@skillsmith/core 0.5.6 → 0.5.8

package/dist/security/rate-limiter/token-bucket.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token-bucket.js","sourceRoot":"","sources":["../../../src/security/rate-limiter/token-bucket.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAeH;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAyB,EACzB,MAAyB,EACzB,GAAW,EACX,IAAY;IAEZ,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,GAAG,EAAE,CAAA;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,IAAI,CAAC;QACH,IAAI,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG;gBACP,MAAM,EAAE,MAAM,CAAC,SAAS;gBACxB,UAAU,EAAE,GAAG;gBACf,YAAY,EAAE,GAAG;aAClB,CAAA;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,SAAS,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,CAAA;QACzC,MAAM,cAAc,GAAG,SAAS,GAAG,IAAI,CAAA;QACvC,MAAM,WAAW,GAAG,cAAc,GAAG,MAAM,CAAC,UAAU,CAAA;QAEtD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,CAAA;YACvE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAA;QACzB,CAAC;QAED,iCAAiC;QACjC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAA;QAErC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,IAAI,IAAI,CAAA;YACrB,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;YAEtD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;gBACpC,KAAK,EAAE,MAAM,CAAC,SAAS;aACxB,CAAA;QACH,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,CAAA;YACzC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAA;YACzE,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,CAAC,WAAW,EAAE,CAAA;YAE1D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;gBACpC,KAAK,EAAE,MAAM,CAAC,SAAS;gBACvB,YAAY;gBACZ,OAAO;aACR,CAAA;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;QACtC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,CAAC;gBACZ,KAAK,EAAE,MAAM,CAAC,SAAS;gBACvB,YAAY,EAAE,MAAM,CAAC,QAAQ;aAC9B,CAAA;QACH,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,MAAM,CAAC,SAAS;SACxB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAyB,EACzB,SAAiB,EACjB,GAAW;IAEX,MAAM,UAAU,GAAG,GAAG,SAAS,IAAI,GAAG,EAAE,CAAA;IACxC,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAyB,EACzB,SAAiB,EACjB,GAAW;IAEX,MAAM,UAAU,GAAG,GAAG,SAAS,IAAI,GAAG,EAAE,CAAA;IACxC,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;AAClC,CAAC"}

package/dist/security/rate-limiter/types.d.ts

@@ -1,104 +0,0 @@
-/**
- * Rate Limiter Types - SMI-730, SMI-1013, SMI-1189
- *
- * Type definitions for rate limiting functionality.
- */
-/**
- * Rate limit metrics for monitoring and alerting
- */
-export interface RateLimitMetrics {
-    /** Number of allowed requests */
-    allowed: number;
-    /** Number of blocked requests */
-    blocked: number;
-    /** Number of errors (storage failures, etc.) */
-    errors: number;
-    /** Last time metrics were reset */
-    lastReset: Date;
-    /** Last time metrics were updated */
-    lastUpdated: Date;
-}
-/**
- * Rate limit configuration
- */
-export interface RateLimitConfig {
-    /** Maximum tokens in bucket (burst capacity) */
-    maxTokens: number;
-    /** Tokens refilled per second */
-    refillRate: number;
-    /** Window duration in milliseconds (for cleanup) */
-    windowMs: number;
-    /** Key prefix for storage */
-    keyPrefix?: string;
-    /** Enable debug logging */
-    debug?: boolean;
-    /** Callback when rate limit is exceeded */
-    onLimitExceeded?: (key: string, metrics: RateLimitMetrics) => void;
-    /** Fail mode on storage errors: 'open' allows requests, 'closed' denies them (default: 'open') */
-    failMode?: 'open' | 'closed';
-    /** Enable request queuing when rate limited (SMI-1013, default: false) */
-    enableQueue?: boolean;
-    /** Maximum time to wait in queue in milliseconds (SMI-1013, default: 30000) */
-    queueTimeoutMs?: number;
-    /** Maximum number of requests that can wait in queue (SMI-1013, default: 100) */
-    maxQueueSize?: number;
-}
-/**
- * Token bucket state
- */
-export interface TokenBucket {
-    /** Current number of tokens */
-    tokens: number;
-    /** Last refill timestamp */
-    lastRefill: number;
-    /** First request timestamp (for window tracking) */
-    firstRequest: number;
-}
-/**
- * Rate limit result
- */
-export interface RateLimitResult {
-    /** Whether the request is allowed */
-    allowed: boolean;
-    /** Remaining tokens */
-    remaining: number;
-    /** Total tokens in bucket */
-    limit: number;
-    /** Milliseconds until bucket refills */
-    retryAfterMs?: number;
-    /** When the limit resets (ISO timestamp) */
-    resetAt?: string;
-    /** Current metrics for this key (optional) */
-    metrics?: RateLimitMetrics;
-    /** Whether the request waited in queue (SMI-1013) */
-    queued?: boolean;
-    /** Time spent waiting in queue in milliseconds (SMI-1013) */
-    queueWaitMs?: number;
-}
-/**
- * Queued request waiting for a token (SMI-1013)
- */
-export interface QueuedRequest {
-    /** Unique identifier for this request */
-    id: string;
-    /** Resolve function to signal the request can proceed */
-    resolve: (result: RateLimitResult) => void;
-    /** Reject function for timeout */
-    reject: (error: Error) => void;
-    /** Token cost for this request */
-    cost: number;
-    /** Timestamp when request was queued */
-    queuedAt: number;
-    /** Timeout handle */
-    timeoutHandle: NodeJS.Timeout;
-}
-/**
- * Storage interface for rate limit data
- */
-export interface RateLimitStorage {
-    get(key: string): Promise<TokenBucket | null>;
-    set(key: string, value: TokenBucket, ttlMs: number): Promise<void>;
-    delete(key: string): Promise<void>;
-    clear?(): Promise<void>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/security/rate-limiter/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/rate-limiter/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAA;IACd,mCAAmC;IACnC,SAAS,EAAE,IAAI,CAAA;IACf,qCAAqC;IACrC,WAAW,EAAE,IAAI,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAA;IACjB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAA;IAChB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,2CAA2C;IAC3C,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAA;IAClE,kGAAkG;IAClG,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAA;IAC5B,0EAA0E;IAC1E,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAA;IAChB,uBAAuB;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,qDAAqD;IACrD,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAA;IACV,yDAAyD;IACzD,OAAO,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,IAAI,CAAA;IAC1C,kCAAkC;IAClC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;IAC9B,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAA;IAChB,qBAAqB;IACrB,aAAa,EAAE,MAAM,CAAC,OAAO,CAAA;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IAC7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACxB"}

package/dist/security/rate-limiter/types.js

@@ -1,7 +0,0 @@
-/**
- * Rate Limiter Types - SMI-730, SMI-1013, SMI-1189
- *
- * Type definitions for rate limiting functionality.
- */
-export {};
-//# sourceMappingURL=types.js.map

package/dist/security/rate-limiter/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/security/rate-limiter/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/security/risk-trend.d.ts

@@ -1,21 +0,0 @@
-/**
- * @fileoverview Risk trend detection for supply chain attack monitoring
- * @module @skillsmith/core/security/risk-trend
- * @see SMI-3874: Risk Trend Detection
- */
-import type { RiskScoreSnapshot } from '../repositories/RiskScoreHistoryRepository.js';
-export interface RiskTrendResult {
-    anomaly: boolean;
-    message: string;
-    currentScore: number;
-    previousScore: number | null;
-    delta: number;
-}
-/**
- * Detect anomalous risk score changes that may indicate supply chain attacks.
- * Thresholds: 20pt warning, 35pt critical, 40pt boundary crossing.
- */
-export declare function detectRiskTrend(currentScore: number, history: RiskScoreSnapshot[], options?: {
-    isNewCategoryBaseline?: boolean;
-}): RiskTrendResult;
-//# sourceMappingURL=risk-trend.d.ts.map

package/dist/security/risk-trend.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"risk-trend.d.ts","sourceRoot":"","sources":["../../src/security/risk-trend.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+CAA+C,CAAA;AAEtF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,iBAAiB,EAAE,EAC5B,OAAO,CAAC,EAAE;IAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5C,eAAe,CAyEjB"}

package/dist/security/risk-trend.js

@@ -1,81 +0,0 @@
-/**
- * @fileoverview Risk trend detection for supply chain attack monitoring
- * @module @skillsmith/core/security/risk-trend
- * @see SMI-3874: Risk Trend Detection
- */
-/**
- * Detect anomalous risk score changes that may indicate supply chain attacks.
- * Thresholds: 20pt warning, 35pt critical, 40pt boundary crossing.
- */
-export function detectRiskTrend(currentScore, history, options) {
-    if (history.length === 0) {
-        return {
-            anomaly: false,
-            message: 'No prior scan history for comparison.',
-            currentScore,
-            previousScore: null,
-            delta: 0,
-        };
-    }
-    const previous = history[0];
-    const delta = currentScore - previous.riskScore;
-    if (options?.isNewCategoryBaseline) {
-        return {
-            anomaly: false,
-            message: 'New scanner category baseline (' +
-                previous.riskScore +
-                ' -> ' +
-                currentScore +
-                '). Not flagged as anomaly.',
-            currentScore,
-            previousScore: previous.riskScore,
-            delta,
-        };
-    }
-    const crossesBoundary = previous.riskScore < 40 && currentScore >= 40;
-    const isLargeJump = delta >= 20;
-    const isCriticalJump = delta >= 35;
-    const anomaly = isLargeJump || crossesBoundary;
-    let message;
-    if (isCriticalJump) {
-        message =
-            'CRITICAL: Risk score jumped from ' +
-                previous.riskScore +
-                ' to ' +
-                currentScore +
-                ' (+' +
-                delta +
-                '). Possible supply chain compromise.';
-    }
-    else if (crossesBoundary) {
-        message =
-            'WARNING: Risk score crossed safety threshold (' +
-                previous.riskScore +
-                ' -> ' +
-                currentScore +
-                '). Review recent changes.';
-    }
-    else if (isLargeJump) {
-        message =
-            'WARNING: Risk score increased by ' +
-                delta +
-                ' points (' +
-                previous.riskScore +
-                ' -> ' +
-                currentScore +
-                ').';
-    }
-    else {
-        message =
-            'Risk score stable (' +
-                previous.riskScore +
-                ' -> ' +
-                currentScore +
-                ', delta: ' +
-                (delta >= 0 ? '+' : '') +
-                delta +
-                ').';
-    }
-    return { anomaly, message, currentScore, previousScore: previous.riskScore, delta };
-}
-//# sourceMappingURL=risk-trend.js.map

package/dist/security/risk-trend.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"risk-trend.js","sourceRoot":"","sources":["../../src/security/risk-trend.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAYH;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,YAAoB,EACpB,OAA4B,EAC5B,OAA6C;IAE7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,uCAAuC;YAChD,YAAY;YACZ,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,CAAC;SACT,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAC3B,MAAM,KAAK,GAAG,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAA;IAE/C,IAAI,OAAO,EAAE,qBAAqB,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EACL,iCAAiC;gBACjC,QAAQ,CAAC,SAAS;gBAClB,MAAM;gBACN,YAAY;gBACZ,4BAA4B;YAC9B,YAAY;YACZ,aAAa,EAAE,QAAQ,CAAC,SAAS;YACjC,KAAK;SACN,CAAA;IACH,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,SAAS,GAAG,EAAE,IAAI,YAAY,IAAI,EAAE,CAAA;IACrE,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE,CAAA;IAC/B,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,WAAW,IAAI,eAAe,CAAA;IAE9C,IAAI,OAAe,CAAA;IACnB,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;YACL,mCAAmC;gBACnC,QAAQ,CAAC,SAAS;gBAClB,MAAM;gBACN,YAAY;gBACZ,KAAK;gBACL,KAAK;gBACL,sCAAsC,CAAA;IAC1C,CAAC;SAAM,IAAI,eAAe,EAAE,CAAC;QAC3B,OAAO;YACL,gDAAgD;gBAChD,QAAQ,CAAC,SAAS;gBAClB,MAAM;gBACN,YAAY;gBACZ,2BAA2B,CAAA;IAC/B,CAAC;SAAM,IAAI,WAAW,EAAE,CAAC;QACvB,OAAO;YACL,mCAAmC;gBACnC,KAAK;gBACL,WAAW;gBACX,QAAQ,CAAC,SAAS;gBAClB,MAAM;gBACN,YAAY;gBACZ,IAAI,CAAA;IACR,CAAC;SAAM,CAAC;QACN,OAAO;YACL,qBAAqB;gBACrB,QAAQ,CAAC,SAAS;gBAClB,MAAM;gBACN,YAAY;gBACZ,WAAW;gBACX,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,KAAK;gBACL,IAAI,CAAA;IACR,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,CAAA;AACrF,CAAC"}

package/dist/security/sanitization.d.ts

@@ -1,124 +0,0 @@
-/**
- * SMI-732: Input Sanitization Library
- * SMI-750: Added input length limits to prevent ReDoS attacks
- *
- * Provides comprehensive input sanitization functions for:
- * - HTML content (XSS prevention)
- * - File names (path traversal prevention)
- * - File paths (directory traversal prevention)
- * - URLs (injection prevention)
- *
- * All functions are defensive and return safe defaults on invalid input.
- * All functions accept maxLength parameter to prevent ReDoS attacks.
- */
-export { isValidStripeId, sanitizeStripeCustomerId, sanitizeStripeSubscriptionId, sanitizeStripePriceId, sanitizeStripeInvoiceId, sanitizeStripeEventId, } from './stripe-validators.js';
-/** Default maximum input length for sanitization functions to prevent ReDoS */
-export declare const DEFAULT_MAX_LENGTH = 100000;
-/**
- * Sanitize HTML content to prevent XSS attacks
- *
- * Removes dangerous tags, attributes, and JavaScript while preserving safe HTML.
- * Uses a whitelist approach for maximum security.
- *
- * @param input - Raw HTML string
- * @param maxLength - Maximum allowed input length (default: 100000)
- * @returns Sanitized HTML safe for rendering
- *
- * @example
- * ```typescript
- * sanitizeHtml('<script>alert("XSS")</script><p>Hello</p>')
- * // Returns: '<p>Hello</p>'
- * ```
- */
-export declare function sanitizeHtml(input: string, maxLength?: number): string;
-/**
- * Sanitize file name to prevent path traversal and invalid characters
- *
- * Removes:
- * - Path separators (/, \)
- * - Parent directory references (..)
- * - Hidden file markers (leading .)
- * - Special characters that are invalid in file names
- * - Control characters
- *
- * @param name - Raw file name
- * @param maxLength - Maximum allowed input length (default: 100000)
- * @returns Safe file name or empty string if invalid
- *
- * @example
- * ```typescript
- * sanitizeFileName('../../../etc/passwd')
- * // Returns: 'etcpasswd'
- *
- * sanitizeFileName('my-file.txt')
- * // Returns: 'my-file.txt'
- * ```
- */
-export declare function sanitizeFileName(name: string, maxLength?: number): string;
-/**
- * Sanitize file path to prevent directory traversal attacks
- *
- * Ensures the path:
- * - Does not escape the root directory
- * - Contains no parent directory references
- * - Uses forward slashes consistently
- * - Is normalized
- *
- * @param path - Raw file path
- * @param rootDir - Root directory to constrain path to (optional)
- * @param maxLength - Maximum allowed input length (default: 100000)
- * @returns Safe path or empty string if invalid
- *
- * @example
- * ```typescript
- * sanitizePath('../../../etc/passwd', '/app/data')
- * // Returns: ''
- *
- * sanitizePath('user/files/doc.txt', '/app/data')
- * // Returns: 'user/files/doc.txt'
- * ```
- */
-export declare function sanitizePath(path: string, rootDir?: string, maxLength?: number): string;
-/**
- * Sanitize URL to prevent injection attacks
- *
- * Validates:
- * - Protocol is http or https
- * - No javascript:, data:, or vbscript: protocols
- * - No embedded credentials
- * - Valid URL structure
- *
- * @param url - Raw URL string
- * @param maxLength - Maximum allowed input length (default: 100000)
- * @returns Sanitized URL or empty string if invalid
- *
- * @example
- * ```typescript
- * sanitizeUrl('javascript:alert(1)')
- * // Returns: ''
- *
- * sanitizeUrl('https://example.com/page')
- * // Returns: 'https://example.com/page'
- * ```
- */
-export declare function sanitizeUrl(url: string, maxLength?: number): string;
-/**
- * Sanitize arbitrary text input for safe storage and display
- *
- * Removes:
- * - Control characters
- * - Zero-width characters
- * - Invalid Unicode
- *
- * @param input - Raw text input
- * @param maxLength - Maximum allowed input length (default: 100000)
- * @returns Sanitized text
- *
- * @example
- * ```typescript
- * sanitizeText('Hello\x00World\u200B')
- * // Returns: 'HelloWorld'
- * ```
- */
-export declare function sanitizeText(input: string, maxLength?: number): string;
-//# sourceMappingURL=sanitization.d.ts.map

package/dist/security/sanitization.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sanitization.d.ts","sourceRoot":"","sources":["../../src/security/sanitization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,4BAA4B,EAC5B,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,wBAAwB,CAAA;AAI/B,+EAA+E;AAC/E,eAAO,MAAM,kBAAkB,SAAS,CAAA;AAExC;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,SAAqB,GAAG,MAAM,CA0DlF;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAqB,GAAG,MAAM,CAmFrF;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,EAChB,SAAS,SAAqB,GAC7B,MAAM,CAkGR;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,SAAqB,GAAG,MAAM,CAiD/E;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,SAAqB,GAAG,MAAM,CA8BlF"}