requestshield 0.1.4 → 0.1.5

package/src/commands/challenge-volume.mjs

@@ -0,0 +1,81 @@
+// @ts-check
+
+import { CliError } from "../errors.mjs";
+import { objectString } from "../api-client.mjs";
+
+/**
+ * @param {{ appKey: string, from?: string, to?: string, granularity?: string }} options
+ * @param {{ api: { challengeVolume(accessToken: string, appKey: string, options: {from?: string, to?: string, granularity?: string}): Promise<{body: unknown}> }, sessions: { loadToken(): Promise<string> }, log: (message: string) => void }} deps
+ */
+export async function showChallengeVolume(options, deps) {
+  const accessToken = await deps.sessions.loadToken();
+  const filters = {
+    ...(options.from ? { from: options.from } : {}),
+    ...(options.to ? { to: options.to } : {}),
+    ...(options.granularity ? { granularity: options.granularity } : {}),
+  };
+  const result = await deps.api.challengeVolume(accessToken, options.appKey, filters);
+  const volume = parseChallengeVolume(result.body, options);
+  deps.log(JSON.stringify({ ok: true, data: volume }, null, 2));
+}
+
+/**
+ * @param {unknown} body
+ * @param {{ appKey: string, from?: string, to?: string, granularity?: string }} requested
+ */
+function parseChallengeVolume(body, requested) {
+  const ok = body && typeof body === "object" ?
+    Reflect.get(body, "ok") : undefined;
+  
+  const data = body && typeof body === "object" ?
+    Reflect.get(body, "data") : undefined;
+  
+  if (ok !== true || !data || typeof data !== "object" || Array.isArray(data)) {
+    throw invalidResponse("The challenge volume response did not contain ok=true and data");
+  }
+
+  const appKey = objectString(data, "app_key");
+  const from = objectString(data, "from");
+  const to = objectString(data, "to");
+  const granularity = objectString(data, "granularity");
+  const challengeCount = Reflect.get(data, "challenge_count");
+  
+  if (appKey !== requested.appKey) {
+    throw invalidResponse("The challenge volume response did not match the requested App Key");
+  }
+  if (!from || !to || !isIsoTime(from) || !isIsoTime(to) || Date.parse(from) > Date.parse(to)) {
+    throw invalidResponse("The challenge volume response contained an invalid time range");
+  }
+  if (requested.from && Date.parse(from) !== Date.parse(requested.from)) {
+    throw invalidResponse("The challenge volume response did not match the requested start time");
+  }
+  if (requested.to && Date.parse(to) !== Date.parse(requested.to)) {
+    throw invalidResponse("The challenge volume response did not match the requested end time");
+  }
+  if (!granularity || (requested.granularity && granularity !== requested.granularity)) {
+    throw invalidResponse("The challenge volume response contained an unexpected granularity");
+  }
+  if (!Number.isSafeInteger(challengeCount) || /** @type {number} */ (challengeCount) < 0) {
+    throw invalidResponse("The challenge volume response contained an invalid challenge_count");
+  }
+
+  // Rebuild the response so unexpected API fields cannot reach command output.
+  return {
+    app_key: appKey,
+    from,
+    to,
+    granularity,
+    challenge_count: challengeCount,
+  };
+}
+
+/** @param {string} value */
+function isIsoTime(value) {
+  return /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(?::\d{2}(?:\.\d{1,9})?)?(?:Z|[+-]\d{2}:\d{2})$/.test(value)
+    && Number.isFinite(Date.parse(value));
+}
+
+/** @param {string} message */
+function invalidResponse(message) {
+  return new CliError(message, { code: "INVALID_RESPONSE" });
+}

package/src/commands/contract.mjs

@@ -0,0 +1,106 @@
+// @ts-check
+
+import { CliError } from "../errors.mjs";
+import { objectString } from "../api-client.mjs";
+
+const SENSITIVE_FIELDS = new Set([
+  "access_token",
+  "accesstoken",
+  "api_secret",
+  "apisecret",
+  "secret_key",
+  "secretkey",
+  "session_token",
+  "sessiontoken",
+]);
+
+/**
+ * @param {{ api: { integrationContract(accessToken: string): Promise<{body: unknown}> }, sessions: { loadToken(): Promise<string> }, log: (message: string) => void }} deps
+ */
+export async function showIntegrationContract(deps) {
+  const accessToken =
+    await deps.sessions.loadToken();
+  
+  const result =
+    await deps.api.integrationContract(accessToken);
+  
+  const data = parseIntegrationContract(result.body);
+
+  deps.log(JSON.stringify({ ok: true, data }, null, 2));
+}
+
+/** @param {unknown} body @returns {Record<string, unknown>} */
+function parseIntegrationContract(body) {
+  const ok = body && typeof body === "object" ?
+    Reflect.get(body, "ok") : undefined;
+  
+  const data = objectValue(body, "data");
+  if (ok !== true || !data) {
+    throw invalidResponse("The integration contract response did not contain ok=true and data");
+  }
+
+  const browser = objectValue(data, "browser");
+  const backend = objectValue(data, "backend");
+  const minJdk = backend ?
+    Reflect.get(backend, "min_jdk") : undefined;
+  
+  if (
+    !objectString(data, "contract_version")
+    || !browser
+    || !objectString(browser, "script_url")
+    || !objectString(browser, "token_header")
+    || !stringArray(browser, "available_modes")
+    || !backend
+    || !stringArray(backend, "supported_languages")
+    || !Number.isInteger(minJdk)
+    || /** @type {number} */ (minJdk) < 1
+    || !objectString(data, "release_state")
+  ) {
+    throw invalidResponse("The integration contract response is missing required fields");
+  }
+
+  // Preserve future contract fields, but never relay credential-shaped fields to output.
+  assertNoSensitiveFields(data);
+  return data;
+}
+
+/** @param {unknown} value @param {string} property */
+function objectValue(value, property) {
+  if (!value || typeof value !== "object")
+    return undefined;
+
+  const found = Reflect.get(value, property);
+
+  return found && typeof found === "object" && !Array.isArray(found) ? found : undefined;
+}
+
+/** @param {unknown} value @param {string} property */
+function stringArray(value, property) {
+  if (!value || typeof value !== "object")
+    return false;
+
+  const found = Reflect.get(value, property);
+
+  return Array.isArray(found) && found.every((item) => typeof item === "string" && item !== "");
+}
+
+/** @param {unknown} value */
+function assertNoSensitiveFields(value) {
+  if (Array.isArray(value)) {
+    for (const item of value) assertNoSensitiveFields(item);
+    return;
+  }
+  if (!value || typeof value !== "object")
+    return;
+  for (const [key, nestedValue] of Object.entries(value)) {
+    if (SENSITIVE_FIELDS.has(key.toLowerCase())) {
+      throw invalidResponse("The integration contract response contained a sensitive field");
+    }
+    assertNoSensitiveFields(nestedValue);
+  }
+}
+
+/** @param {string} message */
+function invalidResponse(message) {
+  return new CliError(message, { code: "INVALID_RESPONSE" });
+}

package/src/config.mjs

@@ -0,0 +1,8 @@
+export const DEFAULT_MANAGEMENT_API_URL =
+    "https://api.intellifend.ai";
+
+export const DEFAULT_MAVEN_REPOSITORY =
+    "https://sdk.intellifend.com/packages/maven";
+
+export const DEFAULT_BROWSER_SCRIPT_URL =
+    "https://intellifend.ai/intellifend.js";

package/src/main.mjs

@@ -1,25 +1,25 @@
 #!/usr/bin/env node
-// @ts-check
-
-import { run } from "./cli.mjs";
-import { CliError } from "./errors.mjs";
-
-async function main() {
-    try {
-        await run(process.argv.slice(2));
-    } catch (error) {
-        const message =
-            error instanceof Error
-                ? error.message
-                : String(error);
-
-        console.error(`requestshield: ${message}`);
-
-        process.exitCode =
-            error instanceof CliError
-                ? error.exitCode
-                : 1;
-    }
-}
-
-void main();
+// @ts-check
+
+import { run } from "./cli.mjs";
+import { CliError } from "./errors.mjs";
+
+async function main() {
+    try {
+        await run(process.argv.slice(2));
+    } catch (error) {
+        const message =
+            error instanceof Error
+                ? error.message
+                : String(error);
+
+        console.error(`requestshield: ${message}`);
+
+        process.exitCode =
+            error instanceof CliError
+                ? error.exitCode
+                : 1;
+    }
+}
+
+void main();