xypriss 9.12.67 → 9.12.69
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/src/server/const/default.js +4 -0
- package/dist/cjs/src/server/const/default.js.map +1 -1
- package/dist/cjs/src/utils/ProjectDiscovery.js +2 -0
- package/dist/cjs/src/utils/ProjectDiscovery.js.map +1 -1
- package/dist/cjs/src/utils/SecurityShield.js +7 -2
- package/dist/cjs/src/utils/SecurityShield.js.map +1 -1
- package/dist/cjs/src/xhsc/EnvApi.js +37 -2
- package/dist/cjs/src/xhsc/EnvApi.js.map +1 -1
- package/dist/cjs/src/xhsc/api/env/env.js +28 -0
- package/dist/cjs/src/xhsc/api/env/env.js.map +1 -1
- package/dist/esm/src/server/const/default.js +4 -0
- package/dist/esm/src/server/const/default.js.map +1 -1
- package/dist/esm/src/utils/ProjectDiscovery.js +2 -0
- package/dist/esm/src/utils/ProjectDiscovery.js.map +1 -1
- package/dist/esm/src/utils/SecurityShield.js +7 -2
- package/dist/esm/src/utils/SecurityShield.js.map +1 -1
- package/dist/esm/src/xhsc/EnvApi.js +38 -3
- package/dist/esm/src/xhsc/EnvApi.js.map +1 -1
- package/dist/esm/src/xhsc/api/env/env.js +28 -0
- package/dist/esm/src/xhsc/api/env/env.js.map +1 -1
- package/dist/index.d.ts +72 -2
- package/package.json +1 -1
|
@@ -198,6 +198,10 @@ const DEFAULT_OPTIONS = {
|
|
|
198
198
|
".json",
|
|
199
199
|
],
|
|
200
200
|
useTempFiles: true,
|
|
201
|
+
/**
|
|
202
|
+
* Resolved lazily at runtime via XyPriss's native System API (`getSysApi().path.tmpUserDir`)
|
|
203
|
+
* once `__sys__` is initialized, deliberately avoiding reliance on Node.js core modules (`node:os`).
|
|
204
|
+
*/
|
|
201
205
|
get tempFileDir() {
|
|
202
206
|
return getSysApi.getSysApi().path.tmpUserDir + "/.uploads/";
|
|
203
207
|
},
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"default.js","sources":["../../../../../src/server/const/default.ts"],"sourcesContent":[null],"names":["xemsKeyPlaceholder","DEFAULT_LOGGER_CONFIG","getRandomBytes","defaultHelmetOpts","getSysApi"],"mappings":";;;;;;;;;AAAA;;;;AAIG;AAUI,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI;AACjD,MAAM,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI;AAE7D;AACO,MAAM,eAAe,GAAkB;AAC1C,IAAA,WAAW,EAAE;AACT,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,SAAS,EAAE,GAAG;AACd,QAAA,iBAAiB,EAAE,IAAI;AACvB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,WAAW,EAAE,KAAK;AACrB,KAAA;AACD,IAAA,MAAM,EAAE;AACJ,QAAA,gBAAgB,EAAE,IAAI;QACtB,IAAI,EAAE,YAAY;AAClB,QAAA,SAAS,EAAE,MAAM;AACjB,QAAA,eAAe,EAAE,MAAM;AACvB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,IAAI,EAAE,YAAY;AAClB,QAAA,IAAI,EAAE,IAAI;;;;;AAKV,QAAA,UAAU,EAAE,EAAE;AACd,QAAA,cAAc,EAAE;AACZ,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,WAAW,EAAE,EAAE;AACf,YAAA,QAAQ,EAAE,QAAQ;AACrB,SAAA;AACD,QAAA,gBAAgB,EAAE,IAAI;AAEtB,QAAA,IAAI,EAAE;AACF,YAAA,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC;YAC/C,MAAM,EAAEA,qCAAkB;YAC1B,YAAY,EAAE,IAAI;AAClB,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,QAAQ,EAAE,SAAS;AACnB,YAAA,OAAO,EAAE,+BAA+B;AACxC,YAAA,aAAa,EAAE;AACX,gBAAA,QAAQ,EAAE,IAAI;AACd,gBAAA,QAAQ,EAAE,QAAQ;AAClB,gBAAA,MAAM,EAAE,IAAI;AACZ,gBAAA,MAAM,EAAE,KAAK;AAChB,aAAA;YACD,WAAW,EAAE,KAAK;AACrB,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAEC,2CAAqB;AAC9B,IAAA,QAAQ,EAAE;AACN,QAAA,IAAI,EAAE,QAAQ;AACd,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,UAAU,EAAE,GAAG;AAClB,KAAA;AAED,IAAA,eAAe,EAAE;AACb,QAAA,OAAO,EAAE,KAAK;AACjB,KAAA;AACD,IAAA,OAAO,EAAE;QACL,OAAO,EAAE,KAAK;AACd,QAAA,OAAO,EAAE,MAAM;AACf,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,SAAS,EAAE;AACP,YAAA,YAAY,EAAE;AACV,gBAAA,OAAO,EAAE,IAAI;AACb,gBAAA,WAAW,EAAE,IAAI;AACjB,gBAAA,UAAU,EAAE,IAAI;AACnB,aAAA;AACJ,SAAA;AACJ,KAAA;AACD,IAAA,KAAK,EAAE;QACH,QAAQ,EAAE,QAAQ;AAClB,QAAA,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QAC1B,GAAG,EAAE,MAAM;AACX,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;YACJ,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,KAAK;AACnB,SAAA;AACJ,KAAA;AACD,IAAA,QAAQ,EAAE;AACN,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,KAAK,EAAE,UAAU;AACjB,QAAA,IAAI,EAAE;AACF,YAAA,OAAO,EAAE,IAAI;YACb,MAAM,EAAEC,8BAAc,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;AAC1C,YAAA,UAAU,EAAE,UAAU;AACtB,YAAA,aAAa,EAAE;AACX,gBAAA,QAAQ,EAAE,IAAI;AACd,gBAAA,QAAQ,EAAE,QAAQ;AACrB,aAAA;AACD,YAAA,kBAAkB,EAAE,IAAI;AAC3B,SAAA;AACD,QAAA,mBAAmB,EAAE;AACjB,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,IAAI,EAAE,OAAO;AAChB,SAAA;AACD,QAAA,WAAW,EAAE,KAAK;AAClB,QAAA,MAAM,EAAEC,mCAAiB;AACzB,QAAA,YAAY,EAAE,IAAI;AAClB,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,aAAa,EAAE,KAAK;AACpB;;;AAGG;AACH,QAAA,GAAG,EAAE,KAAK;AACV,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,IAAI,EAAE;YACF,MAAM,EAAE,GAAG;AACX,YAAA,WAAW,EAAE,IAAI;AACjB,YAAA,OAAO,EAAE;gBACL,KAAK;gBACL,MAAM;gBACN,KAAK;gBACL,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,SAAS;AACZ,aAAA;AACD,YAAA,cAAc,EAAE;gBACZ,cAAc;gBACd,eAAe;gBACf,kBAAkB;gBAClB,QAAQ;gBACR,QAAQ;gBACR,+BAA+B;gBAC/B,gCAAgC;gBAChC,cAAc;gBACd,cAAc;gBACd,gBAAgB;gBAChB,cAAc;gBACd,sBAAsB;AACzB,aAAA;AACJ,SAAA;AACD,QAAA,SAAS,EAAE;AACP,YAAA,GAAG,EAAE,EAAE;AACP,YAAA,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;AACxB,YAAA,eAAe,EAAE,KAAK;AACtB,YAAA,OAAO,EACH,yHAAyH;YAC7H,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC;AAC7D,SAAA;AAED,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,QAAQ,EAAE;AACN,YAAA,OAAO,EAAE,KAAK;AACjB,SAAA;AACJ,KAAA;AACD,IAAA,iBAAiB,EAAE;AACf,QAAA,OAAO,EAAE;AACL,YAAA,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,KAAK;AACrB,YAAA,iBAAiB,EAAE,KAAK;AACxB,YAAA,YAAY,EACR,uHAAuH;AAC9H,SAAA;AACD,QAAA,OAAO,EAAE;YACL,WAAW,EAAE,QAAQ;AACxB,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,KAAK;AACd,QAAA,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;AAC7B,QAAA,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,MAAM;AACf,QAAA,iBAAiB,EAAE;YACf,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,OAAO;YACP,MAAM;YACN,KAAK;YACL,MAAM;YACN,OAAO;YACP,OAAO;AACV,SAAA;AACD,QAAA,YAAY,EAAE,IAAI;AAClB,QAAA,IAAI,WAAW,GAAA;YACX,OAAOC,mBAAS,EAAE,CAAC,IAAI,CAAC,UAAU,GAAG,YAAY;QACrD,CAAC;AACD,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,MAAM,EAAE;AACJ,YAAA,aAAa,EAAE,GAAG;AAClB,YAAA,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;AAC3B,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;AACJ,YAAA,kBAAkB,EAAE,MAAM;AAC1B,YAAA,EAAE,EAAE;AACA,gBAAA,GAAG,EAAE,MAAM;AACX,gBAAA,GAAG,EAAE,MAAM;AACd,aAAA;AACD,YAAA,GAAG,EAAE;AACD,gBAAA,GAAG,EAAE,MAAM;AACX,gBAAA,GAAG,EAAE,MAAM;AACd,aAAA;AACJ,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE;;AAEL,QAAA,UAAU,EAAE;AACR,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,KAAK,EAAE;gBACH,OAAO,EAAE,KAAK;AACd,gBAAA,oBAAoB,EAAE,GAAG;AACzB,gBAAA,iBAAiB,EAAE,KAAK;AACxB,gBAAA,UAAU,EAAE,KAAK;AACpB,aAAA;AACD,YAAA,SAAS,EAAE;AACP,gBAAA,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,GAAG;AACnB,aAAA;AACD,YAAA,cAAc,EAAE;AACZ,gBAAA,cAAc,EAAE,IAAI;gBACpB,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,KAAK;AACrB,aAAA;AACJ,SAAA;;AAGD,QAAA,WAAW,EAAE;AACT,YAAA,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;YAC7C,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI;AACf,YAAA,YAAY,EAAE;gBACV,WAAW;gBACX,UAAU;gBACV,iBAAiB;gBACjB,wBAAwB;gBACxB,kBAAkB;gBAClB,iBAAiB;gBACjB,UAAU;gBACV,YAAY;gBACZ,eAAe;AAClB,aAAA;YACD,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,EAAE;AACjB,SAAA;;AAGD,QAAA,SAAS,EAAE;YACP,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,gBAAgB;AAC1B,YAAA,MAAM,EAAE;gBACJ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,IAAI;AACf,aAAA;AACD,YAAA,KAAK,EAAE;gBACH,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,IAAI;AACf,aAAA;AACD,YAAA,OAAO,EAAE;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,aAAa;AACxB,aAAA;AACJ,SAAA;;AAGD,QAAA,KAAK,EAAE;AACH,YAAA,OAAO,EAAE,KAAK;AACd,YAAA,SAAS,EAAE,EAAE;AACb,YAAA,aAAa,EAAE,aAAa;AAC5B,YAAA,WAAW,EAAE;AACT,gBAAA,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,IAAI;AACb,gBAAA,IAAI,EAAE,SAAS;gBACf,kBAAkB,EAAE,CAAC;gBACrB,gBAAgB,EAAE,CAAC;AACtB,aAAA;YACD,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;AACjB,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE;QACL,uBAAuB,EAAE,KAAK;AAC9B,QAAA,iBAAiB,EAAE;YACf,OAAO,EAAE,KAAK;YACd,gBAAgB,EAAE,MAAM;YACxB,qBAAqB,EAAE,GAAG;YAC1B,gBAAgB,EAAE,OAAO;AACzB,YAAA,gBAAgB,EAAE,IAAI;AACtB,YAAA,gBAAgB,EAAE,KAAK;AACvB,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACD,QAAA,iBAAiB,EAAE;AACf,YAAA,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,EAAE;YACnB,qBAAqB,EAAE,IAAI;AAC3B,YAAA,gBAAgB,EAAE,CAAC;YACnB,cAAc,EAAE,QAAQ;AACxB,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,WAAW,EAAE,KAAK;AACrB,SAAA;QACD,QAAQ,EAAE,EAAE;AACf,KAAA;;;;;;;"}
|
|
1
|
+
{"version":3,"file":"default.js","sources":["../../../../../src/server/const/default.ts"],"sourcesContent":[null],"names":["xemsKeyPlaceholder","DEFAULT_LOGGER_CONFIG","getRandomBytes","defaultHelmetOpts","getSysApi"],"mappings":";;;;;;;;;AAAA;;;;AAIG;AAUI,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI;AACjD,MAAM,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI;AAE7D;AACO,MAAM,eAAe,GAAkB;AAC1C,IAAA,WAAW,EAAE;AACT,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,SAAS,EAAE,GAAG;AACd,QAAA,iBAAiB,EAAE,IAAI;AACvB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,WAAW,EAAE,KAAK;AACrB,KAAA;AACD,IAAA,MAAM,EAAE;AACJ,QAAA,gBAAgB,EAAE,IAAI;QACtB,IAAI,EAAE,YAAY;AAClB,QAAA,SAAS,EAAE,MAAM;AACjB,QAAA,eAAe,EAAE,MAAM;AACvB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,IAAI,EAAE,YAAY;AAClB,QAAA,IAAI,EAAE,IAAI;;;;;AAKV,QAAA,UAAU,EAAE,EAAE;AACd,QAAA,cAAc,EAAE;AACZ,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,WAAW,EAAE,EAAE;AACf,YAAA,QAAQ,EAAE,QAAQ;AACrB,SAAA;AACD,QAAA,gBAAgB,EAAE,IAAI;AAEtB,QAAA,IAAI,EAAE;AACF,YAAA,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC;YAC/C,MAAM,EAAEA,qCAAkB;YAC1B,YAAY,EAAE,IAAI;AAClB,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,QAAQ,EAAE,SAAS;AACnB,YAAA,OAAO,EAAE,+BAA+B;AACxC,YAAA,aAAa,EAAE;AACX,gBAAA,QAAQ,EAAE,IAAI;AACd,gBAAA,QAAQ,EAAE,QAAQ;AAClB,gBAAA,MAAM,EAAE,IAAI;AACZ,gBAAA,MAAM,EAAE,KAAK;AAChB,aAAA;YACD,WAAW,EAAE,KAAK;AACrB,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAEC,2CAAqB;AAC9B,IAAA,QAAQ,EAAE;AACN,QAAA,IAAI,EAAE,QAAQ;AACd,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,UAAU,EAAE,GAAG;AAClB,KAAA;AAED,IAAA,eAAe,EAAE;AACb,QAAA,OAAO,EAAE,KAAK;AACjB,KAAA;AACD,IAAA,OAAO,EAAE;QACL,OAAO,EAAE,KAAK;AACd,QAAA,OAAO,EAAE,MAAM;AACf,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,SAAS,EAAE;AACP,YAAA,YAAY,EAAE;AACV,gBAAA,OAAO,EAAE,IAAI;AACb,gBAAA,WAAW,EAAE,IAAI;AACjB,gBAAA,UAAU,EAAE,IAAI;AACnB,aAAA;AACJ,SAAA;AACJ,KAAA;AACD,IAAA,KAAK,EAAE;QACH,QAAQ,EAAE,QAAQ;AAClB,QAAA,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QAC1B,GAAG,EAAE,MAAM;AACX,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;YACJ,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,KAAK;AACnB,SAAA;AACJ,KAAA;AACD,IAAA,QAAQ,EAAE;AACN,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,KAAK,EAAE,UAAU;AACjB,QAAA,IAAI,EAAE;AACF,YAAA,OAAO,EAAE,IAAI;YACb,MAAM,EAAEC,8BAAc,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;AAC1C,YAAA,UAAU,EAAE,UAAU;AACtB,YAAA,aAAa,EAAE;AACX,gBAAA,QAAQ,EAAE,IAAI;AACd,gBAAA,QAAQ,EAAE,QAAQ;AACrB,aAAA;AACD,YAAA,kBAAkB,EAAE,IAAI;AAC3B,SAAA;AACD,QAAA,mBAAmB,EAAE;AACjB,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,IAAI,EAAE,OAAO;AAChB,SAAA;AACD,QAAA,WAAW,EAAE,KAAK;AAClB,QAAA,MAAM,EAAEC,mCAAiB;AACzB,QAAA,YAAY,EAAE,IAAI;AAClB,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,aAAa,EAAE,KAAK;AACpB;;;AAGG;AACH,QAAA,GAAG,EAAE,KAAK;AACV,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,IAAI,EAAE;YACF,MAAM,EAAE,GAAG;AACX,YAAA,WAAW,EAAE,IAAI;AACjB,YAAA,OAAO,EAAE;gBACL,KAAK;gBACL,MAAM;gBACN,KAAK;gBACL,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,SAAS;AACZ,aAAA;AACD,YAAA,cAAc,EAAE;gBACZ,cAAc;gBACd,eAAe;gBACf,kBAAkB;gBAClB,QAAQ;gBACR,QAAQ;gBACR,+BAA+B;gBAC/B,gCAAgC;gBAChC,cAAc;gBACd,cAAc;gBACd,gBAAgB;gBAChB,cAAc;gBACd,sBAAsB;AACzB,aAAA;AACJ,SAAA;AACD,QAAA,SAAS,EAAE;AACP,YAAA,GAAG,EAAE,EAAE;AACP,YAAA,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;AACxB,YAAA,eAAe,EAAE,KAAK;AACtB,YAAA,OAAO,EACH,yHAAyH;YAC7H,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC;AAC7D,SAAA;AAED,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,QAAQ,EAAE;AACN,YAAA,OAAO,EAAE,KAAK;AACjB,SAAA;AACJ,KAAA;AACD,IAAA,iBAAiB,EAAE;AACf,QAAA,OAAO,EAAE;AACL,YAAA,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,KAAK;AACrB,YAAA,iBAAiB,EAAE,KAAK;AACxB,YAAA,YAAY,EACR,uHAAuH;AAC9H,SAAA;AACD,QAAA,OAAO,EAAE;YACL,WAAW,EAAE,QAAQ;AACxB,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,KAAK;AACd,QAAA,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;AAC7B,QAAA,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,MAAM;AACf,QAAA,iBAAiB,EAAE;YACf,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,OAAO;YACP,MAAM;YACN,KAAK;YACL,MAAM;YACN,OAAO;YACP,OAAO;AACV,SAAA;AACD,QAAA,YAAY,EAAE,IAAI;AAClB;;;AAGG;AACH,QAAA,IAAI,WAAW,GAAA;YACX,OAAOC,mBAAS,EAAE,CAAC,IAAI,CAAC,UAAU,GAAG,YAAY;QACrD,CAAC;AACD,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,MAAM,EAAE;AACJ,YAAA,aAAa,EAAE,GAAG;AAClB,YAAA,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;AAC3B,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;AACJ,YAAA,kBAAkB,EAAE,MAAM;AAC1B,YAAA,EAAE,EAAE;AACA,gBAAA,GAAG,EAAE,MAAM;AACX,gBAAA,GAAG,EAAE,MAAM;AACd,aAAA;AACD,YAAA,GAAG,EAAE;AACD,gBAAA,GAAG,EAAE,MAAM;AACX,gBAAA,GAAG,EAAE,MAAM;AACd,aAAA;AACJ,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE;;AAEL,QAAA,UAAU,EAAE;AACR,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,KAAK,EAAE;gBACH,OAAO,EAAE,KAAK;AACd,gBAAA,oBAAoB,EAAE,GAAG;AACzB,gBAAA,iBAAiB,EAAE,KAAK;AACxB,gBAAA,UAAU,EAAE,KAAK;AACpB,aAAA;AACD,YAAA,SAAS,EAAE;AACP,gBAAA,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,GAAG;AACnB,aAAA;AACD,YAAA,cAAc,EAAE;AACZ,gBAAA,cAAc,EAAE,IAAI;gBACpB,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,KAAK;AACrB,aAAA;AACJ,SAAA;;AAGD,QAAA,WAAW,EAAE;AACT,YAAA,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;YAC7C,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI;AACf,YAAA,YAAY,EAAE;gBACV,WAAW;gBACX,UAAU;gBACV,iBAAiB;gBACjB,wBAAwB;gBACxB,kBAAkB;gBAClB,iBAAiB;gBACjB,UAAU;gBACV,YAAY;gBACZ,eAAe;AAClB,aAAA;YACD,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,EAAE;AACjB,SAAA;;AAGD,QAAA,SAAS,EAAE;YACP,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,gBAAgB;AAC1B,YAAA,MAAM,EAAE;gBACJ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,IAAI;AACf,aAAA;AACD,YAAA,KAAK,EAAE;gBACH,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,IAAI;AACf,aAAA;AACD,YAAA,OAAO,EAAE;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,aAAa;AACxB,aAAA;AACJ,SAAA;;AAGD,QAAA,KAAK,EAAE;AACH,YAAA,OAAO,EAAE,KAAK;AACd,YAAA,SAAS,EAAE,EAAE;AACb,YAAA,aAAa,EAAE,aAAa;AAC5B,YAAA,WAAW,EAAE;AACT,gBAAA,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,IAAI;AACb,gBAAA,IAAI,EAAE,SAAS;gBACf,kBAAkB,EAAE,CAAC;gBACrB,gBAAgB,EAAE,CAAC;AACtB,aAAA;YACD,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;AACjB,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE;QACL,uBAAuB,EAAE,KAAK;AAC9B,QAAA,iBAAiB,EAAE;YACf,OAAO,EAAE,KAAK;YACd,gBAAgB,EAAE,MAAM;YACxB,qBAAqB,EAAE,GAAG;YAC1B,gBAAgB,EAAE,OAAO;AACzB,YAAA,gBAAgB,EAAE,IAAI;AACtB,YAAA,gBAAgB,EAAE,KAAK;AACvB,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACD,QAAA,iBAAiB,EAAE;AACf,YAAA,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,EAAE;YACnB,qBAAqB,EAAE,IAAI;AAC3B,YAAA,gBAAgB,EAAE,CAAC;YACnB,cAAc,EAAE,QAAQ;AACxB,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,WAAW,EAAE,KAAK;AACrB,SAAA;QACD,QAAQ,EAAE,EAAE;AACf,KAAA;;;;;;;"}
|
|
@@ -172,6 +172,8 @@ function loadXyConfig(projectRoot) {
|
|
|
172
172
|
}
|
|
173
173
|
// Resolve references &(pkg), &(env), etc.
|
|
174
174
|
const sys = globalThis.__sys__;
|
|
175
|
+
// Safely resolve &(env:...) variables scoped to the target project root
|
|
176
|
+
// using the internal symbol (safe from third-party / plugin tampering).
|
|
175
177
|
let envProvider = sys?.__env__;
|
|
176
178
|
if (sys?.__env__?.[env.XY_ENV_INTERNAL_GET_FOR_ROOT]) {
|
|
177
179
|
envProvider = {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ProjectDiscovery.js","sources":["../../../../src/utils/ProjectDiscovery.ts"],"sourcesContent":[null],"names":["XY_ENV_INTERNAL_GET_FOR_ROOT","ConfigSyntaxParser"],"mappings":";;;;;;;AAKA;;;;;AAKG;AACG,SAAU,aAAa,CAAC,GAAW,EAAA;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;AAC9C,IAAA,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;AAAE,QAAA,OAAO,KAAK;;AAGzC,IAAA,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;AACpE,IAAA,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;AAClE,IAAA,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACnD,IAAA,MAAM,WAAW,GACb,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;AACpD,QAAA,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAEzD,IAAI,cAAc,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,CAAC;AAAE,QAAA,OAAO,IAAI;;;;AAKzE,IAAA,IAAI;QACA,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;;AAEhD,QAAA,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;AAC9B,YAAA,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO;AAAE,gBAAA,OAAO,IAAI;QAC5C;IACJ;AAAE,IAAA,MAAM;;IAER;AAEA,IAAA,OAAO,KAAK;AAChB;AAEA;;AAEG;AACG,SAAU,mBAAmB,CAAC,QAAgB,EAAA;;IAEhD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;AAC5B,QAAA,IAAI;AACA,YAAA,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrC;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,SAAS;QACpB;IACJ;AAEA,IAAA,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;AAAE,QAAA,OAAO,SAAS;IAE9C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;IACpC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI;AAE9C,IAAA,OAAO,OAAO,KAAK,aAAa,EAAE;AAC9B,QAAA,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE;AACxB,YAAA,OAAO,OAAO;QAClB;AACA,QAAA,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACnC;AAEA,IAAA,OAAO,SAAS;AACpB;AASA;;AAEG;SACa,oBAAoB,GAAA;AAChC,IAAA,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,KAAK;AAC/B,IAAA,IAAI,CAAC,KAAK;AAAE,QAAA,OAAO,SAAS;IAE5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;IAC/B,IAAI,cAAc,GAAG,EAAE;;AAIvB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACnC,QAAA,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC;AACrB,QAAA,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC9D;;;AAIJ,QAAA,MAAM,KAAK,GACP,IAAI,CAAC,KAAK,CAAC,mCAAmC,CAAC;AAC/C,YAAA,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC;AAElD,QAAA,IAAI,CAAC,KAAK;YAAE;AAEZ,QAAA,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS;YAC5D;;;;AAKJ,QAAA,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE;YAE5B;QACJ;;AAGA,QAAA,IACI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;AACzB,YAAA,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AAC/B,YAAA,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;AAC3B,YAAA,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAExB;QAEJ,cAAc,GAAG,QAAQ;QACzB;IACJ;AAEA,IAAA,IAAI,CAAC,cAAc;AAAE,QAAA,OAAO,SAAS;AAErC,IAAA,MAAM,IAAI,GAAG,mBAAmB,CAAC,cAAc,CAAC;AAKhD,IAAA,OAAO,IAAI;AACf;AAEA;;;AAGG;AACG,SAAU,gBAAgB,CAAC,QAAgB,EAAA;AAC7C,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,KAAK;IAC3B,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;;AAGnD,IAAA,IACI,cAAc,CAAC,QAAQ,CAAC,eAAe,CAAC;AACxC,QAAA,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AACzC,QAAA,cAAc,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EACnD;;;;AAIE,QAAA,OAAO,IAAI;IACf;AAEA,IAAA,OAAO,KAAK;AAChB;AAEA;;;;AAIG;AACG,SAAU,mBAAmB,CAAC,QAAgB,EAAA;AAChD,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,KAAK;;IAG3B,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;;;AAInD,IAAA,IAAI,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AAAE,QAAA,OAAO,IAAI;;AAG1D,IAAA,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAAE,QAAA,OAAO,KAAK;;AAGnD,IAAA,OAAO,gBAAgB,CAAC,QAAQ,CAAC;AACrC;AAwGA;;;AAGG;AACG,SAAU,YAAY,CAAC,WAAmB,EAAA;IAC5C,KAAK,MAAM,IAAI,IAAI,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,EAAE;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC;AAC/C,QAAA,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE;AAC3B,YAAA,IAAI;gBACA,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC;gBAChD,MAAM,KAAK,GAAG;qBACT,OAAO,CACJ,8CAA8C,EAC9C,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;qBAEzB,OAAO,CAAC,kCAAkC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,KACnD,EAAE,GAAG,EAAE,GAAG,EAAE,CACf;gBAEL,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;;gBAGjC,IAAI,OAAO,GAAG,IAAI;gBAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC;AACtD,gBAAA,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AACxB,oBAAA,IAAI;AACA,wBAAA,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC3D;AAAE,oBAAA,MAAM,eAAe;gBAC3B;;AAGA,gBAAA,MAAM,GAAG,GAAI,UAAkB,CAAC,OAAO
|
|
1
|
+
{"version":3,"file":"ProjectDiscovery.js","sources":["../../../../src/utils/ProjectDiscovery.ts"],"sourcesContent":[null],"names":["XY_ENV_INTERNAL_GET_FOR_ROOT","ConfigSyntaxParser"],"mappings":";;;;;;;AAKA;;;;;AAKG;AACG,SAAU,aAAa,CAAC,GAAW,EAAA;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;AAC9C,IAAA,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;AAAE,QAAA,OAAO,KAAK;;AAGzC,IAAA,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;AACpE,IAAA,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;AAClE,IAAA,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACnD,IAAA,MAAM,WAAW,GACb,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;AACpD,QAAA,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAEzD,IAAI,cAAc,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,CAAC;AAAE,QAAA,OAAO,IAAI;;;;AAKzE,IAAA,IAAI;QACA,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;;AAEhD,QAAA,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;AAC9B,YAAA,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO;AAAE,gBAAA,OAAO,IAAI;QAC5C;IACJ;AAAE,IAAA,MAAM;;IAER;AAEA,IAAA,OAAO,KAAK;AAChB;AAEA;;AAEG;AACG,SAAU,mBAAmB,CAAC,QAAgB,EAAA;;IAEhD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;AAC5B,QAAA,IAAI;AACA,YAAA,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrC;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,SAAS;QACpB;IACJ;AAEA,IAAA,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;AAAE,QAAA,OAAO,SAAS;IAE9C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;IACpC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI;AAE9C,IAAA,OAAO,OAAO,KAAK,aAAa,EAAE;AAC9B,QAAA,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE;AACxB,YAAA,OAAO,OAAO;QAClB;AACA,QAAA,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACnC;AAEA,IAAA,OAAO,SAAS;AACpB;AASA;;AAEG;SACa,oBAAoB,GAAA;AAChC,IAAA,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,KAAK;AAC/B,IAAA,IAAI,CAAC,KAAK;AAAE,QAAA,OAAO,SAAS;IAE5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;IAC/B,IAAI,cAAc,GAAG,EAAE;;AAIvB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACnC,QAAA,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC;AACrB,QAAA,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC9D;;;AAIJ,QAAA,MAAM,KAAK,GACP,IAAI,CAAC,KAAK,CAAC,mCAAmC,CAAC;AAC/C,YAAA,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC;AAElD,QAAA,IAAI,CAAC,KAAK;YAAE;AAEZ,QAAA,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS;YAC5D;;;;AAKJ,QAAA,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE;YAE5B;QACJ;;AAGA,QAAA,IACI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;AACzB,YAAA,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AAC/B,YAAA,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;AAC3B,YAAA,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAExB;QAEJ,cAAc,GAAG,QAAQ;QACzB;IACJ;AAEA,IAAA,IAAI,CAAC,cAAc;AAAE,QAAA,OAAO,SAAS;AAErC,IAAA,MAAM,IAAI,GAAG,mBAAmB,CAAC,cAAc,CAAC;AAKhD,IAAA,OAAO,IAAI;AACf;AAEA;;;AAGG;AACG,SAAU,gBAAgB,CAAC,QAAgB,EAAA;AAC7C,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,KAAK;IAC3B,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;;AAGnD,IAAA,IACI,cAAc,CAAC,QAAQ,CAAC,eAAe,CAAC;AACxC,QAAA,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AACzC,QAAA,cAAc,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EACnD;;;;AAIE,QAAA,OAAO,IAAI;IACf;AAEA,IAAA,OAAO,KAAK;AAChB;AAEA;;;;AAIG;AACG,SAAU,mBAAmB,CAAC,QAAgB,EAAA;AAChD,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,KAAK;;IAG3B,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;;;AAInD,IAAA,IAAI,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AAAE,QAAA,OAAO,IAAI;;AAG1D,IAAA,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAAE,QAAA,OAAO,KAAK;;AAGnD,IAAA,OAAO,gBAAgB,CAAC,QAAQ,CAAC;AACrC;AAwGA;;;AAGG;AACG,SAAU,YAAY,CAAC,WAAmB,EAAA;IAC5C,KAAK,MAAM,IAAI,IAAI,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,EAAE;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC;AAC/C,QAAA,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE;AAC3B,YAAA,IAAI;gBACA,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC;gBAChD,MAAM,KAAK,GAAG;qBACT,OAAO,CACJ,8CAA8C,EAC9C,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;qBAEzB,OAAO,CAAC,kCAAkC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,KACnD,EAAE,GAAG,EAAE,GAAG,EAAE,CACf;gBAEL,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;;gBAGjC,IAAI,OAAO,GAAG,IAAI;gBAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC;AACtD,gBAAA,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AACxB,oBAAA,IAAI;AACA,wBAAA,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC3D;AAAE,oBAAA,MAAM,eAAe;gBAC3B;;AAGA,gBAAA,MAAM,GAAG,GAAI,UAAkB,CAAC,OAAO;;;AAIvC,gBAAA,IAAI,WAAW,GAAG,GAAG,EAAE,OAAO;gBAC9B,IAAI,GAAG,EAAE,OAAO,GAAGA,gCAA4B,CAAC,EAAE;AAC9C,oBAAA,WAAW,GAAG;AACV,wBAAA,GAAG,EAAE,CAAC,GAAW,KAAK,GAAG,CAAC,OAAO,CAACA,gCAA4B,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,SAAS;AAC/F,wBAAA,GAAG,EAAE,CAAC,GAAW,KAAK,GAAG,CAAC,OAAO,CAACA,gCAA4B,CAAC,CAAC,GAAG,EAAE,WAAW;qBACnF;gBACL;gBAEA,MAAM,MAAM,GAAG,IAAIC,qCAAkB,CAAC,OAAO,EAAE,WAAW,CAAC;AAC3D,gBAAA,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;YAClC;YAAE,OAAO,CAAC,EAAE;AACR,gBAAA,OAAO,IAAI;YACf;QACJ;IACJ;AACA,IAAA,OAAO,IAAI;AACf;AAEA;;;AAGG;AACG,SAAU,oBAAoB,CAChC,UAAkB,EAClB,UAAkB,EAAA;AAElB,IAAA,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC;AACvC,IAAA,IAAI,CAAC,MAAM;AAAE,QAAA,OAAO,KAAK;IAEzB,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ;AACpD,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,KAAK;AAE3B,IAAA,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC;;IAE3C,OAAO,CAAC,EAAE,cAAc,IAAI,cAAc,CAAC,IAAI,KAAK,QAAQ,CAAC;AACjE;;;;;;;;;;"}
|
|
@@ -20,7 +20,10 @@ function createSecurityShield(target, label = "__sys__") {
|
|
|
20
20
|
return proxyCache.get(obj);
|
|
21
21
|
const handler = {
|
|
22
22
|
get(target, prop, receiver) {
|
|
23
|
-
// Prevent access to internal
|
|
23
|
+
// 🛡️ Zero-Trust Hardening: Prevent reflective access to private/internal state.
|
|
24
|
+
// Prevents malicious plugins from reading host coordinates (e.g., _primaryRoot, _internalRoot)
|
|
25
|
+
// or inspecting internal registries (_pluginMap). Dunder properties (__root__, __env__) remain
|
|
26
|
+
// intentionally accessible as public system contracts.
|
|
24
27
|
if (typeof prop === "string" &&
|
|
25
28
|
prop.startsWith("_") &&
|
|
26
29
|
!prop.startsWith("__")) {
|
|
@@ -29,7 +32,9 @@ function createSecurityShield(target, label = "__sys__") {
|
|
|
29
32
|
return undefined;
|
|
30
33
|
}
|
|
31
34
|
}
|
|
32
|
-
|
|
35
|
+
// Use target as receiver so internal getters can access their own private
|
|
36
|
+
// state (e.g. this._internalRoot) while external access to _ remains blocked.
|
|
37
|
+
const value = Reflect.get(target, prop, target);
|
|
33
38
|
// Prevent Proxy invariant violation
|
|
34
39
|
const desc = Object.getOwnPropertyDescriptor(target, prop);
|
|
35
40
|
if (desc && desc.configurable === false && desc.writable === false) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"SecurityShield.js","sources":["../../../../src/utils/SecurityShield.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;;;;;;;;AAQG;SACa,oBAAoB,CAChC,MAAS,EACT,QAAgB,SAAS,EAAA;AAEzB,IAAA,MAAM,UAAU,GAAG,IAAI,OAAO,EAAe;AAE7C,IAAA,SAAS,WAAW,CAAC,GAAQ,EAAE,IAAY,EAAA;QACvC,IACI,GAAG,KAAK,IAAI;aACX,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,UAAU,CAAC,EACxD;AACE,YAAA,OAAO,GAAG;QACd;AAEA,QAAA,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;AAAE,YAAA,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;AAEnD,QAAA,MAAM,OAAO,GAAsB;AAC/B,YAAA,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAA
|
|
1
|
+
{"version":3,"file":"SecurityShield.js","sources":["../../../../src/utils/SecurityShield.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;;;;;;;;AAQG;SACa,oBAAoB,CAChC,MAAS,EACT,QAAgB,SAAS,EAAA;AAEzB,IAAA,MAAM,UAAU,GAAG,IAAI,OAAO,EAAe;AAE7C,IAAA,SAAS,WAAW,CAAC,GAAQ,EAAE,IAAY,EAAA;QACvC,IACI,GAAG,KAAK,IAAI;aACX,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,UAAU,CAAC,EACxD;AACE,YAAA,OAAO,GAAG;QACd;AAEA,QAAA,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;AAAE,YAAA,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;AAEnD,QAAA,MAAM,OAAO,GAAsB;AAC/B,YAAA,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAA;;;;;gBAKtB,IACI,OAAO,IAAI,KAAK,QAAQ;AACxB,oBAAA,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;AACpB,oBAAA,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB;oBACE,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC1D,oBAAA,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE;AACjE,wBAAA,OAAO,SAAS;oBACpB;gBACJ;;;AAIA,gBAAA,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC;;gBAG/C,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC1D,gBAAA,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE;AAChE,oBAAA,OAAO,KAAK;gBAChB;;;AAIA,gBAAA,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE;AAC7B,oBAAA,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC7B;gBAEA,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;oBAC7C,MAAM,QAAQ,GACV,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;oBAC7D,OAAO,WAAW,CAAC,KAAK,EAAE,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAE,CAAC;gBACpD;AACA,gBAAA,OAAO,KAAK;YAChB,CAAC;YACD,GAAG,CAAC,MAAM,EAAE,IAAI,EAAA;gBACZ,IACI,OAAO,IAAI,KAAK,QAAQ;AACxB,oBAAA,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;AACpB,oBAAA,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB;AACE,oBAAA,OAAO,KAAK;gBAChB;gBACA,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;YACpC,CAAC;AACD,YAAA,OAAO,CAAC,MAAM,EAAA;AACV,gBAAA,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,KAAI;oBAC1C,IACI,OAAO,GAAG,KAAK,QAAQ;AACvB,wBAAA,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;AACnB,wBAAA,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EACvB;wBACE,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC;wBACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,EAAE;AACtC,4BAAA,OAAO,KAAK;wBAChB;oBACJ;AACA,oBAAA,OAAO,IAAI;AACf,gBAAA,CAAC,CAAC;YACN,CAAC;YACD,GAAG,CAAC,MAAM,EAAE,IAAI,EAAA;gBACZ,MAAM,QAAQ,GACV,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACX,CAAA,+CAAA,EAAkD,QAAQ,CAAA,MAAA,EAAS,IAAI,CAAA,sCAAA,CAAwC,CAClH;YACL,CAAC;YACD,cAAc,CAAC,MAAM,EAAE,IAAI,EAAA;gBACvB,MAAM,QAAQ,GACV,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACX,CAAA,0DAAA,EAA6D,QAAQ,CAAA,MAAA,EAAS,IAAI,CAAA,EAAA,CAAI,CACzF;YACL,CAAC;YACD,cAAc,CAAC,MAAM,EAAE,IAAI,EAAA;gBACvB,MAAM,QAAQ,GACV,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACX,CAAA,oDAAA,EAAuD,QAAQ,CAAA,QAAA,EAAW,IAAI,CAAA,EAAA,CAAI,CACrF;YACL,CAAC;SACJ;QAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;AACrC,QAAA,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;AAC1B,QAAA,OAAO,KAAK;IAChB;AAEA,IAAA,OAAO,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;AACrC;;;;"}
|
|
@@ -5,6 +5,7 @@ var ProjectDiscovery = require('../utils/ProjectDiscovery.js');
|
|
|
5
5
|
var path = require('path');
|
|
6
6
|
var fs = require('fs');
|
|
7
7
|
var DotEnvLoader = require('../utils/DotEnvLoader.js');
|
|
8
|
+
var Logger = require('../shared/logger/Logger.js');
|
|
8
9
|
|
|
9
10
|
class EnvApi {
|
|
10
11
|
/**
|
|
@@ -125,8 +126,16 @@ class EnvApi {
|
|
|
125
126
|
}
|
|
126
127
|
/**
|
|
127
128
|
* Reads a variable from the secure internal store for a specific root.
|
|
128
|
-
*
|
|
129
|
+
*
|
|
130
|
+
* **Security Note:**
|
|
131
|
+
* Formerly exposed as `getForRoot(key, root)`. It was removed from the public API
|
|
132
|
+
* because it functioned as a zero-trust bypass: plugins could manually pass the host project
|
|
133
|
+
* root and read host secrets. It is now private to the engine and keyed by an internal Symbol.
|
|
134
|
+
*
|
|
129
135
|
* @internal
|
|
136
|
+
* @param key - Variable name to look up.
|
|
137
|
+
* @param root - Absolute project root path.
|
|
138
|
+
* @returns The resolved variable value or undefined.
|
|
130
139
|
*/
|
|
131
140
|
[env.XY_ENV_INTERNAL_GET_FOR_ROOT](key, root) {
|
|
132
141
|
if (key === "__root__") {
|
|
@@ -296,8 +305,34 @@ class EnvApi {
|
|
|
296
305
|
}
|
|
297
306
|
/**
|
|
298
307
|
* Configures the XESS (XyPriss Environment Security Shield) dynamically.
|
|
299
|
-
*
|
|
308
|
+
*
|
|
309
|
+
* **Security Enforcement:**
|
|
310
|
+
* Only the host application and internal engine are authorized to invoke this method.
|
|
311
|
+
* Invocations from third-party plugins in `node_modules` or foreign project roots
|
|
312
|
+
* are strictly blocked to prevent malicious tampering with the `process.env` whitelist.
|
|
313
|
+
*
|
|
314
|
+
* @deprecated Consider declaring `$env: { whitelist: [...] }` in `xypriss.config.jsonc` instead.
|
|
315
|
+
*/
|
|
316
|
+
configureShield(config) {
|
|
317
|
+
const callerRoot = ProjectDiscovery.getCallerProjectRoot();
|
|
318
|
+
const hostRoot = this.runner.getRoot();
|
|
319
|
+
if (callerRoot && callerRoot !== hostRoot && !ProjectDiscovery.isCoreFrameworkPath(callerRoot)) {
|
|
320
|
+
Logger.logger.warn("security", `Blocked unauthorized attempt by third-party plugin at '${callerRoot}' to configure Environment Security Shield.`);
|
|
321
|
+
return;
|
|
322
|
+
}
|
|
323
|
+
this[env.XY_ENV_CONFIGURE_SHIELD](config);
|
|
324
|
+
}
|
|
325
|
+
/**
|
|
326
|
+
* Configures the XESS (XyPriss Environment Security Shield) dynamically.
|
|
327
|
+
*
|
|
328
|
+
* **Security Note:**
|
|
329
|
+
* Formerly exposed as `public configureShield(...)`. It was removed from the public API
|
|
330
|
+
* because any untrusted caller could modify the whitelist of allowed `process.env` properties,
|
|
331
|
+
* effectively destroying the Environment Security Shield. It is now private to the engine
|
|
332
|
+
* and only accessible via this internal Symbol during early bootstrap.
|
|
333
|
+
*
|
|
300
334
|
* @internal
|
|
335
|
+
* @param config - XESS configuration options.
|
|
301
336
|
*/
|
|
302
337
|
[env.XY_ENV_CONFIGURE_SHIELD](config) {
|
|
303
338
|
if (!config)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"EnvApi.js","sources":["../../../../src/xhsc/EnvApi.ts"],"sourcesContent":[null],"names":["getCallerProjectRoot","XY_ENV_INTERNAL_GET_FOR_ROOT","EnvAccessError","XY_ENV_CONFIGURE_SHIELD","XY_ENV_STORE_KEY","EnvStoreError","DotEnvLoader","EnvKeyError","FORBIDDEN_VALUE_PATTERN"],"mappings":"
|
|
1
|
+
{"version":3,"file":"EnvApi.js","sources":["../../../../src/xhsc/EnvApi.ts"],"sourcesContent":[null],"names":["getCallerProjectRoot","XY_ENV_INTERNAL_GET_FOR_ROOT","EnvAccessError","isCoreFrameworkPath","logger","XY_ENV_CONFIGURE_SHIELD","XY_ENV_STORE_KEY","EnvStoreError","DotEnvLoader","EnvKeyError","FORBIDDEN_VALUE_PATTERN"],"mappings":";;;;;;;;;MAoBa,MAAM,CAAA;AA6Cf;;;;AAIG;AACH,IAAA,WAAA,CACI,MAAqB,EACrB,IAAA,GAAe,aAAa,EAC5B,YAAqB,KAAK,EAAA;AAhD9B;;;;;;AAMG;QACc,IAAA,CAAA,gBAAgB,GAAwB,IAAI,GAAG,CAAC;YAC7D,MAAM;YACN,MAAM;YACN,MAAM;YACN,KAAK;YACL,MAAM;YACN,MAAM;YACN,MAAM;YACN,WAAW;YACX,aAAa;YACb,cAAc;YACd,QAAQ;YACR,OAAO;YACP,OAAO;YACP,gBAAgB;YAChB,UAAU;YACV,OAAO;YACP,YAAY;YACZ,cAAc;YACd,UAAU;YACV,gBAAgB;YAChB,iBAAiB;YACjB,iBAAiB;YACjB,mBAAmB;YACnB,oBAAoB;YACpB,iBAAiB;YACjB,0BAA0B;YAC1B,oBAAoB;YACpB,gCAAgC;AACnC,SAAA,CAAC;QAEM,IAAA,CAAA,iBAAiB,GAAgB,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC;AAYnE,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;AACpB,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI;AAChB,QAAA,IAAI,CAAC,SAAS,GAAG,SAAS;QAC1B,IAAI,CAAC,WAAW,EAAE;IACtB;;;;AAMA;;;;;;;;;;;;;;;;;AAiBG;IACI,GAAG,CAAC,GAAW,EAAE,KAAa,EAAA;AACjC,QAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;AACrB,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;AAE9B,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK;;QAGlB,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACjC,YAAA,IAAI;AACA,gBAAA,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK;YAC5B;AAAE,YAAA,MAAM;;YAER;QACJ;IACJ;AAEA;;;;;;;;;;AAUG;AACI,IAAA,MAAM,CAAC,GAAW,EAAA;AACrB,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,OAAO,KAAK,CAAC,GAAG,CAAC;QAEjB,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACjC,YAAA,IAAI;AACA,gBAAA,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAC3B;AAAE,YAAA,MAAM;;YAER;QACJ;IACJ;IA2BO,GAAG,CAAC,GAAW,EAAE,YAAqB,EAAA;AACzC,QAAA,IAAI,GAAG,KAAK,UAAU,EAAE;YACpB,OAAO,CAAC,IAAI,CAAC,SAAS,GAAGA,qCAAoB,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;QACpF;AAEA,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC;QACxB,OAAO,KAAK,KAAK,SAAS,GAAG,KAAK,GAAG,YAAY;IACrD;AAEA;;;;;;;;;;;;AAYG;AACI,IAAA,CAACC,gCAA4B,CAAC,CAAC,GAAW,EAAE,IAAY,EAAA;AAC3D,QAAA,IAAI,GAAG,KAAK,UAAU,EAAE;AACpB,YAAA,OAAO,IAAI;QACf;QAEA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;AAC1C,QAAA,OAAO,KAAK,CAAC,GAAG,CAAC;IACrB;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BG;IACI,SAAS,CAAC,GAAW,EAAE,OAA6B,EAAA;AACvD,QAAA,IAAI,GAAG,KAAK,UAAU,EAAE;YACpB,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,GAAGD,qCAAoB,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;YACzF,IAAI,CAAC,OAAO,EAAE;AACV,gBAAA,MAAM,IAAIE,kBAAc,CAAC,GAAG,EAAE,SAAS,CAAC;YAC5C;AACA,YAAA,OAAO,OAAO;QAClB;AAEA,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC;AAExB,QAAA,IAAI,KAAK,KAAK,SAAS,EAAE;AACrB,YAAA,MAAM,IAAIA,kBAAc,CAAC,GAAG,EAAE,SAAS,CAAC;QAC5C;QACA,IAAI,OAAO,EAAE,WAAW,IAAI,KAAK,KAAK,EAAE,EAAE;AACtC,YAAA,MAAM,IAAIA,kBAAc,CAAC,GAAG,EAAE,OAAO,CAAC;QAC1C;AAEA,QAAA,OAAO,KAAK;IAChB;AAEA;;;;;;;;;;;;;AAaG;AACI,IAAA,GAAG,CAAC,GAAW,EAAA;AAClB,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;IACnC;AAEA;;;;;;;;;;;;;;;;;;;;;;;AAuBG;AACI,IAAA,GAAG,CAAC,OAAuB,EAAA;AAC9B,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AAEtC,QAAA,IAAI,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;YAC1C,MAAM,MAAM,GAAuC,EAAE;AACrD,YAAA,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE;gBAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;YAC5B;AACA,YAAA,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAChC;QAEA,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;IACtC;;;;AAMA;;;;;;;AAOG;IACI,YAAY,GAAA;AACf,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY;IACrC;AAEA;;;;;;;AAOG;IACI,aAAa,GAAA;AAChB,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,aAAa;IACtC;AAEA;;;;;;;AAOG;IACI,SAAS,GAAA;AACZ,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS;IAClC;AAEA;;;;;;;AAOG;IACI,MAAM,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM;IAC/B;AAEA;;;;;;;;;;AAUG;AACI,IAAA,EAAE,CAAC,OAAe,EAAA;AACrB,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,OAAO;IAChC;AAEA;;;;;;;;;AASG;AACI,IAAA,eAAe,CAAC,MAGtB,EAAA;AACG,QAAA,MAAM,UAAU,GAAGF,qCAAoB,EAAE;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;AACtC,QAAA,IAAI,UAAU,IAAI,UAAU,KAAK,QAAQ,IAAI,CAACG,oCAAmB,CAAC,UAAU,CAAC,EAAE;YAC3EC,aAAM,CAAC,IAAI,CACP,UAAU,EACV,CAAA,uDAAA,EAA0D,UAAU,CAAA,2CAAA,CAA6C,CACpH;YACD;QACJ;AACA,QAAA,IAAI,CAACC,2BAAuB,CAAC,CAAC,MAAM,CAAC;IACzC;AAEA;;;;;;;;;;;AAWG;IACI,CAACA,2BAAuB,CAAC,CAAC,MAGhC,EAAA;AACG,QAAA,IAAI,CAAC,MAAM;YAAE;AAEb,QAAA,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE;AAChC,YAAA,IAAI,MAAM,CAAC,uBAAuB,EAAE;gBAChC,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YACtD;iBAAO;AACH,gBAAA,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC;oBAC7B,GAAG,IAAI,CAAC,gBAAgB;oBACxB,GAAG,MAAM,CAAC,SAAS;AACtB,iBAAA,CAAC;YACN;QACJ;IACJ;;;;AAMA;;;;;;;;;;;;;AAaG;IACI,IAAI,GAAA;AACP,QAAA,IAAI;AACA,YAAA,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAE/C;AACD,YAAA,OAAO,MAAM,EAAE,QAAQ,IAAI,EAAE;QACjC;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,EAAE;QACb;IACJ;;;;AAMA;;;;;;;;;;;;;;;AAeG;IACK,eAAe,GAAA;AACnB,QAAA,MAAM,QAAQ,GAAI,UAAkB,CAACC,oBAAgB,CAEtC;QAEf,IAAI,CAAC,QAAQ,EAAE;YACX,MAAM,IAAIC,iBAAa,EAAE;QAC7B;AAEA,QAAA,OAAO,QAAQ;IACnB;AAEQ,IAAA,iBAAiB,CACrB,UAAmB,EAAA;AAEnB,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;;;;;QAMvC,MAAM,IAAI,GACN,UAAU;AACV,aAAC,IAAI,CAAC,SAAS,GAAGP,qCAAoB,EAAE,GAAG,IAAI,CAAC;AAChD,YAAA,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;AACrB,YAAAA,qCAAoB,EAAE;AAE1B,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,OAAO,EAAE;QAEpB,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE;;YAER,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;YAC1C,MAAM,OAAO,GAAuC,EAAE;AAEtD,YAAA,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AACxB,gBAAA,MAAM,MAAM,GAAGQ,yBAAY,CAAC,IAAI,CAAC;oBAC7B,IAAI,EAAE,CAAC,OAAO,CAAC;AACf,oBAAA,QAAQ,EAAE,IAAI;AACjB,iBAAA,CAAC;AACF,gBAAA,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;oBACtB,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAW;gBACxC;YACJ;;AAEA,YAAA,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;YAC3B,KAAK,GAAG,OAAO;QACnB;AAEA,QAAA,OAAO,KAAK;IAChB;;;;AAMA;;;;;AAKG;AACK,IAAA,WAAW,CAAC,GAAW,EAAA;AAC3B,QAAA,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE;AAClB,YAAA,MAAM,IAAIC,eAAW,CAAC,GAAG,EAAE,uBAAuB,CAAC;QACvD;QACA,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE;AACzB,YAAA,MAAM,IAAIA,eAAW,CACjB,GAAG,EACH,2CAA2C,CAC9C;QACL;IACJ;AAEA;;;;;;;;;;;;AAYG;IACK,aAAa,CAAC,GAAW,EAAE,KAAa,EAAA;AAC5C,QAAA,IAAIC,2BAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AACrC,YAAA,MAAM,IAAID,eAAW,CACjB,GAAG,EACH,iEAAiE;AAC7D,gBAAA,8EAA8E,CACrF;QACL;IACJ;;;;AAMA;;;;;;;;;;;;;;;;;;;;;;;;AAwBG;AACH;;;;;;;;;;;;;;;;;;;;;;;;AAwBG;IACK,WAAW,GAAA;;;AAGf,QAAA,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU;QACpC,MAAM,IAAI,GAAG,IAAI;QAEjB,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;AACrC,YAAA,GAAG,CAAC,MAAM,EAAE,IAAqB,EAAE,QAAQ,EAAA;AACvC,gBAAA,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;oBAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;gBAC9C;;AAGA,gBAAA,IACI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;AAChC,oBAAA,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;AACtB,oBAAA,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;AAC3B,oBAAA,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;AACvB,oBAAA,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;AAC1B,oBAAA,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EACvB;oBACE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;gBAC9C;;gBAGA,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;AACvB,oBAAA,MAAM,QAAQ,GAAI,UAAkB,CAACH,oBAAgB,CAEtC;oBACf,IAAI,QAAQ,GAAG,MAAM,CAAC,oBAAoB,CAAC,KAAK,QAAQ;oBAExD,IAAI,QAAQ,EAAE;wBACV,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE;AACjC,4BAAA,IAAI,GAAG,CAAC,oBAAoB,CAAC,KAAK,QAAQ,EAAE;gCACxC,QAAQ,GAAG,IAAI;gCACf;4BACJ;wBACJ;oBACJ;oBAEA,IAAI,CAAC,QAAQ,EAAE;AACX,wBAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,CAAA,0BAAA,CAA4B;AACxB,4BAAA,CAAA,8BAAA,EAAiC,IAAI,CAAA,eAAA,CAAiB;AACtD,4BAAA,CAAA,iCAAA,EAAoC,IAAI,CAAA,UAAA,CAAY;4BACpD,CAAA,sCAAA,EAAyC,IAAI,CAAA,oBAAA,CAAsB,CAC1E;oBACL;AACA,oBAAA,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBACxB;AAEA,gBAAA,OAAO,SAAS;YACpB,CAAC;;;;AAKD,YAAA,OAAO,CAAC,OAAO,EAAA;AACX,gBAAA,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC;YACtC,CAAC;;YAGD,GAAG,CAAC,OAAO,EAAE,IAAqB,EAAA;gBAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;AAAE,oBAAA,OAAO,KAAK;gBAC1C,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3C,CAAC;AACJ,SAAA,CAAC;AAEF,QAAA,IAAI;AACA,YAAA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE;AAClC,gBAAA,KAAK,EAAE,SAAS;AAChB,gBAAA,QAAQ,EAAE,KAAK;AACf,gBAAA,YAAY,EAAE,IAAI;AAClB,gBAAA,UAAU,EAAE,IAAI;AACnB,aAAA,CAAC;QACN;AAAE,QAAA,MAAM;;;;;QAKR;IACJ;IAEQ,mBAAmB,GAAA;AACvB,QAAA,MAAM,UAAU,GAAGN,qCAAoB,EAAE;AACzC,QAAA,MAAM,OAAO,GAAI,UAAkB,CAAC,OAAO,EAAE,QAAQ;AACrD,QAAA,OAAO,CAAC,CAAC,UAAU,IAAI,UAAU,KAAK,OAAO;IACjD;AACH;;;;"}
|
|
@@ -11,7 +11,35 @@
|
|
|
11
11
|
// ---------------------------------------------------------------------------
|
|
12
12
|
const XY_ENV_STORE_KEY = Symbol("__xy_env_store__");
|
|
13
13
|
const XY_XHSC_REGISTER_FS = Symbol("__xy_xhsc_register_fs__");
|
|
14
|
+
/**
|
|
15
|
+
* **Internal Root-Scoped Env Access Key**
|
|
16
|
+
*
|
|
17
|
+
* Used exclusively by internal engine modules (such as `ProjectDiscovery.loadXyConfig`)
|
|
18
|
+
* to resolve configuration references `&(env:...)` within a target project context.
|
|
19
|
+
*
|
|
20
|
+
* **Security Decision:**
|
|
21
|
+
* Previously, this capability was exposed as a public method `__sys__.__env__.getForRoot(key, root)`.
|
|
22
|
+
* That allowed third-party plugins in `node_modules` to pass the host project's root (`process.cwd()`
|
|
23
|
+
* or `__sys__._primaryRoot`), completely bypassing caller-isolated Zero-Trust sandboxing.
|
|
24
|
+
* Moving this method behind an unexported module `Symbol` prevents external code from invoking it.
|
|
25
|
+
*
|
|
26
|
+
* @internal
|
|
27
|
+
*/
|
|
14
28
|
const XY_ENV_INTERNAL_GET_FOR_ROOT = Symbol("__xy_env_internal_get_for_root__");
|
|
29
|
+
/**
|
|
30
|
+
* **Internal Security Shield Configuration Key**
|
|
31
|
+
*
|
|
32
|
+
* Used exclusively during framework startup (`xhsc.ts`) to apply declarative
|
|
33
|
+
* XESS shield rules configured in `xypriss.config.json(c)`.
|
|
34
|
+
*
|
|
35
|
+
* **Security Decision:**
|
|
36
|
+
* Exposing `configureShield` as a public method on `__sys__.__env__` created a critical vulnerability,
|
|
37
|
+
* allowing untrusted plugins to dynamically modify the whitelist and leak forbidden secrets through
|
|
38
|
+
* `process.env`. Restricting it to this unexported Symbol guarantees that only the engine bootstrap
|
|
39
|
+
* can configure the whitelist.
|
|
40
|
+
*
|
|
41
|
+
* @internal
|
|
42
|
+
*/
|
|
15
43
|
const XY_ENV_CONFIGURE_SHIELD = Symbol("__xy_env_configure_shield__");
|
|
16
44
|
// ---------------------------------------------------------------------------
|
|
17
45
|
// Internal value sanitisation
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"env.js","sources":["../../../../../../src/xhsc/api/env/env.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;MACa,gBAAgB,GAAG,MAAM,CAAC,kBAAkB;MAC5C,mBAAmB,GAAG,MAAM,CAAC,yBAAyB;
|
|
1
|
+
{"version":3,"file":"env.js","sources":["../../../../../../src/xhsc/api/env/env.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;MACa,gBAAgB,GAAG,MAAM,CAAC,kBAAkB;MAC5C,mBAAmB,GAAG,MAAM,CAAC,yBAAyB;AAEnE;;;;;;;;;;;;;AAaG;MACU,4BAA4B,GAAG,MAAM,CAAC,kCAAkC;AAErF;;;;;;;;;;;;;AAaG;MACU,uBAAuB,GAAG,MAAM,CAAC,6BAA6B;AAE3E;AACA;AACA;AACA;AACA;AACA;AAEA;AACO,MAAM,uBAAuB,GAAG;AAgDvC;AACA;AACA;AAEA;;;;;;;;;;;;AAYG;AACG,MAAO,cAAe,SAAQ,KAAK,CAAA;IAIrC,WAAA,CAAY,GAAW,EAAE,MAA2B,EAAA;QAChD,KAAK,CACD,MAAM,KAAK;cACL,CAAA,sBAAA,EAAyB,GAAG,CAAA,sCAAA,CAAwC;AAChE,gBAAA,CAAA,yBAAA,EAA4B,GAAG,CAAA,mCAAA;cACnC,CAAA,+BAAA,EAAkC,GAAG,CAAA,kBAAA,CAAoB;AACrD,gBAAA,CAAA,gEAAA,CAAkE,CAC/E;AACD,QAAA,IAAI,CAAC,IAAI,GAAG,gBAAgB;AAC5B,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;QACd,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC;IACzD;AACH;AAED;;;;;;;;;;;;AAYG;AACG,MAAO,WAAY,SAAQ,KAAK,CAAA;IAGlC,WAAA,CAAY,GAAW,EAAE,MAAc,EAAA;AACnC,QAAA,KAAK,CAAC,CAAA,8BAAA,EAAiC,GAAG,MAAM,MAAM,CAAA,CAAE,CAAC;AACzD,QAAA,IAAI,CAAC,IAAI,GAAG,aAAa;AACzB,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;QACd,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC;IACtD;AACH;AAED;;;;;;AAMG;AACG,MAAO,aAAc,SAAQ,KAAK,CAAA;AACpC,IAAA,WAAA,GAAA;AACI,QAAA,KAAK,CACD,0DAA0D;AACtD,YAAA,4EAA4E,CACnF;AACD,QAAA,IAAI,CAAC,IAAI,GAAG,eAAe;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC;IACxD;AACH;;;;;;;;;;;"}
|
|
@@ -196,6 +196,10 @@ const DEFAULT_OPTIONS = {
|
|
|
196
196
|
".json",
|
|
197
197
|
],
|
|
198
198
|
useTempFiles: true,
|
|
199
|
+
/**
|
|
200
|
+
* Resolved lazily at runtime via XyPriss's native System API (`getSysApi().path.tmpUserDir`)
|
|
201
|
+
* once `__sys__` is initialized, deliberately avoiding reliance on Node.js core modules (`node:os`).
|
|
202
|
+
*/
|
|
199
203
|
get tempFileDir() {
|
|
200
204
|
return getSysApi().path.tmpUserDir + "/.uploads/";
|
|
201
205
|
},
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"default.js","sources":["../../../../../src/server/const/default.ts"],"sourcesContent":[null],"names":["path"],"mappings":";;;;;;;AAAA;;;;AAIG;AAUI,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI;AACjD,MAAM,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI;AAE7D;AACO,MAAM,eAAe,GAAkB;AAC1C,IAAA,WAAW,EAAE;AACT,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,SAAS,EAAE,GAAG;AACd,QAAA,iBAAiB,EAAE,IAAI;AACvB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,WAAW,EAAE,KAAK;AACrB,KAAA;AACD,IAAA,MAAM,EAAE;AACJ,QAAA,gBAAgB,EAAE,IAAI;QACtB,IAAI,EAAE,YAAY;AAClB,QAAA,SAAS,EAAE,MAAM;AACjB,QAAA,eAAe,EAAE,MAAM;AACvB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,IAAI,EAAE,YAAY;AAClB,QAAA,IAAI,EAAE,IAAI;;;;;AAKV,QAAA,UAAU,EAAE,EAAE;AACd,QAAA,cAAc,EAAE;AACZ,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,WAAW,EAAE,EAAE;AACf,YAAA,QAAQ,EAAE,QAAQ;AACrB,SAAA;AACD,QAAA,gBAAgB,EAAE,IAAI;AAEtB,QAAA,IAAI,EAAE;AACF,YAAA,MAAM,EAAE,IAAI;YACZ,IAAI,EAAEA,aAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC;YAC/C,MAAM,EAAE,kBAAkB;YAC1B,YAAY,EAAE,IAAI;AAClB,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,QAAQ,EAAE,SAAS;AACnB,YAAA,OAAO,EAAE,+BAA+B;AACxC,YAAA,aAAa,EAAE;AACX,gBAAA,QAAQ,EAAE,IAAI;AACd,gBAAA,QAAQ,EAAE,QAAQ;AAClB,gBAAA,MAAM,EAAE,IAAI;AACZ,gBAAA,MAAM,EAAE,KAAK;AAChB,aAAA;YACD,WAAW,EAAE,KAAK;AACrB,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE,qBAAqB;AAC9B,IAAA,QAAQ,EAAE;AACN,QAAA,IAAI,EAAE,QAAQ;AACd,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,UAAU,EAAE,GAAG;AAClB,KAAA;AAED,IAAA,eAAe,EAAE;AACb,QAAA,OAAO,EAAE,KAAK;AACjB,KAAA;AACD,IAAA,OAAO,EAAE;QACL,OAAO,EAAE,KAAK;AACd,QAAA,OAAO,EAAE,MAAM;AACf,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,SAAS,EAAE;AACP,YAAA,YAAY,EAAE;AACV,gBAAA,OAAO,EAAE,IAAI;AACb,gBAAA,WAAW,EAAE,IAAI;AACjB,gBAAA,UAAU,EAAE,IAAI;AACnB,aAAA;AACJ,SAAA;AACJ,KAAA;AACD,IAAA,KAAK,EAAE;QACH,QAAQ,EAAE,QAAQ;AAClB,QAAA,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QAC1B,GAAG,EAAE,MAAM;AACX,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;YACJ,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,KAAK;AACnB,SAAA;AACJ,KAAA;AACD,IAAA,QAAQ,EAAE;AACN,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,KAAK,EAAE,UAAU;AACjB,QAAA,IAAI,EAAE;AACF,YAAA,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;AAC1C,YAAA,UAAU,EAAE,UAAU;AACtB,YAAA,aAAa,EAAE;AACX,gBAAA,QAAQ,EAAE,IAAI;AACd,gBAAA,QAAQ,EAAE,QAAQ;AACrB,aAAA;AACD,YAAA,kBAAkB,EAAE,IAAI;AAC3B,SAAA;AACD,QAAA,mBAAmB,EAAE;AACjB,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,IAAI,EAAE,OAAO;AAChB,SAAA;AACD,QAAA,WAAW,EAAE,KAAK;AAClB,QAAA,MAAM,EAAE,iBAAiB;AACzB,QAAA,YAAY,EAAE,IAAI;AAClB,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,aAAa,EAAE,KAAK;AACpB;;;AAGG;AACH,QAAA,GAAG,EAAE,KAAK;AACV,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,IAAI,EAAE;YACF,MAAM,EAAE,GAAG;AACX,YAAA,WAAW,EAAE,IAAI;AACjB,YAAA,OAAO,EAAE;gBACL,KAAK;gBACL,MAAM;gBACN,KAAK;gBACL,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,SAAS;AACZ,aAAA;AACD,YAAA,cAAc,EAAE;gBACZ,cAAc;gBACd,eAAe;gBACf,kBAAkB;gBAClB,QAAQ;gBACR,QAAQ;gBACR,+BAA+B;gBAC/B,gCAAgC;gBAChC,cAAc;gBACd,cAAc;gBACd,gBAAgB;gBAChB,cAAc;gBACd,sBAAsB;AACzB,aAAA;AACJ,SAAA;AACD,QAAA,SAAS,EAAE;AACP,YAAA,GAAG,EAAE,EAAE;AACP,YAAA,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;AACxB,YAAA,eAAe,EAAE,KAAK;AACtB,YAAA,OAAO,EACH,yHAAyH;YAC7H,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC;AAC7D,SAAA;AAED,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,QAAQ,EAAE;AACN,YAAA,OAAO,EAAE,KAAK;AACjB,SAAA;AACJ,KAAA;AACD,IAAA,iBAAiB,EAAE;AACf,QAAA,OAAO,EAAE;AACL,YAAA,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,KAAK;AACrB,YAAA,iBAAiB,EAAE,KAAK;AACxB,YAAA,YAAY,EACR,uHAAuH;AAC9H,SAAA;AACD,QAAA,OAAO,EAAE;YACL,WAAW,EAAE,QAAQ;AACxB,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,KAAK;AACd,QAAA,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;AAC7B,QAAA,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,MAAM;AACf,QAAA,iBAAiB,EAAE;YACf,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,OAAO;YACP,MAAM;YACN,KAAK;YACL,MAAM;YACN,OAAO;YACP,OAAO;AACV,SAAA;AACD,QAAA,YAAY,EAAE,IAAI;AAClB,QAAA,IAAI,WAAW,GAAA;YACX,OAAO,SAAS,EAAE,CAAC,IAAI,CAAC,UAAU,GAAG,YAAY;QACrD,CAAC;AACD,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,MAAM,EAAE;AACJ,YAAA,aAAa,EAAE,GAAG;AAClB,YAAA,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;AAC3B,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;AACJ,YAAA,kBAAkB,EAAE,MAAM;AAC1B,YAAA,EAAE,EAAE;AACA,gBAAA,GAAG,EAAE,MAAM;AACX,gBAAA,GAAG,EAAE,MAAM;AACd,aAAA;AACD,YAAA,GAAG,EAAE;AACD,gBAAA,GAAG,EAAE,MAAM;AACX,gBAAA,GAAG,EAAE,MAAM;AACd,aAAA;AACJ,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE;;AAEL,QAAA,UAAU,EAAE;AACR,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,KAAK,EAAE;gBACH,OAAO,EAAE,KAAK;AACd,gBAAA,oBAAoB,EAAE,GAAG;AACzB,gBAAA,iBAAiB,EAAE,KAAK;AACxB,gBAAA,UAAU,EAAE,KAAK;AACpB,aAAA;AACD,YAAA,SAAS,EAAE;AACP,gBAAA,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,GAAG;AACnB,aAAA;AACD,YAAA,cAAc,EAAE;AACZ,gBAAA,cAAc,EAAE,IAAI;gBACpB,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,KAAK;AACrB,aAAA;AACJ,SAAA;;AAGD,QAAA,WAAW,EAAE;AACT,YAAA,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;YAC7C,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI;AACf,YAAA,YAAY,EAAE;gBACV,WAAW;gBACX,UAAU;gBACV,iBAAiB;gBACjB,wBAAwB;gBACxB,kBAAkB;gBAClB,iBAAiB;gBACjB,UAAU;gBACV,YAAY;gBACZ,eAAe;AAClB,aAAA;YACD,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,EAAE;AACjB,SAAA;;AAGD,QAAA,SAAS,EAAE;YACP,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,gBAAgB;AAC1B,YAAA,MAAM,EAAE;gBACJ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,IAAI;AACf,aAAA;AACD,YAAA,KAAK,EAAE;gBACH,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,IAAI;AACf,aAAA;AACD,YAAA,OAAO,EAAE;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,aAAa;AACxB,aAAA;AACJ,SAAA;;AAGD,QAAA,KAAK,EAAE;AACH,YAAA,OAAO,EAAE,KAAK;AACd,YAAA,SAAS,EAAE,EAAE;AACb,YAAA,aAAa,EAAE,aAAa;AAC5B,YAAA,WAAW,EAAE;AACT,gBAAA,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,IAAI;AACb,gBAAA,IAAI,EAAE,SAAS;gBACf,kBAAkB,EAAE,CAAC;gBACrB,gBAAgB,EAAE,CAAC;AACtB,aAAA;YACD,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;AACjB,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE;QACL,uBAAuB,EAAE,KAAK;AAC9B,QAAA,iBAAiB,EAAE;YACf,OAAO,EAAE,KAAK;YACd,gBAAgB,EAAE,MAAM;YACxB,qBAAqB,EAAE,GAAG;YAC1B,gBAAgB,EAAE,OAAO;AACzB,YAAA,gBAAgB,EAAE,IAAI;AACtB,YAAA,gBAAgB,EAAE,KAAK;AACvB,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACD,QAAA,iBAAiB,EAAE;AACf,YAAA,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,EAAE;YACnB,qBAAqB,EAAE,IAAI;AAC3B,YAAA,gBAAgB,EAAE,CAAC;YACnB,cAAc,EAAE,QAAQ;AACxB,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,WAAW,EAAE,KAAK;AACrB,SAAA;QACD,QAAQ,EAAE,EAAE;AACf,KAAA;;;;;"}
|
|
1
|
+
{"version":3,"file":"default.js","sources":["../../../../../src/server/const/default.ts"],"sourcesContent":[null],"names":["path"],"mappings":";;;;;;;AAAA;;;;AAIG;AAUI,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI;AACjD,MAAM,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI;AAE7D;AACO,MAAM,eAAe,GAAkB;AAC1C,IAAA,WAAW,EAAE;AACT,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,SAAS,EAAE,GAAG;AACd,QAAA,iBAAiB,EAAE,IAAI;AACvB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,WAAW,EAAE,KAAK;AACrB,KAAA;AACD,IAAA,MAAM,EAAE;AACJ,QAAA,gBAAgB,EAAE,IAAI;QACtB,IAAI,EAAE,YAAY;AAClB,QAAA,SAAS,EAAE,MAAM;AACjB,QAAA,eAAe,EAAE,MAAM;AACvB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,IAAI,EAAE,YAAY;AAClB,QAAA,IAAI,EAAE,IAAI;;;;;AAKV,QAAA,UAAU,EAAE,EAAE;AACd,QAAA,cAAc,EAAE;AACZ,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,WAAW,EAAE,EAAE;AACf,YAAA,QAAQ,EAAE,QAAQ;AACrB,SAAA;AACD,QAAA,gBAAgB,EAAE,IAAI;AAEtB,QAAA,IAAI,EAAE;AACF,YAAA,MAAM,EAAE,IAAI;YACZ,IAAI,EAAEA,aAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC;YAC/C,MAAM,EAAE,kBAAkB;YAC1B,YAAY,EAAE,IAAI;AAClB,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,QAAQ,EAAE,SAAS;AACnB,YAAA,OAAO,EAAE,+BAA+B;AACxC,YAAA,aAAa,EAAE;AACX,gBAAA,QAAQ,EAAE,IAAI;AACd,gBAAA,QAAQ,EAAE,QAAQ;AAClB,gBAAA,MAAM,EAAE,IAAI;AACZ,gBAAA,MAAM,EAAE,KAAK;AAChB,aAAA;YACD,WAAW,EAAE,KAAK;AACrB,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE,qBAAqB;AAC9B,IAAA,QAAQ,EAAE;AACN,QAAA,IAAI,EAAE,QAAQ;AACd,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,UAAU,EAAE,GAAG;AAClB,KAAA;AAED,IAAA,eAAe,EAAE;AACb,QAAA,OAAO,EAAE,KAAK;AACjB,KAAA;AACD,IAAA,OAAO,EAAE;QACL,OAAO,EAAE,KAAK;AACd,QAAA,OAAO,EAAE,MAAM;AACf,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,SAAS,EAAE;AACP,YAAA,YAAY,EAAE;AACV,gBAAA,OAAO,EAAE,IAAI;AACb,gBAAA,WAAW,EAAE,IAAI;AACjB,gBAAA,UAAU,EAAE,IAAI;AACnB,aAAA;AACJ,SAAA;AACJ,KAAA;AACD,IAAA,KAAK,EAAE;QACH,QAAQ,EAAE,QAAQ;AAClB,QAAA,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QAC1B,GAAG,EAAE,MAAM;AACX,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;YACJ,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,KAAK;AACnB,SAAA;AACJ,KAAA;AACD,IAAA,QAAQ,EAAE;AACN,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,KAAK,EAAE,UAAU;AACjB,QAAA,IAAI,EAAE;AACF,YAAA,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;AAC1C,YAAA,UAAU,EAAE,UAAU;AACtB,YAAA,aAAa,EAAE;AACX,gBAAA,QAAQ,EAAE,IAAI;AACd,gBAAA,QAAQ,EAAE,QAAQ;AACrB,aAAA;AACD,YAAA,kBAAkB,EAAE,IAAI;AAC3B,SAAA;AACD,QAAA,mBAAmB,EAAE;AACjB,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,IAAI,EAAE,OAAO;AAChB,SAAA;AACD,QAAA,WAAW,EAAE,KAAK;AAClB,QAAA,MAAM,EAAE,iBAAiB;AACzB,QAAA,YAAY,EAAE,IAAI;AAClB,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,aAAa,EAAE,KAAK;AACpB;;;AAGG;AACH,QAAA,GAAG,EAAE,KAAK;AACV,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,IAAI,EAAE;YACF,MAAM,EAAE,GAAG;AACX,YAAA,WAAW,EAAE,IAAI;AACjB,YAAA,OAAO,EAAE;gBACL,KAAK;gBACL,MAAM;gBACN,KAAK;gBACL,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,SAAS;AACZ,aAAA;AACD,YAAA,cAAc,EAAE;gBACZ,cAAc;gBACd,eAAe;gBACf,kBAAkB;gBAClB,QAAQ;gBACR,QAAQ;gBACR,+BAA+B;gBAC/B,gCAAgC;gBAChC,cAAc;gBACd,cAAc;gBACd,gBAAgB;gBAChB,cAAc;gBACd,sBAAsB;AACzB,aAAA;AACJ,SAAA;AACD,QAAA,SAAS,EAAE;AACP,YAAA,GAAG,EAAE,EAAE;AACP,YAAA,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;AACxB,YAAA,eAAe,EAAE,KAAK;AACtB,YAAA,OAAO,EACH,yHAAyH;YAC7H,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC;AAC7D,SAAA;AAED,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,QAAQ,EAAE;AACN,YAAA,OAAO,EAAE,KAAK;AACjB,SAAA;AACJ,KAAA;AACD,IAAA,iBAAiB,EAAE;AACf,QAAA,OAAO,EAAE;AACL,YAAA,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,KAAK;AACrB,YAAA,iBAAiB,EAAE,KAAK;AACxB,YAAA,YAAY,EACR,uHAAuH;AAC9H,SAAA;AACD,QAAA,OAAO,EAAE;YACL,WAAW,EAAE,QAAQ;AACxB,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,KAAK;AACd,QAAA,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;AAC7B,QAAA,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,MAAM;AACf,QAAA,iBAAiB,EAAE;YACf,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,OAAO;YACP,MAAM;YACN,KAAK;YACL,MAAM;YACN,OAAO;YACP,OAAO;AACV,SAAA;AACD,QAAA,YAAY,EAAE,IAAI;AAClB;;;AAGG;AACH,QAAA,IAAI,WAAW,GAAA;YACX,OAAO,SAAS,EAAE,CAAC,IAAI,CAAC,UAAU,GAAG,YAAY;QACrD,CAAC;AACD,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,MAAM,EAAE;AACJ,YAAA,aAAa,EAAE,GAAG;AAClB,YAAA,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;AAC3B,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;AACJ,YAAA,kBAAkB,EAAE,MAAM;AAC1B,YAAA,EAAE,EAAE;AACA,gBAAA,GAAG,EAAE,MAAM;AACX,gBAAA,GAAG,EAAE,MAAM;AACd,aAAA;AACD,YAAA,GAAG,EAAE;AACD,gBAAA,GAAG,EAAE,MAAM;AACX,gBAAA,GAAG,EAAE,MAAM;AACd,aAAA;AACJ,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE;;AAEL,QAAA,UAAU,EAAE;AACR,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,KAAK,EAAE;gBACH,OAAO,EAAE,KAAK;AACd,gBAAA,oBAAoB,EAAE,GAAG;AACzB,gBAAA,iBAAiB,EAAE,KAAK;AACxB,gBAAA,UAAU,EAAE,KAAK;AACpB,aAAA;AACD,YAAA,SAAS,EAAE;AACP,gBAAA,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,GAAG;AACnB,aAAA;AACD,YAAA,cAAc,EAAE;AACZ,gBAAA,cAAc,EAAE,IAAI;gBACpB,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,KAAK;AACrB,aAAA;AACJ,SAAA;;AAGD,QAAA,WAAW,EAAE;AACT,YAAA,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;YAC7C,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI;AACf,YAAA,YAAY,EAAE;gBACV,WAAW;gBACX,UAAU;gBACV,iBAAiB;gBACjB,wBAAwB;gBACxB,kBAAkB;gBAClB,iBAAiB;gBACjB,UAAU;gBACV,YAAY;gBACZ,eAAe;AAClB,aAAA;YACD,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,EAAE;AACjB,SAAA;;AAGD,QAAA,SAAS,EAAE;YACP,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,gBAAgB;AAC1B,YAAA,MAAM,EAAE;gBACJ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,IAAI;AACf,aAAA;AACD,YAAA,KAAK,EAAE;gBACH,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,IAAI;AACf,aAAA;AACD,YAAA,OAAO,EAAE;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,aAAa;AACxB,aAAA;AACJ,SAAA;;AAGD,QAAA,KAAK,EAAE;AACH,YAAA,OAAO,EAAE,KAAK;AACd,YAAA,SAAS,EAAE,EAAE;AACb,YAAA,aAAa,EAAE,aAAa;AAC5B,YAAA,WAAW,EAAE;AACT,gBAAA,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,IAAI;AACb,gBAAA,IAAI,EAAE,SAAS;gBACf,kBAAkB,EAAE,CAAC;gBACrB,gBAAgB,EAAE,CAAC;AACtB,aAAA;YACD,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;AACjB,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE;QACL,uBAAuB,EAAE,KAAK;AAC9B,QAAA,iBAAiB,EAAE;YACf,OAAO,EAAE,KAAK;YACd,gBAAgB,EAAE,MAAM;YACxB,qBAAqB,EAAE,GAAG;YAC1B,gBAAgB,EAAE,OAAO;AACzB,YAAA,gBAAgB,EAAE,IAAI;AACtB,YAAA,gBAAgB,EAAE,KAAK;AACvB,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACD,QAAA,iBAAiB,EAAE;AACf,YAAA,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,EAAE;YACnB,qBAAqB,EAAE,IAAI;AAC3B,YAAA,gBAAgB,EAAE,CAAC;YACnB,cAAc,EAAE,QAAQ;AACxB,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,WAAW,EAAE,KAAK;AACrB,SAAA;QACD,QAAQ,EAAE,EAAE;AACf,KAAA;;;;;"}
|
|
@@ -170,6 +170,8 @@ function loadXyConfig(projectRoot) {
|
|
|
170
170
|
}
|
|
171
171
|
// Resolve references &(pkg), &(env), etc.
|
|
172
172
|
const sys = globalThis.__sys__;
|
|
173
|
+
// Safely resolve &(env:...) variables scoped to the target project root
|
|
174
|
+
// using the internal symbol (safe from third-party / plugin tampering).
|
|
173
175
|
let envProvider = sys?.__env__;
|
|
174
176
|
if (sys?.__env__?.[XY_ENV_INTERNAL_GET_FOR_ROOT]) {
|
|
175
177
|
envProvider = {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ProjectDiscovery.js","sources":["../../../../src/utils/ProjectDiscovery.ts"],"sourcesContent":[null],"names":["path","fs"],"mappings":";;;;;AAKA;;;;;AAKG;AACG,SAAU,aAAa,CAAC,GAAW,EAAA;IACrC,MAAM,OAAO,GAAGA,aAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;AAC9C,IAAA,IAAI,CAACC,WAAE,CAAC,UAAU,CAAC,OAAO,CAAC;AAAE,QAAA,OAAO,KAAK;;AAGzC,IAAA,MAAM,cAAc,GAAGA,WAAE,CAAC,UAAU,CAACD,aAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;AACpE,IAAA,MAAM,WAAW,GAAGC,WAAE,CAAC,UAAU,CAACD,aAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;AAClE,IAAA,MAAM,MAAM,GAAGC,WAAE,CAAC,UAAU,CAACD,aAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACnD,IAAA,MAAM,WAAW,GACbC,WAAE,CAAC,UAAU,CAACD,aAAI,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;AACpD,QAAAC,WAAE,CAAC,UAAU,CAACD,aAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAEzD,IAAI,cAAc,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,CAAC;AAAE,QAAA,OAAO,IAAI;;;;AAKzE,IAAA,IAAI;QACA,MAAM,MAAM,GAAGC,WAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;;AAEhD,QAAA,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;AAC9B,YAAA,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO;AAAE,gBAAA,OAAO,IAAI;QAC5C;IACJ;AAAE,IAAA,MAAM;;IAER;AAEA,IAAA,OAAO,KAAK;AAChB;AAEA;;AAEG;AACG,SAAU,mBAAmB,CAAC,QAAgB,EAAA;;IAEhD,IAAI,CAACD,aAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;AAC5B,QAAA,IAAI;AACA,YAAA,QAAQ,GAAGA,aAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrC;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,SAAS;QACpB;IACJ;AAEA,IAAA,IAAI,CAACC,WAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;AAAE,QAAA,OAAO,SAAS;IAE9C,IAAI,OAAO,GAAGD,aAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;IACpC,MAAM,aAAa,GAAGA,aAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI;AAE9C,IAAA,OAAO,OAAO,KAAK,aAAa,EAAE;AAC9B,QAAA,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE;AACxB,YAAA,OAAO,OAAO;QAClB;AACA,QAAA,OAAO,GAAGA,aAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACnC;AAEA,IAAA,OAAO,SAAS;AACpB;AASA;;AAEG;SACa,oBAAoB,GAAA;AAChC,IAAA,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,KAAK;AAC/B,IAAA,IAAI,CAAC,KAAK;AAAE,QAAA,OAAO,SAAS;IAE5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;IAC/B,IAAI,cAAc,GAAG,EAAE;;AAIvB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACnC,QAAA,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC;AACrB,QAAA,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC9D;;;AAIJ,QAAA,MAAM,KAAK,GACP,IAAI,CAAC,KAAK,CAAC,mCAAmC,CAAC;AAC/C,YAAA,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC;AAElD,QAAA,IAAI,CAAC,KAAK;YAAE;AAEZ,QAAA,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS;YAC5D;;;;AAKJ,QAAA,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE;YAE5B;QACJ;;AAGA,QAAA,IACI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;AACzB,YAAA,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AAC/B,YAAA,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;AAC3B,YAAA,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAExB;QAEJ,cAAc,GAAG,QAAQ;QACzB;IACJ;AAEA,IAAA,IAAI,CAAC,cAAc;AAAE,QAAA,OAAO,SAAS;AAErC,IAAA,MAAM,IAAI,GAAG,mBAAmB,CAAC,cAAc,CAAC;AAKhD,IAAA,OAAO,IAAI;AACf;AAEA;;;AAGG;AACG,SAAU,gBAAgB,CAAC,QAAgB,EAAA;AAC7C,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,KAAK;IAC3B,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;;AAGnD,IAAA,IACI,cAAc,CAAC,QAAQ,CAAC,eAAe,CAAC;AACxC,QAAA,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AACzC,QAAA,cAAc,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EACnD;;;;AAIE,QAAA,OAAO,IAAI;IACf;AAEA,IAAA,OAAO,KAAK;AAChB;AAEA;;;;AAIG;AACG,SAAU,mBAAmB,CAAC,QAAgB,EAAA;AAChD,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,KAAK;;IAG3B,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;;;AAInD,IAAA,IAAI,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AAAE,QAAA,OAAO,IAAI;;AAG1D,IAAA,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAAE,QAAA,OAAO,KAAK;;AAGnD,IAAA,OAAO,gBAAgB,CAAC,QAAQ,CAAC;AACrC;AAwGA;;;AAGG;AACG,SAAU,YAAY,CAAC,WAAmB,EAAA;IAC5C,KAAK,MAAM,IAAI,IAAI,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,EAAE;QAChE,MAAM,UAAU,GAAGA,aAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC;AAC/C,QAAA,IAAIC,WAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE;AAC3B,YAAA,IAAI;gBACA,MAAM,GAAG,GAAGA,WAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC;gBAChD,MAAM,KAAK,GAAG;qBACT,OAAO,CACJ,8CAA8C,EAC9C,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;qBAEzB,OAAO,CAAC,kCAAkC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,KACnD,EAAE,GAAG,EAAE,GAAG,EAAE,CACf;gBAEL,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;;gBAGjC,IAAI,OAAO,GAAG,IAAI;gBAClB,MAAM,OAAO,GAAGD,aAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC;AACtD,gBAAA,IAAIC,WAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AACxB,oBAAA,IAAI;AACA,wBAAA,OAAO,GAAG,IAAI,CAAC,KAAK,CAACA,WAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC3D;AAAE,oBAAA,MAAM,eAAe;gBAC3B;;AAGA,gBAAA,MAAM,GAAG,GAAI,UAAkB,CAAC,OAAO
|
|
1
|
+
{"version":3,"file":"ProjectDiscovery.js","sources":["../../../../src/utils/ProjectDiscovery.ts"],"sourcesContent":[null],"names":["path","fs"],"mappings":";;;;;AAKA;;;;;AAKG;AACG,SAAU,aAAa,CAAC,GAAW,EAAA;IACrC,MAAM,OAAO,GAAGA,aAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;AAC9C,IAAA,IAAI,CAACC,WAAE,CAAC,UAAU,CAAC,OAAO,CAAC;AAAE,QAAA,OAAO,KAAK;;AAGzC,IAAA,MAAM,cAAc,GAAGA,WAAE,CAAC,UAAU,CAACD,aAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;AACpE,IAAA,MAAM,WAAW,GAAGC,WAAE,CAAC,UAAU,CAACD,aAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;AAClE,IAAA,MAAM,MAAM,GAAGC,WAAE,CAAC,UAAU,CAACD,aAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACnD,IAAA,MAAM,WAAW,GACbC,WAAE,CAAC,UAAU,CAACD,aAAI,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;AACpD,QAAAC,WAAE,CAAC,UAAU,CAACD,aAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAEzD,IAAI,cAAc,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,CAAC;AAAE,QAAA,OAAO,IAAI;;;;AAKzE,IAAA,IAAI;QACA,MAAM,MAAM,GAAGC,WAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;;AAEhD,QAAA,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;AAC9B,YAAA,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO;AAAE,gBAAA,OAAO,IAAI;QAC5C;IACJ;AAAE,IAAA,MAAM;;IAER;AAEA,IAAA,OAAO,KAAK;AAChB;AAEA;;AAEG;AACG,SAAU,mBAAmB,CAAC,QAAgB,EAAA;;IAEhD,IAAI,CAACD,aAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;AAC5B,QAAA,IAAI;AACA,YAAA,QAAQ,GAAGA,aAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrC;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,SAAS;QACpB;IACJ;AAEA,IAAA,IAAI,CAACC,WAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;AAAE,QAAA,OAAO,SAAS;IAE9C,IAAI,OAAO,GAAGD,aAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;IACpC,MAAM,aAAa,GAAGA,aAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI;AAE9C,IAAA,OAAO,OAAO,KAAK,aAAa,EAAE;AAC9B,QAAA,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE;AACxB,YAAA,OAAO,OAAO;QAClB;AACA,QAAA,OAAO,GAAGA,aAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACnC;AAEA,IAAA,OAAO,SAAS;AACpB;AASA;;AAEG;SACa,oBAAoB,GAAA;AAChC,IAAA,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,KAAK;AAC/B,IAAA,IAAI,CAAC,KAAK;AAAE,QAAA,OAAO,SAAS;IAE5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;IAC/B,IAAI,cAAc,GAAG,EAAE;;AAIvB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACnC,QAAA,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC;AACrB,QAAA,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC9D;;;AAIJ,QAAA,MAAM,KAAK,GACP,IAAI,CAAC,KAAK,CAAC,mCAAmC,CAAC;AAC/C,YAAA,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC;AAElD,QAAA,IAAI,CAAC,KAAK;YAAE;AAEZ,QAAA,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS;YAC5D;;;;AAKJ,QAAA,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE;YAE5B;QACJ;;AAGA,QAAA,IACI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;AACzB,YAAA,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AAC/B,YAAA,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;AAC3B,YAAA,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAExB;QAEJ,cAAc,GAAG,QAAQ;QACzB;IACJ;AAEA,IAAA,IAAI,CAAC,cAAc;AAAE,QAAA,OAAO,SAAS;AAErC,IAAA,MAAM,IAAI,GAAG,mBAAmB,CAAC,cAAc,CAAC;AAKhD,IAAA,OAAO,IAAI;AACf;AAEA;;;AAGG;AACG,SAAU,gBAAgB,CAAC,QAAgB,EAAA;AAC7C,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,KAAK;IAC3B,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;;AAGnD,IAAA,IACI,cAAc,CAAC,QAAQ,CAAC,eAAe,CAAC;AACxC,QAAA,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AACzC,QAAA,cAAc,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EACnD;;;;AAIE,QAAA,OAAO,IAAI;IACf;AAEA,IAAA,OAAO,KAAK;AAChB;AAEA;;;;AAIG;AACG,SAAU,mBAAmB,CAAC,QAAgB,EAAA;AAChD,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,KAAK;;IAG3B,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;;;AAInD,IAAA,IAAI,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AAAE,QAAA,OAAO,IAAI;;AAG1D,IAAA,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAAE,QAAA,OAAO,KAAK;;AAGnD,IAAA,OAAO,gBAAgB,CAAC,QAAQ,CAAC;AACrC;AAwGA;;;AAGG;AACG,SAAU,YAAY,CAAC,WAAmB,EAAA;IAC5C,KAAK,MAAM,IAAI,IAAI,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,EAAE;QAChE,MAAM,UAAU,GAAGA,aAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC;AAC/C,QAAA,IAAIC,WAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE;AAC3B,YAAA,IAAI;gBACA,MAAM,GAAG,GAAGA,WAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC;gBAChD,MAAM,KAAK,GAAG;qBACT,OAAO,CACJ,8CAA8C,EAC9C,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;qBAEzB,OAAO,CAAC,kCAAkC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,KACnD,EAAE,GAAG,EAAE,GAAG,EAAE,CACf;gBAEL,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;;gBAGjC,IAAI,OAAO,GAAG,IAAI;gBAClB,MAAM,OAAO,GAAGD,aAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC;AACtD,gBAAA,IAAIC,WAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AACxB,oBAAA,IAAI;AACA,wBAAA,OAAO,GAAG,IAAI,CAAC,KAAK,CAACA,WAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC3D;AAAE,oBAAA,MAAM,eAAe;gBAC3B;;AAGA,gBAAA,MAAM,GAAG,GAAI,UAAkB,CAAC,OAAO;;;AAIvC,gBAAA,IAAI,WAAW,GAAG,GAAG,EAAE,OAAO;gBAC9B,IAAI,GAAG,EAAE,OAAO,GAAG,4BAA4B,CAAC,EAAE;AAC9C,oBAAA,WAAW,GAAG;AACV,wBAAA,GAAG,EAAE,CAAC,GAAW,KAAK,GAAG,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,SAAS;AAC/F,wBAAA,GAAG,EAAE,CAAC,GAAW,KAAK,GAAG,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,GAAG,EAAE,WAAW;qBACnF;gBACL;gBAEA,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC;AAC3D,gBAAA,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;YAClC;YAAE,OAAO,CAAC,EAAE;AACR,gBAAA,OAAO,IAAI;YACf;QACJ;IACJ;AACA,IAAA,OAAO,IAAI;AACf;AAEA;;;AAGG;AACG,SAAU,oBAAoB,CAChC,UAAkB,EAClB,UAAkB,EAAA;AAElB,IAAA,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC;AACvC,IAAA,IAAI,CAAC,MAAM;AAAE,QAAA,OAAO,KAAK;IAEzB,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ;AACpD,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,KAAK;AAE3B,IAAA,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC;;IAE3C,OAAO,CAAC,EAAE,cAAc,IAAI,cAAc,CAAC,IAAI,KAAK,QAAQ,CAAC;AACjE;;;;"}
|
|
@@ -18,7 +18,10 @@ function createSecurityShield(target, label = "__sys__") {
|
|
|
18
18
|
return proxyCache.get(obj);
|
|
19
19
|
const handler = {
|
|
20
20
|
get(target, prop, receiver) {
|
|
21
|
-
// Prevent access to internal
|
|
21
|
+
// 🛡️ Zero-Trust Hardening: Prevent reflective access to private/internal state.
|
|
22
|
+
// Prevents malicious plugins from reading host coordinates (e.g., _primaryRoot, _internalRoot)
|
|
23
|
+
// or inspecting internal registries (_pluginMap). Dunder properties (__root__, __env__) remain
|
|
24
|
+
// intentionally accessible as public system contracts.
|
|
22
25
|
if (typeof prop === "string" &&
|
|
23
26
|
prop.startsWith("_") &&
|
|
24
27
|
!prop.startsWith("__")) {
|
|
@@ -27,7 +30,9 @@ function createSecurityShield(target, label = "__sys__") {
|
|
|
27
30
|
return undefined;
|
|
28
31
|
}
|
|
29
32
|
}
|
|
30
|
-
|
|
33
|
+
// Use target as receiver so internal getters can access their own private
|
|
34
|
+
// state (e.g. this._internalRoot) while external access to _ remains blocked.
|
|
35
|
+
const value = Reflect.get(target, prop, target);
|
|
31
36
|
// Prevent Proxy invariant violation
|
|
32
37
|
const desc = Object.getOwnPropertyDescriptor(target, prop);
|
|
33
38
|
if (desc && desc.configurable === false && desc.writable === false) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"SecurityShield.js","sources":["../../../../src/utils/SecurityShield.ts"],"sourcesContent":[null],"names":[],"mappings":"AAAA;;;;;;;;AAQG;SACa,oBAAoB,CAChC,MAAS,EACT,QAAgB,SAAS,EAAA;AAEzB,IAAA,MAAM,UAAU,GAAG,IAAI,OAAO,EAAe;AAE7C,IAAA,SAAS,WAAW,CAAC,GAAQ,EAAE,IAAY,EAAA;QACvC,IACI,GAAG,KAAK,IAAI;aACX,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,UAAU,CAAC,EACxD;AACE,YAAA,OAAO,GAAG;QACd;AAEA,QAAA,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;AAAE,YAAA,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;AAEnD,QAAA,MAAM,OAAO,GAAsB;AAC/B,YAAA,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAA
|
|
1
|
+
{"version":3,"file":"SecurityShield.js","sources":["../../../../src/utils/SecurityShield.ts"],"sourcesContent":[null],"names":[],"mappings":"AAAA;;;;;;;;AAQG;SACa,oBAAoB,CAChC,MAAS,EACT,QAAgB,SAAS,EAAA;AAEzB,IAAA,MAAM,UAAU,GAAG,IAAI,OAAO,EAAe;AAE7C,IAAA,SAAS,WAAW,CAAC,GAAQ,EAAE,IAAY,EAAA;QACvC,IACI,GAAG,KAAK,IAAI;aACX,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,UAAU,CAAC,EACxD;AACE,YAAA,OAAO,GAAG;QACd;AAEA,QAAA,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;AAAE,YAAA,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;AAEnD,QAAA,MAAM,OAAO,GAAsB;AAC/B,YAAA,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAA;;;;;gBAKtB,IACI,OAAO,IAAI,KAAK,QAAQ;AACxB,oBAAA,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;AACpB,oBAAA,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB;oBACE,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC1D,oBAAA,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE;AACjE,wBAAA,OAAO,SAAS;oBACpB;gBACJ;;;AAIA,gBAAA,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC;;gBAG/C,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC1D,gBAAA,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE;AAChE,oBAAA,OAAO,KAAK;gBAChB;;;AAIA,gBAAA,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE;AAC7B,oBAAA,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC7B;gBAEA,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;oBAC7C,MAAM,QAAQ,GACV,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;oBAC7D,OAAO,WAAW,CAAC,KAAK,EAAE,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAE,CAAC;gBACpD;AACA,gBAAA,OAAO,KAAK;YAChB,CAAC;YACD,GAAG,CAAC,MAAM,EAAE,IAAI,EAAA;gBACZ,IACI,OAAO,IAAI,KAAK,QAAQ;AACxB,oBAAA,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;AACpB,oBAAA,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB;AACE,oBAAA,OAAO,KAAK;gBAChB;gBACA,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;YACpC,CAAC;AACD,YAAA,OAAO,CAAC,MAAM,EAAA;AACV,gBAAA,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,KAAI;oBAC1C,IACI,OAAO,GAAG,KAAK,QAAQ;AACvB,wBAAA,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;AACnB,wBAAA,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EACvB;wBACE,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC;wBACzD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,EAAE;AACtC,4BAAA,OAAO,KAAK;wBAChB;oBACJ;AACA,oBAAA,OAAO,IAAI;AACf,gBAAA,CAAC,CAAC;YACN,CAAC;YACD,GAAG,CAAC,MAAM,EAAE,IAAI,EAAA;gBACZ,MAAM,QAAQ,GACV,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACX,CAAA,+CAAA,EAAkD,QAAQ,CAAA,MAAA,EAAS,IAAI,CAAA,sCAAA,CAAwC,CAClH;YACL,CAAC;YACD,cAAc,CAAC,MAAM,EAAE,IAAI,EAAA;gBACvB,MAAM,QAAQ,GACV,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACX,CAAA,0DAAA,EAA6D,QAAQ,CAAA,MAAA,EAAS,IAAI,CAAA,EAAA,CAAI,CACzF;YACL,CAAC;YACD,cAAc,CAAC,MAAM,EAAE,IAAI,EAAA;gBACvB,MAAM,QAAQ,GACV,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACX,CAAA,oDAAA,EAAuD,QAAQ,CAAA,QAAA,EAAW,IAAI,CAAA,EAAA,CAAI,CACrF;YACL,CAAC;SACJ;QAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;AACrC,QAAA,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;AAC1B,QAAA,OAAO,KAAK;IAChB;AAEA,IAAA,OAAO,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;AACrC;;;;"}
|
|
@@ -1,8 +1,9 @@
|
|
|
1
1
|
import { XY_ENV_INTERNAL_GET_FOR_ROOT, EnvAccessError, XY_ENV_CONFIGURE_SHIELD, EnvStoreError, EnvKeyError, FORBIDDEN_VALUE_PATTERN, XY_ENV_STORE_KEY } from './api/env/env.js';
|
|
2
|
-
import { getCallerProjectRoot } from '../utils/ProjectDiscovery.js';
|
|
2
|
+
import { getCallerProjectRoot, isCoreFrameworkPath } from '../utils/ProjectDiscovery.js';
|
|
3
3
|
import path__default from 'path';
|
|
4
4
|
import fs__default from 'fs';
|
|
5
5
|
import { DotEnvLoader } from '../utils/DotEnvLoader.js';
|
|
6
|
+
import { logger } from '../shared/logger/Logger.js';
|
|
6
7
|
|
|
7
8
|
class EnvApi {
|
|
8
9
|
/**
|
|
@@ -123,8 +124,16 @@ class EnvApi {
|
|
|
123
124
|
}
|
|
124
125
|
/**
|
|
125
126
|
* Reads a variable from the secure internal store for a specific root.
|
|
126
|
-
*
|
|
127
|
+
*
|
|
128
|
+
* **Security Note:**
|
|
129
|
+
* Formerly exposed as `getForRoot(key, root)`. It was removed from the public API
|
|
130
|
+
* because it functioned as a zero-trust bypass: plugins could manually pass the host project
|
|
131
|
+
* root and read host secrets. It is now private to the engine and keyed by an internal Symbol.
|
|
132
|
+
*
|
|
127
133
|
* @internal
|
|
134
|
+
* @param key - Variable name to look up.
|
|
135
|
+
* @param root - Absolute project root path.
|
|
136
|
+
* @returns The resolved variable value or undefined.
|
|
128
137
|
*/
|
|
129
138
|
[XY_ENV_INTERNAL_GET_FOR_ROOT](key, root) {
|
|
130
139
|
if (key === "__root__") {
|
|
@@ -294,8 +303,34 @@ class EnvApi {
|
|
|
294
303
|
}
|
|
295
304
|
/**
|
|
296
305
|
* Configures the XESS (XyPriss Environment Security Shield) dynamically.
|
|
297
|
-
*
|
|
306
|
+
*
|
|
307
|
+
* **Security Enforcement:**
|
|
308
|
+
* Only the host application and internal engine are authorized to invoke this method.
|
|
309
|
+
* Invocations from third-party plugins in `node_modules` or foreign project roots
|
|
310
|
+
* are strictly blocked to prevent malicious tampering with the `process.env` whitelist.
|
|
311
|
+
*
|
|
312
|
+
* @deprecated Consider declaring `$env: { whitelist: [...] }` in `xypriss.config.jsonc` instead.
|
|
313
|
+
*/
|
|
314
|
+
configureShield(config) {
|
|
315
|
+
const callerRoot = getCallerProjectRoot();
|
|
316
|
+
const hostRoot = this.runner.getRoot();
|
|
317
|
+
if (callerRoot && callerRoot !== hostRoot && !isCoreFrameworkPath(callerRoot)) {
|
|
318
|
+
logger.warn("security", `Blocked unauthorized attempt by third-party plugin at '${callerRoot}' to configure Environment Security Shield.`);
|
|
319
|
+
return;
|
|
320
|
+
}
|
|
321
|
+
this[XY_ENV_CONFIGURE_SHIELD](config);
|
|
322
|
+
}
|
|
323
|
+
/**
|
|
324
|
+
* Configures the XESS (XyPriss Environment Security Shield) dynamically.
|
|
325
|
+
*
|
|
326
|
+
* **Security Note:**
|
|
327
|
+
* Formerly exposed as `public configureShield(...)`. It was removed from the public API
|
|
328
|
+
* because any untrusted caller could modify the whitelist of allowed `process.env` properties,
|
|
329
|
+
* effectively destroying the Environment Security Shield. It is now private to the engine
|
|
330
|
+
* and only accessible via this internal Symbol during early bootstrap.
|
|
331
|
+
*
|
|
298
332
|
* @internal
|
|
333
|
+
* @param config - XESS configuration options.
|
|
299
334
|
*/
|
|
300
335
|
[XY_ENV_CONFIGURE_SHIELD](config) {
|
|
301
336
|
if (!config)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"EnvApi.js","sources":["../../../../src/xhsc/EnvApi.ts"],"sourcesContent":[null],"names":["path","fs"],"mappings":"
|
|
1
|
+
{"version":3,"file":"EnvApi.js","sources":["../../../../src/xhsc/EnvApi.ts"],"sourcesContent":[null],"names":["path","fs"],"mappings":";;;;;;;MAoBa,MAAM,CAAA;AA6Cf;;;;AAIG;AACH,IAAA,WAAA,CACI,MAAqB,EACrB,IAAA,GAAe,aAAa,EAC5B,YAAqB,KAAK,EAAA;AAhD9B;;;;;;AAMG;QACc,IAAA,CAAA,gBAAgB,GAAwB,IAAI,GAAG,CAAC;YAC7D,MAAM;YACN,MAAM;YACN,MAAM;YACN,KAAK;YACL,MAAM;YACN,MAAM;YACN,MAAM;YACN,WAAW;YACX,aAAa;YACb,cAAc;YACd,QAAQ;YACR,OAAO;YACP,OAAO;YACP,gBAAgB;YAChB,UAAU;YACV,OAAO;YACP,YAAY;YACZ,cAAc;YACd,UAAU;YACV,gBAAgB;YAChB,iBAAiB;YACjB,iBAAiB;YACjB,mBAAmB;YACnB,oBAAoB;YACpB,iBAAiB;YACjB,0BAA0B;YAC1B,oBAAoB;YACpB,gCAAgC;AACnC,SAAA,CAAC;QAEM,IAAA,CAAA,iBAAiB,GAAgB,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC;AAYnE,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;AACpB,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI;AAChB,QAAA,IAAI,CAAC,SAAS,GAAG,SAAS;QAC1B,IAAI,CAAC,WAAW,EAAE;IACtB;;;;AAMA;;;;;;;;;;;;;;;;;AAiBG;IACI,GAAG,CAAC,GAAW,EAAE,KAAa,EAAA;AACjC,QAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;AACrB,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;AAE9B,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK;;QAGlB,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACjC,YAAA,IAAI;AACA,gBAAA,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK;YAC5B;AAAE,YAAA,MAAM;;YAER;QACJ;IACJ;AAEA;;;;;;;;;;AAUG;AACI,IAAA,MAAM,CAAC,GAAW,EAAA;AACrB,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,OAAO,KAAK,CAAC,GAAG,CAAC;QAEjB,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACjC,YAAA,IAAI;AACA,gBAAA,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAC3B;AAAE,YAAA,MAAM;;YAER;QACJ;IACJ;IA2BO,GAAG,CAAC,GAAW,EAAE,YAAqB,EAAA;AACzC,QAAA,IAAI,GAAG,KAAK,UAAU,EAAE;YACpB,OAAO,CAAC,IAAI,CAAC,SAAS,GAAG,oBAAoB,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;QACpF;AAEA,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC;QACxB,OAAO,KAAK,KAAK,SAAS,GAAG,KAAK,GAAG,YAAY;IACrD;AAEA;;;;;;;;;;;;AAYG;AACI,IAAA,CAAC,4BAA4B,CAAC,CAAC,GAAW,EAAE,IAAY,EAAA;AAC3D,QAAA,IAAI,GAAG,KAAK,UAAU,EAAE;AACpB,YAAA,OAAO,IAAI;QACf;QAEA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;AAC1C,QAAA,OAAO,KAAK,CAAC,GAAG,CAAC;IACrB;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BG;IACI,SAAS,CAAC,GAAW,EAAE,OAA6B,EAAA;AACvD,QAAA,IAAI,GAAG,KAAK,UAAU,EAAE;YACpB,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,oBAAoB,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;YACzF,IAAI,CAAC,OAAO,EAAE;AACV,gBAAA,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC;YAC5C;AACA,YAAA,OAAO,OAAO;QAClB;AAEA,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC;AAExB,QAAA,IAAI,KAAK,KAAK,SAAS,EAAE;AACrB,YAAA,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC;QAC5C;QACA,IAAI,OAAO,EAAE,WAAW,IAAI,KAAK,KAAK,EAAE,EAAE;AACtC,YAAA,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC;QAC1C;AAEA,QAAA,OAAO,KAAK;IAChB;AAEA;;;;;;;;;;;;;AAaG;AACI,IAAA,GAAG,CAAC,GAAW,EAAA;AAClB,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AACtC,QAAA,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;IACnC;AAEA;;;;;;;;;;;;;;;;;;;;;;;AAuBG;AACI,IAAA,GAAG,CAAC,OAAuB,EAAA;AAC9B,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE;AAEtC,QAAA,IAAI,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;YAC1C,MAAM,MAAM,GAAuC,EAAE;AACrD,YAAA,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE;gBAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;YAC5B;AACA,YAAA,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAChC;QAEA,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;IACtC;;;;AAMA;;;;;;;AAOG;IACI,YAAY,GAAA;AACf,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY;IACrC;AAEA;;;;;;;AAOG;IACI,aAAa,GAAA;AAChB,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,aAAa;IACtC;AAEA;;;;;;;AAOG;IACI,SAAS,GAAA;AACZ,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS;IAClC;AAEA;;;;;;;AAOG;IACI,MAAM,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM;IAC/B;AAEA;;;;;;;;;;AAUG;AACI,IAAA,EAAE,CAAC,OAAe,EAAA;AACrB,QAAA,OAAO,IAAI,CAAC,IAAI,KAAK,OAAO;IAChC;AAEA;;;;;;;;;AASG;AACI,IAAA,eAAe,CAAC,MAGtB,EAAA;AACG,QAAA,MAAM,UAAU,GAAG,oBAAoB,EAAE;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;AACtC,QAAA,IAAI,UAAU,IAAI,UAAU,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE;YAC3E,MAAM,CAAC,IAAI,CACP,UAAU,EACV,CAAA,uDAAA,EAA0D,UAAU,CAAA,2CAAA,CAA6C,CACpH;YACD;QACJ;AACA,QAAA,IAAI,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC;IACzC;AAEA;;;;;;;;;;;AAWG;IACI,CAAC,uBAAuB,CAAC,CAAC,MAGhC,EAAA;AACG,QAAA,IAAI,CAAC,MAAM;YAAE;AAEb,QAAA,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE;AAChC,YAAA,IAAI,MAAM,CAAC,uBAAuB,EAAE;gBAChC,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YACtD;iBAAO;AACH,gBAAA,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,CAAC;oBAC7B,GAAG,IAAI,CAAC,gBAAgB;oBACxB,GAAG,MAAM,CAAC,SAAS;AACtB,iBAAA,CAAC;YACN;QACJ;IACJ;;;;AAMA;;;;;;;;;;;;;AAaG;IACI,IAAI,GAAA;AACP,QAAA,IAAI;AACA,YAAA,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAE/C;AACD,YAAA,OAAO,MAAM,EAAE,QAAQ,IAAI,EAAE;QACjC;AAAE,QAAA,MAAM;AACJ,YAAA,OAAO,EAAE;QACb;IACJ;;;;AAMA;;;;;;;;;;;;;;;AAeG;IACK,eAAe,GAAA;AACnB,QAAA,MAAM,QAAQ,GAAI,UAAkB,CAAC,gBAAgB,CAEtC;QAEf,IAAI,CAAC,QAAQ,EAAE;YACX,MAAM,IAAI,aAAa,EAAE;QAC7B;AAEA,QAAA,OAAO,QAAQ;IACnB;AAEQ,IAAA,iBAAiB,CACrB,UAAmB,EAAA;AAEnB,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE;;;;;QAMvC,MAAM,IAAI,GACN,UAAU;AACV,aAAC,IAAI,CAAC,SAAS,GAAG,oBAAoB,EAAE,GAAG,IAAI,CAAC;AAChD,YAAA,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;AACrB,YAAA,oBAAoB,EAAE;AAE1B,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,OAAO,EAAE;QAEpB,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE;;YAER,MAAM,OAAO,GAAGA,aAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;YAC1C,MAAM,OAAO,GAAuC,EAAE;AAEtD,YAAA,IAAIC,WAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AACxB,gBAAA,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC;oBAC7B,IAAI,EAAE,CAAC,OAAO,CAAC;AACf,oBAAA,QAAQ,EAAE,IAAI;AACjB,iBAAA,CAAC;AACF,gBAAA,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE;oBACtB,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAW;gBACxC;YACJ;;AAEA,YAAA,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;YAC3B,KAAK,GAAG,OAAO;QACnB;AAEA,QAAA,OAAO,KAAK;IAChB;;;;AAMA;;;;;AAKG;AACK,IAAA,WAAW,CAAC,GAAW,EAAA;AAC3B,QAAA,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE;AAClB,YAAA,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,uBAAuB,CAAC;QACvD;QACA,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE;AACzB,YAAA,MAAM,IAAI,WAAW,CACjB,GAAG,EACH,2CAA2C,CAC9C;QACL;IACJ;AAEA;;;;;;;;;;;;AAYG;IACK,aAAa,CAAC,GAAW,EAAE,KAAa,EAAA;AAC5C,QAAA,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AACrC,YAAA,MAAM,IAAI,WAAW,CACjB,GAAG,EACH,iEAAiE;AAC7D,gBAAA,8EAA8E,CACrF;QACL;IACJ;;;;AAMA;;;;;;;;;;;;;;;;;;;;;;;;AAwBG;AACH;;;;;;;;;;;;;;;;;;;;;;;;AAwBG;IACK,WAAW,GAAA;;;AAGf,QAAA,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU;QACpC,MAAM,IAAI,GAAG,IAAI;QAEjB,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;AACrC,YAAA,GAAG,CAAC,MAAM,EAAE,IAAqB,EAAE,QAAQ,EAAA;AACvC,gBAAA,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;oBAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;gBAC9C;;AAGA,gBAAA,IACI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;AAChC,oBAAA,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;AACtB,oBAAA,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;AAC3B,oBAAA,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;AACvB,oBAAA,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;AAC1B,oBAAA,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EACvB;oBACE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;gBAC9C;;gBAGA,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;AACvB,oBAAA,MAAM,QAAQ,GAAI,UAAkB,CAAC,gBAAgB,CAEtC;oBACf,IAAI,QAAQ,GAAG,MAAM,CAAC,oBAAoB,CAAC,KAAK,QAAQ;oBAExD,IAAI,QAAQ,EAAE;wBACV,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE;AACjC,4BAAA,IAAI,GAAG,CAAC,oBAAoB,CAAC,KAAK,QAAQ,EAAE;gCACxC,QAAQ,GAAG,IAAI;gCACf;4BACJ;wBACJ;oBACJ;oBAEA,IAAI,CAAC,QAAQ,EAAE;AACX,wBAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,CAAA,0BAAA,CAA4B;AACxB,4BAAA,CAAA,8BAAA,EAAiC,IAAI,CAAA,eAAA,CAAiB;AACtD,4BAAA,CAAA,iCAAA,EAAoC,IAAI,CAAA,UAAA,CAAY;4BACpD,CAAA,sCAAA,EAAyC,IAAI,CAAA,oBAAA,CAAsB,CAC1E;oBACL;AACA,oBAAA,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBACxB;AAEA,gBAAA,OAAO,SAAS;YACpB,CAAC;;;;AAKD,YAAA,OAAO,CAAC,OAAO,EAAA;AACX,gBAAA,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC;YACtC,CAAC;;YAGD,GAAG,CAAC,OAAO,EAAE,IAAqB,EAAA;gBAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;AAAE,oBAAA,OAAO,KAAK;gBAC1C,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3C,CAAC;AACJ,SAAA,CAAC;AAEF,QAAA,IAAI;AACA,YAAA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE;AAClC,gBAAA,KAAK,EAAE,SAAS;AAChB,gBAAA,QAAQ,EAAE,KAAK;AACf,gBAAA,YAAY,EAAE,IAAI;AAClB,gBAAA,UAAU,EAAE,IAAI;AACnB,aAAA,CAAC;QACN;AAAE,QAAA,MAAM;;;;;QAKR;IACJ;IAEQ,mBAAmB,GAAA;AACvB,QAAA,MAAM,UAAU,GAAG,oBAAoB,EAAE;AACzC,QAAA,MAAM,OAAO,GAAI,UAAkB,CAAC,OAAO,EAAE,QAAQ;AACrD,QAAA,OAAO,CAAC,CAAC,UAAU,IAAI,UAAU,KAAK,OAAO;IACjD;AACH;;;;"}
|
|
@@ -9,7 +9,35 @@
|
|
|
9
9
|
// ---------------------------------------------------------------------------
|
|
10
10
|
const XY_ENV_STORE_KEY = Symbol("__xy_env_store__");
|
|
11
11
|
const XY_XHSC_REGISTER_FS = Symbol("__xy_xhsc_register_fs__");
|
|
12
|
+
/**
|
|
13
|
+
* **Internal Root-Scoped Env Access Key**
|
|
14
|
+
*
|
|
15
|
+
* Used exclusively by internal engine modules (such as `ProjectDiscovery.loadXyConfig`)
|
|
16
|
+
* to resolve configuration references `&(env:...)` within a target project context.
|
|
17
|
+
*
|
|
18
|
+
* **Security Decision:**
|
|
19
|
+
* Previously, this capability was exposed as a public method `__sys__.__env__.getForRoot(key, root)`.
|
|
20
|
+
* That allowed third-party plugins in `node_modules` to pass the host project's root (`process.cwd()`
|
|
21
|
+
* or `__sys__._primaryRoot`), completely bypassing caller-isolated Zero-Trust sandboxing.
|
|
22
|
+
* Moving this method behind an unexported module `Symbol` prevents external code from invoking it.
|
|
23
|
+
*
|
|
24
|
+
* @internal
|
|
25
|
+
*/
|
|
12
26
|
const XY_ENV_INTERNAL_GET_FOR_ROOT = Symbol("__xy_env_internal_get_for_root__");
|
|
27
|
+
/**
|
|
28
|
+
* **Internal Security Shield Configuration Key**
|
|
29
|
+
*
|
|
30
|
+
* Used exclusively during framework startup (`xhsc.ts`) to apply declarative
|
|
31
|
+
* XESS shield rules configured in `xypriss.config.json(c)`.
|
|
32
|
+
*
|
|
33
|
+
* **Security Decision:**
|
|
34
|
+
* Exposing `configureShield` as a public method on `__sys__.__env__` created a critical vulnerability,
|
|
35
|
+
* allowing untrusted plugins to dynamically modify the whitelist and leak forbidden secrets through
|
|
36
|
+
* `process.env`. Restricting it to this unexported Symbol guarantees that only the engine bootstrap
|
|
37
|
+
* can configure the whitelist.
|
|
38
|
+
*
|
|
39
|
+
* @internal
|
|
40
|
+
*/
|
|
13
41
|
const XY_ENV_CONFIGURE_SHIELD = Symbol("__xy_env_configure_shield__");
|
|
14
42
|
// ---------------------------------------------------------------------------
|
|
15
43
|
// Internal value sanitisation
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"env.js","sources":["../../../../../../src/xhsc/api/env/env.ts"],"sourcesContent":[null],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;MACa,gBAAgB,GAAG,MAAM,CAAC,kBAAkB;MAC5C,mBAAmB,GAAG,MAAM,CAAC,yBAAyB;
|
|
1
|
+
{"version":3,"file":"env.js","sources":["../../../../../../src/xhsc/api/env/env.ts"],"sourcesContent":[null],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;MACa,gBAAgB,GAAG,MAAM,CAAC,kBAAkB;MAC5C,mBAAmB,GAAG,MAAM,CAAC,yBAAyB;AAEnE;;;;;;;;;;;;;AAaG;MACU,4BAA4B,GAAG,MAAM,CAAC,kCAAkC;AAErF;;;;;;;;;;;;;AAaG;MACU,uBAAuB,GAAG,MAAM,CAAC,6BAA6B;AAE3E;AACA;AACA;AACA;AACA;AACA;AAEA;AACO,MAAM,uBAAuB,GAAG;AAgDvC;AACA;AACA;AAEA;;;;;;;;;;;;AAYG;AACG,MAAO,cAAe,SAAQ,KAAK,CAAA;IAIrC,WAAA,CAAY,GAAW,EAAE,MAA2B,EAAA;QAChD,KAAK,CACD,MAAM,KAAK;cACL,CAAA,sBAAA,EAAyB,GAAG,CAAA,sCAAA,CAAwC;AAChE,gBAAA,CAAA,yBAAA,EAA4B,GAAG,CAAA,mCAAA;cACnC,CAAA,+BAAA,EAAkC,GAAG,CAAA,kBAAA,CAAoB;AACrD,gBAAA,CAAA,gEAAA,CAAkE,CAC/E;AACD,QAAA,IAAI,CAAC,IAAI,GAAG,gBAAgB;AAC5B,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;QACd,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC;IACzD;AACH;AAED;;;;;;;;;;;;AAYG;AACG,MAAO,WAAY,SAAQ,KAAK,CAAA;IAGlC,WAAA,CAAY,GAAW,EAAE,MAAc,EAAA;AACnC,QAAA,KAAK,CAAC,CAAA,8BAAA,EAAiC,GAAG,MAAM,MAAM,CAAA,CAAE,CAAC;AACzD,QAAA,IAAI,CAAC,IAAI,GAAG,aAAa;AACzB,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;QACd,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC;IACtD;AACH;AAED;;;;;;AAMG;AACG,MAAO,aAAc,SAAQ,KAAK,CAAA;AACpC,IAAA,WAAA,GAAA;AACI,QAAA,KAAK,CACD,0DAA0D;AACtD,YAAA,4EAA4E,CACnF;AACD,QAAA,IAAI,CAAC,IAAI,GAAG,eAAe;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC;IACxD;AACH;;;;"}
|
package/dist/index.d.ts
CHANGED
|
@@ -4980,7 +4980,35 @@ declare class VarsApi extends BaseApi {
|
|
|
4980
4980
|
}
|
|
4981
4981
|
|
|
4982
4982
|
declare const XY_XHSC_REGISTER_FS: unique symbol;
|
|
4983
|
+
/**
|
|
4984
|
+
* **Internal Root-Scoped Env Access Key**
|
|
4985
|
+
*
|
|
4986
|
+
* Used exclusively by internal engine modules (such as `ProjectDiscovery.loadXyConfig`)
|
|
4987
|
+
* to resolve configuration references `&(env:...)` within a target project context.
|
|
4988
|
+
*
|
|
4989
|
+
* **Security Decision:**
|
|
4990
|
+
* Previously, this capability was exposed as a public method `__sys__.__env__.getForRoot(key, root)`.
|
|
4991
|
+
* That allowed third-party plugins in `node_modules` to pass the host project's root (`process.cwd()`
|
|
4992
|
+
* or `__sys__._primaryRoot`), completely bypassing caller-isolated Zero-Trust sandboxing.
|
|
4993
|
+
* Moving this method behind an unexported module `Symbol` prevents external code from invoking it.
|
|
4994
|
+
*
|
|
4995
|
+
* @internal
|
|
4996
|
+
*/
|
|
4983
4997
|
declare const XY_ENV_INTERNAL_GET_FOR_ROOT: unique symbol;
|
|
4998
|
+
/**
|
|
4999
|
+
* **Internal Security Shield Configuration Key**
|
|
5000
|
+
*
|
|
5001
|
+
* Used exclusively during framework startup (`xhsc.ts`) to apply declarative
|
|
5002
|
+
* XESS shield rules configured in `xypriss.config.json(c)`.
|
|
5003
|
+
*
|
|
5004
|
+
* **Security Decision:**
|
|
5005
|
+
* Exposing `configureShield` as a public method on `__sys__.__env__` created a critical vulnerability,
|
|
5006
|
+
* allowing untrusted plugins to dynamically modify the whitelist and leak forbidden secrets through
|
|
5007
|
+
* `process.env`. Restricting it to this unexported Symbol guarantees that only the engine bootstrap
|
|
5008
|
+
* can configure the whitelist.
|
|
5009
|
+
*
|
|
5010
|
+
* @internal
|
|
5011
|
+
*/
|
|
4984
5012
|
declare const XY_ENV_CONFIGURE_SHIELD: unique symbol;
|
|
4985
5013
|
/**
|
|
4986
5014
|
* Represents the result of a bulk environment variable retrieval.
|
|
@@ -5149,6 +5177,19 @@ interface IEnvApi {
|
|
|
5149
5177
|
* auditLog.write({ actor, action: "deploy" });
|
|
5150
5178
|
*/
|
|
5151
5179
|
user(): string;
|
|
5180
|
+
/**
|
|
5181
|
+
* Configures the Environment Security Shield (process.env whitelist).
|
|
5182
|
+
*
|
|
5183
|
+
* **Security Note:**
|
|
5184
|
+
* Only the host project and core engine are permitted to configure the shield.
|
|
5185
|
+
* Third-party plugins in node_modules are blocked from tampering with the whitelist.
|
|
5186
|
+
*
|
|
5187
|
+
* @deprecated Configure `$env: { whitelist: [...] }` in `xypriss.config.jsonc` instead.
|
|
5188
|
+
*/
|
|
5189
|
+
configureShield?(config?: {
|
|
5190
|
+
whitelist?: string[];
|
|
5191
|
+
replaceDefaultWhitelist?: boolean;
|
|
5192
|
+
}): void;
|
|
5152
5193
|
}
|
|
5153
5194
|
|
|
5154
5195
|
declare class EnvApi implements IEnvApi {
|
|
@@ -5224,8 +5265,16 @@ declare class EnvApi implements IEnvApi {
|
|
|
5224
5265
|
get(key: string, defaultValue: string): string;
|
|
5225
5266
|
/**
|
|
5226
5267
|
* Reads a variable from the secure internal store for a specific root.
|
|
5227
|
-
*
|
|
5268
|
+
*
|
|
5269
|
+
* **Security Note:**
|
|
5270
|
+
* Formerly exposed as `getForRoot(key, root)`. It was removed from the public API
|
|
5271
|
+
* because it functioned as a zero-trust bypass: plugins could manually pass the host project
|
|
5272
|
+
* root and read host secrets. It is now private to the engine and keyed by an internal Symbol.
|
|
5273
|
+
*
|
|
5228
5274
|
* @internal
|
|
5275
|
+
* @param key - Variable name to look up.
|
|
5276
|
+
* @param root - Absolute project root path.
|
|
5277
|
+
* @returns The resolved variable value or undefined.
|
|
5229
5278
|
*/
|
|
5230
5279
|
[XY_ENV_INTERNAL_GET_FOR_ROOT](key: string, root: string): string | undefined;
|
|
5231
5280
|
/**
|
|
@@ -5346,8 +5395,29 @@ declare class EnvApi implements IEnvApi {
|
|
|
5346
5395
|
is(envName: string): boolean;
|
|
5347
5396
|
/**
|
|
5348
5397
|
* Configures the XESS (XyPriss Environment Security Shield) dynamically.
|
|
5349
|
-
*
|
|
5398
|
+
*
|
|
5399
|
+
* **Security Enforcement:**
|
|
5400
|
+
* Only the host application and internal engine are authorized to invoke this method.
|
|
5401
|
+
* Invocations from third-party plugins in `node_modules` or foreign project roots
|
|
5402
|
+
* are strictly blocked to prevent malicious tampering with the `process.env` whitelist.
|
|
5403
|
+
*
|
|
5404
|
+
* @deprecated Consider declaring `$env: { whitelist: [...] }` in `xypriss.config.jsonc` instead.
|
|
5405
|
+
*/
|
|
5406
|
+
configureShield(config?: {
|
|
5407
|
+
whitelist?: string[];
|
|
5408
|
+
replaceDefaultWhitelist?: boolean;
|
|
5409
|
+
}): void;
|
|
5410
|
+
/**
|
|
5411
|
+
* Configures the XESS (XyPriss Environment Security Shield) dynamically.
|
|
5412
|
+
*
|
|
5413
|
+
* **Security Note:**
|
|
5414
|
+
* Formerly exposed as `public configureShield(...)`. It was removed from the public API
|
|
5415
|
+
* because any untrusted caller could modify the whitelist of allowed `process.env` properties,
|
|
5416
|
+
* effectively destroying the Environment Security Shield. It is now private to the engine
|
|
5417
|
+
* and only accessible via this internal Symbol during early bootstrap.
|
|
5418
|
+
*
|
|
5350
5419
|
* @internal
|
|
5420
|
+
* @param config - XESS configuration options.
|
|
5351
5421
|
*/
|
|
5352
5422
|
[XY_ENV_CONFIGURE_SHIELD](config?: {
|
|
5353
5423
|
whitelist?: string[];
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "xypriss",
|
|
3
|
-
"version": "9.12.
|
|
3
|
+
"version": "9.12.69",
|
|
4
4
|
"description": "XyPriss is a high-performance, TypeScript-first hyper-system web framework powered by a native Go core (XHSC), featuring robust multi-tenant sandboxing, secure native file streaming, and zero Express dependencies.",
|
|
5
5
|
"author": {
|
|
6
6
|
"DEV.to": "https://dev.to/nehonix",
|