@loxia-labs/loxia-autopilot-one 1.0.1 → 1.0.3

package/src/utilities/attachmentValidator.js

@@ -1,292 +1 @@
-/**
- * Attachment Validator
- * Validates file attachments for security and size constraints
- */
-
-import path from 'path';
-import { fileURLToPath } from 'url';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-// Constants
-const SIZE_LIMITS = {
-  content: 1024 * 1024,      // 1MB for content mode
-  reference: Number.MAX_VALUE // No limit for reference mode (just metadata)
-};
-
-const SIZE_WARNING_THRESHOLD = {
-  yellow: 100 * 1024,  // 100KB
-  red: 1024 * 1024     // 1MB
-};
-
-const BLOCKED_EXTENSIONS = [
-  '.exe', '.dll', '.so', '.dylib',
-  '.sh', '.bat', '.cmd', '.ps1',
-  '.app', '.dmg', '.deb', '.rpm',
-  '.msi', '.pkg', '.apk', '.jar'
-];
-
-const SUPPORTED_TEXT_EXTENSIONS = [
-  '.txt', '.md', '.js', '.jsx', '.ts', '.tsx',
-  '.json', '.xml', '.html', '.css', '.scss',
-  '.py', '.java', '.cpp', '.c', '.h',
-  '.go', '.rs', '.rb', '.php', '.sh',
-  '.yml', '.yaml', '.toml', '.env',
-  '.log', '.sql', '.vue', '.svelte'
-];
-
-const SUPPORTED_IMAGE_EXTENSIONS = [
-  '.jpg', '.jpeg', '.png', '.gif',
-  '.webp', '.bmp', '.svg'
-];
-
-const SUPPORTED_PDF_EXTENSIONS = ['.pdf'];
-
-class AttachmentValidator {
-  constructor(config = {}, logger = null) {
-    this.config = config;
-    this.logger = logger;
-  }
-
-  /**
-   * Validate file size
-   * @param {number} size - File size in bytes
-   * @param {string} mode - 'content' or 'reference'
-   * @returns {Object} { valid: boolean, error?: string, warning?: string, level?: string }
-   */
-  validateSize(size, mode = 'content') {
-    const limit = SIZE_LIMITS[mode];
-
-    if (size > limit) {
-      return {
-        valid: false,
-        error: `File size (${this.formatBytes(size)}) exceeds ${mode} mode limit (${this.formatBytes(limit)})`
-      };
-    }
-
-    // Check warning thresholds
-    if (mode === 'content') {
-      if (size > SIZE_WARNING_THRESHOLD.red) {
-        return {
-          valid: true,
-          warning: `This file is large (${this.formatBytes(size)}) and will consume significant tokens`,
-          level: 'red'
-        };
-      } else if (size > SIZE_WARNING_THRESHOLD.yellow) {
-        return {
-          valid: true,
-          warning: `This file is moderately large (${this.formatBytes(size)})`,
-          level: 'yellow'
-        };
-      }
-    }
-
-    return { valid: true, level: 'green' };
-  }
-
-  /**
-   * Validate file type (block executables)
-   * @param {string} fileName - File name
-   * @returns {Object} { valid: boolean, error?: string }
-   */
-  validateFileType(fileName) {
-    const ext = path.extname(fileName).toLowerCase();
-
-    if (this.isExecutable(fileName)) {
-      return {
-        valid: false,
-        error: `Executable files (${ext}) are not allowed for security reasons`
-      };
-    }
-
-    return { valid: true };
-  }
-
-  /**
-   * Check if file is executable
-   * @param {string} fileName - File name
-   * @returns {boolean}
-   */
-  isExecutable(fileName) {
-    const ext = path.extname(fileName).toLowerCase();
-    return BLOCKED_EXTENSIONS.includes(ext);
-  }
-
-  /**
-   * Validate file path (for reference mode)
-   * @param {string} filePath - File path
-   * @returns {Object} { valid: boolean, error?: string }
-   */
-  validatePath(filePath) {
-    // Check for directory traversal attempts
-    const normalizedPath = path.normalize(filePath);
-
-    if (normalizedPath.includes('..')) {
-      return {
-        valid: false,
-        error: 'Directory traversal is not allowed'
-      };
-    }
-
-    // Check for absolute paths to system directories (Unix)
-    const systemDirs = ['/etc', '/bin', '/sbin', '/usr/bin', '/usr/sbin', '/sys', '/proc'];
-    if (systemDirs.some(dir => normalizedPath.startsWith(dir))) {
-      return {
-        valid: false,
-        error: 'Access to system directories is not allowed'
-      };
-    }
-
-    // Check for Windows system directories
-    const winSystemDirs = ['C:\\Windows', 'C:\\Program Files', 'C:\\Program Files (x86)'];
-    if (winSystemDirs.some(dir => normalizedPath.startsWith(dir))) {
-      return {
-        valid: false,
-        error: 'Access to system directories is not allowed'
-      };
-    }
-
-    return { valid: true };
-  }
-
-  /**
-   * Get content type from file extension
-   * @param {string} fileName - File name
-   * @returns {string} - 'text' | 'image' | 'pdf' | 'binary'
-   */
-  getContentType(fileName) {
-    const ext = path.extname(fileName).toLowerCase();
-
-    if (SUPPORTED_TEXT_EXTENSIONS.includes(ext)) {
-      return 'text';
-    }
-    if (SUPPORTED_IMAGE_EXTENSIONS.includes(ext)) {
-      return 'image';
-    }
-    if (SUPPORTED_PDF_EXTENSIONS.includes(ext)) {
-      return 'pdf';
-    }
-    return 'binary';
-  }
-
-  /**
-   * Check if file type is supported
-   * @param {string} fileName - File name
-   * @returns {boolean}
-   */
-  isSupported(fileName) {
-    const contentType = this.getContentType(fileName);
-    return contentType !== 'binary';
-  }
-
-  /**
-   * Validate all aspects of an attachment
-   * @param {Object} options
-   * @param {string} options.fileName - File name
-   * @param {number} options.size - File size in bytes
-   * @param {string} options.mode - 'content' or 'reference'
-   * @param {string} options.path - File path (for reference mode)
-   * @returns {Object} { valid: boolean, errors: string[], warnings: string[], sizeLevel: string }
-   */
-  validate({ fileName, size, mode = 'content', path: filePath = null }) {
-    const errors = [];
-    const warnings = [];
-    let sizeLevel = 'green';
-
-    // Validate file type
-    const typeValidation = this.validateFileType(fileName);
-    if (!typeValidation.valid) {
-      errors.push(typeValidation.error);
-    }
-
-    // Validate size
-    const sizeValidation = this.validateSize(size, mode);
-    if (!sizeValidation.valid) {
-      errors.push(sizeValidation.error);
-    } else if (sizeValidation.warning) {
-      warnings.push(sizeValidation.warning);
-      sizeLevel = sizeValidation.level;
-    }
-
-    // Validate path (reference mode only)
-    if (mode === 'reference' && filePath) {
-      const pathValidation = this.validatePath(filePath);
-      if (!pathValidation.valid) {
-        errors.push(pathValidation.error);
-      }
-    }
-
-    // Check if file type is supported
-    if (!this.isSupported(fileName)) {
-      warnings.push(`File type may not be fully supported (${path.extname(fileName)})`);
-    }
-
-    return {
-      valid: errors.length === 0,
-      errors,
-      warnings,
-      sizeLevel
-    };
-  }
-
-  /**
-   * Format bytes to human-readable string
-   * @param {number} bytes
-   * @returns {string}
-   */
-  formatBytes(bytes) {
-    if (bytes === 0) return '0 Bytes';
-    const k = 1024;
-    const sizes = ['Bytes', 'KB', 'MB', 'GB'];
-    const i = Math.floor(Math.log(bytes) / Math.log(k));
-    return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];
-  }
-
-  /**
-   * Get MIME type from file extension
-   * @param {string} fileName - File name
-   * @returns {string}
-   */
-  getMimeType(fileName) {
-    const ext = path.extname(fileName).toLowerCase();
-    const mimeTypes = {
-      // Text
-      '.txt': 'text/plain',
-      '.md': 'text/markdown',
-      '.json': 'application/json',
-      '.xml': 'application/xml',
-      '.html': 'text/html',
-      '.css': 'text/css',
-      '.js': 'text/javascript',
-      '.jsx': 'text/javascript',
-      '.ts': 'text/typescript',
-      '.tsx': 'text/typescript',
-      '.py': 'text/x-python',
-      '.java': 'text/x-java',
-      '.cpp': 'text/x-c++',
-      '.c': 'text/x-c',
-      '.yml': 'text/yaml',
-      '.yaml': 'text/yaml',
-
-      // Images
-      '.jpg': 'image/jpeg',
-      '.jpeg': 'image/jpeg',
-      '.png': 'image/png',
-      '.gif': 'image/gif',
-      '.webp': 'image/webp',
-      '.bmp': 'image/bmp',
-      '.svg': 'image/svg+xml',
-
-      // PDF
-      '.pdf': 'application/pdf',
-
-      // Default
-      'default': 'application/octet-stream'
-    };
-
-    return mimeTypes[ext] || mimeTypes['default'];
-  }
-}
-
-export default AttachmentValidator;
+const a0_0x4c86e0=a0_0x3518;(function(_0x59dfb8,_0x17fc46){const _0x1abf1c=a0_0x3518,_0x159956=_0x59dfb8();while(!![]){try{const _0x4f90bf=parseInt(_0x1abf1c(0x15d))/0x1+parseInt(_0x1abf1c(0x153))/0x2+-parseInt(_0x1abf1c(0x169))/0x3+-parseInt(_0x1abf1c(0x155))/0x4*(-parseInt(_0x1abf1c(0x177))/0x5)+parseInt(_0x1abf1c(0x164))/0x6*(parseInt(_0x1abf1c(0x14a))/0x7)+parseInt(_0x1abf1c(0x150))/0x8*(-parseInt(_0x1abf1c(0x138))/0x9)+-parseInt(_0x1abf1c(0x149))/0xa;if(_0x4f90bf===_0x17fc46)break;else _0x159956['push'](_0x159956['shift']());}catch(_0xf3de16){_0x159956['push'](_0x159956['shift']());}}}(a0_0x2399,0x4a0c7));import a0_0x4f969e from'path';import{fileURLToPath}from'url';function a0_0x3518(_0x3385ea,_0x64c0a0){_0x3385ea=_0x3385ea-0x138;const _0x23997f=a0_0x2399();let _0x3518a9=_0x23997f[_0x3385ea];if(a0_0x3518['IogZIn']===undefined){var _0x1d2c89=function(_0x5f08b2){const _0x453619='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x4f969e='',_0x2c9986='';for(let _0x3bbe0b=0x0,_0x184a73,_0xfddd62,_0x3d36b1=0x0;_0xfddd62=_0x5f08b2['charAt'](_0x3d36b1++);~_0xfddd62&&(_0x184a73=_0x3bbe0b%0x4?_0x184a73*0x40+_0xfddd62:_0xfddd62,_0x3bbe0b++%0x4)?_0x4f969e+=String['fromCharCode'](0xff&_0x184a73>>(-0x2*_0x3bbe0b&0x6)):0x0){_0xfddd62=_0x453619['indexOf'](_0xfddd62);}for(let _0x20c35f=0x0,_0x3f4c63=_0x4f969e['length'];_0x20c35f<_0x3f4c63;_0x20c35f++){_0x2c9986+='%'+('00'+_0x4f969e['charCodeAt'](_0x20c35f)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x2c9986);};a0_0x3518['GcFtvp']=_0x1d2c89,a0_0x3518['nPVIjP']={},a0_0x3518['IogZIn']=!![];}const _0x429e0f=_0x23997f[0x0],_0x48b9a2=_0x3385ea+_0x429e0f,_0x1dc1db=a0_0x3518['nPVIjP'][_0x48b9a2];return!_0x1dc1db?(_0x3518a9=a0_0x3518['GcFtvp'](_0x3518a9),a0_0x3518['nPVIjP'][_0x48b9a2]=_0x3518a9):_0x3518a9=_0x1dc1db,_0x3518a9;}const __filename=fileURLToPath(import.meta.url),__dirname=a0_0x4f969e[a0_0x4c86e0(0x13a)](__filename),SIZE_LIMITS={'content':0x400*0x400,'reference':Number[a0_0x4c86e0(0x142)]},SIZE_WARNING_THRESHOLD={'yellow':0x64*0x400,'red':0x400*0x400},BLOCKED_EXTENSIONS=[a0_0x4c86e0(0x18a),a0_0x4c86e0(0x141),'.so',a0_0x4c86e0(0x157),a0_0x4c86e0(0x13f),'.bat','.cmd','.ps1',a0_0x4c86e0(0x186),'.dmg','.deb','.rpm','.msi',a0_0x4c86e0(0x17f),'.apk',a0_0x4c86e0(0x172)],SUPPORTED_TEXT_EXTENSIONS=[a0_0x4c86e0(0x161),a0_0x4c86e0(0x179),'.js','.jsx',a0_0x4c86e0(0x15a),'.tsx',a0_0x4c86e0(0x188),'.xml','.html','.css','.scss',a0_0x4c86e0(0x143),a0_0x4c86e0(0x182),a0_0x4c86e0(0x146),'.c','.h','.go',a0_0x4c86e0(0x185),a0_0x4c86e0(0x13e),'.php','.sh',a0_0x4c86e0(0x151),'.yaml','.toml',a0_0x4c86e0(0x159),'.log','.sql','.vue','.svelte'],SUPPORTED_IMAGE_EXTENSIONS=['.jpg',a0_0x4c86e0(0x13d),'.png',a0_0x4c86e0(0x175),'.webp','.bmp','.svg'],SUPPORTED_PDF_EXTENSIONS=['.pdf'];class AttachmentValidator{constructor(_0x2c9986={},_0x3bbe0b=null){const _0x3aca83=a0_0x4c86e0;this[_0x3aca83(0x184)]=_0x2c9986,this[_0x3aca83(0x13b)]=_0x3bbe0b;}['validateSize'](_0x184a73,_0xfddd62='content'){const _0x97cc32=a0_0x4c86e0,_0x3d36b1=SIZE_LIMITS[_0xfddd62];if(_0x184a73>_0x3d36b1)return{'valid':![],'error':_0x97cc32(0x14f)+this['formatBytes'](_0x184a73)+')\x20exceeds\x20'+_0xfddd62+'\x20mode\x20limit\x20('+this[_0x97cc32(0x152)](_0x3d36b1)+')'};if(_0xfddd62==='content'){if(_0x184a73>SIZE_WARNING_THRESHOLD[_0x97cc32(0x174)])return{'valid':!![],'warning':_0x97cc32(0x156)+this[_0x97cc32(0x152)](_0x184a73)+')\x20and\x20will\x20consume\x20significant\x20tokens','level':_0x97cc32(0x174)};else{if(_0x184a73>SIZE_WARNING_THRESHOLD[_0x97cc32(0x15f)])return{'valid':!![],'warning':_0x97cc32(0x17e)+this['formatBytes'](_0x184a73)+')','level':'yellow'};}}return{'valid':!![],'level':'green'};}['validateFileType'](_0x20c35f){const _0x324f3b=a0_0x4c86e0,_0x3f4c63=a0_0x4f969e['extname'](_0x20c35f)[_0x324f3b(0x17a)]();if(this[_0x324f3b(0x16e)](_0x20c35f))return{'valid':![],'error':_0x324f3b(0x14b)+_0x3f4c63+')\x20are\x20not\x20allowed\x20for\x20security\x20reasons'};return{'valid':!![]};}['isExecutable'](_0x8fab23){const _0x1a72fa=a0_0x4c86e0,_0x33f8d8=a0_0x4f969e[_0x1a72fa(0x168)](_0x8fab23)['toLowerCase']();return BLOCKED_EXTENSIONS[_0x1a72fa(0x180)](_0x33f8d8);}[a0_0x4c86e0(0x165)](_0x13ca81){const _0x2d6898=a0_0x4c86e0,_0x40bcf9=a0_0x4f969e['normalize'](_0x13ca81);if(_0x40bcf9['includes']('..'))return{'valid':![],'error':'Directory\x20traversal\x20is\x20not\x20allowed'};const _0x8f0eda=['/etc',_0x2d6898(0x173),_0x2d6898(0x14d),'/usr/bin','/usr/sbin',_0x2d6898(0x187),'/proc'];if(_0x8f0eda[_0x2d6898(0x148)](_0x1e0464=>_0x40bcf9['startsWith'](_0x1e0464)))return{'valid':![],'error':_0x2d6898(0x18b)};const _0x2dd867=['C:\x5cWindows','C:\x5cProgram\x20Files',_0x2d6898(0x140)];if(_0x2dd867['some'](_0x431024=>_0x40bcf9[_0x2d6898(0x16c)](_0x431024)))return{'valid':![],'error':'Access\x20to\x20system\x20directories\x20is\x20not\x20allowed'};return{'valid':!![]};}['getContentType'](_0x425ee8){const _0x207aa1=a0_0x4c86e0,_0x24e718=a0_0x4f969e[_0x207aa1(0x168)](_0x425ee8)[_0x207aa1(0x17a)]();if(SUPPORTED_TEXT_EXTENSIONS[_0x207aa1(0x180)](_0x24e718))return'text';if(SUPPORTED_IMAGE_EXTENSIONS['includes'](_0x24e718))return _0x207aa1(0x13c);if(SUPPORTED_PDF_EXTENSIONS[_0x207aa1(0x180)](_0x24e718))return'pdf';return'binary';}[a0_0x4c86e0(0x176)](_0x136785){const _0x4690f1=a0_0x4c86e0,_0x299118=this[_0x4690f1(0x154)](_0x136785);return _0x299118!==_0x4690f1(0x160);}[a0_0x4c86e0(0x178)]({fileName:_0x4e12ff,size:_0x2489ba,mode:mode=a0_0x4c86e0(0x16a),path:_0x4370ba=null}){const _0x59f03f=a0_0x4c86e0,_0x1fa3df=[],_0x2d910e=[];let _0x38722b=_0x59f03f(0x15c);const _0x466b5e=this[_0x59f03f(0x17b)](_0x4e12ff);!_0x466b5e['valid']&&_0x1fa3df[_0x59f03f(0x17d)](_0x466b5e[_0x59f03f(0x189)]);const _0x4aa335=this[_0x59f03f(0x171)](_0x2489ba,mode);if(!_0x4aa335['valid'])_0x1fa3df[_0x59f03f(0x17d)](_0x4aa335[_0x59f03f(0x189)]);else _0x4aa335['warning']&&(_0x2d910e[_0x59f03f(0x17d)](_0x4aa335['warning']),_0x38722b=_0x4aa335[_0x59f03f(0x16b)]);if(mode===_0x59f03f(0x162)&&_0x4370ba){const _0x3d84fc=this['validatePath'](_0x4370ba);!_0x3d84fc[_0x59f03f(0x158)]&&_0x1fa3df['push'](_0x3d84fc['error']);}return!this[_0x59f03f(0x176)](_0x4e12ff)&&_0x2d910e['push']('File\x20type\x20may\x20not\x20be\x20fully\x20supported\x20('+a0_0x4f969e[_0x59f03f(0x168)](_0x4e12ff)+')'),{'valid':_0x1fa3df['length']===0x0,'errors':_0x1fa3df,'warnings':_0x2d910e,'sizeLevel':_0x38722b};}[a0_0x4c86e0(0x152)](_0x1609c2){const _0x1de735=a0_0x4c86e0;if(_0x1609c2===0x0)return _0x1de735(0x15e);const _0x1289d8=0x400,_0x2c2a5d=[_0x1de735(0x14e),'KB','MB','GB'],_0x74bb67=Math[_0x1de735(0x16f)](Math['log'](_0x1609c2)/Math[_0x1de735(0x147)](_0x1289d8));return parseFloat((_0x1609c2/Math[_0x1de735(0x170)](_0x1289d8,_0x74bb67))['toFixed'](0x2))+'\x20'+_0x2c2a5d[_0x74bb67];}[a0_0x4c86e0(0x17c)](_0x386136){const _0xc8dd58=a0_0x4c86e0,_0x341c9c=a0_0x4f969e['extname'](_0x386136)['toLowerCase'](),_0x3aaf2b={'.txt':'text/plain','.md':'text/markdown','.json':_0xc8dd58(0x167),'.xml':_0xc8dd58(0x144),'.html':_0xc8dd58(0x181),'.css':'text/css','.js':_0xc8dd58(0x183),'.jsx':'text/javascript','.ts':'text/typescript','.tsx':'text/typescript','.py':_0xc8dd58(0x145),'.java':'text/x-java','.cpp':_0xc8dd58(0x166),'.c':'text/x-c','.yml':'text/yaml','.yaml':'text/yaml','.jpg':_0xc8dd58(0x16d),'.jpeg':_0xc8dd58(0x16d),'.png':_0xc8dd58(0x163),'.gif':'image/gif','.webp':'image/webp','.bmp':'image/bmp','.svg':_0xc8dd58(0x139),'.pdf':_0xc8dd58(0x14c),'default':_0xc8dd58(0x15b)};return _0x3aaf2b[_0x341c9c]||_0x3aaf2b['default'];}}export default AttachmentValidator;function a0_0x2399(){const _0x55f7b6=['zgLYBMfTzq','Bg9Nz2vY','Aw1Hz2u','lMPWzwC','lNjI','lNnO','qZPCuhjVz3jHBsbgAwXLCYaOEdG2kq','lMrSBa','tufyx1zbtfvf','lNb5','yxbWBgLJyxrPB24VEg1S','Dgv4Dc94lxb5DgHVBG','lMnWCa','Bg9N','C29Tzq','mZaZodCWter5Aw9Z','n2TzyNvZsq','rxHLy3v0ywjSzsbMAwXLCYaO','yxbWBgLJyxrPB24VCgrM','l3nIAw4','qNL0zxm','rMLSzsbZAxPLicG','mZy1mdu2quH6vez4','lNLTBa','zM9YBwf0qNL0zxm','mtaWntiWmMP6uxrrsa','z2v0q29UDgvUDfr5Cgu','mtC2B2T6wKTm','vgHPCYbMAwXLigLZigXHCMDLicG','lMr5BgLI','DMfSAwq','lMvUDG','lNrZ','yxbWBgLJyxrPB24VB2n0zxqTC3rYzwfT','z3jLzw4','mZeZmdC1wMjltKrm','mcbcExrLCW','EwvSBg93','yMLUyxj5','lNr4Da','CMvMzxjLBMnL','Aw1Hz2uVCg5N','mtGYnte1ohzwrffiuq','DMfSAwrHDgvqyxrO','Dgv4Dc94lwmRkW','yxbWBgLJyxrPB24VANnVBG','zxH0BMfTzq','mtq5mtCXn3z0wK1wtG','y29UDgvUDa','Bgv2zwW','C3rHCNrZv2L0Aa','Aw1Hz2uVANbLzW','AxnfEgvJDxrHyMXL','zMXVB3i','Cg93','DMfSAwrHDgvtAxPL','lMPHCG','l2jPBG','CMvK','lMDPzG','AxntDxbWB3j0zwq','mtm4mZvgAe9Jy2u','DMfSAwrHDgu','lM1K','Dg9mB3DLCKnHC2u','DMfSAwrHDgvgAwXLvhLWzq','z2v0twLTzvr5Cgu','ChvZAa','vgHPCYbMAwXLigLZig1VzgvYyxrLBhKGBgfYz2uGka','lNbRzW','Aw5JBhvKzxm','Dgv4Dc9ODg1S','lMPHDMe','Dgv4Dc9QyxzHC2nYAxb0','y29UzMLN','lNjZ','lMfWCa','l3n5CW','lMPZB24','zxjYB3i','lMv4zq','qwnJzxnZihrVihn5C3rLBsbKAxjLy3rVCMLLCYbPCYbUB3qGywXSB3DLza','odfUvej0zg8','Aw1Hz2uVC3zNk3HTBa'];a0_0x2399=function(){return _0x55f7b6;};return a0_0x2399();}