@zintrust/core 0.1.27 → 0.1.28

package/src/security/JwtManager.d.ts

@@ -1,42 +0,0 @@
-/**
- * JWT Manager
- * JSON Web Token generation, verification, and claims management
- * Uses native Node.js crypto module (zero external dependencies)
- */
-export type JwtAlgorithm = 'HS256' | 'HS512' | 'RS256';
-export interface JwtPayload {
-    sub?: string;
-    iss?: string;
-    aud?: string;
-    exp?: number;
-    iat?: number;
-    nbf?: number;
-    jti?: string;
-    [key: string]: unknown;
-}
-export interface JwtOptions {
-    algorithm?: JwtAlgorithm;
-    expiresIn?: number;
-    issuer?: string;
-    audience?: string;
-    subject?: string;
-    jwtId?: string;
-}
-export interface IJwtManager {
-    setHmacSecret(secret: string): void;
-    setRsaKeys(privateKey: string, publicKey: string): void;
-    sign(payload: JwtPayload, options?: JwtOptions): string;
-    verify(token: string, algorithm?: JwtAlgorithm): JwtPayload;
-    decode(token: string): JwtPayload;
-    signRsa(message: string): string;
-    generateJwtId(): string;
-}
-export interface JwtManagerType {
-    create(): IJwtManager;
-    signAccessToken: (payload: JwtPayload, expiresIn?: number) => string;
-}
-/**
- * JwtManager namespace - sealed for immutability
- */
-export declare const JwtManager: JwtManagerType;
-//# sourceMappingURL=JwtManager.d.ts.map

package/src/security/JwtManager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"JwtManager.d.ts","sourceRoot":"","sources":["../../../src/security/JwtManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvD,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACxD,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IACxD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,YAAY,GAAG,UAAU,CAAC;IAC5D,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAAC;IAClC,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,aAAa,IAAI,MAAM,CAAC;CACzB;AAQD,MAAM,WAAW,cAAc;IAC7B,MAAM,IAAI,WAAW,CAAC;IACtB,eAAe,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;CACtE;AA6ED;;GAEG;AACH,eAAO,MAAM,UAAU,EAAE,cAGvB,CAAC"}

package/src/security/JwtManager.js

@@ -1,262 +0,0 @@
-/**
- * JWT Manager
- * JSON Web Token generation, verification, and claims management
- * Uses native Node.js crypto module (zero external dependencies)
- */
-import { securityConfig } from '../config/index.js';
-import { ErrorFactory } from '../exceptions/ZintrustError.js';
-import { createHmac, createSign, createVerify, randomBytes } from '../node-singletons/crypto.js';
-const createJwt = () => {
-    const algorithm = securityConfig.jwt.algorithm;
-    const secret = securityConfig.jwt.secret;
-    const jwt = JwtManager.create();
-    if (algorithm === 'HS256' || algorithm === 'HS512') {
-        jwt.setHmacSecret(secret);
-    }
-    return jwt;
-};
-const signAccessToken = (payload, expiresIn) => {
-    const algorithm = securityConfig.jwt.algorithm;
-    const jwt = createJwt();
-    // JwtManager currently supports HMAC secrets directly for HS algorithms.
-    // For other algorithms, verify will still reject mismatched tokens.
-    if (algorithm !== 'HS256' && algorithm !== 'HS512') {
-        return jwt.sign(payload, {
-            algorithm,
-            issuer: securityConfig.jwt.issuer,
-            audience: securityConfig.jwt.audience,
-            jwtId: jwt.generateJwtId(),
-        });
-    }
-    return jwt.sign(payload, {
-        algorithm,
-        expiresIn: expiresIn ?? securityConfig.jwt.expiresIn,
-        issuer: securityConfig.jwt.issuer,
-        audience: securityConfig.jwt.audience,
-        subject: typeof payload.sub === 'string' ? payload.sub : undefined,
-        jwtId: jwt.generateJwtId(),
-    });
-};
-/**
- * Create a new JWT manager instance
- */
-const create = () => {
-    const state = {
-        hmacSecret: null,
-        rsaPrivateKey: null,
-        rsaPublicKey: null,
-    };
-    return {
-        setHmacSecret(secret) {
-            state.hmacSecret = secret;
-        },
-        setRsaKeys(privateKey, publicKey) {
-            state.rsaPrivateKey = privateKey;
-            state.rsaPublicKey = publicKey;
-        },
-        sign(payload, options = {}) {
-            return signToken(state, payload, options);
-        },
-        verify(token, algorithm = 'HS256') {
-            return verifyToken(state, token, algorithm);
-        },
-        decode(token) {
-            return decodeToken(token);
-        },
-        signRsa(message) {
-            return signRsa(message, state.rsaPrivateKey);
-        },
-        generateJwtId() {
-            return randomBytes(16).toString('hex');
-        },
-    };
-};
-/**
- * JwtManager namespace - sealed for immutability
- */
-export const JwtManager = Object.freeze({
-    create,
-    signAccessToken,
-});
-/**
- * Sign JWT token
- */
-function signToken(state, payload, options) {
-    const algorithm = options.algorithm ?? 'HS256';
-    const now = Math.floor(Date.now() / 1000);
-    const claims = buildClaims(payload, options, now);
-    const header = { alg: algorithm, typ: 'JWT' };
-    const encodedHeader = base64Encode(JSON.stringify(header));
-    const encodedPayload = base64Encode(JSON.stringify(claims));
-    const message = `${encodedHeader}.${encodedPayload}`;
-    const signature = generateSignature(message, algorithm, state.hmacSecret, state.rsaPrivateKey);
-    return `${message}.${signature}`;
-}
-/**
- * Verify JWT token
- */
-function verifyToken(state, token, algorithm) {
-    const parts = token.split('.');
-    if (parts.length !== 3) {
-        throw ErrorFactory.createSecurityError('Invalid token format');
-    }
-    const [encodedHeader, encodedPayload, encodedSignature] = parts;
-    try {
-        const header = JSON.parse(base64Decode(encodedHeader));
-        if (header['alg'] !== algorithm) {
-            throw ErrorFactory.createSecurityError(`Algorithm mismatch: expected ${algorithm}, got ${header['alg']}`);
-        }
-        const message = `${encodedHeader}.${encodedPayload}`;
-        const isValid = verifySignature(message, encodedSignature, algorithm, state.hmacSecret, state.rsaPublicKey);
-        if (!isValid) {
-            throw ErrorFactory.createSecurityError('Invalid signature');
-        }
-        const payload = JSON.parse(base64Decode(encodedPayload));
-        verifyClaims(payload);
-        return payload;
-    }
-    catch (error) {
-        throw ErrorFactory.createSecurityError(`Token verification failed: ${error.message}`);
-    }
-}
-/**
- * Decode JWT token without verification
- */
-function decodeToken(token) {
-    const parts = token.split('.');
-    if (parts.length !== 3) {
-        throw ErrorFactory.createSecurityError('Invalid token format');
-    }
-    try {
-        const payload = JSON.parse(base64Decode(parts[1]));
-        return payload;
-    }
-    catch (error) {
-        throw ErrorFactory.createSecurityError(`Invalid token payload: ${error.message}`);
-    }
-}
-/**
- * Base64 URL encoding
- */
-function base64Encode(data) {
-    const buffer = typeof data === 'string' ? Buffer.from(data, 'utf8') : data;
-    return buffer.toString('base64').replaceAll('+', '-').replaceAll('/', '_').replaceAll('=', '');
-}
-/**
- * Base64 URL decoding to Buffer
- */
-function base64DecodeBuffer(data) {
-    const padded = data + '==='.slice((data.length + 3) % 4);
-    const base64 = padded.replaceAll('-', '+').replaceAll('_', '/');
-    return Buffer.from(base64, 'base64');
-}
-/**
- * Base64 URL decoding to string
- */
-function base64Decode(data) {
-    return base64DecodeBuffer(data).toString('utf8');
-}
-/**
- * Timing safe string comparison
- */
-function timingSafeEquals(a, b) {
-    if (a.length !== b.length) {
-        return false;
-    }
-    let result = 0;
-    for (let i = 0; i < a.length; i++) {
-        result |= (a.codePointAt(i) ?? 0) ^ (b.codePointAt(i) ?? 0);
-    }
-    return result === 0;
-}
-/**
- * Sign message using HMAC
- */
-function signHmac(message, algorithm, secret) {
-    if (secret === null) {
-        throw ErrorFactory.createSecurityError('HMAC secret not configured');
-    }
-    const digestAlgorithm = algorithm === 'HS256' ? 'sha256' : 'sha512';
-    const signature = createHmac(digestAlgorithm, secret).update(message).digest();
-    return base64Encode(signature);
-}
-/**
- * Sign message using RSA
- */
-function signRsa(message, privateKey) {
-    if (privateKey === null) {
-        throw ErrorFactory.createSecurityError('RSA private key not configured');
-    }
-    const sign = createSign('RSA-SHA256');
-    sign.update(message);
-    const signature = sign.sign(privateKey);
-    return base64Encode(signature);
-}
-/**
- * Generate signature based on algorithm
- */
-function generateSignature(message, algorithm, hmacSecret, rsaPrivateKey) {
-    if (algorithm.startsWith('HS')) {
-        return signHmac(message, algorithm, hmacSecret);
-    }
-    if (algorithm === 'RS256') {
-        return signRsa(message, rsaPrivateKey);
-    }
-    throw ErrorFactory.createSecurityError(`Unsupported algorithm: ${algorithm}`);
-}
-/**
- * Verify signature based on algorithm
- */
-function verifySignature(message, encodedSignature, algorithm, hmacSecret, rsaPublicKey) {
-    if (algorithm.startsWith('HS')) {
-        const expectedSignature = signHmac(message, algorithm, hmacSecret);
-        return timingSafeEquals(encodedSignature, expectedSignature);
-    }
-    else if (algorithm === 'RS256') {
-        if (rsaPublicKey === null) {
-            throw ErrorFactory.createSecurityError('RSA public key not configured');
-        }
-        const verify = createVerify('RSA-SHA256'); // NOSONAR LCHECK
-        verify.update(message);
-        const signature = base64DecodeBuffer(encodedSignature);
-        return verify.verify(rsaPublicKey, signature);
-    }
-    return false;
-}
-/**
- * Build JWT claims
- */
-function buildClaims(payload, options, now) {
-    const claims = {
-        ...payload,
-        iat: now,
-    };
-    if (options.expiresIn !== undefined && options.expiresIn !== null) {
-        claims.exp = now + options.expiresIn;
-    }
-    if (options.issuer !== undefined && options.issuer !== null) {
-        claims.iss = options.issuer;
-    }
-    if (options.audience !== undefined && options.audience !== null) {
-        claims.aud = options.audience;
-    }
-    if (options.subject !== undefined && options.subject !== null) {
-        claims.sub = options.subject;
-    }
-    if (options.jwtId !== undefined && options.jwtId !== null) {
-        claims.jti = options.jwtId;
-    }
-    return claims;
-}
-/**
- * Verify JWT claims (expiration, not before)
- */
-function verifyClaims(payload) {
-    const now = Math.floor(Date.now() / 1000);
-    if (payload.exp !== undefined && payload.exp !== null && payload.exp <= now) {
-        throw ErrorFactory.createSecurityError('Token expired');
-    }
-    if (payload.nbf !== undefined && payload.nbf !== null && payload.nbf > now) {
-        throw ErrorFactory.createSecurityError('Token not yet valid');
-    }
-}

package/src/security/PasswordResetTokenBroker.d.ts

@@ -1,39 +0,0 @@
-/**
- * Password Reset Token Broker
- *
- * Framework-agnostic, storage-pluggable password reset token flow.
- *
- * - Generates high-entropy tokens for a given identifier (usually an email).
- * - Stores only a SHA-256 hash of the token (one active token per identifier).
- * - Supports verification and one-time consumption.
- */
-export interface PasswordResetTokenRecord {
-    identifier: string;
-    tokenHash: string;
-    createdAt: Date;
-    expiresAt: Date;
-}
-export interface IPasswordResetTokenStore {
-    set(record: PasswordResetTokenRecord): void | Promise<void>;
-    get(identifier: string): PasswordResetTokenRecord | null | Promise<PasswordResetTokenRecord | null>;
-    delete(identifier: string): void | Promise<void>;
-    cleanup?(now?: Date): number | Promise<number>;
-    clear?(): void | Promise<void>;
-}
-export interface IPasswordResetTokenBroker {
-    createToken(identifier: string): Promise<string>;
-    verifyToken(identifier: string, token: string): Promise<boolean>;
-    consumeToken(identifier: string, token: string): Promise<boolean>;
-}
-export interface PasswordResetTokenBrokerOptions {
-    store?: IPasswordResetTokenStore;
-    ttlMs?: number;
-    tokenBytes?: number;
-    now?: () => Date;
-}
-export interface PasswordResetTokenBrokerType {
-    create(options?: PasswordResetTokenBrokerOptions): IPasswordResetTokenBroker;
-    createInMemoryStore(): IPasswordResetTokenStore;
-}
-export declare const PasswordResetTokenBroker: PasswordResetTokenBrokerType;
-//# sourceMappingURL=PasswordResetTokenBroker.d.ts.map

package/src/security/PasswordResetTokenBroker.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PasswordResetTokenBroker.d.ts","sourceRoot":"","sources":["../../../src/security/PasswordResetTokenBroker.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,GAAG,CACD,UAAU,EAAE,MAAM,GACjB,wBAAwB,GAAG,IAAI,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;IAC9E,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,+BAA+B;IAC9C,KAAK,CAAC,EAAE,wBAAwB,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,CAAC,OAAO,CAAC,EAAE,+BAA+B,GAAG,yBAAyB,CAAC;IAC7E,mBAAmB,IAAI,wBAAwB,CAAC;CACjD;AAmFD,eAAO,MAAM,wBAAwB,EAAE,4BAGrC,CAAC"}

package/src/security/PasswordResetTokenBroker.js

@@ -1,131 +0,0 @@
-/**
- * Password Reset Token Broker
- *
- * Framework-agnostic, storage-pluggable password reset token flow.
- *
- * - Generates high-entropy tokens for a given identifier (usually an email).
- * - Stores only a SHA-256 hash of the token (one active token per identifier).
- * - Supports verification and one-time consumption.
- */
-import { ErrorFactory } from '../exceptions/ZintrustError.js';
-import { createHash, randomBytes } from '../node-singletons/crypto.js';
-const DEFAULT_TTL_MS = 30 * 60 * 1000;
-const DEFAULT_TOKEN_BYTES = 32; // 256 bits
-const createInMemoryStore = () => {
-    const map = new Map();
-    return {
-        set(record) {
-            map.set(record.identifier, record);
-        },
-        get(identifier) {
-            return map.get(identifier) ?? null;
-        },
-        delete(identifier) {
-            map.delete(identifier);
-        },
-        cleanup(now = new Date()) {
-            let removed = 0;
-            for (const [identifier, record] of map.entries()) {
-                if (now.getTime() > record.expiresAt.getTime()) {
-                    map.delete(identifier);
-                    removed++;
-                }
-            }
-            return removed;
-        },
-        clear() {
-            map.clear();
-        },
-    };
-};
-const create = (options = {}) => {
-    const store = options.store ?? createInMemoryStore();
-    const ttlMs = normalizeTtlMs(options.ttlMs ?? DEFAULT_TTL_MS);
-    const tokenBytes = normalizeTokenBytes(options.tokenBytes ?? DEFAULT_TOKEN_BYTES);
-    const now = options.now ?? (() => new Date());
-    return {
-        async createToken(identifier) {
-            const normalizedIdentifier = normalizeIdentifier(identifier);
-            const token = randomBytes(tokenBytes).toString('hex');
-            const tokenHash = sha256Hex(token);
-            const createdAt = now();
-            const expiresAt = new Date(createdAt.getTime() + ttlMs);
-            await store.set({ identifier: normalizedIdentifier, tokenHash, createdAt, expiresAt });
-            return token;
-        },
-        async verifyToken(identifier, token) {
-            const normalizedIdentifier = normalizeIdentifier(identifier);
-            const normalizedToken = normalizeToken(token);
-            const record = await store.get(normalizedIdentifier);
-            if (record === null)
-                return false;
-            if (isExpired(record, now())) {
-                await store.delete(normalizedIdentifier);
-                return false;
-            }
-            const computed = sha256Hex(normalizedToken);
-            return timingSafeEquals(record.tokenHash, computed);
-        },
-        async consumeToken(identifier, token) {
-            const normalizedIdentifier = normalizeIdentifier(identifier);
-            const ok = await this.verifyToken(normalizedIdentifier, token);
-            if (!ok)
-                return false;
-            await store.delete(normalizedIdentifier);
-            return true;
-        },
-    };
-};
-export const PasswordResetTokenBroker = Object.freeze({
-    create,
-    createInMemoryStore,
-});
-function normalizeIdentifier(identifier) {
-    if (typeof identifier !== 'string') {
-        throw ErrorFactory.createValidationError('Invalid identifier');
-    }
-    const trimmed = identifier.trim();
-    if (trimmed.length === 0) {
-        throw ErrorFactory.createValidationError('Invalid identifier');
-    }
-    return trimmed;
-}
-function normalizeToken(token) {
-    if (typeof token !== 'string') {
-        throw ErrorFactory.createValidationError('Invalid token');
-    }
-    const trimmed = token.trim();
-    if (trimmed.length === 0) {
-        throw ErrorFactory.createValidationError('Invalid token');
-    }
-    return trimmed;
-}
-function normalizeTtlMs(ttlMs) {
-    const value = Number.isFinite(ttlMs) ? Math.trunc(ttlMs) : 0;
-    if (value <= 0) {
-        throw ErrorFactory.createConfigError('Invalid password reset TTL', { ttlMs });
-    }
-    return value;
-}
-function normalizeTokenBytes(tokenBytes) {
-    const value = Number.isFinite(tokenBytes) ? Math.trunc(tokenBytes) : 0;
-    if (value <= 0) {
-        throw ErrorFactory.createConfigError('Invalid password reset token bytes', { tokenBytes });
-    }
-    return value;
-}
-function isExpired(record, now) {
-    return now.getTime() > record.expiresAt.getTime();
-}
-function sha256Hex(value) {
-    return createHash('sha256').update(value).digest('hex');
-}
-function timingSafeEquals(a, b) {
-    if (a.length !== b.length)
-        return false;
-    let result = 0;
-    for (let i = 0; i < a.length; i++) {
-        result |= (a.codePointAt(i) ?? 0) ^ (b.codePointAt(i) ?? 0);
-    }
-    return result === 0;
-}

package/src/security/Sanitizer.d.ts

@@ -1,76 +0,0 @@
-/**
- * Input Sanitizer (Character Whitelisting)
- *
- * Provides small utilities to remove unwanted characters from user input.
- *
- * Important:
- * - This is NOT a complete SQL injection defense.
- * - Always use parameterized queries / the ORM / QueryBuilder.
- *
- * Use this for:
- * - Normalizing identifiers (username, slug-ish strings)
- * - Cleaning phone numbers / numeric strings
- * - Reducing unexpected characters before storage/logging
- *
- * Bulletproof Mode:
- * - Enabled by default (`bulletproof=true`) for security-critical methods
- * - Throws SanitizerError instead of returning empty/invalid values
- * - Validates numeric ranges, leading zeros, type coercion attacks
- * - ~5-15% performance overhead; disable for performance-critical paths
- */
-export type SanitizerType = Readonly<{
-    parseAmount: (value: unknown, bulletproof?: boolean) => number;
-    alphanumeric: (value: unknown) => string;
-    alphanumericDotDash: (value: unknown) => string;
-    /** Returns `null` when value isn't numeric; returns `0` for empty / negative numbers. */
-    nonNegativeNumericStringOrNull: (value: unknown, bulletproof?: boolean) => number | null | string;
-    addressText: (value: unknown) => string;
-    emailLike: (value: unknown) => string;
-    email: (value: unknown, bulletproof?: boolean) => string;
-    messageText: (value: unknown) => string;
-    numericDotOnly: (value: unknown) => string;
-    ipAddressText: (value: unknown) => string;
-    nameText: (value: unknown, bulletproof?: boolean) => string;
-    alphaNumericColonDash: (value: unknown) => string;
-    digitsOnly: (value: unknown, bulletproof?: boolean) => string;
-    decimalString: (value: unknown, bulletproof?: boolean) => string;
-    dateSlash: (value: unknown) => string;
-    safePasswordChars: (value: unknown, bulletproof?: boolean) => string;
-    wordCharsAndSpaces: (value: unknown) => string;
-    lowercaseAlphanumeric: (value: unknown) => string;
-    uppercaseAlphanumeric: (value: unknown) => string;
-    alphanumericNoSpaces: (value: unknown) => string;
-    dateSlashNoSpaces: (value: unknown) => string;
-    uuidTokenSafe: (value: unknown) => string;
-    tokenSafe: (value: unknown) => string;
-    keyLike: (value: unknown) => string;
-}>;
-export declare const createSanitizer: () => SanitizerType;
-export declare const Sanitizer: Readonly<{
-    parseAmount: (value: unknown, bulletproof?: boolean) => number;
-    alphanumeric: (value: unknown) => string;
-    alphanumericDotDash: (value: unknown) => string;
-    /** Returns `null` when value isn't numeric; returns `0` for empty / negative numbers. */
-    nonNegativeNumericStringOrNull: (value: unknown, bulletproof?: boolean) => number | null | string;
-    addressText: (value: unknown) => string;
-    emailLike: (value: unknown) => string;
-    email: (value: unknown, bulletproof?: boolean) => string;
-    messageText: (value: unknown) => string;
-    numericDotOnly: (value: unknown) => string;
-    ipAddressText: (value: unknown) => string;
-    nameText: (value: unknown, bulletproof?: boolean) => string;
-    alphaNumericColonDash: (value: unknown) => string;
-    digitsOnly: (value: unknown, bulletproof?: boolean) => string;
-    decimalString: (value: unknown, bulletproof?: boolean) => string;
-    dateSlash: (value: unknown) => string;
-    safePasswordChars: (value: unknown, bulletproof?: boolean) => string;
-    wordCharsAndSpaces: (value: unknown) => string;
-    lowercaseAlphanumeric: (value: unknown) => string;
-    uppercaseAlphanumeric: (value: unknown) => string;
-    alphanumericNoSpaces: (value: unknown) => string;
-    dateSlashNoSpaces: (value: unknown) => string;
-    uuidTokenSafe: (value: unknown) => string;
-    tokenSafe: (value: unknown) => string;
-    keyLike: (value: unknown) => string;
-}>;
-//# sourceMappingURL=Sanitizer.d.ts.map

package/src/security/Sanitizer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"Sanitizer.d.ts","sourceRoot":"","sources":["../../../src/security/Sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA8CH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC/D,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACzC,mBAAmB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEhD,yFAAyF;IACzF,8BAA8B,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC;IAElG,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACzD,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAExC,cAAc,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE1C,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC5D,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAElD,UAAU,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC9D,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAEjE,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEtC,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACrE,kBAAkB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE/C,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAClD,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAElD,oBAAoB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACjD,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE9C,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEtC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;CACrC,CAAC,CAAC;AAufH,eAAO,MAAM,eAAe,QAAO,aAMlC,CAAC;AAEF,eAAO,MAAM,SAAS;iBAniBP,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;kBAChD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;yBACnB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;IAE/C,yFAAyF;oCACzD,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM;iBAEpF,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;eAC5B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;WAC9B,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;iBAC3C,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;oBAEvB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;mBAC3B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;cAE/B,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;2BACpC,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;gBAErC,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;mBAC9C,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;eAErD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;uBAElB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;wBAChD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;2BAEvB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;2BAC1B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;0BAE3B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;uBAC7B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;mBAE9B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;eAC9B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;aAE5B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;EAggBK,CAAC"}