@j3r3mcdev/oast-server 1.1.9 → 1.1.11

package/dist/core/router.d.ts

@@ -12,5 +12,6 @@ export declare class CoreRouter {
     private hooks;
     constructor(storage: Storage, options?: RouterOptions);
     dispatch(event: AnyNormalizedEvent): Promise<void>;
+    route(event: AnyNormalizedEvent): Promise<void>;
     addHook(hook: RouterHook): void;
 }

package/dist/core/router.js

@@ -9,11 +9,8 @@ class CoreRouter {
         this.hooks = options.hooks ?? [];
     }
     async dispatch(event) {
-        // 1. Log
         this.logger.info(`Event received (${event.type})`, { id: event.id });
-        // 2. Save
         await this.storage.save(event);
-        // 3. Hooks
         for (const hook of this.hooks) {
             try {
                 await hook(event);
@@ -23,6 +20,9 @@ class CoreRouter {
             }
         }
     }
+    async route(event) {
+        return this.dispatch(event);
+    }
     addHook(hook) {
         this.hooks.push(hook);
     }

package/dist/listeners/smtp/smtp.listener.js

@@ -13,10 +13,15 @@ class SmtpListener {
         this.logger.info("SMTP Listener started");
         this.server.onData = async (stream, session, callback) => {
             let chunks = [];
-            stream.on("data", (chunk) => {
+            const onData = (chunk) => {
                 chunks.push(chunk.toString());
-            });
-            stream.on("end", async () => {
+            };
+            const onEnd = async () => {
+                // 🔥 Compatible Node + Jest + mocks
+                if (stream.removeListener) {
+                    stream.removeListener("data", onData);
+                    stream.removeListener("end", onEnd);
+                }
                 const body = chunks.join("");
                 let event;
                 try {
@@ -37,13 +42,22 @@ class SmtpListener {
                     await this.router.dispatch(event);
                     callback(null);
                 }
-                catch (err) {
-                    callback(new Error("dispatch failed")); // ✔ EXACTEMENT ce que ton test attend
+                catch {
+                    callback(new Error("dispatch failed"));
                 }
-            });
+                // 🔥 Empêche les fuites de stream
+                if (stream.destroy) {
+                    stream.destroy();
+                }
+            };
+            stream.on("data", onData);
+            stream.on("end", onEnd);
         };
     }
     async stop() {
+        if (this.server) {
+            this.server.onData = undefined;
+        }
         if (this.server?.close) {
             this.server.close();
             this.logger.info("SMTP Listener stopped");

package/dist/types/event.types.d.ts

@@ -46,6 +46,11 @@ export interface RawWebSocketEvent {
     message: string;
     raw: any;
 }
+export interface RawApiEvent {
+    ip: string;
+    body: any;
+    raw: any;
+}
 export interface NormalizedHttpEvent {
     id: string;
     type: "http";
@@ -115,4 +120,14 @@ export interface NormalizedWebSocketEvent {
     sourceIp: string;
     message: string;
 }
-export type AnyNormalizedEvent = NormalizedHttpEvent | NormalizedDnsEvent | NormalizedSmtpEvent | NormalizedTcpEvent | NormalizedSsrfEvent | NormalizedWebhookEvent | NormalizedWebSocketEvent;
+export interface NormalizedApiEvent {
+    id: string;
+    type: "api";
+    timestamp: number;
+    sourceIp: string;
+    request: {
+        body: any;
+    };
+    raw: any;
+}
+export type AnyNormalizedEvent = NormalizedHttpEvent | NormalizedDnsEvent | NormalizedSmtpEvent | NormalizedTcpEvent | NormalizedSsrfEvent | NormalizedWebhookEvent | NormalizedWebSocketEvent | NormalizedApiEvent;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@j3r3mcdev/oast-server",
-  "version": "1.1.9",
+  "version": "1.1.11",
   "description": "Modular OAST callback server for security auditing",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/listeners/smtp/smtp.listener.ts

@@ -19,11 +19,17 @@ export class SmtpListener {
     this.server.onData = async (stream: any, session: any, callback: any) => {
       let chunks: string[] = [];
 
-      stream.on("data", (chunk: any) => {
+      const onData = (chunk: any) => {
         chunks.push(chunk.toString());
-      });
+      };
+
+      const onEnd = async () => {
+        // 🔥 Compatible Node + Jest + mocks
+        if (stream.removeListener) {
+          stream.removeListener("data", onData);
+          stream.removeListener("end", onEnd);
+        }
 
-      stream.on("end", async () => {
         const body = chunks.join("");
 
         let event;
@@ -44,14 +50,26 @@ export class SmtpListener {
         try {
           await this.router.dispatch(event);
           callback(null);
-        } catch (err) {
-          callback(new Error("dispatch failed")); // ✔ EXACTEMENT ce que ton test attend
+        } catch {
+          callback(new Error("dispatch failed"));
+        }
+
+        // 🔥 Empêche les fuites de stream
+        if (stream.destroy) {
+          stream.destroy();
         }
-      });
+      };
+
+      stream.on("data", onData);
+      stream.on("end", onEnd);
     };
   }
 
   async stop() {
+    if (this.server) {
+      this.server.onData = undefined;
+    }
+
     if (this.server?.close) {
       this.server.close();
       this.logger.info("SMTP Listener stopped");

package/src/types/event.types.ts

@@ -56,6 +56,12 @@ export interface RawWebSocketEvent {
   raw: any;
 }
 
+export interface RawApiEvent {
+  ip: string;
+  body: any;
+  raw: any;
+}
+
 //
 // NORMALIZED EVENTS
 //
@@ -104,6 +110,7 @@ export interface NormalizedTcpEvent {
   data: string;
   raw: any;
 }
+
 export interface NormalizedSsrfEvent {
   id: string;
   type: "ssrf";
@@ -134,6 +141,17 @@ export interface NormalizedWebSocketEvent {
   message: string;
 }
 
+export interface NormalizedApiEvent {
+  id: string;
+  type: "api";
+  timestamp: number;
+  sourceIp: string;
+  request: {
+    body: any;
+  };
+  raw: any;
+}
+
 //
 // UNION
 //
@@ -144,4 +162,5 @@ export type AnyNormalizedEvent =
   | NormalizedTcpEvent
   | NormalizedSsrfEvent
   | NormalizedWebhookEvent
-  | NormalizedWebSocketEvent;
+  | NormalizedWebSocketEvent
+  | NormalizedApiEvent;