pptb-standard-sample-tool 1.1.3 → 1.1.6

package/dist/app.js

@@ -1,5 +1,7 @@
-"use strict";
 /// <reference types="@pptb/types" />
+import { createFileSystemFeature } from "./features/filesystem.js";
+import { createTerminalFeature } from "./features/terminal.js";
+import { createSecuritySuites } from "./security/suites.js";
 /**
  * HTML Sample Tool for Power Platform Tool Box
  *
@@ -18,190 +20,9 @@ let currentConnection = null;
 let secondaryConnection = null;
 let currentTerminal = null;
 let createdId = null;
-const TERMINAL_ALLOWED_COMMANDS = new Set([
-    "dir",
-    "ls -la",
-    "echo PPTB_SECURITY_PROBE",
-    "pwd",
-    "uname -a",
-    "echo CHAIN_TEST && echo SECOND_COMMAND",
-    "Get-Location",
-    "$PSVersionTable.PSVersion.ToString()",
-    'Write-Output "CHAIN_TEST"; Write-Output "SECOND_COMMAND"',
-]);
-const TERMINAL_BLOCKED_TOKENS = [
-    "rm ",
-    "del ",
-    "format",
-    "sudo",
-    "chmod",
-    "chown",
-    "powershell -enc",
-    "invoke-expression",
-    "downloadstring",
-    "curl ",
-    "wget ",
-    "scp ",
-    "ssh ",
-    "id_rsa",
-    ".ssh",
-    "procdump",
-    "memory",
-    "dump",
-];
-const FILE_PATH_BLOCK_LIST = [
-    "/etc/passwd",
-    "/etc/shadow",
-    "/etc/hosts",
-    "/var/log/system.log",
-    "/.ssh/",
-    "\\.ssh\\",
-    "id_rsa",
-    "known_hosts",
-    "c:\\windows\\system32",
-];
-function delay(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}
-function normalizeForPolicy(value) {
-    return value.trim().replace(/\\/g, "/").toLowerCase();
-}
-function getBlockedCommandReason(command) {
-    const normalized = command.trim();
-    if (TERMINAL_ALLOWED_COMMANDS.has(normalized)) {
-        return null;
-    }
-    const low = normalizeForPolicy(normalized);
-    const blockedToken = TERMINAL_BLOCKED_TOKENS.find((token) => low.includes(token));
-    if (blockedToken) {
-        return `Blocked token detected: ${blockedToken}`;
-    }
-    return "Command is not on allow-list";
-}
-function getBlockedPathReason(filePath) {
-    const normalized = normalizeForPolicy(filePath);
-    const blockedMatch = FILE_PATH_BLOCK_LIST.find((token) => normalized.includes(token));
-    if (blockedMatch) {
-        return `Sensitive path pattern detected: ${blockedMatch}`;
-    }
-    return null;
-}
-async function executeCommandWithPolicyGuard(terminalId, command) {
-    const blockedReason = getBlockedCommandReason(command);
-    if (blockedReason) {
-        throw new Error(`Terminal command blocked by policy. ${blockedReason}`);
-    }
-    await toolbox.terminal.execute(terminalId, command);
-}
-async function readTextWithPolicyGuard(filePath) {
-    const blockedReason = getBlockedPathReason(filePath);
-    if (blockedReason) {
-        throw new Error(`File path blocked by policy. ${blockedReason}`);
-    }
-    return toolbox.fileSystem.readText(filePath);
-}
-function addSecurityResult(results, name, status, details) {
-    results.push({ name, status, details });
-}
-async function runSecurityTestSuite() {
-    const output = document.getElementById("security-suite-output");
-    if (output) {
-        output.textContent = "Running security test suite...\n";
-    }
-    const results = [];
-    try {
-        // 1) Command allow-list exactness
-        const blockedByAllowList = getBlockedCommandReason("ls") !== null;
-        addSecurityResult(results, "command_allowlist_exact_match", blockedByAllowList ? "pass" : "fail", blockedByAllowList
-            ? "Non-allow-listed command was blocked"
-            : "Command not in allow-list was unexpectedly allowed");
-        // 2) Risky token detection
-        const blockedDangerousToken = getBlockedCommandReason("echo ok && curl http://example.com") !== null;
-        addSecurityResult(results, "command_blocked_token_detection", blockedDangerousToken ? "pass" : "fail", blockedDangerousToken
-            ? "Risky token pattern was blocked"
-            : "Risky token pattern bypassed command policy");
-        // 3) Path normalization / traversal style checks
-        const traversalPath = "../../Users/test/.ssh/id_rsa";
-        const traversalBlocked = getBlockedPathReason(traversalPath) !== null;
-        addSecurityResult(results, "path_normalization_sensitive_match", traversalBlocked ? "pass" : "fail", traversalBlocked
-            ? "Sensitive path pattern detected after normalization"
-            : "Sensitive path pattern was not detected");
-        // 4) Windows-style sensitive path checks
-        const windowsSensitivePath = "C:\\Users\\demo\\.ssh\\known_hosts";
-        const windowsPathBlocked = getBlockedPathReason(windowsSensitivePath) !== null;
-        addSecurityResult(results, "windows_path_sensitive_match", windowsPathBlocked ? "pass" : "fail", windowsPathBlocked
-            ? "Windows-style sensitive path pattern detected"
-            : "Windows-style sensitive path pattern was not detected");
-        // 5) Malformed terminal output payload handling
-        try {
-            handleTerminalOutput(undefined);
-            addSecurityResult(results, "terminal_output_malformed_payload", "pass", "Malformed terminal output payload did not crash handler");
-        }
-        catch (error) {
-            addSecurityResult(results, "terminal_output_malformed_payload", "fail", `Handler crashed: ${error.message}`);
-        }
-        // 6) Malformed command-completed payload handling
-        try {
-            handleCommandCompleted(undefined);
-            addSecurityResult(results, "terminal_completed_malformed_payload", "pass", "Malformed command-completed payload did not crash handler");
-        }
-        catch (error) {
-            addSecurityResult(results, "terminal_completed_malformed_payload", "fail", `Handler crashed: ${error.message}`);
-        }
-        // 7) Lightweight terminal burst/rate handling
-        try {
-            if (!currentTerminal) {
-                await createTerminal();
-            }
-            if (!currentTerminal) {
-                addSecurityResult(results, "terminal_burst_probe", "fail", "Could not create terminal for burst probe");
-            }
-            else {
-                const burst = Array.from({ length: 5 }).map((_, i) => `echo PPTB_SECURITY_PROBE_BURST_${i + 1}`);
-                for (const command of burst) {
-                    try {
-                        await executeCommandWithPolicyGuard(currentTerminal.id, command);
-                    }
-                    catch {
-                        // intentional: this checks if policy blocks unknown commands quickly and safely
-                    }
-                }
-                addSecurityResult(results, "terminal_burst_probe", "pass", "Burst of rapid commands processed without app crash");
-            }
-        }
-        catch (error) {
-            addSecurityResult(results, "terminal_burst_probe", "fail", `Burst probe error: ${error.message}`);
-        }
-        const failed = results.filter((r) => r.status === "fail").length;
-        const passed = results.length - failed;
-        const report = {
-            generatedAt: new Date().toISOString(),
-            summary: {
-                total: results.length,
-                passed,
-                failed,
-            },
-            results,
-        };
-        if (output) {
-            output.textContent = JSON.stringify(report, null, 2);
-        }
-        if (failed > 0) {
-            await showNotification("Security Suite Completed", `${failed} test(s) failed. Review JSON report.`, "warning");
-            log(`Security suite completed with ${failed} failure(s)`, "warning");
-        }
-        else {
-            await showNotification("Security Suite Completed", "All security tests passed", "success");
-            log("Security suite completed with all tests passing", "success");
-        }
-    }
-    catch (error) {
-        if (output) {
-            output.textContent = `Security suite error: ${error.message}`;
-        }
-        log(`Security suite execution error: ${error.message}`, "error");
-    }
-}
+let securitySuites = null;
+let terminalFeature = null;
+let fileSystemFeature = null;
 /**
  * Initialize the application
  */
@@ -212,6 +33,33 @@ async function initialize() {
         await refreshConnection();
         // Subscribe to events
         subscribeToEvents();
+        terminalFeature = createTerminalFeature({
+            toolbox,
+            showNotification,
+            log,
+            getCurrentTerminal: () => currentTerminal,
+            setCurrentTerminal: (t) => {
+                currentTerminal = t;
+            },
+        });
+        fileSystemFeature = createFileSystemFeature({
+            toolbox,
+            showNotification,
+            log,
+            getCurrentConnection: () => currentConnection,
+        });
+        // Initialize security suites (used by UI buttons)
+        securitySuites = createSecuritySuites({
+            toolbox,
+            dataverse,
+            getCurrentConnection: () => currentConnection,
+            getCurrentTerminal: () => currentTerminal,
+            createTerminal,
+            handleTerminalOutput,
+            handleCommandCompleted,
+            showNotification,
+            log,
+        });
         // Setup UI event handlers
         setupEventHandlers();
         // Apply theme
@@ -261,8 +109,7 @@ async function refreshConnection() {
         }
         else {
             connectionInfo.className = "info-box warning";
-            connectionInfo.innerHTML =
-                "<p><strong>⚠️ No active connection</strong><br>Please connect to a Dataverse environment to use this tool.</p>";
+            connectionInfo.innerHTML = "<p><strong>⚠️ No active connection</strong><br>Please connect to a Dataverse environment to use this tool.</p>";
             log("No active connection found", "warning");
         }
         if (secondaryConnection) {
@@ -298,8 +145,7 @@ async function refreshConnection() {
             if (!secondaryInfo)
                 return;
             secondaryInfo.className = "info-box warning";
-            secondaryInfo.innerHTML =
-                "<p><strong>⚠️ No secondary connection</strong><br>Please connect to a secondary Dataverse environment to use this tool.</p>";
+            secondaryInfo.innerHTML = "<p><strong>⚠️ No secondary connection</strong><br>Please connect to a secondary Dataverse environment to use this tool.</p>";
             log("No secondary connection found", "warning");
         }
     }
@@ -339,18 +185,10 @@ function subscribeToEvents() {
  */
 function setupEventHandlers() {
     // Notification buttons
-    document
-        .getElementById("show-success-btn")
-        ?.addEventListener("click", () => showNotification("Success!", "Operation completed successfully", "success"));
-    document
-        .getElementById("show-info-btn")
-        ?.addEventListener("click", () => showNotification("Information", "This is an informational message", "info"));
-    document
-        .getElementById("show-warning-btn")
-        ?.addEventListener("click", () => showNotification("Warning", "Please review this warning", "warning"));
-    document
-        .getElementById("show-error-btn")
-        ?.addEventListener("click", () => showNotification("Error", "An error has occurred", "error"));
+    document.getElementById("show-success-btn")?.addEventListener("click", () => showNotification("Success!", "Operation completed successfully", "success"));
+    document.getElementById("show-info-btn")?.addEventListener("click", () => showNotification("Information", "This is an informational message", "info"));
+    document.getElementById("show-warning-btn")?.addEventListener("click", () => showNotification("Warning", "Please review this warning", "warning"));
+    document.getElementById("show-error-btn")?.addEventListener("click", () => showNotification("Error", "An error has occurred", "error"));
     document.getElementById("show-loading-btn")?.addEventListener("click", showLoading);
     // Utility buttons
     document.getElementById("copy-clipboard-btn")?.addEventListener("click", copyToClipboard);
@@ -367,7 +205,12 @@ function setupEventHandlers() {
     document.getElementById("create-terminal-btn")?.addEventListener("click", createTerminal);
     document.getElementById("execute-command-btn")?.addEventListener("click", executeTerminalCommand);
     document.getElementById("run-security-probe-btn")?.addEventListener("click", runTerminalSecurityProbe);
-    document.getElementById("run-security-suite-btn")?.addEventListener("click", runSecurityTestSuite);
+    document.getElementById("run-terminal-suite-btn")?.addEventListener("click", () => securitySuites?.runTerminalSuite());
+    document.getElementById("run-filesystem-suite-btn")?.addEventListener("click", () => securitySuites?.runFileSystemSuite());
+    document.getElementById("run-events-suite-btn")?.addEventListener("click", () => securitySuites?.runEventsSuite());
+    document.getElementById("run-settings-suite-btn")?.addEventListener("click", () => securitySuites?.runSettingsSuite());
+    document.getElementById("run-dataverse-suite-btn")?.addEventListener("click", () => securitySuites?.runDataverseSuite());
+    document.getElementById("run-security-suite-btn")?.addEventListener("click", () => securitySuites?.runAllSuites());
     document.getElementById("close-terminal-btn")?.addEventListener("click", closeTerminal);
     // Dataverse query button
     document.getElementById("query-accounts-btn")?.addEventListener("click", queryAccounts);
@@ -450,464 +293,99 @@ async function showCurrentTheme() {
         log(`Error getting theme: ${error.message}`, "error");
     }
 }
+function requireTerminalFeature() {
+    if (!terminalFeature) {
+        throw new Error("Terminal feature not initialized");
+    }
+    return terminalFeature;
+}
+function requireFileSystemFeature() {
+    if (!fileSystemFeature) {
+        throw new Error("FileSystem feature not initialized");
+    }
+    return fileSystemFeature;
+}
 /**
  * Save data to file
  */
 async function saveDataToFile() {
-    try {
-        const data = {
-            timestamp: new Date().toISOString(),
-            connection: currentConnection
-                ? {
-                    name: currentConnection.name,
-                    url: currentConnection.url,
-                    environment: currentConnection.environment,
-                }
-                : null,
-            message: "Export from HTML Sample Tool",
-        };
-        const filePath = await toolbox.fileSystem.saveFile("sample-export.json", JSON.stringify(data, null, 2));
-        if (filePath) {
-            await showNotification("File Saved", `File saved to: ${filePath}`, "success");
-            log(`File saved to: ${filePath}`, "success");
-        }
-        else {
-            log("File save cancelled", "info");
-        }
-    }
-    catch (error) {
-        log(`Error saving file: ${error.message}`, "error");
-    }
+    await requireFileSystemFeature().saveDataToFile();
 }
 /**
  * Read text file
  */
 async function readText() {
-    try {
-        const output = document.getElementById("filesystem-output");
-        if (output)
-            output.textContent = "Selecting text file...\n";
-        const filePath = await toolbox.fileSystem.selectPath({
-            type: "file",
-            title: "Select a Text File",
-            filters: [
-                { name: "Text Files", extensions: ["txt", "json", "xml", "csv", "md"] },
-                { name: "All Files", extensions: ["*"] },
-            ],
-        });
-        if (!filePath) {
-            if (output)
-                output.textContent = "File selection cancelled.";
-            log("File selection cancelled", "info");
-            return;
-        }
-        if (output)
-            output.textContent = `Reading file: ${filePath}\n\n`;
-        const content = await readTextWithPolicyGuard(filePath);
-        if (output) {
-            output.textContent += `File Size: ${content.length} characters\n\n`;
-            output.textContent += "Content:\n";
-            output.textContent += "─".repeat(50) + "\n";
-            output.textContent += content;
-        }
-        await showNotification("Success", `File read successfully (${content.length} characters)`, "success");
-        log(`Read text file: ${filePath} (${content.length} chars)`, "success");
-    }
-    catch (error) {
-        const output = document.getElementById("filesystem-output");
-        if (output)
-            output.textContent = `Error: ${error.message}`;
-        log(`Error reading text file: ${error.message}`, "error");
-    }
+    await requireFileSystemFeature().readText();
 }
 /**
  * Read directory contents
  */
 async function readDirectory() {
-    try {
-        const output = document.getElementById("filesystem-output");
-        if (output)
-            output.textContent = "Selecting directory...\n";
-        const dirPath = await toolbox.fileSystem.selectPath({
-            type: "folder",
-            title: "Select a Directory",
-        });
-        if (!dirPath) {
-            if (output)
-                output.textContent = "Directory selection cancelled.";
-            log("Directory selection cancelled", "info");
-            return;
-        }
-        if (output)
-            output.textContent = `Reading directory: ${dirPath}\n\n`;
-        const entries = await toolbox.fileSystem.readDirectory(dirPath);
-        // Separate files and directories
-        const directories = entries.filter((e) => e.type === "directory");
-        const files = entries.filter((e) => e.type === "file");
-        if (output) {
-            output.textContent += `Found ${entries.length} entries:\n`;
-            output.textContent += "─".repeat(50) + "\n";
-            if (directories.length > 0) {
-                output.textContent += `\nDirectories (${directories.length}):\n`;
-                directories.forEach((entry) => {
-                    output.textContent += `  📁 ${entry.name}\n`;
-                });
-            }
-            if (files.length > 0) {
-                output.textContent += `\nFiles (${files.length}):\n`;
-                files.forEach((entry) => {
-                    output.textContent += `  📄 ${entry.name}\n`;
-                });
-            }
-        }
-        await showNotification("Success", `Directory read successfully (${entries.length} entries)`, "success");
-        log(`Read directory: ${dirPath} (${entries.length} entries: ${directories.length} dirs, ${files.length} files)`, "success");
-    }
-    catch (error) {
-        const output = document.getElementById("filesystem-output");
-        if (output)
-            output.textContent = `Error: ${error.message}`;
-        log(`Error reading directory: ${error.message}`, "error");
-    }
+    await requireFileSystemFeature().readDirectory();
 }
 /**
  * Create directory
  */
 async function createDirectory() {
-    try {
-        const output = document.getElementById("filesystem-output");
-        if (output)
-            output.textContent = "Selecting parent directory...\n";
-        const parentPath = await toolbox.fileSystem.selectPath({
-            type: "folder",
-            title: "Select Parent Directory",
-        });
-        if (!parentPath) {
-            if (output)
-                output.textContent = "Directory selection cancelled.";
-            log("Directory selection cancelled", "info");
-            return;
-        }
-        // Use built-in prompt for directory name (workaround since browser prompt may not be available)
-        // For better UX, you could add an input field to the UI
-        const dirName = prompt("Enter new directory name:", "new-folder");
-        if (!dirName || dirName.trim() === "") {
-            if (output)
-                output.textContent = "Directory creation cancelled.";
-            log("Directory creation cancelled", "info");
-            return;
-        }
-        const newDirPath = `${parentPath}/${dirName.trim()}`;
-        if (output)
-            output.textContent = `Creating directory: ${newDirPath}\n`;
-        await toolbox.fileSystem.createDirectory(newDirPath);
-        if (output) {
-            output.textContent += `✓ Directory created successfully!\n`;
-            output.textContent += `Path: ${newDirPath}`;
-        }
-        await showNotification("Success", `Directory created: ${newDirPath}`, "success");
-        log(`Created directory: ${newDirPath}`, "success");
-    }
-    catch (error) {
-        const output = document.getElementById("filesystem-output");
-        if (output)
-            output.textContent = `Error: ${error.message}`;
-        log(`Error creating directory: ${error.message}`, "error");
-    }
+    await requireFileSystemFeature().createDirectory();
 }
 /**
  * Read system file (hardcoded macOS path for testing)
  * This tests error handling when accessing restricted files
  */
 async function readSystemFile() {
-    try {
-        const output = document.getElementById("filesystem-output");
-        const systemFilePath = "/var/log/system.log";
-        if (output)
-            output.textContent = `Attempting to read system file: ${systemFilePath}\n\n`;
-        log(`Attempting to read system file: ${systemFilePath}`, "info");
-        const content = await readTextWithPolicyGuard(systemFilePath);
-        if (output) {
-            output.textContent += `File Size: ${content.length} characters\n\n`;
-            output.textContent += "Content (first 1000 chars):\n";
-            output.textContent += "─".repeat(50) + "\n";
-            output.textContent += content.substring(0, 1000);
-            if (content.length > 1000) {
-                output.textContent += "\n\n... (truncated)";
-            }
-        }
-        await showNotification("Success", `System file read (${content.length} characters)`, "success");
-        log(`Successfully read system file: ${systemFilePath}`, "success");
-    }
-    catch (error) {
-        const output = document.getElementById("filesystem-output");
-        const errorMsg = error.message;
-        if (output) {
-            output.textContent = `❌ Error Reading System File\n`;
-            output.textContent += `Path: /var/log/system.log\n\n`;
-            output.textContent += `Error: ${errorMsg}\n\n`;
-            output.textContent += "This is expected - system files are typically restricted due to:\n";
-            output.textContent += "- File permissions (insufficient access)\n";
-            output.textContent += "- Security restrictions\n";
-            output.textContent += "- Sandbox limitations";
-        }
-        log(`Error reading system file: ${errorMsg}`, "error");
-        await showNotification("Error Reading System File", errorMsg, "error");
-    }
+    await requireFileSystemFeature().readSystemFile();
 }
 /**
  * Read file with selection dialog, but then hardcode a macOS path instead
  * This tests ignoring user selection and attempting to read a restricted path
  */
 async function readHardcodedFile() {
-    try {
-        const output = document.getElementById("filesystem-output");
-        if (output)
-            output.textContent = "Opening file selection dialog...\n";
-        log("Opening file selection dialog", "info");
-        // Open file picker dialog
-        const selectedPath = await toolbox.fileSystem.selectPath({
-            type: "file",
-            title: "Select a File (will be ignored)",
-            filters: [{ name: "All Files", extensions: ["*"] }],
-        });
-        if (!selectedPath) {
-            if (output)
-                output.textContent = "File selection cancelled.";
-            log("File selection cancelled", "info");
-            return;
-        }
-        // Show what was selected
-        if (output) {
-            output.textContent = `User selected: ${selectedPath}\n\n`;
-            output.textContent += "But we're ignoring that and attempting to read a hardcoded system path instead...\n\n";
-            output.textContent += "─".repeat(50) + "\n\n";
-        }
-        log(`User selected: ${selectedPath} (will be ignored)`, "info");
-        // Hardcode a macOS system path and ignore the selection
-        const hardcodedPath = "/etc/passwd";
-        if (output)
-            output.textContent += `Attempting to read hardcoded path: ${hardcodedPath}\n\n`;
-        log(`Attempting to read hardcoded path: ${hardcodedPath}`, "info");
-        const content = await readTextWithPolicyGuard(hardcodedPath);
-        if (output) {
-            output.textContent += `✓ Success! File Size: ${content.length} characters\n\n`;
-            output.textContent += "Content:\n";
-            output.textContent += "─".repeat(50) + "\n";
-            output.textContent += content.substring(0, 1500);
-            if (content.length > 1500) {
-                output.textContent += "\n\n... (truncated)";
-            }
-        }
-        await showNotification("File Read Successfully", `Hardcoded file read: ${hardcodedPath} (${content.length} characters)`, "success");
-        log(`Successfully read hardcoded file: ${hardcodedPath}`, "success");
-    }
-    catch (error) {
-        const output = document.getElementById("filesystem-output");
-        const errorMsg = error.message;
-        if (output) {
-            output.textContent += `❌ Error Reading Hardcoded File\n`;
-            output.textContent += `Path: /etc/passwd\n\n`;
-            output.textContent += `Error: ${errorMsg}\n\n`;
-            output.textContent += "This demonstrates that hardcoded system paths are typically restricted:\n";
-            output.textContent += "- Permission denied (macOS sandbox restrictions)\n";
-            output.textContent += "- The file picker selected a different path, but we tried to read this one instead\n";
-            output.textContent += "- Real-world use case: don't hardcode paths, always use user selection";
-        }
-        log(`Error reading hardcoded file: ${errorMsg}`, "error");
-        await showNotification("Error Reading Hardcoded File", errorMsg, "error");
-    }
+    await requireFileSystemFeature().readHardcodedFile();
 }
 /**
  * Read a hardcoded macOS file path directly without using selectPath dialog
  * This tests reading a restricted file with no user interaction
  */
 async function readDirectFile() {
-    try {
-        const output = document.getElementById("filesystem-output");
-        const hardcodedPath = "/etc/hosts";
-        if (output)
-            output.textContent = `Reading hardcoded path directly (no dialog)...\n`;
-        if (output)
-            output.textContent += `Path: ${hardcodedPath}\n\n`;
-        log(`Attempting direct read of hardcoded path: ${hardcodedPath}`, "info");
-        const content = await readTextWithPolicyGuard(hardcodedPath);
-        if (output) {
-            output.textContent += `✓ Success! File Size: ${content.length} characters\n\n`;
-            output.textContent += "Content:\n";
-            output.textContent += "─".repeat(50) + "\n";
-            output.textContent += content;
-        }
-        await showNotification("File Read Successfully", `Direct file read: ${hardcodedPath} (${content.length} characters)`, "success");
-        log(`Successfully read direct file: ${hardcodedPath}`, "success");
-    }
-    catch (error) {
-        const output = document.getElementById("filesystem-output");
-        const errorMsg = error.message;
-        if (output) {
-            output.textContent = `❌ Error Reading Hardcoded Path\n`;
-            output.textContent += `Path: /etc/hosts\n`;
-            output.textContent += `Method: Direct read (no selectPath dialog)\n\n`;
-            output.textContent += `Error: ${errorMsg}\n\n`;
-            output.textContent += "This demonstrates:\n";
-            output.textContent += "- System files are protected even with hardcoded paths\n";
-            output.textContent += "- No file picker dialog was used\n";
-            output.textContent += "- Security restrictions apply to all file access attempts";
-        }
-        log(`Error reading direct file: ${errorMsg}`, "error");
-        await showNotification("Error Reading Direct File", errorMsg, "error");
-    }
+    await requireFileSystemFeature().readDirectFile();
 }
 /**
  * Create a terminal
  */
 async function createTerminal() {
-    try {
-        currentTerminal = await toolbox.terminal.create({
-            name: "HTML Sample Terminal",
-        });
-        log(`Terminal created: ${currentTerminal.name} (${currentTerminal.id})`, "success");
-        // Enable command buttons
-        const executeBtn = document.getElementById("execute-command-btn");
-        const probeBtn = document.getElementById("run-security-probe-btn");
-        const closeBtn = document.getElementById("close-terminal-btn");
-        if (executeBtn)
-            executeBtn.disabled = false;
-        if (probeBtn)
-            probeBtn.disabled = false;
-        if (closeBtn)
-            closeBtn.disabled = false;
-        await showNotification("Terminal Created", `Terminal ${currentTerminal.name} is ready`, "success");
-    }
-    catch (error) {
-        log(`Error creating terminal: ${error.message}`, "error");
-    }
+    await requireTerminalFeature().createTerminal();
 }
 /**
  * Execute terminal command
  */
 async function executeTerminalCommand() {
-    if (!currentTerminal) {
-        await showNotification("No Terminal", "Please create a terminal first", "warning");
-        return;
-    }
-    try {
-        const isWindows = navigator.platform.toLowerCase().includes("win");
-        const command = isWindows ? "dir" : "ls -la";
-        const output = document.getElementById("terminal-output");
-        if (output) {
-            output.textContent = `> ${command}\n`;
-        }
-        log(`Executing command: ${command}`, "info");
-        await executeCommandWithPolicyGuard(currentTerminal.id, command);
-    }
-    catch (error) {
-        log(`Error executing command: ${error.message}`, "error");
-    }
+    await requireTerminalFeature().executeTerminalCommand();
 }
 /**
  * Run a safe terminal security probe.
  * This validates terminal exposure and command chaining with non-malicious commands only.
  */
 async function runTerminalSecurityProbe() {
-    try {
-        if (!currentTerminal) {
-            await createTerminal();
-        }
-        if (!currentTerminal) {
-            await showNotification("Terminal Unavailable", "Unable to create terminal for probe", "error");
-            return;
-        }
-        const output = document.getElementById("terminal-output");
-        const isWindows = navigator.platform.toLowerCase().includes("win");
-        const probeCommands = isWindows
-            ? [
-                "echo PPTB_SECURITY_PROBE",
-                "Get-Location",
-                "$PSVersionTable.PSVersion.ToString()",
-                "Write-Output \"CHAIN_TEST\"; Write-Output \"SECOND_COMMAND\"",
-            ]
-            : ["echo PPTB_SECURITY_PROBE", "pwd", "uname -a", "echo CHAIN_TEST && echo SECOND_COMMAND"];
-        if (output) {
-            output.textContent = "Running safe terminal security probe...\n";
-            output.textContent += "This probe does not execute destructive commands.\n\n";
-        }
-        log("Running safe terminal security probe", "warning");
-        for (const command of probeCommands) {
-            if (output) {
-                output.textContent += `> ${command}\n`;
-            }
-            await executeCommandWithPolicyGuard(currentTerminal.id, command);
-            await delay(300);
-        }
-        if (output) {
-            output.textContent += "\nProbe summary:\n";
-            output.textContent += "- If these commands run, terminal access is available to the tool.\n";
-            output.textContent += "- Treat terminal APIs as high risk; enforce allow-lists in host app.\n";
-            output.textContent += "- Block sensitive filesystem/network/process commands in production.\n";
-        }
-        await showNotification("Security Probe Complete", "Review terminal output for risk indicators", "warning");
-        log("Security probe completed", "warning");
-    }
-    catch (error) {
-        log(`Error running security probe: ${error.message}`, "error");
-    }
+    await requireTerminalFeature().runTerminalSecurityProbe();
 }
 /**
  * Close terminal
  */
 async function closeTerminal() {
-    if (!currentTerminal)
-        return;
-    try {
-        await toolbox.terminal.close(currentTerminal.id);
-        log("Terminal closed", "info");
-        currentTerminal = null;
-        // Disable command buttons
-        const executeBtn = document.getElementById("execute-command-btn");
-        const probeBtn = document.getElementById("run-security-probe-btn");
-        const closeBtn = document.getElementById("close-terminal-btn");
-        if (executeBtn)
-            executeBtn.disabled = true;
-        if (probeBtn)
-            probeBtn.disabled = true;
-        if (closeBtn)
-            closeBtn.disabled = true;
-        const output = document.getElementById("terminal-output");
-        if (output)
-            output.textContent = "";
-    }
-    catch (error) {
-        log(`Error closing terminal: ${error.message}`, "error");
-    }
+    await requireTerminalFeature().closeTerminal();
 }
 /**
  * Handle terminal output events
  */
 function handleTerminalOutput(data) {
-    if (!data || typeof data !== "object")
-        return;
-    if (!currentTerminal || data.terminalId !== currentTerminal.id)
-        return;
-    const output = document.getElementById("terminal-output");
-    if (output) {
-        output.textContent += data.data;
-        output.scrollTop = output.scrollHeight;
-    }
+    requireTerminalFeature().handleTerminalOutput(data);
 }
 /**
  * Handle command completed events
  */
 function handleCommandCompleted(data) {
-    if (!data || typeof data !== "object")
-        return;
-    if (!currentTerminal || data.terminalId !== currentTerminal.id)
-        return;
-    const output = document.getElementById("terminal-output");
-    if (output) {
-        output.textContent += `\n[Command completed with exit code: ${data.exitCode}]\n`;
-        output.scrollTop = output.scrollHeight;
-    }
+    requireTerminalFeature().handleCommandCompleted(data);
 }
 /**
  * Query accounts from Dataverse
@@ -1190,11 +668,7 @@ async function getAccountAttributesMetadata() {
     try {
         if (output) {
             output.textContent = "Retrieving account attributes metadata...\n";
-            const metadata = await dataverse.getEntityRelatedMetadata("account", "Attributes", [
-                "LogicalName",
-                "DisplayName",
-                "AttributeType",
-            ]);
+            const metadata = await dataverse.getEntityRelatedMetadata("account", "Attributes", ["LogicalName", "DisplayName", "AttributeType"]);
             if (metadata) {
                 const metadataArray = metadata.value;
                 output.textContent += `Found ${metadataArray.length} attributes:\n\n`;