xypriss 9.12.1 → 9.12.2

package/dist/cjs/src/server/core/http/RadixRouter.js

@@ -1,146 +0,0 @@
-'use strict';
-
-class RadixNode {
-    constructor(path = "") {
-        this.route = null;
-        this.children = new Map();
-        this.paramChild = null;
-        this.paramName = null;
-        this.wildcardChild = null;
-        // Support for RegExp routes that might be mounted here
-        this.regexRoutes = [];
-        this.path = path;
-    }
-}
-class RadixRouter {
-    constructor() {
-        this.rootNodes = new Map();
-        this.routesList = []; // Keep a flat list for getRoutes() compatibility
-        // Initialize common HTTP methods
-        ["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS", "HEAD", "CONNECT", "TRACE"].forEach(method => {
-            this.rootNodes.set(method, new RadixNode());
-        });
-    }
-    insert(route, paramNames) {
-        this.routesList.push(route);
-        const methodNode = this.rootNodes.get(route.method.toUpperCase());
-        if (!methodNode)
-            return;
-        if (route.path instanceof RegExp) {
-            methodNode.regexRoutes.push({
-                regex: route.path,
-                route: route,
-                paramNames
-            });
-            return;
-        }
-        if (typeof route.path === "string") {
-            // Complex strings fallback to regex if they contain ( < **
-            if (route.path.includes("(") || route.path.includes("<") || route.path.includes("**")) {
-                // Actually RouteManager handles this via string fallback if it reaches there,
-                // but we should probably treat them as regex or un-optimizable.
-                // For safety, let's treat complex string routes as regex-like fallback
-                methodNode.regexRoutes.push({
-                    regex: new RegExp("^" + route.path.replace(/[*]/g, ".*") + "$"), // simplistic fallback
-                    route: route
-                });
-                return;
-            }
-            this.insertPath(methodNode, route.path, route);
-        }
-    }
-    insertPath(root, path, route) {
-        const parts = path.split("/").filter(p => p.length > 0);
-        let current = root;
-        for (let i = 0; i < parts.length; i++) {
-            const part = parts[i];
-            if (part.startsWith(":")) {
-                if (!current.paramChild) {
-                    current.paramChild = new RadixNode(":");
-                    current.paramChild.paramName = part.substring(1);
-                }
-                current = current.paramChild;
-            }
-            else if (part === "*") {
-                if (!current.wildcardChild) {
-                    current.wildcardChild = new RadixNode("*");
-                }
-                current = current.wildcardChild;
-            }
-            else {
-                if (!current.children.has(part)) {
-                    current.children.set(part, new RadixNode(part));
-                }
-                current = current.children.get(part);
-            }
-        }
-        current.route = route;
-    }
-    find(method, path, req) {
-        const methodNode = this.rootNodes.get(method.toUpperCase());
-        if (!methodNode)
-            return null;
-        // 1. Check RegExp routes first (to maintain compatibility with highly specific regex overrides)
-        for (const r of methodNode.regexRoutes) {
-            const match = r.regex.exec(path);
-            if (match) {
-                const params = {};
-                if (match.length > 1 && r.paramNames) {
-                    for (let i = 1; i < match.length; i++) {
-                        if (match[i] !== undefined && r.paramNames[i - 1]) {
-                            params[r.paramNames[i - 1]] = match[i];
-                        }
-                    }
-                }
-                else if (match.length > 1 && match[1] !== undefined) {
-                    params["*"] = match[1];
-                }
-                req.params = { ...req.params, ...params };
-                return r.route;
-            }
-        }
-        // 2. Traverse Radix Tree for string paths
-        const parts = path.split("/").filter(p => p.length > 0);
-        const params = {};
-        const route = this.searchTree(methodNode, parts, 0, params);
-        if (route) {
-            req.params = { ...req.params, ...params };
-            return route;
-        }
-        return null;
-    }
-    searchTree(node, parts, index, params) {
-        if (index === parts.length) {
-            return node.route;
-        }
-        const part = parts[index];
-        // 1. Static match
-        const staticChild = node.children.get(part);
-        if (staticChild) {
-            const route = this.searchTree(staticChild, parts, index + 1, params);
-            if (route)
-                return route;
-        }
-        // 2. Param match
-        if (node.paramChild) {
-            params[node.paramChild.paramName] = part;
-            const route = this.searchTree(node.paramChild, parts, index + 1, params);
-            if (route)
-                return route;
-            delete params[node.paramChild.paramName];
-        }
-        // 3. Wildcard match
-        if (node.wildcardChild) {
-            params["*"] = parts.slice(index).join("/");
-            return node.wildcardChild.route;
-        }
-        return null;
-    }
-    getAllRoutes() {
-        return this.routesList;
-    }
-}
-
-exports.RadixNode = RadixNode;
-exports.RadixRouter = RadixRouter;
-//# sourceMappingURL=RadixRouter.js.map

package/dist/cjs/src/server/core/http/RadixRouter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"RadixRouter.js","sources":["../../../../../../src/server/core/http/RadixRouter.ts"],"sourcesContent":[null],"names":[],"mappings":";;MAEa,SAAS,CAAA;AAWlB,IAAA,WAAA,CAAY,OAAe,EAAE,EAAA;QAT7B,IAAA,CAAA,KAAK,GAAiB,IAAI;AAC1B,QAAA,IAAA,CAAA,QAAQ,GAA2B,IAAI,GAAG,EAAE;QAC5C,IAAA,CAAA,UAAU,GAAqB,IAAI;QACnC,IAAA,CAAA,SAAS,GAAkB,IAAI;QAC/B,IAAA,CAAA,aAAa,GAAqB,IAAI;;QAGtC,IAAA,CAAA,WAAW,GAA6D,EAAE;AAGtE,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI;IACpB;AACH;MAEY,WAAW,CAAA;AAIpB,IAAA,WAAA,GAAA;AAHQ,QAAA,IAAA,CAAA,SAAS,GAA2B,IAAI,GAAG,EAAE;AAC7C,QAAA,IAAA,CAAA,UAAU,GAAY,EAAE,CAAC;;QAI7B,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,IAAG;YAC9F,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;AAC/C,QAAA,CAAC,CAAC;IACN;IAEO,MAAM,CAAC,KAAY,EAAE,UAAqB,EAAA;AAC7C,QAAA,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;AAC3B,QAAA,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;AACjE,QAAA,IAAI,CAAC,UAAU;YAAE;AAEjB,QAAA,IAAI,KAAK,CAAC,IAAI,YAAY,MAAM,EAAE;AAC9B,YAAA,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC;gBACxB,KAAK,EAAE,KAAK,CAAC,IAAI;AACjB,gBAAA,KAAK,EAAE,KAAK;gBACZ;AACH,aAAA,CAAC;YACF;QACJ;AAEA,QAAA,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE;;YAEhC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;;;;AAInF,gBAAA,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC;oBACxB,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC;AAC/D,oBAAA,KAAK,EAAE;AACV,iBAAA,CAAC;gBACF;YACJ;YAEA,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;QAClD;IACJ;AAEQ,IAAA,UAAU,CAAC,IAAe,EAAE,IAAY,EAAE,KAAY,EAAA;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACvD,IAAI,OAAO,GAAG,IAAI;AAElB,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACnC,YAAA,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC;AAErB,YAAA,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;AACtB,gBAAA,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;oBACrB,OAAO,CAAC,UAAU,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC;oBACvC,OAAO,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBACpD;AACA,gBAAA,OAAO,GAAG,OAAO,CAAC,UAAU;YAChC;AAAO,iBAAA,IAAI,IAAI,KAAK,GAAG,EAAE;AACrB,gBAAA,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;oBACxB,OAAO,CAAC,aAAa,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC;gBAC9C;AACA,gBAAA,OAAO,GAAG,OAAO,CAAC,aAAa;YACnC;iBAAO;gBACH,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;AAC7B,oBAAA,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;gBACnD;gBACA,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAE;YACzC;QACJ;AAEA,QAAA,OAAO,CAAC,KAAK,GAAG,KAAK;IACzB;AAEO,IAAA,IAAI,CAAC,MAAc,EAAE,IAAY,EAAE,GAAkB,EAAA;AACxD,QAAA,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;AAC3D,QAAA,IAAI,CAAC,UAAU;AAAE,YAAA,OAAO,IAAI;;AAG5B,QAAA,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,WAAW,EAAE;YACpC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,IAAI,KAAK,EAAE;gBACP,MAAM,MAAM,GAA2B,EAAE;gBACzC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;AAClC,oBAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACnC,wBAAA,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;AAC/C,4BAAA,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;wBAC1C;oBACJ;gBACJ;AAAO,qBAAA,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE;oBACnD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;gBAC1B;AACA,gBAAA,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE;gBACzC,OAAO,CAAC,CAAC,KAAK;YAClB;QACJ;;QAGA,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACvD,MAAM,MAAM,GAA2B,EAAE;AACzC,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC;QAE3D,IAAI,KAAK,EAAE;AACP,YAAA,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE;AACzC,YAAA,OAAO,KAAK;QAChB;AAEA,QAAA,OAAO,IAAI;IACf;AAEQ,IAAA,UAAU,CAAC,IAAe,EAAE,KAAe,EAAE,KAAa,EAAE,MAA8B,EAAA;AAC9F,QAAA,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE;YACxB,OAAO,IAAI,CAAC,KAAK;QACrB;AAEA,QAAA,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;;QAGzB,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAC3C,IAAI,WAAW,EAAE;AACb,YAAA,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC;AACpE,YAAA,IAAI,KAAK;AAAE,gBAAA,OAAO,KAAK;QAC3B;;AAGA,QAAA,IAAI,IAAI,CAAC,UAAU,EAAE;YACjB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAU,CAAC,GAAG,IAAI;AACzC,YAAA,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC;AACxE,YAAA,IAAI,KAAK;AAAE,gBAAA,OAAO,KAAK;YACvB,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAU,CAAC;QAC7C;;AAGA,QAAA,IAAI,IAAI,CAAC,aAAa,EAAE;AACpB,YAAA,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AAC1C,YAAA,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK;QACnC;AAEA,QAAA,OAAO,IAAI;IACf;IAEO,YAAY,GAAA;QACf,OAAO,IAAI,CAAC,UAAU;IAC1B;AACH;;;;;"}

package/dist/diag_config.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=diag_config.d.ts.map

package/dist/diag_config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"diag_config.d.ts","sourceRoot":"","sources":["../diag_config.ts"],"names":[],"mappings":""}

package/dist/diag_config.js

@@ -1,13 +0,0 @@
-import { loadXyConfig, verifyPluginContract, isProjectRoot, } from "./src/utils/ProjectDiscovery";
-import path from "path";
-const pluginRoot = path.resolve("mods/swagger");
-console.log("Checking plugin root:", pluginRoot);
-console.log("isProjectRoot:", isProjectRoot(pluginRoot));
-const config = loadXyConfig(pluginRoot);
-console.log("Config loaded:", !!config);
-if (config) {
-    console.log("Config content:", JSON.stringify(config, null, 2));
-}
-const contractOk = verifyPluginContract(pluginRoot, "xypriss-swagger");
-console.log("Contract Verification:", contractOk);
-//# sourceMappingURL=diag_config.js.map

package/dist/diag_config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"diag_config.js","sourceRoot":"","sources":["../diag_config.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,YAAY,EACZ,oBAAoB,EACpB,aAAa,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;AAChD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;AACjD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;AAEzD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AACxC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AACxC,IAAI,MAAM,EAAE,CAAC;IACT,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;AACvE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC"}

package/dist/esm/src/middleware/built-in/security/CommandInjectionDetector.js

@@ -1,213 +0,0 @@
-/**
- * Command Injection Detection Module
- *
- * Detects and prevents OS command injection attacks with
- * intelligent context-aware false positive reduction
- */
-class CommandInjectionDetector {
-    constructor(config = {}) {
-        // High-risk command injection patterns
-        this.highRiskPatterns = [
-            // Command chaining
-            /[;&|`]\s*(ls|cat|wget|curl|nc|netcat|bash|sh|cmd|powershell|eval|exec)/gi,
-            // Command substitution
-            /\$\(.*?\)/g,
-            /`.*?`/g,
-            // Pipe to dangerous commands
-            /\|\s*(bash|sh|cmd|powershell|python|perl|ruby|node)/gi,
-            // Redirection with dangerous commands
-            /[<>]\s*(\/etc\/|\/bin\/|C:\\)/gi,
-            // Encoded command injection
-            /%0a|%0d|%09/gi, // newline, carriage return, tab
-            // Dangerous system commands
-            /(rm\s+-rf|del\s+\/|format\s+|mkfs|dd\s+if=)/gi,
-            // Network commands
-            /(wget|curl|nc|netcat|telnet|ssh|ftp)\s+/gi,
-            // Eval/exec patterns
-            /(eval|exec|system|passthru|shell_exec|popen)\s*\(/gi,
-        ];
-        // Medium-risk patterns
-        this.mediumRiskPatterns = [
-            // Shell metacharacters
-            /[;&|`$()]/g,
-            // Redirection operators
-            /[<>]/g,
-            // Common command names (could be legitimate text)
-            /\b(ls|cat|echo|pwd|cd|mkdir|touch|grep|find|chmod|chown)\b/gi,
-        ];
-        this.config = {
-            enabled: config.enabled ?? true,
-            strictMode: config.strictMode ?? false,
-            logAttempts: config.logAttempts ?? true,
-            blockOnDetection: config.blockOnDetection ?? true,
-            falsePositiveThreshold: config.falsePositiveThreshold ?? 0.7,
-            customPatterns: config.customPatterns ?? [],
-            allowedCommands: config.allowedCommands ?? [],
-            contextualAnalysis: config.contextualAnalysis ?? true,
-        };
-    }
-    /**
-     * Detect command injection attempts
-     */
-    detect(input, context) {
-        if (!input || typeof input !== 'string') {
-            return {
-                isMalicious: false,
-                confidence: 0,
-                detectedPatterns: [],
-                riskLevel: 'LOW',
-            };
-        }
-        const result = {
-            isMalicious: false,
-            confidence: 0,
-            detectedPatterns: [],
-            sanitizedInput: input,
-            riskLevel: 'LOW',
-        };
-        // High-risk pattern detection
-        let highRiskScore = 0;
-        this.highRiskPatterns.forEach((pattern, index) => {
-            const matches = input.match(pattern);
-            if (matches) {
-                const patternName = this.getHighRiskPatternName(index);
-                result.detectedPatterns.push(`${patternName}: ${matches.join(', ')}`);
-                highRiskScore += this.getHighRiskWeight(index);
-            }
-        });
-        // Medium-risk pattern detection with context
-        let mediumRiskScore = 0;
-        if (this.config.contextualAnalysis && context) {
-            mediumRiskScore = this.analyzeContext(input, context);
-        }
-        else {
-            this.mediumRiskPatterns.forEach((pattern) => {
-                const matches = input.match(pattern);
-                if (matches) {
-                    mediumRiskScore += 0.1 * matches.length;
-                }
-            });
-        }
-        // Legitimacy checks
-        const legitimacyScore = this.calculateLegitimacyScore(input);
-        // Calculate final confidence
-        result.confidence = Math.max(0, highRiskScore + mediumRiskScore * 0.3 - legitimacyScore);
-        result.confidence = Math.min(result.confidence, 1.0);
-        // Determine risk level
-        if (result.confidence >= 0.9) {
-            result.riskLevel = 'CRITICAL';
-            result.isMalicious = true;
-        }
-        else if (result.confidence >= this.config.falsePositiveThreshold) {
-            result.riskLevel = 'HIGH';
-            result.isMalicious = true;
-        }
-        else if (result.confidence >= 0.4) {
-            result.riskLevel = 'MEDIUM';
-            result.isMalicious = false;
-        }
-        // Sanitize input
-        if (result.confidence >= 0.4) {
-            result.sanitizedInput = this.sanitizeInput(input);
-        }
-        // Log attempts
-        if (this.config.logAttempts && result.confidence >= 0.7) {
-            this.logAttempt(input, result);
-        }
-        return result;
-    }
-    /**
-     * Sanitize input by removing command injection sequences
-     */
-    sanitizeInput(input) {
-        let sanitized = input;
-        // Remove command chaining characters
-        sanitized = sanitized.replace(/[;&|`]/g, '');
-        // Remove command substitution
-        sanitized = sanitized.replace(/\$\(.*?\)/g, '');
-        // Remove backticks
-        sanitized = sanitized.replace(/`/g, '');
-        // Remove redirection operators
-        sanitized = sanitized.replace(/[<>]/g, '');
-        // Remove encoded newlines/tabs
-        sanitized = sanitized.replace(/%0a|%0d|%09/gi, '');
-        return sanitized.trim();
-    }
-    /**
-     * Analyze context to reduce false positives
-     */
-    analyzeContext(input, context) {
-        let score = 0;
-        // Check if this is a code/technical field where commands might be legitimate
-        const technicalContexts = ['code', 'script', 'command', 'terminal', 'shell'];
-        const isTechnicalContext = technicalContexts.some(ctx => context.fieldName?.toLowerCase().includes(ctx) ||
-            context.fieldType?.toLowerCase().includes(ctx));
-        this.mediumRiskPatterns.forEach((pattern, index) => {
-            const matches = input.match(pattern);
-            if (matches) {
-                let patternScore = 0.1 * matches.length;
-                // Reduce score for technical contexts
-                if (isTechnicalContext && index > 1) {
-                    patternScore *= 0.2; // Reduce by 80% for command names in technical fields
-                }
-                score += patternScore;
-            }
-        });
-        return score;
-    }
-    /**
-     * Calculate legitimacy score
-     */
-    calculateLegitimacyScore(input) {
-        let score = 0;
-        // Natural language indicators
-        const words = input.split(/\s+/);
-        if (words.length > 3 && words.every(w => /^[a-zA-Z]+$/.test(w))) {
-            score += 0.3; // Looks like natural text
-        }
-        // No shell metacharacters
-        if (!/[;&|`$()<>]/.test(input)) {
-            score += 0.2;
-        }
-        // Reasonable length for user input
-        if (input.length > 10 && input.length < 200) {
-            score += 0.1;
-        }
-        return Math.min(score, 0.5);
-    }
-    getHighRiskPatternName(index) {
-        const names = [
-            'Command chaining',
-            'Command substitution ($())',
-            'Backtick substitution',
-            'Pipe to shell',
-            'Redirection to system paths',
-            'Encoded injection',
-            'Dangerous system commands',
-            'Network commands',
-            'Eval/exec functions',
-        ];
-        return names[index] || `High-risk pattern ${index}`;
-    }
-    getHighRiskWeight(index) {
-        const weights = [0.9, 0.9, 0.9, 0.8, 0.7, 0.6, 0.9, 0.7, 0.9];
-        return weights[index] || 0.7;
-    }
-    logAttempt(input, result) {
-        console.warn('[CommandInjection] Attack detected:', {
-            timestamp: new Date().toISOString(),
-            input: input.substring(0, 100),
-            confidence: result.confidence,
-            patterns: result.detectedPatterns,
-        });
-    }
-    updateConfig(newConfig) {
-        this.config = { ...this.config, ...newConfig };
-    }
-    getConfig() {
-        return { ...this.config };
-    }
-}
-
-export { CommandInjectionDetector as default };
-//# sourceMappingURL=CommandInjectionDetector.js.map

package/dist/esm/src/middleware/built-in/security/CommandInjectionDetector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CommandInjectionDetector.js","sources":["../../../../../../src/middleware/built-in/security/CommandInjectionDetector.ts"],"sourcesContent":[null],"names":[],"mappings":"AAAA;;;;;AAKG;AASH,MAAM,wBAAwB,CAAA;AA2C1B,IAAA,WAAA,CAAY,SAAiC,EAAE,EAAA;;AAvC9B,QAAA,IAAA,CAAA,gBAAgB,GAAG;;YAEhC,0EAA0E;;YAG1E,YAAY;YACZ,QAAQ;;YAGR,uDAAuD;;YAGvD,iCAAiC;;AAGjC,YAAA,eAAe;;YAGf,+CAA+C;;YAG/C,2CAA2C;;YAG3C,qDAAqD;SACxD;;AAGgB,QAAA,IAAA,CAAA,kBAAkB,GAAG;;YAElC,YAAY;;YAGZ,OAAO;;YAGP,8DAA8D;SACjE;QAGG,IAAI,CAAC,MAAM,GAAG;AACV,YAAA,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;AAC/B,YAAA,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;AACtC,YAAA,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;AACvC,YAAA,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;AACjD,YAAA,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,GAAG;AAC5D,YAAA,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;AAC3C,YAAA,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE;AAC7C,YAAA,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI;SACxD;IACL;AAEA;;AAEG;IACH,MAAM,CAAC,KAAgC,EAAE,OAAqB,EAAA;QAC1D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;YACrC,OAAO;AACH,gBAAA,WAAW,EAAE,KAAK;AAClB,gBAAA,UAAU,EAAE,CAAC;AACb,gBAAA,gBAAgB,EAAE,EAAE;AACpB,gBAAA,SAAS,EAAE,KAAK;aACnB;QACL;AAEA,QAAA,MAAM,MAAM,GAA4B;AACpC,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,UAAU,EAAE,CAAC;AACb,YAAA,gBAAgB,EAAE,EAAE;AACpB,YAAA,cAAc,EAAE,KAAK;AACrB,YAAA,SAAS,EAAE,KAAK;SACnB;;QAGD,IAAI,aAAa,GAAG,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,KAAI;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,EAAE;gBACT,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;AACtD,gBAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAA,EAAA,EAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAE,CAAC;AACrE,gBAAA,aAAa,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAClD;AACJ,QAAA,CAAC,CAAC;;QAGF,IAAI,eAAe,GAAG,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,OAAO,EAAE;YAC3C,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC;QACzD;aAAO;YACH,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,KAAI;gBACxC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;gBACpC,IAAI,OAAO,EAAE;AACT,oBAAA,eAAe,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM;gBAC3C;AACJ,YAAA,CAAC,CAAC;QACN;;QAGA,MAAM,eAAe,GAAG,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC;;AAG5D,QAAA,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,eAAe,GAAG,GAAG,GAAG,eAAe,CAAC;AACxF,QAAA,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC;;AAGpD,QAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AAC1B,YAAA,MAAM,CAAC,SAAS,GAAG,UAAU;AAC7B,YAAA,MAAM,CAAC,WAAW,GAAG,IAAI;QAC7B;aAAO,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;AAChE,YAAA,MAAM,CAAC,SAAS,GAAG,MAAM;AACzB,YAAA,MAAM,CAAC,WAAW,GAAG,IAAI;QAC7B;AAAO,aAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AACjC,YAAA,MAAM,CAAC,SAAS,GAAG,QAAQ;AAC3B,YAAA,MAAM,CAAC,WAAW,GAAG,KAAK;QAC9B;;AAGA,QAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;YAC1B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QACrD;;AAGA,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AACrD,YAAA,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;QAClC;AAEA,QAAA,OAAO,MAAM;IACjB;AAEA;;AAEG;AACK,IAAA,aAAa,CAAC,KAAa,EAAA;QAC/B,IAAI,SAAS,GAAG,KAAK;;QAGrB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;;QAG5C,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;;QAG/C,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;;QAGvC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;;QAG1C,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;AAElD,QAAA,OAAO,SAAS,CAAC,IAAI,EAAE;IAC3B;AAEA;;AAEG;IACK,cAAc,CAAC,KAAa,EAAE,OAAoB,EAAA;QACtD,IAAI,KAAK,GAAG,CAAC;;AAGb,QAAA,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC;QAC5E,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,IACjD,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC9C,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CACjD;QAED,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,KAAI;YAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,EAAE;AACT,gBAAA,IAAI,YAAY,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM;;AAGvC,gBAAA,IAAI,kBAAkB,IAAI,KAAK,GAAG,CAAC,EAAE;AACjC,oBAAA,YAAY,IAAI,GAAG,CAAC;gBACxB;gBAEA,KAAK,IAAI,YAAY;YACzB;AACJ,QAAA,CAAC,CAAC;AAEF,QAAA,OAAO,KAAK;IAChB;AAEA;;AAEG;AACK,IAAA,wBAAwB,CAAC,KAAa,EAAA;QAC1C,IAAI,KAAK,GAAG,CAAC;;QAGb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;AAC7D,YAAA,KAAK,IAAI,GAAG,CAAC;QACjB;;QAGA,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAC5B,KAAK,IAAI,GAAG;QAChB;;AAGA,QAAA,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE;YACzC,KAAK,IAAI,GAAG;QAChB;QAEA,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC;IAC/B;AAEQ,IAAA,sBAAsB,CAAC,KAAa,EAAA;AACxC,QAAA,MAAM,KAAK,GAAG;YACV,kBAAkB;YAClB,4BAA4B;YAC5B,uBAAuB;YACvB,eAAe;YACf,6BAA6B;YAC7B,mBAAmB;YACnB,2BAA2B;YAC3B,kBAAkB;YAClB,qBAAqB;SACxB;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAA,kBAAA,EAAqB,KAAK,EAAE;IACvD;AAEQ,IAAA,iBAAiB,CAAC,KAAa,EAAA;QACnC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;AAC7D,QAAA,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG;IAChC;IAEQ,UAAU,CAAC,KAAa,EAAE,MAA+B,EAAA;AAC7D,QAAA,OAAO,CAAC,IAAI,CAAC,qCAAqC,EAAE;AAChD,YAAA,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;YAC9B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,gBAAgB;AACpC,SAAA,CAAC;IACN;AAEA,IAAA,YAAY,CAAC,SAA0C,EAAA;AACnD,QAAA,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE;IAClD;IAEA,SAAS,GAAA;AACL,QAAA,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;IAC7B;AACH;;;;"}

package/dist/esm/src/middleware/built-in/security/LDAPInjectionDetector.js

@@ -1,94 +0,0 @@
-/**
- * LDAP Injection Detection Module
- *
- * Detects and prevents LDAP injection attacks
- */
-class LDAPInjectionDetector {
-    constructor(config = {}) {
-        // LDAP injection patterns
-        this.injectionPatterns = [
-            // LDAP filter metacharacters
-            /[*()\\|&]/g,
-            // Null byte
-            /\x00/g,
-            // LDAP filter injection attempts
-            /\)\s*\(\s*\|/gi, // )( | pattern
-            /\)\s*\(\s*&/gi, // )( & pattern
-            // Wildcard abuse
-            /\*{2,}/g,
-            // DN injection
-            /,\s*(cn|ou|dc|o)=/gi,
-        ];
-        this.config = {
-            enabled: config.enabled ?? true,
-            strictMode: config.strictMode ?? false,
-            logAttempts: config.logAttempts ?? true,
-            blockOnDetection: config.blockOnDetection ?? true,
-            falsePositiveThreshold: config.falsePositiveThreshold ?? 0.6,
-            customPatterns: config.customPatterns ?? [],
-        };
-    }
-    detect(input) {
-        if (!input || typeof input !== 'string') {
-            return {
-                isMalicious: false,
-                confidence: 0,
-                detectedPatterns: [],
-                riskLevel: 'LOW',
-            };
-        }
-        const result = {
-            isMalicious: false,
-            confidence: 0,
-            detectedPatterns: [],
-            sanitizedInput: input,
-            riskLevel: 'LOW',
-        };
-        let riskScore = 0;
-        this.injectionPatterns.forEach((pattern, index) => {
-            const matches = input.match(pattern);
-            if (matches) {
-                result.detectedPatterns.push(`LDAP metacharacter: ${matches.join(', ')}`);
-                riskScore += 0.3 * matches.length;
-            }
-        });
-        result.confidence = Math.min(riskScore, 1.0);
-        if (result.confidence >= 0.7) {
-            result.riskLevel = 'HIGH';
-            result.isMalicious = true;
-        }
-        else if (result.confidence >= this.config.falsePositiveThreshold) {
-            result.riskLevel = 'MEDIUM';
-            result.isMalicious = this.config.strictMode;
-        }
-        if (result.confidence >= 0.3) {
-            result.sanitizedInput = this.sanitize(input);
-        }
-        if (this.config.logAttempts && result.confidence >= 0.6) {
-            console.warn('[LDAP] Injection attempt detected:', {
-                timestamp: new Date().toISOString(),
-                input: input.substring(0, 100),
-                confidence: result.confidence,
-            });
-        }
-        return result;
-    }
-    sanitize(input) {
-        // Escape LDAP special characters
-        return input
-            .replace(/\\/g, '\\5c')
-            .replace(/\*/g, '\\2a')
-            .replace(/\(/g, '\\28')
-            .replace(/\)/g, '\\29')
-            .replace(/\x00/g, '\\00');
-    }
-    updateConfig(newConfig) {
-        this.config = { ...this.config, ...newConfig };
-    }
-    getConfig() {
-        return { ...this.config };
-    }
-}
-
-export { LDAPInjectionDetector as default };
-//# sourceMappingURL=LDAPInjectionDetector.js.map

package/dist/esm/src/middleware/built-in/security/LDAPInjectionDetector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"LDAPInjectionDetector.js","sources":["../../../../../../src/middleware/built-in/security/LDAPInjectionDetector.ts"],"sourcesContent":[null],"names":[],"mappings":"AAAA;;;;AAIG;AAIH,MAAM,qBAAqB,CAAA;AAsBvB,IAAA,WAAA,CAAY,SAA+B,EAAE,EAAA;;AAlB5B,QAAA,IAAA,CAAA,iBAAiB,GAAG;;YAEjC,YAAY;;YAGZ,OAAO;;AAGP,YAAA,gBAAgB;AAChB,YAAA,eAAe;;YAGf,SAAS;;YAGT,qBAAqB;SACxB;QAGG,IAAI,CAAC,MAAM,GAAG;AACV,YAAA,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;AAC/B,YAAA,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;AACtC,YAAA,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;AACvC,YAAA,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;AACjD,YAAA,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,GAAG;AAC5D,YAAA,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;SAC9C;IACL;AAEA,IAAA,MAAM,CAAC,KAAgC,EAAA;QACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;YACrC,OAAO;AACH,gBAAA,WAAW,EAAE,KAAK;AAClB,gBAAA,UAAU,EAAE,CAAC;AACb,gBAAA,gBAAgB,EAAE,EAAE;AACpB,gBAAA,SAAS,EAAE,KAAK;aACnB;QACL;AAEA,QAAA,MAAM,MAAM,GAA4B;AACpC,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,UAAU,EAAE,CAAC;AACb,YAAA,gBAAgB,EAAE,EAAE;AACpB,YAAA,cAAc,EAAE,KAAK;AACrB,YAAA,SAAS,EAAE,KAAK;SACnB;QAED,IAAI,SAAS,GAAG,CAAC;QACjB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,KAAI;YAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,EAAE;AACT,gBAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA,oBAAA,EAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAE,CAAC;AACzE,gBAAA,SAAS,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM;YACrC;AACJ,QAAA,CAAC,CAAC;QAEF,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC;AAE5C,QAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AAC1B,YAAA,MAAM,CAAC,SAAS,GAAG,MAAM;AACzB,YAAA,MAAM,CAAC,WAAW,GAAG,IAAI;QAC7B;aAAO,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;AAChE,YAAA,MAAM,CAAC,SAAS,GAAG,QAAQ;YAC3B,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU;QAC/C;AAEA,QAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;YAC1B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChD;AAEA,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AACrD,YAAA,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE;AAC/C,gBAAA,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC9B,UAAU,EAAE,MAAM,CAAC,UAAU;AAChC,aAAA,CAAC;QACN;AAEA,QAAA,OAAO,MAAM;IACjB;AAEQ,IAAA,QAAQ,CAAC,KAAa,EAAA;;AAE1B,QAAA,OAAO;AACF,aAAA,OAAO,CAAC,KAAK,EAAE,MAAM;AACrB,aAAA,OAAO,CAAC,KAAK,EAAE,MAAM;AACrB,aAAA,OAAO,CAAC,KAAK,EAAE,MAAM;AACrB,aAAA,OAAO,CAAC,KAAK,EAAE,MAAM;AACrB,aAAA,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;IACjC;AAEA,IAAA,YAAY,CAAC,SAAwC,EAAA;AACjD,QAAA,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE;IAClD;IAEA,SAAS,GAAA;AACL,QAAA,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;IAC7B;AACH;;;;"}