kemdicode-mcp 1.15.0

package/dist/utils/validation.d.ts

@@ -0,0 +1,163 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+/**
+ * Validation error with detailed context
+ */
+export declare class ValidationError extends Error {
+    readonly code: ValidationErrorCode;
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(message: string, code: ValidationErrorCode, details?: Record<string, unknown> | undefined);
+}
+/**
+ * Validation error codes for programmatic error handling
+ */
+export declare enum ValidationErrorCode {
+    PATH_TRAVERSAL = "PATH_TRAVERSAL",
+    SENSITIVE_PATH = "SENSITIVE_PATH",
+    SYMLINK_DETECTED = "SYMLINK_DETECTED",
+    FILE_TOO_LARGE = "FILE_TOO_LARGE",
+    INVALID_REGEX = "INVALID_REGEX",
+    REGEX_TOO_COMPLEX = "REGEX_TOO_COMPLEX",
+    COMMAND_INJECTION = "COMMAND_INJECTION",
+    DANGEROUS_COMMAND = "DANGEROUS_COMMAND",
+    INVALID_PATH = "INVALID_PATH",
+    OUTSIDE_PROJECT = "OUTSIDE_PROJECT"
+}
+/**
+ * Configuration for path validation
+ */
+export interface PathValidationOptions {
+    /** Allow symlinks (default: false) */
+    allowSymlinks?: boolean;
+    /** Allow absolute paths (default: true) */
+    allowAbsolute?: boolean;
+    /** Require path to be within project root (default: true) */
+    requireWithinProject?: boolean;
+    /** Project root directory (default: process.cwd()) */
+    projectRoot?: string;
+    /** Additional blocked directories beyond the defaults */
+    additionalBlockedPaths?: string[];
+    /** Allow reading from blocked paths (less strict mode) */
+    allowReadFromBlocked?: boolean;
+    /** Operation type for logging */
+    operation?: 'read' | 'write' | 'execute' | 'search';
+}
+/**
+ * Configuration for regex validation
+ */
+export interface RegexValidationOptions {
+    /** Maximum pattern length (default: 1000) */
+    maxLength?: number;
+    /** Maximum number of quantifiers (default: 10) */
+    maxQuantifiers?: number;
+    /** Maximum nesting depth (default: 5) */
+    maxNestingDepth?: number;
+    /** Timeout for regex test in ms (default: 1000) */
+    testTimeout?: number;
+}
+/**
+ * Validate and sanitize a file path
+ *
+ * @param inputPath - The path to validate
+ * @param options - Validation options
+ * @returns Resolved, safe path
+ * @throws ValidationError if path is invalid or unsafe
+ */
+export declare function validatePath(inputPath: string, options?: PathValidationOptions): Promise<string>;
+/**
+ * Validate file size against a maximum limit
+ *
+ * @param filePath - Path to the file
+ * @param maxSize - Maximum allowed size in bytes
+ * @returns File stats if valid
+ * @throws ValidationError if file is too large
+ */
+export declare function validateFileSize(filePath: string, maxSize: number): Promise<{
+    size: number;
+    isFile: boolean;
+}>;
+/**
+ * Validate a regex pattern for safety and correctness
+ *
+ * @param pattern - The regex pattern to validate
+ * @param options - Validation options
+ * @returns The validated pattern (unchanged if safe)
+ * @throws ValidationError if pattern is invalid or potentially dangerous
+ */
+export declare function validateRegexPattern(pattern: string, options?: RegexValidationOptions): string;
+/**
+ * Validate a shell command for injection attacks
+ *
+ * @param command - The command to validate
+ * @param allowedCommands - Optional list of allowed command prefixes
+ * @returns The validated command
+ * @throws ValidationError if command contains injection patterns
+ */
+export declare function validateCommand(command: string, allowedCommands?: readonly string[]): string;
+/**
+ * Sanitize environment variables for shell execution
+ *
+ * @param env - Environment variables to sanitize
+ * @returns Sanitized environment variables
+ */
+export declare function sanitizeEnvVars(env: Record<string, string> | undefined): Record<string, string> | undefined;
+/**
+ * Rate limiter configuration and state
+ */
+interface RateLimitConfig {
+    maxRequests: number;
+    windowMs: number;
+}
+/**
+ * Check if an operation is within rate limits
+ *
+ * @param key - Unique key for the rate limit (e.g., "file-write")
+ * @param config - Rate limit configuration
+ * @returns true if within limits, false if exceeded
+ */
+export declare function checkRateLimit(key: string, config?: RateLimitConfig): boolean;
+/**
+ * Reset rate limit state (for testing)
+ */
+export declare function resetRateLimits(): void;
+/**
+ * Comprehensive validation result type
+ */
+export interface ValidationResult {
+    valid: boolean;
+    error?: ValidationError;
+    sanitizedValue?: string;
+}
+/**
+ * Validate multiple paths at once
+ *
+ * @param paths - Array of paths to validate
+ * @param options - Validation options
+ * @returns Array of validation results
+ */
+export declare function validatePaths(paths: string[], options?: PathValidationOptions): Promise<Map<string, ValidationResult>>;
+/**
+ * Quick path check (synchronous, less thorough)
+ * Use for preliminary filtering before async validation
+ *
+ * @param inputPath - Path to check
+ * @returns true if path passes basic checks
+ */
+export declare function quickPathCheck(inputPath: string): boolean;
+export {};
+//# sourceMappingURL=validation.d.ts.map

package/dist/utils/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAgBH;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aAGtB,IAAI,EAAE,mBAAmB;aACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjD,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,mBAAmB,EACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD;AAED;;GAEG;AACH,oBAAY,mBAAmB;IAC7B,cAAc,mBAAmB;IACjC,cAAc,mBAAmB;IACjC,gBAAgB,qBAAqB;IACrC,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAC/B,iBAAiB,sBAAsB;IACvC,iBAAiB,sBAAsB;IACvC,iBAAiB,sBAAsB;IACvC,YAAY,iBAAiB;IAC7B,eAAe,oBAAoB;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,6DAA6D;IAC7D,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,sDAAsD;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,0DAA0D;IAC1D,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA2FD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,MAAM,CAAC,CA0LjB;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAuB5C;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,sBAA2B,GACnC,MAAM,CAqGR;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CA+D5F;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GACtC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CA6BpC;AAED;;GAEG;AACH,UAAU,eAAe;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AASD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,eAAuD,GAC9D,OAAO,CAgCT;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAwBxC;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAazD"}