perimeterx-js-core 0.5.1 → 0.6.0

package/lib/enforcer/EnforcerBase.js

@@ -1,4 +1,3 @@
-"use strict";
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -8,442 +7,152 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (_) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
-    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
-        if (ar || !(i in from)) {
-            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
-            ar[i] = from[i];
-        }
-    }
-    return to.concat(ar || Array.prototype.slice.call(from));
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EnforcerBase = void 0;
-var utils_1 = require("../utils");
-var pxhd_1 = require("../pxhd");
-var additional_activity_handler_1 = require("../additional_activity_handler");
-var filter_1 = require("../filter");
-var pxde_1 = require("../pxde");
-var first_party_1 = require("../first_party");
-var telemetry_1 = require("../telemetry");
-var block_handler_1 = require("../block_handler");
-var risk_token_1 = require("../risk_token");
-var risk_api_1 = require("../risk_api");
-var activities_1 = require("../activities");
-var graphql_1 = require("../graphql");
-var custom_parameters_1 = require("../custom_parameters");
-var cors_1 = require("../cors");
-var MinimalResponseUtils_1 = require("../http/utils/MinimalResponseUtils");
-var PXHDSource_1 = require("../pxhd/model/PXHDSource");
-var EnforcerBase = /** @class */ (function () {
+import { DefaultDataEnrichment } from '../pxde';
+import { DefaultTelemetry } from '../telemetry';
+import { DefaultTokenV2Parser, DefaultTokenV3Parser, TokenVersion } from '../risk_token';
+import { DefaultCors } from '../cors';
+import { PostRiskApiClientV2, PostRiskApiClientV3 } from '../risk_api';
+import { EnforceFlow, FilterFlow, PostEnforceFlow } from '../phase';
+import { AccountDefender, BotDefender, CredentialIntelligence, ProductName } from '../products';
+import { HttpActivityClient, HttpBatchedActivityClient } from '../activities';
+import { DefaultGraphQLParser } from '../graphql';
+export class EnforcerBase {
     /**
      * The EnforcerBase constructor.
      * @param config - The enforcer configuration.
-     * @param options - An MinimalResponseOptions object that allows for overriding any functional building blocks in the enforcer.
+     * @param options - An EnforcerOptions object that allows for overriding any functional building blocks in the enforcer.
      * @protected
      */
-    function EnforcerBase(config, options) {
+    constructor(config, options) {
         this.config = config;
-        var base64Utils = options.base64Utils || new utils_1.JSBase64Base64Utils();
-        var hashUtils = options.hashUtils || new utils_1.CryptoJSHmacUtils();
-        this.filter = options.filter || new filter_1.DefaultFilter(this.config, options === null || options === void 0 ? void 0 : options.ipRangeChecker);
-        this.cookieScoreRetriever = options.cookieScoreRetriever || new risk_token_1.RiskTokenScoreRetriever(this.config);
-        this.blockGenerator = options.blockGenerator || new block_handler_1.DefaultBlockResponseGenerator(this.config, base64Utils);
-        this.dataEnrichment = options.dataEnrichment || new pxde_1.DefaultDataEnrichment(this.config, base64Utils, hashUtils);
-        this.graphQLParser = this.config.graphqlEnabled
-            ? options.graphqlParser || new graphql_1.DefaultGraphQLParser(this.config)
-            : null;
-        var httpClient = options.httpClient;
-        this.firstParty = options.firstParty || new first_party_1.DefaultFirstParty(this.config, httpClient);
-        this.telemetry = options.telemetry || new telemetry_1.DefaultTelemetry(this.config, httpClient, base64Utils, hashUtils);
-        this.activityClient =
-            options.activityClient ||
-                (this.config.maxActivityBatchSize > 1
-                    ? new activities_1.HttpBatchedActivityClient(this.config, httpClient)
-                    : new activities_1.HttpActivityClient(this.config, httpClient));
-        var riskResponseHandler = options.tokenVersion === risk_token_1.TokenVersion.V2
-            ? new risk_api_1.RiskResponseV2Handler(this.config)
-            : new risk_api_1.RiskResponseV3Handler(this.config);
-        this.riskApiScoreRetriever =
-            options.riskApiScoreRetriever || new risk_api_1.PostRiskApiClient(this.config, httpClient, riskResponseHandler);
-        this.cors = this.config.corsSupportEnabled ? options.cors || new cors_1.DefaultCors(this.config) : null;
+        const initializationBlock = this.getInitializationBlock(config, options);
+        this.activityClient = initializationBlock.activityClient;
+        this.filterFlow = new FilterFlow(config, initializationBlock);
+        this.enforceFlow = new EnforceFlow(config, initializationBlock);
+        this.postEnforceFlow = new PostEnforceFlow(config, initializationBlock);
     }
     /**
      * The central function that triggers enforcement on the incoming request.
      * @param args - The EnforceArgs required to enforce the incoming request.
      * @returns Promise<Res|null> - A Promise resolving to a Res or null depending on the action that should be taken.
      */
-    EnforcerBase.prototype.enforce = function () {
-        var args = [];
-        for (var _i = 0; _i < arguments.length; _i++) {
-            args[_i] = arguments[_i];
-        }
-        return __awaiter(this, void 0, void 0, function () {
-            var e_1;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        _a.trys.push([0, 2, , 3]);
-                        if (!this.config.moduleEnabled) {
-                            this.config.logger.debug('module is disabled, will not enforce');
-                            return [2 /*return*/, null];
-                        }
-                        this.config.logger.debug('module is enabled, continuing with enforcement');
-                        return [4 /*yield*/, this.doEnforce.apply(this, args)];
-                    case 1: return [2 /*return*/, _a.sent()];
-                    case 2:
-                        e_1 = _a.sent();
-                        this.config.logger.error("caught error in enforce - ".concat(e_1));
-                        return [2 /*return*/, null];
-                    case 3: return [2 /*return*/];
+    enforce(...args) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                if (!this.config.moduleEnabled) {
+                    this.config.logger.debug('module is disabled, will not enforce');
+                    return null;
                 }
-            });
+                return yield this.doEnforce(...args);
+            }
+            catch (e) {
+                this.config.logger.error(`caught error in enforce - ${e}`);
+                return null;
+            }
         });
-    };
+    }
     /**
      * Performs all enforcer functionality on the incoming request context.
      * @param args - The EnforceArgs required to enforce the incoming request.
      * @returns Promise<Res|null> -  A Promise resolving to a Res or null depending on the action that should be taken.
      * @protected
      */
-    EnforcerBase.prototype.doEnforce = function () {
-        var _a;
-        var args = [];
-        for (var _i = 0; _i < arguments.length; _i++) {
-            args[_i] = arguments[_i];
-        }
-        return __awaiter(this, void 0, void 0, function () {
-            var context, httpResponse, response;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0: return [4 /*yield*/, this.createContext.apply(this, args)];
-                    case 1:
-                        context = _b.sent();
-                        return [4 /*yield*/, this.handleFirstParty(context)];
-                    case 2:
-                        httpResponse = _b.sent();
-                        if (httpResponse) {
-                            this.config.logger.debug('returning first party response');
-                            return [2 /*return*/, this.convertToRes(httpResponse)];
-                        }
-                        if (this.handleFilter(context)) {
-                            this.config.logger.debug("filtering due to ".concat(context.filterReason));
-                            return [2 /*return*/, null];
-                        }
-                        if (!((_a = this.cors) === null || _a === void 0 ? void 0 : _a.isPreflightRequest(context))) return [3 /*break*/, 4];
-                        this.config.logger.debug("Preflight request");
-                        return [4 /*yield*/, this.cors.runPreflightCustomHandler(context)];
-                    case 3:
-                        response = _b.sent();
-                        if (response) {
-                            return [2 /*return*/, this.convertToRes(response)];
-                        }
-                        if (this.config.corsPreflightRequestFilterEnabled) {
-                            this.config.logger.debug("Skipping verification due to preflight request");
-                            return [2 /*return*/, null];
-                        }
-                        _b.label = 4;
-                    case 4: return [4 /*yield*/, this.handleCompleteContextInitialization(context)];
-                    case 5:
-                        _b.sent();
-                        this.config.logger.debug('context initialization complete');
-                        return [4 /*yield*/, this.handleGraphQL(context)];
-                    case 6:
-                        _b.sent();
-                        return [4 /*yield*/, this.handleEnrichCustomParameters(context)];
-                    case 7:
-                        _b.sent();
-                        return [4 /*yield*/, this.handleTelemetryIfNeeded(context)];
-                    case 8:
-                        _b.sent();
-                        return [4 /*yield*/, this.handlePxde(context)];
-                    case 9:
-                        _b.sent();
-                        return [4 /*yield*/, this.handleCookieRetrieverIfNeeded(context)];
-                    case 10:
-                        _b.sent();
-                        return [4 /*yield*/, this.handleRiskApiIfNeeded(context)];
-                    case 11:
-                        _b.sent();
-                        return [4 /*yield*/, this.handleAdditionalActivityHandler(context)];
-                    case 12:
-                        _b.sent();
-                        return [4 /*yield*/, this.handleBlockResponse(context)];
-                    case 13:
-                        httpResponse = _b.sent();
-                        if (httpResponse) {
-                            this.config.logger.debug("blocking request due to ".concat(context.blockReason));
-                            return [2 /*return*/, this.convertToRes(httpResponse)];
-                        }
-                        this.config.logger.debug("passing request due to ".concat(context.passReason || 'monitor mode'));
-                        return [2 /*return*/, null];
-                }
-            });
-        });
-    };
-    EnforcerBase.prototype.createContext = function () {
-        var args = [];
-        for (var _i = 0; _i < arguments.length; _i++) {
-            args[_i] = arguments[_i];
-        }
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                return [2 /*return*/, this.constructContext.apply(this, args)];
-            });
-        });
-    };
-    EnforcerBase.prototype.handleFirstParty = function (context) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.firstParty.handleFirstPartyRequest(context)];
-                    case 1: return [2 /*return*/, _a.sent()];
-                }
-            });
-        });
-    };
-    EnforcerBase.prototype.handleFilter = function (context) {
-        return this.filter.shouldFilter(context);
-    };
-    EnforcerBase.prototype.handleCompleteContextInitialization = function (context) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                return [2 /*return*/];
-            });
-        });
-    };
-    EnforcerBase.prototype.handleGraphQL = function (context) {
-        var _a;
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        if (!((_a = this.graphQLParser) === null || _a === void 0 ? void 0 : _a.isGraphQLRequest(context))) return [3 /*break*/, 2];
-                        return [4 /*yield*/, this.graphQLParser.parseGraphQLRequest(context)];
-                    case 1:
-                        _b.sent();
-                        _b.label = 2;
-                    case 2: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    EnforcerBase.prototype.handleEnrichCustomParameters = function (context) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, custom_parameters_1.CustomParametersUtils.handleCustomParameters(this.config, context)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    EnforcerBase.prototype.handleTelemetryIfNeeded = function (context) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.telemetry.isValidTelemetryRequest(context)];
-                    case 1:
-                        if (!_a.sent()) return [3 /*break*/, 3];
-                        return [4 /*yield*/, this.telemetry.sendTelemetry(context)];
-                    case 2:
-                        _a.sent();
-                        _a.label = 3;
-                    case 3: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    EnforcerBase.prototype.handlePxde = function (context) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.dataEnrichment.handlePxde(context)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    EnforcerBase.prototype.handleCookieRetrieverIfNeeded = function (context) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        if (!this.cookieScoreRetriever.shouldRetrieveScore(context)) return [3 /*break*/, 2];
-                        this.config.logger.debug('evaluating cookie');
-                        return [4 /*yield*/, this.cookieScoreRetriever.retrieveScore(context)];
-                    case 1:
-                        _a.sent();
-                        _a.label = 2;
-                    case 2: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    EnforcerBase.prototype.handleRiskApiIfNeeded = function (context) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        if (!this.riskApiScoreRetriever.shouldRetrieveScore(context)) return [3 /*break*/, 2];
-                        this.config.logger.debug('sending risk api request');
-                        return [4 /*yield*/, this.riskApiScoreRetriever.retrieveScore(context)];
-                    case 1:
-                        _a.sent();
-                        _a.label = 2;
-                    case 2: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    EnforcerBase.prototype.handleAdditionalActivityHandler = function (context) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, additional_activity_handler_1.AdditionalActivityHandlerUtils.invokeAdditionalActivityHandler(this.config, context)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    EnforcerBase.prototype.handleBlockResponse = function (context) {
-        var _a;
-        return __awaiter(this, void 0, void 0, function () {
-            var res, corsBlockResponseHeaders;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        if (!this.blockGenerator.shouldGenerate(context)) return [3 /*break*/, 4];
-                        return [4 /*yield*/, this.handleSendActivities(context)];
-                    case 1:
-                        _b.sent();
-                        res = this.blockGenerator.generateBlockResponse(context);
-                        if (!((_a = this.cors) === null || _a === void 0 ? void 0 : _a.isCorsRequest(context))) return [3 /*break*/, 3];
-                        this.config.logger.debug("Adding CORS headers to block response");
-                        return [4 /*yield*/, this.cors.getCorsBlockHeaders(context)];
-                    case 2:
-                        corsBlockResponseHeaders = _b.sent();
-                        if (corsBlockResponseHeaders) {
-                            res = (0, MinimalResponseUtils_1.appendHeaders)(res, corsBlockResponseHeaders);
-                        }
-                        _b.label = 3;
-                    case 3: return [2 /*return*/, res];
-                    case 4: return [2 /*return*/, null];
-                }
-            });
-        });
-    };
-    EnforcerBase.prototype.handleSendActivities = function (context) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.activityClient.sendActivities(context)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                }
-            });
+    doEnforce(...args) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const context = yield this.constructContext(...args);
+            let result = yield this.filterFlow.execute(context);
+            if (result.done) {
+                return result.response ? this.convertToRes(result.response) : null;
+            }
+            this.preserveContext(context, ...args);
+            result = yield this.enforceFlow.execute(context);
+            return result.response ? this.convertToRes(result.response) : null;
         });
-    };
+    }
     /**
      * Performs all required functionality after an origin response has been received.
-     * @param req - The Req sent to the origin.
-     * @param res - The Res received from the origin.
-     * @param args - The EnforceArgs required to enforce the incoming request.
+     * @param args - The PostEnforce args required to enforce the incoming request.
      * @returns Promise<void> - The response parameter will be modified as needed
      * @protected
      */
-    EnforcerBase.prototype.postEnforce = function (req, res) {
-        var args = [];
-        for (var _i = 2; _i < arguments.length; _i++) {
-            args[_i - 2] = arguments[_i];
-        }
-        return __awaiter(this, void 0, void 0, function () {
-            var response, context_1, e_2;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.convertToHttpResponse(res)];
-                    case 1:
-                        response = _a.sent();
-                        _a.label = 2;
-                    case 2:
-                        _a.trys.push([2, 7, , 8]);
-                        context_1 = this.retrieveContext.apply(this, __spreadArray([req, res], args, false));
-                        if (!context_1) return [3 /*break*/, 6];
-                        return [4 /*yield*/, this.setResponseData(context_1, response)];
-                    case 3:
-                        _a.sent();
-                        return [4 /*yield*/, this.handleSendActivities(context_1)];
-                    case 4:
-                        _a.sent();
-                        return [4 /*yield*/, this.handlePxhd(context_1, response)];
-                    case 5:
-                        _a.sent();
-                        _a.label = 6;
-                    case 6: return [3 /*break*/, 8];
-                    case 7:
-                        e_2 = _a.sent();
-                        this.config.logger.error("error in post enforce - ".concat(e_2));
-                        return [3 /*break*/, 8];
-                    case 8: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    EnforcerBase.prototype.setResponseData = function (context, response) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                if (response.status) {
-                    context.responseData.status = response.status;
+    postEnforce(...args) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const context = this.retrieveContext(...args);
+                if (context) {
+                    context.response = yield this.convertToOutgoingResponse(...args);
+                    yield this.postEnforceFlow.execute(context);
                 }
-                return [2 /*return*/];
-            });
+            }
+            catch (e) {
+                this.config.logger.error(`caught error in post enforce - ${e}`);
+            }
         });
-    };
-    EnforcerBase.prototype.handlePxhd = function (context, response) {
-        var _a;
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_b) {
-                if (((_a = context.pxhd) === null || _a === void 0 ? void 0 : _a.source) === PXHDSource_1.PXHDSource.RISK) {
-                    pxhd_1.PXHDUtils.addPxhdToOutgoingResponse(context, response);
-                }
-                return [2 /*return*/];
-            });
+    }
+    sendAdditionalS2SActivity(...args) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const context = this.retrieveContext(...args);
+            if (context) {
+                yield this.activityClient.sendActivities(context);
+            }
         });
-    };
-    return EnforcerBase;
-}());
-exports.EnforcerBase = EnforcerBase;
+    }
+    /**
+     * Returns the components needed to initialize the enforcer according to the provided options. If no
+     * component is provided in the options, a default one is generated and returned.
+     * @param config
+     * @param options
+     * @returns Required<EnforcerBaseOptions>
+     * @protected
+     */
+    getInitializationBlock(config, options) {
+        const { tokenVersion, httpClient, base64Utils, hmacUtils, hashUtils, ipRangeChecker } = options;
+        const cipherUtils = tokenVersion === TokenVersion.V2 ? null : options.cipherUtils;
+        const cors = options.cors || new DefaultCors(config);
+        const telemetry = options.telemetry || new DefaultTelemetry(config, httpClient, base64Utils, hmacUtils);
+        const dataEnrichment = options.dataEnrichment || new DefaultDataEnrichment(config, base64Utils, hmacUtils);
+        const graphQLParser = options.graphQLParser || new DefaultGraphQLParser(config);
+        const tokenParser = options.tokenParser ||
+            (tokenVersion === TokenVersion.V2
+                ? new DefaultTokenV2Parser(config, { base64Utils, hmacUtils })
+                : new DefaultTokenV3Parser(config, { cipherUtils, hmacUtils }));
+        const riskApiClient = options.riskApiClient ||
+            (tokenVersion === TokenVersion.V2
+                ? new PostRiskApiClientV2(config, httpClient)
+                : new PostRiskApiClientV3(config, httpClient));
+        const activityClient = options.activityClient ||
+            (config.maxActivityBatchSize > 1
+                ? new HttpBatchedActivityClient(config, httpClient)
+                : new HttpActivityClient(config, httpClient));
+        const allOptions = {
+            httpClient,
+            base64Utils,
+            hmacUtils,
+            hashUtils,
+            ipRangeChecker,
+            cors,
+            telemetry,
+            dataEnrichment,
+            graphQLParser,
+            tokenParser,
+            riskApiClient,
+            activityClient,
+        };
+        const products = this.initializeProducts(config, options.products, base64Utils, hashUtils, ipRangeChecker);
+        return Object.assign({ products }, allOptions);
+    }
+    initializeProducts(config, products, base64Utils, hashUtils, ipRangeChecker) {
+        const botDefender = (products === null || products === void 0 ? void 0 : products.bd) || new BotDefender(config, { base64Utils, ipRangeChecker });
+        const accountDefender = (products === null || products === void 0 ? void 0 : products.ad) || new AccountDefender(config, { base64Utils });
+        const credentialIntelligence = config.ciEnabled
+            ? (products === null || products === void 0 ? void 0 : products.ci) || new CredentialIntelligence(config, hashUtils)
+            : null;
+        return {
+            [ProductName.BOT_DEFENDER]: botDefender,
+            [ProductName.ACCOUNT_DEFENDER]: accountDefender,
+            [ProductName.CODE_DEFENDER]: products === null || products === void 0 ? void 0 : products.cd,
+            [ProductName.CREDENTIAL_INTELLIGENCE]: credentialIntelligence,
+            [ProductName.HYPE_SALE_CHALLENGE]: products === null || products === void 0 ? void 0 : products.hsc,
+        };
+    }
+}

package/lib/enforcer/IEnforcer.js

@@ -1,2 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+export {};

package/lib/enforcer/index.d.ts

@@ -1,2 +1,3 @@
 export { IEnforcer } from './IEnforcer';
-export { EnforcerBase, EnforcerBaseOptions } from './EnforcerBase';
+export { EnforcerBase } from './EnforcerBase';
+export * from './options';

package/lib/enforcer/index.js

@@ -1,5 +1,2 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EnforcerBase = void 0;
-var EnforcerBase_1 = require("./EnforcerBase");
-Object.defineProperty(exports, "EnforcerBase", { enumerable: true, get: function () { return EnforcerBase_1.EnforcerBase; } });
+export { EnforcerBase } from './EnforcerBase';
+export * from './options';

package/lib/enforcer/options/EnforcerBaseOptions.d.ts

@@ -0,0 +1,25 @@
+import { IDataEnrichment } from '../../pxde';
+import { ITokenParser } from '../../risk_token';
+import { IBase64Utils, IHashUtils, IHmacUtils, IIpRangeChecker } from '../../utils';
+import { ICors } from '../../cors';
+import { IHttpClient } from '../../http';
+import { ITelemetry } from '../../telemetry';
+import { IRiskApiClient } from '../../risk_api';
+import { IActivityClient } from '../../activities';
+import { Products } from '../../products';
+import { IGraphQLParser } from '../../graphql';
+export declare type EnforcerBaseOptions<Req, Res> = {
+    httpClient: IHttpClient;
+    base64Utils: IBase64Utils;
+    hmacUtils: IHmacUtils;
+    hashUtils: IHashUtils;
+    ipRangeChecker: IIpRangeChecker;
+    products?: Products<Req, Res>;
+    dataEnrichment?: IDataEnrichment<Req, Res>;
+    tokenParser?: ITokenParser<Req, Res>;
+    cors?: ICors<Req, Res>;
+    graphQLParser?: IGraphQLParser<Req, Res>;
+    telemetry?: ITelemetry<Req, Res>;
+    riskApiClient?: IRiskApiClient<Req, Res>;
+    activityClient?: IActivityClient<Req, Res>;
+};

package/lib/enforcer/options/EnforcerBaseOptions.js

@@ -0,0 +1 @@
+export {};

package/lib/enforcer/options/EnforcerOptionsType.d.ts

@@ -0,0 +1,4 @@
+import { TokenVersion } from '../../risk_token';
+import { EnforcerV2Options } from './EnforcerV2Options';
+import { EnforcerV3Options } from './EnforcerV3Options';
+export declare type EnforcerOptionsType<TokenV extends TokenVersion, Req, Res> = TokenV extends TokenVersion.V2 ? EnforcerV2Options<Req, Res> : TokenV extends TokenVersion.V3 ? EnforcerV3Options<Req, Res> : never;

package/lib/enforcer/options/EnforcerOptionsType.js

@@ -0,0 +1 @@
+export {};

package/lib/enforcer/options/EnforcerV2Options.d.ts

@@ -0,0 +1,5 @@
+import { TokenVersion } from '../../risk_token';
+import { EnforcerBaseOptions } from './EnforcerBaseOptions';
+export declare type EnforcerV2Options<Req, Res> = {
+    tokenVersion: TokenVersion.V2;
+} & EnforcerBaseOptions<Req, Res>;

package/lib/enforcer/options/EnforcerV2Options.js

@@ -0,0 +1 @@
+export {};

package/lib/enforcer/options/EnforcerV3Options.d.ts

@@ -0,0 +1,7 @@
+import { TokenVersion } from '../../risk_token';
+import { ICipherUtils } from '../../utils';
+import { EnforcerBaseOptions } from './EnforcerBaseOptions';
+export declare type EnforcerV3Options<Req, Res> = {
+    tokenVersion: TokenVersion.V3;
+    cipherUtils: ICipherUtils;
+} & EnforcerBaseOptions<Req, Res>;

package/lib/enforcer/options/EnforcerV3Options.js

@@ -0,0 +1 @@
+export {};

package/lib/enforcer/options/index.d.ts

@@ -0,0 +1,4 @@
+export * from './EnforcerBaseOptions';
+export * from './EnforcerV2Options';
+export * from './EnforcerV3Options';
+export * from './EnforcerOptionsType';