claude-flow-novice 1.6.1 → 1.6.2

package/.claude-flow-novice/dist/src/web/api/middleware/validation.js

@@ -0,0 +1,325 @@
+/**
+ * Validation Middleware
+ *
+ * Request validation middleware using JSON Schema
+ *
+ * @module web/api/middleware/validation
+ */ import Ajv from 'ajv';
+import addFormats from 'ajv-formats';
+import { ValidationError } from './error-handler.js';
+/**
+ * JSON Schema validator
+ */ const ajv = new Ajv({
+    allErrors: true,
+    verbose: true,
+    strict: false,
+    removeAdditional: 'all',
+    useDefaults: true,
+    coerceTypes: true
+});
+// Add formats for JSON Schema validation
+addFormats(ajv);
+/**
+ * Validation middleware factory
+ */ export function validationMiddleware(schema) {
+    const validators = {
+        body: schema.body ? ajv.compile(schema.body) : null,
+        query: schema.query ? ajv.compile(schema.query) : null,
+        params: schema.params ? ajv.compile(schema.params) : null,
+        headers: schema.headers ? ajv.compile(schema.headers) : null
+    };
+    return (req, res, next)=>{
+        const errors = [];
+        // Validate request body
+        if (validators.body) {
+            if (!validators.body(req.body)) {
+                errors.push({
+                    location: 'body',
+                    errors: formatAjvErrors(validators.body.errors || [])
+                });
+            }
+        }
+        // Validate query parameters
+        if (validators.query) {
+            if (!validators.query(req.query)) {
+                errors.push({
+                    location: 'query',
+                    errors: formatAjvErrors(validators.query.errors || [])
+                });
+            }
+        }
+        // Validate route parameters
+        if (validators.params) {
+            if (!validators.params(req.params)) {
+                errors.push({
+                    location: 'params',
+                    errors: formatAjvErrors(validators.params.errors || [])
+                });
+            }
+        }
+        // Validate headers
+        if (validators.headers) {
+            if (!validators.headers(req.headers)) {
+                errors.push({
+                    location: 'headers',
+                    errors: formatAjvErrors(validators.headers.errors || [])
+                });
+            }
+        }
+        // Return validation errors if any
+        if (errors.length > 0) {
+            throw new ValidationError('Request validation failed', {
+                errors
+            });
+        }
+        next();
+    };
+}
+/**
+ * Format AJV errors for better readability
+ */ function formatAjvErrors(errors) {
+    return errors.map((error)=>{
+        const field = error.instancePath || error.schemaPath || 'unknown';
+        const message = error.message || 'Validation error';
+        const value = error.data;
+        return {
+            field,
+            message,
+            value,
+            allowedValues: error.schema?.enum,
+            constraint: error.keyword,
+            schema: error.schema
+        };
+    });
+}
+/**
+ * Common validation schemas
+ */ export const commonSchemas = {
+    // Pagination query parameters
+    pagination: {
+        type: 'object',
+        properties: {
+            page: {
+                type: 'integer',
+                minimum: 1,
+                default: 1,
+                description: 'Page number'
+            },
+            limit: {
+                type: 'integer',
+                minimum: 1,
+                maximum: 100,
+                default: 20,
+                description: 'Items per page'
+            },
+            offset: {
+                type: 'integer',
+                minimum: 0,
+                description: 'Number of items to skip'
+            },
+            sort: {
+                type: 'string',
+                description: 'Sort field'
+            },
+            order: {
+                type: 'string',
+                enum: [
+                    'asc',
+                    'desc'
+                ],
+                default: 'desc',
+                description: 'Sort order'
+            }
+        }
+    },
+    // Date range query parameters
+    dateRange: {
+        type: 'object',
+        properties: {
+            startDate: {
+                type: 'string',
+                format: 'date-time',
+                description: 'Start date (ISO 8601)'
+            },
+            endDate: {
+                type: 'string',
+                format: 'date-time',
+                description: 'End date (ISO 8601)'
+            }
+        },
+        additionalProperties: false
+    },
+    // Agent ID parameter
+    agentIdParam: {
+        type: 'object',
+        properties: {
+            agentId: {
+                type: 'string',
+                minLength: 1,
+                description: 'Agent ID'
+            }
+        },
+        required: [
+            'agentId'
+        ],
+        additionalProperties: false
+    },
+    // Event type filter
+    eventTypeFilter: {
+        type: 'object',
+        properties: {
+            eventType: {
+                type: 'string',
+                enum: [
+                    'spawned',
+                    'paused',
+                    'resumed',
+                    'terminated',
+                    'checkpoint_created',
+                    'checkpoint_restored',
+                    'state_changed',
+                    'task_assigned',
+                    'task_completed',
+                    'error_occurred'
+                ],
+                description: 'Event type filter'
+            }
+        },
+        additionalProperties: false
+    },
+    // Agent level filter
+    levelFilter: {
+        type: 'object',
+        properties: {
+            level: {
+                type: 'integer',
+                minimum: 1,
+                maximum: 10,
+                description: 'Agent hierarchy level'
+            }
+        },
+        additionalProperties: false
+    },
+    // Agent state filter
+    stateFilter: {
+        type: 'object',
+        properties: {
+            state: {
+                type: 'string',
+                enum: [
+                    'idle',
+                    'active',
+                    'paused',
+                    'terminated',
+                    'error',
+                    'completing',
+                    'checkpointing',
+                    'waiting_for_dependency'
+                ],
+                description: 'Agent state filter'
+            }
+        },
+        additionalProperties: false
+    },
+    // WebSocket subscription
+    subscription: {
+        type: 'object',
+        properties: {
+            channels: {
+                type: 'array',
+                items: {
+                    type: 'string',
+                    enum: [
+                        'agent-status',
+                        'hierarchy',
+                        'events',
+                        'metrics',
+                        'alerts',
+                        'system'
+                    ]
+                },
+                uniqueItems: true,
+                minItems: 1,
+                description: 'WebSocket channels to subscribe to'
+            }
+        },
+        required: [
+            'channels'
+        ],
+        additionalProperties: false
+    }
+};
+/**
+ * Create validation schema for specific endpoints
+ */ export function createSchema(overrides) {
+    return overrides;
+}
+/**
+ * Validate UUID string
+ */ export function isValidUUID(uuid) {
+    const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+    return uuidRegex.test(uuid);
+}
+/**
+ * Validate ISO date string
+ */ export function isValidISODate(date) {
+    if (!date) return false;
+    const parsed = new Date(date);
+    return !isNaN(parsed.getTime()) && date === parsed.toISOString();
+}
+/**
+ * Sanitize and validate input string
+ */ export function sanitizeString(input, maxLength = 1000) {
+    if (typeof input !== 'string') {
+        return '';
+    }
+    // Remove null bytes and control characters
+    const sanitized = input.replace(/[\x00-\x1F\x7F]/g, '');
+    // Truncate if too long
+    return sanitized.length > maxLength ? sanitized.slice(0, maxLength) : sanitized;
+}
+/**
+ * Validate email address
+ */ export function isValidEmail(email) {
+    const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+    return emailRegex.test(email);
+}
+/**
+ * Validate numeric range
+ */ export function isValidNumber(value, min, max) {
+    const num = Number(value);
+    if (isNaN(num)) return false;
+    if (min !== undefined && num < min) return false;
+    if (max !== undefined && num > max) return false;
+    return true;
+}
+/**
+ * Validate array of strings
+ */ export function isValidStringArray(value, allowedValues) {
+    if (!Array.isArray(value)) return false;
+    return value.every((item)=>typeof item === 'string' && (!allowedValues || allowedValues.includes(item)));
+}
+/**
+ * Middleware to validate content type
+ */ export function validateContentType(allowedTypes) {
+    return (req, res, next)=>{
+        const contentType = req.get('Content-Type');
+        if (!contentType || !allowedTypes.some((type)=>contentType.includes(type))) {
+            throw new ValidationError(`Content-Type must be one of: ${allowedTypes.join(', ')}`);
+        }
+        next();
+    };
+}
+/**
+ * Middleware to validate request size
+ */ export function validateRequestSize(maxSizeBytes) {
+    return (req, res, next)=>{
+        const contentLength = parseInt(req.get('Content-Length') || '0', 10);
+        if (contentLength > maxSizeBytes) {
+            throw new ValidationError(`Request size exceeds maximum allowed size of ${maxSizeBytes} bytes`);
+        }
+        next();
+    };
+}
+
+//# sourceMappingURL=validation.js.map

package/.claude-flow-novice/dist/src/web/api/middleware/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../src/web/api/middleware/validation.ts"],"names":["Ajv","addFormats","ValidationError","ajv","allErrors","verbose","strict","removeAdditional","useDefaults","coerceTypes","validationMiddleware","schema","validators","body","compile","query","params","headers","req","res","next","errors","push","location","formatAjvErrors","length","map","error","field","instancePath","schemaPath","message","value","data","allowedValues","enum","constraint","keyword","commonSchemas","pagination","type","properties","page","minimum","default","description","limit","maximum","offset","sort","order","dateRange","startDate","format","endDate","additionalProperties","agentIdParam","agentId","minLength","required","eventTypeFilter","eventType","levelFilter","level","stateFilter","state","subscription","channels","items","uniqueItems","minItems","createSchema","overrides","isValidUUID","uuid","uuidRegex","test","isValidISODate","date","parsed","Date","isNaN","getTime","toISOString","sanitizeString","input","maxLength","sanitized","replace","slice","isValidEmail","email","emailRegex","isValidNumber","min","max","num","Number","undefined","isValidStringArray","Array","isArray","every","item","includes","validateContentType","allowedTypes","contentType","get","some","join","validateRequestSize","maxSizeBytes","contentLength","parseInt"],"mappings":"AAAA;;;;;;CAMC,GAGD,OAAOA,SAAS,MAAM;AACtB,OAAOC,gBAAgB,cAAc;AACrC,SAASC,eAAe,QAAQ,qBAAqB;AAYrD;;CAEC,GACD,MAAMC,MAAM,IAAIH,IAAI;IAClBI,WAAW;IACXC,SAAS;IACTC,QAAQ;IACRC,kBAAkB;IAClBC,aAAa;IACbC,aAAa;AACf;AAEA,yCAAyC;AACzCR,WAAWE;AAEX;;CAEC,GACD,OAAO,SAASO,qBAAqBC,MAAwB;IAC3D,MAAMC,aAAa;QACjBC,MAAMF,OAAOE,IAAI,GAAGV,IAAIW,OAAO,CAACH,OAAOE,IAAI,IAAI;QAC/CE,OAAOJ,OAAOI,KAAK,GAAGZ,IAAIW,OAAO,CAACH,OAAOI,KAAK,IAAI;QAClDC,QAAQL,OAAOK,MAAM,GAAGb,IAAIW,OAAO,CAACH,OAAOK,MAAM,IAAI;QACrDC,SAASN,OAAOM,OAAO,GAAGd,IAAIW,OAAO,CAACH,OAAOM,OAAO,IAAI;IAC1D;IAEA,OAAO,CAACC,KAAcC,KAAeC;QACnC,MAAMC,SAAgB,EAAE;QAExB,wBAAwB;QACxB,IAAIT,WAAWC,IAAI,EAAE;YACnB,IAAI,CAACD,WAAWC,IAAI,CAACK,IAAIL,IAAI,GAAG;gBAC9BQ,OAAOC,IAAI,CAAC;oBACVC,UAAU;oBACVF,QAAQG,gBAAgBZ,WAAWC,IAAI,CAACQ,MAAM,IAAI,EAAE;gBACtD;YACF;QACF;QAEA,4BAA4B;QAC5B,IAAIT,WAAWG,KAAK,EAAE;YACpB,IAAI,CAACH,WAAWG,KAAK,CAACG,IAAIH,KAAK,GAAG;gBAChCM,OAAOC,IAAI,CAAC;oBACVC,UAAU;oBACVF,QAAQG,gBAAgBZ,WAAWG,KAAK,CAACM,MAAM,IAAI,EAAE;gBACvD;YACF;QACF;QAEA,4BAA4B;QAC5B,IAAIT,WAAWI,MAAM,EAAE;YACrB,IAAI,CAACJ,WAAWI,MAAM,CAACE,IAAIF,MAAM,GAAG;gBAClCK,OAAOC,IAAI,CAAC;oBACVC,UAAU;oBACVF,QAAQG,gBAAgBZ,WAAWI,MAAM,CAACK,MAAM,IAAI,EAAE;gBACxD;YACF;QACF;QAEA,mBAAmB;QACnB,IAAIT,WAAWK,OAAO,EAAE;YACtB,IAAI,CAACL,WAAWK,OAAO,CAACC,IAAID,OAAO,GAAG;gBACpCI,OAAOC,IAAI,CAAC;oBACVC,UAAU;oBACVF,QAAQG,gBAAgBZ,WAAWK,OAAO,CAACI,MAAM,IAAI,EAAE;gBACzD;YACF;QACF;QAEA,kCAAkC;QAClC,IAAIA,OAAOI,MAAM,GAAG,GAAG;YACrB,MAAM,IAAIvB,gBAAgB,6BAA6B;gBAAEmB;YAAO;QAClE;QAEAD;IACF;AACF;AAEA;;CAEC,GACD,SAASI,gBAAgBH,MAAa;IACpC,OAAOA,OAAOK,GAAG,CAACC,CAAAA;QAChB,MAAMC,QAAQD,MAAME,YAAY,IAAIF,MAAMG,UAAU,IAAI;QACxD,MAAMC,UAAUJ,MAAMI,OAAO,IAAI;QACjC,MAAMC,QAAQL,MAAMM,IAAI;QAExB,OAAO;YACLL;YACAG;YACAC;YACAE,eAAeP,MAAMhB,MAAM,EAAEwB;YAC7BC,YAAYT,MAAMU,OAAO;YACzB1B,QAAQgB,MAAMhB,MAAM;QACtB;IACF;AACF;AAEA;;CAEC,GACD,OAAO,MAAM2B,gBAAgB;IAC3B,8BAA8B;IAC9BC,YAAY;QACVC,MAAM;QACNC,YAAY;YACVC,MAAM;gBACJF,MAAM;gBACNG,SAAS;gBACTC,SAAS;gBACTC,aAAa;YACf;YACAC,OAAO;gBACLN,MAAM;gBACNG,SAAS;gBACTI,SAAS;gBACTH,SAAS;gBACTC,aAAa;YACf;YACAG,QAAQ;gBACNR,MAAM;gBACNG,SAAS;gBACTE,aAAa;YACf;YACAI,MAAM;gBACJT,MAAM;gBACNK,aAAa;YACf;YACAK,OAAO;gBACLV,MAAM;gBACNL,MAAM;oBAAC;oBAAO;iBAAO;gBACrBS,SAAS;gBACTC,aAAa;YACf;QACF;IACF;IAEA,8BAA8B;IAC9BM,WAAW;QACTX,MAAM;QACNC,YAAY;YACVW,WAAW;gBACTZ,MAAM;gBACNa,QAAQ;gBACRR,aAAa;YACf;YACAS,SAAS;gBACPd,MAAM;gBACNa,QAAQ;gBACRR,aAAa;YACf;QACF;QACAU,sBAAsB;IACxB;IAEA,qBAAqB;IACrBC,cAAc;QACZhB,MAAM;QACNC,YAAY;YACVgB,SAAS;gBACPjB,MAAM;gBACNkB,WAAW;gBACXb,aAAa;YACf;QACF;QACAc,UAAU;YAAC;SAAU;QACrBJ,sBAAsB;IACxB;IAEA,oBAAoB;IACpBK,iBAAiB;QACfpB,MAAM;QACNC,YAAY;YACVoB,WAAW;gBACTrB,MAAM;gBACNL,MAAM;oBACJ;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;iBACD;gBACDU,aAAa;YACf;QACF;QACAU,sBAAsB;IACxB;IAEA,qBAAqB;IACrBO,aAAa;QACXtB,MAAM;QACNC,YAAY;YACVsB,OAAO;gBACLvB,MAAM;gBACNG,SAAS;gBACTI,SAAS;gBACTF,aAAa;YACf;QACF;QACAU,sBAAsB;IACxB;IAEA,qBAAqB;IACrBS,aAAa;QACXxB,MAAM;QACNC,YAAY;YACVwB,OAAO;gBACLzB,MAAM;gBACNL,MAAM;oBACJ;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;iBACD;gBACDU,aAAa;YACf;QACF;QACAU,sBAAsB;IACxB;IAEA,yBAAyB;IACzBW,cAAc;QACZ1B,MAAM;QACNC,YAAY;YACV0B,UAAU;gBACR3B,MAAM;gBACN4B,OAAO;oBACL5B,MAAM;oBACNL,MAAM;wBACJ;wBACA;wBACA;wBACA;wBACA;wBACA;qBACD;gBACH;gBACAkC,aAAa;gBACbC,UAAU;gBACVzB,aAAa;YACf;QACF;QACAc,UAAU;YAAC;SAAW;QACtBJ,sBAAsB;IACxB;AACF,EAAE;AAEF;;CAEC,GACD,OAAO,SAASgB,aAAaC,SAAoC;IAC/D,OAAOA;AACT;AAEA;;CAEC,GACD,OAAO,SAASC,YAAYC,IAAY;IACtC,MAAMC,YAAY;IAClB,OAAOA,UAAUC,IAAI,CAACF;AACxB;AAEA;;CAEC,GACD,OAAO,SAASG,eAAeC,IAAY;IACzC,IAAI,CAACA,MAAM,OAAO;IAClB,MAAMC,SAAS,IAAIC,KAAKF;IACxB,OAAO,CAACG,MAAMF,OAAOG,OAAO,OAAOJ,SAASC,OAAOI,WAAW;AAChE;AAEA;;CAEC,GACD,OAAO,SAASC,eAAeC,KAAa,EAAEC,YAAoB,IAAI;IACpE,IAAI,OAAOD,UAAU,UAAU;QAC7B,OAAO;IACT;IAEA,2CAA2C;IAC3C,MAAME,YAAYF,MAAMG,OAAO,CAAC,oBAAoB;IAEpD,uBAAuB;IACvB,OAAOD,UAAU9D,MAAM,GAAG6D,YAAYC,UAAUE,KAAK,CAAC,GAAGH,aAAaC;AACxE;AAEA;;CAEC,GACD,OAAO,SAASG,aAAaC,KAAa;IACxC,MAAMC,aAAa;IACnB,OAAOA,WAAWhB,IAAI,CAACe;AACzB;AAEA;;CAEC,GACD,OAAO,SAASE,cAAc7D,KAAU,EAAE8D,GAAY,EAAEC,GAAY;IAClE,MAAMC,MAAMC,OAAOjE;IACnB,IAAIiD,MAAMe,MAAM,OAAO;IACvB,IAAIF,QAAQI,aAAaF,MAAMF,KAAK,OAAO;IAC3C,IAAIC,QAAQG,aAAaF,MAAMD,KAAK,OAAO;IAC3C,OAAO;AACT;AAEA;;CAEC,GACD,OAAO,SAASI,mBAAmBnE,KAAU,EAAEE,aAAwB;IACrE,IAAI,CAACkE,MAAMC,OAAO,CAACrE,QAAQ,OAAO;IAClC,OAAOA,MAAMsE,KAAK,CAACC,CAAAA,OACjB,OAAOA,SAAS,YACf,CAAA,CAACrE,iBAAiBA,cAAcsE,QAAQ,CAACD,KAAI;AAElD;AAEA;;CAEC,GACD,OAAO,SAASE,oBAAoBC,YAAsB;IACxD,OAAO,CAACxF,KAAcC,KAAeC;QACnC,MAAMuF,cAAczF,IAAI0F,GAAG,CAAC;QAE5B,IAAI,CAACD,eAAe,CAACD,aAAaG,IAAI,CAACrE,CAAAA,OAAQmE,YAAYH,QAAQ,CAAChE,QAAQ;YAC1E,MAAM,IAAItC,gBAAgB,CAAC,6BAA6B,EAAEwG,aAAaI,IAAI,CAAC,OAAO;QACrF;QAEA1F;IACF;AACF;AAEA;;CAEC,GACD,OAAO,SAAS2F,oBAAoBC,YAAoB;IACtD,OAAO,CAAC9F,KAAcC,KAAeC;QACnC,MAAM6F,gBAAgBC,SAAShG,IAAI0F,GAAG,CAAC,qBAAqB,KAAK;QAEjE,IAAIK,gBAAgBD,cAAc;YAChC,MAAM,IAAI9G,gBAAgB,CAAC,6CAA6C,EAAE8G,aAAa,MAAM,CAAC;QAChG;QAEA5F;IACF;AACF"}