@inkeep/agents-api 0.0.0-dev-20260320143859 → 0.0.0-dev-20260320150253

package/dist/domains/run/services/blob-storage/image-content-security.js

@@ -1,38 +0,0 @@
-import { ALLOWED_EXTERNAL_IMAGE_MIME_TYPES, MAX_EXTERNAL_IMAGE_BYTES } from "./image-security-constants.js";
-import { BlockedExternalUnsupportedBytesError, BlockedInlineImageExceedingError, BlockedInlineUnsupportedBytesError, InvalidInlineImageMalformedBase64Error } from "./image-security-errors.js";
-import { fileTypeFromBuffer } from "file-type";
-
-//#region src/domains/run/services/blob-storage/image-content-security.ts
-async function normalizeInlineImageBytes(file) {
-	const data = decodeBase64ImageBytes(file.bytes);
-	validateInlineImageSize(data);
-	const sniffedMime = await sniffAllowedImageMimeType(data);
-	if (sniffedMime) return {
-		data,
-		mimeType: sniffedMime
-	};
-	throw new BlockedInlineUnsupportedBytesError(file.mimeType || "unknown");
-}
-async function resolveDownloadedImageMimeType(data, headerContentType) {
-	const sniffedMime = await sniffAllowedImageMimeType(data);
-	if (sniffedMime) return sniffedMime;
-	throw new BlockedExternalUnsupportedBytesError(headerContentType || "unknown");
-}
-function validateInlineImageSize(data) {
-	if (data.length > MAX_EXTERNAL_IMAGE_BYTES) throw new BlockedInlineImageExceedingError(MAX_EXTERNAL_IMAGE_BYTES);
-}
-async function sniffAllowedImageMimeType(data) {
-	const sniffedMime = (await fileTypeFromBuffer(data))?.mime?.toLowerCase();
-	if (sniffedMime && ALLOWED_EXTERNAL_IMAGE_MIME_TYPES.has(sniffedMime)) return sniffedMime;
-	return null;
-}
-function decodeBase64ImageBytes(base64Bytes) {
-	const normalized = base64Bytes.replace(/\s+/g, "");
-	if (normalized.length === 0 || normalized.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(normalized)) throw new InvalidInlineImageMalformedBase64Error();
-	const decoded = Buffer.from(normalized, "base64");
-	if (decoded.length === 0 || decoded.toString("base64") !== normalized) throw new InvalidInlineImageMalformedBase64Error();
-	return Uint8Array.from(decoded);
-}
-
-//#endregion
-export { normalizeInlineImageBytes, resolveDownloadedImageMimeType };

package/dist/domains/run/services/blob-storage/image-security-errors.d.ts

@@ -1,66 +0,0 @@
-//#region src/domains/run/services/blob-storage/image-security-errors.d.ts
-declare class ImageSecurityError extends Error {
-  constructor(message: string, options?: ErrorOptions);
-}
-declare class InvalidExternalImageUrlError extends ImageSecurityError {
-  constructor(rawUrl: string);
-}
-declare class BlockedUnsupportedSchemeError extends ImageSecurityError {
-  constructor(protocol: string);
-}
-declare class BlockedDisallowedPortError extends ImageSecurityError {
-  constructor(port: string);
-}
-declare class BlockedEmbeddedCredentialsError extends ImageSecurityError {
-  constructor();
-}
-declare class NoIpResolvedError extends ImageSecurityError {
-  constructor(hostname: string);
-}
-declare class BlockedUrlResolvingToPrivateIpError extends ImageSecurityError {
-  constructor(ip: string);
-}
-declare class UnableToResolveHostError extends ImageSecurityError {
-  constructor(hostname: string, options?: ErrorOptions);
-}
-declare class BlockedConnectionToPrivateIpError extends ImageSecurityError {
-  constructor(address: string);
-}
-declare class RedirectMissingLocationError extends ImageSecurityError {
-  constructor(url: string);
-}
-declare class TooManyRedirectsError extends ImageSecurityError {
-  constructor(url: string);
-}
-declare class FailedToDownloadError extends ImageSecurityError {
-  constructor(url: string, statusText?: string, options?: ErrorOptions);
-}
-declare class BlockedExternalImageLargerThanError extends ImageSecurityError {
-  constructor(maxBytes: number, contentLength: string);
-}
-declare class BlockedExternalImageExceedingError extends ImageSecurityError {
-  constructor(maxBytes: number);
-}
-declare class ExternalImageResponseBodyEmptyError extends ImageSecurityError {
-  constructor();
-}
-declare class UnexpectedRedirectStateError extends ImageSecurityError {
-  constructor(url: string);
-}
-declare class TimedOutDownloadingError extends ImageSecurityError {
-  constructor(url: string);
-}
-declare class BlockedInlineImageExceedingError extends ImageSecurityError {
-  constructor(maxBytes: number);
-}
-declare class BlockedInlineUnsupportedBytesError extends ImageSecurityError {
-  constructor(claimedContentType: string);
-}
-declare class BlockedExternalUnsupportedBytesError extends ImageSecurityError {
-  constructor(contentType: string);
-}
-declare class InvalidInlineImageMalformedBase64Error extends ImageSecurityError {
-  constructor();
-}
-//#endregion
-export { BlockedConnectionToPrivateIpError, BlockedDisallowedPortError, BlockedEmbeddedCredentialsError, BlockedExternalImageExceedingError, BlockedExternalImageLargerThanError, BlockedExternalUnsupportedBytesError, BlockedInlineImageExceedingError, BlockedInlineUnsupportedBytesError, BlockedUnsupportedSchemeError, BlockedUrlResolvingToPrivateIpError, ExternalImageResponseBodyEmptyError, FailedToDownloadError, ImageSecurityError, InvalidExternalImageUrlError, InvalidInlineImageMalformedBase64Error, NoIpResolvedError, RedirectMissingLocationError, TimedOutDownloadingError, TooManyRedirectsError, UnableToResolveHostError, UnexpectedRedirectStateError };

package/dist/domains/run/services/blob-storage/image-security-errors.js

@@ -1,110 +0,0 @@
-//#region src/domains/run/services/blob-storage/image-security-errors.ts
-var ImageSecurityError = class extends Error {
-	constructor(message, options) {
-		super(message, options);
-		this.name = new.target.name;
-	}
-};
-var InvalidExternalImageUrlError = class extends ImageSecurityError {
-	constructor(rawUrl) {
-		super(`Invalid external image URL: ${rawUrl}`);
-	}
-};
-var BlockedUnsupportedSchemeError = class extends ImageSecurityError {
-	constructor(protocol) {
-		super(`Blocked external image URL with unsupported scheme: ${protocol}`);
-	}
-};
-var BlockedDisallowedPortError = class extends ImageSecurityError {
-	constructor(port) {
-		super(`Blocked external image URL with disallowed port: ${port}`);
-	}
-};
-var BlockedEmbeddedCredentialsError = class extends ImageSecurityError {
-	constructor() {
-		super("Blocked external image URL with embedded credentials");
-	}
-};
-var NoIpResolvedError = class extends ImageSecurityError {
-	constructor(hostname) {
-		super(`No IP addresses resolved for host: ${hostname}`);
-	}
-};
-var BlockedUrlResolvingToPrivateIpError = class extends ImageSecurityError {
-	constructor(ip) {
-		super(`Blocked external image URL resolving to private or reserved IP: ${ip}`);
-	}
-};
-var UnableToResolveHostError = class extends ImageSecurityError {
-	constructor(hostname, options) {
-		super(`Unable to resolve external image host: ${hostname}`, options);
-	}
-};
-var BlockedConnectionToPrivateIpError = class extends ImageSecurityError {
-	constructor(address) {
-		super(`Blocked external image connection to private or reserved IP: ${address}`);
-	}
-};
-var RedirectMissingLocationError = class extends ImageSecurityError {
-	constructor(url) {
-		super(`Redirect response missing location header: ${url}`);
-	}
-};
-var TooManyRedirectsError = class extends ImageSecurityError {
-	constructor(url) {
-		super(`Too many redirects while downloading image: ${url}`);
-	}
-};
-var FailedToDownloadError = class extends ImageSecurityError {
-	constructor(url, statusText, options) {
-		super(statusText ? `Failed to download image from ${url}: ${statusText}` : `Failed to download image from ${url}`, options);
-	}
-};
-var BlockedExternalImageLargerThanError = class extends ImageSecurityError {
-	constructor(maxBytes, contentLength) {
-		super(`Blocked external image larger than ${maxBytes} bytes: ${contentLength}`);
-	}
-};
-var BlockedExternalImageExceedingError = class extends ImageSecurityError {
-	constructor(maxBytes) {
-		super(`Blocked external image exceeding ${maxBytes} bytes`);
-	}
-};
-var ExternalImageResponseBodyEmptyError = class extends ImageSecurityError {
-	constructor() {
-		super("External image response body is empty");
-	}
-};
-var UnexpectedRedirectStateError = class extends ImageSecurityError {
-	constructor(url) {
-		super(`Unexpected redirect handling state for URL: ${url}`);
-	}
-};
-var TimedOutDownloadingError = class extends ImageSecurityError {
-	constructor(url) {
-		super(`Timed out downloading image from ${url}`);
-	}
-};
-var BlockedInlineImageExceedingError = class extends ImageSecurityError {
-	constructor(maxBytes) {
-		super(`Blocked inline image exceeding ${maxBytes} bytes`);
-	}
-};
-var BlockedInlineUnsupportedBytesError = class extends ImageSecurityError {
-	constructor(claimedContentType) {
-		super(`Blocked inline image with unsupported bytes signature (claimed content-type: ${claimedContentType})`);
-	}
-};
-var BlockedExternalUnsupportedBytesError = class extends ImageSecurityError {
-	constructor(contentType) {
-		super(`Blocked external image with unsupported bytes signature (content-type: ${contentType})`);
-	}
-};
-var InvalidInlineImageMalformedBase64Error = class extends ImageSecurityError {
-	constructor() {
-		super("Invalid inline image: malformed base64 payload");
-	}
-};
-
-//#endregion
-export { BlockedConnectionToPrivateIpError, BlockedDisallowedPortError, BlockedEmbeddedCredentialsError, BlockedExternalImageExceedingError, BlockedExternalImageLargerThanError, BlockedExternalUnsupportedBytesError, BlockedInlineImageExceedingError, BlockedInlineUnsupportedBytesError, BlockedUnsupportedSchemeError, BlockedUrlResolvingToPrivateIpError, ExternalImageResponseBodyEmptyError, FailedToDownloadError, ImageSecurityError, InvalidExternalImageUrlError, InvalidInlineImageMalformedBase64Error, NoIpResolvedError, RedirectMissingLocationError, TimedOutDownloadingError, TooManyRedirectsError, UnableToResolveHostError, UnexpectedRedirectStateError };

package/dist/domains/run/services/blob-storage/image-url-security.d.ts

@@ -1,6 +0,0 @@
-//#region src/domains/run/services/blob-storage/image-url-security.d.ts
-declare function validateExternalImageUrl(rawUrl: string): URL;
-declare function validateUrlResolvesToPublicIp(url: URL): Promise<void>;
-declare function isBlockedIpAddress(ipAddress: string): boolean;
-//#endregion
-export { isBlockedIpAddress, validateExternalImageUrl, validateUrlResolvesToPublicIp };