@ductape/sdk 0.0.4-v51 → 0.0.4-v53

package/dist/database/presave/decrypt.js

@@ -0,0 +1,146 @@
+"use strict";
+/**
+ * Decryption utilities for pre-save encrypted data
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decrypt = decrypt;
+exports.decryptFields = decryptFields;
+exports.verifyHash = verifyHash;
+exports.verifyShaHash = verifyShaHash;
+const crypto = __importStar(require("crypto"));
+/**
+ * Decrypt a value that was encrypted using PreSaveProcessor.encrypt()
+ */
+function decrypt(encryptedValue, options) {
+    const { key, algorithm = 'aes-256-gcm' } = options;
+    // Derive the same key that was used for encryption
+    const derivedKey = crypto.createHash('sha256').update(key).digest();
+    if (algorithm === 'aes-256-gcm' || algorithm === 'aes-128-gcm') {
+        // Format: iv:authTag:encryptedData
+        const parts = encryptedValue.split(':');
+        if (parts.length !== 3) {
+            throw new Error('Invalid encrypted value format for GCM mode');
+        }
+        const [ivHex, authTagHex, encrypted] = parts;
+        const iv = Buffer.from(ivHex, 'hex');
+        const authTag = Buffer.from(authTagHex, 'hex');
+        const keyLength = algorithm === 'aes-256-gcm' ? 32 : 16;
+        const decipher = crypto.createDecipheriv(algorithm, derivedKey.slice(0, keyLength), iv);
+        decipher.setAuthTag(authTag);
+        let decrypted = decipher.update(encrypted, 'hex', 'utf8');
+        decrypted += decipher.final('utf8');
+        return decrypted;
+    }
+    else {
+        // CBC format: iv:encryptedData
+        const parts = encryptedValue.split(':');
+        if (parts.length !== 2) {
+            throw new Error('Invalid encrypted value format for CBC mode');
+        }
+        const [ivHex, encrypted] = parts;
+        const iv = Buffer.from(ivHex, 'hex');
+        const decipher = crypto.createDecipheriv('aes-256-cbc', derivedKey, iv);
+        let decrypted = decipher.update(encrypted, 'hex', 'utf8');
+        decrypted += decipher.final('utf8');
+        return decrypted;
+    }
+}
+/**
+ * Decrypt multiple fields in a record
+ */
+function decryptFields(record, fields, options) {
+    const result = Object.assign({}, record);
+    for (const field of fields) {
+        if (result[field] && typeof result[field] === 'string') {
+            try {
+                result[field] = decrypt(result[field], options);
+                // Try to parse as JSON if it looks like JSON
+                if (result[field].startsWith('{') || result[field].startsWith('[')) {
+                    try {
+                        result[field] = JSON.parse(result[field]);
+                    }
+                    catch (_a) {
+                        // Keep as string if JSON parsing fails
+                    }
+                }
+            }
+            catch (_b) {
+                // Keep original value if decryption fails
+            }
+        }
+    }
+    return result;
+}
+/**
+ * Verify a hashed password using PBKDF2 (bcrypt-compatible format)
+ */
+function verifyHash(plainValue, hashedValue) {
+    // Handle our PBKDF2 format: $pbkdf2$rounds$salt$hash
+    if (hashedValue.startsWith('$pbkdf2$')) {
+        const parts = hashedValue.split('$');
+        if (parts.length !== 5)
+            return false;
+        const [, , roundsStr, salt, storedHash] = parts;
+        const rounds = parseInt(roundsStr, 10);
+        const computedHash = crypto
+            .pbkdf2Sync(plainValue, salt, Math.pow(2, rounds), 64, 'sha512')
+            .toString('hex');
+        return crypto.timingSafeEqual(Buffer.from(storedHash, 'hex'), Buffer.from(computedHash, 'hex'));
+    }
+    // Handle argon2-compat format: $argon2-compat$salt$hash
+    if (hashedValue.startsWith('$argon2-compat$')) {
+        const parts = hashedValue.split('$');
+        if (parts.length !== 4)
+            return false;
+        const [, , salt, storedHash] = parts;
+        const computedHash = crypto
+            .pbkdf2Sync(plainValue, salt, 100000, 64, 'sha512')
+            .toString('hex');
+        return crypto.timingSafeEqual(Buffer.from(storedHash, 'hex'), Buffer.from(computedHash, 'hex'));
+    }
+    return false;
+}
+/**
+ * Verify a simple SHA hash
+ */
+function verifyShaHash(plainValue, hashedValue, algorithm = 'sha256', salt = '') {
+    const computedHash = crypto
+        .createHash(algorithm)
+        .update(salt + plainValue)
+        .digest('hex');
+    return crypto.timingSafeEqual(Buffer.from(hashedValue, 'hex'), Buffer.from(computedHash, 'hex'));
+}
+//# sourceMappingURL=decrypt.js.map

package/dist/database/presave/decrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decrypt.js","sourceRoot":"","sources":["../../../src/database/presave/decrypt.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcH,0BA0CC;AAKD,sCA2BC;AAKD,gCAqCC;AAKD,sCAeC;AApJD,+CAAiC;AASjC;;GAEG;AACH,SAAgB,OAAO,CAAC,cAAsB,EAAE,OAAwB;IACtE,MAAM,EAAE,GAAG,EAAE,SAAS,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC;IAEnD,mDAAmD;IACnD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;IAEpE,IAAI,SAAS,KAAK,aAAa,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;QAC/D,mCAAmC;QACnC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,SAAS,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAExD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QACxF,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAE7B,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpC,OAAO,SAAS,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,+BAA+B;QAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QACjC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAErC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAExE,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpC,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAC3B,MAA2B,EAC3B,MAAgB,EAChB,OAAwB;IAExB,MAAM,MAAM,qBAAQ,MAAM,CAAE,CAAC;IAE7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;gBAEhD,6CAA6C;gBAC7C,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnE,IAAI,CAAC;wBACH,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC5C,CAAC;oBAAC,WAAM,CAAC;wBACP,uCAAuC;oBACzC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,WAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,UAAkB,EAAE,WAAmB;IAChE,qDAAqD;IACrD,IAAI,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAErC,MAAM,CAAC,EAAE,AAAD,EAAG,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;QAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAEvC,MAAM,YAAY,GAAG,MAAM;aACxB,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC;aAC/D,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEnB,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAC9B,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CACjC,CAAC;IACJ,CAAC;IAED,wDAAwD;IACxD,IAAI,WAAW,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAErC,MAAM,CAAC,EAAE,AAAD,EAAG,IAAI,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;QAErC,MAAM,YAAY,GAAG,MAAM;aACxB,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC;aAClD,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEnB,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAC9B,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CACjC,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAC3B,UAAkB,EAClB,WAAmB,EACnB,YAAyC,QAAQ,EACjD,OAAe,EAAE;IAEjB,MAAM,YAAY,GAAG,MAAM;SACxB,UAAU,CAAC,SAAS,CAAC;SACrB,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC;SACzB,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,EAC/B,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CACjC,CAAC;AACJ,CAAC"}

package/dist/database/presave/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Pre-save operations module
+ *
+ * Provides data transformation, encryption, hashing, validation,
+ * and other operations that run before database writes.
+ */
+export { PreSaveProcessor, PreSave } from './presave-processor';
+export { decrypt, decryptFields, verifyHash, verifyShaHash } from './decrypt';
+export type { PreSaveOperationType, IPreSaveOperation, IPreSaveBaseOptions, IPreSaveEncryptOptions, IPreSaveHashOptions, IPreSaveMaskOptions, IPreSaveValidateOptions, IPreSaveTransformOptions, IPreSaveSlugOptions, IPreSaveTruncateOptions, IPreSaveRoundOptions, IPreSaveClampOptions, IPreSaveDefaultOptions, IPreSaveComputeOptions, IPreSaveSimpleOptions, IValidationRule, IValidationError, IPreSaveConfig, IPreSaveResult, IAppliedOperation, ISchemaPreSaveConfig, } from '../types/presave.interface';

package/dist/database/presave/index.js

@@ -0,0 +1,18 @@
+"use strict";
+/**
+ * Pre-save operations module
+ *
+ * Provides data transformation, encryption, hashing, validation,
+ * and other operations that run before database writes.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyShaHash = exports.verifyHash = exports.decryptFields = exports.decrypt = exports.PreSave = exports.PreSaveProcessor = void 0;
+var presave_processor_1 = require("./presave-processor");
+Object.defineProperty(exports, "PreSaveProcessor", { enumerable: true, get: function () { return presave_processor_1.PreSaveProcessor; } });
+Object.defineProperty(exports, "PreSave", { enumerable: true, get: function () { return presave_processor_1.PreSave; } });
+var decrypt_1 = require("./decrypt");
+Object.defineProperty(exports, "decrypt", { enumerable: true, get: function () { return decrypt_1.decrypt; } });
+Object.defineProperty(exports, "decryptFields", { enumerable: true, get: function () { return decrypt_1.decryptFields; } });
+Object.defineProperty(exports, "verifyHash", { enumerable: true, get: function () { return decrypt_1.verifyHash; } });
+Object.defineProperty(exports, "verifyShaHash", { enumerable: true, get: function () { return decrypt_1.verifyShaHash; } });
+//# sourceMappingURL=index.js.map

package/dist/database/presave/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/database/presave/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,yDAAgE;AAAvD,qHAAA,gBAAgB,OAAA;AAAE,4GAAA,OAAO,OAAA;AAClC,qCAA8E;AAArE,kGAAA,OAAO,OAAA;AAAE,wGAAA,aAAa,OAAA;AAAE,qGAAA,UAAU,OAAA;AAAE,wGAAA,aAAa,OAAA"}

package/dist/database/presave/presave-processor.d.ts

@@ -0,0 +1,148 @@
+/**
+ * Pre-Save Processor
+ *
+ * Processes data before database write operations by applying
+ * encryption, hashing, validation, transformation, and other operations.
+ */
+import { IPreSaveOperation, IPreSaveConfig, IPreSaveResult, IPreSaveEncryptOptions, IPreSaveHashOptions, IPreSaveMaskOptions, IPreSaveValidateOptions, IPreSaveTransformOptions, IPreSaveSlugOptions, IPreSaveTruncateOptions, IPreSaveRoundOptions, IPreSaveClampOptions, IPreSaveDefaultOptions, IPreSaveComputeOptions, IValidationRule } from '../types/presave.interface';
+/**
+ * Pre-save processor for applying transformations before database writes
+ */
+export declare class PreSaveProcessor {
+    private config;
+    constructor(config?: IPreSaveConfig);
+    /**
+     * Process data through pre-save operations
+     */
+    process(data: Record<string, any> | Record<string, any>[], operations: IPreSaveOperation[]): Promise<IPreSaveResult>;
+    /**
+     * Sort operations for proper execution order
+     */
+    private sortOperations;
+    /**
+     * Apply a single operation to a record
+     */
+    private applyOperation;
+    /**
+     * Execute a specific operation
+     */
+    private executeOperation;
+    /**
+     * Encrypt a field value
+     */
+    private encrypt;
+    /**
+     * Hash a field value (one-way)
+     */
+    private hash;
+    /**
+     * Mask sensitive data
+     */
+    private mask;
+    /**
+     * Validate field value
+     */
+    private validate;
+    /**
+     * Check a single validation rule
+     */
+    private checkValidationRule;
+    /**
+     * Get default validation error message
+     */
+    private getDefaultValidationMessage;
+    /**
+     * Apply custom transformation
+     */
+    private transform;
+    /**
+     * Generate slug from source field
+     */
+    private generateSlug;
+    /**
+     * Truncate string to max length
+     */
+    private truncate;
+    /**
+     * Round number to decimals
+     */
+    private round;
+    /**
+     * Clamp number to range
+     */
+    private clamp;
+    /**
+     * Apply default value if null/undefined
+     */
+    private applyDefault;
+    /**
+     * Compute derived field
+     */
+    private compute;
+    /**
+     * Sanitize HTML/script tags
+     */
+    private sanitizeHtml;
+    /**
+     * Generate UUID v4
+     */
+    private generateUUID;
+    /**
+     * Normalize phone number
+     */
+    private normalizePhone;
+    /**
+     * Normalize email
+     */
+    private normalizeEmail;
+    /**
+     * Create an encryption operation
+     */
+    static encrypt(field: string, options?: Partial<Omit<IPreSaveEncryptOptions, 'type' | 'field'>>): IPreSaveEncryptOptions;
+    /**
+     * Create a hash operation
+     */
+    static hash(field: string, options?: Partial<Omit<IPreSaveHashOptions, 'type' | 'field'>>): IPreSaveHashOptions;
+    /**
+     * Create a mask operation
+     */
+    static mask(field: string, pattern: IPreSaveMaskOptions['pattern'], options?: Partial<Omit<IPreSaveMaskOptions, 'type' | 'field' | 'pattern'>>): IPreSaveMaskOptions;
+    /**
+     * Create a validate operation
+     */
+    static validate(field: string, rules: IValidationRule[], options?: Partial<Omit<IPreSaveValidateOptions, 'type' | 'field' | 'rules'>>): IPreSaveValidateOptions;
+    /**
+     * Create a transform operation
+     */
+    static transform(field: string, transformer: IPreSaveTransformOptions['transformer']): IPreSaveTransformOptions;
+    /**
+     * Create a slug operation
+     */
+    static slug(field: string, sourceField: string, options?: Partial<Omit<IPreSaveSlugOptions, 'type' | 'field' | 'sourceField'>>): IPreSaveSlugOptions;
+    /**
+     * Create a compute operation
+     */
+    static compute(field: string, compute: IPreSaveComputeOptions['compute'], dependsOn?: string[]): IPreSaveComputeOptions;
+    /**
+     * Create a default operation
+     */
+    static default(field: string, value: any): IPreSaveDefaultOptions;
+    /**
+     * Create simple operation helpers
+     */
+    static trim(field: string): IPreSaveOperation;
+    static lowercase(field: string): IPreSaveOperation;
+    static uppercase(field: string): IPreSaveOperation;
+    static sanitize(field: string): IPreSaveOperation;
+    static uuid(field: string): IPreSaveOperation;
+    static timestamp(field: string): IPreSaveOperation;
+    static normalizeEmail(field: string): IPreSaveOperation;
+    static normalizePhone(field: string): IPreSaveOperation;
+    static truncate(field: string, maxLength: number, options?: Partial<Omit<IPreSaveTruncateOptions, 'type' | 'field' | 'maxLength'>>): IPreSaveTruncateOptions;
+    static round(field: string, decimals?: number, mode?: 'round' | 'floor' | 'ceil'): IPreSaveRoundOptions;
+    static clamp(field: string, min?: number, max?: number): IPreSaveClampOptions;
+}
+/**
+ * Convenience export for operation builder
+ */
+export declare const PreSave: typeof PreSaveProcessor;