@zudojs/security 0.0.1

package/dist/header/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @zudojs/security — Header Security Barrel
+ */
+export { validateHeaderName, validateHeaderValue, validateHeaders, sanitizeHeaderValue, isHopByHopHeader, } from "./header.core.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/header/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/header/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC"}

package/dist/header/index.js

@@ -0,0 +1,5 @@
+/**
+ * @zudojs/security — Header Security Barrel
+ */
+export { validateHeaderName, validateHeaderValue, validateHeaders, sanitizeHeaderValue, isHopByHopHeader, } from "./header.core.js";
+//# sourceMappingURL=index.js.map

package/dist/header/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/header/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC"}

package/dist/headers/headers.core.d.ts

@@ -0,0 +1,48 @@
+/**
+ * @zudojs/security — Security Headers
+ *
+ * Generates security-related HTTP response headers with secure defaults.
+ */
+import type { SecurityHeadersConfig } from "../types/security.type.js";
+/** Security header names. */
+export declare const SECURITY_HEADER_NAMES: {
+    readonly CONTENT_SECURITY_POLICY: "Content-Security-Policy";
+    readonly CONTENT_TYPE_OPTIONS: "X-Content-Type-Options";
+    readonly FRAME_OPTIONS: "X-Frame-Options";
+    readonly XSS_PROTECTION: "X-XSS-Protection";
+    readonly HSTS: "Strict-Transport-Security";
+    readonly REFERRER_POLICY: "Referrer-Policy";
+    readonly PERMISSIONS_POLICY: "Permissions-Policy";
+    readonly DNS_PREFETCH_CONTROL: "X-DNS-Prefetch-Control";
+    readonly OPENER_POLICY: "Cross-Origin-Opener-Policy";
+    readonly RESOURCE_POLICY: "Cross-Origin-Resource-Policy";
+};
+/**
+ * Generates security headers with secure defaults.
+ *
+ * @param config - Optional security headers configuration.
+ * @returns Record of security headers to set on the response.
+ */
+export declare function generateSecurityHeaders(config?: SecurityHeadersConfig): Record<string, string>;
+/**
+ * Checks if a response already has security headers set.
+ *
+ * @param headers - Response headers.
+ * @returns An array of missing security header names.
+ */
+export declare function getMissingSecurityHeaders(headers: Record<string, string | string[] | undefined>): string[];
+/**
+ * Creates a CSP nonce for inline scripts.
+ *
+ * @param nonceLength - Length of the nonce (default: 16).
+ * @returns The base64-encoded nonce.
+ */
+export declare function generateCspNonce(nonceLength?: number): string;
+/**
+ * Validates a Content-Security-Policy directive.
+ *
+ * @param directive - The CSP directive string.
+ * @returns An error message if invalid, or undefined.
+ */
+export declare function validateCspDirective(directive: string): string | undefined;
+//# sourceMappingURL=headers.core.d.ts.map

package/dist/headers/headers.core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.core.d.ts","sourceRoot":"","sources":["../../src/headers/headers.core.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,6BAA6B;AAC7B,eAAO,MAAM,qBAAqB;aAChC,uBAAuB,EAAE,yBAAyB;aAClD,oBAAoB,EAAE,wBAAwB;aAC9C,aAAa,EAAE,iBAAiB;aAChC,cAAc,EAAE,kBAAkB;aAClC,IAAI,EAAE,2BAA2B;aACjC,eAAe,EAAE,iBAAiB;aAClC,kBAAkB,EAAE,oBAAoB;aACxC,oBAAoB,EAAE,wBAAwB;aAC9C,aAAa,EAAE,4BAA4B;aAC3C,eAAe,EAAE,8BAA8B;CACvC,CAAC;AAaX;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,CAAC,EAAE,qBAAqB,GAC7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgDxB;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,MAAM,EAAE,CAaV;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAK7D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAsB1E"}

package/dist/headers/headers.core.js

@@ -0,0 +1,124 @@
+/**
+ * @zudojs/security — Security Headers
+ *
+ * Generates security-related HTTP response headers with secure defaults.
+ */
+/** Security header names. */
+export const SECURITY_HEADER_NAMES = {
+    CONTENT_SECURITY_POLICY: "Content-Security-Policy",
+    CONTENT_TYPE_OPTIONS: "X-Content-Type-Options",
+    FRAME_OPTIONS: "X-Frame-Options",
+    XSS_PROTECTION: "X-XSS-Protection",
+    HSTS: "Strict-Transport-Security",
+    REFERRER_POLICY: "Referrer-Policy",
+    PERMISSIONS_POLICY: "Permissions-Policy",
+    DNS_PREFETCH_CONTROL: "X-DNS-Prefetch-Control",
+    OPENER_POLICY: "Cross-Origin-Opener-Policy",
+    RESOURCE_POLICY: "Cross-Origin-Resource-Policy",
+};
+/** Default security headers. */
+const DEFAULT_HEADERS = {
+    [SECURITY_HEADER_NAMES.CONTENT_TYPE_OPTIONS]: "nosniff",
+    [SECURITY_HEADER_NAMES.FRAME_OPTIONS]: "DENY",
+    [SECURITY_HEADER_NAMES.XSS_PROTECTION]: "1; mode=block",
+    [SECURITY_HEADER_NAMES.REFERRER_POLICY]: "strict-origin-when-cross-origin",
+    [SECURITY_HEADER_NAMES.DNS_PREFETCH_CONTROL]: "off",
+    [SECURITY_HEADER_NAMES.OPENER_POLICY]: "same-origin",
+    [SECURITY_HEADER_NAMES.RESOURCE_POLICY]: "same-origin",
+};
+/**
+ * Generates security headers with secure defaults.
+ *
+ * @param config - Optional security headers configuration.
+ * @returns Record of security headers to set on the response.
+ */
+export function generateSecurityHeaders(config) {
+    const headers = { ...DEFAULT_HEADERS };
+    if (config?.contentSecurityPolicy) {
+        headers[SECURITY_HEADER_NAMES.CONTENT_SECURITY_POLICY] =
+            config.contentSecurityPolicy;
+    }
+    if (config?.contentTypeOptions) {
+        headers[SECURITY_HEADER_NAMES.CONTENT_TYPE_OPTIONS] =
+            config.contentTypeOptions;
+    }
+    if (config?.frameOptions) {
+        headers[SECURITY_HEADER_NAMES.FRAME_OPTIONS] = config.frameOptions;
+    }
+    if (config?.xssProtection) {
+        headers[SECURITY_HEADER_NAMES.XSS_PROTECTION] = config.xssProtection;
+    }
+    if (config?.hsts) {
+        headers[SECURITY_HEADER_NAMES.HSTS] = config.hsts;
+    }
+    if (config?.referrerPolicy) {
+        headers[SECURITY_HEADER_NAMES.REFERRER_POLICY] = config.referrerPolicy;
+    }
+    if (config?.permissionsPolicy) {
+        headers[SECURITY_HEADER_NAMES.PERMISSIONS_POLICY] =
+            config.permissionsPolicy;
+    }
+    if (config?.dnsPrefetchControl) {
+        headers[SECURITY_HEADER_NAMES.DNS_PREFETCH_CONTROL] =
+            config.dnsPrefetchControl;
+    }
+    if (config?.openerPolicy) {
+        headers[SECURITY_HEADER_NAMES.OPENER_POLICY] = config.openerPolicy;
+    }
+    if (config?.resourcePolicy) {
+        headers[SECURITY_HEADER_NAMES.RESOURCE_POLICY] = config.resourcePolicy;
+    }
+    return headers;
+}
+/**
+ * Checks if a response already has security headers set.
+ *
+ * @param headers - Response headers.
+ * @returns An array of missing security header names.
+ */
+export function getMissingSecurityHeaders(headers) {
+    const missing = [];
+    const lowerHeaders = new Map(Object.entries(headers).map(([k, v]) => [k.toLowerCase(), v]));
+    for (const name of Object.values(SECURITY_HEADER_NAMES)) {
+        if (!lowerHeaders.has(name.toLowerCase())) {
+            missing.push(name);
+        }
+    }
+    return missing;
+}
+/**
+ * Creates a CSP nonce for inline scripts.
+ *
+ * @param nonceLength - Length of the nonce (default: 16).
+ * @returns The base64-encoded nonce.
+ */
+export function generateCspNonce(nonceLength) {
+    const { randomBytes } = require("node:crypto");
+    const length = nonceLength ?? 16;
+    return randomBytes(length).toString("base64");
+}
+/**
+ * Validates a Content-Security-Policy directive.
+ *
+ * @param directive - The CSP directive string.
+ * @returns An error message if invalid, or undefined.
+ */
+export function validateCspDirective(directive) {
+    if (!directive || directive.trim().length === 0) {
+        return "CSP directive cannot be empty";
+    }
+    // Check for unsafe-inline, unsafe-eval (warnings)
+    const warnings = [];
+    if (directive.includes("'unsafe-inline'")) {
+        warnings.push("unsafe-inline weakens CSP");
+    }
+    if (directive.includes("'unsafe-eval'")) {
+        warnings.push("unsafe-eval weakens CSP");
+    }
+    if (directive.includes("'unsafe-hashes'")) {
+        warnings.push("unsafe-hashes weakens CSP");
+    }
+    // Return first warning as info (not error)
+    return warnings.length > 0 ? warnings[0] : undefined;
+}
+//# sourceMappingURL=headers.core.js.map

package/dist/headers/headers.core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.core.js","sourceRoot":"","sources":["../../src/headers/headers.core.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,6BAA6B;AAC7B,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,uBAAuB,EAAE,yBAAyB;IAClD,oBAAoB,EAAE,wBAAwB;IAC9C,aAAa,EAAE,iBAAiB;IAChC,cAAc,EAAE,kBAAkB;IAClC,IAAI,EAAE,2BAA2B;IACjC,eAAe,EAAE,iBAAiB;IAClC,kBAAkB,EAAE,oBAAoB;IACxC,oBAAoB,EAAE,wBAAwB;IAC9C,aAAa,EAAE,4BAA4B;IAC3C,eAAe,EAAE,8BAA8B;CACvC,CAAC;AAEX,gCAAgC;AAChC,MAAM,eAAe,GAA2B;IAC9C,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,EAAE,SAAS;IACvD,CAAC,qBAAqB,CAAC,aAAa,CAAC,EAAE,MAAM;IAC7C,CAAC,qBAAqB,CAAC,cAAc,CAAC,EAAE,eAAe;IACvD,CAAC,qBAAqB,CAAC,eAAe,CAAC,EAAE,iCAAiC;IAC1E,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,EAAE,KAAK;IACnD,CAAC,qBAAqB,CAAC,aAAa,CAAC,EAAE,aAAa;IACpD,CAAC,qBAAqB,CAAC,eAAe,CAAC,EAAE,aAAa;CACvD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA8B;IAE9B,MAAM,OAAO,GAA2B,EAAE,GAAG,eAAe,EAAE,CAAC;IAE/D,IAAI,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAClC,OAAO,CAAC,qBAAqB,CAAC,uBAAuB,CAAC;YACpD,MAAM,CAAC,qBAAqB,CAAC;IACjC,CAAC;IAED,IAAI,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC/B,OAAO,CAAC,qBAAqB,CAAC,oBAAoB,CAAC;YACjD,MAAM,CAAC,kBAAkB,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;QACzB,OAAO,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;IACrE,CAAC;IAED,IAAI,MAAM,EAAE,aAAa,EAAE,CAAC;QAC1B,OAAO,CAAC,qBAAqB,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;IACvE,CAAC;IAED,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IACpD,CAAC;IAED,IAAI,MAAM,EAAE,cAAc,EAAE,CAAC;QAC3B,OAAO,CAAC,qBAAqB,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC;IACzE,CAAC;IAED,IAAI,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAC9B,OAAO,CAAC,qBAAqB,CAAC,kBAAkB,CAAC;YAC/C,MAAM,CAAC,iBAAiB,CAAC;IAC7B,CAAC;IAED,IAAI,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC/B,OAAO,CAAC,qBAAqB,CAAC,oBAAoB,CAAC;YACjD,MAAM,CAAC,kBAAkB,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;QACzB,OAAO,CAAC,qBAAqB,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;IACrE,CAAC;IAED,IAAI,MAAM,EAAE,cAAc,EAAE,CAAC;QAC3B,OAAO,CAAC,qBAAqB,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC;IACzE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAsD;IAEtD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAC9D,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAoB;IACnD,MAAM,EAAE,WAAW,EAAE,GACnB,OAAO,CAAC,aAAa,CAAiC,CAAC;IACzD,MAAM,MAAM,GAAG,WAAW,IAAI,EAAE,CAAC;IACjC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,+BAA+B,CAAC;IACzC,CAAC;IAED,kDAAkD;IAClD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC7C,CAAC;IAED,2CAA2C;IAC3C,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC"}

package/dist/headers/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @zudojs/security — Security Headers Barrel
+ */
+export { SECURITY_HEADER_NAMES } from "./headers.core.js";
+export { generateSecurityHeaders, getMissingSecurityHeaders, generateCspNonce, validateCspDirective, } from "./headers.core.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/headers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/headers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC"}

package/dist/headers/index.js

@@ -0,0 +1,6 @@
+/**
+ * @zudojs/security — Security Headers Barrel
+ */
+export { SECURITY_HEADER_NAMES } from "./headers.core.js";
+export { generateSecurityHeaders, getMissingSecurityHeaders, generateCspNonce, validateCspDirective, } from "./headers.core.js";
+//# sourceMappingURL=index.js.map

package/dist/headers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/headers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @zudojs/security
+ *
+ * Security primitives for the Zudojs framework.
+ *
+ * Provides input validation, header security, URL normalization,
+ * body limits, cookie security, CORS, CSRF, rate limiting, and
+ * security headers with secure defaults.
+ *
+ * @example
+ * ```ts
+ * import { validateHeaders, validateUrl, generateSecurityHeaders } from '@zudojs/security';
+ *
+ * // Validate request headers
+ * const result = validateHeaders(request.headers);
+ * if (!result.valid) {
+ *   throw new Error(result.errors.join(', '));
+ * }
+ *
+ * // Validate URL
+ * const urlResult = validateUrl(request.url);
+ *
+ * // Add security headers
+ * const headers = generateSecurityHeaders();
+ * ```
+ *
+ * @packageDocumentation
+ */
+export type { HeaderSecurityConfig, HeaderValidationResult, BodyLimitConfig, BodyLimitPresets, UrlValidationConfig, UrlValidationResult, CookieSecurityConfig, ParsedCookie, CorsConfig, CsrfConfig, RateLimitConfig, RateLimitRequest, RateLimitResponse, RateLimitResult, SecurityHeadersConfig, RequestValidationConfig, InputSanitizationConfig, } from "./types/security.type.js";
+export { PROTOTYPE_POLLUTION_KEYS, SQL_INJECTION_PATTERNS, XSS_PATTERNS, } from "./types/security.type.js";
+export { validateHeaderName, validateHeaderValue, validateHeaders, sanitizeHeaderValue, isHopByHopHeader, } from "./header/index.js";
+export { validateUrl, normalizePath, validateRequestTarget, isSafeUrl, } from "./url/index.js";
+export { DEFAULT_BODY_LIMITS, validateContentLength, validateBodySize, getBodyLimitForContentType, validateBodyLimitConfig, createBodySizeChecker, } from "./body/index.js";
+export { parseCookieHeader, serializeCookie, createSecureCookie, validateCookieName, validateCookieValue, stripSensitiveCookies, } from "./cookie/index.js";
+export type { CorsHeaders } from "./cors/index.js";
+export { isOriginAllowed, generatePreflightHeaders, generateSimpleHeaders, isMethodAllowed, getDisallowedHeaders, } from "./cors/index.js";
+export { cors } from "./cors/cors.namespace.js";
+export { generateCsrfToken, validateCsrfToken, requiresCsrfProtection, extractCsrfTokenFromHeaders, extractCsrfTokenFromCookies, generateCsrfCookie, } from "./csrf/index.js";
+export { defaultKeyGenerator, defaultHandler, createRateLimiter, extractClientIp, } from "./rateLimit/index.js";
+export { rateLimit } from "./rateLimit/rateLimit.namespace.js";
+export { SECURITY_HEADER_NAMES } from "./headers/index.js";
+export { generateSecurityHeaders, getMissingSecurityHeaders, generateCspNonce, validateCspDirective, } from "./headers/index.js";
+export { containsSqlInjection, containsXss, containsPrototypePollution, sanitizeString, sanitizeObject, isSafeString, detectThreats, escapeHtml, stripHtml, } from "./input/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,YAAY,EACV,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,YAAY,GACb,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,WAAW,EACX,aAAa,EACb,qBAAqB,EACrB,SAAS,GACV,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,eAAe,EACf,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAGhD,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAG/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,0BAA0B,EAC1B,cAAc,EACd,cAAc,EACd,YAAY,EACZ,aAAa,EACb,UAAU,EACV,SAAS,GACV,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,50 @@
+/**
+ * @zudojs/security
+ *
+ * Security primitives for the Zudojs framework.
+ *
+ * Provides input validation, header security, URL normalization,
+ * body limits, cookie security, CORS, CSRF, rate limiting, and
+ * security headers with secure defaults.
+ *
+ * @example
+ * ```ts
+ * import { validateHeaders, validateUrl, generateSecurityHeaders } from '@zudojs/security';
+ *
+ * // Validate request headers
+ * const result = validateHeaders(request.headers);
+ * if (!result.valid) {
+ *   throw new Error(result.errors.join(', '));
+ * }
+ *
+ * // Validate URL
+ * const urlResult = validateUrl(request.url);
+ *
+ * // Add security headers
+ * const headers = generateSecurityHeaders();
+ * ```
+ *
+ * @packageDocumentation
+ */
+export { PROTOTYPE_POLLUTION_KEYS, SQL_INJECTION_PATTERNS, XSS_PATTERNS, } from "./types/security.type.js";
+/* ─── Header Security ────────────────────────────────────────────────────── */
+export { validateHeaderName, validateHeaderValue, validateHeaders, sanitizeHeaderValue, isHopByHopHeader, } from "./header/index.js";
+/* ─── URL Validation ─────────────────────────────────────────────────────── */
+export { validateUrl, normalizePath, validateRequestTarget, isSafeUrl, } from "./url/index.js";
+/* ─── Body Validation ────────────────────────────────────────────────────── */
+export { DEFAULT_BODY_LIMITS, validateContentLength, validateBodySize, getBodyLimitForContentType, validateBodyLimitConfig, createBodySizeChecker, } from "./body/index.js";
+/* ─── Cookie Security ────────────────────────────────────────────────────── */
+export { parseCookieHeader, serializeCookie, createSecureCookie, validateCookieName, validateCookieValue, stripSensitiveCookies, } from "./cookie/index.js";
+export { isOriginAllowed, generatePreflightHeaders, generateSimpleHeaders, isMethodAllowed, getDisallowedHeaders, } from "./cors/index.js";
+export { cors } from "./cors/cors.namespace.js";
+/* ─── CSRF ───────────────────────────────────────────────────────────────── */
+export { generateCsrfToken, validateCsrfToken, requiresCsrfProtection, extractCsrfTokenFromHeaders, extractCsrfTokenFromCookies, generateCsrfCookie, } from "./csrf/index.js";
+/* ─── Rate Limiting ──────────────────────────────────────────────────────── */
+export { defaultKeyGenerator, defaultHandler, createRateLimiter, extractClientIp, } from "./rateLimit/index.js";
+export { rateLimit } from "./rateLimit/rateLimit.namespace.js";
+/* ─── Security Headers ───────────────────────────────────────────────────── */
+export { SECURITY_HEADER_NAMES } from "./headers/index.js";
+export { generateSecurityHeaders, getMissingSecurityHeaders, generateCspNonce, validateCspDirective, } from "./headers/index.js";
+/* ─── Input Sanitization ─────────────────────────────────────────────────── */
+export { containsSqlInjection, containsXss, containsPrototypePollution, sanitizeString, sanitizeObject, isSafeString, detectThreats, escapeHtml, stripHtml, } from "./input/index.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAuBH,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,YAAY,GACb,MAAM,0BAA0B,CAAC;AAElC,gFAAgF;AAChF,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,gFAAgF;AAChF,OAAO,EACL,WAAW,EACX,aAAa,EACb,qBAAqB,EACrB,SAAS,GACV,MAAM,gBAAgB,CAAC;AAExB,gFAAgF;AAChF,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,gFAAgF;AAChF,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,eAAe,EACf,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAEhD,gFAAgF;AAChF,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,gFAAgF;AAChF,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAE/D,gFAAgF;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,gFAAgF;AAChF,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,0BAA0B,EAC1B,cAAc,EACd,cAAc,EACd,YAAY,EACZ,aAAa,EACb,UAAU,EACV,SAAS,GACV,MAAM,kBAAkB,CAAC"}

package/dist/input/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @zudojs/security — Input Sanitization Barrel
+ */
+export { containsSqlInjection, containsXss, containsPrototypePollution, sanitizeString, sanitizeObject, isSafeString, detectThreats, escapeHtml, stripHtml, } from "./input.core.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/input/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/input/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,0BAA0B,EAC1B,cAAc,EACd,cAAc,EACd,YAAY,EACZ,aAAa,EACb,UAAU,EACV,SAAS,GACV,MAAM,iBAAiB,CAAC"}

package/dist/input/index.js

@@ -0,0 +1,5 @@
+/**
+ * @zudojs/security — Input Sanitization Barrel
+ */
+export { containsSqlInjection, containsXss, containsPrototypePollution, sanitizeString, sanitizeObject, isSafeString, detectThreats, escapeHtml, stripHtml, } from "./input.core.js";
+//# sourceMappingURL=index.js.map

package/dist/input/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/input/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,0BAA0B,EAC1B,cAAc,EACd,cAAc,EACd,YAAY,EACZ,aAAa,EACb,UAAU,EACV,SAAS,GACV,MAAM,iBAAiB,CAAC"}

package/dist/input/input.core.d.ts

@@ -0,0 +1,73 @@
+/**
+ * @zudojs/security — Input Sanitization
+ *
+ * Sanitizes user input against common attack patterns.
+ */
+import type { InputSanitizationConfig } from "../types/security.type.js";
+/**
+ * Checks if a string contains SQL injection patterns.
+ *
+ * @param input - The string to check.
+ * @returns True if SQL injection patterns are detected.
+ */
+export declare function containsSqlInjection(input: string): boolean;
+/**
+ * Checks if a string contains XSS patterns.
+ *
+ * @param input - The string to check.
+ * @returns True if XSS patterns are detected.
+ */
+export declare function containsXss(input: string): boolean;
+/**
+ * Checks if a string contains prototype pollution keys.
+ *
+ * @param input - The string to check.
+ * @returns True if prototype pollution keys are detected.
+ */
+export declare function containsPrototypePollution(input: string): boolean;
+/**
+ * Sanitizes a string by removing dangerous characters.
+ *
+ * @param input - The string to sanitize.
+ * @param config - Optional sanitization configuration.
+ * @returns The sanitized string.
+ */
+export declare function sanitizeString(input: string, config?: InputSanitizationConfig): string;
+/**
+ * Sanitizes an object by recursively cleaning its values.
+ *
+ * @param obj - The object to sanitize.
+ * @param config - Optional sanitization configuration.
+ * @returns The sanitized object.
+ */
+export declare function sanitizeObject<T extends Record<string, unknown>>(obj: T, config?: InputSanitizationConfig): T;
+/**
+ * Validates that a string contains only safe characters.
+ *
+ * @param input - The string to validate.
+ * @param allowedPattern - Optional regex pattern for allowed characters.
+ * @returns True if the string is safe.
+ */
+export declare function isSafeString(input: string, allowedPattern?: RegExp): boolean;
+/**
+ * Checks for common attack patterns in a string.
+ *
+ * @param input - The string to check.
+ * @returns An array of detected threats.
+ */
+export declare function detectThreats(input: string): string[];
+/**
+ * HTML-escapes a string to prevent XSS.
+ *
+ * @param input - The string to escape.
+ * @returns The escaped string.
+ */
+export declare function escapeHtml(input: string): string;
+/**
+ * Strips HTML tags from a string.
+ *
+ * @param input - The string to strip.
+ * @returns The string with HTML tags removed.
+ */
+export declare function stripHtml(input: string): string;
+//# sourceMappingURL=input.core.d.ts.map

package/dist/input/input.core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.core.d.ts","sourceRoot":"","sources":["../../src/input/input.core.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAazE;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAElD;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAIjE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,uBAAuB,GAC/B,MAAM,CAsBR;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9D,GAAG,EAAE,CAAC,EACN,MAAM,CAAC,EAAE,uBAAuB,GAC/B,CAAC,CAmCH;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAiB5E;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAoBrD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUhD;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAe/C"}

package/dist/input/input.core.js

@@ -0,0 +1,182 @@
+/**
+ * @zudojs/security — Input Sanitization
+ *
+ * Sanitizes user input against common attack patterns.
+ */
+import { PROTOTYPE_POLLUTION_KEYS, SQL_INJECTION_PATTERNS, XSS_PATTERNS, } from "../types/security.type.js";
+/** Null byte pattern. */
+const NULL_BYTE_PATTERN = /\x00/g;
+/** Control character pattern (except tab, newline, carriage return). */
+const CONTROL_CHAR_PATTERN = /[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/g;
+/**
+ * Checks if a string contains SQL injection patterns.
+ *
+ * @param input - The string to check.
+ * @returns True if SQL injection patterns are detected.
+ */
+export function containsSqlInjection(input) {
+    return SQL_INJECTION_PATTERNS.some((pattern) => pattern.test(input));
+}
+/**
+ * Checks if a string contains XSS patterns.
+ *
+ * @param input - The string to check.
+ * @returns True if XSS patterns are detected.
+ */
+export function containsXss(input) {
+    return XSS_PATTERNS.some((pattern) => pattern.test(input));
+}
+/**
+ * Checks if a string contains prototype pollution keys.
+ *
+ * @param input - The string to check.
+ * @returns True if prototype pollution keys are detected.
+ */
+export function containsPrototypePollution(input) {
+    return PROTOTYPE_POLLUTION_KEYS.includes(input);
+}
+/**
+ * Sanitizes a string by removing dangerous characters.
+ *
+ * @param input - The string to sanitize.
+ * @param config - Optional sanitization configuration.
+ * @returns The sanitized string.
+ */
+export function sanitizeString(input, config) {
+    let sanitized = input;
+    // Strip null bytes
+    if (config?.stripNullBytes !== false) {
+        sanitized = sanitized.replace(NULL_BYTE_PATTERN, "");
+    }
+    // Strip control characters
+    sanitized = sanitized.replace(CONTROL_CHAR_PATTERN, "");
+    // Truncate if max length configured
+    if (config?.maxStringLength && sanitized.length > config.maxStringLength) {
+        sanitized = sanitized.slice(0, config.maxStringLength);
+    }
+    // Custom sanitizer
+    if (config?.customSanitizer) {
+        sanitized = config.customSanitizer(sanitized);
+    }
+    return sanitized;
+}
+/**
+ * Sanitizes an object by recursively cleaning its values.
+ *
+ * @param obj - The object to sanitize.
+ * @param config - Optional sanitization configuration.
+ * @returns The sanitized object.
+ */
+export function sanitizeObject(obj, config) {
+    const sanitized = { ...obj };
+    for (const [key, value] of Object.entries(sanitized)) {
+        // Check for prototype pollution keys
+        if (config?.preventPrototypePollution !== false) {
+            if (containsPrototypePollution(key)) {
+                delete sanitized[key];
+                continue;
+            }
+        }
+        // Sanitize string values
+        if (typeof value === "string") {
+            sanitized[key] = sanitizeString(value, config);
+        }
+        else if (typeof value === "object" && value !== null) {
+            // Recursively sanitize nested objects
+            if (Array.isArray(value)) {
+                sanitized[key] = value.map((item) => typeof item === "object" && item !== null
+                    ? sanitizeObject(item, config)
+                    : typeof item === "string"
+                        ? sanitizeString(item, config)
+                        : item);
+            }
+            else {
+                sanitized[key] = sanitizeObject(value, config);
+            }
+        }
+    }
+    return sanitized;
+}
+/**
+ * Validates that a string contains only safe characters.
+ *
+ * @param input - The string to validate.
+ * @param allowedPattern - Optional regex pattern for allowed characters.
+ * @returns True if the string is safe.
+ */
+export function isSafeString(input, allowedPattern) {
+    // Check for null bytes
+    if (NULL_BYTE_PATTERN.test(input)) {
+        return false;
+    }
+    // Check for control characters
+    if (CONTROL_CHAR_PATTERN.test(input)) {
+        return false;
+    }
+    // Check custom pattern
+    if (allowedPattern && !allowedPattern.test(input)) {
+        return false;
+    }
+    return true;
+}
+/**
+ * Checks for common attack patterns in a string.
+ *
+ * @param input - The string to check.
+ * @returns An array of detected threats.
+ */
+export function detectThreats(input) {
+    const threats = [];
+    if (containsSqlInjection(input)) {
+        threats.push("SQL_INJECTION");
+    }
+    if (containsXss(input)) {
+        threats.push("XSS");
+    }
+    if (NULL_BYTE_PATTERN.test(input)) {
+        threats.push("NULL_BYTE");
+    }
+    if (CONTROL_CHAR_PATTERN.test(input)) {
+        threats.push("CONTROL_CHARACTERS");
+    }
+    return threats;
+}
+/**
+ * HTML-escapes a string to prevent XSS.
+ *
+ * @param input - The string to escape.
+ * @returns The escaped string.
+ */
+export function escapeHtml(input) {
+    const map = {
+        "&": "&",
+        "<": "&lt;",
+        ">": "&gt;",
+        '"': "&quot;",
+        "'": "&#39;",
+    };
+    return input.replace(/[&<>"']/g, (char) => map[char] ?? char);
+}
+/**
+ * Strips HTML tags from a string.
+ *
+ * @param input - The string to strip.
+ * @returns The string with HTML tags removed.
+ */
+export function stripHtml(input) {
+    let result = "";
+    let inTag = false;
+    for (const char of input) {
+        if (char === "<") {
+            inTag = true;
+        }
+        else if (char === ">") {
+            inTag = false;
+        }
+        else if (!inTag) {
+            result += char;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=input.core.js.map

package/dist/input/input.core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.core.js","sourceRoot":"","sources":["../../src/input/input.core.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,YAAY,GACb,MAAM,2BAA2B,CAAC;AAEnC,yBAAyB;AACzB,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAElC,wEAAwE;AACxE,MAAM,oBAAoB,GAAG,mCAAmC,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAa;IACtD,OAAO,wBAAwB,CAAC,QAAQ,CACtC,KAAkD,CACnD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAa,EACb,MAAgC;IAEhC,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,mBAAmB;IACnB,IAAI,MAAM,EAAE,cAAc,KAAK,KAAK,EAAE,CAAC;QACrC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,2BAA2B;IAC3B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;IAExD,oCAAoC;IACpC,IAAI,MAAM,EAAE,eAAe,IAAI,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QACzE,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACzD,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,EAAE,eAAe,EAAE,CAAC;QAC5B,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAM,EACN,MAAgC;IAEhC,MAAM,SAAS,GAAG,EAAE,GAAG,GAAG,EAA6B,CAAC;IAExD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,qCAAqC;QACrC,IAAI,MAAM,EAAE,yBAAyB,KAAK,KAAK,EAAE,CAAC;YAChD,IAAI,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,SAAS,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACvD,sCAAsC;YACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAClC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;oBACvC,CAAC,CAAC,cAAc,CAAC,IAA+B,EAAE,MAAM,CAAC;oBACzD,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ;wBACxB,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC;wBAC9B,CAAC,CAAC,IAAI,CACX,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,GAAG,cAAc,CAC7B,KAAgC,EAChC,MAAM,CACP,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAc,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,cAAuB;IACjE,uBAAuB;IACvB,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+BAA+B;IAC/B,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,uBAAuB;IACvB,IAAI,cAAc,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,GAAG,GAA2B;QAClC,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,OAAO;KACb,CAAC;IAEF,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;aAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/rateLimit/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @zudojs/security — Rate Limiting Barrel
+ */
+export { defaultKeyGenerator, defaultHandler, createRateLimiter, extractClientIp, } from "./rateLimit.core.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/rateLimit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rateLimit/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,qBAAqB,CAAC"}

package/dist/rateLimit/index.js

@@ -0,0 +1,5 @@
+/**
+ * @zudojs/security — Rate Limiting Barrel
+ */
+export { defaultKeyGenerator, defaultHandler, createRateLimiter, extractClientIp, } from "./rateLimit.core.js";
+//# sourceMappingURL=index.js.map

package/dist/rateLimit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rateLimit/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,qBAAqB,CAAC"}