@zappzarapp/browser-utils 1.0.0

package/dist/core/validation/FilenameValidator.js

@@ -0,0 +1,84 @@
+import { ValidationError, Result } from '..';
+const FORBIDDEN_FILENAME_CHARS = /[<>:"/\\|?*\x00-\x1f]/;
+const PATH_TRAVERSAL_PATTERN = /(?:^|[/\\])\.\.(?:[/\\]|$)/;
+const RESERVED_FILENAMES = /^(?:CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(?:\.|$)/i;
+const MAX_FILENAME_LENGTH = 255;
+const MAX_MIMETYPE_LENGTH = 127;
+export const FilenameValidator = {
+    filename(filename) {
+        const result = FilenameValidator.filenameResult(filename);
+        if (Result.isErr(result)) {
+            throw result.error;
+        }
+    },
+    filenameResult(filename) {
+        if (!filename) {
+            return Result.err(ValidationError.empty('filename'));
+        }
+        if (filename.length > MAX_FILENAME_LENGTH) {
+            return Result.err(ValidationError.tooLong('filename', filename, MAX_FILENAME_LENGTH));
+        }
+        if (FORBIDDEN_FILENAME_CHARS.test(filename)) {
+            return Result.err(ValidationError.containsForbiddenChars('filename', filename, '< > : " / \\ | ? * control chars'));
+        }
+        if (PATH_TRAVERSAL_PATTERN.test(filename)) {
+            return Result.err(ValidationError.invalidFilename(filename, 'path traversal detected'));
+        }
+        if (RESERVED_FILENAMES.test(filename)) {
+            return Result.err(ValidationError.invalidFilename(filename, 'reserved system name'));
+        }
+        if (filename.startsWith('.') || filename.startsWith(' ')) {
+            return Result.err(ValidationError.invalidFilename(filename, 'cannot start with dot or space'));
+        }
+        if (filename.endsWith('.') || filename.endsWith(' ')) {
+            return Result.err(ValidationError.invalidFilename(filename, 'cannot end with dot or space'));
+        }
+        return Result.ok(filename);
+    },
+    sanitizeFilename(filename, replacement = '_') {
+        if (!filename) {
+            return 'download';
+        }
+        let sanitized = filename
+            .replace(FORBIDDEN_FILENAME_CHARS, replacement)
+            .replace(/\.\./g, replacement)
+            .replace(/^[.\s]+|[.\s]+$/g, '');
+        if (RESERVED_FILENAMES.test(sanitized)) {
+            sanitized = `_${sanitized}`;
+        }
+        if (!sanitized) {
+            return 'download';
+        }
+        if (sanitized.length > MAX_FILENAME_LENGTH) {
+            const ext = sanitized.lastIndexOf('.');
+            if (ext > 0 && ext > sanitized.length - 10) {
+                const extension = sanitized.substring(ext);
+                const base = sanitized.substring(0, MAX_FILENAME_LENGTH - extension.length);
+                sanitized = base + extension;
+            }
+            else {
+                sanitized = sanitized.substring(0, MAX_FILENAME_LENGTH);
+            }
+        }
+        return sanitized;
+    },
+    mimeType(mimeType) {
+        const result = FilenameValidator.mimeTypeResult(mimeType);
+        if (Result.isErr(result)) {
+            throw result.error;
+        }
+    },
+    mimeTypeResult(mimeType) {
+        if (!mimeType) {
+            return Result.err(ValidationError.empty('mimeType'));
+        }
+        if (mimeType.length > MAX_MIMETYPE_LENGTH) {
+            return Result.err(ValidationError.tooLong('mimeType', mimeType, MAX_MIMETYPE_LENGTH));
+        }
+        if (!/^[a-z]+\/[a-z0-9.+-]+(?:;\s*[a-z0-9-]+=\S+)*$/i.test(mimeType)) {
+            return Result.err(ValidationError.invalidFormat('mimeType', mimeType, 'type/subtype (e.g., text/plain)'));
+        }
+        return Result.ok(mimeType);
+    },
+};
+//# sourceMappingURL=FilenameValidator.js.map

package/dist/core/validation/FilenameValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FilenameValidator.js","sourceRoot":"","sources":["../../../src/core/validation/FilenameValidator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAK7C,MAAM,wBAAwB,GAAG,uBAAuB,CAAC;AAKzD,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAK5D,MAAM,kBAAkB,GAAG,iDAAiD,CAAC;AAK7E,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAKhC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAK/B,QAAQ,CAAC,QAAgB;QACvB,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IAKD,cAAc,CAAC,QAAgB;QAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACxF,CAAC;QAGD,IAAI,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,GAAG,CACf,eAAe,CAAC,sBAAsB,CACpC,UAAU,EACV,QAAQ,EACR,kCAAkC,CACnC,CACF,CAAC;QACJ,CAAC;QAGD,IAAI,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,eAAe,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC,CAAC;QAC1F,CAAC;QAGD,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,eAAe,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACvF,CAAC;QAGD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,MAAM,CAAC,GAAG,CACf,eAAe,CAAC,eAAe,CAAC,QAAQ,EAAE,gCAAgC,CAAC,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,eAAe,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC,CAAC;QAC/F,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAMD,gBAAgB,CAAC,QAAgB,EAAE,WAAW,GAAG,GAAG;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,SAAS,GAAG,QAAQ;aAErB,OAAO,CAAC,wBAAwB,EAAE,WAAW,CAAC;aAE9C,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC;aAE7B,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAGnC,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;QAC9B,CAAC;QAGD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,UAAU,CAAC;QACpB,CAAC;QAGD,IAAI,SAAS,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBAE3C,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC5E,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAMD,QAAQ,CAAC,QAAgB;QACvB,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IAKD,cAAc,CAAC,QAAgB;QAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACxF,CAAC;QAKD,IAAI,CAAC,gDAAgD,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrE,OAAO,MAAM,CAAC,GAAG,CACf,eAAe,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,iCAAiC,CAAC,CACvF,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;CACO,CAAC"}

package/dist/core/validation/StorageValidator.d.ts

@@ -0,0 +1,8 @@
+import { ValidationError, Result } from '..';
+export declare const StorageValidator: {
+    readonly storageKey: (key: string) => void;
+    readonly storageKeyResult: (key: string) => Result<string, ValidationError>;
+    readonly storagePrefix: (prefix: string) => void;
+    readonly storagePrefixResult: (prefix: string) => Result<string, ValidationError>;
+};
+//# sourceMappingURL=StorageValidator.d.ts.map

package/dist/core/validation/StorageValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StorageValidator.d.ts","sourceRoot":"","sources":["../../../src/core/validation/StorageValidator.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAe7C,eAAO,MAAM,gBAAgB;+BAKX,MAAM,KAAG,IAAI;qCAUP,MAAM,KAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;qCA0BxC,MAAM,KAAG,IAAI;2CAUP,MAAM,KAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;CAkC5D,CAAC"}

package/dist/core/validation/StorageValidator.js

@@ -0,0 +1,48 @@
+import { ValidationError, Result } from '..';
+const FORBIDDEN_KEY_CHARS = /[;\x00-\x1f]/;
+const MAX_LENGTHS = {
+    storageKey: 128,
+    storagePrefix: 32,
+};
+export const StorageValidator = {
+    storageKey(key) {
+        const result = StorageValidator.storageKeyResult(key);
+        if (Result.isErr(result)) {
+            throw result.error;
+        }
+    },
+    storageKeyResult(key) {
+        if (!key) {
+            return Result.err(ValidationError.empty('storageKey'));
+        }
+        if (key.length > MAX_LENGTHS.storageKey) {
+            return Result.err(ValidationError.tooLong('storageKey', key, MAX_LENGTHS.storageKey));
+        }
+        if (FORBIDDEN_KEY_CHARS.test(key)) {
+            return Result.err(ValidationError.containsForbiddenChars('storageKey', key, 'semicolon, newline, control chars'));
+        }
+        return Result.ok(key);
+    },
+    storagePrefix(prefix) {
+        const result = StorageValidator.storagePrefixResult(prefix);
+        if (Result.isErr(result)) {
+            throw result.error;
+        }
+    },
+    storagePrefixResult(prefix) {
+        if (!prefix) {
+            return Result.err(ValidationError.empty('storagePrefix'));
+        }
+        if (prefix.length > MAX_LENGTHS.storagePrefix) {
+            return Result.err(ValidationError.tooLong('storagePrefix', prefix, MAX_LENGTHS.storagePrefix));
+        }
+        if (FORBIDDEN_KEY_CHARS.test(prefix)) {
+            return Result.err(ValidationError.containsForbiddenChars('storagePrefix', prefix, 'semicolon, newline, control chars'));
+        }
+        if (!/^[a-zA-Z][a-zA-Z0-9_-]*$/.test(prefix)) {
+            return Result.err(ValidationError.invalidFormat('storagePrefix', prefix, 'alphanumeric, starting with letter, may contain - or _'));
+        }
+        return Result.ok(prefix);
+    },
+};
+//# sourceMappingURL=StorageValidator.js.map

package/dist/core/validation/StorageValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StorageValidator.js","sourceRoot":"","sources":["../../../src/core/validation/StorageValidator.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAK7C,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAK3C,MAAM,WAAW,GAAG;IAClB,UAAU,EAAE,GAAG;IACf,aAAa,EAAE,EAAE;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAK9B,UAAU,CAAC,GAAW;QACpB,MAAM,MAAM,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IAKD,gBAAgB,CAAC,GAAW;QAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,MAAM,CAAC,GAAG,CACf,eAAe,CAAC,sBAAsB,CACpC,YAAY,EACZ,GAAG,EACH,mCAAmC,CACpC,CACF,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAMD,aAAa,CAAC,MAAc;QAC1B,MAAM,MAAM,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IAKD,mBAAmB,CAAC,MAAc;QAChC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC;YAC9C,OAAO,MAAM,CAAC,GAAG,CACf,eAAe,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,GAAG,CACf,eAAe,CAAC,sBAAsB,CACpC,eAAe,EACf,MAAM,EACN,mCAAmC,CACpC,CACF,CAAC;QACJ,CAAC;QAGD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,OAAO,MAAM,CAAC,GAAG,CACf,eAAe,CAAC,aAAa,CAC3B,eAAe,EACf,MAAM,EACN,wDAAwD,CACzD,CACF,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;CACO,CAAC"}

package/dist/core/validation/UrlValidator.d.ts

@@ -0,0 +1,10 @@
+import { ValidationError, Result } from '..';
+export interface UrlValidationOptions {
+    readonly additionalProtocols?: readonly string[];
+}
+export declare const UrlValidator: {
+    readonly DEFAULT_SAFE_PROTOCOLS: readonly string[];
+    readonly urlSafe: (url: string, options?: UrlValidationOptions) => void;
+    readonly urlSafeResult: (url: string, options?: UrlValidationOptions) => Result<string, ValidationError>;
+};
+//# sourceMappingURL=UrlValidator.d.ts.map

package/dist/core/validation/UrlValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UrlValidator.d.ts","sourceRoot":"","sources":["../../../src/core/validation/UrlValidator.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAmB7C,MAAM,WAAW,oBAAoB;IAKnC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClD;AA8BD,eAAO,MAAM,YAAY;;4BAYV,MAAM,YAAY,oBAAoB,KAAG,IAAI;kCAYvC,MAAM,YAAY,oBAAoB,KAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;CA6BnF,CAAC"}

package/dist/core/validation/UrlValidator.js

@@ -0,0 +1,52 @@
+import { ValidationError, Result } from '..';
+const DEFAULT_SAFE_PROTOCOLS = [
+    'http',
+    'https',
+    'ws',
+    'wss',
+    'mailto',
+    'ftp',
+    'ftps',
+];
+function buildProtocolPattern(options) {
+    const protocols = [...DEFAULT_SAFE_PROTOCOLS];
+    if (options?.additionalProtocols) {
+        for (const protocol of options.additionalProtocols) {
+            if (/^[a-z][a-z0-9+.-]*$/i.test(protocol)) {
+                protocols.push(protocol.toLowerCase());
+            }
+        }
+    }
+    const escaped = protocols.map((p) => p.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'));
+    return new RegExp(`^(?:${escaped.join('|')}):`, 'i');
+}
+const DEFAULT_SAFE_PATTERN = buildProtocolPattern();
+export const UrlValidator = {
+    DEFAULT_SAFE_PROTOCOLS,
+    urlSafe(url, options) {
+        const result = UrlValidator.urlSafeResult(url, options);
+        if (Result.isErr(result)) {
+            throw result.error;
+        }
+    },
+    urlSafeResult(url, options) {
+        if (!url) {
+            return Result.err(ValidationError.empty('url'));
+        }
+        const colonIndex = url.indexOf(':');
+        if (colonIndex === -1) {
+            return Result.ok(url);
+        }
+        const pattern = options?.additionalProtocols
+            ? buildProtocolPattern(options)
+            : DEFAULT_SAFE_PATTERN;
+        if (!pattern.test(url)) {
+            const allowedList = options?.additionalProtocols
+                ? [...DEFAULT_SAFE_PROTOCOLS, ...options.additionalProtocols].join(', ')
+                : DEFAULT_SAFE_PROTOCOLS.join(', ');
+            return Result.err(ValidationError.invalidFormat('url', url, `allowed protocol (${allowedList})`));
+        }
+        return Result.ok(url);
+    },
+};
+//# sourceMappingURL=UrlValidator.js.map

package/dist/core/validation/UrlValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UrlValidator.js","sourceRoot":"","sources":["../../../src/core/validation/UrlValidator.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAM7C,MAAM,sBAAsB,GAAsB;IAChD,MAAM;IACN,OAAO;IACP,IAAI;IACJ,KAAK;IACL,QAAQ;IACR,KAAK;IACL,MAAM;CACE,CAAC;AAkBX,SAAS,oBAAoB,CAAC,OAA8B;IAC1D,MAAM,SAAS,GAAG,CAAC,GAAG,sBAAsB,CAAC,CAAC;IAE9C,IAAI,OAAO,EAAE,mBAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAEnD,IAAI,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAGD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC;IAE/E,OAAO,IAAI,MAAM,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAKD,MAAM,oBAAoB,GAAG,oBAAoB,EAAE,CAAC;AAEpD,MAAM,CAAC,MAAM,YAAY,GAAG;IAI1B,sBAAsB;IAQtB,OAAO,CAAC,GAAW,EAAE,OAA8B;QACjD,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IAOD,aAAa,CAAC,GAAW,EAAE,OAA8B;QACvD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,CAAC;QAGD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YAEtB,OAAO,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAGD,MAAM,OAAO,GAAG,OAAO,EAAE,mBAAmB;YAC1C,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC;YAC/B,CAAC,CAAC,oBAAoB,CAAC;QAEzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,WAAW,GAAG,OAAO,EAAE,mBAAmB;gBAC9C,CAAC,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxE,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEtC,OAAO,MAAM,CAAC,GAAG,CACf,eAAe,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,qBAAqB,WAAW,GAAG,CAAC,CAC/E,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;CACO,CAAC"}

package/dist/core/validation/Validator.d.ts

@@ -0,0 +1,33 @@
+export declare const Validator: {
+    readonly storageKey: (key: string) => void;
+    readonly storageKeyResult: (key: string) => import("../index.js").Result<string, import("../index.js").ValidationError>;
+    readonly storagePrefix: (prefix: string) => void;
+    readonly storagePrefixResult: (prefix: string) => import("../index.js").Result<string, import("../index.js").ValidationError>;
+    readonly cacheKey: (key: string) => void;
+    readonly cacheKeyResult: (key: string) => import("../index.js").Result<string, import("../index.js").ValidationError>;
+    readonly filename: (filename: string) => void;
+    readonly filenameResult: (filename: string) => import("../index.js").Result<string, import("../index.js").ValidationError>;
+    readonly sanitizeFilename: (filename: string, replacement?: string) => string;
+    readonly mimeType: (mimeType: string) => void;
+    readonly mimeTypeResult: (mimeType: string) => import("../index.js").Result<string, import("../index.js").ValidationError>;
+    readonly cookieName: (name: string) => void;
+    readonly cookieNameResult: (name: string) => import("../index.js").Result<string, import("../index.js").ValidationError>;
+    readonly cookieValue: (value: string) => void;
+    readonly cookieValueResult: (value: string) => import("../index.js").Result<string, import("../index.js").ValidationError>;
+    readonly urlSafe: (url: string) => void;
+    readonly urlSafeResult: (url: string) => import("../index.js").Result<string, import("../index.js").ValidationError>;
+    readonly nonEmpty: (field: string, value: string) => void;
+    readonly nonEmptyResult: (field: string, value: string) => import("../index.js").Result<string, import("../index.js").ValidationError>;
+    readonly numberInRange: (field: string, value: number, min: number, max: number) => void;
+    readonly numberInRangeResult: (field: string, value: number, min: number, max: number) => import("../index.js").Result<number, import("../index.js").ValidationError>;
+    readonly positiveIntegerResult: (field: string, value: number) => import("../index.js").Result<number, import("../index.js").ValidationError>;
+    readonly clipboardText: (text: string) => void;
+    readonly clipboardTextResult: (text: string) => import("../index.js").Result<string, import("../index.js").ValidationError>;
+};
+export { StorageValidator } from './StorageValidator.js';
+export { CacheValidator } from './CacheValidator.js';
+export { FilenameValidator } from './FilenameValidator.js';
+export { CookieValidator } from './CookieValidator.js';
+export { UrlValidator } from './UrlValidator.js';
+export { CommonValidator } from './CommonValidator.js';
+//# sourceMappingURL=Validator.d.ts.map

package/dist/core/validation/Validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Validator.d.ts","sourceRoot":"","sources":["../../../src/core/validation/Validator.ts"],"names":[],"mappings":"AAuCA,eAAO,MAAM,SAAS;+BAMF,MAAM,KAAG,IAAI;qCAGP,MAAM;qCAGN,MAAM,KAAG,IAAI;2CAGP,MAAM;6BAOpB,MAAM,KAAG,IAAI;mCAGP,MAAM;kCAOP,MAAM,KAAG,IAAI;wCAGP,MAAM;0CAGJ,MAAM,gBAAgB,MAAM;kCAIpC,MAAM,KAAG,IAAI;wCAGP,MAAM;gCAOd,MAAM,KAAG,IAAI;sCAGP,MAAM;kCAGV,MAAM,KAAG,IAAI;wCAGP,MAAM;4BAOlB,MAAM,KAAG,IAAI;kCAGP,MAAM;+BAOT,MAAM,SAAS,MAAM,KAAG,IAAI;qCAGtB,MAAM,SAAS,MAAM;oCAGtB,MAAM,SAAS,MAAM,OAAO,MAAM,OAAO,MAAM,KAAG,IAAI;0CAIhD,MAAM,SAAS,MAAM,OAAO,MAAM,OAAO,MAAM;4CAI7C,MAAM,SAAS,MAAM;mCAI9B,MAAM,KAAG,IAAI;yCAGP,MAAM;CAC1B,CAAC;AAGX,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/core/validation/Validator.js

@@ -0,0 +1,39 @@
+import { StorageValidator } from './StorageValidator.js';
+import { CacheValidator } from './CacheValidator.js';
+import { FilenameValidator } from './FilenameValidator.js';
+import { CookieValidator } from './CookieValidator.js';
+import { UrlValidator } from './UrlValidator.js';
+import { CommonValidator } from './CommonValidator.js';
+export const Validator = {
+    storageKey: (key) => StorageValidator.storageKey(key),
+    storageKeyResult: (key) => StorageValidator.storageKeyResult(key),
+    storagePrefix: (prefix) => StorageValidator.storagePrefix(prefix),
+    storagePrefixResult: (prefix) => StorageValidator.storagePrefixResult(prefix),
+    cacheKey: (key) => CacheValidator.cacheKey(key),
+    cacheKeyResult: (key) => CacheValidator.cacheKeyResult(key),
+    filename: (filename) => FilenameValidator.filename(filename),
+    filenameResult: (filename) => FilenameValidator.filenameResult(filename),
+    sanitizeFilename: (filename, replacement) => FilenameValidator.sanitizeFilename(filename, replacement),
+    mimeType: (mimeType) => FilenameValidator.mimeType(mimeType),
+    mimeTypeResult: (mimeType) => FilenameValidator.mimeTypeResult(mimeType),
+    cookieName: (name) => CookieValidator.cookieName(name),
+    cookieNameResult: (name) => CookieValidator.cookieNameResult(name),
+    cookieValue: (value) => CookieValidator.cookieValue(value),
+    cookieValueResult: (value) => CookieValidator.cookieValueResult(value),
+    urlSafe: (url) => UrlValidator.urlSafe(url),
+    urlSafeResult: (url) => UrlValidator.urlSafeResult(url),
+    nonEmpty: (field, value) => CommonValidator.nonEmpty(field, value),
+    nonEmptyResult: (field, value) => CommonValidator.nonEmptyResult(field, value),
+    numberInRange: (field, value, min, max) => CommonValidator.numberInRange(field, value, min, max),
+    numberInRangeResult: (field, value, min, max) => CommonValidator.numberInRangeResult(field, value, min, max),
+    positiveIntegerResult: (field, value) => CommonValidator.positiveIntegerResult(field, value),
+    clipboardText: (text) => CommonValidator.clipboardText(text),
+    clipboardTextResult: (text) => CommonValidator.clipboardTextResult(text),
+};
+export { StorageValidator } from './StorageValidator.js';
+export { CacheValidator } from './CacheValidator.js';
+export { FilenameValidator } from './FilenameValidator.js';
+export { CookieValidator } from './CookieValidator.js';
+export { UrlValidator } from './UrlValidator.js';
+export { CommonValidator } from './CommonValidator.js';
+//# sourceMappingURL=Validator.js.map

package/dist/core/validation/Validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Validator.js","sourceRoot":"","sources":["../../../src/core/validation/Validator.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAWvD,MAAM,CAAC,MAAM,SAAS,GAAG;IAMvB,UAAU,EAAE,CAAC,GAAW,EAAQ,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC;IAGnE,gBAAgB,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,GAAG,CAAC;IAGzE,aAAa,EAAE,CAAC,MAAc,EAAQ,EAAE,CAAC,gBAAgB,CAAC,aAAa,CAAC,MAAM,CAAC;IAG/E,mBAAmB,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,MAAM,CAAC;IAOrF,QAAQ,EAAE,CAAC,GAAW,EAAQ,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;IAG7D,cAAc,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,CAAC;IAOnE,QAAQ,EAAE,CAAC,QAAgB,EAAQ,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAG1E,cAAc,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC;IAGhF,gBAAgB,EAAE,CAAC,QAAgB,EAAE,WAAoB,EAAE,EAAE,CAC3D,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC;IAG3D,QAAQ,EAAE,CAAC,QAAgB,EAAQ,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAG1E,cAAc,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,iBAAiB,CAAC,cAAc,CAAC,QAAQ,CAAC;IAOhF,UAAU,EAAE,CAAC,IAAY,EAAQ,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC;IAGpE,gBAAgB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,eAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC;IAG1E,WAAW,EAAE,CAAC,KAAa,EAAQ,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC;IAGxE,iBAAiB,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,eAAe,CAAC,iBAAiB,CAAC,KAAK,CAAC;IAO9E,OAAO,EAAE,CAAC,GAAW,EAAQ,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC;IAGzD,aAAa,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC;IAO/D,QAAQ,EAAE,CAAC,KAAa,EAAE,KAAa,EAAQ,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAGxF,cAAc,EAAE,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE,CAAC,eAAe,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC;IAG9F,aAAa,EAAE,CAAC,KAAa,EAAE,KAAa,EAAE,GAAW,EAAE,GAAW,EAAQ,EAAE,CAC9E,eAAe,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;IAGvD,mBAAmB,EAAE,CAAC,KAAa,EAAE,KAAa,EAAE,GAAW,EAAE,GAAW,EAAE,EAAE,CAC9E,eAAe,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;IAG7D,qBAAqB,EAAE,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE,CACtD,eAAe,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC;IAGrD,aAAa,EAAE,CAAC,IAAY,EAAQ,EAAE,CAAC,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC;IAG1E,mBAAmB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,eAAe,CAAC,mBAAmB,CAAC,IAAI,CAAC;CACxE,CAAC;AAGX,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/core/validation/index.d.ts

@@ -0,0 +1,8 @@
+export { Validator } from './Validator.js';
+export { StorageValidator } from './StorageValidator.js';
+export { FilenameValidator } from './FilenameValidator.js';
+export { CookieValidator } from './CookieValidator.js';
+export { CacheValidator } from './CacheValidator.js';
+export { UrlValidator } from './UrlValidator.js';
+export { CommonValidator } from './CommonValidator.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/core/validation/index.js

@@ -0,0 +1,8 @@
+export { Validator } from './Validator.js';
+export { StorageValidator } from './StorageValidator.js';
+export { FilenameValidator } from './FilenameValidator.js';
+export { CookieValidator } from './CookieValidator.js';
+export { CacheValidator } from './CacheValidator.js';
+export { UrlValidator } from './UrlValidator.js';
+export { CommonValidator } from './CommonValidator.js';
+//# sourceMappingURL=index.js.map

package/dist/core/validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/csp/CspUtils.d.ts

@@ -0,0 +1,24 @@
+export type CspDirective = 'default-src' | 'script-src' | 'style-src' | 'img-src' | 'connect-src' | 'font-src' | 'object-src' | 'media-src' | 'frame-src' | 'sandbox' | 'report-uri' | 'child-src' | 'form-action' | 'frame-ancestors' | 'plugin-types' | 'base-uri' | 'report-to' | 'worker-src' | 'manifest-src' | 'prefetch-src' | 'navigate-to' | 'script-src-elem' | 'script-src-attr' | 'style-src-elem' | 'style-src-attr';
+export interface CspViolationDetail {
+    readonly violatedDirective: string;
+    readonly effectiveDirective: string;
+    readonly blockedUri: string;
+    readonly documentUri: string;
+    readonly originalPolicy: string;
+    readonly sample?: string;
+    readonly lineNumber?: number;
+    readonly columnNumber?: number;
+    readonly sourceFile?: string;
+}
+export type CspViolationHandler = (detail: CspViolationDetail) => void;
+export declare const CspUtils: {
+    readonly allowsInlineScript: () => boolean;
+    readonly allowsEval: () => boolean;
+    readonly allowsInlineStyle: () => boolean;
+    readonly clearCache: () => void;
+    readonly generateNonce: (length?: number) => string;
+    readonly calculateHash: (content: string) => Promise<string | undefined>;
+    readonly onViolation: (handler: CspViolationHandler) => () => void;
+    readonly isUrlAllowedByDirective: (url: string, selfOrigin: string, directiveValue: string) => boolean;
+};
+//# sourceMappingURL=CspUtils.d.ts.map

package/dist/csp/CspUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CspUtils.d.ts","sourceRoot":"","sources":["../../src/csp/CspUtils.ts"],"names":[],"mappings":"AA+BA,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,YAAY,GACZ,WAAW,GACX,SAAS,GACT,aAAa,GACb,UAAU,GACV,YAAY,GACZ,WAAW,GACX,WAAW,GACX,SAAS,GACT,YAAY,GACZ,WAAW,GACX,aAAa,GACb,iBAAiB,GACjB,cAAc,GACd,UAAU,GACV,WAAW,GACX,YAAY,GACZ,cAAc,GACd,cAAc,GACd,aAAa,GACb,iBAAiB,GACjB,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,CAAC;AAKrB,MAAM,WAAW,kBAAkB;IAEjC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAEnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAEpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAKD,MAAM,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC;AAqEvE,eAAO,MAAM,QAAQ;uCAOG,OAAO;+BAsCf,OAAO;sCAuBA,OAAO;+BAyDd,IAAI;iDAoCU,MAAM;sCAkDL,MAAM,KAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;oCAoE5C,mBAAmB,KAAG,MAAM,IAAI;4CAsExB,MAAM,cAAc,MAAM,kBAAkB,MAAM,KAAG,OAAO;CAkBjF,CAAC"}

package/dist/csp/CspUtils.js

@@ -0,0 +1,181 @@
+import { CryptoError } from '../core';
+function checkWildcardSource(url, sources) {
+    const lowerUrl = url.toLowerCase();
+    if (lowerUrl.startsWith('data:') || lowerUrl.startsWith('blob:')) {
+        return sources.includes('data:') || sources.includes('blob:');
+    }
+    return true;
+}
+function isSourceMatch(source, urlObj, selfOrigin) {
+    if (source === "'self'") {
+        return urlObj.origin === selfOrigin;
+    }
+    if (source === 'data:' && urlObj.protocol === 'data:') {
+        return true;
+    }
+    if (source === 'blob:' && urlObj.protocol === 'blob:') {
+        return true;
+    }
+    if (source.endsWith(':') && !source.includes('/')) {
+        return urlObj.protocol === source;
+    }
+    return isHostSourceMatch(source, urlObj);
+}
+function isHostSourceMatch(source, urlObj) {
+    if (source.startsWith('*.')) {
+        const sourceHost = source.slice(2);
+        return urlObj.hostname.endsWith('.' + sourceHost) || urlObj.hostname === sourceHost;
+    }
+    const sourceUrl = source.includes('://') ? source : `https://${source}`;
+    try {
+        const sourceObj = new URL(sourceUrl);
+        if (urlObj.hostname === sourceObj.hostname) {
+            return sourceObj.pathname === '/' || urlObj.pathname.startsWith(sourceObj.pathname);
+        }
+    }
+    catch {
+    }
+    return false;
+}
+const cspCache = new Map();
+export const CspUtils = {
+    allowsInlineScript() {
+        if (cspCache.has('inlineScriptAllowed')) {
+            return cspCache.get('inlineScriptAllowed');
+        }
+        if (typeof document === 'undefined') {
+            cspCache.set('inlineScriptAllowed', false);
+            return false;
+        }
+        try {
+            const script = document.createElement('script');
+            const testKey = '__csp_inline_test__' + Date.now();
+            script.textContent = `window.${testKey}=true`;
+            document.head.appendChild(script);
+            document.head.removeChild(script);
+            const result = window[testKey] === true;
+            delete window[testKey];
+            cspCache.set('inlineScriptAllowed', result);
+            return result;
+        }
+        catch {
+            cspCache.set('inlineScriptAllowed', false);
+            return false;
+        }
+    },
+    allowsEval() {
+        if (cspCache.has('evalAllowed')) {
+            return cspCache.get('evalAllowed');
+        }
+        try {
+            const fn = new Function('return true');
+            const result = fn() === true;
+            cspCache.set('evalAllowed', result);
+            return result;
+        }
+        catch {
+            cspCache.set('evalAllowed', false);
+            return false;
+        }
+    },
+    allowsInlineStyle() {
+        if (cspCache.has('inlineStyleAllowed')) {
+            return cspCache.get('inlineStyleAllowed');
+        }
+        if (typeof document === 'undefined') {
+            cspCache.set('inlineStyleAllowed', false);
+            return false;
+        }
+        try {
+            const style = document.createElement('style');
+            const testClass = '__csp_style_test__' + Date.now();
+            style.textContent = `.${testClass} { display: block !important; }`;
+            document.head.appendChild(style);
+            const testEl = document.createElement('div');
+            testEl.className = testClass;
+            testEl.style.display = 'none';
+            document.body.appendChild(testEl);
+            const computed = window.getComputedStyle(testEl);
+            const result = computed.display === 'block';
+            document.head.removeChild(style);
+            document.body.removeChild(testEl);
+            cspCache.set('inlineStyleAllowed', result);
+            return result;
+        }
+        catch {
+            cspCache.set('inlineStyleAllowed', false);
+            return false;
+        }
+    },
+    clearCache() {
+        cspCache.clear();
+    },
+    generateNonce(length = 16) {
+        if (typeof crypto === 'undefined' || !crypto.getRandomValues) {
+            throw CryptoError.unavailable();
+        }
+        const bytes = new Uint8Array(length);
+        crypto.getRandomValues(bytes);
+        const binary = Array.from(bytes)
+            .map((byte) => String.fromCharCode(byte))
+            .join('');
+        return btoa(binary);
+    },
+    async calculateHash(content) {
+        if (typeof crypto === 'undefined' || !crypto.subtle) {
+            return undefined;
+        }
+        try {
+            const encoder = new TextEncoder();
+            const data = encoder.encode(content);
+            const hashBuffer = await crypto.subtle.digest('SHA-256', data);
+            const hashArray = new Uint8Array(hashBuffer);
+            const binary = Array.from(hashArray)
+                .map((byte) => String.fromCharCode(byte))
+                .join('');
+            return 'sha256-' + btoa(binary);
+        }
+        catch {
+            return undefined;
+        }
+    },
+    onViolation(handler) {
+        if (typeof document === 'undefined') {
+            return () => { };
+        }
+        const listener = (event) => {
+            handler({
+                violatedDirective: event.violatedDirective,
+                effectiveDirective: event.effectiveDirective,
+                blockedUri: event.blockedURI,
+                documentUri: event.documentURI,
+                originalPolicy: event.originalPolicy,
+                sample: event.sample || undefined,
+                lineNumber: event.lineNumber || undefined,
+                columnNumber: event.columnNumber || undefined,
+                sourceFile: event.sourceFile || undefined,
+            });
+        };
+        document.addEventListener('securitypolicyviolation', listener);
+        return () => {
+            document.removeEventListener('securitypolicyviolation', listener);
+        };
+    },
+    isUrlAllowedByDirective(url, selfOrigin, directiveValue) {
+        const sources = directiveValue.split(/\s+/).filter(Boolean);
+        if (sources.includes("'none'")) {
+            return false;
+        }
+        if (sources.includes('*')) {
+            return checkWildcardSource(url, sources);
+        }
+        try {
+            const urlObj = new URL(url, selfOrigin);
+            return sources.some((source) => isSourceMatch(source, urlObj, selfOrigin));
+        }
+        catch {
+            return false;
+        }
+    },
+};
+//# sourceMappingURL=CspUtils.js.map

package/dist/csp/CspUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CspUtils.js","sourceRoot":"","sources":["../../src/csp/CspUtils.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAgEtC,SAAS,mBAAmB,CAAC,GAAW,EAAE,OAAiB;IACzD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjE,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,aAAa,CAAC,MAAc,EAAE,MAAW,EAAE,UAAkB;IAEpE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;IACtC,CAAC;IAGD,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC;IACpC,CAAC;IAGD,OAAO,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAKD,SAAS,iBAAiB,CAAC,MAAc,EAAE,MAAW;IAEpD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,GAAG,UAAU,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC;IACtF,CAAC;IAGD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,EAAE,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC,QAAQ,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAOD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;AAEjD,MAAM,CAAC,MAAM,QAAQ,GAAG;IAOtB,kBAAkB;QAChB,IAAI,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACxC,OAAO,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAE,CAAC;QAC9C,CAAC;QAED,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE,CAAC;YACpC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,qBAAqB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACnD,MAAM,CAAC,WAAW,GAAG,UAAU,OAAO,OAAO,CAAC;YAE9C,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAIlC,MAAM,MAAM,GAAI,MAAc,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;YAEjD,OAAQ,MAAc,CAAC,OAAO,CAAC,CAAC;YAEhC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAOD,UAAU;QACR,IAAI,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAChC,OAAO,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAE,CAAC;QACtC,CAAC;QAED,IAAI,CAAC;YAEH,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC;YAC7B,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAQD,iBAAiB;QACf,IAAI,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACvC,OAAO,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAE,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE,CAAC;YACpC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YAEH,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,oBAAoB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACpD,KAAK,CAAC,WAAW,GAAG,IAAI,SAAS,iCAAiC,CAAC;YAEnE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAGjC,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAGlC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC;YAG5C,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAElC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAmBD,UAAU;QACR,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAkCD,aAAa,CAAC,MAAM,GAAG,EAAE;QAGvB,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC7D,MAAM,WAAW,CAAC,WAAW,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAG9B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;aACxC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEZ,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAkCD,KAAK,CAAC,aAAa,CAAC,OAAe;QAGjC,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACpD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC/D,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;YAG7C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;iBACjC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;iBACxC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEZ,OAAO,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IA8CD,WAAW,CAAC,OAA4B;QACtC,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE,CAAC;YACpC,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,KAAmC,EAAQ,EAAE;YAC7D,OAAO,CAAC;gBACN,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS;gBACjC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS;gBACzC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,SAAS;gBAC7C,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS;aAC1C,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,QAAQ,CAAC,gBAAgB,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;QAE/D,OAAO,GAAS,EAAE;YAChB,QAAQ,CAAC,mBAAmB,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;QACpE,CAAC,CAAC;IACJ,CAAC;IA8CD,uBAAuB,CAAC,GAAW,EAAE,UAAkB,EAAE,cAAsB;QAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE5D,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACxC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACO,CAAC"}

package/dist/csp/NonceManager.d.ts

@@ -0,0 +1,21 @@
+import { type CleanupFn } from '../core';
+export type NonceRotationHandler = (newNonce: string, oldNonce: string) => void;
+export interface NonceManagerConfig {
+    readonly autoRotate?: boolean;
+    readonly rotationInterval?: number;
+    readonly nonceLength?: number;
+}
+export interface NonceManagerInstance {
+    getCurrentNonce(): string;
+    generateNonce(): string;
+    rotateNonce(): string;
+    onRotation(handler: NonceRotationHandler): CleanupFn;
+    isAutoRotating(): boolean;
+    startAutoRotation(): void;
+    stopAutoRotation(): void;
+    destroy(): void;
+}
+export declare const NonceManager: {
+    readonly create: (config?: NonceManagerConfig) => NonceManagerInstance;
+};
+//# sourceMappingURL=NonceManager.d.ts.map

package/dist/csp/NonceManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NonceManager.d.ts","sourceRoot":"","sources":["../../src/csp/NonceManager.ts"],"names":[],"mappings":"AA6CA,OAAO,EAAE,KAAK,SAAS,EAA6B,MAAM,SAAS,CAAC;AAUpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;AAKhF,MAAM,WAAW,kBAAkB;IAKjC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAM9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAOnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAKD,MAAM,WAAW,oBAAoB;IAKnC,eAAe,IAAI,MAAM,CAAC;IAO1B,aAAa,IAAI,MAAM,CAAC;IAOxB,WAAW,IAAI,MAAM,CAAC;IAOtB,UAAU,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAMrD,cAAc,IAAI,OAAO,CAAC;IAM1B,iBAAiB,IAAI,IAAI,CAAC;IAK1B,gBAAgB,IAAI,IAAI,CAAC;IAMzB,OAAO,IAAI,IAAI,CAAC;CACjB;AAWD,eAAO,MAAM,YAAY;+BAuCR,kBAAkB,KAAQ,oBAAoB;CA0IrD,CAAC"}