cmcts-c-agent-embedding 1.0.7 → 1.0.8-cagent

package/dist/utils/security.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Security utilities for XSS prevention and URL validation
+ * Provides centralized functions for safe URL handling and input sanitization
+ */
+/**
+ * Validates if a URL is safe to use (only allows http and https protocols)
+ * Prevents javascript: and other dangerous URL schemes
+ */
+export declare const isValidUrl: (url: string) => boolean;
+/**
+ * Safely encodes URL parameters to prevent injection attacks
+ * Encodes special characters that could be used for URL manipulation
+ */
+export declare const safeEncodeURIComponent: (str: string) => string;
+/**
+ * Sanitizes file names for safe URL construction
+ * Removes or encodes dangerous characters that could be used for path traversal
+ */
+export declare const sanitizeFileName: (fileName: string) => string;
+/**
+ * Builds a safe file URL with proper parameter encoding
+ * Ensures all URL parameters are properly encoded to prevent injection
+ */
+export declare const buildSafeFileUrl: (apiHost: string, chatflowId: string, chatId: string, fileName: string) => string;
+/**
+ * Validates and sanitizes external URLs from user input
+ * Returns null if URL is invalid or dangerous
+ */
+export declare const validateExternalUrl: (url: string) => string | null;
+/**
+ * Sanitizes CSS content to prevent CSS injection attacks
+ * Removes dangerous CSS properties and values that could be used for attacks
+ */
+export declare const sanitizeCSS: (css: string) => string;
+/**
+ * Validates phone numbers with timeout protection against ReDoS attacks
+ * Uses a simple, efficient pattern that prevents catastrophic backtracking
+ */
+export declare const validatePhoneNumber: (phone: string) => boolean;
+/**
+ * Validates and sanitizes string inputs with length and content restrictions
+ * Prevents injection attacks and ensures data integrity
+ */
+export declare const validateStringInput: (input: unknown, maxLength?: number, allowedChars?: RegExp) => string | null;
+/**
+ * Validates numeric inputs with range constraints
+ * Ensures numbers are within safe bounds and prevents NaN/Infinity
+ */
+export declare const validateNumericInput: (input: unknown, min?: number, max?: number) => number | null;
+/**
+ * Validates boolean inputs and converts string representations
+ * Safely handles various boolean representations
+ */
+export declare const validateBooleanInput: (input: unknown) => boolean | null;
+/**
+ * Validates color values (hex, rgb, rgba, named colors)
+ * Prevents CSS injection through color values
+ */
+export declare const validateColorInput: (input: unknown) => string | null;
+//# sourceMappingURL=security.d.ts.map

package/dist/utils/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/utils/security.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,eAAO,MAAM,UAAU,QAAS,MAAM,KAAG,OAOxC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,QAAS,MAAM,KAAG,MAIpD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,aAAc,MAAM,KAAG,MAInD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,YAAa,MAAM,cAAc,MAAM,UAAU,MAAM,YAAY,MAAM,KAAG,MAQxG,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,QAAS,MAAM,KAAG,MAAM,GAAG,IAW1D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,WAAW,QAAS,MAAM,KAAG,MA6HzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,UAAW,MAAM,KAAG,OAkBnD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,UAAW,OAAO,cAAa,MAAM,iBAAwB,MAAM,KAAG,MAAM,GAAG,IAkC9G,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,UAAW,OAAO,QAAQ,MAAM,QAAQ,MAAM,KAAG,MAAM,GAAG,IAyB1F,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,UAAW,OAAO,KAAG,OAAO,GAAG,IAqB/D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,UAAW,OAAO,KAAG,MAAM,GAAG,IAyB5D,CAAC"}

package/dist/utils/security.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Security utilities test file
+ * Tests for XSS prevention, input validation, and other security measures
+ */
+export declare const runSecurityTests: () => void;
+//# sourceMappingURL=security.test.d.ts.map

package/dist/utils/security.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.test.d.ts","sourceRoot":"","sources":["../../src/utils/security.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAqFH,eAAO,MAAM,gBAAgB,YAI5B,CAAC"}

package/dist/utils/ultimateJsonParser.d.ts

@@ -0,0 +1,2 @@
+export declare function parseJsonMarkdown(jsonString: string): any;
+//# sourceMappingURL=ultimateJsonParser.d.ts.map

package/dist/utils/ultimateJsonParser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ultimateJsonParser.d.ts","sourceRoot":"","sources":["../../src/utils/ultimateJsonParser.ts"],"names":[],"mappings":"AAsBA,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,GAAG,CAgDzD"}

package/dist/web.d.ts

@@ -8,6 +8,8 @@ declare const chatbot: {
         theme?: import("./features/bubble/types").BubbleTheme | undefined;
         chatwootUrl?: string | undefined;
         roomIds?: Record<string, string> | undefined;
+        isUseFAQ?: boolean | undefined;
+        onResetChat?: (() => Promise<void>) | undefined;
     } & {
         id?: string | undefined;
     }) => void;
@@ -20,6 +22,8 @@ declare const chatbot: {
         theme?: import("./features/bubble/types").BubbleTheme | undefined;
         chatwootUrl?: string | undefined;
         roomIds?: Record<string, string> | undefined;
+        isUseFAQ?: boolean | undefined;
+        onResetChat?: (() => Promise<void>) | undefined;
     }) => void;
     destroy: () => void;
 };

package/dist/web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../src/web.ts"],"names":[],"mappings":"AAKA,QAAA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;CAAiB,CAAC;AAI/B,eAAe,OAAO,CAAC"}
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../src/web.ts"],"names":[],"mappings":"AAKA,QAAA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAiB,CAAC;AAI/B,eAAe,OAAO,CAAC"}