@guardcore/express 1.0.0

package/dist/index.cjs

@@ -0,0 +1,298 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  BaseSecurityDecorator: () => import_core2.BaseSecurityDecorator,
+  BehaviorRule: () => import_core2.BehaviorRule,
+  ExpressGuardRequest: () => ExpressGuardRequest,
+  ExpressGuardResponse: () => ExpressGuardResponse,
+  ExpressResponseFactory: () => ExpressResponseFactory,
+  RouteConfig: () => import_core2.RouteConfig,
+  SecurityConfigSchema: () => import_core2.SecurityConfigSchema,
+  SecurityDecorator: () => import_core2.SecurityDecorator,
+  configureCors: () => configureCors,
+  createSecurityMiddleware: () => createSecurityMiddleware,
+  defaultLogger: () => import_core2.defaultLogger,
+  guardBodyParser: () => guardBodyParser,
+  guardUrlEncodedParser: () => guardUrlEncodedParser,
+  sendGuardResponse: () => sendGuardResponse
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/middleware.ts
+var import_core = require("@guardcore/core");
+
+// src/adapters.ts
+var ExpressGuardRequest = class {
+  constructor(req) {
+    this.req = req;
+    const raw = req["rawBody"];
+    if (raw instanceof Uint8Array) {
+      this.rawBody = raw;
+    } else if (raw instanceof Buffer) {
+      this.rawBody = new Uint8Array(raw);
+    }
+  }
+  _state = {};
+  rawBody = null;
+  get urlPath() {
+    return this.req.path;
+  }
+  get urlScheme() {
+    return this.req.protocol;
+  }
+  get urlFull() {
+    return `${this.req.protocol}://${this.req.get("host")}${this.req.originalUrl}`;
+  }
+  urlReplaceScheme(scheme) {
+    return this.urlFull.replace(/^https?/, scheme);
+  }
+  get method() {
+    return this.req.method;
+  }
+  get clientHost() {
+    return this.req.socket.remoteAddress ?? null;
+  }
+  get headers() {
+    return this.req.headers;
+  }
+  get queryParams() {
+    return this.req.query;
+  }
+  async body() {
+    return this.rawBody ?? new Uint8Array(0);
+  }
+  get state() {
+    return this._state;
+  }
+  get scope() {
+    return {};
+  }
+};
+var ExpressGuardResponse = class {
+  constructor(statusCode, content) {
+    this.statusCode = statusCode;
+    this._body = new TextEncoder().encode(content);
+    this._headers["content-type"] = "application/json";
+  }
+  _headers = {};
+  _body;
+  get headers() {
+    return this._headers;
+  }
+  setHeader(name, value) {
+    this._headers[name] = value;
+  }
+  get body() {
+    return this._body;
+  }
+  get bodyText() {
+    return this._body ? new TextDecoder().decode(this._body) : null;
+  }
+};
+var ExpressResponseFactory = class {
+  createResponse(content, statusCode) {
+    return new ExpressGuardResponse(statusCode, JSON.stringify({ detail: content }));
+  }
+  createRedirectResponse(url, statusCode) {
+    const resp = new ExpressGuardResponse(statusCode, "");
+    resp.setHeader("location", url);
+    return resp;
+  }
+};
+function sendGuardResponse(res, guardResponse) {
+  for (const [name, value] of Object.entries(guardResponse.headers)) {
+    res.setHeader(name, value);
+  }
+  if (guardResponse.headers["location"]) {
+    res.redirect(guardResponse.statusCode, guardResponse.headers["location"]);
+    return;
+  }
+  res.status(guardResponse.statusCode);
+  if (guardResponse.body) {
+    res.send(Buffer.from(guardResponse.body));
+  } else {
+    res.end();
+  }
+}
+
+// src/middleware.ts
+function createSecurityMiddleware(options) {
+  const resolved = import_core.SecurityConfigSchema.parse(options.config);
+  const logger = resolved.logger ?? import_core.defaultLogger;
+  const responseFactory = new ExpressResponseFactory();
+  let initialized = false;
+  let components;
+  async function initialize() {
+    if (initialized) return;
+    components = await (0, import_core.initializeSecurityMiddleware)(
+      resolved,
+      logger,
+      responseFactory,
+      options.agentHandler,
+      options.geoIpHandler,
+      options.guardDecorator
+    );
+    initialized = true;
+    logger.info("Guard security middleware initialized");
+  }
+  return async function guardMiddleware(req, res, next) {
+    await initialize();
+    const startTime = performance.now();
+    const guardReq = new ExpressGuardRequest(req);
+    const passthrough = await components.bypassHandler.handlePassthrough(
+      guardReq,
+      async () => createPassthroughResponse()
+    );
+    if (passthrough) {
+      sendGuardResponse(res, passthrough);
+      return;
+    }
+    const routeConfig = components.routeResolver.getRouteConfig(guardReq);
+    const bypass = await components.bypassHandler.handleSecurityBypass(
+      guardReq,
+      async () => createPassthroughResponse(),
+      routeConfig
+    );
+    if (bypass) {
+      sendGuardResponse(res, bypass);
+      return;
+    }
+    const blockResponse = await components.pipeline.execute(guardReq);
+    if (blockResponse) {
+      sendGuardResponse(res, blockResponse);
+      return;
+    }
+    if (routeConfig && routeConfig.behaviorRules.length > 0) {
+      const clientIp = guardReq.clientHost ?? "unknown";
+      await components.behavioralProcessor.processUsageRules(guardReq, clientIp, routeConfig);
+    }
+    const originalEnd = res.end;
+    const chunks = [];
+    res.end = function(chunk, ...args) {
+      if (chunk) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));
+      const responseTime = (performance.now() - startTime) / 1e3;
+      const body = Buffer.concat(chunks);
+      const capturedResponse = {
+        statusCode: res.statusCode,
+        headers: Object.fromEntries(
+          Object.entries(res.getHeaders()).map(([k, v]) => [k, String(v)])
+        ),
+        setHeader(name, value) {
+          res.setHeader(name, value);
+        },
+        body: new Uint8Array(body),
+        bodyText: body.toString("utf-8")
+      };
+      components.errorResponseFactory.processResponse(
+        guardReq,
+        capturedResponse,
+        responseTime,
+        routeConfig ?? null,
+        routeConfig ? async (request, response, clientIp, rc) => {
+          await components.behavioralProcessor.processReturnRules(request, response, clientIp, rc);
+        } : void 0
+      ).catch(() => {
+      });
+      return originalEnd.apply(res, [chunk, ...args]);
+    };
+    next();
+  };
+}
+function createPassthroughResponse() {
+  return {
+    statusCode: 200,
+    headers: {},
+    setHeader() {
+    },
+    body: null,
+    bodyText: null
+  };
+}
+
+// src/cors.ts
+function configureCors(app, config) {
+  if (!config.enableCors) return;
+  try {
+    const corsMiddleware = require("cors");
+    app.use(corsMiddleware({
+      origin: config.corsAllowOrigins,
+      methods: config.corsAllowMethods,
+      allowedHeaders: config.corsAllowHeaders,
+      credentials: config.corsAllowCredentials,
+      exposedHeaders: config.corsExposeHeaders,
+      maxAge: config.corsMaxAge
+    }));
+  } catch {
+    throw new Error(
+      '@guardcore/express: CORS is enabled but the "cors" package is not installed. Run: pnpm add cors'
+    );
+  }
+}
+
+// src/body-parser.ts
+var import_express = __toESM(require("express"), 1);
+function guardBodyParser() {
+  return import_express.default.json({
+    verify: (req, _res, buf, _encoding) => {
+      req["rawBody"] = buf;
+    }
+  });
+}
+function guardUrlEncodedParser() {
+  return import_express.default.urlencoded({
+    extended: true,
+    verify: (req, _res, buf, _encoding) => {
+      req["rawBody"] = buf;
+    }
+  });
+}
+
+// src/index.ts
+var import_core2 = require("@guardcore/core");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  BaseSecurityDecorator,
+  BehaviorRule,
+  ExpressGuardRequest,
+  ExpressGuardResponse,
+  ExpressResponseFactory,
+  RouteConfig,
+  SecurityConfigSchema,
+  SecurityDecorator,
+  configureCors,
+  createSecurityMiddleware,
+  defaultLogger,
+  guardBodyParser,
+  guardUrlEncodedParser,
+  sendGuardResponse
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/middleware.ts","../src/adapters.ts","../src/cors.ts","../src/body-parser.ts"],"sourcesContent":["export { createSecurityMiddleware } from './middleware.js';\nexport type { SecurityMiddlewareOptions } from './middleware.js';\nexport { configureCors } from './cors.js';\nexport { guardBodyParser, guardUrlEncodedParser } from './body-parser.js';\nexport { ExpressGuardRequest, ExpressGuardResponse, ExpressResponseFactory, sendGuardResponse } from './adapters.js';\n\nexport {\n  SecurityConfigSchema,\n  BaseSecurityDecorator,\n  SecurityDecorator,\n  RouteConfig,\n  BehaviorRule,\n  defaultLogger,\n} from '@guardcore/core';\n\nexport type {\n  SecurityConfig,\n  ResolvedSecurityConfig,\n  GuardRequest,\n  GuardResponse,\n  Logger,\n  SecurityMiddlewareComponents,\n  HandlerRegistry,\n} from '@guardcore/core';\n","import type { Request, Response, NextFunction } from 'express';\nimport type {\n  SecurityConfig,\n  GuardRequest,\n  GuardResponse,\n  Logger,\n  AgentHandlerProtocol,\n  GeoIPHandler,\n  SecurityMiddlewareComponents,\n  RouteConfig,\n} from '@guardcore/core';\nimport { SecurityConfigSchema, defaultLogger, initializeSecurityMiddleware } from '@guardcore/core';\nimport { ExpressGuardRequest, ExpressResponseFactory, sendGuardResponse } from './adapters.js';\n\nexport interface SecurityMiddlewareOptions {\n  config: SecurityConfig;\n  agentHandler?: AgentHandlerProtocol;\n  geoIpHandler?: GeoIPHandler;\n  guardDecorator?: unknown;\n}\n\nexport function createSecurityMiddleware(options: SecurityMiddlewareOptions) {\n  const resolved = SecurityConfigSchema.parse(options.config);\n  const logger: Logger = resolved.logger ?? defaultLogger;\n  const responseFactory = new ExpressResponseFactory();\n\n  let initialized = false;\n  let components: SecurityMiddlewareComponents;\n\n  async function initialize(): Promise<void> {\n    if (initialized) return;\n    components = await initializeSecurityMiddleware(\n      resolved, logger, responseFactory,\n      options.agentHandler, options.geoIpHandler, options.guardDecorator,\n    );\n    initialized = true;\n    logger.info('Guard security middleware initialized');\n  }\n\n  return async function guardMiddleware(req: Request, res: Response, next: NextFunction): Promise<void> {\n    await initialize();\n\n    const startTime = performance.now();\n    const guardReq = new ExpressGuardRequest(req);\n\n    const passthrough = await components.bypassHandler.handlePassthrough(\n      guardReq,\n      async () => createPassthroughResponse(),\n    );\n    if (passthrough) {\n      sendGuardResponse(res, passthrough);\n      return;\n    }\n\n    const routeConfig = components.routeResolver.getRouteConfig(guardReq);\n\n    const bypass = await components.bypassHandler.handleSecurityBypass(\n      guardReq,\n      async () => createPassthroughResponse(),\n      routeConfig,\n    );\n    if (bypass) {\n      sendGuardResponse(res, bypass);\n      return;\n    }\n\n    const blockResponse = await components.pipeline.execute(guardReq);\n    if (blockResponse) {\n      sendGuardResponse(res, blockResponse);\n      return;\n    }\n\n    if (routeConfig && routeConfig.behaviorRules.length > 0) {\n      const clientIp = guardReq.clientHost ?? 'unknown';\n      await components.behavioralProcessor.processUsageRules(guardReq, clientIp, routeConfig);\n    }\n\n    const originalEnd = res.end;\n    const chunks: Buffer[] = [];\n\n    res.end = function (chunk: unknown, ...args: unknown[]): Response {\n      if (chunk) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));\n\n      const responseTime = (performance.now() - startTime) / 1000;\n      const body = Buffer.concat(chunks);\n      const capturedResponse: GuardResponse = {\n        statusCode: res.statusCode,\n        headers: Object.fromEntries(\n          Object.entries(res.getHeaders()).map(([k, v]) => [k, String(v)]),\n        ),\n        setHeader(name: string, value: string) { res.setHeader(name, value); },\n        body: new Uint8Array(body),\n        bodyText: body.toString('utf-8'),\n      };\n\n      components.errorResponseFactory.processResponse(\n        guardReq, capturedResponse, responseTime, routeConfig ?? null,\n        routeConfig ? async (request: GuardRequest, response: GuardResponse, clientIp: string, rc: RouteConfig) => {\n          await components.behavioralProcessor.processReturnRules(request, response, clientIp, rc);\n        } : undefined,\n      ).catch(() => {});\n\n      return originalEnd.apply(res, [chunk, ...args] as Parameters<typeof originalEnd>);\n    };\n\n    next();\n  };\n}\n\nfunction createPassthroughResponse(): GuardResponse {\n  return {\n    statusCode: 200,\n    headers: {},\n    setHeader() {},\n    body: null,\n    bodyText: null,\n  };\n}\n","import type { Request, Response } from 'express';\nimport type { GuardRequest, GuardRequestState, GuardResponse, GuardResponseFactory } from '@guardcore/core';\n\nexport class ExpressGuardRequest implements GuardRequest {\n  private _state: GuardRequestState = {};\n  private rawBody: Uint8Array | null = null;\n\n  constructor(private readonly req: Request) {\n    const raw = (req as unknown as Record<string, unknown>)['rawBody'];\n    if (raw instanceof Uint8Array) {\n      this.rawBody = raw;\n    } else if (raw instanceof Buffer) {\n      this.rawBody = new Uint8Array(raw);\n    }\n  }\n\n  get urlPath(): string { return this.req.path; }\n  get urlScheme(): string { return this.req.protocol; }\n  get urlFull(): string { return `${this.req.protocol}://${this.req.get('host')}${this.req.originalUrl}`; }\n  urlReplaceScheme(scheme: string): string { return this.urlFull.replace(/^https?/, scheme); }\n  get method(): string { return this.req.method; }\n  get clientHost(): string | null { return this.req.socket.remoteAddress ?? null; }\n  get headers(): Readonly<Record<string, string>> { return this.req.headers as Record<string, string>; }\n  get queryParams(): Readonly<Record<string, string>> { return this.req.query as Record<string, string>; }\n  async body(): Promise<Uint8Array> { return this.rawBody ?? new Uint8Array(0); }\n  get state(): GuardRequestState { return this._state; }\n  get scope(): Readonly<Record<string, unknown>> { return {}; }\n}\n\nexport class ExpressGuardResponse implements GuardResponse {\n  private _headers: Record<string, string> = {};\n  private _body: Uint8Array | null;\n\n  constructor(\n    readonly statusCode: number,\n    content: string,\n  ) {\n    this._body = new TextEncoder().encode(content);\n    this._headers['content-type'] = 'application/json';\n  }\n\n  get headers(): Record<string, string> { return this._headers; }\n  setHeader(name: string, value: string): void { this._headers[name] = value; }\n  get body(): Uint8Array | null { return this._body; }\n  get bodyText(): string | null {\n    return this._body ? new TextDecoder().decode(this._body) : null;\n  }\n}\n\nexport class ExpressResponseFactory implements GuardResponseFactory {\n  createResponse(content: string, statusCode: number): GuardResponse {\n    return new ExpressGuardResponse(statusCode, JSON.stringify({ detail: content }));\n  }\n\n  createRedirectResponse(url: string, statusCode: number): GuardResponse {\n    const resp = new ExpressGuardResponse(statusCode, '');\n    resp.setHeader('location', url);\n    return resp;\n  }\n}\n\nexport function sendGuardResponse(res: Response, guardResponse: GuardResponse): void {\n  for (const [name, value] of Object.entries(guardResponse.headers)) {\n    res.setHeader(name, value);\n  }\n\n  if (guardResponse.headers['location']) {\n    res.redirect(guardResponse.statusCode, guardResponse.headers['location']);\n    return;\n  }\n\n  res.status(guardResponse.statusCode);\n  if (guardResponse.body) {\n    res.send(Buffer.from(guardResponse.body));\n  } else {\n    res.end();\n  }\n}\n","import type { Express } from 'express';\nimport type { ResolvedSecurityConfig } from '@guardcore/core';\n\nexport function configureCors(app: Express, config: ResolvedSecurityConfig): void {\n  if (!config.enableCors) return;\n\n  try {\n    const corsMiddleware = require('cors');\n    app.use(corsMiddleware({\n      origin: config.corsAllowOrigins,\n      methods: config.corsAllowMethods,\n      allowedHeaders: config.corsAllowHeaders,\n      credentials: config.corsAllowCredentials,\n      exposedHeaders: config.corsExposeHeaders,\n      maxAge: config.corsMaxAge,\n    }));\n  } catch {\n    throw new Error(\n      '@guardcore/express: CORS is enabled but the \"cors\" package is not installed. ' +\n      'Run: pnpm add cors',\n    );\n  }\n}\n","import type { Request, Response, NextFunction, RequestHandler } from 'express';\nimport express from 'express';\n\nexport function guardBodyParser(): RequestHandler {\n  return express.json({\n    verify: (req: Request, _res: Response, buf: Buffer, _encoding: string) => {\n      (req as unknown as Record<string, unknown>)['rawBody'] = buf;\n    },\n  });\n}\n\nexport function guardUrlEncodedParser(): RequestHandler {\n  return express.urlencoded({\n    extended: true,\n    verify: (req: Request, _res: Response, buf: Buffer, _encoding: string) => {\n      (req as unknown as Record<string, unknown>)['rawBody'] = buf;\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACWA,kBAAkF;;;ACR3E,IAAM,sBAAN,MAAkD;AAAA,EAIvD,YAA6B,KAAc;AAAd;AAC3B,UAAM,MAAO,IAA2C,SAAS;AACjE,QAAI,eAAe,YAAY;AAC7B,WAAK,UAAU;AAAA,IACjB,WAAW,eAAe,QAAQ;AAChC,WAAK,UAAU,IAAI,WAAW,GAAG;AAAA,IACnC;AAAA,EACF;AAAA,EAVQ,SAA4B,CAAC;AAAA,EAC7B,UAA6B;AAAA,EAWrC,IAAI,UAAkB;AAAE,WAAO,KAAK,IAAI;AAAA,EAAM;AAAA,EAC9C,IAAI,YAAoB;AAAE,WAAO,KAAK,IAAI;AAAA,EAAU;AAAA,EACpD,IAAI,UAAkB;AAAE,WAAO,GAAG,KAAK,IAAI,QAAQ,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,WAAW;AAAA,EAAI;AAAA,EACxG,iBAAiB,QAAwB;AAAE,WAAO,KAAK,QAAQ,QAAQ,WAAW,MAAM;AAAA,EAAG;AAAA,EAC3F,IAAI,SAAiB;AAAE,WAAO,KAAK,IAAI;AAAA,EAAQ;AAAA,EAC/C,IAAI,aAA4B;AAAE,WAAO,KAAK,IAAI,OAAO,iBAAiB;AAAA,EAAM;AAAA,EAChF,IAAI,UAA4C;AAAE,WAAO,KAAK,IAAI;AAAA,EAAmC;AAAA,EACrG,IAAI,cAAgD;AAAE,WAAO,KAAK,IAAI;AAAA,EAAiC;AAAA,EACvG,MAAM,OAA4B;AAAE,WAAO,KAAK,WAAW,IAAI,WAAW,CAAC;AAAA,EAAG;AAAA,EAC9E,IAAI,QAA2B;AAAE,WAAO,KAAK;AAAA,EAAQ;AAAA,EACrD,IAAI,QAA2C;AAAE,WAAO,CAAC;AAAA,EAAG;AAC9D;AAEO,IAAM,uBAAN,MAAoD;AAAA,EAIzD,YACW,YACT,SACA;AAFS;AAGT,SAAK,QAAQ,IAAI,YAAY,EAAE,OAAO,OAAO;AAC7C,SAAK,SAAS,cAAc,IAAI;AAAA,EAClC;AAAA,EATQ,WAAmC,CAAC;AAAA,EACpC;AAAA,EAUR,IAAI,UAAkC;AAAE,WAAO,KAAK;AAAA,EAAU;AAAA,EAC9D,UAAU,MAAc,OAAqB;AAAE,SAAK,SAAS,IAAI,IAAI;AAAA,EAAO;AAAA,EAC5E,IAAI,OAA0B;AAAE,WAAO,KAAK;AAAA,EAAO;AAAA,EACnD,IAAI,WAA0B;AAC5B,WAAO,KAAK,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK,KAAK,IAAI;AAAA,EAC7D;AACF;AAEO,IAAM,yBAAN,MAA6D;AAAA,EAClE,eAAe,SAAiB,YAAmC;AACjE,WAAO,IAAI,qBAAqB,YAAY,KAAK,UAAU,EAAE,QAAQ,QAAQ,CAAC,CAAC;AAAA,EACjF;AAAA,EAEA,uBAAuB,KAAa,YAAmC;AACrE,UAAM,OAAO,IAAI,qBAAqB,YAAY,EAAE;AACpD,SAAK,UAAU,YAAY,GAAG;AAC9B,WAAO;AAAA,EACT;AACF;AAEO,SAAS,kBAAkB,KAAe,eAAoC;AACnF,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,cAAc,OAAO,GAAG;AACjE,QAAI,UAAU,MAAM,KAAK;AAAA,EAC3B;AAEA,MAAI,cAAc,QAAQ,UAAU,GAAG;AACrC,QAAI,SAAS,cAAc,YAAY,cAAc,QAAQ,UAAU,CAAC;AACxE;AAAA,EACF;AAEA,MAAI,OAAO,cAAc,UAAU;AACnC,MAAI,cAAc,MAAM;AACtB,QAAI,KAAK,OAAO,KAAK,cAAc,IAAI,CAAC;AAAA,EAC1C,OAAO;AACL,QAAI,IAAI;AAAA,EACV;AACF;;;ADxDO,SAAS,yBAAyB,SAAoC;AAC3E,QAAM,WAAW,iCAAqB,MAAM,QAAQ,MAAM;AAC1D,QAAM,SAAiB,SAAS,UAAU;AAC1C,QAAM,kBAAkB,IAAI,uBAAuB;AAEnD,MAAI,cAAc;AAClB,MAAI;AAEJ,iBAAe,aAA4B;AACzC,QAAI,YAAa;AACjB,iBAAa,UAAM;AAAA,MACjB;AAAA,MAAU;AAAA,MAAQ;AAAA,MAClB,QAAQ;AAAA,MAAc,QAAQ;AAAA,MAAc,QAAQ;AAAA,IACtD;AACA,kBAAc;AACd,WAAO,KAAK,uCAAuC;AAAA,EACrD;AAEA,SAAO,eAAe,gBAAgB,KAAc,KAAe,MAAmC;AACpG,UAAM,WAAW;AAEjB,UAAM,YAAY,YAAY,IAAI;AAClC,UAAM,WAAW,IAAI,oBAAoB,GAAG;AAE5C,UAAM,cAAc,MAAM,WAAW,cAAc;AAAA,MACjD;AAAA,MACA,YAAY,0BAA0B;AAAA,IACxC;AACA,QAAI,aAAa;AACf,wBAAkB,KAAK,WAAW;AAClC;AAAA,IACF;AAEA,UAAM,cAAc,WAAW,cAAc,eAAe,QAAQ;AAEpE,UAAM,SAAS,MAAM,WAAW,cAAc;AAAA,MAC5C;AAAA,MACA,YAAY,0BAA0B;AAAA,MACtC;AAAA,IACF;AACA,QAAI,QAAQ;AACV,wBAAkB,KAAK,MAAM;AAC7B;AAAA,IACF;AAEA,UAAM,gBAAgB,MAAM,WAAW,SAAS,QAAQ,QAAQ;AAChE,QAAI,eAAe;AACjB,wBAAkB,KAAK,aAAa;AACpC;AAAA,IACF;AAEA,QAAI,eAAe,YAAY,cAAc,SAAS,GAAG;AACvD,YAAM,WAAW,SAAS,cAAc;AACxC,YAAM,WAAW,oBAAoB,kBAAkB,UAAU,UAAU,WAAW;AAAA,IACxF;AAEA,UAAM,cAAc,IAAI;AACxB,UAAM,SAAmB,CAAC;AAE1B,QAAI,MAAM,SAAU,UAAmB,MAA2B;AAChE,UAAI,MAAO,QAAO,KAAK,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,OAAO,KAAK,CAAC,CAAC;AAElF,YAAM,gBAAgB,YAAY,IAAI,IAAI,aAAa;AACvD,YAAM,OAAO,OAAO,OAAO,MAAM;AACjC,YAAM,mBAAkC;AAAA,QACtC,YAAY,IAAI;AAAA,QAChB,SAAS,OAAO;AAAA,UACd,OAAO,QAAQ,IAAI,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;AAAA,QACjE;AAAA,QACA,UAAU,MAAc,OAAe;AAAE,cAAI,UAAU,MAAM,KAAK;AAAA,QAAG;AAAA,QACrE,MAAM,IAAI,WAAW,IAAI;AAAA,QACzB,UAAU,KAAK,SAAS,OAAO;AAAA,MACjC;AAEA,iBAAW,qBAAqB;AAAA,QAC9B;AAAA,QAAU;AAAA,QAAkB;AAAA,QAAc,eAAe;AAAA,QACzD,cAAc,OAAO,SAAuB,UAAyB,UAAkB,OAAoB;AACzG,gBAAM,WAAW,oBAAoB,mBAAmB,SAAS,UAAU,UAAU,EAAE;AAAA,QACzF,IAAI;AAAA,MACN,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAEhB,aAAO,YAAY,MAAM,KAAK,CAAC,OAAO,GAAG,IAAI,CAAmC;AAAA,IAClF;AAEA,SAAK;AAAA,EACP;AACF;AAEA,SAAS,4BAA2C;AAClD,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,SAAS,CAAC;AAAA,IACV,YAAY;AAAA,IAAC;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AACF;;;AElHO,SAAS,cAAc,KAAc,QAAsC;AAChF,MAAI,CAAC,OAAO,WAAY;AAExB,MAAI;AACF,UAAM,iBAAiB,QAAQ,MAAM;AACrC,QAAI,IAAI,eAAe;AAAA,MACrB,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA,MAChB,gBAAgB,OAAO;AAAA,MACvB,aAAa,OAAO;AAAA,MACpB,gBAAgB,OAAO;AAAA,MACvB,QAAQ,OAAO;AAAA,IACjB,CAAC,CAAC;AAAA,EACJ,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACF;;;ACrBA,qBAAoB;AAEb,SAAS,kBAAkC;AAChD,SAAO,eAAAA,QAAQ,KAAK;AAAA,IAClB,QAAQ,CAAC,KAAc,MAAgB,KAAa,cAAsB;AACxE,MAAC,IAA2C,SAAS,IAAI;AAAA,IAC3D;AAAA,EACF,CAAC;AACH;AAEO,SAAS,wBAAwC;AACtD,SAAO,eAAAA,QAAQ,WAAW;AAAA,IACxB,UAAU;AAAA,IACV,QAAQ,CAAC,KAAc,MAAgB,KAAa,cAAsB;AACxE,MAAC,IAA2C,SAAS,IAAI;AAAA,IAC3D;AAAA,EACF,CAAC;AACH;;;AJZA,IAAAC,eAOO;","names":["express","import_core"]}

package/dist/index.d.cts

@@ -0,0 +1,51 @@
+import { Request, Response, NextFunction, Express, RequestHandler } from 'express';
+import { SecurityConfig, AgentHandlerProtocol, GeoIPHandler, ResolvedSecurityConfig, GuardRequest, GuardRequestState, GuardResponse, GuardResponseFactory } from '@guardcore/core';
+export { BaseSecurityDecorator, BehaviorRule, GuardRequest, GuardResponse, HandlerRegistry, Logger, ResolvedSecurityConfig, RouteConfig, SecurityConfig, SecurityConfigSchema, SecurityDecorator, SecurityMiddlewareComponents, defaultLogger } from '@guardcore/core';
+
+interface SecurityMiddlewareOptions {
+    config: SecurityConfig;
+    agentHandler?: AgentHandlerProtocol;
+    geoIpHandler?: GeoIPHandler;
+    guardDecorator?: unknown;
+}
+declare function createSecurityMiddleware(options: SecurityMiddlewareOptions): (req: Request, res: Response, next: NextFunction) => Promise<void>;
+
+declare function configureCors(app: Express, config: ResolvedSecurityConfig): void;
+
+declare function guardBodyParser(): RequestHandler;
+declare function guardUrlEncodedParser(): RequestHandler;
+
+declare class ExpressGuardRequest implements GuardRequest {
+    private readonly req;
+    private _state;
+    private rawBody;
+    constructor(req: Request);
+    get urlPath(): string;
+    get urlScheme(): string;
+    get urlFull(): string;
+    urlReplaceScheme(scheme: string): string;
+    get method(): string;
+    get clientHost(): string | null;
+    get headers(): Readonly<Record<string, string>>;
+    get queryParams(): Readonly<Record<string, string>>;
+    body(): Promise<Uint8Array>;
+    get state(): GuardRequestState;
+    get scope(): Readonly<Record<string, unknown>>;
+}
+declare class ExpressGuardResponse implements GuardResponse {
+    readonly statusCode: number;
+    private _headers;
+    private _body;
+    constructor(statusCode: number, content: string);
+    get headers(): Record<string, string>;
+    setHeader(name: string, value: string): void;
+    get body(): Uint8Array | null;
+    get bodyText(): string | null;
+}
+declare class ExpressResponseFactory implements GuardResponseFactory {
+    createResponse(content: string, statusCode: number): GuardResponse;
+    createRedirectResponse(url: string, statusCode: number): GuardResponse;
+}
+declare function sendGuardResponse(res: Response, guardResponse: GuardResponse): void;
+
+export { ExpressGuardRequest, ExpressGuardResponse, ExpressResponseFactory, type SecurityMiddlewareOptions, configureCors, createSecurityMiddleware, guardBodyParser, guardUrlEncodedParser, sendGuardResponse };

package/dist/index.d.ts

@@ -0,0 +1,51 @@
+import { Request, Response, NextFunction, Express, RequestHandler } from 'express';
+import { SecurityConfig, AgentHandlerProtocol, GeoIPHandler, ResolvedSecurityConfig, GuardRequest, GuardRequestState, GuardResponse, GuardResponseFactory } from '@guardcore/core';
+export { BaseSecurityDecorator, BehaviorRule, GuardRequest, GuardResponse, HandlerRegistry, Logger, ResolvedSecurityConfig, RouteConfig, SecurityConfig, SecurityConfigSchema, SecurityDecorator, SecurityMiddlewareComponents, defaultLogger } from '@guardcore/core';
+
+interface SecurityMiddlewareOptions {
+    config: SecurityConfig;
+    agentHandler?: AgentHandlerProtocol;
+    geoIpHandler?: GeoIPHandler;
+    guardDecorator?: unknown;
+}
+declare function createSecurityMiddleware(options: SecurityMiddlewareOptions): (req: Request, res: Response, next: NextFunction) => Promise<void>;
+
+declare function configureCors(app: Express, config: ResolvedSecurityConfig): void;
+
+declare function guardBodyParser(): RequestHandler;
+declare function guardUrlEncodedParser(): RequestHandler;
+
+declare class ExpressGuardRequest implements GuardRequest {
+    private readonly req;
+    private _state;
+    private rawBody;
+    constructor(req: Request);
+    get urlPath(): string;
+    get urlScheme(): string;
+    get urlFull(): string;
+    urlReplaceScheme(scheme: string): string;
+    get method(): string;
+    get clientHost(): string | null;
+    get headers(): Readonly<Record<string, string>>;
+    get queryParams(): Readonly<Record<string, string>>;
+    body(): Promise<Uint8Array>;
+    get state(): GuardRequestState;
+    get scope(): Readonly<Record<string, unknown>>;
+}
+declare class ExpressGuardResponse implements GuardResponse {
+    readonly statusCode: number;
+    private _headers;
+    private _body;
+    constructor(statusCode: number, content: string);
+    get headers(): Record<string, string>;
+    setHeader(name: string, value: string): void;
+    get body(): Uint8Array | null;
+    get bodyText(): string | null;
+}
+declare class ExpressResponseFactory implements GuardResponseFactory {
+    createResponse(content: string, statusCode: number): GuardResponse;
+    createRedirectResponse(url: string, statusCode: number): GuardResponse;
+}
+declare function sendGuardResponse(res: Response, guardResponse: GuardResponse): void;
+
+export { ExpressGuardRequest, ExpressGuardResponse, ExpressResponseFactory, type SecurityMiddlewareOptions, configureCors, createSecurityMiddleware, guardBodyParser, guardUrlEncodedParser, sendGuardResponse };

package/dist/index.js

@@ -0,0 +1,262 @@
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
+// src/middleware.ts
+import { SecurityConfigSchema, defaultLogger, initializeSecurityMiddleware } from "@guardcore/core";
+
+// src/adapters.ts
+var ExpressGuardRequest = class {
+  constructor(req) {
+    this.req = req;
+    const raw = req["rawBody"];
+    if (raw instanceof Uint8Array) {
+      this.rawBody = raw;
+    } else if (raw instanceof Buffer) {
+      this.rawBody = new Uint8Array(raw);
+    }
+  }
+  _state = {};
+  rawBody = null;
+  get urlPath() {
+    return this.req.path;
+  }
+  get urlScheme() {
+    return this.req.protocol;
+  }
+  get urlFull() {
+    return `${this.req.protocol}://${this.req.get("host")}${this.req.originalUrl}`;
+  }
+  urlReplaceScheme(scheme) {
+    return this.urlFull.replace(/^https?/, scheme);
+  }
+  get method() {
+    return this.req.method;
+  }
+  get clientHost() {
+    return this.req.socket.remoteAddress ?? null;
+  }
+  get headers() {
+    return this.req.headers;
+  }
+  get queryParams() {
+    return this.req.query;
+  }
+  async body() {
+    return this.rawBody ?? new Uint8Array(0);
+  }
+  get state() {
+    return this._state;
+  }
+  get scope() {
+    return {};
+  }
+};
+var ExpressGuardResponse = class {
+  constructor(statusCode, content) {
+    this.statusCode = statusCode;
+    this._body = new TextEncoder().encode(content);
+    this._headers["content-type"] = "application/json";
+  }
+  _headers = {};
+  _body;
+  get headers() {
+    return this._headers;
+  }
+  setHeader(name, value) {
+    this._headers[name] = value;
+  }
+  get body() {
+    return this._body;
+  }
+  get bodyText() {
+    return this._body ? new TextDecoder().decode(this._body) : null;
+  }
+};
+var ExpressResponseFactory = class {
+  createResponse(content, statusCode) {
+    return new ExpressGuardResponse(statusCode, JSON.stringify({ detail: content }));
+  }
+  createRedirectResponse(url, statusCode) {
+    const resp = new ExpressGuardResponse(statusCode, "");
+    resp.setHeader("location", url);
+    return resp;
+  }
+};
+function sendGuardResponse(res, guardResponse) {
+  for (const [name, value] of Object.entries(guardResponse.headers)) {
+    res.setHeader(name, value);
+  }
+  if (guardResponse.headers["location"]) {
+    res.redirect(guardResponse.statusCode, guardResponse.headers["location"]);
+    return;
+  }
+  res.status(guardResponse.statusCode);
+  if (guardResponse.body) {
+    res.send(Buffer.from(guardResponse.body));
+  } else {
+    res.end();
+  }
+}
+
+// src/middleware.ts
+function createSecurityMiddleware(options) {
+  const resolved = SecurityConfigSchema.parse(options.config);
+  const logger = resolved.logger ?? defaultLogger;
+  const responseFactory = new ExpressResponseFactory();
+  let initialized = false;
+  let components;
+  async function initialize() {
+    if (initialized) return;
+    components = await initializeSecurityMiddleware(
+      resolved,
+      logger,
+      responseFactory,
+      options.agentHandler,
+      options.geoIpHandler,
+      options.guardDecorator
+    );
+    initialized = true;
+    logger.info("Guard security middleware initialized");
+  }
+  return async function guardMiddleware(req, res, next) {
+    await initialize();
+    const startTime = performance.now();
+    const guardReq = new ExpressGuardRequest(req);
+    const passthrough = await components.bypassHandler.handlePassthrough(
+      guardReq,
+      async () => createPassthroughResponse()
+    );
+    if (passthrough) {
+      sendGuardResponse(res, passthrough);
+      return;
+    }
+    const routeConfig = components.routeResolver.getRouteConfig(guardReq);
+    const bypass = await components.bypassHandler.handleSecurityBypass(
+      guardReq,
+      async () => createPassthroughResponse(),
+      routeConfig
+    );
+    if (bypass) {
+      sendGuardResponse(res, bypass);
+      return;
+    }
+    const blockResponse = await components.pipeline.execute(guardReq);
+    if (blockResponse) {
+      sendGuardResponse(res, blockResponse);
+      return;
+    }
+    if (routeConfig && routeConfig.behaviorRules.length > 0) {
+      const clientIp = guardReq.clientHost ?? "unknown";
+      await components.behavioralProcessor.processUsageRules(guardReq, clientIp, routeConfig);
+    }
+    const originalEnd = res.end;
+    const chunks = [];
+    res.end = function(chunk, ...args) {
+      if (chunk) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));
+      const responseTime = (performance.now() - startTime) / 1e3;
+      const body = Buffer.concat(chunks);
+      const capturedResponse = {
+        statusCode: res.statusCode,
+        headers: Object.fromEntries(
+          Object.entries(res.getHeaders()).map(([k, v]) => [k, String(v)])
+        ),
+        setHeader(name, value) {
+          res.setHeader(name, value);
+        },
+        body: new Uint8Array(body),
+        bodyText: body.toString("utf-8")
+      };
+      components.errorResponseFactory.processResponse(
+        guardReq,
+        capturedResponse,
+        responseTime,
+        routeConfig ?? null,
+        routeConfig ? async (request, response, clientIp, rc) => {
+          await components.behavioralProcessor.processReturnRules(request, response, clientIp, rc);
+        } : void 0
+      ).catch(() => {
+      });
+      return originalEnd.apply(res, [chunk, ...args]);
+    };
+    next();
+  };
+}
+function createPassthroughResponse() {
+  return {
+    statusCode: 200,
+    headers: {},
+    setHeader() {
+    },
+    body: null,
+    bodyText: null
+  };
+}
+
+// src/cors.ts
+function configureCors(app, config) {
+  if (!config.enableCors) return;
+  try {
+    const corsMiddleware = __require("cors");
+    app.use(corsMiddleware({
+      origin: config.corsAllowOrigins,
+      methods: config.corsAllowMethods,
+      allowedHeaders: config.corsAllowHeaders,
+      credentials: config.corsAllowCredentials,
+      exposedHeaders: config.corsExposeHeaders,
+      maxAge: config.corsMaxAge
+    }));
+  } catch {
+    throw new Error(
+      '@guardcore/express: CORS is enabled but the "cors" package is not installed. Run: pnpm add cors'
+    );
+  }
+}
+
+// src/body-parser.ts
+import express from "express";
+function guardBodyParser() {
+  return express.json({
+    verify: (req, _res, buf, _encoding) => {
+      req["rawBody"] = buf;
+    }
+  });
+}
+function guardUrlEncodedParser() {
+  return express.urlencoded({
+    extended: true,
+    verify: (req, _res, buf, _encoding) => {
+      req["rawBody"] = buf;
+    }
+  });
+}
+
+// src/index.ts
+import {
+  SecurityConfigSchema as SecurityConfigSchema2,
+  BaseSecurityDecorator,
+  SecurityDecorator,
+  RouteConfig,
+  BehaviorRule,
+  defaultLogger as defaultLogger2
+} from "@guardcore/core";
+export {
+  BaseSecurityDecorator,
+  BehaviorRule,
+  ExpressGuardRequest,
+  ExpressGuardResponse,
+  ExpressResponseFactory,
+  RouteConfig,
+  SecurityConfigSchema2 as SecurityConfigSchema,
+  SecurityDecorator,
+  configureCors,
+  createSecurityMiddleware,
+  defaultLogger2 as defaultLogger,
+  guardBodyParser,
+  guardUrlEncodedParser,
+  sendGuardResponse
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/middleware.ts","../src/adapters.ts","../src/cors.ts","../src/body-parser.ts","../src/index.ts"],"sourcesContent":["import type { Request, Response, NextFunction } from 'express';\nimport type {\n  SecurityConfig,\n  GuardRequest,\n  GuardResponse,\n  Logger,\n  AgentHandlerProtocol,\n  GeoIPHandler,\n  SecurityMiddlewareComponents,\n  RouteConfig,\n} from '@guardcore/core';\nimport { SecurityConfigSchema, defaultLogger, initializeSecurityMiddleware } from '@guardcore/core';\nimport { ExpressGuardRequest, ExpressResponseFactory, sendGuardResponse } from './adapters.js';\n\nexport interface SecurityMiddlewareOptions {\n  config: SecurityConfig;\n  agentHandler?: AgentHandlerProtocol;\n  geoIpHandler?: GeoIPHandler;\n  guardDecorator?: unknown;\n}\n\nexport function createSecurityMiddleware(options: SecurityMiddlewareOptions) {\n  const resolved = SecurityConfigSchema.parse(options.config);\n  const logger: Logger = resolved.logger ?? defaultLogger;\n  const responseFactory = new ExpressResponseFactory();\n\n  let initialized = false;\n  let components: SecurityMiddlewareComponents;\n\n  async function initialize(): Promise<void> {\n    if (initialized) return;\n    components = await initializeSecurityMiddleware(\n      resolved, logger, responseFactory,\n      options.agentHandler, options.geoIpHandler, options.guardDecorator,\n    );\n    initialized = true;\n    logger.info('Guard security middleware initialized');\n  }\n\n  return async function guardMiddleware(req: Request, res: Response, next: NextFunction): Promise<void> {\n    await initialize();\n\n    const startTime = performance.now();\n    const guardReq = new ExpressGuardRequest(req);\n\n    const passthrough = await components.bypassHandler.handlePassthrough(\n      guardReq,\n      async () => createPassthroughResponse(),\n    );\n    if (passthrough) {\n      sendGuardResponse(res, passthrough);\n      return;\n    }\n\n    const routeConfig = components.routeResolver.getRouteConfig(guardReq);\n\n    const bypass = await components.bypassHandler.handleSecurityBypass(\n      guardReq,\n      async () => createPassthroughResponse(),\n      routeConfig,\n    );\n    if (bypass) {\n      sendGuardResponse(res, bypass);\n      return;\n    }\n\n    const blockResponse = await components.pipeline.execute(guardReq);\n    if (blockResponse) {\n      sendGuardResponse(res, blockResponse);\n      return;\n    }\n\n    if (routeConfig && routeConfig.behaviorRules.length > 0) {\n      const clientIp = guardReq.clientHost ?? 'unknown';\n      await components.behavioralProcessor.processUsageRules(guardReq, clientIp, routeConfig);\n    }\n\n    const originalEnd = res.end;\n    const chunks: Buffer[] = [];\n\n    res.end = function (chunk: unknown, ...args: unknown[]): Response {\n      if (chunk) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));\n\n      const responseTime = (performance.now() - startTime) / 1000;\n      const body = Buffer.concat(chunks);\n      const capturedResponse: GuardResponse = {\n        statusCode: res.statusCode,\n        headers: Object.fromEntries(\n          Object.entries(res.getHeaders()).map(([k, v]) => [k, String(v)]),\n        ),\n        setHeader(name: string, value: string) { res.setHeader(name, value); },\n        body: new Uint8Array(body),\n        bodyText: body.toString('utf-8'),\n      };\n\n      components.errorResponseFactory.processResponse(\n        guardReq, capturedResponse, responseTime, routeConfig ?? null,\n        routeConfig ? async (request: GuardRequest, response: GuardResponse, clientIp: string, rc: RouteConfig) => {\n          await components.behavioralProcessor.processReturnRules(request, response, clientIp, rc);\n        } : undefined,\n      ).catch(() => {});\n\n      return originalEnd.apply(res, [chunk, ...args] as Parameters<typeof originalEnd>);\n    };\n\n    next();\n  };\n}\n\nfunction createPassthroughResponse(): GuardResponse {\n  return {\n    statusCode: 200,\n    headers: {},\n    setHeader() {},\n    body: null,\n    bodyText: null,\n  };\n}\n","import type { Request, Response } from 'express';\nimport type { GuardRequest, GuardRequestState, GuardResponse, GuardResponseFactory } from '@guardcore/core';\n\nexport class ExpressGuardRequest implements GuardRequest {\n  private _state: GuardRequestState = {};\n  private rawBody: Uint8Array | null = null;\n\n  constructor(private readonly req: Request) {\n    const raw = (req as unknown as Record<string, unknown>)['rawBody'];\n    if (raw instanceof Uint8Array) {\n      this.rawBody = raw;\n    } else if (raw instanceof Buffer) {\n      this.rawBody = new Uint8Array(raw);\n    }\n  }\n\n  get urlPath(): string { return this.req.path; }\n  get urlScheme(): string { return this.req.protocol; }\n  get urlFull(): string { return `${this.req.protocol}://${this.req.get('host')}${this.req.originalUrl}`; }\n  urlReplaceScheme(scheme: string): string { return this.urlFull.replace(/^https?/, scheme); }\n  get method(): string { return this.req.method; }\n  get clientHost(): string | null { return this.req.socket.remoteAddress ?? null; }\n  get headers(): Readonly<Record<string, string>> { return this.req.headers as Record<string, string>; }\n  get queryParams(): Readonly<Record<string, string>> { return this.req.query as Record<string, string>; }\n  async body(): Promise<Uint8Array> { return this.rawBody ?? new Uint8Array(0); }\n  get state(): GuardRequestState { return this._state; }\n  get scope(): Readonly<Record<string, unknown>> { return {}; }\n}\n\nexport class ExpressGuardResponse implements GuardResponse {\n  private _headers: Record<string, string> = {};\n  private _body: Uint8Array | null;\n\n  constructor(\n    readonly statusCode: number,\n    content: string,\n  ) {\n    this._body = new TextEncoder().encode(content);\n    this._headers['content-type'] = 'application/json';\n  }\n\n  get headers(): Record<string, string> { return this._headers; }\n  setHeader(name: string, value: string): void { this._headers[name] = value; }\n  get body(): Uint8Array | null { return this._body; }\n  get bodyText(): string | null {\n    return this._body ? new TextDecoder().decode(this._body) : null;\n  }\n}\n\nexport class ExpressResponseFactory implements GuardResponseFactory {\n  createResponse(content: string, statusCode: number): GuardResponse {\n    return new ExpressGuardResponse(statusCode, JSON.stringify({ detail: content }));\n  }\n\n  createRedirectResponse(url: string, statusCode: number): GuardResponse {\n    const resp = new ExpressGuardResponse(statusCode, '');\n    resp.setHeader('location', url);\n    return resp;\n  }\n}\n\nexport function sendGuardResponse(res: Response, guardResponse: GuardResponse): void {\n  for (const [name, value] of Object.entries(guardResponse.headers)) {\n    res.setHeader(name, value);\n  }\n\n  if (guardResponse.headers['location']) {\n    res.redirect(guardResponse.statusCode, guardResponse.headers['location']);\n    return;\n  }\n\n  res.status(guardResponse.statusCode);\n  if (guardResponse.body) {\n    res.send(Buffer.from(guardResponse.body));\n  } else {\n    res.end();\n  }\n}\n","import type { Express } from 'express';\nimport type { ResolvedSecurityConfig } from '@guardcore/core';\n\nexport function configureCors(app: Express, config: ResolvedSecurityConfig): void {\n  if (!config.enableCors) return;\n\n  try {\n    const corsMiddleware = require('cors');\n    app.use(corsMiddleware({\n      origin: config.corsAllowOrigins,\n      methods: config.corsAllowMethods,\n      allowedHeaders: config.corsAllowHeaders,\n      credentials: config.corsAllowCredentials,\n      exposedHeaders: config.corsExposeHeaders,\n      maxAge: config.corsMaxAge,\n    }));\n  } catch {\n    throw new Error(\n      '@guardcore/express: CORS is enabled but the \"cors\" package is not installed. ' +\n      'Run: pnpm add cors',\n    );\n  }\n}\n","import type { Request, Response, NextFunction, RequestHandler } from 'express';\nimport express from 'express';\n\nexport function guardBodyParser(): RequestHandler {\n  return express.json({\n    verify: (req: Request, _res: Response, buf: Buffer, _encoding: string) => {\n      (req as unknown as Record<string, unknown>)['rawBody'] = buf;\n    },\n  });\n}\n\nexport function guardUrlEncodedParser(): RequestHandler {\n  return express.urlencoded({\n    extended: true,\n    verify: (req: Request, _res: Response, buf: Buffer, _encoding: string) => {\n      (req as unknown as Record<string, unknown>)['rawBody'] = buf;\n    },\n  });\n}\n","export { createSecurityMiddleware } from './middleware.js';\nexport type { SecurityMiddlewareOptions } from './middleware.js';\nexport { configureCors } from './cors.js';\nexport { guardBodyParser, guardUrlEncodedParser } from './body-parser.js';\nexport { ExpressGuardRequest, ExpressGuardResponse, ExpressResponseFactory, sendGuardResponse } from './adapters.js';\n\nexport {\n  SecurityConfigSchema,\n  BaseSecurityDecorator,\n  SecurityDecorator,\n  RouteConfig,\n  BehaviorRule,\n  defaultLogger,\n} from '@guardcore/core';\n\nexport type {\n  SecurityConfig,\n  ResolvedSecurityConfig,\n  GuardRequest,\n  GuardResponse,\n  Logger,\n  SecurityMiddlewareComponents,\n  HandlerRegistry,\n} from '@guardcore/core';\n"],"mappings":";;;;;;;;AAWA,SAAS,sBAAsB,eAAe,oCAAoC;;;ACR3E,IAAM,sBAAN,MAAkD;AAAA,EAIvD,YAA6B,KAAc;AAAd;AAC3B,UAAM,MAAO,IAA2C,SAAS;AACjE,QAAI,eAAe,YAAY;AAC7B,WAAK,UAAU;AAAA,IACjB,WAAW,eAAe,QAAQ;AAChC,WAAK,UAAU,IAAI,WAAW,GAAG;AAAA,IACnC;AAAA,EACF;AAAA,EAVQ,SAA4B,CAAC;AAAA,EAC7B,UAA6B;AAAA,EAWrC,IAAI,UAAkB;AAAE,WAAO,KAAK,IAAI;AAAA,EAAM;AAAA,EAC9C,IAAI,YAAoB;AAAE,WAAO,KAAK,IAAI;AAAA,EAAU;AAAA,EACpD,IAAI,UAAkB;AAAE,WAAO,GAAG,KAAK,IAAI,QAAQ,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,WAAW;AAAA,EAAI;AAAA,EACxG,iBAAiB,QAAwB;AAAE,WAAO,KAAK,QAAQ,QAAQ,WAAW,MAAM;AAAA,EAAG;AAAA,EAC3F,IAAI,SAAiB;AAAE,WAAO,KAAK,IAAI;AAAA,EAAQ;AAAA,EAC/C,IAAI,aAA4B;AAAE,WAAO,KAAK,IAAI,OAAO,iBAAiB;AAAA,EAAM;AAAA,EAChF,IAAI,UAA4C;AAAE,WAAO,KAAK,IAAI;AAAA,EAAmC;AAAA,EACrG,IAAI,cAAgD;AAAE,WAAO,KAAK,IAAI;AAAA,EAAiC;AAAA,EACvG,MAAM,OAA4B;AAAE,WAAO,KAAK,WAAW,IAAI,WAAW,CAAC;AAAA,EAAG;AAAA,EAC9E,IAAI,QAA2B;AAAE,WAAO,KAAK;AAAA,EAAQ;AAAA,EACrD,IAAI,QAA2C;AAAE,WAAO,CAAC;AAAA,EAAG;AAC9D;AAEO,IAAM,uBAAN,MAAoD;AAAA,EAIzD,YACW,YACT,SACA;AAFS;AAGT,SAAK,QAAQ,IAAI,YAAY,EAAE,OAAO,OAAO;AAC7C,SAAK,SAAS,cAAc,IAAI;AAAA,EAClC;AAAA,EATQ,WAAmC,CAAC;AAAA,EACpC;AAAA,EAUR,IAAI,UAAkC;AAAE,WAAO,KAAK;AAAA,EAAU;AAAA,EAC9D,UAAU,MAAc,OAAqB;AAAE,SAAK,SAAS,IAAI,IAAI;AAAA,EAAO;AAAA,EAC5E,IAAI,OAA0B;AAAE,WAAO,KAAK;AAAA,EAAO;AAAA,EACnD,IAAI,WAA0B;AAC5B,WAAO,KAAK,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK,KAAK,IAAI;AAAA,EAC7D;AACF;AAEO,IAAM,yBAAN,MAA6D;AAAA,EAClE,eAAe,SAAiB,YAAmC;AACjE,WAAO,IAAI,qBAAqB,YAAY,KAAK,UAAU,EAAE,QAAQ,QAAQ,CAAC,CAAC;AAAA,EACjF;AAAA,EAEA,uBAAuB,KAAa,YAAmC;AACrE,UAAM,OAAO,IAAI,qBAAqB,YAAY,EAAE;AACpD,SAAK,UAAU,YAAY,GAAG;AAC9B,WAAO;AAAA,EACT;AACF;AAEO,SAAS,kBAAkB,KAAe,eAAoC;AACnF,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,cAAc,OAAO,GAAG;AACjE,QAAI,UAAU,MAAM,KAAK;AAAA,EAC3B;AAEA,MAAI,cAAc,QAAQ,UAAU,GAAG;AACrC,QAAI,SAAS,cAAc,YAAY,cAAc,QAAQ,UAAU,CAAC;AACxE;AAAA,EACF;AAEA,MAAI,OAAO,cAAc,UAAU;AACnC,MAAI,cAAc,MAAM;AACtB,QAAI,KAAK,OAAO,KAAK,cAAc,IAAI,CAAC;AAAA,EAC1C,OAAO;AACL,QAAI,IAAI;AAAA,EACV;AACF;;;ADxDO,SAAS,yBAAyB,SAAoC;AAC3E,QAAM,WAAW,qBAAqB,MAAM,QAAQ,MAAM;AAC1D,QAAM,SAAiB,SAAS,UAAU;AAC1C,QAAM,kBAAkB,IAAI,uBAAuB;AAEnD,MAAI,cAAc;AAClB,MAAI;AAEJ,iBAAe,aAA4B;AACzC,QAAI,YAAa;AACjB,iBAAa,MAAM;AAAA,MACjB;AAAA,MAAU;AAAA,MAAQ;AAAA,MAClB,QAAQ;AAAA,MAAc,QAAQ;AAAA,MAAc,QAAQ;AAAA,IACtD;AACA,kBAAc;AACd,WAAO,KAAK,uCAAuC;AAAA,EACrD;AAEA,SAAO,eAAe,gBAAgB,KAAc,KAAe,MAAmC;AACpG,UAAM,WAAW;AAEjB,UAAM,YAAY,YAAY,IAAI;AAClC,UAAM,WAAW,IAAI,oBAAoB,GAAG;AAE5C,UAAM,cAAc,MAAM,WAAW,cAAc;AAAA,MACjD;AAAA,MACA,YAAY,0BAA0B;AAAA,IACxC;AACA,QAAI,aAAa;AACf,wBAAkB,KAAK,WAAW;AAClC;AAAA,IACF;AAEA,UAAM,cAAc,WAAW,cAAc,eAAe,QAAQ;AAEpE,UAAM,SAAS,MAAM,WAAW,cAAc;AAAA,MAC5C;AAAA,MACA,YAAY,0BAA0B;AAAA,MACtC;AAAA,IACF;AACA,QAAI,QAAQ;AACV,wBAAkB,KAAK,MAAM;AAC7B;AAAA,IACF;AAEA,UAAM,gBAAgB,MAAM,WAAW,SAAS,QAAQ,QAAQ;AAChE,QAAI,eAAe;AACjB,wBAAkB,KAAK,aAAa;AACpC;AAAA,IACF;AAEA,QAAI,eAAe,YAAY,cAAc,SAAS,GAAG;AACvD,YAAM,WAAW,SAAS,cAAc;AACxC,YAAM,WAAW,oBAAoB,kBAAkB,UAAU,UAAU,WAAW;AAAA,IACxF;AAEA,UAAM,cAAc,IAAI;AACxB,UAAM,SAAmB,CAAC;AAE1B,QAAI,MAAM,SAAU,UAAmB,MAA2B;AAChE,UAAI,MAAO,QAAO,KAAK,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,OAAO,KAAK,CAAC,CAAC;AAElF,YAAM,gBAAgB,YAAY,IAAI,IAAI,aAAa;AACvD,YAAM,OAAO,OAAO,OAAO,MAAM;AACjC,YAAM,mBAAkC;AAAA,QACtC,YAAY,IAAI;AAAA,QAChB,SAAS,OAAO;AAAA,UACd,OAAO,QAAQ,IAAI,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;AAAA,QACjE;AAAA,QACA,UAAU,MAAc,OAAe;AAAE,cAAI,UAAU,MAAM,KAAK;AAAA,QAAG;AAAA,QACrE,MAAM,IAAI,WAAW,IAAI;AAAA,QACzB,UAAU,KAAK,SAAS,OAAO;AAAA,MACjC;AAEA,iBAAW,qBAAqB;AAAA,QAC9B;AAAA,QAAU;AAAA,QAAkB;AAAA,QAAc,eAAe;AAAA,QACzD,cAAc,OAAO,SAAuB,UAAyB,UAAkB,OAAoB;AACzG,gBAAM,WAAW,oBAAoB,mBAAmB,SAAS,UAAU,UAAU,EAAE;AAAA,QACzF,IAAI;AAAA,MACN,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAEhB,aAAO,YAAY,MAAM,KAAK,CAAC,OAAO,GAAG,IAAI,CAAmC;AAAA,IAClF;AAEA,SAAK;AAAA,EACP;AACF;AAEA,SAAS,4BAA2C;AAClD,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,SAAS,CAAC;AAAA,IACV,YAAY;AAAA,IAAC;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AACF;;;AElHO,SAAS,cAAc,KAAc,QAAsC;AAChF,MAAI,CAAC,OAAO,WAAY;AAExB,MAAI;AACF,UAAM,iBAAiB,UAAQ,MAAM;AACrC,QAAI,IAAI,eAAe;AAAA,MACrB,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA,MAChB,gBAAgB,OAAO;AAAA,MACvB,aAAa,OAAO;AAAA,MACpB,gBAAgB,OAAO;AAAA,MACvB,QAAQ,OAAO;AAAA,IACjB,CAAC,CAAC;AAAA,EACJ,QAAQ;AACN,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACF;;;ACrBA,OAAO,aAAa;AAEb,SAAS,kBAAkC;AAChD,SAAO,QAAQ,KAAK;AAAA,IAClB,QAAQ,CAAC,KAAc,MAAgB,KAAa,cAAsB;AACxE,MAAC,IAA2C,SAAS,IAAI;AAAA,IAC3D;AAAA,EACF,CAAC;AACH;AAEO,SAAS,wBAAwC;AACtD,SAAO,QAAQ,WAAW;AAAA,IACxB,UAAU;AAAA,IACV,QAAQ,CAAC,KAAc,MAAgB,KAAa,cAAsB;AACxE,MAAC,IAA2C,SAAS,IAAI;AAAA,IAC3D;AAAA,EACF,CAAC;AACH;;;ACZA;AAAA,EACE,wBAAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,iBAAAC;AAAA,OACK;","names":["SecurityConfigSchema","defaultLogger"]}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@guardcore/express",
+  "version": "1.0.0",
+  "description": "Express adapter for @guardcore/core security middleware",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "lint": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@guardcore/core": "workspace:*"
+  },
+  "devDependencies": {
+    "tsup": "^8",
+    "vitest": "^4",
+    "typescript": "~5.9",
+    "@types/express": "^5"
+  },
+  "peerDependencies": {
+    "express": "^4 || ^5",
+    "cors": "^2"
+  },
+  "peerDependenciesMeta": {
+    "cors": {
+      "optional": true
+    }
+  },
+  "license": "MIT",
+  "engines": {
+    "node": ">=18"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/rennf93/guard-core-ts.git",
+    "directory": "packages/express"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}