@natchs/browser-mcp 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (274) hide show
  1. package/README.md +141 -0
  2. package/dist/core/auth.d.ts +7 -0
  3. package/dist/core/auth.d.ts.map +1 -0
  4. package/dist/core/auth.js +23 -0
  5. package/dist/core/auth.js.map +1 -0
  6. package/dist/core/cache.d.ts +24 -0
  7. package/dist/core/cache.d.ts.map +1 -0
  8. package/dist/core/cache.js +67 -0
  9. package/dist/core/cache.js.map +1 -0
  10. package/dist/core/config.d.ts +362 -0
  11. package/dist/core/config.d.ts.map +1 -0
  12. package/dist/core/config.js +281 -0
  13. package/dist/core/config.js.map +1 -0
  14. package/dist/core/context.d.ts +38 -0
  15. package/dist/core/context.d.ts.map +1 -0
  16. package/dist/core/context.js +19 -0
  17. package/dist/core/context.js.map +1 -0
  18. package/dist/core/errors.d.ts +82 -0
  19. package/dist/core/errors.d.ts.map +1 -0
  20. package/dist/core/errors.js +98 -0
  21. package/dist/core/errors.js.map +1 -0
  22. package/dist/core/logger.d.ts +22 -0
  23. package/dist/core/logger.d.ts.map +1 -0
  24. package/dist/core/logger.js +41 -0
  25. package/dist/core/logger.js.map +1 -0
  26. package/dist/core/metrics.d.ts +24 -0
  27. package/dist/core/metrics.d.ts.map +1 -0
  28. package/dist/core/metrics.js +59 -0
  29. package/dist/core/metrics.js.map +1 -0
  30. package/dist/core/network-capture.d.ts +117 -0
  31. package/dist/core/network-capture.d.ts.map +1 -0
  32. package/dist/core/network-capture.js +349 -0
  33. package/dist/core/network-capture.js.map +1 -0
  34. package/dist/core/network-export.d.ts +6 -0
  35. package/dist/core/network-export.d.ts.map +1 -0
  36. package/dist/core/network-export.js +163 -0
  37. package/dist/core/network-export.js.map +1 -0
  38. package/dist/core/output.d.ts +66 -0
  39. package/dist/core/output.d.ts.map +1 -0
  40. package/dist/core/output.js +114 -0
  41. package/dist/core/output.js.map +1 -0
  42. package/dist/core/pipeline.d.ts +25 -0
  43. package/dist/core/pipeline.d.ts.map +1 -0
  44. package/dist/core/pipeline.js +52 -0
  45. package/dist/core/pipeline.js.map +1 -0
  46. package/dist/core/plugin.d.ts +26 -0
  47. package/dist/core/plugin.d.ts.map +1 -0
  48. package/dist/core/plugin.js +49 -0
  49. package/dist/core/plugin.js.map +1 -0
  50. package/dist/core/rate-limit.d.ts +33 -0
  51. package/dist/core/rate-limit.d.ts.map +1 -0
  52. package/dist/core/rate-limit.js +89 -0
  53. package/dist/core/rate-limit.js.map +1 -0
  54. package/dist/core/registry.d.ts +67 -0
  55. package/dist/core/registry.d.ts.map +1 -0
  56. package/dist/core/registry.js +270 -0
  57. package/dist/core/registry.js.map +1 -0
  58. package/dist/core/sandbox.d.ts +20 -0
  59. package/dist/core/sandbox.d.ts.map +1 -0
  60. package/dist/core/sandbox.js +168 -0
  61. package/dist/core/sandbox.js.map +1 -0
  62. package/dist/core/schema-gen.d.ts +5 -0
  63. package/dist/core/schema-gen.d.ts.map +1 -0
  64. package/dist/core/schema-gen.js +115 -0
  65. package/dist/core/schema-gen.js.map +1 -0
  66. package/dist/core/session.d.ts +88 -0
  67. package/dist/core/session.d.ts.map +1 -0
  68. package/dist/core/session.js +300 -0
  69. package/dist/core/session.js.map +1 -0
  70. package/dist/index.d.ts +5 -0
  71. package/dist/index.d.ts.map +1 -0
  72. package/dist/index.js +192 -0
  73. package/dist/index.js.map +1 -0
  74. package/dist/prompts/index.d.ts +11 -0
  75. package/dist/prompts/index.d.ts.map +1 -0
  76. package/dist/prompts/index.js +121 -0
  77. package/dist/prompts/index.js.map +1 -0
  78. package/dist/tools/admin/cache.d.ts +7 -0
  79. package/dist/tools/admin/cache.d.ts.map +1 -0
  80. package/dist/tools/admin/cache.js +27 -0
  81. package/dist/tools/admin/cache.js.map +1 -0
  82. package/dist/tools/admin/index.d.ts +3 -0
  83. package/dist/tools/admin/index.d.ts.map +1 -0
  84. package/dist/tools/admin/index.js +9 -0
  85. package/dist/tools/admin/index.js.map +1 -0
  86. package/dist/tools/admin/server-status.d.ts +14 -0
  87. package/dist/tools/admin/server-status.d.ts.map +1 -0
  88. package/dist/tools/admin/server-status.js +33 -0
  89. package/dist/tools/admin/server-status.js.map +1 -0
  90. package/dist/tools/browser/cookies.d.ts +46 -0
  91. package/dist/tools/browser/cookies.d.ts.map +1 -0
  92. package/dist/tools/browser/cookies.js +65 -0
  93. package/dist/tools/browser/cookies.js.map +1 -0
  94. package/dist/tools/browser/evaluate.d.ts +12 -0
  95. package/dist/tools/browser/evaluate.d.ts.map +1 -0
  96. package/dist/tools/browser/evaluate.js +61 -0
  97. package/dist/tools/browser/evaluate.js.map +1 -0
  98. package/dist/tools/browser/index.d.ts +3 -0
  99. package/dist/tools/browser/index.d.ts.map +1 -0
  100. package/dist/tools/browser/index.js +17 -0
  101. package/dist/tools/browser/index.js.map +1 -0
  102. package/dist/tools/browser/page-info.d.ts +6 -0
  103. package/dist/tools/browser/page-info.d.ts.map +1 -0
  104. package/dist/tools/browser/page-info.js +25 -0
  105. package/dist/tools/browser/page-info.js.map +1 -0
  106. package/dist/tools/browser/pdf.d.ts +45 -0
  107. package/dist/tools/browser/pdf.d.ts.map +1 -0
  108. package/dist/tools/browser/pdf.js +57 -0
  109. package/dist/tools/browser/pdf.js.map +1 -0
  110. package/dist/tools/browser/screenshot.d.ts +21 -0
  111. package/dist/tools/browser/screenshot.d.ts.map +1 -0
  112. package/dist/tools/browser/screenshot.js +41 -0
  113. package/dist/tools/browser/screenshot.js.map +1 -0
  114. package/dist/tools/extraction/extract-css.d.ts +33 -0
  115. package/dist/tools/extraction/extract-css.d.ts.map +1 -0
  116. package/dist/tools/extraction/extract-css.js +112 -0
  117. package/dist/tools/extraction/extract-css.js.map +1 -0
  118. package/dist/tools/extraction/extract.d.ts +10 -0
  119. package/dist/tools/extraction/extract.d.ts.map +1 -0
  120. package/dist/tools/extraction/extract.js +71 -0
  121. package/dist/tools/extraction/extract.js.map +1 -0
  122. package/dist/tools/extraction/index.d.ts +3 -0
  123. package/dist/tools/extraction/index.d.ts.map +1 -0
  124. package/dist/tools/extraction/index.js +17 -0
  125. package/dist/tools/extraction/index.js.map +1 -0
  126. package/dist/tools/interaction/click.d.ts +15 -0
  127. package/dist/tools/interaction/click.d.ts.map +1 -0
  128. package/dist/tools/interaction/click.js +31 -0
  129. package/dist/tools/interaction/click.js.map +1 -0
  130. package/dist/tools/interaction/drag.d.ts +18 -0
  131. package/dist/tools/interaction/drag.d.ts.map +1 -0
  132. package/dist/tools/interaction/drag.js +27 -0
  133. package/dist/tools/interaction/drag.js.map +1 -0
  134. package/dist/tools/interaction/file-upload.d.ts +18 -0
  135. package/dist/tools/interaction/file-upload.d.ts.map +1 -0
  136. package/dist/tools/interaction/file-upload.js +37 -0
  137. package/dist/tools/interaction/file-upload.js.map +1 -0
  138. package/dist/tools/interaction/fill.d.ts +18 -0
  139. package/dist/tools/interaction/fill.d.ts.map +1 -0
  140. package/dist/tools/interaction/fill.js +34 -0
  141. package/dist/tools/interaction/fill.js.map +1 -0
  142. package/dist/tools/interaction/hover.d.ts +15 -0
  143. package/dist/tools/interaction/hover.d.ts.map +1 -0
  144. package/dist/tools/interaction/hover.js +26 -0
  145. package/dist/tools/interaction/hover.js.map +1 -0
  146. package/dist/tools/interaction/index.d.ts +3 -0
  147. package/dist/tools/interaction/index.d.ts.map +1 -0
  148. package/dist/tools/interaction/index.js +19 -0
  149. package/dist/tools/interaction/index.js.map +1 -0
  150. package/dist/tools/interaction/press-key.d.ts +12 -0
  151. package/dist/tools/interaction/press-key.d.ts.map +1 -0
  152. package/dist/tools/interaction/press-key.js +24 -0
  153. package/dist/tools/interaction/press-key.js.map +1 -0
  154. package/dist/tools/interaction/select.d.ts +18 -0
  155. package/dist/tools/interaction/select.d.ts.map +1 -0
  156. package/dist/tools/interaction/select.js +28 -0
  157. package/dist/tools/interaction/select.js.map +1 -0
  158. package/dist/tools/interaction/type.d.ts +21 -0
  159. package/dist/tools/interaction/type.d.ts.map +1 -0
  160. package/dist/tools/interaction/type.js +30 -0
  161. package/dist/tools/interaction/type.js.map +1 -0
  162. package/dist/tools/navigation/back.d.ts +6 -0
  163. package/dist/tools/navigation/back.d.ts.map +1 -0
  164. package/dist/tools/navigation/back.js +16 -0
  165. package/dist/tools/navigation/back.js.map +1 -0
  166. package/dist/tools/navigation/forward.d.ts +6 -0
  167. package/dist/tools/navigation/forward.d.ts.map +1 -0
  168. package/dist/tools/navigation/forward.js +16 -0
  169. package/dist/tools/navigation/forward.js.map +1 -0
  170. package/dist/tools/navigation/index.d.ts +3 -0
  171. package/dist/tools/navigation/index.d.ts.map +1 -0
  172. package/dist/tools/navigation/index.js +13 -0
  173. package/dist/tools/navigation/index.js.map +1 -0
  174. package/dist/tools/navigation/navigate.d.ts +19 -0
  175. package/dist/tools/navigation/navigate.d.ts.map +1 -0
  176. package/dist/tools/navigation/navigate.js +52 -0
  177. package/dist/tools/navigation/navigate.js.map +1 -0
  178. package/dist/tools/navigation/refresh.d.ts +15 -0
  179. package/dist/tools/navigation/refresh.d.ts.map +1 -0
  180. package/dist/tools/navigation/refresh.js +26 -0
  181. package/dist/tools/navigation/refresh.js.map +1 -0
  182. package/dist/tools/navigation/wait-for.d.ts +12 -0
  183. package/dist/tools/navigation/wait-for.d.ts.map +1 -0
  184. package/dist/tools/navigation/wait-for.js +23 -0
  185. package/dist/tools/navigation/wait-for.js.map +1 -0
  186. package/dist/tools/network/console.d.ts +17 -0
  187. package/dist/tools/network/console.d.ts.map +1 -0
  188. package/dist/tools/network/console.js +29 -0
  189. package/dist/tools/network/console.js.map +1 -0
  190. package/dist/tools/network/dialog.d.ts +14 -0
  191. package/dist/tools/network/dialog.d.ts.map +1 -0
  192. package/dist/tools/network/dialog.js +34 -0
  193. package/dist/tools/network/dialog.js.map +1 -0
  194. package/dist/tools/network/index.d.ts +3 -0
  195. package/dist/tools/network/index.d.ts.map +1 -0
  196. package/dist/tools/network/index.js +21 -0
  197. package/dist/tools/network/index.js.map +1 -0
  198. package/dist/tools/network/network-clear.d.ts +11 -0
  199. package/dist/tools/network/network-clear.d.ts.map +1 -0
  200. package/dist/tools/network/network-clear.js +24 -0
  201. package/dist/tools/network/network-clear.js.map +1 -0
  202. package/dist/tools/network/network-entries.d.ts +35 -0
  203. package/dist/tools/network/network-entries.d.ts.map +1 -0
  204. package/dist/tools/network/network-entries.js +73 -0
  205. package/dist/tools/network/network-entries.js.map +1 -0
  206. package/dist/tools/network/network-export.d.ts +14 -0
  207. package/dist/tools/network/network-export.d.ts.map +1 -0
  208. package/dist/tools/network/network-export.js +24 -0
  209. package/dist/tools/network/network-export.js.map +1 -0
  210. package/dist/tools/network/network-requests.d.ts +20 -0
  211. package/dist/tools/network/network-requests.d.ts.map +1 -0
  212. package/dist/tools/network/network-requests.js +36 -0
  213. package/dist/tools/network/network-requests.js.map +1 -0
  214. package/dist/tools/network/network-response.d.ts +14 -0
  215. package/dist/tools/network/network-response.d.ts.map +1 -0
  216. package/dist/tools/network/network-response.js +56 -0
  217. package/dist/tools/network/network-response.js.map +1 -0
  218. package/dist/tools/network/wait-nav.d.ts +15 -0
  219. package/dist/tools/network/wait-nav.d.ts.map +1 -0
  220. package/dist/tools/network/wait-nav.js +26 -0
  221. package/dist/tools/network/wait-nav.js.map +1 -0
  222. package/dist/tools/network/websocket-frames.d.ts +17 -0
  223. package/dist/tools/network/websocket-frames.d.ts.map +1 -0
  224. package/dist/tools/network/websocket-frames.js +24 -0
  225. package/dist/tools/network/websocket-frames.js.map +1 -0
  226. package/dist/tools/re/api-discover.d.ts +11 -0
  227. package/dist/tools/re/api-discover.d.ts.map +1 -0
  228. package/dist/tools/re/api-discover.js +57 -0
  229. package/dist/tools/re/api-discover.js.map +1 -0
  230. package/dist/tools/re/auth-analyze.d.ts +11 -0
  231. package/dist/tools/re/auth-analyze.d.ts.map +1 -0
  232. package/dist/tools/re/auth-analyze.js +86 -0
  233. package/dist/tools/re/auth-analyze.js.map +1 -0
  234. package/dist/tools/re/index.d.ts +3 -0
  235. package/dist/tools/re/index.d.ts.map +1 -0
  236. package/dist/tools/re/index.js +11 -0
  237. package/dist/tools/re/index.js.map +1 -0
  238. package/dist/tools/re/js-beautify.d.ts +14 -0
  239. package/dist/tools/re/js-beautify.d.ts.map +1 -0
  240. package/dist/tools/re/js-beautify.js +132 -0
  241. package/dist/tools/re/js-beautify.js.map +1 -0
  242. package/dist/tools/re/js-deobfuscate.d.ts +11 -0
  243. package/dist/tools/re/js-deobfuscate.d.ts.map +1 -0
  244. package/dist/tools/re/js-deobfuscate.js +96 -0
  245. package/dist/tools/re/js-deobfuscate.js.map +1 -0
  246. package/dist/tools/session/close.d.ts +11 -0
  247. package/dist/tools/session/close.d.ts.map +1 -0
  248. package/dist/tools/session/close.js +24 -0
  249. package/dist/tools/session/close.js.map +1 -0
  250. package/dist/tools/session/index.d.ts +3 -0
  251. package/dist/tools/session/index.d.ts.map +1 -0
  252. package/dist/tools/session/index.js +9 -0
  253. package/dist/tools/session/index.js.map +1 -0
  254. package/dist/tools/session/list.d.ts +14 -0
  255. package/dist/tools/session/list.d.ts.map +1 -0
  256. package/dist/tools/session/list.js +26 -0
  257. package/dist/tools/session/list.js.map +1 -0
  258. package/dist/tools/session/open.d.ts +11 -0
  259. package/dist/tools/session/open.d.ts.map +1 -0
  260. package/dist/tools/session/open.js +25 -0
  261. package/dist/tools/session/open.js.map +1 -0
  262. package/dist/tools/stealth/fingerprint.d.ts +11 -0
  263. package/dist/tools/stealth/fingerprint.d.ts.map +1 -0
  264. package/dist/tools/stealth/fingerprint.js +72 -0
  265. package/dist/tools/stealth/fingerprint.js.map +1 -0
  266. package/dist/tools/stealth/human-behavior.d.ts +29 -0
  267. package/dist/tools/stealth/human-behavior.d.ts.map +1 -0
  268. package/dist/tools/stealth/human-behavior.js +86 -0
  269. package/dist/tools/stealth/human-behavior.js.map +1 -0
  270. package/dist/tools/stealth/index.d.ts +3 -0
  271. package/dist/tools/stealth/index.d.ts.map +1 -0
  272. package/dist/tools/stealth/index.js +7 -0
  273. package/dist/tools/stealth/index.js.map +1 -0
  274. package/package.json +40 -0
@@ -0,0 +1,89 @@
1
+ export class TokenBucket {
2
+ capacity;
3
+ ratePerSec;
4
+ _tokens;
5
+ lastRefill;
6
+ constructor(capacity, ratePerSec) {
7
+ this.capacity = capacity;
8
+ this.ratePerSec = ratePerSec;
9
+ this._tokens = capacity;
10
+ this.lastRefill = Date.now();
11
+ }
12
+ get tokens() {
13
+ this.refill();
14
+ return this._tokens;
15
+ }
16
+ consume(count) {
17
+ if (count < 0)
18
+ return false;
19
+ if (count === 0)
20
+ return true;
21
+ this.refill();
22
+ if (this._tokens < count)
23
+ return false;
24
+ this._tokens -= count;
25
+ return true;
26
+ }
27
+ reset() {
28
+ this._tokens = this.capacity;
29
+ this.lastRefill = Date.now();
30
+ }
31
+ refill() {
32
+ const now = Date.now();
33
+ const elapsed = (now - this.lastRefill) / 1000;
34
+ if (elapsed <= 0)
35
+ return;
36
+ const added = elapsed * this.ratePerSec;
37
+ this._tokens = Math.min(this.capacity, this._tokens + added);
38
+ this.lastRefill = now;
39
+ }
40
+ }
41
+ export class RateLimiter {
42
+ globalBucket;
43
+ perToolBuckets = new Map();
44
+ config;
45
+ hits = 0;
46
+ denied = 0;
47
+ constructor(config) {
48
+ this.config = {
49
+ enabled: config.enabled ?? true,
50
+ globalRpm: config.globalRpm,
51
+ perToolRpm: config.perToolRpm,
52
+ burstSize: config.burstSize,
53
+ };
54
+ this.globalBucket = new TokenBucket(config.burstSize, config.globalRpm / 60);
55
+ }
56
+ check(toolName) {
57
+ if (!this.config.enabled)
58
+ return true;
59
+ if (!this.globalBucket.consume(1)) {
60
+ this.denied++;
61
+ return false;
62
+ }
63
+ let toolBucket = this.perToolBuckets.get(toolName);
64
+ if (!toolBucket) {
65
+ toolBucket = new TokenBucket(this.config.perToolRpm, this.config.perToolRpm / 60);
66
+ this.perToolBuckets.set(toolName, toolBucket);
67
+ }
68
+ if (!toolBucket.consume(1)) {
69
+ this.denied++;
70
+ return false;
71
+ }
72
+ this.hits++;
73
+ return true;
74
+ }
75
+ stats() {
76
+ return {
77
+ hits: this.hits,
78
+ denied: this.denied,
79
+ total: this.hits + this.denied,
80
+ };
81
+ }
82
+ reset() {
83
+ this.globalBucket.reset();
84
+ this.perToolBuckets.clear();
85
+ this.hits = 0;
86
+ this.denied = 0;
87
+ }
88
+ }
89
+ //# sourceMappingURL=rate-limit.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/core/rate-limit.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,WAAW;IAKH;IACA;IALX,OAAO,CAAS;IAChB,UAAU,CAAS;IAE3B,YACmB,QAAgB,EAChB,UAAkB;QADlB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,eAAU,GAAV,UAAU,CAAQ;QAEnC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,MAAM;QACR,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5B,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,OAAO,GAAG,KAAK;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IAEO,MAAM;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAC/C,IAAI,OAAO,IAAI,CAAC;YAAE,OAAO;QACzB,MAAM,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;IACxB,CAAC;CACF;AAED,MAAM,OAAO,WAAW;IACd,YAAY,CAAc;IAC1B,cAAc,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,MAAM,CAA8B;IACpC,IAAI,GAAG,CAAC,CAAC;IACT,MAAM,GAAG,CAAC,CAAC;IAEnB,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,WAAW,CACjC,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,GAAG,EAAE,CACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAgB;QACpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAEtC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,IAAI,WAAW,CAC1B,IAAI,CAAC,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,EAAE,CAC5B,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM;SAC/B,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,CAAC;CACF"}
@@ -0,0 +1,67 @@
1
+ import { z } from 'zod';
2
+ import type { Tool } from '@modelcontextprotocol/sdk/types.js';
3
+ import type { ToolContext } from './context.js';
4
+ import { PluginManager } from './plugin.js';
5
+ export type ToolCategory = 'navigation' | 'interaction' | 'extraction' | 'network' | 'session' | 'browser' | 'admin' | 're' | 'stealth' | 'reverse-engineering' | 'cloudflare';
6
+ export interface ToolConfig {
7
+ name: string;
8
+ description?: string;
9
+ inputSchema?: Record<string, unknown>;
10
+ category: ToolCategory;
11
+ needsBrowser?: boolean;
12
+ requiresNetwork?: boolean;
13
+ schema?: z.ZodType<any>;
14
+ readOnlyHint?: boolean;
15
+ destructiveHint?: boolean;
16
+ idempotentHint?: boolean;
17
+ openWorldHint?: boolean;
18
+ version?: string;
19
+ deprecated?: boolean;
20
+ replacement?: string;
21
+ }
22
+ export type ToolHandler<T = unknown> = (args: Record<string, unknown>, context: ToolContext<T>) => Promise<{
23
+ content: [{
24
+ type: 'text';
25
+ text: string;
26
+ }];
27
+ }>;
28
+ export interface ToolAnnotations {
29
+ readOnlyHint: boolean;
30
+ destructiveHint: boolean;
31
+ idempotentHint: boolean;
32
+ openWorldHint: boolean;
33
+ }
34
+ export declare function resolveCacheable(annotations: ToolAnnotations): boolean;
35
+ export declare function resolveAnnotations(config: ToolConfig): ToolAnnotations;
36
+ export declare class ToolRegistry {
37
+ private entries;
38
+ private order;
39
+ private aliases;
40
+ private pluginManager;
41
+ constructor(pluginManager?: PluginManager);
42
+ getPluginManager(): PluginManager;
43
+ registerAlias(alias: string, targetName: string): void;
44
+ resolveAlias(name: string): string;
45
+ isAlias(name: string): boolean;
46
+ getAliases(): Record<string, string>;
47
+ register(config: ToolConfig, handler: ToolHandler<any>): void;
48
+ getTool(name: string): Tool | undefined;
49
+ getToolConfig(name: string): ToolConfig | undefined;
50
+ getToolAnnotations(name: string): ToolAnnotations | undefined;
51
+ getCacheable(name: string): boolean | undefined;
52
+ getAllTools(): Tool[];
53
+ getToolsByCategory(category: ToolCategory): Tool[];
54
+ getToolsByCategory(): Record<ToolCategory, Tool[]>;
55
+ getCategories(): ToolCategory[];
56
+ unregister(name: string): void;
57
+ toMCPTools(): Tool[];
58
+ private checkPreflight;
59
+ execute(name: string, args: Record<string, unknown>, context: ToolContext): Promise<{
60
+ content: [{
61
+ type: 'text';
62
+ text: string;
63
+ }];
64
+ }>;
65
+ private toToolDef;
66
+ }
67
+ //# sourceMappingURL=registry.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAoB,MAAM,aAAa,CAAC;AAE9D,MAAM,MAAM,YAAY,GACpB,YAAY,GACZ,aAAa,GACb,YAAY,GACZ,SAAS,GACT,SAAS,GACT,SAAS,GACT,OAAO,GACP,IAAI,GACJ,SAAS,GACT,qBAAqB,GACrB,YAAY,CAAC;AAEjB,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,QAAQ,EAAE,YAAY,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAExB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,WAAW,CAAC,CAAC,GAAG,OAAO,IAAI,CACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,KACpB,OAAO,CAAC;IAAE,OAAO,EAAE,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAAC;AAE5D,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;CACxB;AASD,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,eAAe,GAAG,OAAO,CAOtE;AAMD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,eAAe,CAsCtE;AA2CD,qBAAa,YAAY;IACvB,OAAO,CAAC,OAAO,CAA4B;IAC3C,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,aAAa,CAAgB;gBAEzB,aAAa,CAAC,EAAE,aAAa;IAIzC,gBAAgB,IAAI,aAAa;IAIjC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAUtD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAIlC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI9B,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAIpC,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI;IAuB7D,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS;IAMvC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAMnD,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAK7D,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAK/C,WAAW,IAAI,IAAI,EAAE;IAOrB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,EAAE;IAClD,kBAAkB,IAAI,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAiBlD,aAAa,IAAI,YAAY,EAAE;IAS/B,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAQ9B,UAAU,IAAI,IAAI,EAAE;IAIpB,OAAO,CAAC,cAAc;IAqBhB,OAAO,CACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAqDzD,OAAO,CAAC,SAAS;CAkBlB"}
@@ -0,0 +1,270 @@
1
+ import { zodToJsonSchema } from './schema-gen.js';
2
+ import { ErrorCode } from './errors.js';
3
+ import { PluginManager } from './plugin.js';
4
+ export function resolveCacheable(annotations) {
5
+ return Boolean(annotations.readOnlyHint &&
6
+ annotations.idempotentHint &&
7
+ !annotations.destructiveHint &&
8
+ !annotations.openWorldHint);
9
+ }
10
+ const READ_ONLY_KEYWORDS = ['read', 'get', 'list', 'extract', 'discover', 'analyze', 'status', 'info', 'fingerprint', 'beautify', 'deobfuscate'];
11
+ const DESTRUCTIVE_KEYWORDS = ['delete', 'remove', 'clear', 'close', 'destroy'];
12
+ const WRITE_KEYWORDS = ['set', 'create', 'navigate', 'go', 'click', 'type', 'fill', 'select', 'hover', 'drag', 'scroll', 'press', 'upload', 'refresh', 'open', 'evaluate'];
13
+ export function resolveAnnotations(config) {
14
+ // Explicit overrides
15
+ if (config.readOnlyHint !== undefined || config.destructiveHint !== undefined ||
16
+ config.idempotentHint !== undefined || config.openWorldHint !== undefined) {
17
+ return {
18
+ readOnlyHint: config.readOnlyHint ?? true,
19
+ destructiveHint: config.destructiveHint ?? false,
20
+ idempotentHint: config.idempotentHint ?? false,
21
+ openWorldHint: config.openWorldHint ?? false,
22
+ };
23
+ }
24
+ const name = config.name.toLowerCase();
25
+ const words = name.replace('browser_', '').split('_');
26
+ // Determine destructiveness
27
+ const isDestructive = DESTRUCTIVE_KEYWORDS.some(kw => words.includes(kw));
28
+ // Determine read-only
29
+ const isReadOnly = !isDestructive && (READ_ONLY_KEYWORDS.some(kw => words.includes(kw)) ||
30
+ config.category === 're' ||
31
+ config.category === 'stealth');
32
+ // Idempotent: read-only operations are generally idempotent
33
+ const isIdempotent = isReadOnly;
34
+ // Open world: tools that interact with web or browser generally are open-world
35
+ // Pure computation tools (re, stealth) are NOT open-world
36
+ const isOpenWorld = !['re', 'stealth'].includes(config.category);
37
+ return {
38
+ readOnlyHint: isReadOnly,
39
+ destructiveHint: isDestructive,
40
+ idempotentHint: isIdempotent,
41
+ openWorldHint: isOpenWorld,
42
+ };
43
+ }
44
+ function normalizeSchema(schema) {
45
+ if (schema.type !== 'object' || typeof schema.properties !== 'object' || schema.properties === null) {
46
+ return schema;
47
+ }
48
+ const result = { ...schema, additionalProperties: false };
49
+ const props = { ...result.properties };
50
+ result.properties = props;
51
+ const required = [...(result.required ?? [])];
52
+ result.required = required;
53
+ if (!('response_format' in props)) {
54
+ props.response_format = {
55
+ type: 'string',
56
+ enum: ['json', 'markdown'],
57
+ default: 'json',
58
+ description: 'Output format: json or markdown',
59
+ };
60
+ }
61
+ for (const [key, value] of Object.entries(props)) {
62
+ if (typeof value === 'object' && value !== null && !Array.isArray(value)) {
63
+ const propSchema = value;
64
+ if (propSchema.type === 'string') {
65
+ if (key === 'code' || key === 'source') {
66
+ propSchema.maxLength = 1_000_000;
67
+ }
68
+ if (key === 'selector') {
69
+ propSchema.maxLength = 500;
70
+ }
71
+ if (key.includes('rules_inline')) {
72
+ propSchema.maxLength = 200_000;
73
+ }
74
+ }
75
+ }
76
+ }
77
+ return result;
78
+ }
79
+ export class ToolRegistry {
80
+ entries = new Map();
81
+ order = [];
82
+ aliases = new Map();
83
+ pluginManager;
84
+ constructor(pluginManager) {
85
+ this.pluginManager = pluginManager ?? new PluginManager();
86
+ }
87
+ getPluginManager() {
88
+ return this.pluginManager;
89
+ }
90
+ registerAlias(alias, targetName) {
91
+ if (this.entries.has(alias)) {
92
+ throw new Error(`Cannot register alias, tool already exists: ${alias}`);
93
+ }
94
+ if (!this.entries.has(targetName)) {
95
+ throw new Error(`Cannot register alias, target tool not found: ${targetName}`);
96
+ }
97
+ this.aliases.set(alias, targetName);
98
+ }
99
+ resolveAlias(name) {
100
+ return this.aliases.get(name) ?? name;
101
+ }
102
+ isAlias(name) {
103
+ return this.aliases.has(name);
104
+ }
105
+ getAliases() {
106
+ return Object.fromEntries(this.aliases);
107
+ }
108
+ register(config, handler) {
109
+ if (this.entries.has(config.name)) {
110
+ throw new Error(`Tool already registered: ${config.name}`);
111
+ }
112
+ // Pre-register hook
113
+ const preCtx = { toolName: config.name, config };
114
+ this.pluginManager.runPhase('pre-register', preCtx);
115
+ const resolvedSchema = config.schema
116
+ ? { ...zodToJsonSchema(config.schema), ...config.inputSchema }
117
+ : (config.inputSchema ?? {});
118
+ const normalizedSchema = normalizeSchema(resolvedSchema);
119
+ const annotations = resolveAnnotations(config);
120
+ const cacheable = resolveCacheable(annotations);
121
+ this.entries.set(config.name, { config: { ...config, inputSchema: normalizedSchema }, handler, annotations, cacheable });
122
+ this.order.push(config.name);
123
+ // Post-register hook
124
+ const postCtx = { toolName: config.name, config, annotations };
125
+ this.pluginManager.runPhase('post-register', postCtx);
126
+ }
127
+ getTool(name) {
128
+ const entry = this.entries.get(name);
129
+ if (!entry)
130
+ return undefined;
131
+ return this.toToolDef(entry);
132
+ }
133
+ getToolConfig(name) {
134
+ const entry = this.entries.get(name);
135
+ if (!entry)
136
+ return undefined;
137
+ return entry.config;
138
+ }
139
+ getToolAnnotations(name) {
140
+ const entry = this.entries.get(name);
141
+ return entry?.annotations;
142
+ }
143
+ getCacheable(name) {
144
+ const entry = this.entries.get(name);
145
+ return entry?.cacheable;
146
+ }
147
+ getAllTools() {
148
+ return this.order.map((name) => {
149
+ const entry = this.entries.get(name);
150
+ return this.toToolDef(entry);
151
+ });
152
+ }
153
+ getToolsByCategory(category) {
154
+ if (category) {
155
+ return this.getAllTools().filter((t) => {
156
+ const entry = this.entries.get(t.name);
157
+ return entry?.config.category === category;
158
+ });
159
+ }
160
+ const grouped = {};
161
+ for (const [name, entry] of this.entries) {
162
+ const cat = entry.config.category;
163
+ if (!grouped[cat])
164
+ grouped[cat] = [];
165
+ grouped[cat].push(this.toToolDef(entry));
166
+ }
167
+ return grouped;
168
+ }
169
+ getCategories() {
170
+ const cats = new Set();
171
+ for (const name of this.order) {
172
+ const entry = this.entries.get(name);
173
+ cats.add(entry.config.category);
174
+ }
175
+ return Array.from(cats).sort();
176
+ }
177
+ unregister(name) {
178
+ const idx = this.order.indexOf(name);
179
+ if (idx !== -1) {
180
+ this.order.splice(idx, 1);
181
+ }
182
+ this.entries.delete(name);
183
+ }
184
+ toMCPTools() {
185
+ return this.getAllTools();
186
+ }
187
+ checkPreflight(config, context) {
188
+ if (config.needsBrowser !== false) {
189
+ try {
190
+ if (!context.pageProvider) {
191
+ return 'Browser session required but not available';
192
+ }
193
+ }
194
+ catch {
195
+ // silently handled
196
+ return 'Browser session required but not available';
197
+ }
198
+ }
199
+ if (config.requiresNetwork) {
200
+ if (!context.session?.getNetworkRequests) {
201
+ return 'Network interception required but not available';
202
+ }
203
+ }
204
+ return null;
205
+ }
206
+ async execute(name, args, context) {
207
+ const resolvedName = this.resolveAlias(name);
208
+ const entry = this.entries.get(resolvedName);
209
+ if (!entry) {
210
+ throw new Error(`Tool not found: ${name}`);
211
+ }
212
+ // Pre-execute hook
213
+ const preCtx = { toolName: resolvedName, config: entry.config, annotations: entry.annotations, args };
214
+ await this.pluginManager.runPhase('pre-execute', preCtx);
215
+ const preflightError = this.checkPreflight(entry.config, context);
216
+ if (preflightError) {
217
+ return {
218
+ content: [{ type: 'text', text: JSON.stringify({ ok: false, error: { code: ErrorCode.PREFLIGHT_FAILED, message: preflightError } }) }],
219
+ };
220
+ }
221
+ const startTime = Date.now();
222
+ try {
223
+ let result = await entry.handler(args, context);
224
+ const durationMs = Date.now() - startTime;
225
+ // Post-execute hook
226
+ const postCtx = { toolName: resolvedName, config: entry.config, annotations: entry.annotations, args, durationMs };
227
+ await this.pluginManager.runPhase('post-execute', postCtx);
228
+ // Deprecation warning
229
+ if (entry.config.deprecated) {
230
+ const parsed = JSON.parse(result.content[0].text);
231
+ parsed._deprecated = {
232
+ message: `Tool '${resolvedName}' is deprecated`,
233
+ ...(entry.config.replacement ? { replacement: entry.config.replacement } : {}),
234
+ };
235
+ result = { content: [{ type: 'text', text: JSON.stringify(parsed) }] };
236
+ }
237
+ return result;
238
+ }
239
+ catch (err) {
240
+ const durationMs = Date.now() - startTime;
241
+ const error = err instanceof Error ? err : new Error(String(err));
242
+ // On-error hook
243
+ const errCtx = { toolName: resolvedName, config: entry.config, args, error, durationMs };
244
+ await this.pluginManager.runPhase('on-error', errCtx);
245
+ const msg = error.message;
246
+ return {
247
+ content: [{ type: 'text', text: JSON.stringify({ ok: false, error: msg }) }],
248
+ };
249
+ }
250
+ }
251
+ toToolDef(entry) {
252
+ const def = {
253
+ name: entry.config.name,
254
+ description: entry.config.description,
255
+ inputSchema: entry.config.inputSchema,
256
+ annotations: entry.annotations,
257
+ };
258
+ if (entry.config.version) {
259
+ def._version = entry.config.version;
260
+ }
261
+ if (entry.config.deprecated) {
262
+ def.deprecated = true;
263
+ if (entry.config.replacement) {
264
+ def.replacement = entry.config.replacement;
265
+ }
266
+ }
267
+ return def;
268
+ }
269
+ }
270
+ //# sourceMappingURL=registry.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,aAAa,EAAoB,MAAM,aAAa,CAAC;AAqD9D,MAAM,UAAU,gBAAgB,CAAC,WAA4B;IAC3D,OAAO,OAAO,CACZ,WAAW,CAAC,YAAY;QACxB,WAAW,CAAC,cAAc;QAC1B,CAAC,WAAW,CAAC,eAAe;QAC5B,CAAC,WAAW,CAAC,aAAa,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AACjJ,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC/E,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAE3K,MAAM,UAAU,kBAAkB,CAAC,MAAkB;IACnD,qBAAqB;IACrB,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;QACzE,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9E,OAAO;YACL,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACzC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,KAAK;YAChD,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,KAAK;YAC9C,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,KAAK;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEtD,4BAA4B;IAC5B,MAAM,aAAa,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAE1E,sBAAsB;IACtB,MAAM,UAAU,GAAG,CAAC,aAAa,IAAI,CACnC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,QAAQ,KAAK,IAAI;QACxB,MAAM,CAAC,QAAQ,KAAK,SAAS,CAC9B,CAAC;IAEF,4DAA4D;IAC5D,MAAM,YAAY,GAAG,UAAU,CAAC;IAEhC,+EAA+E;IAC/E,0DAA0D;IAC1D,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEjE,OAAO;QACL,YAAY,EAAE,UAAU;QACxB,eAAe,EAAE,aAAa;QAC9B,cAAc,EAAE,YAAY;QAC5B,aAAa,EAAE,WAAW;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAA+B;IACtD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACpG,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,GAAG,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;IACnF,MAAM,KAAK,GAAG,EAAE,GAAI,MAAM,CAAC,UAAsC,EAAE,CAAC;IACpE,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC;IAE1B,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAE,MAAM,CAAC,QAAqB,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAE3B,IAAI,CAAC,CAAC,iBAAiB,IAAI,KAAK,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,eAAe,GAAG;YACtB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;YAC1B,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,iCAAiC;SAC/C,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,MAAM,UAAU,GAAG,KAAgC,CAAC;YACpD,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;oBACvC,UAAU,CAAC,SAAS,GAAG,SAAS,CAAC;gBACnC,CAAC;gBACD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;oBACvB,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC;gBAC7B,CAAC;gBACD,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;oBACjC,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,YAAY;IACf,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IACnC,KAAK,GAAa,EAAE,CAAC;IACrB,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,aAAa,CAAgB;IAErC,YAAY,aAA6B;QACvC,IAAI,CAAC,aAAa,GAAG,aAAa,IAAI,IAAI,aAAa,EAAE,CAAC;IAC5D,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,aAAa,CAAC,KAAa,EAAE,UAAkB;QAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,KAAK,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,iDAAiD,UAAU,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,UAAU;QACR,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,QAAQ,CAAC,MAAkB,EAAE,OAAyB;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,oBAAoB;QACpB,MAAM,MAAM,GAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9D,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAEpD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM;YAClC,CAAC,CAAC,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,WAAW,EAA6B;YACzF,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAC/B,MAAM,gBAAgB,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QACzH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7B,qBAAqB;QACrB,MAAM,OAAO,GAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC5E,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,aAAa,CAAC,IAAY;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,kBAAkB,CAAC,IAAY;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,KAAK,EAAE,WAAW,CAAC;IAC5B,CAAC;IAED,YAAY,CAAC,IAAY;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,KAAK,EAAE,SAAS,CAAC;IAC1B,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;YACtC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAID,kBAAkB,CAAC,QAAuB;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACvC,OAAO,KAAK,EAAE,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAC7C,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,EAAkC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,aAAa;QACX,MAAM,IAAI,GAAG,IAAI,GAAG,EAAgB,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAEO,cAAc,CAAC,MAAkB,EAAE,OAAoB;QAC7D,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;oBAC1B,OAAO,4CAA4C,CAAC;gBACtD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,mBAAmB;gBACnB,OAAO,4CAA4C,CAAC;YACtD,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,EAAE,CAAC;gBACzC,OAAO,iDAAiD,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CACX,IAAY,EACZ,IAA6B,EAC7B,OAAoB;QAEpB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,mBAAmB;QACnB,MAAM,MAAM,GAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QACnH,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAEzD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClE,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,gBAAgB,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC;aACvI,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE1C,oBAAoB;YACpB,MAAM,OAAO,GAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YAChI,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YAE3D,sBAAsB;YACtB,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAClD,MAAM,CAAC,WAAW,GAAG;oBACnB,OAAO,EAAE,SAAS,YAAY,iBAAiB;oBAC/C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC/E,CAAC;gBACF,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACzE,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAElE,gBAAgB;YAChB,MAAM,MAAM,GAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;YACtG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAEtD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;aAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAAY;QAC5B,MAAM,GAAG,GAAG;YACV,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;YACvB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;YACrC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAkC;YAC5D,WAAW,EAAE,KAAK,CAAC,WAAW;SAC6C,CAAC;QAC9E,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;QACtC,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5B,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;YACtB,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC7B,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}
@@ -0,0 +1,20 @@
1
+ export declare function isInternalIP(hostname: string): boolean;
2
+ export declare function validatePath(inputPath: string): {
3
+ valid: boolean;
4
+ normalized?: string;
5
+ error?: string;
6
+ };
7
+ export declare function validateUrl(url: string): {
8
+ valid: boolean;
9
+ error?: string;
10
+ };
11
+ export declare function validateUrlAsync(url: string): Promise<{
12
+ valid: boolean;
13
+ error?: string;
14
+ }>;
15
+ export declare function sanitizeInput(input: unknown): {
16
+ sanitized: string;
17
+ warnings: string[];
18
+ blocked: boolean;
19
+ };
20
+ //# sourceMappingURL=sandbox.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/core/sandbox.ts"],"names":[],"mappings":"AAiDA,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAQtD;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA8CvG;AAID,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAc3E;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBzF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CA0BzG"}
@@ -0,0 +1,168 @@
1
+ import * as path from 'node:path';
2
+ import * as dns from 'node:dns';
3
+ import { getConfig } from './config.js';
4
+ const MAX_PATH_LENGTH = 4096;
5
+ const MAX_INPUT_LENGTH = 100000;
6
+ const BLOCKED_PSEUDO_PATHS = ['/proc/', '/sys/', '/dev/'];
7
+ const INTERNAL_IPS = [
8
+ '127.0.0.0/8',
9
+ '10.0.0.0/8',
10
+ '172.16.0.0/12',
11
+ '192.168.0.0/16',
12
+ '::1/128',
13
+ 'fc00::/7',
14
+ 'fe80::/10',
15
+ ];
16
+ function normalizeIPv6(ip) {
17
+ const ipv4Mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/.exec(ip);
18
+ if (ipv4Mapped)
19
+ return ipv4Mapped[1];
20
+ const ipv4MappedLong = /^(?:0:){5}ffff:(\d+\.\d+\.\d+\.\d+)$/.exec(ip);
21
+ if (ipv4MappedLong)
22
+ return ipv4MappedLong[1];
23
+ return ip;
24
+ }
25
+ function ipv4ToNumber(ip) {
26
+ const parts = ip.split('.').map(Number);
27
+ return ((parts[0] << 24) | (parts[1] << 16) | (parts[2] << 8) | parts[3]) >>> 0;
28
+ }
29
+ function ipInCIDR(ip, cidr) {
30
+ if (ip.startsWith('::ffff:')) {
31
+ ip = normalizeIPv6(ip);
32
+ }
33
+ const [range, bitsStr] = cidr.split('/');
34
+ const bits = Number(bitsStr);
35
+ if (ip.includes(':')) {
36
+ return cidr.includes(':') && ip.startsWith(range.substring(0, range.indexOf(':') + 2));
37
+ }
38
+ if (range.includes(':'))
39
+ return false;
40
+ try {
41
+ const ipNum = ipv4ToNumber(ip);
42
+ const rangeNum = ipv4ToNumber(range);
43
+ const mask = ~(2 ** (32 - bits) - 1) >>> 0;
44
+ return (ipNum & mask) === (rangeNum & mask);
45
+ }
46
+ catch { /* silently handled */
47
+ return false;
48
+ }
49
+ }
50
+ export function isInternalIP(hostname) {
51
+ hostname = normalizeIPv6(hostname);
52
+ if (hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '::1')
53
+ return true;
54
+ if (hostname.endsWith('.local') || hostname.endsWith('.internal'))
55
+ return true;
56
+ if (/^\d+\.\d+\.\d+\.\d+$/.test(hostname)) {
57
+ return INTERNAL_IPS.some(cidr => ipInCIDR(hostname, cidr));
58
+ }
59
+ return false;
60
+ }
61
+ export function validatePath(inputPath) {
62
+ const config = getConfig();
63
+ if (inputPath.length > MAX_PATH_LENGTH) {
64
+ return { valid: false, error: 'Path exceeds maximum length of 4096 characters' };
65
+ }
66
+ if (inputPath.includes('\0')) {
67
+ return { valid: false, error: 'Path contains null bytes' };
68
+ }
69
+ const normalizedForCheck = inputPath.replace(/\\/g, '/');
70
+ const isWindowsAbsolute = /^[A-Za-z]:\//.test(normalizedForCheck);
71
+ const isUnixAbsolute = normalizedForCheck.startsWith('/');
72
+ if (!isWindowsAbsolute && !isUnixAbsolute) {
73
+ return { valid: false, error: 'Path must be absolute' };
74
+ }
75
+ const lowerPath = normalizedForCheck.toLowerCase();
76
+ for (const pattern of BLOCKED_PSEUDO_PATHS) {
77
+ if (lowerPath.includes(pattern)) {
78
+ return { valid: false, error: 'Path to pseudo-filesystem is blocked' };
79
+ }
80
+ }
81
+ const resolved = path.resolve(inputPath);
82
+ const resolvedParts = resolved.split(path.sep);
83
+ if (resolvedParts.includes('..')) {
84
+ return { valid: false, error: 'Path traversal detected after resolution' };
85
+ }
86
+ const allowedDirs = config.security.allowedDirs.length > 0 ? config.security.allowedDirs : ['.'];
87
+ if (allowedDirs.length > 0) {
88
+ const isAllowed = allowedDirs.some((dir) => {
89
+ const resolvedDir = path.resolve(dir);
90
+ const relative = path.relative(resolvedDir, resolved);
91
+ const relativeParts = relative.split(path.sep);
92
+ return relativeParts[0] !== '..' && !path.isAbsolute(relative);
93
+ });
94
+ if (!isAllowed) {
95
+ return { valid: false, error: `Path not in allowed directories: ${resolved}` };
96
+ }
97
+ }
98
+ return { valid: true, normalized: resolved };
99
+ }
100
+ const SUSPICIOUS_PATTERNS = /[<>"';&|`$(){}\[\]!#~]|--|&&|\|\||\/\*|\*\//;
101
+ export function validateUrl(url) {
102
+ try {
103
+ const parsed = new URL(url);
104
+ if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
105
+ return { valid: false, error: `Blocked protocol: ${parsed.protocol}` };
106
+ }
107
+ if (isInternalIP(parsed.hostname)) {
108
+ return { valid: false, error: 'URL points to internal/reserved IP' };
109
+ }
110
+ return { valid: true };
111
+ }
112
+ catch {
113
+ // silently handled
114
+ return { valid: false, error: 'Invalid URL format' };
115
+ }
116
+ }
117
+ export function validateUrlAsync(url) {
118
+ try {
119
+ const parsed = new URL(url);
120
+ if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
121
+ return Promise.resolve({ valid: false, error: `Blocked protocol: ${parsed.protocol}` });
122
+ }
123
+ return new Promise((resolve) => {
124
+ dns.lookup(parsed.hostname, { all: true }, (err, addresses) => {
125
+ if (err) {
126
+ resolve({ valid: false, error: `DNS resolution failed: ${err.message}` });
127
+ return;
128
+ }
129
+ for (const addr of addresses) {
130
+ if (isInternalIP(addr.address)) {
131
+ resolve({ valid: false, error: `URL resolves to internal IP: ${addr.address}` });
132
+ return;
133
+ }
134
+ }
135
+ resolve({ valid: true });
136
+ });
137
+ });
138
+ }
139
+ catch {
140
+ // silently handled
141
+ return Promise.resolve({ valid: false, error: 'Invalid URL format' });
142
+ }
143
+ }
144
+ export function sanitizeInput(input) {
145
+ const warnings = [];
146
+ let str = String(input ?? '');
147
+ const original = str;
148
+ let blocked = false;
149
+ if (str.length > MAX_INPUT_LENGTH) {
150
+ str = str.substring(0, MAX_INPUT_LENGTH);
151
+ warnings.push('Input truncated to 100000 characters');
152
+ }
153
+ if (SUSPICIOUS_PATTERNS.test(str)) {
154
+ warnings.push('Input contains special characters that may be unsafe in certain contexts');
155
+ blocked = true;
156
+ }
157
+ try {
158
+ JSON.parse(str);
159
+ }
160
+ catch {
161
+ // silently handled
162
+ if (str !== original && str.length < 200) {
163
+ warnings.push('Input is not valid JSON');
164
+ }
165
+ }
166
+ return { sanitized: str, warnings, blocked };
167
+ }
168
+ //# sourceMappingURL=sandbox.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/core/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAE1D,MAAM,YAAY,GAAG;IACnB,aAAa;IACb,YAAY;IACZ,eAAe;IACf,gBAAgB;IAChB,SAAS;IACT,UAAU;IACV,WAAW;CACZ,CAAC;AAEF,SAAS,aAAa,CAAC,EAAU;IAC/B,MAAM,UAAU,GAAG,+BAA+B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5D,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,sCAAsC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvE,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU,EAAE,IAAY;IACxC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,EAAE,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC,CAAC,sBAAsB;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC5F,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,IAAI,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,IAAI,SAAS,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC;IACnF,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,kBAAkB,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,iBAAiB,GAAG,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,kBAAkB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,iBAAiB,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;QAC3C,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEzC,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACjG,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE;YACjD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACtD,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,OAAO,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,QAAQ,EAAE,EAAE,CAAC;QACjF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,mBAAmB,GAAG,6CAA6C,CAAC;AAE1E,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QACzE,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;QACnB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE;gBAC5D,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC1E,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;oBAC7B,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC/B,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;wBACjF,OAAO;oBACT,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;QACnB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,IAAI,GAAG,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;QAC1F,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;QACnB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC"}