@vorionsys/security 1.0.0

package/dist/security/headers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/security/headers/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,iBAAiB,GACjB,eAAe,GACf,iBAAiB,GACjB,kBAAkB,GAClB,iBAAiB,GACjB,oBAAoB,GACpB,4BAA4B,GAC5B,QAAQ,GACR,UAAU,MAAM,GAAG,GACnB,WAAW,MAAM,GAAG,GACpB,WAAW,MAAM,GAAG,GACpB,WAAW,MAAM,GAAG,GACpB,OAAO,GACP,OAAO,GACP,cAAc,GACd,aAAa,GACb,MAAM,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,yCAAyC,GACzC,aAAa,GACb,cAAc,GACd,wBAAwB,GACxB,oBAAoB,GACpB,cAAc,GACd,gCAAgC,GAChC,oBAAoB,GACpB,mBAAmB,GACnB,eAAe,GACf,yCAAyC,GACzC,sBAAsB,GACtB,yCAAyC,GACzC,0CAA0C,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,aAAa;IAE5B,aAAa,CAAC,EAAE,cAAc,EAAE,CAAC;IACjC,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,cAAc,EAAE,CAAC;IACjC,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC;IAC/B,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;IAClC,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,cAAc,EAAE,CAAC;IAChC,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;IAClC,YAAY,CAAC,EAAE,cAAc,EAAE,CAAC;IAChC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC;IACrC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC;IACrC,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC;IAC/B,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,YAAY,CAAC,EAAE,cAAc,EAAE,CAAC;IAGhC,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAG5B,aAAa,CAAC,EAAE,cAAc,EAAE,CAAC;IACjC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC;IACrC,aAAa,CAAC,EAAE,cAAc,EAAE,CAAC;IAGjC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,2BAA2B,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAE/C;;GAEG;AACH,eAAO,MAAM,qBAAqB,kaAgBhC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6BrB,CAAC;AAMZ;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,yEAAyE;IACzE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,eAAO,MAAM,4BAA4B,WAAW,CAAC;AAErD;;GAEG;AACH,eAAO,MAAM,wBAAwB,WAAW,CAAC;AAEjD;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;EAe5B,CAAC;AAMF;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,kEAAkE;IAClE,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,2BAA2B;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,8BAA8B;IAC9B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oCAAoC;IACpC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,yDAAyD;IACzD,WAAW,EAAE,OAAO,CAAC;IACrB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2B5B,CAAC;AAMF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAC9B,GAAG,GACH,MAAM,GACN,IAAI,GACJ,KAAK,MAAM,IAAI,GACf,UAAU,MAAM,IAAI,GACpB,MAAM,CAAC;AAEX;;GAEG;AACH,MAAM,WAAW,uBAAuB;IAEtC,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IAChD,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,0BAA0B,CAAC,EAAE,sBAAsB,CAAC;IACpD,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,YAAY,CAAC,EAAE,sBAAsB,CAAC;IACtC,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,oBAAoB,CAAC,EAAE,sBAAsB,CAAC;IAC9C,8BAA8B,CAAC,EAAE,sBAAsB,CAAC;IACxD,2BAA2B,CAAC,EAAE,sBAAsB,CAAC;IACrD,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,mBAAmB,CAAC,EAAE,sBAAsB,CAAC;IAC7C,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,GAAG,CAAC,EAAE,sBAAsB,CAAC;IAC7B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,mBAAmB,CAAC,EAAE,sBAAsB,CAAC;IAC7C,qBAAqB,CAAC,EAAE,sBAAsB,CAAC;IAG/C,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;CAC5C;AAED;;GAEG;AACH,eAAO,MAAM,4BAA4B,aAAa,CAAC;AAEvD;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkC/B,CAAC;AAMZ;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAE1E;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,0BAA0B,GAAG,aAAa,CAAC;AAEnF;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,aAAa,GAAG,cAAc,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B,aAAa,GACb,4BAA4B,GAC5B,QAAQ,GACR,0BAA0B,GAC1B,aAAa,GACb,eAAe,GACf,iCAAiC,GACjC,YAAY,CAAC;AAEjB;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,YAAY,CAAC;AAMvD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,2BAA2B;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,kDAAkD;IAClD,IAAI,EAAE,YAAY,GAAG,aAAa,GAAG,SAAS,CAAC;IAE/C,8BAA8B;IAC9B,GAAG,EAAE;QACH,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,aAAa,CAAC;QAC1B,UAAU,EAAE,OAAO,CAAC;QACpB,SAAS,CAAC,EAAE,kBAAkB,CAAC;KAChC,CAAC;IAEF,qCAAqC;IACrC,IAAI,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,UAAU,CAAC;KACpB,CAAC;IAEF,oCAAoC;IACpC,IAAI,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,UAAU,CAAC;KACpB,CAAC;IAEF,yBAAyB;IACzB,iBAAiB,EAAE;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,uBAAuB,CAAC;KACjC,CAAC;IAEF,mCAAmC;IACnC,IAAI,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,SAAS,CAAC;KAClB,CAAC;IAEF,iCAAiC;IACjC,IAAI,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,SAAS,CAAC;KAClB,CAAC;IAEF,mCAAmC;IACnC,IAAI,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,SAAS,CAAC;KAClB,CAAC;IAEF,sBAAsB;IACtB,cAAc,EAAE;QACd,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,mBAAmB,CAAC;KAC5B,CAAC;IAEF,2DAA2D;IAC3D,aAAa,EAAE;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,kBAAkB,CAAC;KAC3B,CAAC;IAEF,sCAAsC;IACtC,mBAAmB,EAAE;QACnB,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IAEF,8CAA8C;IAC9C,cAAc,EAAE;QACd,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IAEF,6BAA6B;IAC7B,mBAAmB,EAAE;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,IAAI,GAAG,KAAK,CAAC;KACrB,CAAC;IAEF,wCAAwC;IACxC,6BAA6B,EAAE;QAC7B,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,iBAAiB,GAAG,KAAK,CAAC;KAC3D,CAAC;IAEF,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;EAInC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgEtC,CAAC;AAMH;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC1C,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;EAKhC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWvC,CAAC;AAMH;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE;QACZ,cAAc,EAAE,MAAM,CAAC;QACvB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,qBAAqB,EAAE,MAAM,CAAC;QAC9B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,WAAW,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAenC,CAAC"}

package/dist/security/headers/types.js

@@ -0,0 +1,281 @@
+/**
+ * Security Headers Type Definitions
+ *
+ * Comprehensive type definitions and Zod schemas for security headers management.
+ * Includes CSP, HSTS, CORS, and Permissions Policy configurations.
+ *
+ * @packageDocumentation
+ * @module security/headers/types
+ */
+import { z } from 'zod';
+/**
+ * Zod schema for CSP source value
+ */
+export const cspSourceValueSchema = z.string();
+/**
+ * Zod schema for CSP sandbox value
+ */
+export const cspSandboxValueSchema = z.enum([
+    'allow-downloads',
+    'allow-downloads-without-user-activation',
+    'allow-forms',
+    'allow-modals',
+    'allow-orientation-lock',
+    'allow-pointer-lock',
+    'allow-popups',
+    'allow-popups-to-escape-sandbox',
+    'allow-presentation',
+    'allow-same-origin',
+    'allow-scripts',
+    'allow-storage-access-by-user-activation',
+    'allow-top-navigation',
+    'allow-top-navigation-by-user-activation',
+    'allow-top-navigation-to-custom-protocols',
+]);
+/**
+ * Zod schema for CSP directives
+ */
+export const cspDirectivesSchema = z.object({
+    'default-src': z.array(cspSourceValueSchema).optional(),
+    'child-src': z.array(cspSourceValueSchema).optional(),
+    'connect-src': z.array(cspSourceValueSchema).optional(),
+    'font-src': z.array(cspSourceValueSchema).optional(),
+    'frame-src': z.array(cspSourceValueSchema).optional(),
+    'img-src': z.array(cspSourceValueSchema).optional(),
+    'manifest-src': z.array(cspSourceValueSchema).optional(),
+    'media-src': z.array(cspSourceValueSchema).optional(),
+    'object-src': z.array(cspSourceValueSchema).optional(),
+    'prefetch-src': z.array(cspSourceValueSchema).optional(),
+    'script-src': z.array(cspSourceValueSchema).optional(),
+    'script-src-elem': z.array(cspSourceValueSchema).optional(),
+    'script-src-attr': z.array(cspSourceValueSchema).optional(),
+    'style-src': z.array(cspSourceValueSchema).optional(),
+    'style-src-elem': z.array(cspSourceValueSchema).optional(),
+    'style-src-attr': z.array(cspSourceValueSchema).optional(),
+    'worker-src': z.array(cspSourceValueSchema).optional(),
+    'base-uri': z.array(cspSourceValueSchema).optional(),
+    sandbox: z.array(cspSandboxValueSchema).optional(),
+    'form-action': z.array(cspSourceValueSchema).optional(),
+    'frame-ancestors': z.array(cspSourceValueSchema).optional(),
+    'navigate-to': z.array(cspSourceValueSchema).optional(),
+    'report-uri': z.array(z.string().url()).optional(),
+    'report-to': z.string().optional(),
+    'require-trusted-types-for': z.array(z.literal('script')).optional(),
+    'trusted-types': z.array(z.string()).optional(),
+    'upgrade-insecure-requests': z.boolean().optional(),
+    'block-all-mixed-content': z.boolean().optional(),
+}).strict();
+/**
+ * Minimum max-age for HSTS preload list submission (1 year in seconds)
+ */
+export const HSTS_MIN_MAX_AGE_FOR_PRELOAD = 31536000;
+/**
+ * Recommended max-age for HSTS (2 years in seconds)
+ */
+export const HSTS_RECOMMENDED_MAX_AGE = 63072000;
+/**
+ * Zod schema for HSTS configuration
+ */
+export const hstsConfigSchema = z.object({
+    maxAge: z.number().int().min(0).default(HSTS_RECOMMENDED_MAX_AGE),
+    includeSubDomains: z.boolean().default(true),
+    preload: z.boolean().default(false),
+}).refine((config) => {
+    // If preload is enabled, maxAge must be at least 1 year and includeSubDomains must be true
+    if (config.preload) {
+        return config.maxAge >= HSTS_MIN_MAX_AGE_FOR_PRELOAD && config.includeSubDomains;
+    }
+    return true;
+}, {
+    message: `HSTS preload requires maxAge >= ${HSTS_MIN_MAX_AGE_FOR_PRELOAD} (1 year) and includeSubDomains: true`,
+});
+/**
+ * Zod schema for CORS configuration
+ */
+export const corsConfigSchema = z.object({
+    allowedOrigins: z.array(z.string()).min(1, 'At least one origin must be specified'),
+    allowedMethods: z.array(z.string()).default(['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS']),
+    allowedHeaders: z.array(z.string()).default([
+        'Accept',
+        'Accept-Language',
+        'Content-Language',
+        'Content-Type',
+        'Authorization',
+        'X-Requested-With',
+        'X-CSRF-Token',
+    ]),
+    exposedHeaders: z.array(z.string()).default([]),
+    credentials: z.boolean().default(false),
+    maxAge: z.number().int().min(0).max(86400).default(600),
+    privateNetworkAccess: z.boolean().default(false),
+}).refine((config) => {
+    // Credentials cannot be used with wildcard origin
+    if (config.credentials && config.allowedOrigins.includes('*')) {
+        return false;
+    }
+    return true;
+}, {
+    message: 'credentials: true cannot be used with wildcard (*) origin',
+});
+/**
+ * Zod schema for Permissions Policy value
+ */
+export const permissionsPolicyValueSchema = z.string();
+/**
+ * Zod schema for Permissions Policy configuration
+ */
+export const permissionsPolicyConfigSchema = z.object({
+    accelerometer: permissionsPolicyValueSchema.optional(),
+    'ambient-light-sensor': permissionsPolicyValueSchema.optional(),
+    autoplay: permissionsPolicyValueSchema.optional(),
+    battery: permissionsPolicyValueSchema.optional(),
+    camera: permissionsPolicyValueSchema.optional(),
+    'display-capture': permissionsPolicyValueSchema.optional(),
+    'document-domain': permissionsPolicyValueSchema.optional(),
+    'encrypted-media': permissionsPolicyValueSchema.optional(),
+    fullscreen: permissionsPolicyValueSchema.optional(),
+    gamepad: permissionsPolicyValueSchema.optional(),
+    geolocation: permissionsPolicyValueSchema.optional(),
+    gyroscope: permissionsPolicyValueSchema.optional(),
+    hid: permissionsPolicyValueSchema.optional(),
+    'identity-credentials-get': permissionsPolicyValueSchema.optional(),
+    'idle-detection': permissionsPolicyValueSchema.optional(),
+    'local-fonts': permissionsPolicyValueSchema.optional(),
+    magnetometer: permissionsPolicyValueSchema.optional(),
+    microphone: permissionsPolicyValueSchema.optional(),
+    midi: permissionsPolicyValueSchema.optional(),
+    'otp-credentials': permissionsPolicyValueSchema.optional(),
+    payment: permissionsPolicyValueSchema.optional(),
+    'picture-in-picture': permissionsPolicyValueSchema.optional(),
+    'publickey-credentials-create': permissionsPolicyValueSchema.optional(),
+    'publickey-credentials-get': permissionsPolicyValueSchema.optional(),
+    'screen-wake-lock': permissionsPolicyValueSchema.optional(),
+    serial: permissionsPolicyValueSchema.optional(),
+    'speaker-selection': permissionsPolicyValueSchema.optional(),
+    'storage-access': permissionsPolicyValueSchema.optional(),
+    usb: permissionsPolicyValueSchema.optional(),
+    'web-share': permissionsPolicyValueSchema.optional(),
+    'window-management': permissionsPolicyValueSchema.optional(),
+    'xr-spatial-tracking': permissionsPolicyValueSchema.optional(),
+    'interest-cohort': permissionsPolicyValueSchema.optional(),
+}).strict();
+/**
+ * Zod schema for CSP reporting configuration
+ */
+export const cspReportingConfigSchema = z.object({
+    reportUri: z.array(z.string().url()).optional(),
+    reportTo: z.string().optional(),
+    reportingEndpoints: z.record(z.string().url()).optional(),
+});
+/**
+ * Zod schema for Security Headers Configuration
+ */
+export const securityHeadersConfigSchema = z.object({
+    mode: z.enum(['production', 'development', 'testing']).default('production'),
+    csp: z.object({
+        enabled: z.boolean().default(true),
+        directives: cspDirectivesSchema,
+        reportOnly: z.boolean().default(false),
+        reporting: cspReportingConfigSchema.optional(),
+    }),
+    hsts: z.object({
+        enabled: z.boolean().default(true),
+        config: hstsConfigSchema,
+    }),
+    cors: z.object({
+        enabled: z.boolean().default(true),
+        config: corsConfigSchema,
+    }),
+    permissionsPolicy: z.object({
+        enabled: z.boolean().default(true),
+        config: permissionsPolicyConfigSchema,
+    }),
+    coep: z.object({
+        enabled: z.boolean().default(false),
+        value: z.enum(['unsafe-none', 'require-corp', 'credentialless']).default('unsafe-none'),
+    }),
+    coop: z.object({
+        enabled: z.boolean().default(false),
+        value: z.enum(['unsafe-none', 'same-origin-allow-popups', 'same-origin']).default('unsafe-none'),
+    }),
+    corp: z.object({
+        enabled: z.boolean().default(false),
+        value: z.enum(['same-site', 'same-origin', 'cross-origin']).default('same-origin'),
+    }),
+    referrerPolicy: z.object({
+        enabled: z.boolean().default(true),
+        value: z.enum([
+            'no-referrer',
+            'no-referrer-when-downgrade',
+            'origin',
+            'origin-when-cross-origin',
+            'same-origin',
+            'strict-origin',
+            'strict-origin-when-cross-origin',
+            'unsafe-url',
+        ]).default('strict-origin-when-cross-origin'),
+    }),
+    xFrameOptions: z.object({
+        enabled: z.boolean().default(true),
+        value: z.enum(['DENY', 'SAMEORIGIN']).default('DENY'),
+    }),
+    xContentTypeOptions: z.object({
+        enabled: z.boolean().default(true),
+    }),
+    xXssProtection: z.object({
+        enabled: z.boolean().default(true),
+    }),
+    xDnsPrefetchControl: z.object({
+        enabled: z.boolean().default(true),
+        value: z.enum(['on', 'off']).default('off'),
+    }),
+    xPermittedCrossDomainPolicies: z.object({
+        enabled: z.boolean().default(true),
+        value: z.enum(['none', 'master-only', 'by-content-type', 'all']).default('none'),
+    }),
+    excludePaths: z.array(z.string()).optional(),
+});
+/**
+ * Zod schema for validation issue
+ */
+export const validationIssueSchema = z.object({
+    severity: z.enum(['error', 'warning', 'info']),
+    header: z.string(),
+    message: z.string(),
+    recommendation: z.string().optional(),
+});
+/**
+ * Zod schema for validation result
+ */
+export const headerValidationResultSchema = z.object({
+    valid: z.boolean(),
+    score: z.number().min(0),
+    maxScore: z.number().min(0),
+    grade: z.enum(['A+', 'A', 'B', 'C', 'D', 'F']),
+    issues: z.array(validationIssueSchema),
+    summary: z.object({
+        errors: z.number().int().min(0),
+        warnings: z.number().int().min(0),
+        info: z.number().int().min(0),
+    }),
+});
+/**
+ * Zod schema for CSP violation report
+ */
+export const cspViolationReportSchema = z.object({
+    'csp-report': z.object({
+        'document-uri': z.string(),
+        'violated-directive': z.string(),
+        'effective-directive': z.string(),
+        'original-policy': z.string(),
+        'blocked-uri': z.string(),
+        'status-code': z.number().int(),
+        'source-file': z.string().optional(),
+        'line-number': z.number().int().optional(),
+        'column-number': z.number().int().optional(),
+        'script-sample': z.string().optional(),
+        disposition: z.enum(['enforce', 'report']).optional(),
+        referrer: z.string().optional(),
+    }),
+});
+//# sourceMappingURL=types.js.map

package/dist/security/headers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/security/headers/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4FxB;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AAE/C;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,iBAAiB;IACjB,yCAAyC;IACzC,aAAa;IACb,cAAc;IACd,wBAAwB;IACxB,oBAAoB;IACpB,cAAc;IACd,gCAAgC;IAChC,oBAAoB;IACpB,mBAAmB;IACnB,eAAe;IACf,yCAAyC;IACzC,sBAAsB;IACtB,yCAAyC;IACzC,0CAA0C;CAC3C,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACvD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACrD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACvD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACpD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACrD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACnD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACxD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACrD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACxD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACtD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC3D,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC3D,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACrD,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC1D,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC1D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACtD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACpD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IAClD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACvD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC3D,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACvD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,2BAA2B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpE,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnD,yBAAyB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,MAAM,EAAE,CAAC;AAkBZ;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC;AAErD;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,QAAQ,CAAC;AAEjD;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACjE,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACpC,CAAC,CAAC,MAAM,CACP,CAAC,MAAM,EAAE,EAAE;IACT,2FAA2F;IAC3F,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,MAAM,IAAI,4BAA4B,IAAI,MAAM,CAAC,iBAAiB,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,EACD;IACE,OAAO,EAAE,mCAAmC,4BAA4B,uCAAuC;CAChH,CACF,CAAC;AA+BF;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,uCAAuC,CAAC;IACnF,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACjG,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;QAC1C,QAAQ;QACR,iBAAiB;QACjB,kBAAkB;QAClB,cAAc;QACd,eAAe;QACf,kBAAkB;QAClB,cAAc;KACf,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACvD,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACjD,CAAC,CAAC,MAAM,CACP,CAAC,MAAM,EAAE,EAAE;IACT,kDAAkD;IAClD,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,EACD;IACE,OAAO,EAAE,2DAA2D;CACrE,CACF,CAAC;AA2DF;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AAEvD;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,aAAa,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACtD,sBAAsB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC/D,QAAQ,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACjD,OAAO,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC/C,iBAAiB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC1D,iBAAiB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC1D,iBAAiB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC1D,UAAU,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACnD,OAAO,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAChD,WAAW,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACpD,SAAS,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAClD,GAAG,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC5C,0BAA0B,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACnE,gBAAgB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACzD,aAAa,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACtD,YAAY,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACrD,UAAU,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACnD,IAAI,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC7C,iBAAiB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC1D,OAAO,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAChD,oBAAoB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC7D,8BAA8B,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACvE,2BAA2B,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACpE,kBAAkB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC3D,MAAM,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC/C,mBAAmB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC5D,gBAAgB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACzD,GAAG,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACpD,mBAAmB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC5D,qBAAqB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAC9D,iBAAiB,EAAE,4BAA4B,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC,MAAM,EAAE,CAAC;AAgJZ;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC5E,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,UAAU,EAAE,mBAAmB;QAC/B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACtC,SAAS,EAAE,wBAAwB,CAAC,QAAQ,EAAE;KAC/C,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACF,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,6BAA6B;KACtC,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;KACxF,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,0BAA0B,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;KACjG,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;KACnF,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;YACZ,aAAa;YACb,4BAA4B;YAC5B,QAAQ;YACR,0BAA0B;YAC1B,aAAa;YACb,eAAe;YACf,iCAAiC;YACjC,YAAY;SACb,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;KAC9C,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;KACtD,CAAC;IACF,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACnC,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACnC,CAAC;IACF,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;KAC5C,CAAC;IACF,6BAA6B,EAAE,CAAC,CAAC,MAAM,CAAC;QACtC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;KACjF,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAqCH;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC9B,CAAC;CACH,CAAC,CAAC;AA0BH;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;QAC1B,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE;QAChC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;QACjC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC7B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC1C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC5C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACtC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;QACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;CACH,CAAC,CAAC"}

package/dist/security/headers/validator.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Security Headers Validator
+ *
+ * Validates security header configurations and generates security scores.
+ *
+ * @packageDocumentation
+ * @module security/headers/validator
+ */
+import type { SecurityHeadersConfig, HeaderValidationResult } from './types.js';
+/**
+ * Validate a complete security headers configuration
+ *
+ * @param config - The security headers configuration to validate
+ * @returns Validation result with score, grade, and issues
+ */
+export declare function validateSecurityHeaders(config: SecurityHeadersConfig): HeaderValidationResult;
+/**
+ * Assert that a security headers configuration is valid for production
+ *
+ * @param config - The configuration to validate
+ * @throws Error if validation fails
+ */
+export declare function assertValidSecurityHeaders(config: SecurityHeadersConfig): void;
+/**
+ * Get a summary of the security headers configuration
+ */
+export declare function getSecurityHeadersSummary(config: SecurityHeadersConfig): {
+    cspEnabled: boolean;
+    hstsEnabled: boolean;
+    corsEnabled: boolean;
+    permissionsPolicyEnabled: boolean;
+    crossOriginPoliciesEnabled: boolean;
+    grade: string;
+    score: number;
+};
+//# sourceMappingURL=validator.d.ts.map

package/dist/security/headers/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../src/security/headers/validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EACV,qBAAqB,EAErB,sBAAsB,EAKvB,MAAM,YAAY,CAAC;AAujBpB;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,qBAAqB,GAC5B,sBAAsB,CAkFxB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAgB9E;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,qBAAqB,GAAG;IACxE,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,wBAAwB,EAAE,OAAO,CAAC;IAClC,0BAA0B,EAAE,OAAO,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf,CAYA"}