@loxia-labs/loxia-autopilot-one 1.0.1 → 1.0.4

package/src/utilities/attachmentValidator.js

@@ -1,292 +1 @@
-/**
- * Attachment Validator
- * Validates file attachments for security and size constraints
- */
-
-import path from 'path';
-import { fileURLToPath } from 'url';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-// Constants
-const SIZE_LIMITS = {
-  content: 1024 * 1024,      // 1MB for content mode
-  reference: Number.MAX_VALUE // No limit for reference mode (just metadata)
-};
-
-const SIZE_WARNING_THRESHOLD = {
-  yellow: 100 * 1024,  // 100KB
-  red: 1024 * 1024     // 1MB
-};
-
-const BLOCKED_EXTENSIONS = [
-  '.exe', '.dll', '.so', '.dylib',
-  '.sh', '.bat', '.cmd', '.ps1',
-  '.app', '.dmg', '.deb', '.rpm',
-  '.msi', '.pkg', '.apk', '.jar'
-];
-
-const SUPPORTED_TEXT_EXTENSIONS = [
-  '.txt', '.md', '.js', '.jsx', '.ts', '.tsx',
-  '.json', '.xml', '.html', '.css', '.scss',
-  '.py', '.java', '.cpp', '.c', '.h',
-  '.go', '.rs', '.rb', '.php', '.sh',
-  '.yml', '.yaml', '.toml', '.env',
-  '.log', '.sql', '.vue', '.svelte'
-];
-
-const SUPPORTED_IMAGE_EXTENSIONS = [
-  '.jpg', '.jpeg', '.png', '.gif',
-  '.webp', '.bmp', '.svg'
-];
-
-const SUPPORTED_PDF_EXTENSIONS = ['.pdf'];
-
-class AttachmentValidator {
-  constructor(config = {}, logger = null) {
-    this.config = config;
-    this.logger = logger;
-  }
-
-  /**
-   * Validate file size
-   * @param {number} size - File size in bytes
-   * @param {string} mode - 'content' or 'reference'
-   * @returns {Object} { valid: boolean, error?: string, warning?: string, level?: string }
-   */
-  validateSize(size, mode = 'content') {
-    const limit = SIZE_LIMITS[mode];
-
-    if (size > limit) {
-      return {
-        valid: false,
-        error: `File size (${this.formatBytes(size)}) exceeds ${mode} mode limit (${this.formatBytes(limit)})`
-      };
-    }
-
-    // Check warning thresholds
-    if (mode === 'content') {
-      if (size > SIZE_WARNING_THRESHOLD.red) {
-        return {
-          valid: true,
-          warning: `This file is large (${this.formatBytes(size)}) and will consume significant tokens`,
-          level: 'red'
-        };
-      } else if (size > SIZE_WARNING_THRESHOLD.yellow) {
-        return {
-          valid: true,
-          warning: `This file is moderately large (${this.formatBytes(size)})`,
-          level: 'yellow'
-        };
-      }
-    }
-
-    return { valid: true, level: 'green' };
-  }
-
-  /**
-   * Validate file type (block executables)
-   * @param {string} fileName - File name
-   * @returns {Object} { valid: boolean, error?: string }
-   */
-  validateFileType(fileName) {
-    const ext = path.extname(fileName).toLowerCase();
-
-    if (this.isExecutable(fileName)) {
-      return {
-        valid: false,
-        error: `Executable files (${ext}) are not allowed for security reasons`
-      };
-    }
-
-    return { valid: true };
-  }
-
-  /**
-   * Check if file is executable
-   * @param {string} fileName - File name
-   * @returns {boolean}
-   */
-  isExecutable(fileName) {
-    const ext = path.extname(fileName).toLowerCase();
-    return BLOCKED_EXTENSIONS.includes(ext);
-  }
-
-  /**
-   * Validate file path (for reference mode)
-   * @param {string} filePath - File path
-   * @returns {Object} { valid: boolean, error?: string }
-   */
-  validatePath(filePath) {
-    // Check for directory traversal attempts
-    const normalizedPath = path.normalize(filePath);
-
-    if (normalizedPath.includes('..')) {
-      return {
-        valid: false,
-        error: 'Directory traversal is not allowed'
-      };
-    }
-
-    // Check for absolute paths to system directories (Unix)
-    const systemDirs = ['/etc', '/bin', '/sbin', '/usr/bin', '/usr/sbin', '/sys', '/proc'];
-    if (systemDirs.some(dir => normalizedPath.startsWith(dir))) {
-      return {
-        valid: false,
-        error: 'Access to system directories is not allowed'
-      };
-    }
-
-    // Check for Windows system directories
-    const winSystemDirs = ['C:\\Windows', 'C:\\Program Files', 'C:\\Program Files (x86)'];
-    if (winSystemDirs.some(dir => normalizedPath.startsWith(dir))) {
-      return {
-        valid: false,
-        error: 'Access to system directories is not allowed'
-      };
-    }
-
-    return { valid: true };
-  }
-
-  /**
-   * Get content type from file extension
-   * @param {string} fileName - File name
-   * @returns {string} - 'text' | 'image' | 'pdf' | 'binary'
-   */
-  getContentType(fileName) {
-    const ext = path.extname(fileName).toLowerCase();
-
-    if (SUPPORTED_TEXT_EXTENSIONS.includes(ext)) {
-      return 'text';
-    }
-    if (SUPPORTED_IMAGE_EXTENSIONS.includes(ext)) {
-      return 'image';
-    }
-    if (SUPPORTED_PDF_EXTENSIONS.includes(ext)) {
-      return 'pdf';
-    }
-    return 'binary';
-  }
-
-  /**
-   * Check if file type is supported
-   * @param {string} fileName - File name
-   * @returns {boolean}
-   */
-  isSupported(fileName) {
-    const contentType = this.getContentType(fileName);
-    return contentType !== 'binary';
-  }
-
-  /**
-   * Validate all aspects of an attachment
-   * @param {Object} options
-   * @param {string} options.fileName - File name
-   * @param {number} options.size - File size in bytes
-   * @param {string} options.mode - 'content' or 'reference'
-   * @param {string} options.path - File path (for reference mode)
-   * @returns {Object} { valid: boolean, errors: string[], warnings: string[], sizeLevel: string }
-   */
-  validate({ fileName, size, mode = 'content', path: filePath = null }) {
-    const errors = [];
-    const warnings = [];
-    let sizeLevel = 'green';
-
-    // Validate file type
-    const typeValidation = this.validateFileType(fileName);
-    if (!typeValidation.valid) {
-      errors.push(typeValidation.error);
-    }
-
-    // Validate size
-    const sizeValidation = this.validateSize(size, mode);
-    if (!sizeValidation.valid) {
-      errors.push(sizeValidation.error);
-    } else if (sizeValidation.warning) {
-      warnings.push(sizeValidation.warning);
-      sizeLevel = sizeValidation.level;
-    }
-
-    // Validate path (reference mode only)
-    if (mode === 'reference' && filePath) {
-      const pathValidation = this.validatePath(filePath);
-      if (!pathValidation.valid) {
-        errors.push(pathValidation.error);
-      }
-    }
-
-    // Check if file type is supported
-    if (!this.isSupported(fileName)) {
-      warnings.push(`File type may not be fully supported (${path.extname(fileName)})`);
-    }
-
-    return {
-      valid: errors.length === 0,
-      errors,
-      warnings,
-      sizeLevel
-    };
-  }
-
-  /**
-   * Format bytes to human-readable string
-   * @param {number} bytes
-   * @returns {string}
-   */
-  formatBytes(bytes) {
-    if (bytes === 0) return '0 Bytes';
-    const k = 1024;
-    const sizes = ['Bytes', 'KB', 'MB', 'GB'];
-    const i = Math.floor(Math.log(bytes) / Math.log(k));
-    return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];
-  }
-
-  /**
-   * Get MIME type from file extension
-   * @param {string} fileName - File name
-   * @returns {string}
-   */
-  getMimeType(fileName) {
-    const ext = path.extname(fileName).toLowerCase();
-    const mimeTypes = {
-      // Text
-      '.txt': 'text/plain',
-      '.md': 'text/markdown',
-      '.json': 'application/json',
-      '.xml': 'application/xml',
-      '.html': 'text/html',
-      '.css': 'text/css',
-      '.js': 'text/javascript',
-      '.jsx': 'text/javascript',
-      '.ts': 'text/typescript',
-      '.tsx': 'text/typescript',
-      '.py': 'text/x-python',
-      '.java': 'text/x-java',
-      '.cpp': 'text/x-c++',
-      '.c': 'text/x-c',
-      '.yml': 'text/yaml',
-      '.yaml': 'text/yaml',
-
-      // Images
-      '.jpg': 'image/jpeg',
-      '.jpeg': 'image/jpeg',
-      '.png': 'image/png',
-      '.gif': 'image/gif',
-      '.webp': 'image/webp',
-      '.bmp': 'image/bmp',
-      '.svg': 'image/svg+xml',
-
-      // PDF
-      '.pdf': 'application/pdf',
-
-      // Default
-      'default': 'application/octet-stream'
-    };
-
-    return mimeTypes[ext] || mimeTypes['default'];
-  }
-}
-
-export default AttachmentValidator;
+const a0_0x138957=a0_0x2698;(function(_0x3b4ecc,_0xe3bb92){const _0x34640d=a0_0x2698,_0x4d799b=_0x3b4ecc();while(!![]){try{const _0x348625=-parseInt(_0x34640d(0xd7))/0x1+parseInt(_0x34640d(0xe3))/0x2+-parseInt(_0x34640d(0xe5))/0x3+-parseInt(_0x34640d(0xda))/0x4+-parseInt(_0x34640d(0xbb))/0x5+parseInt(_0x34640d(0xd3))/0x6+parseInt(_0x34640d(0xe4))/0x7*(parseInt(_0x34640d(0xff))/0x8);if(_0x348625===_0xe3bb92)break;else _0x4d799b['push'](_0x4d799b['shift']());}catch(_0xae0046){_0x4d799b['push'](_0x4d799b['shift']());}}}(a0_0x2d76,0x4b752));import a0_0x2ecf83 from'path';import{fileURLToPath}from'url';const __filename=fileURLToPath(import.meta.url),__dirname=a0_0x2ecf83['dirname'](__filename),SIZE_LIMITS={'content':0x400*0x400,'reference':Number[a0_0x138957(0xc4)]},SIZE_WARNING_THRESHOLD={'yellow':0x64*0x400,'red':0x400*0x400},BLOCKED_EXTENSIONS=['.exe','.dll',a0_0x138957(0xe9),'.dylib','.sh',a0_0x138957(0xf4),'.cmd','.ps1','.app','.dmg',a0_0x138957(0x100),a0_0x138957(0xfc),a0_0x138957(0xe0),'.pkg','.apk','.jar'],SUPPORTED_TEXT_EXTENSIONS=['.txt',a0_0x138957(0xec),a0_0x138957(0xc8),a0_0x138957(0xeb),'.ts',a0_0x138957(0x106),a0_0x138957(0xcd),'.xml','.html',a0_0x138957(0xc6),'.scss','.py','.java',a0_0x138957(0xcb),'.c','.h',a0_0x138957(0xdf),'.rs','.rb',a0_0x138957(0xf0),'.sh','.yml','.yaml','.toml',a0_0x138957(0xe2),'.log',a0_0x138957(0xbd),'.vue','.svelte'],SUPPORTED_IMAGE_EXTENSIONS=[a0_0x138957(0xdd),a0_0x138957(0xd0),'.png',a0_0x138957(0xc3),'.webp','.bmp',a0_0x138957(0xf7)],SUPPORTED_PDF_EXTENSIONS=['.pdf'];function a0_0x2d76(){const _0x48b940=['Dgv4Dc94lwmRkW','lMnWCa','qZPCuhjVz3jHBsbgAwXLCYaOEdG2kq','lMPZB24','yxbWBgLJyxrPB24VB2n0zxqTC3rYzwfT','Bg9N','lMPWzwC','yMLUyxj5','zxH0BMfTzq','ndCWodu2uhzAywzl','Dgv4Dc9ODg1S','CgrM','yxbWBgLJyxrPB24VANnVBG','mteWode1sxbgzu9A','zM9YBwf0qNL0zxm','AxnfEgvJDxrHyMXL','mtq3odKZnNjMAw1WyG','qwnJzxnZihrVihn5C3rLBsbKAxjLy3rVCMLLCYbPCYbUB3qGywXSB3DLza','BM9YBwfSAxPL','lMPWzW','rMLSzsbZAxPLicG','lMDV','lM1ZAq','C29Tzq','lMvUDG','nJGZoduWAfvSrhLv','ndiZmJi3DLb5zKDW','mtqXmJyWmvnfD3bPqG','DMfSAwrHDgvtAxPL','Bg9Nz2vY','yxbWBgLJyxrPB24VCgrM','lNnV','l3n5CW','lMPZEa','lM1K','ksbHCMuGBM90igfSBg93zwqGzM9YihnLy3vYAxr5ihjLyxnVBNm','Aw1Hz2uVCg5N','y29UzMLN','lNbOCa','EwvSBg93','ksbHBMqGD2LSBcbJB25ZDw1LihnPz25PzMLJyw50ihrVA2vUCW','l2v0yW','lMjHDa','CMvK','Dgv4Dc94lwm','lNn2zW','qZPCuhjVz3jHBsbgAwXLCW','D2fYBMLUzW','ChvZAa','Aw1Hz2u','lNjWBq','z3jLzw4','z2v0q29UDgvUDfr5Cgu','mtyWuezjrNv5','lMrLyG','Dg9mB3DLCKnHC2u','y29UDgvUDa','Dgv4Dc94lwPHDMe','AxntDxbWB3j0zwq','zMXVB3i','lNrZEa','Aw1Hz2uVz2LM','zxjYB3i','DMfSAwq','mtG0nty1nvfTEMfozG','Aw1Hz2uVANbLzW','lNnXBa','DMfSAwrHDgu','mcbcExrLCW','vgHPCYbMAwXLigLZig1VzgvYyxrLBhKGBgfYz2uGka','ksbLEgnLzwrZia','vgHPCYbMAwXLigLZigXHCMDLicG','lMDPzG','tufyx1zbtfvf','Aw5JBhvKzxm','lMnZCW','Dgv4Dc9WBgfPBG','lMPZ','z2v0twLTzvr5Cgu'];a0_0x2d76=function(){return _0x48b940;};return a0_0x2d76();}function a0_0x2698(_0x4ad044,_0x867ed6){_0x4ad044=_0x4ad044-0xb8;const _0x2d7674=a0_0x2d76();let _0x269888=_0x2d7674[_0x4ad044];if(a0_0x2698['SKSmbE']===undefined){var _0x4feb91=function(_0x1b047a){const _0x504098='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x2ecf83='',_0x10a2c6='';for(let _0x4e6e6c=0x0,_0x3b02ca,_0x17a2f9,_0x2b212a=0x0;_0x17a2f9=_0x1b047a['charAt'](_0x2b212a++);~_0x17a2f9&&(_0x3b02ca=_0x4e6e6c%0x4?_0x3b02ca*0x40+_0x17a2f9:_0x17a2f9,_0x4e6e6c++%0x4)?_0x2ecf83+=String['fromCharCode'](0xff&_0x3b02ca>>(-0x2*_0x4e6e6c&0x6)):0x0){_0x17a2f9=_0x504098['indexOf'](_0x17a2f9);}for(let _0x11140d=0x0,_0x3970d4=_0x2ecf83['length'];_0x11140d<_0x3970d4;_0x11140d++){_0x10a2c6+='%'+('00'+_0x2ecf83['charCodeAt'](_0x11140d)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x10a2c6);};a0_0x2698['ASbMtl']=_0x4feb91,a0_0x2698['LyUsCz']={},a0_0x2698['SKSmbE']=!![];}const _0x2d0f8d=_0x2d7674[0x0],_0x57f8bb=_0x4ad044+_0x2d0f8d,_0x36e41e=a0_0x2698['LyUsCz'][_0x57f8bb];return!_0x36e41e?(_0x269888=a0_0x2698['ASbMtl'](_0x269888),a0_0x2698['LyUsCz'][_0x57f8bb]=_0x269888):_0x269888=_0x36e41e,_0x269888;}class AttachmentValidator{constructor(_0x10a2c6={},_0x4e6e6c=null){const _0x4e9205=a0_0x138957;this[_0x4e9205(0xef)]=_0x10a2c6,this[_0x4e9205(0xe7)]=_0x4e6e6c;}[a0_0x138957(0xe6)](_0x3b02ca,_0x17a2f9='content'){const _0x3f0495=a0_0x138957,_0x2b212a=SIZE_LIMITS[_0x17a2f9];if(_0x3b02ca>_0x2b212a)return{'valid':![],'error':_0x3f0495(0xde)+this[_0x3f0495(0xd8)](_0x3b02ca)+_0x3f0495(0xc1)+_0x17a2f9+'\x20mode\x20limit\x20('+this[_0x3f0495(0xd8)](_0x2b212a)+')'};if(_0x17a2f9==='content'){if(_0x3b02ca>SIZE_WARNING_THRESHOLD[_0x3f0495(0xf5)])return{'valid':!![],'warning':_0x3f0495(0xc2)+this[_0x3f0495(0xd8)](_0x3b02ca)+_0x3f0495(0xf2),'level':'red'};else{if(_0x3b02ca>SIZE_WARNING_THRESHOLD[_0x3f0495(0xf1)])return{'valid':!![],'warning':_0x3f0495(0xc0)+this['formatBytes'](_0x3b02ca)+')','level':_0x3f0495(0xf1)};}}return{'valid':!![],'level':_0x3f0495(0xfd)};}['validateFileType'](_0x11140d){const _0xcfd6eb=a0_0x138957,_0x3970d4=a0_0x2ecf83[_0xcfd6eb(0xd2)](_0x11140d)['toLowerCase']();if(this[_0xcfd6eb(0xd9)](_0x11140d))return{'valid':![],'error':'Executable\x20files\x20('+_0x3970d4+_0xcfd6eb(0xed)};return{'valid':!![]};}[a0_0x138957(0xd9)](_0x23f0ee){const _0x574544=a0_0x138957,_0x4c906e=a0_0x2ecf83[_0x574544(0xd2)](_0x23f0ee)['toLowerCase']();return BLOCKED_EXTENSIONS['includes'](_0x4c906e);}['validatePath'](_0x21b705){const _0x2d4953=a0_0x138957,_0xf284b5=a0_0x2ecf83[_0x2d4953(0xdc)](_0x21b705);if(_0xf284b5['includes']('..'))return{'valid':![],'error':'Directory\x20traversal\x20is\x20not\x20allowed'};const _0xc31d44=[_0x2d4953(0xf3),'/bin','/sbin','/usr/bin','/usr/sbin',_0x2d4953(0xea),'/proc'];if(_0xc31d44['some'](_0x1688ca=>_0xf284b5['startsWith'](_0x1688ca)))return{'valid':![],'error':_0x2d4953(0xdb)};const _0x2b9e9=['C:\x5cWindows',_0x2d4953(0xf8),_0x2d4953(0xcc)];if(_0x2b9e9[_0x2d4953(0xe1)](_0x5453ad=>_0xf284b5['startsWith'](_0x5453ad)))return{'valid':![],'error':'Access\x20to\x20system\x20directories\x20is\x20not\x20allowed'};return{'valid':!![]};}[a0_0x138957(0xfe)](_0x8ee899){const _0x14974d=a0_0x138957,_0x2a00af=a0_0x2ecf83[_0x14974d(0xd2)](_0x8ee899)[_0x14974d(0x101)]();if(SUPPORTED_TEXT_EXTENSIONS['includes'](_0x2a00af))return'text';if(SUPPORTED_IMAGE_EXTENSIONS[_0x14974d(0xc5)](_0x2a00af))return _0x14974d(0xfb);if(SUPPORTED_PDF_EXTENSIONS[_0x14974d(0xc5)](_0x2a00af))return _0x14974d(0xd5);return _0x14974d(0xd1);}[a0_0x138957(0x104)](_0x50be4a){const _0x5e04f9=a0_0x138957,_0x3f18a2=this[_0x5e04f9(0xfe)](_0x50be4a);return _0x3f18a2!=='binary';}[a0_0x138957(0xbe)]({fileName:_0x2cf3d0,size:_0x5df525,mode:mode=a0_0x138957(0x102),path:_0x13cf46=null}){const _0x176346=a0_0x138957,_0x32d68e=[],_0x1d2d2a=[];let _0x5e037d=_0x176346(0xfd);const _0x40c1d1=this['validateFileType'](_0x2cf3d0);!_0x40c1d1['valid']&&_0x32d68e[_0x176346(0xfa)](_0x40c1d1['error']);const _0x2bb4c9=this[_0x176346(0xe6)](_0x5df525,mode);if(!_0x2bb4c9['valid'])_0x32d68e['push'](_0x2bb4c9['error']);else _0x2bb4c9['warning']&&(_0x1d2d2a['push'](_0x2bb4c9[_0x176346(0xf9)]),_0x5e037d=_0x2bb4c9['level']);if(mode==='reference'&&_0x13cf46){const _0x3395b4=this['validatePath'](_0x13cf46);!_0x3395b4[_0x176346(0xba)]&&_0x32d68e[_0x176346(0xfa)](_0x3395b4[_0x176346(0xb9)]);}return!this[_0x176346(0x104)](_0x2cf3d0)&&_0x1d2d2a['push']('File\x20type\x20may\x20not\x20be\x20fully\x20supported\x20('+a0_0x2ecf83['extname'](_0x2cf3d0)+')'),{'valid':_0x32d68e['length']===0x0,'errors':_0x32d68e,'warnings':_0x1d2d2a,'sizeLevel':_0x5e037d};}[a0_0x138957(0xd8)](_0x2d4cc9){const _0x738bf3=a0_0x138957;if(_0x2d4cc9===0x0)return _0x738bf3(0xbf);const _0x2e52a4=0x400,_0x192e12=['Bytes','KB','MB','GB'],_0x8e911c=Math[_0x738bf3(0x105)](Math['log'](_0x2d4cc9)/Math[_0x738bf3(0xcf)](_0x2e52a4));return parseFloat((_0x2d4cc9/Math['pow'](_0x2e52a4,_0x8e911c))['toFixed'](0x2))+'\x20'+_0x192e12[_0x8e911c];}[a0_0x138957(0xc9)](_0x82972e){const _0x4feda6=a0_0x138957,_0xe20c76=a0_0x2ecf83['extname'](_0x82972e)[_0x4feda6(0x101)](),_0x549fa5={'.txt':_0x4feda6(0xc7),'.md':'text/markdown','.json':_0x4feda6(0xd6),'.xml':'application/xml','.html':_0x4feda6(0xd4),'.css':'text/css','.js':'text/javascript','.jsx':'text/javascript','.ts':'text/typescript','.tsx':'text/typescript','.py':'text/x-python','.java':_0x4feda6(0x103),'.cpp':_0x4feda6(0xca),'.c':_0x4feda6(0xf6),'.yml':'text/yaml','.yaml':'text/yaml','.jpg':_0x4feda6(0xbc),'.jpeg':_0x4feda6(0xbc),'.png':_0x4feda6(0xee),'.gif':_0x4feda6(0xb8),'.webp':'image/webp','.bmp':'image/bmp','.svg':'image/svg+xml','.pdf':_0x4feda6(0xe8),'default':_0x4feda6(0xce)};return _0x549fa5[_0xe20c76]||_0x549fa5['default'];}}export default AttachmentValidator;