regex patterns for various escape sequences
+ * 3. URL Validation: Whitelist approach allowing only http/https schemes
+ * 4. Information Disclosure Prevention: Sanitized logging of sensitive data
+ * 5. Length Limits: Configurable limits to prevent DoS attacks
+ * 6. OWASP Patterns: Protection against PHP, ASP, hex, unicode, and octal escapes
+ *
+ * Performance optimizations:
+ * - Cached DOMPurify instance to avoid recreation overhead
+ * - Single-pass regex processing for injection patterns
+ * - Exponential backoff for network retries
+ */
+import { VersionManager } from './VersionManager.js';
+import { RateLimiter } from './RateLimiter.js';
+import { SignatureVerifier } from './SignatureVerifier.js';
+export interface UpdateCheckResult {
+    currentVersion: string;
+    latestVersion: string;
+    isUpdateAvailable: boolean;
+    releaseDate: string;
+    releaseNotes: string;
+    releaseUrl: string;
+    tagName?: string;
+    signatureVerified?: boolean;
+    signerInfo?: string;
+}
+export declare class UpdateChecker {
+    private versionManager;
+    private rateLimiter;
+    private signatureVerifier;
+    private static purifyWindow;
+    private static purify;
+    private readonly releaseNotesMaxLength;
+    private readonly urlMaxLength;
+    private readonly securityLogger?;
+    private readonly requireSignedReleases;
+    constructor(versionManager: VersionManager, options?: {
+        releaseNotesMaxLength?: number;
+        urlMaxLength?: number;
+        securityLogger?: (event: string, details: any) => void;
+        rateLimiter?: RateLimiter;
+        signatureVerifier?: SignatureVerifier;
+        requireSignedReleases?: boolean;
+    });
+    /**
+     * Execute a network operation with retry logic and exponential backoff
+     * @param operation - The async operation to execute
+     * @param maxRetries - Maximum number of retry attempts (default: 3)
+     * @param baseDelay - Base delay in milliseconds for exponential backoff (default: 1000ms)
+     * @returns Promise resolving to the operation result
+     * @throws The last error if all retries fail
+     */
+    private retryNetworkOperation;
+    /**
+     * Check for updates from GitHub releases with security and error handling
+     * @returns UpdateCheckResult if update info is available, null if no releases found
+     * @throws Error for network or API failures or rate limit exceeded
+     */
+    checkForUpdates(): Promise<UpdateCheckResult | null>;
+    /**
+     * Get current rate limit status
+     * @returns Current rate limit status including remaining requests and reset time
+     */
+    getRateLimitStatus(): {
+        allowed: boolean;
+        remainingRequests: number;
+        resetTime: Date;
+        waitTimeSeconds?: number;
+    };
+    /**
+     * Format update check results for display with comprehensive sanitization
+     * @param result - The update check result to format
+     * @param error - Optional error from update check
+     * @param personaIndicator - Optional persona indicator prefix
+     * @returns Formatted string safe for display
+     */
+    formatUpdateCheckResult(result: UpdateCheckResult | null, error?: Error, personaIndicator?: string): string;
+    /**
+     * Sanitize URLs to prevent dangerous schemes and information disclosure
+     *
+     * Security measures:
+     * - Length validation to prevent DoS
+     * - Whitelist approach: only http/https allowed
+     * - Sanitized logging to prevent sensitive data exposure
+     *
+     * @param url - The URL to sanitize
+     * @returns Empty string if invalid/dangerous, original URL if safe
+     */
+    private sanitizeUrl;
+    /**
+     * Sanitize release notes to prevent XSS, command injection, and DoS
+     *
+     * Security layers:
+     * 1. Length limiting (configurable, default 5000 chars)
+     * 2. HTML/JS sanitization via DOMPurify (no tags/attributes allowed)
+     * 3. Command injection pattern removal (backticks, command substitution)
+     * 4. OWASP pattern removal (PHP, ASP, hex/unicode/octal escapes)
+     *
+     * @param notes - The release notes to sanitize
+     * @returns Sanitized release notes safe for display
+     */
+    private sanitizeReleaseNotes;
+    /**
+     * Format date to human-readable format with consistent timezone handling
+     * @param dateStr - ISO date string to format
+     * @returns Human-readable date string (e.g., "January 5, 2025")
+     */
+    private formatDate;
+    /**
+     * Log security events for monitoring and alerting
+     * Only logs if securityLogger callback was provided in constructor
+     * @param event - The security event type
+     * @param details - Event details (sanitized to prevent info disclosure)
+     */
+    private logSecurityEvent;
+    /**
+     * Reset static DOMPurify cache (useful for long-running processes)
+     * This prevents memory accumulation in services that run for extended periods
+     * @static
+     */
+    static resetCache(): void;
+}
+//# sourceMappingURL=UpdateChecker.d.ts.map

package/dist/src/update/UpdateChecker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateChecker.d.ts","sourceRoot":"","sources":["../../../src/update/UpdateChecker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAsB,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAI3D,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAKD,qBAAa,aAAa;IACxB,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,iBAAiB,CAAoB;IAK7C,OAAO,CAAC,MAAM,CAAC,YAAY,CAAa;IACxC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAkC;IAGvD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAwC;IACxE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAU;gBAG9C,cAAc,EAAE,cAAc,EAC9B,OAAO,CAAC,EAAE;QACR,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,IAAI,CAAC;QACvD,WAAW,CAAC,EAAE,WAAW,CAAC;QAC1B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;QACtC,qBAAqB,CAAC,EAAE,OAAO,CAAC;KACjC;IA+CH;;;;;;;OAOG;YACW,qBAAqB;IAgCnC;;;;OAIG;IACG,eAAe,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IA4H1D;;;OAGG;IACH,kBAAkB,IAAI;QACpB,OAAO,EAAE,OAAO,CAAC;QACjB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,SAAS,EAAE,IAAI,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B;IAUD;;;;;;OAMG;IACH,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,gBAAgB,GAAE,MAAW,GAAG,MAAM;IAoF/G;;;;;;;;;;OAUG;IACH,OAAO,CAAC,WAAW;IAiCnB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IAqE5B;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAmBlB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAMxB;;;;OAIG;WACW,UAAU,IAAI,IAAI;CAIjC"}