@hazeljs/core 0.2.0-beta.1

package/dist/middleware/global-middleware.d.ts

@@ -0,0 +1,111 @@
+import { Request, Response } from '../types';
+/**
+ * Next function type for middleware chain
+ */
+export type NextFunction = () => Promise<void> | void;
+/**
+ * Middleware function type
+ */
+export type MiddlewareFunction = (req: Request, res: Response, next: NextFunction) => Promise<void> | void;
+/**
+ * Middleware interface
+ */
+export interface MiddlewareConsumer {
+    apply(...middleware: Array<MiddlewareFunction | MiddlewareClass>): MiddlewareConfigProxy;
+}
+/**
+ * Middleware class interface
+ */
+export interface MiddlewareClass {
+    use(req: Request, res: Response, next: NextFunction): Promise<void> | void;
+}
+/**
+ * Middleware configuration proxy
+ */
+export interface MiddlewareConfigProxy {
+    forRoutes(...routes: Array<string | RouteInfo>): MiddlewareConfigProxy;
+    exclude(...routes: Array<string | RouteInfo>): MiddlewareConfigProxy;
+}
+/**
+ * Route information
+ */
+export interface RouteInfo {
+    path: string;
+    method?: string;
+}
+/**
+ * Global middleware manager
+ */
+export declare class GlobalMiddlewareManager {
+    private middleware;
+    /**
+     * Add global middleware
+     */
+    use(middleware: MiddlewareFunction | MiddlewareClass): void;
+    /**
+     * Add middleware for specific routes
+     */
+    useFor(middleware: MiddlewareFunction | MiddlewareClass, routes: Array<string | RouteInfo>): void;
+    /**
+     * Add middleware with exclusions
+     */
+    useExcept(middleware: MiddlewareFunction | MiddlewareClass, excludedRoutes: Array<string | RouteInfo>): void;
+    /**
+     * Execute middleware chain for a request
+     */
+    execute(req: Request, res: Response): Promise<void>;
+    /**
+     * Get middleware applicable to a request
+     */
+    private getApplicableMiddleware;
+    /**
+     * Check if request matches any route
+     */
+    private matchesAnyRoute;
+    /**
+     * Match path with pattern
+     */
+    private matchPath;
+    /**
+     * Normalize routes to RouteInfo array
+     */
+    private normalizeRoutes;
+    /**
+     * Clear all middleware
+     */
+    clear(): void;
+    /**
+     * Get all registered middleware
+     */
+    getMiddleware(): MiddlewareEntry[];
+}
+/**
+ * Middleware entry
+ */
+interface MiddlewareEntry {
+    handler: MiddlewareFunction | MiddlewareClass;
+    routes: RouteInfo[];
+    excludedRoutes: RouteInfo[];
+}
+/**
+ * Built-in CORS middleware
+ */
+export declare class CorsMiddleware implements MiddlewareClass {
+    private options;
+    constructor(options?: CorsOptions);
+    use(req: Request, res: Response, next: NextFunction): void;
+}
+export interface CorsOptions {
+    origin?: string;
+    methods?: string[];
+    allowedHeaders?: string[];
+    credentials?: boolean;
+}
+/**
+ * Built-in logging middleware
+ */
+export declare class LoggerMiddleware implements MiddlewareClass {
+    use(req: Request, res: Response, next: NextFunction): Promise<void>;
+}
+export {};
+//# sourceMappingURL=global-middleware.d.ts.map

package/dist/middleware/global-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/global-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAG7C;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAEtD;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAC/B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,KACf,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAE1B;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,kBAAkB,GAAG,eAAe,CAAC,GAAG,qBAAqB,CAAC;CAC1F;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC5E;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,qBAAqB,CAAC;IACvE,OAAO,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,qBAAqB,CAAC;CACtE;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,UAAU,CAAyB;IAE3C;;OAEG;IACH,GAAG,CAAC,UAAU,EAAE,kBAAkB,GAAG,eAAe,GAAG,IAAI;IAS3D;;OAEG;IACH,MAAM,CACJ,UAAU,EAAE,kBAAkB,GAAG,eAAe,EAChD,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,GAChC,IAAI;IASP;;OAEG;IACH,SAAS,CACP,UAAU,EAAE,kBAAkB,GAAG,eAAe,EAChD,cAAc,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,GACxC,IAAI;IASP;;OAEG;IACG,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BzD;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAiB/B;;OAEG;IACH,OAAO,CAAC,eAAe;IAWvB;;OAEG;IACH,OAAO,CAAC,SAAS;IAUjB;;OAEG;IACH,OAAO,CAAC,eAAe;IASvB;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,aAAa,IAAI,eAAe,EAAE;CAGnC;AAED;;GAEG;AACH,UAAU,eAAe;IACvB,OAAO,EAAE,kBAAkB,GAAG,eAAe,CAAC;IAC9C,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,cAAc,EAAE,SAAS,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,qBAAa,cAAe,YAAW,eAAe;IACxC,OAAO,CAAC,OAAO;gBAAP,OAAO,GAAE,WAAgB;IAE7C,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI;CAoB3D;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,qBAAa,gBAAiB,YAAW,eAAe;IAChD,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAU1E"}

package/dist/middleware/global-middleware.js

@@ -0,0 +1,179 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoggerMiddleware = exports.CorsMiddleware = exports.GlobalMiddlewareManager = void 0;
+const logger_1 = __importDefault(require("../logger"));
+/**
+ * Global middleware manager
+ */
+class GlobalMiddlewareManager {
+    constructor() {
+        this.middleware = [];
+    }
+    /**
+     * Add global middleware
+     */
+    use(middleware) {
+        logger_1.default.info('Registering global middleware');
+        this.middleware.push({
+            handler: middleware,
+            routes: [],
+            excludedRoutes: [],
+        });
+    }
+    /**
+     * Add middleware for specific routes
+     */
+    useFor(middleware, routes) {
+        logger_1.default.info('Registering route-specific middleware');
+        this.middleware.push({
+            handler: middleware,
+            routes: this.normalizeRoutes(routes),
+            excludedRoutes: [],
+        });
+    }
+    /**
+     * Add middleware with exclusions
+     */
+    useExcept(middleware, excludedRoutes) {
+        logger_1.default.info('Registering middleware with exclusions');
+        this.middleware.push({
+            handler: middleware,
+            routes: [],
+            excludedRoutes: this.normalizeRoutes(excludedRoutes),
+        });
+    }
+    /**
+     * Execute middleware chain for a request
+     */
+    async execute(req, res) {
+        const applicableMiddleware = this.getApplicableMiddleware(req);
+        let index = 0;
+        const next = async () => {
+            if (index >= applicableMiddleware.length) {
+                return;
+            }
+            const entry = applicableMiddleware[index++];
+            const handler = entry.handler;
+            try {
+                if (typeof handler === 'function') {
+                    await handler(req, res, next);
+                }
+                else {
+                    await handler.use(req, res, next);
+                }
+            }
+            catch (error) {
+                logger_1.default.error('Middleware error:', error);
+                throw error;
+            }
+        };
+        await next();
+    }
+    /**
+     * Get middleware applicable to a request
+     */
+    getApplicableMiddleware(req) {
+        return this.middleware.filter((entry) => {
+            // Check if route is excluded
+            if (this.matchesAnyRoute(req, entry.excludedRoutes)) {
+                return false;
+            }
+            // If no specific routes, apply to all
+            if (entry.routes.length === 0) {
+                return true;
+            }
+            // Check if route matches
+            return this.matchesAnyRoute(req, entry.routes);
+        });
+    }
+    /**
+     * Check if request matches any route
+     */
+    matchesAnyRoute(req, routes) {
+        const requestPath = req.url?.split('?')[0] || '/';
+        const requestMethod = req.method || 'GET';
+        return routes.some((route) => {
+            const methodMatches = !route.method || route.method === requestMethod;
+            const pathMatches = this.matchPath(requestPath, route.path);
+            return methodMatches && pathMatches;
+        });
+    }
+    /**
+     * Match path with pattern
+     */
+    matchPath(path, pattern) {
+        // Simple wildcard matching
+        if (pattern === '*')
+            return true;
+        if (pattern.endsWith('*')) {
+            const prefix = pattern.slice(0, -1);
+            return path.startsWith(prefix);
+        }
+        return path === pattern;
+    }
+    /**
+     * Normalize routes to RouteInfo array
+     */
+    normalizeRoutes(routes) {
+        return routes.map((route) => {
+            if (typeof route === 'string') {
+                return { path: route };
+            }
+            return route;
+        });
+    }
+    /**
+     * Clear all middleware
+     */
+    clear() {
+        this.middleware = [];
+    }
+    /**
+     * Get all registered middleware
+     */
+    getMiddleware() {
+        return [...this.middleware];
+    }
+}
+exports.GlobalMiddlewareManager = GlobalMiddlewareManager;
+/**
+ * Built-in CORS middleware
+ */
+class CorsMiddleware {
+    constructor(options = {}) {
+        this.options = options;
+    }
+    use(req, res, next) {
+        const origin = this.options.origin || '*';
+        const methods = this.options.methods || ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'];
+        const headers = this.options.allowedHeaders || ['Content-Type', 'Authorization'];
+        res.setHeader('Access-Control-Allow-Origin', origin);
+        res.setHeader('Access-Control-Allow-Methods', methods.join(', '));
+        res.setHeader('Access-Control-Allow-Headers', headers.join(', '));
+        if (this.options.credentials) {
+            res.setHeader('Access-Control-Allow-Credentials', 'true');
+        }
+        if (req.method === 'OPTIONS') {
+            res.status(204).end();
+            return;
+        }
+        next();
+    }
+}
+exports.CorsMiddleware = CorsMiddleware;
+/**
+ * Built-in logging middleware
+ */
+class LoggerMiddleware {
+    async use(req, res, next) {
+        const start = Date.now();
+        logger_1.default.info(`→ ${req.method} ${req.url}`);
+        await next();
+        const duration = Date.now() - start;
+        logger_1.default.info(`← ${req.method} ${req.url} ${duration}ms`);
+    }
+}
+exports.LoggerMiddleware = LoggerMiddleware;

package/dist/middleware/rate-limit.middleware.d.ts

@@ -0,0 +1,73 @@
+import { Request, Response } from '../types';
+import { MiddlewareClass, NextFunction } from './global-middleware';
+/**
+ * Rate limit storage interface
+ */
+interface RateLimitStore {
+    get(key: string): Promise<number | null>;
+    set(key: string, value: number, ttl: number): Promise<void>;
+    increment(key: string, ttl: number): Promise<number>;
+    reset(key: string): Promise<void>;
+}
+/**
+ * Rate limit options
+ */
+export interface RateLimitOptions {
+    /**
+     * Maximum number of requests
+     */
+    max: number;
+    /**
+     * Time window in seconds
+     */
+    windowMs: number;
+    /**
+     * Custom key generator function
+     */
+    keyGenerator?: (req: Request) => string;
+    /**
+     * Custom store (default: in-memory)
+     */
+    store?: RateLimitStore;
+    /**
+     * Skip successful requests
+     */
+    skipSuccessfulRequests?: boolean;
+    /**
+     * Skip failed requests
+     */
+    skipFailedRequests?: boolean;
+    /**
+     * Custom error message
+     */
+    message?: string;
+    /**
+     * Custom error status code
+     */
+    statusCode?: number;
+    /**
+     * Standard rate limit headers
+     */
+    standardHeaders?: boolean;
+    /**
+     * Legacy rate limit headers
+     */
+    legacyHeaders?: boolean;
+}
+/**
+ * Rate Limiting Middleware
+ * Prevents abuse by limiting the number of requests from a single IP
+ */
+export declare class RateLimitMiddleware implements MiddlewareClass {
+    private options;
+    private store;
+    private cleanupInterval;
+    constructor(options: RateLimitOptions);
+    use(req: Request, res: Response, next: NextFunction): Promise<void>;
+    /**
+     * Cleanup resources
+     */
+    destroy(): void;
+}
+export {};
+//# sourceMappingURL=rate-limit.middleware.d.ts.map

package/dist/middleware/rate-limit.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/rate-limit.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAIpE;;GAEG;AACH,UAAU,cAAc;IACtB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AA0DD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;IAExC;;OAEG;IACH,KAAK,CAAC,EAAE,cAAc,CAAC;IAEvB;;OAEG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAEjC;;OAEG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;GAGG;AACH,qBAAa,mBAAoB,YAAW,eAAe;IAI7C,OAAO,CAAC,OAAO;IAH3B,OAAO,CAAC,KAAK,CAAiB;IAC9B,OAAO,CAAC,eAAe,CAA+B;gBAElC,OAAO,EAAE,gBAAgB;IA2BvC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCzE;;OAEG;IACH,OAAO,IAAI,IAAI;CAMhB"}

package/dist/middleware/rate-limit.middleware.js

@@ -0,0 +1,124 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RateLimitMiddleware = void 0;
+const http_error_1 = require("../errors/http.error");
+const logger_1 = __importDefault(require("../logger"));
+/**
+ * In-memory rate limit store
+ */
+class MemoryStore {
+    constructor() {
+        this.store = new Map();
+    }
+    async get(key) {
+        const entry = this.store.get(key);
+        if (!entry)
+            return null;
+        if (Date.now() > entry.resetTime) {
+            this.store.delete(key);
+            return null;
+        }
+        return entry.count;
+    }
+    async set(key, value, ttl) {
+        this.store.set(key, {
+            count: value,
+            resetTime: Date.now() + ttl * 1000,
+        });
+    }
+    async increment(key, ttl) {
+        const entry = this.store.get(key);
+        const now = Date.now();
+        if (!entry || now > entry.resetTime) {
+            await this.set(key, 1, ttl);
+            return 1;
+        }
+        entry.count++;
+        this.store.set(key, entry);
+        return entry.count;
+    }
+    async reset(key) {
+        this.store.delete(key);
+    }
+    /**
+     * Clean up expired entries
+     */
+    cleanup() {
+        const now = Date.now();
+        for (const [key, entry] of this.store.entries()) {
+            if (now > entry.resetTime) {
+                this.store.delete(key);
+            }
+        }
+    }
+}
+/**
+ * Rate Limiting Middleware
+ * Prevents abuse by limiting the number of requests from a single IP
+ */
+class RateLimitMiddleware {
+    constructor(options) {
+        this.options = options;
+        this.cleanupInterval = null;
+        this.store = options.store || new MemoryStore();
+        // Set defaults
+        this.options = {
+            keyGenerator: (req) => {
+                const forwarded = req.headers?.['x-forwarded-for'];
+                const ip = forwarded
+                    ? (Array.isArray(forwarded) ? forwarded[0] : forwarded.split(',')[0].trim())
+                    : req.socket?.remoteAddress || 'unknown';
+                return ip;
+            },
+            message: 'Too many requests, please try again later.',
+            statusCode: 429,
+            standardHeaders: true,
+            legacyHeaders: true,
+            ...options,
+        };
+        // Cleanup expired entries every minute
+        if (this.store instanceof MemoryStore) {
+            this.cleanupInterval = setInterval(() => {
+                this.store.cleanup();
+            }, 60000);
+        }
+    }
+    async use(req, res, next) {
+        const key = this.options.keyGenerator(req);
+        const count = await this.store.increment(key, this.options.windowMs);
+        // Set rate limit headers
+        if (this.options.standardHeaders) {
+            res.setHeader('RateLimit-Limit', this.options.max.toString());
+            res.setHeader('RateLimit-Remaining', Math.max(0, this.options.max - count).toString());
+            res.setHeader('RateLimit-Reset', new Date(Date.now() + this.options.windowMs * 1000).toISOString());
+        }
+        if (this.options.legacyHeaders) {
+            res.setHeader('X-RateLimit-Limit', this.options.max.toString());
+            res.setHeader('X-RateLimit-Remaining', Math.max(0, this.options.max - count).toString());
+            res.setHeader('X-RateLimit-Reset', new Date(Date.now() + this.options.windowMs * 1000).toISOString());
+        }
+        // Check if limit exceeded
+        if (count > this.options.max) {
+            logger_1.default.warn(`Rate limit exceeded for ${key}: ${count}/${this.options.max}`);
+            throw new http_error_1.HttpError(this.options.statusCode, this.options.message);
+        }
+        await next();
+        // Handle skip options
+        // Note: Response statusCode is set via res.status() and checked via res.writeHead
+        // For now, we'll skip this check as Response interface doesn't expose statusCode directly
+        // In a real implementation, you'd track the status in a response interceptor
+    }
+    /**
+     * Cleanup resources
+     */
+    destroy() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = null;
+        }
+    }
+}
+exports.RateLimitMiddleware = RateLimitMiddleware;

package/dist/middleware/security-headers.middleware.d.ts

@@ -0,0 +1,76 @@
+import { Request, Response } from '../types';
+import { MiddlewareClass, NextFunction } from './global-middleware';
+/**
+ * Security headers configuration
+ */
+export interface SecurityHeadersOptions {
+    /**
+     * Enable X-Content-Type-Options header
+     * Prevents MIME type sniffing
+     */
+    noSniff?: boolean;
+    /**
+     * Enable X-Frame-Options header
+     * Prevents clickjacking attacks
+     */
+    frameOptions?: 'DENY' | 'SAMEORIGIN' | string;
+    /**
+     * Enable X-XSS-Protection header
+     * Enables browser XSS filter
+     */
+    xssProtection?: boolean;
+    /**
+     * Enable Strict-Transport-Security (HSTS) header
+     * Forces HTTPS connections
+     */
+    hsts?: {
+        maxAge?: number;
+        includeSubDomains?: boolean;
+        preload?: boolean;
+    };
+    /**
+     * Enable Content-Security-Policy header
+     * Controls resource loading
+     */
+    contentSecurityPolicy?: string | {
+        defaultSrc?: string[];
+        scriptSrc?: string[];
+        styleSrc?: string[];
+        imgSrc?: string[];
+        connectSrc?: string[];
+        fontSrc?: string[];
+        objectSrc?: string[];
+        mediaSrc?: string[];
+        frameSrc?: string[];
+        baseUri?: string[];
+        formAction?: string[];
+        frameAncestors?: string[];
+        upgradeInsecureRequests?: boolean;
+    };
+    /**
+     * Enable Referrer-Policy header
+     * Controls referrer information
+     */
+    referrerPolicy?: 'no-referrer' | 'no-referrer-when-downgrade' | 'origin' | 'origin-when-cross-origin' | 'same-origin' | 'strict-origin' | 'strict-origin-when-cross-origin' | 'unsafe-url';
+    /**
+     * Enable Permissions-Policy header
+     * Controls browser features
+     */
+    permissionsPolicy?: Record<string, string[]>;
+    /**
+     * Enable X-Powered-By removal
+     * Hides framework information
+     */
+    hidePoweredBy?: boolean;
+}
+/**
+ * Security Headers Middleware
+ * Adds security headers to HTTP responses
+ */
+export declare class SecurityHeadersMiddleware implements MiddlewareClass {
+    private options;
+    constructor(options?: SecurityHeadersOptions);
+    use(req: Request, res: Response, next: NextFunction): void;
+    private buildCSP;
+}
+//# sourceMappingURL=security-headers.middleware.d.ts.map

package/dist/middleware/security-headers.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-headers.middleware.d.ts","sourceRoot":"","sources":["../../src/middleware/security-headers.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEpE;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,MAAM,CAAC;IAE9C;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;;OAGG;IACH,IAAI,CAAC,EAAE;QACL,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IAEF;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG;QAC/B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,uBAAuB,CAAC,EAAE,OAAO,CAAC;KACnC,CAAC;IAEF;;;OAGG;IACH,cAAc,CAAC,EAAE,aAAa,GAAG,4BAA4B,GAAG,QAAQ,GAAG,0BAA0B,GAAG,aAAa,GAAG,eAAe,GAAG,iCAAiC,GAAG,YAAY,CAAC;IAE3L;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE7C;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;GAGG;AACH,qBAAa,yBAA0B,YAAW,eAAe;IACnD,OAAO,CAAC,OAAO;gBAAP,OAAO,GAAE,sBAA2B;IAgBxD,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI;IA+D1D,OAAO,CAAC,QAAQ;CAiDjB"}