@fased/fased 0.1.55 → 0.1.57

package/dist/plugin-sdk/ws-CocpWGhl.js

@@ -1,114 +0,0 @@
-import { a as isIpInCidr, c as isLoopbackIpAddress, l as normalizeIpAddress } from "./ip-C70a-YlD.js";
-import os from "node:os";
-import net from "node:net";
-import { Buffer } from "node:buffer";
-
-//#region src/gateway/net.ts
-function isLoopbackAddress(ip) {
-	return isLoopbackIpAddress(ip);
-}
-function normalizeIp(ip) {
-	return normalizeIpAddress(ip);
-}
-function stripOptionalPort(ip) {
-	if (ip.startsWith("[")) {
-		const end = ip.indexOf("]");
-		if (end !== -1) return ip.slice(1, end);
-	}
-	if (net.isIP(ip)) return ip;
-	const lastColon = ip.lastIndexOf(":");
-	if (lastColon > -1 && ip.includes(".") && ip.indexOf(":") === lastColon) {
-		const candidate = ip.slice(0, lastColon);
-		if (net.isIP(candidate) === 4) return candidate;
-	}
-	return ip;
-}
-function parseIpLiteral(raw) {
-	const trimmed = raw?.trim();
-	if (!trimmed) return;
-	const normalized = normalizeIp(stripOptionalPort(trimmed));
-	if (!normalized || net.isIP(normalized) === 0) return;
-	return normalized;
-}
-function parseRealIp(realIp) {
-	return parseIpLiteral(realIp);
-}
-function resolveForwardedClientIp(params) {
-	const { forwardedFor, trustedProxies } = params;
-	if (!trustedProxies?.length) return;
-	const forwardedChain = [];
-	for (const entry of forwardedFor?.split(",") ?? []) {
-		const normalized = parseIpLiteral(entry);
-		if (normalized) forwardedChain.push(normalized);
-	}
-	if (forwardedChain.length === 0) return;
-	for (let index = forwardedChain.length - 1; index >= 0; index -= 1) {
-		const hop = forwardedChain[index];
-		if (!isTrustedProxyAddress(hop, trustedProxies)) return hop;
-	}
-}
-function isTrustedProxyAddress(ip, trustedProxies) {
-	const normalized = normalizeIp(ip);
-	if (!normalized || !trustedProxies || trustedProxies.length === 0) return false;
-	return trustedProxies.some((proxy) => {
-		const candidate = proxy.trim();
-		if (!candidate) return false;
-		return isIpInCidr(normalized, candidate);
-	});
-}
-function resolveClientIp(params) {
-	const remote = normalizeIp(params.remoteAddr);
-	if (!remote) return;
-	if (!isTrustedProxyAddress(remote, params.trustedProxies)) return remote;
-	const forwardedIp = resolveForwardedClientIp({
-		forwardedFor: params.forwardedFor,
-		trustedProxies: params.trustedProxies
-	});
-	if (forwardedIp) return forwardedIp;
-	if (params.allowRealIpFallback) return parseRealIp(params.realIp);
-}
-/**
-* Check if a hostname or IP refers to the local machine.
-* Handles: localhost, 127.x.x.x, ::1, [::1], ::ffff:127.x.x.x
-* Note: 0.0.0.0 and :: are NOT loopback - they bind to all interfaces.
-*/
-function isLoopbackHost(host) {
-	if (!host) return false;
-	const h = host.trim().toLowerCase();
-	if (h === "localhost") return true;
-	return isLoopbackAddress(h.startsWith("[") && h.endsWith("]") ? h.slice(1, -1) : h);
-}
-/**
-* Security check for WebSocket URLs (CWE-319: Cleartext Transmission of Sensitive Information).
-*
-* Returns true if the URL is secure for transmitting data:
-* - wss:// (TLS) is always secure
-* - ws:// is only secure for loopback addresses (localhost, 127.x.x.x, ::1)
-*
-* All other ws:// URLs are considered insecure because both credentials
-* AND chat/conversation data would be exposed to network interception.
-*/
-function isSecureWebSocketUrl(url) {
-	let parsed;
-	try {
-		parsed = new URL(url);
-	} catch {
-		return false;
-	}
-	if (parsed.protocol === "wss:") return true;
-	if (parsed.protocol !== "ws:") return false;
-	return isLoopbackHost(parsed.hostname);
-}
-
-//#endregion
-//#region src/infra/ws.ts
-function rawDataToString(data, encoding = "utf8") {
-	if (typeof data === "string") return data;
-	if (Buffer.isBuffer(data)) return data.toString(encoding);
-	if (Array.isArray(data)) return Buffer.concat(data).toString(encoding);
-	if (data instanceof ArrayBuffer) return Buffer.from(data).toString(encoding);
-	return Buffer.from(String(data)).toString(encoding);
-}
-
-//#endregion
-export { isTrustedProxyAddress as a, isSecureWebSocketUrl as i, isLoopbackAddress as n, resolveClientIp as o, isLoopbackHost as r, resolveForwardedClientIp as s, rawDataToString as t };