mcp-server-gemini 1.1.0

package/dist/utils/security.js

@@ -0,0 +1,370 @@
+/**
+ * Security validation module
+ * Provides file path security validation to prevent path traversal attacks and sensitive file access
+ */
+import * as path from 'path';
+import * as fs from 'fs/promises';
+import micromatch from 'micromatch';
+// ============== Constant Definitions ==============
+/**
+ * Default sensitive file patterns
+ * These files may contain sensitive information and are not allowed access by default
+ */
+export const DEFAULT_SENSITIVE_PATTERNS = [
+    // Environment variable files
+    '.env',
+    '.env.*',
+    '.env.local',
+    '.env.development',
+    '.env.production',
+    '**/.env',
+    '**/.env.*',
+    // SSH and key files
+    '.ssh/**',
+    '**/.ssh/**',
+    '*.pem',
+    '*.key',
+    '*.pfx',
+    '*.p12',
+    '**/id_rsa',
+    '**/id_rsa.*',
+    '**/id_ed25519',
+    '**/id_ed25519.*',
+    '**/id_dsa',
+    '**/id_dsa.*',
+    // Credential and secret files
+    '**/credentials*',
+    '**/secrets*',
+    '**/secret.*',
+    '**/*password*',
+    '**/*token*',
+    // Git sensitive configuration
+    '**/.git/config',
+    '**/.gitconfig',
+    // Database files
+    '*.sqlite',
+    '*.sqlite3',
+    '*.db',
+    // History files
+    '**/.bash_history',
+    '**/.zsh_history',
+    '**/.node_repl_history',
+    // AWS and cloud service configurations
+    '**/.aws/**',
+    '**/.azure/**',
+    '**/.gcloud/**',
+    // Docker secrets
+    '**/docker-compose*.yml',
+    '**/docker-compose*.yaml',
+];
+/**
+ * Default security configuration
+ */
+export const DEFAULT_SECURITY_CONFIG = {
+    allowedDirectories: [], // Empty array means no restriction
+    sensitivePatterns: DEFAULT_SENSITIVE_PATTERNS,
+    maxFileSize: 1024 * 1024, // 1MB
+    maxFiles: 500,
+    allowSymlinks: false,
+};
+// ============== Error Class Definitions ==============
+/**
+ * Security error class
+ * Thrown when security validation fails
+ */
+export class SecurityError extends Error {
+    code;
+    path;
+    /**
+     * Create a security error instance
+     * @param message Error message
+     * @param code Error code
+     * @param path Related file path (optional)
+     */
+    constructor(message, code, path) {
+        super(message);
+        this.code = code;
+        this.path = path;
+        this.name = 'SecurityError';
+        // Ensure correct prototype chain (TypeScript compilation compatibility)
+        Object.setPrototypeOf(this, SecurityError.prototype);
+    }
+}
+// ============== Utility Functions ==============
+/**
+ * Normalize path
+ * Convert path to unified format, handling Windows and Unix path differences
+ *
+ * @param inputPath Input path
+ * @returns Normalized absolute path
+ *
+ * @example
+ * normalizePath('./src/index.ts')  // Returns absolute path
+ * normalizePath('C:\\Users\\test') // Returns C:/Users/test
+ */
+export function normalizePath(inputPath) {
+    // Resolve to absolute path
+    const absolutePath = path.resolve(inputPath);
+    // Unify to use forward slashes (for cross-platform handling)
+    return absolutePath.replace(/\\/g, '/');
+}
+/**
+ * Detect if path contains path traversal attack
+ *
+ * Use path.relative method to safely detect path traversal,
+ * avoiding false positives from simple includes('..') checks on legitimate filenames (e.g., vendor..lib.js)
+ *
+ * @param inputPath Path to detect
+ * @param basePath Base path (defaults to current working directory)
+ * @returns Returns true if path traversal is detected
+ *
+ * @example
+ * hasPathTraversal('../etc/passwd')      // true
+ * hasPathTraversal('./src/index.ts')     // false
+ * hasPathTraversal('./vendor..lib.js')   // false (legitimate filename)
+ */
+export function hasPathTraversal(inputPath, basePath) {
+    // Get base path (defaults to current working directory)
+    const base = basePath ? path.resolve(basePath) : process.cwd();
+    // Resolve input path to absolute path
+    const resolvedPath = path.resolve(base, inputPath);
+    // Use path.relative to calculate relative path
+    // If result starts with '..', the path is trying to escape the base directory
+    const relativePath = path.relative(base, resolvedPath);
+    // Check if relative path starts with '..' (indicates path traversal)
+    // or is an absolute path (on Windows may start with 'C:')
+    if (relativePath.startsWith('..') || path.isAbsolute(relativePath)) {
+        return true;
+    }
+    // Additional check: path segments should not have '..' as a standalone directory name
+    // This is to prevent some edge cases
+    const segments = inputPath.split(/[/\\]/);
+    for (const segment of segments) {
+        // Only check segments that exactly equal '..', not filenames containing '..'
+        if (segment === '..') {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Check if file is a sensitive file
+ *
+ * @param filePath File path
+ * @param patterns List of sensitive file patterns (glob patterns)
+ * @returns Returns true if it is a sensitive file
+ *
+ * @example
+ * isSensitiveFile('.env')                    // true
+ * isSensitiveFile('./src/index.ts')          // false
+ * isSensitiveFile('./config/credentials.json') // true
+ */
+export function isSensitiveFile(filePath, patterns = DEFAULT_SENSITIVE_PATTERNS) {
+    // Get filename and path
+    const normalizedPath = filePath.replace(/\\/g, '/');
+    const fileName = path.basename(normalizedPath);
+    // Use micromatch for glob pattern matching
+    const isMatch = micromatch.isMatch(normalizedPath, patterns, {
+        dot: true, // Match files starting with .
+        nocase: true, // Ignore case
+        basename: false // Use full path matching
+    });
+    // Additional filename check
+    const fileNameMatch = micromatch.isMatch(fileName, patterns, {
+        dot: true,
+        nocase: true
+    });
+    return isMatch || fileNameMatch;
+}
+/**
+ * Check if path is within allowed directory
+ *
+ * Use path.relative method to safely check if path is within allowed directory,
+ * avoiding simple prefix matching bypasses (e.g., /var/www-secret matching /var/www)
+ *
+ * @param filePath File path to check
+ * @param allowedDirs List of allowed directories
+ * @returns Returns true if within allowed directory
+ *
+ * @example
+ * isWithinAllowedDirectory('./src/index.ts', ['./src', './lib']) // true
+ * isWithinAllowedDirectory('./etc/passwd', ['./src'])            // false
+ * isWithinAllowedDirectory('/var/www-secret', ['/var/www'])      // false (fixed: cannot be bypassed)
+ */
+export function isWithinAllowedDirectory(filePath, allowedDirs) {
+    // If whitelist is empty, allow all paths
+    if (!allowedDirs || allowedDirs.length === 0) {
+        return true;
+    }
+    // Resolve to absolute path
+    const absoluteFilePath = path.resolve(filePath);
+    for (const dir of allowedDirs) {
+        const absoluteDir = path.resolve(dir);
+        // Use path.relative to calculate relative path
+        const relativePath = path.relative(absoluteDir, absoluteFilePath);
+        // If relative path doesn't start with '..' and is not an absolute path,
+        // the file is within the allowed directory or is the directory itself
+        if (!relativePath.startsWith('..') && !path.isAbsolute(relativePath)) {
+            // Additional check: empty string means paths are identical
+            // Non-empty string means it's a subpath
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Check if it is a symbolic link
+ *
+ * @param filePath File path
+ * @returns Returns true if it is a symbolic link
+ */
+export async function isSymlink(filePath) {
+    try {
+        const stats = await fs.lstat(filePath);
+        return stats.isSymbolicLink();
+    }
+    catch {
+        // File does not exist or cannot be accessed, return false
+        return false;
+    }
+}
+/**
+ * Get file size
+ *
+ * @param filePath File path
+ * @returns File size (bytes)
+ */
+export async function getFileSize(filePath) {
+    const stats = await fs.stat(filePath);
+    return stats.size;
+}
+// ============== Main Validation Functions ==============
+/**
+ * Validate the security of a single path
+ * Performs complete security checks including path traversal, sensitive files, whitelist, and symbolic link detection
+ *
+ * @param inputPath Path to validate
+ * @param config Security configuration (optional)
+ * @throws SecurityError Thrown when security validation fails
+ *
+ * @example
+ * // Normal usage
+ * await validatePath('./src/index.ts');
+ *
+ * // With whitelist
+ * await validatePath('./src/index.ts', { allowedDirectories: ['./src'] });
+ *
+ * // Path traversal attack will throw error
+ * await validatePath('../../../etc/passwd'); // Throws SecurityError
+ */
+export async function validatePath(inputPath, config) {
+    const mergedConfig = { ...DEFAULT_SECURITY_CONFIG, ...config };
+    // 1. Check for path traversal attack
+    if (hasPathTraversal(inputPath)) {
+        throw new SecurityError(`Path traversal attack blocked: "${inputPath}" contains disallowed path traversal pattern`, 'PATH_TRAVERSAL', inputPath);
+    }
+    // 2. Check if it is a sensitive file
+    if (isSensitiveFile(inputPath, mergedConfig.sensitivePatterns)) {
+        throw new SecurityError(`Access to sensitive file denied: "${inputPath}" matches sensitive file pattern`, 'SENSITIVE_FILE', inputPath);
+    }
+    // 3. Check if within whitelist directory
+    if (!isWithinAllowedDirectory(inputPath, mergedConfig.allowedDirectories || [])) {
+        throw new SecurityError(`Access denied: "${inputPath}" is not in the allowed directory list`, 'ACCESS_DENIED', inputPath);
+    }
+    // 4. Check for symbolic link (if file exists)
+    if (!mergedConfig.allowSymlinks) {
+        try {
+            if (await isSymlink(inputPath)) {
+                throw new SecurityError(`Symlink access denied: "${inputPath}" is a symbolic link`, 'SYMLINK_DETECTED', inputPath);
+            }
+        }
+        catch (error) {
+            // If it's a SecurityError, continue throwing
+            if (error instanceof SecurityError) {
+                throw error;
+            }
+            // Ignore symlink check when file doesn't exist (let subsequent file reading handle it)
+        }
+    }
+}
+/**
+ * Batch validate the security of multiple paths
+ *
+ * @param paths Array of paths to validate
+ * @param config Security configuration (optional)
+ * @throws SecurityError Thrown when any path validation fails
+ *
+ * @example
+ * await validatePaths(['./src/a.ts', './src/b.ts']);
+ */
+export async function validatePaths(paths, config) {
+    for (const filePath of paths) {
+        await validatePath(filePath, config);
+    }
+}
+/**
+ * Validate if file size is within limits
+ *
+ * @param filePath File path
+ * @param maxSize Maximum file size (bytes)
+ * @throws SecurityError Thrown when file size exceeds limit
+ */
+export async function validateFileSize(filePath, maxSize = DEFAULT_SECURITY_CONFIG.maxFileSize) {
+    try {
+        const size = await getFileSize(filePath);
+        if (size > maxSize) {
+            throw new SecurityError(`File size exceeded: "${filePath}" size is ${formatBytes(size)}, exceeds limit of ${formatBytes(maxSize)}`, 'SIZE_EXCEEDED', filePath);
+        }
+    }
+    catch (error) {
+        if (error instanceof SecurityError) {
+            throw error;
+        }
+        // Ignore size check when file doesn't exist (let subsequent file reading handle it)
+    }
+}
+/**
+ * Validate if file count is within limits
+ *
+ * @param count File count
+ * @param maxFiles Maximum file count
+ * @throws SecurityError Thrown when file count exceeds limit
+ */
+export function validateFileCount(count, maxFiles = DEFAULT_SECURITY_CONFIG.maxFiles) {
+    if (count > maxFiles) {
+        throw new SecurityError(`File count exceeded: Found ${count} files, exceeds limit of ${maxFiles}`, 'FILE_LIMIT_EXCEEDED');
+    }
+}
+// ============== Helper Functions ==============
+/**
+ * Format bytes to human-readable format
+ *
+ * @param bytes Byte count
+ * @returns Formatted string
+ */
+function formatBytes(bytes) {
+    if (bytes === 0)
+        return '0 Bytes';
+    const k = 1024;
+    const sizes = ['Bytes', 'KB', 'MB', 'GB', 'TB'];
+    const i = Math.floor(Math.log(bytes) / Math.log(k));
+    return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];
+}
+/**
+ * Merge security configurations
+ *
+ * @param userConfig User-provided configuration
+ * @returns Merged complete configuration
+ */
+export function mergeSecurityConfig(userConfig) {
+    return {
+        ...DEFAULT_SECURITY_CONFIG,
+        ...userConfig,
+        // Merge sensitive file patterns (rather than overwrite)
+        sensitivePatterns: [
+            ...DEFAULT_SENSITIVE_PATTERNS,
+            ...(userConfig?.sensitivePatterns || [])
+        ]
+    };
+}
+//# sourceMappingURL=security.js.map

package/dist/utils/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/utils/security.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,UAAU,MAAM,YAAY,CAAC;AA+BpC,qDAAqD;AAErD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,6BAA6B;IAC7B,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,kBAAkB;IAClB,iBAAiB;IACjB,SAAS;IACT,WAAW;IAEX,oBAAoB;IACpB,SAAS;IACT,YAAY;IACZ,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,WAAW;IACX,aAAa;IACb,eAAe;IACf,iBAAiB;IACjB,WAAW;IACX,aAAa;IAEb,8BAA8B;IAC9B,iBAAiB;IACjB,aAAa;IACb,aAAa;IACb,eAAe;IACf,YAAY;IAEZ,8BAA8B;IAC9B,gBAAgB;IAChB,eAAe;IAEf,iBAAiB;IACjB,UAAU;IACV,WAAW;IACX,MAAM;IAEN,gBAAgB;IAChB,kBAAkB;IAClB,iBAAiB;IACjB,uBAAuB;IAEvB,uCAAuC;IACvC,YAAY;IACZ,cAAc;IACd,eAAe;IAEf,iBAAiB;IACjB,wBAAwB;IACxB,yBAAyB;CAC1B,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA6B;IAC/D,kBAAkB,EAAE,EAAE,EAAY,mCAAmC;IACrE,iBAAiB,EAAE,0BAA0B;IAC7C,WAAW,EAAE,IAAI,GAAG,IAAI,EAAU,MAAM;IACxC,QAAQ,EAAE,GAAG;IACb,aAAa,EAAE,KAAK;CACrB,CAAC;AAEF,wDAAwD;AAExD;;;GAGG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IASpB;IACA;IATlB;;;;;OAKG;IACH,YACE,OAAe,EACC,IAAuB,EACvB,IAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAmB;QACvB,SAAI,GAAJ,IAAI,CAAS;QAG7B,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,wEAAwE;QACxE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF;AAED,kDAAkD;AAElD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,2BAA2B;IAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7C,6DAA6D;IAC7D,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,QAAiB;IACnE,wDAAwD;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAE/D,sCAAsC;IACtC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEnD,+CAA+C;IAC/C,8EAA8E;IAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAEvD,qEAAqE;IACrE,0DAA0D;IAC1D,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sFAAsF;IACtF,qCAAqC;IACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,6EAA6E;QAC7E,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,WAAqB,0BAA0B;IAE/C,wBAAwB;IACxB,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAE/C,2CAA2C;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,EAAE;QAC3D,GAAG,EAAE,IAAI,EAAY,8BAA8B;QACnD,MAAM,EAAE,IAAI,EAAS,cAAc;QACnC,QAAQ,EAAE,KAAK,CAAM,yBAAyB;KAC/C,CAAC,CAAC;IAEH,4BAA4B;IAC5B,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE;QAC3D,GAAG,EAAE,IAAI;QACT,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,OAAO,OAAO,IAAI,aAAa,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,WAAqB;IAErB,yCAAyC;IACzC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2BAA2B;IAC3B,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEhD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEtC,+CAA+C;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAElE,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACrE,2DAA2D;YAC3D,wCAAwC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB;IAC9C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC,cAAc,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB;IAChD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,0DAA0D;AAE1D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAiB,EACjB,MAAuB;IAEvB,MAAM,YAAY,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,MAAM,EAAE,CAAC;IAE/D,qCAAqC;IACrC,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CACrB,mCAAmC,SAAS,8CAA8C,EAC1F,gBAAgB,EAChB,SAAS,CACV,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,IAAI,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,aAAa,CACrB,qCAAqC,SAAS,kCAAkC,EAChF,gBAAgB,EAChB,SAAS,CACV,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,IAAI,CAAC,wBAAwB,CAAC,SAAS,EAAE,YAAY,CAAC,kBAAkB,IAAI,EAAE,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,aAAa,CACrB,mBAAmB,SAAS,wCAAwC,EACpE,eAAe,EACf,SAAS,CACV,CAAC;IACJ,CAAC;IAED,8CAA8C;IAC9C,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,IAAI,MAAM,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,aAAa,CACrB,2BAA2B,SAAS,sBAAsB,EAC1D,kBAAkB,EAClB,SAAS,CACV,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6CAA6C;YAC7C,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;gBACnC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,uFAAuF;QACzF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAe,EACf,MAAuB;IAEvB,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,UAAkB,uBAAuB,CAAC,WAAW;IAErD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,IAAI,GAAG,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,aAAa,CACrB,wBAAwB,QAAQ,aAAa,WAAW,CAAC,IAAI,CAAC,sBAAsB,WAAW,CAAC,OAAO,CAAC,EAAE,EAC1G,eAAe,EACf,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,oFAAoF;IACtF,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,WAAmB,uBAAuB,CAAC,QAAQ;IAEnD,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,aAAa,CACrB,8BAA8B,KAAK,4BAA4B,QAAQ,EAAE,EACzE,qBAAqB,CACtB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,iDAAiD;AAEjD;;;;;GAKG;AACH,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAElC,MAAM,CAAC,GAAG,IAAI,CAAC;IACf,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpD,OAAO,UAAU,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAA2B;IAE3B,OAAO;QACL,GAAG,uBAAuB;QAC1B,GAAG,UAAU;QACb,wDAAwD;QACxD,iBAAiB,EAAE;YACjB,GAAG,0BAA0B;YAC7B,GAAG,CAAC,UAAU,EAAE,iBAAiB,IAAI,EAAE,CAAC;SACzC;KACF,CAAC;AACJ,CAAC"}

package/dist/utils/validators.js

@@ -0,0 +1,150 @@
+/**
+ * Parameter validation utilities
+ */
+import { FRAMEWORKS, 
+// ANIMATION_TECHNOLOGIES removed - animation tool has been removed
+UI_STYLES, OUTPUT_FORMATS, CONTENT_TYPES, ANALYSIS_TASKS, CODEBASE_FOCUS, BRAINSTORM_STYLES } from '../config/constants.js';
+import { isModelSupported } from '../config/models.js';
+/**
+ * Validate required parameter
+ */
+export function validateRequired(value, fieldName) {
+    if (value === undefined || value === null || value === '') {
+        throw new Error(`${fieldName} is required`);
+    }
+}
+/**
+ * Validate string
+ */
+export function validateString(value, fieldName, minLength = 1) {
+    if (typeof value !== 'string') {
+        throw new Error(`${fieldName} must be a string`);
+    }
+    if (value.length < minLength) {
+        throw new Error(`${fieldName} must be at least ${minLength} characters long`);
+    }
+}
+/**
+ * Validate number
+ */
+export function validateNumber(value, fieldName, min, max) {
+    if (typeof value !== 'number' || isNaN(value)) {
+        throw new Error(`${fieldName} must be a number`);
+    }
+    if (min !== undefined && value < min) {
+        throw new Error(`${fieldName} must be at least ${min}`);
+    }
+    if (max !== undefined && value > max) {
+        throw new Error(`${fieldName} must be at most ${max}`);
+    }
+}
+/**
+ * Validate boolean
+ */
+export function validateBoolean(value, fieldName) {
+    if (typeof value !== 'boolean') {
+        throw new Error(`${fieldName} must be a boolean`);
+    }
+}
+/**
+ * Validate enum value
+ */
+export function validateEnum(value, fieldName, allowedValues) {
+    if (!allowedValues.includes(value)) {
+        throw new Error(`${fieldName} must be one of: ${allowedValues.join(', ')}. Got: ${value}`);
+    }
+}
+/**
+ * Validate array
+ */
+export function validateArray(value, fieldName, minLength = 1) {
+    if (!Array.isArray(value)) {
+        throw new Error(`${fieldName} must be an array`);
+    }
+    if (value.length < minLength) {
+        throw new Error(`${fieldName} must have at least ${minLength} item(s)`);
+    }
+}
+/**
+ * Validate Base64 image
+ */
+export function validateBase64Image(value, fieldName) {
+    if (!value.startsWith('data:image/')) {
+        throw new Error(`${fieldName} must be a Base64 encoded image (data:image/...)`);
+    }
+}
+/**
+ * Validate URL
+ */
+export function validateURL(value, fieldName) {
+    try {
+        new URL(value);
+    }
+    catch {
+        throw new Error(`${fieldName} must be a valid URL`);
+    }
+}
+/**
+ * Validate framework
+ */
+export function validateFramework(value) {
+    validateEnum(value, 'framework', FRAMEWORKS);
+}
+// validateAnimationTechnology removed - animation tool has been removed
+/**
+ * Validate UI style
+ */
+export function validateUIStyle(value) {
+    validateEnum(value, 'style', UI_STYLES);
+}
+/**
+ * Validate output format
+ */
+export function validateOutputFormat(value) {
+    validateEnum(value, 'outputFormat', OUTPUT_FORMATS);
+}
+/**
+ * Validate content type
+ */
+export function validateContentType(value) {
+    validateEnum(value, 'type', CONTENT_TYPES);
+}
+/**
+ * Validate analysis task
+ */
+export function validateAnalysisTask(value) {
+    validateEnum(value, 'task', ANALYSIS_TASKS);
+}
+/**
+ * Validate codebase focus
+ */
+export function validateCodebaseFocus(value) {
+    validateEnum(value, 'focus', CODEBASE_FOCUS);
+}
+/**
+ * Validate brainstorm style
+ */
+export function validateBrainstormStyle(value) {
+    validateEnum(value, 'style', BRAINSTORM_STYLES);
+}
+/**
+ * Validate model ID
+ */
+export function validateModel(modelId) {
+    if (!isModelSupported(modelId)) {
+        throw new Error(`Model "${modelId}" is not supported. Use one of: gemini-3-pro-preview, gemini-2.5-pro, gemini-2.5-flash, gemini-2.5-flash-lite`);
+    }
+}
+/**
+ * Validate temperature parameter
+ */
+export function validateTemperature(temperature) {
+    validateNumber(temperature, 'temperature', 0, 2);
+}
+/**
+ * Validate maxTokens parameter
+ */
+export function validateMaxTokens(maxTokens) {
+    validateNumber(maxTokens, 'maxTokens', 1, 65536);
+}
+//# sourceMappingURL=validators.js.map

package/dist/utils/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../src/utils/validators.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,UAAU;AACV,mEAAmE;AACnE,SAAS,EACT,cAAc,EACd,aAAa,EACb,cAAc,EACd,cAAc,EACd,iBAAiB,EAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAU,EAAE,SAAiB;IAC5D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,cAAc,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAU,EAAE,SAAiB,EAAE,SAAS,GAAG,CAAC;IACzE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,mBAAmB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,qBAAqB,SAAS,kBAAkB,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAU,EAAE,SAAiB,EAAE,GAAY,EAAE,GAAY;IACtF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,mBAAmB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,qBAAqB,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,oBAAoB,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAU,EAAE,SAAiB;IAC3D,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,oBAAoB,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAU,EACV,SAAiB,EACjB,aAAgB;IAEhB,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,GAAG,SAAS,oBAAoB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,EAAE,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAU,EAAE,SAAiB,EAAE,SAAS,GAAG,CAAC;IACxE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,mBAAmB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,uBAAuB,SAAS,UAAU,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,SAAiB;IAClE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,kDAAkD,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,SAAiB;IAC1D,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,sBAAsB,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED,wEAAwE;AAExE;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,YAAY,CAAC,KAAK,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,UAAU,OAAO,+GAA+G,CACjI,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,cAAc,CAAC,WAAW,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,cAAc,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC"}