@ninebix/nmt-system 1.0.0

package/dist/api/middleware/index.js

@@ -0,0 +1,13 @@
+/**
+ * API Middleware Exports
+ */
+export * from './validation.js';
+export * from './rate-limit.js';
+export * from './logger.js';
+export * from './response.js';
+// Re-export defaults
+export { default as validation } from './validation.js';
+export { default as rateLimiters } from './rate-limit.js';
+export { default as logger } from './logger.js';
+export { default as response } from './response.js';
+//# sourceMappingURL=index.js.map

package/dist/api/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/middleware/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAE9B,qBAAqB;AACrB,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC"}

package/dist/api/middleware/logger.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Logger Middleware
+ * Structured logging with levels and request tracking
+ */
+import { Request, Response, NextFunction } from 'express';
+export declare const logger: {
+    debug: (message: string, data?: any) => void;
+    info: (message: string, data?: any) => void;
+    warn: (message: string, data?: any) => void;
+    error: (message: string, data?: any) => void;
+};
+/**
+ * Request logging middleware
+ */
+export declare function requestLogger(req: Request, res: Response, next: NextFunction): void;
+/**
+ * Error logging middleware
+ */
+export declare function errorLogger(err: Error, req: Request, res: Response, next: NextFunction): void;
+export default logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/api/middleware/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/api/middleware/logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAyF1D,eAAO,MAAM,MAAM;qBACA,MAAM,SAAS,GAAG;oBACnB,MAAM,SAAS,GAAG;oBAClB,MAAM,SAAS,GAAG;qBACjB,MAAM,SAAS,GAAG;CACpC,CAAC;AAgBF;;GAEG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,QAoC5E;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,QAYtF;AAED,eAAe,MAAM,CAAC"}

package/dist/api/middleware/logger.js

@@ -0,0 +1,134 @@
+/**
+ * Logger Middleware
+ * Structured logging with levels and request tracking
+ */
+// Configuration
+const LOG_LEVEL = (process.env.LOG_LEVEL || 'info');
+const IS_PRODUCTION = process.env.NODE_ENV === 'production';
+const LEVEL_PRIORITY = {
+    debug: 0,
+    info: 1,
+    warn: 2,
+    error: 3,
+};
+function shouldLog(level) {
+    return LEVEL_PRIORITY[level] >= LEVEL_PRIORITY[LOG_LEVEL];
+}
+function formatLog(entry) {
+    if (IS_PRODUCTION) {
+        // JSON format for production (easier to parse)
+        return JSON.stringify(entry);
+    }
+    // Human-readable format for development
+    const { timestamp, level, message, data, requestId, method, path, statusCode, duration, ip } = entry;
+    let output = `[${timestamp}] ${level.toUpperCase().padEnd(5)} ${message}`;
+    if (method && path) {
+        output += ` | ${method} ${path}`;
+    }
+    if (statusCode) {
+        output += ` | ${statusCode}`;
+    }
+    if (duration !== undefined) {
+        output += ` | ${duration}ms`;
+    }
+    if (ip) {
+        output += ` | ${ip}`;
+    }
+    if (requestId) {
+        output += ` | req:${requestId.slice(0, 8)}`;
+    }
+    if (data && Object.keys(data).length > 0) {
+        output += ` | ${JSON.stringify(data)}`;
+    }
+    return output;
+}
+function log(level, message, data) {
+    if (!shouldLog(level))
+        return;
+    const entry = {
+        timestamp: new Date().toISOString(),
+        level,
+        message,
+        data,
+    };
+    const formatted = formatLog(entry);
+    switch (level) {
+        case 'error':
+            console.error(formatted);
+            break;
+        case 'warn':
+            console.warn(formatted);
+            break;
+        default:
+            console.log(formatted);
+    }
+}
+// Public logging functions
+export const logger = {
+    debug: (message, data) => log('debug', message, data),
+    info: (message, data) => log('info', message, data),
+    warn: (message, data) => log('warn', message, data),
+    error: (message, data) => log('error', message, data),
+};
+// Generate simple request ID
+function generateRequestId() {
+    return Math.random().toString(36).substring(2, 15) + Date.now().toString(36);
+}
+// Get client IP
+function getClientIP(req) {
+    const forwarded = req.headers['x-forwarded-for'];
+    const ip = forwarded
+        ? (Array.isArray(forwarded) ? forwarded[0] : forwarded.split(',')[0])
+        : req.socket.remoteAddress || 'unknown';
+    return ip;
+}
+/**
+ * Request logging middleware
+ */
+export function requestLogger(req, res, next) {
+    // Generate request ID
+    const requestId = generateRequestId();
+    req.requestId = requestId;
+    const startTime = Date.now();
+    const method = req.method;
+    const path = req.originalUrl || req.url;
+    const ip = getClientIP(req);
+    // Log request start (debug level)
+    if (shouldLog('debug')) {
+        logger.debug('Request started', { method, path, ip, requestId });
+    }
+    // Capture response finish
+    res.on('finish', () => {
+        const duration = Date.now() - startTime;
+        const statusCode = res.statusCode;
+        const entry = {
+            timestamp: new Date().toISOString(),
+            level: statusCode >= 500 ? 'error' : statusCode >= 400 ? 'warn' : 'info',
+            message: 'Request completed',
+            method,
+            path,
+            statusCode,
+            duration,
+            ip,
+            requestId,
+        };
+        console.log(formatLog(entry));
+    });
+    next();
+}
+/**
+ * Error logging middleware
+ */
+export function errorLogger(err, req, res, next) {
+    const requestId = req.requestId || 'unknown';
+    logger.error('Request error', {
+        error: err.message,
+        stack: IS_PRODUCTION ? undefined : err.stack,
+        requestId,
+        method: req.method,
+        path: req.originalUrl,
+    });
+    next(err);
+}
+export default logger;
+//# sourceMappingURL=logger.js.map

package/dist/api/middleware/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/api/middleware/logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,gBAAgB;AAChB,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,CAAa,CAAC;AAChE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAE5D,MAAM,cAAc,GAA6B;IAC/C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,SAAS,SAAS,CAAC,KAAe;IAChC,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,SAAS,CAAC,KAAe;IAChC,IAAI,aAAa,EAAE,CAAC;QAClB,+CAA+C;QAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,wCAAwC;IACxC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACrG,IAAI,MAAM,GAAG,IAAI,SAAS,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;IAE1E,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;IACnC,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,IAAI,MAAM,UAAU,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,MAAM,QAAQ,IAAI,CAAC;IAC/B,CAAC;IACD,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,IAAI,MAAM,EAAE,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,UAAU,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,IAAU;IACvD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO;IAE9B,MAAM,KAAK,GAAa;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK;QACL,OAAO;QACP,IAAI;KACL,CAAC;IAEF,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAEnC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,OAAO;YACV,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACzB,MAAM;QACR,KAAK,MAAM;YACT,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,MAAM;QACR;YACE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,2BAA2B;AAC3B,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,KAAK,EAAE,CAAC,OAAe,EAAE,IAAU,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;IACnE,IAAI,EAAE,CAAC,OAAe,EAAE,IAAU,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;IACjE,IAAI,EAAE,CAAC,OAAe,EAAE,IAAU,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;IACjE,KAAK,EAAE,CAAC,OAAe,EAAE,IAAU,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;CACpE,CAAC;AAEF,6BAA6B;AAC7B,SAAS,iBAAiB;IACxB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,gBAAgB;AAChB,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,SAAS;QAClB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IAC1C,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC3E,sBAAsB;IACtB,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IACrC,GAAW,CAAC,SAAS,GAAG,SAAS,CAAC;IAEnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,CAAC;IACxC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAE5B,kCAAkC;IAClC,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,0BAA0B;IAC1B,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAElC,MAAM,KAAK,GAAa;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACxE,OAAO,EAAE,mBAAmB;YAC5B,MAAM;YACN,IAAI;YACJ,UAAU;YACV,QAAQ;YACR,EAAE;YACF,SAAS;SACV,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,GAAU,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB;IACrF,MAAM,SAAS,GAAI,GAAW,CAAC,SAAS,IAAI,SAAS,CAAC;IAEtD,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE;QAC5B,KAAK,EAAE,GAAG,CAAC,OAAO;QAClB,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK;QAC5C,SAAS;QACT,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,WAAW;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,CAAC;AACZ,CAAC;AAED,eAAe,MAAM,CAAC"}

package/dist/api/middleware/rate-limit.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Rate Limiting Middleware
+ * Simple in-memory rate limiter (use Redis for distributed systems)
+ */
+import { Request, RequestHandler } from 'express';
+interface RateLimitConfig {
+    windowMs: number;
+    maxRequests: number;
+    message?: string;
+    keyGenerator?: (req: Request) => string;
+}
+/**
+ * Create rate limiter middleware
+ */
+export declare function createRateLimiter(config: RateLimitConfig): RequestHandler;
+export declare const rateLimiters: {
+    general: RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    search: RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    ingest: RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    llm: RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    upload: RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    config: RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    strict: RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+};
+export default rateLimiters;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/api/middleware/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/api/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAA0B,cAAc,EAAE,MAAM,SAAS,CAAC;AAE1E,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;CACzC;AA8BD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,cAAc,CA0CzE;AAGD,eAAO,MAAM,YAAY;;;;;;;;CAiDxB,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/api/middleware/rate-limit.js

@@ -0,0 +1,107 @@
+/**
+ * Rate Limiting Middleware
+ * Simple in-memory rate limiter (use Redis for distributed systems)
+ */
+// In-memory store (use Redis for production)
+const store = new Map();
+// Cleanup old entries periodically
+setInterval(() => {
+    const now = Date.now();
+    const entries = Array.from(store.entries());
+    for (const [key, entry] of entries) {
+        if (entry.resetTime < now) {
+            store.delete(key);
+        }
+    }
+}, 60000); // Clean every minute
+// Default key generator (IP-based)
+function defaultKeyGenerator(req) {
+    const forwarded = req.headers['x-forwarded-for'];
+    const ip = forwarded
+        ? (Array.isArray(forwarded) ? forwarded[0] : forwarded.split(',')[0])
+        : req.socket.remoteAddress || 'unknown';
+    return `rate:${ip}`;
+}
+/**
+ * Create rate limiter middleware
+ */
+export function createRateLimiter(config) {
+    const { windowMs, maxRequests, message = 'Too many requests, please try again later.', keyGenerator = defaultKeyGenerator, } = config;
+    return (req, res, next) => {
+        const key = keyGenerator(req);
+        const now = Date.now();
+        let entry = store.get(key);
+        if (!entry || entry.resetTime < now) {
+            // Create new entry
+            entry = {
+                count: 1,
+                resetTime: now + windowMs,
+            };
+            store.set(key, entry);
+        }
+        else {
+            entry.count++;
+        }
+        // Set rate limit headers
+        res.setHeader('X-RateLimit-Limit', maxRequests);
+        res.setHeader('X-RateLimit-Remaining', Math.max(0, maxRequests - entry.count));
+        res.setHeader('X-RateLimit-Reset', Math.ceil(entry.resetTime / 1000));
+        if (entry.count > maxRequests) {
+            res.setHeader('Retry-After', Math.ceil((entry.resetTime - now) / 1000));
+            res.status(429).json({
+                error: 'Rate Limit Exceeded',
+                message,
+                retryAfter: Math.ceil((entry.resetTime - now) / 1000),
+            });
+            return;
+        }
+        next();
+    };
+}
+// Preset configurations
+export const rateLimiters = {
+    // General API: 100 requests per minute
+    general: createRateLimiter({
+        windowMs: 60 * 1000,
+        maxRequests: 100,
+        message: 'Too many requests. Please wait a minute.',
+    }),
+    // Search: 30 requests per minute (more expensive)
+    search: createRateLimiter({
+        windowMs: 60 * 1000,
+        maxRequests: 30,
+        message: 'Too many search requests. Please slow down.',
+    }),
+    // Ingestion: 20 requests per minute
+    ingest: createRateLimiter({
+        windowMs: 60 * 1000,
+        maxRequests: 20,
+        message: 'Too many ingestion requests. Please slow down.',
+    }),
+    // LLM/RAG: 10 requests per minute (expensive API calls)
+    llm: createRateLimiter({
+        windowMs: 60 * 1000,
+        maxRequests: 10,
+        message: 'Too many LLM requests. Please wait before trying again.',
+    }),
+    // File upload: 5 requests per minute
+    upload: createRateLimiter({
+        windowMs: 60 * 1000,
+        maxRequests: 5,
+        message: 'Too many file uploads. Please wait.',
+    }),
+    // Auth/Config: 10 requests per minute
+    config: createRateLimiter({
+        windowMs: 60 * 1000,
+        maxRequests: 10,
+        message: 'Too many configuration requests.',
+    }),
+    // Strict: 5 requests per minute (for sensitive operations)
+    strict: createRateLimiter({
+        windowMs: 60 * 1000,
+        maxRequests: 5,
+        message: 'Rate limit exceeded for this operation.',
+    }),
+};
+export default rateLimiters;
+//# sourceMappingURL=rate-limit.js.map

package/dist/api/middleware/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../src/api/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH,6CAA6C;AAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEhD,mCAAmC;AACnC,WAAW,CAAC,GAAG,EAAE;IACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,qBAAqB;AAEhC,mCAAmC;AACnC,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,SAAS;QAClB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IAC1C,OAAO,QAAQ,EAAE,EAAE,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAuB;IACvD,MAAM,EACJ,QAAQ,EACR,WAAW,EACX,OAAO,GAAG,4CAA4C,EACtD,YAAY,GAAG,mBAAmB,GACnC,GAAG,MAAM,CAAC;IAEX,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC/D,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE3B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACpC,mBAAmB;YACnB,KAAK,GAAG;gBACN,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,GAAG,GAAG,QAAQ;aAC1B,CAAC;YACF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QAED,yBAAyB;QACzB,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;QAChD,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/E,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC;QAEtE,IAAI,KAAK,CAAC,KAAK,GAAG,WAAW,EAAE,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YACxE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,qBAAqB;gBAC5B,OAAO;gBACP,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;aACtD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED,wBAAwB;AACxB,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,uCAAuC;IACvC,OAAO,EAAE,iBAAiB,CAAC;QACzB,QAAQ,EAAE,EAAE,GAAG,IAAI;QACnB,WAAW,EAAE,GAAG;QAChB,OAAO,EAAE,0CAA0C;KACpD,CAAC;IAEF,kDAAkD;IAClD,MAAM,EAAE,iBAAiB,CAAC;QACxB,QAAQ,EAAE,EAAE,GAAG,IAAI;QACnB,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,6CAA6C;KACvD,CAAC;IAEF,oCAAoC;IACpC,MAAM,EAAE,iBAAiB,CAAC;QACxB,QAAQ,EAAE,EAAE,GAAG,IAAI;QACnB,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,gDAAgD;KAC1D,CAAC;IAEF,wDAAwD;IACxD,GAAG,EAAE,iBAAiB,CAAC;QACrB,QAAQ,EAAE,EAAE,GAAG,IAAI;QACnB,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,yDAAyD;KACnE,CAAC;IAEF,qCAAqC;IACrC,MAAM,EAAE,iBAAiB,CAAC;QACxB,QAAQ,EAAE,EAAE,GAAG,IAAI;QACnB,WAAW,EAAE,CAAC;QACd,OAAO,EAAE,qCAAqC;KAC/C,CAAC;IAEF,sCAAsC;IACtC,MAAM,EAAE,iBAAiB,CAAC;QACxB,QAAQ,EAAE,EAAE,GAAG,IAAI;QACnB,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,kCAAkC;KAC5C,CAAC;IAEF,2DAA2D;IAC3D,MAAM,EAAE,iBAAiB,CAAC;QACxB,QAAQ,EAAE,EAAE,GAAG,IAAI;QACnB,WAAW,EAAE,CAAC;QACd,OAAO,EAAE,yCAAyC;KACnD,CAAC;CACH,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/api/middleware/response.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Standardized API Response Helpers
+ */
+import { Response } from 'express';
+export interface APIResponse<T = any> {
+    success: boolean;
+    data?: T;
+    error?: string;
+    message?: string;
+    meta?: {
+        total?: number;
+        page?: number;
+        limit?: number;
+        hasMore?: boolean;
+    };
+    timestamp: string;
+}
+/**
+ * Send success response
+ */
+export declare function sendSuccess<T>(res: Response, data: T, meta?: APIResponse['meta'], statusCode?: number): Response;
+/**
+ * Send created response (201)
+ */
+export declare function sendCreated<T>(res: Response, data: T, message?: string): Response;
+/**
+ * Send error response
+ */
+export declare function sendError(res: Response, message: string, statusCode?: number, details?: any): Response;
+/**
+ * Send validation error (400)
+ */
+export declare function sendValidationError(res: Response, field: string, message: string): Response;
+/**
+ * Send not found error (404)
+ */
+export declare function sendNotFound(res: Response, resource?: string): Response;
+/**
+ * Send unauthorized error (401)
+ */
+export declare function sendUnauthorized(res: Response, message?: string): Response;
+/**
+ * Send forbidden error (403)
+ */
+export declare function sendForbidden(res: Response, message?: string): Response;
+/**
+ * Send paginated response
+ */
+export declare function sendPaginated<T>(res: Response, items: T[], total: number, page?: number, limit?: number): Response;
+declare const _default: {
+    sendSuccess: typeof sendSuccess;
+    sendCreated: typeof sendCreated;
+    sendError: typeof sendError;
+    sendValidationError: typeof sendValidationError;
+    sendNotFound: typeof sendNotFound;
+    sendUnauthorized: typeof sendUnauthorized;
+    sendForbidden: typeof sendForbidden;
+    sendPaginated: typeof sendPaginated;
+};
+export default _default;
+//# sourceMappingURL=response.d.ts.map

package/dist/api/middleware/response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../../../src/api/middleware/response.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,GAAG;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE;QACL,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAC3B,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,CAAC,EACP,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAC1B,UAAU,SAAM,GACf,QAAQ,CAQV;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAC3B,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,CAAC,EACP,OAAO,CAAC,EAAE,MAAM,GACf,QAAQ,CAQV;AAED;;GAEG;AACH,wBAAgB,SAAS,CACvB,GAAG,EAAE,QAAQ,EACb,OAAO,EAAE,MAAM,EACf,UAAU,SAAM,EAChB,OAAO,CAAC,EAAE,GAAG,GACZ,QAAQ,CAUV;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,QAAQ,CAEV;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,QAAQ,EACb,QAAQ,SAAa,GACpB,QAAQ,CAEV;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,QAAQ,EACb,OAAO,SAA4B,GAClC,QAAQ,CAEV;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,QAAQ,EACb,OAAO,SAAkB,GACxB,QAAQ,CAEV;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,CAAC,EAAE,EACV,KAAK,EAAE,MAAM,EACb,IAAI,SAAI,EACR,KAAK,SAAK,GACT,QAAQ,CAOV;;;;;;;;;;;AAED,wBASE"}

package/dist/api/middleware/response.js

@@ -0,0 +1,86 @@
+/**
+ * Standardized API Response Helpers
+ */
+/**
+ * Send success response
+ */
+export function sendSuccess(res, data, meta, statusCode = 200) {
+    const response = {
+        success: true,
+        data,
+        meta,
+        timestamp: new Date().toISOString(),
+    };
+    return res.status(statusCode).json(response);
+}
+/**
+ * Send created response (201)
+ */
+export function sendCreated(res, data, message) {
+    const response = {
+        success: true,
+        data,
+        message: message || 'Resource created successfully',
+        timestamp: new Date().toISOString(),
+    };
+    return res.status(201).json(response);
+}
+/**
+ * Send error response
+ */
+export function sendError(res, message, statusCode = 500, details) {
+    const isProduction = process.env.NODE_ENV === 'production';
+    const response = {
+        success: false,
+        error: message,
+        ...(details && !isProduction ? { details } : {}),
+        timestamp: new Date().toISOString(),
+    };
+    return res.status(statusCode).json(response);
+}
+/**
+ * Send validation error (400)
+ */
+export function sendValidationError(res, field, message) {
+    return sendError(res, `Validation error: ${message}`, 400, { field });
+}
+/**
+ * Send not found error (404)
+ */
+export function sendNotFound(res, resource = 'Resource') {
+    return sendError(res, `${resource} not found`, 404);
+}
+/**
+ * Send unauthorized error (401)
+ */
+export function sendUnauthorized(res, message = 'Authentication required') {
+    return sendError(res, message, 401);
+}
+/**
+ * Send forbidden error (403)
+ */
+export function sendForbidden(res, message = 'Access denied') {
+    return sendError(res, message, 403);
+}
+/**
+ * Send paginated response
+ */
+export function sendPaginated(res, items, total, page = 1, limit = 20) {
+    return sendSuccess(res, items, {
+        total,
+        page,
+        limit,
+        hasMore: page * limit < total,
+    });
+}
+export default {
+    sendSuccess,
+    sendCreated,
+    sendError,
+    sendValidationError,
+    sendNotFound,
+    sendUnauthorized,
+    sendForbidden,
+    sendPaginated,
+};
+//# sourceMappingURL=response.js.map

package/dist/api/middleware/response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.js","sourceRoot":"","sources":["../../../src/api/middleware/response.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkBH;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,GAAa,EACb,IAAO,EACP,IAA0B,EAC1B,UAAU,GAAG,GAAG;IAEhB,MAAM,QAAQ,GAAmB;QAC/B,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,GAAa,EACb,IAAO,EACP,OAAgB;IAEhB,MAAM,QAAQ,GAAmB;QAC/B,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,OAAO,EAAE,OAAO,IAAI,+BAA+B;QACnD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CACvB,GAAa,EACb,OAAe,EACf,UAAU,GAAG,GAAG,EAChB,OAAa;IAEb,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IAE3D,MAAM,QAAQ,GAAgB;QAC5B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,OAAO;QACd,GAAG,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAa,EACb,KAAa,EACb,OAAe;IAEf,OAAO,SAAS,CAAC,GAAG,EAAE,qBAAqB,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAa,EACb,QAAQ,GAAG,UAAU;IAErB,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,QAAQ,YAAY,EAAE,GAAG,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAa,EACb,OAAO,GAAG,yBAAyB;IAEnC,OAAO,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAa,EACb,OAAO,GAAG,eAAe;IAEzB,OAAO,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAa,EACb,KAAU,EACV,KAAa,EACb,IAAI,GAAG,CAAC,EACR,KAAK,GAAG,EAAE;IAEV,OAAO,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE;QAC7B,KAAK;QACL,IAAI;QACJ,KAAK;QACL,OAAO,EAAE,IAAI,GAAG,KAAK,GAAG,KAAK;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,eAAe;IACb,WAAW;IACX,WAAW;IACX,SAAS;IACT,mBAAmB;IACnB,YAAY;IACZ,gBAAgB;IAChB,aAAa;IACb,aAAa;CACd,CAAC"}

package/dist/api/middleware/validation.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Input Validation Middleware
+ * Prevents XSS, validates input sizes, sanitizes data
+ */
+import { RequestHandler } from 'express';
+export declare function sanitizeString(input: string): string;
+export declare function sanitizeForStorage(input: string): string;
+/**
+ * Validate ingestion request body
+ */
+export declare const validateIngestBody: RequestHandler;
+/**
+ * Validate search/query request body
+ */
+export declare const validateSearchBody: RequestHandler;
+/**
+ * Validate batch ingest request
+ */
+export declare const validateBatchIngestBody: RequestHandler;
+/**
+ * Validate UUID parameter
+ */
+export declare function validateUUIDParam(paramName: string): RequestHandler;
+/**
+ * Validate synapse creation
+ */
+export declare const validateSynapseBody: RequestHandler;
+/**
+ * Validate LLM configuration
+ */
+export declare const validateLLMConfig: RequestHandler;
+declare const _default: {
+    validateIngestBody: RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    validateSearchBody: RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    validateBatchIngestBody: RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    validateUUIDParam: typeof validateUUIDParam;
+    validateSynapseBody: RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    validateLLMConfig: RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    sanitizeString: typeof sanitizeString;
+    sanitizeForStorage: typeof sanitizeForStorage;
+};
+export default _default;
+//# sourceMappingURL=validation.d.ts.map

package/dist/api/middleware/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/api/middleware/validation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAmC,cAAc,EAAE,MAAM,SAAS,CAAC;AAsB1E,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBpD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUxD;AAsBD;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,cAuChC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,cA8ChC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,cAmBrC,CAAC;AAEF;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,CAcnE;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,cA+BjC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,cAiC/B,CAAC;;;;;;;;;;;AAEF,wBASE"}