exisjs 0.1.2

package/dist/middleware/middleware.js

@@ -0,0 +1,271 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.catchError = exports.intercept = exports.ipFilter = exports.backpressure = exports.dedupe = exports.cache = exports.dbSanitize = exports.sqlSanitize = exports.mongoSanitize = exports.xss = exports.hpp = exports.timeout = exports.csrf = exports.helmet = exports.compression = exports.notFound = void 0;
+exports.cors = cors;
+exports.requestId = requestId;
+exports.requestLogger = requestLogger;
+exports.serveStatic = serveStatic;
+exports.validate = validate;
+const validator_1 = require("../utils/validator");
+const logger_1 = require("../utils/logger");
+// ─── CORS ─────────────────────────────────────────────────────────────────────
+function cors(config = {}) {
+    const { origin = '*', methods = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS', 'HEAD'], allowedHeaders = [
+        'Content-Type',
+        'Authorization',
+        'Accept',
+        'Origin',
+        'X-Requested-With',
+    ], exposedHeaders, credentials = false, maxAge = 86400, } = config;
+    return (req, res, next) => {
+        const reqOrigin = req.get('origin');
+        // 1. Resolve Origin
+        let allowOrigin = '';
+        if (origin === '*') {
+            allowOrigin = '*';
+        }
+        else if (typeof origin === 'string') {
+            allowOrigin = origin;
+        }
+        else if (reqOrigin) {
+            if (Array.isArray(origin)) {
+                allowOrigin = origin.some((o) => o instanceof RegExp ? o.test(reqOrigin) : o === reqOrigin)
+                    ? reqOrigin
+                    : '';
+            }
+            else if (origin instanceof RegExp) {
+                allowOrigin = origin.test(reqOrigin) ? reqOrigin : '';
+            }
+            else if (typeof origin === 'function') {
+                allowOrigin = origin(reqOrigin) ? reqOrigin : '';
+            }
+        }
+        if (allowOrigin) {
+            res.set('Access-Control-Allow-Origin', allowOrigin);
+        }
+        // 2. Credentials
+        if (credentials) {
+            res.set('Access-Control-Allow-Credentials', 'true');
+        }
+        // 3. Exposed Headers
+        if (exposedHeaders && exposedHeaders.length > 0) {
+            res.set('Access-Control-Expose-Headers', exposedHeaders.join(', '));
+        }
+        // 4. Preflight (OPTIONS)
+        if (req.method === 'OPTIONS') {
+            res.set('Access-Control-Allow-Methods', methods.join(', '));
+            const reqHeaders = req.get('access-control-request-headers');
+            if (reqHeaders) {
+                res.set('Access-Control-Allow-Headers', reqHeaders);
+            }
+            else if (allowedHeaders && allowedHeaders.length > 0) {
+                res.set('Access-Control-Allow-Headers', allowedHeaders.join(', '));
+            }
+            if (maxAge) {
+                res.set('Access-Control-Max-Age', String(maxAge));
+            }
+            res.status(204).send('');
+            return;
+        }
+        next();
+    };
+}
+// ─── Request ID ───────────────────────────────────────────────────────────────
+let reqIdCounter = 0;
+function requestId() {
+    return (req, res, next) => {
+        const h = req.raw.headers;
+        const id = (h['x-request-id'] || h['traceparent'] || h['x-b3-traceid']);
+        const finalId = id
+            ? id.startsWith('00-')
+                ? id.split('-')[1]
+                : id
+            : `req-${++reqIdCounter}`;
+        req.requestId = finalId;
+        res.setHeader('X-Request-Id', finalId);
+        next();
+    };
+}
+// ─── Request Logger (Pino) ───────────────────────────────────────────────────────
+function requestLogger(loggerOrConfig = {}) {
+    const log = (0, logger_1.isLogger)(loggerOrConfig)
+        ? loggerOrConfig
+        : (0, logger_1.createLogger)(loggerOrConfig);
+    return (req, res, next) => {
+        const start = Date.now();
+        // Create request-scoped child logger with context
+        req.log = log.child({
+            requestId: req.requestId,
+            method: req.method,
+            url: req.path,
+        });
+        // Use _onFinish to capture response timing without deoptimizing V8 hidden classes
+        res._onFinish.push(() => {
+            const responseTime = Date.now() - start;
+            const logData = { statusCode: res.statusCode, responseTime };
+            if (res.statusCode >= 500) {
+                req.log.error(logData, `${req.method} ${req.path}`);
+            }
+            else if (res.statusCode >= 400) {
+                // Silently ignore favicon 404s to reduce noise
+                if (req.path === '/favicon.ico' && res.statusCode === 404) {
+                    // ignore
+                }
+                else {
+                    req.log.warn(logData, `${req.method} ${req.path}`);
+                }
+            }
+            else {
+                req.log.info(logData, `${req.method} ${req.path}`);
+            }
+        });
+        next();
+    };
+}
+// ─── Not Found Handler ────────────────────────────────────────────────────────
+const notFound = (req, res) => {
+    res.status(404).json({
+        success: false,
+        error: {
+            code: 'NOT_FOUND',
+            message: `Cannot ${req.method} ${req.path}`,
+        },
+    });
+};
+exports.notFound = notFound;
+// ─── Static File Serving ────────────────────────────────────────────────────────
+var compression_1 = require("./compression");
+Object.defineProperty(exports, "compression", { enumerable: true, get: function () { return compression_1.compression; } });
+var security_1 = require("./security");
+Object.defineProperty(exports, "helmet", { enumerable: true, get: function () { return security_1.helmet; } });
+Object.defineProperty(exports, "csrf", { enumerable: true, get: function () { return security_1.csrf; } });
+Object.defineProperty(exports, "timeout", { enumerable: true, get: function () { return security_1.timeout; } });
+Object.defineProperty(exports, "hpp", { enumerable: true, get: function () { return security_1.hpp; } });
+Object.defineProperty(exports, "xss", { enumerable: true, get: function () { return security_1.xss; } });
+Object.defineProperty(exports, "mongoSanitize", { enumerable: true, get: function () { return security_1.mongoSanitize; } });
+Object.defineProperty(exports, "sqlSanitize", { enumerable: true, get: function () { return security_1.sqlSanitize; } });
+Object.defineProperty(exports, "dbSanitize", { enumerable: true, get: function () { return security_1.dbSanitize; } });
+var cache_1 = require("./cache");
+Object.defineProperty(exports, "cache", { enumerable: true, get: function () { return cache_1.cacheMiddleware; } });
+var dedupe_1 = require("./dedupe");
+Object.defineProperty(exports, "dedupe", { enumerable: true, get: function () { return dedupe_1.dedupeMiddleware; } });
+var backpressure_1 = require("./backpressure");
+Object.defineProperty(exports, "backpressure", { enumerable: true, get: function () { return backpressure_1.backpressureMiddleware; } });
+var ip_filter_1 = require("./ip-filter");
+Object.defineProperty(exports, "ipFilter", { enumerable: true, get: function () { return ip_filter_1.ipFilterMiddleware; } });
+var interceptor_1 = require("./interceptor");
+Object.defineProperty(exports, "intercept", { enumerable: true, get: function () { return interceptor_1.intercept; } });
+var exception_filter_1 = require("./exception-filter");
+Object.defineProperty(exports, "catchError", { enumerable: true, get: function () { return exception_filter_1.catchError; } });
+__exportStar(require("./guard"), exports);
+__exportStar(require("./pipe"), exports);
+function serveStatic(root, options = {}) {
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const fs = require('node:fs');
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const path = require('node:path');
+    const rootPath = path.resolve(root);
+    const mimeTypes = {
+        '.html': 'text/html',
+        '.css': 'text/css',
+        '.js': 'application/javascript',
+        '.json': 'application/json',
+        '.png': 'image/png',
+        '.jpg': 'image/jpeg',
+        '.jpeg': 'image/jpeg',
+        '.gif': 'image/gif',
+        '.svg': 'image/svg+xml',
+        '.ico': 'image/x-icon',
+        '.webp': 'image/webp',
+        '.woff': 'font/woff',
+        '.woff2': 'font/woff2',
+        '.ttf': 'font/ttf',
+        '.eot': 'application/vnd.ms-fontobject',
+        '.otf': 'font/otf',
+        '.txt': 'text/plain',
+    };
+    return (req, res, next) => {
+        if (req.method !== 'GET' && req.method !== 'HEAD') {
+            return next();
+        }
+        try {
+            const decodedPath = decodeURIComponent(req.path);
+            const filePath = path.join(rootPath, decodedPath);
+            if (!filePath.startsWith(rootPath)) {
+                return next();
+            }
+            fs.stat(filePath, (err, stat) => {
+                if (err || !stat.isFile()) {
+                    return next();
+                }
+                const ext = path.extname(filePath).toLowerCase();
+                const mime = mimeTypes[ext] || 'application/octet-stream';
+                res.set('Content-Type', mime);
+                res.set('Content-Length', String(stat.size));
+                if (options.maxAge !== undefined) {
+                    res.set('Cache-Control', `public, max-age=${options.maxAge}`);
+                }
+                if (req.method === 'HEAD') {
+                    res.status(200).send('');
+                    return;
+                }
+                const sendStream = fs.createReadStream(filePath);
+                const abortHandler = () => sendStream.destroy();
+                req.raw.on('aborted', abortHandler);
+                req.raw.on('close', abortHandler);
+                res.raw.on('close', abortHandler);
+                res.status(200).sendStream(sendStream);
+            });
+        }
+        catch {
+            next();
+        }
+    };
+}
+function validate(schema) {
+    const handler = async (req, res, next) => {
+        try {
+            if (schema.body) {
+                req.body = schema.body.parse(req.body);
+            }
+            if (schema.query) {
+                req.query = schema.query.parse(req.query);
+            }
+            if (schema.params) {
+                req.params = schema.params.parse(req.params);
+            }
+            next();
+        }
+        catch (err) {
+            if (err instanceof validator_1.ValidatorError) {
+                res.status(400).json({
+                    success: false,
+                    error: {
+                        code: 'VALIDATION_ERROR',
+                        message: 'Invalid request data',
+                        details: err.errors,
+                    },
+                });
+                return;
+            }
+            next(err);
+        }
+    };
+    Object.assign(handler, { schema });
+    return handler;
+}
+//# sourceMappingURL=middleware.js.map

package/dist/middleware/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/middleware/middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAMA,oBA0EC;AAMD,8BAgBC;AAID,sCAsCC;AA2BD,kCA6EC;AAYD,4BA8BC;AAjSD,kDAAoE;AACpE,4CAAwD;AAExD,iFAAiF;AAEjF,SAAgB,IAAI,CAAC,SAAqB,EAAE;IAC1C,MAAM,EACJ,MAAM,GAAG,GAAG,EACZ,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EACtE,cAAc,GAAG;QACf,cAAc;QACd,eAAe;QACf,QAAQ;QACR,QAAQ;QACR,kBAAkB;KACnB,EACD,cAAc,EACd,WAAW,GAAG,KAAK,EACnB,MAAM,GAAG,KAAK,GACf,GAAG,MAAM,CAAA;IAEV,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAEnC,oBAAoB;QACpB,IAAI,WAAW,GAAG,EAAE,CAAA;QACpB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,WAAW,GAAG,GAAG,CAAA;QACnB,CAAC;aAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,WAAW,GAAG,MAAM,CAAA;QACtB,CAAC;aAAM,IAAI,SAAS,EAAE,CAAC;YACrB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,YAAY,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAC1D;oBACC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,EAAE,CAAA;YACR,CAAC;iBAAM,IAAI,MAAM,YAAY,MAAM,EAAE,CAAC;gBACpC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;YACvD,CAAC;iBAAM,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;gBACxC,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAA;YAClD,CAAC;QACH,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAA;QACrD,CAAC;QAED,iBAAiB;QACjB,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAA;QACrD,CAAC;QAED,qBAAqB;QACrB,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACrE,CAAC;QAED,yBAAyB;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YAE3D,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAA;YAC5D,IAAI,UAAU,EAAE,CAAC;gBACf,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,UAAU,CAAC,CAAA;YACrD,CAAC;iBAAM,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YACpE,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;YACnD,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACxB,OAAM;QACR,CAAC;QAED,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,iFAAiF;AAEjF,IAAI,YAAY,GAAG,CAAC,CAAA;AAEpB,SAAgB,SAAS;IACvB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAA;QACzB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAEzD,CAAA;QACb,MAAM,OAAO,GAAG,EAAE;YAChB,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;gBACpB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC,CAAC,EAAE;YACN,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAA;QAE3B,GAAG,CAAC,SAAS,GAAG,OAAO,CAAA;QACvB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QACtC,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,oFAAoF;AAEpF,SAAgB,aAAa,CAC3B,iBAAwC,EAAE;IAE1C,MAAM,GAAG,GAAW,IAAA,iBAAQ,EAAC,cAAc,CAAC;QAC1C,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,IAAA,qBAAY,EAAC,cAAc,CAAC,CAAA;IAEhC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAExB,kDAAkD;QAClD,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,EAAE,GAAG,CAAC,IAAI;SACd,CAAC,CAAA;QAEF,kFAAkF;QAClF,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE;YACtB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAA;YACvC,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,CAAA;YAE5D,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;gBAC1B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;YACrD,CAAC;iBAAM,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;gBACjC,+CAA+C;gBAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC1D,SAAS;gBACX,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;gBACpD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;YACpD,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,iFAAiF;AAE1E,MAAM,QAAQ,GAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,UAAU,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE;SAC5C;KACF,CAAC,CAAA;AACJ,CAAC,CAAA;AARY,QAAA,QAAQ,YAQpB;AAED,mFAAmF;AAEnF,6CAA2C;AAAlC,0GAAA,WAAW,OAAA;AACpB,uCAAoG;AAA3F,kGAAA,MAAM,OAAA;AAAE,gGAAA,IAAI,OAAA;AAAE,mGAAA,OAAO,OAAA;AAAE,+FAAA,GAAG,OAAA;AAAE,+FAAA,GAAG,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,uGAAA,WAAW,OAAA;AAAE,sGAAA,UAAU,OAAA;AAChF,iCAAkD;AAAzC,8FAAA,eAAe,OAAS;AACjC,mCAAqD;AAA5C,gGAAA,gBAAgB,OAAU;AACnC,+CAAuE;AAA9D,4GAAA,sBAAsB,OAAgB;AAC/C,yCAA4D;AAAnD,qGAAA,kBAAkB,OAAY;AACvC,6CAAyC;AAAhC,wGAAA,SAAS,OAAA;AAClB,uDAA+C;AAAtC,8GAAA,UAAU,OAAA;AACnB,0CAAuB;AACvB,yCAAsB;AAEtB,SAAgB,WAAW,CACzB,IAAY,EACZ,UAA+B,EAAE;IAEjC,iEAAiE;IACjE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7B,iEAAiE;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEnC,MAAM,SAAS,GAA2B;QACxC,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,kBAAkB;QAC3B,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,YAAY;QACrB,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,+BAA+B;QACvC,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,YAAY;KACrB,CAAA;IAED,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClD,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;YAEjD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnC,OAAO,IAAI,EAAE,CAAA;YACf,CAAC;YAED,EAAE,CAAC,IAAI,CACL,QAAQ,EACR,CAAC,GAAiC,EAAE,IAA6B,EAAE,EAAE;gBACnE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC1B,OAAO,IAAI,EAAE,CAAA;gBACf,CAAC;gBAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAA;gBAChD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAA;gBAEzD,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;gBAC7B,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;gBAE5C,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACjC,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,mBAAmB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;gBAC/D,CAAC;gBAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;oBACxB,OAAM;gBACR,CAAC;gBAED,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;gBAChD,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAA;gBAC/C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;gBACnC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;gBACjC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;gBACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;YACxC,CAAC,CACF,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,EAAE,CAAA;QACR,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAYD,SAAgB,QAAQ,CAAC,MAAsB;IAC7C,MAAM,OAAO,GAAY,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAChD,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChB,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACxC,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC3C,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC9C,CAAC;YACD,IAAI,EAAE,CAAA;QACR,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,YAAY,0BAAc,EAAE,CAAC;gBAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,kBAAkB;wBACxB,OAAO,EAAE,sBAAsB;wBAC/B,OAAO,EAAE,GAAG,CAAC,MAAM;qBACpB;iBACF,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;YACD,IAAI,CAAC,GAAY,CAAC,CAAA;QACpB,CAAC;IACH,CAAC,CAAA;IACD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IAClC,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/middleware/pipe.d.ts

@@ -0,0 +1,9 @@
+import type { Request, Response, NextFunction } from '../types';
+type PayloadLocation = 'body' | 'query' | 'params';
+/**
+ * Creates a Pipe middleware.
+ * Pipes transform or validate input data before it reaches the route handler.
+ */
+export declare function pipe(location: PayloadLocation, key: string, transformFn: (val: any) => any): (req: Request, res: Response, next: NextFunction) => Promise<void>;
+export {};
+//# sourceMappingURL=pipe.d.ts.map

package/dist/middleware/pipe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipe.d.ts","sourceRoot":"","sources":["../../src/middleware/pipe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE/D,KAAK,eAAe,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAA;AAElD;;;GAGG;AACH,wBAAgB,IAAI,CAClB,QAAQ,EAAE,eAAe,EACzB,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,IAEhB,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,mBAa9D"}

package/dist/middleware/pipe.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pipe = pipe;
+/**
+ * Creates a Pipe middleware.
+ * Pipes transform or validate input data before it reaches the route handler.
+ */
+function pipe(location, key, transformFn) {
+    return async (req, res, next) => {
+        try {
+            const target = req[location];
+            if (target && target[key] !== undefined) {
+                target[key] = await transformFn(target[key]);
+            }
+            next();
+        }
+        catch (err) {
+            res.status(400).json({
+                error: err instanceof Error ? err.message : 'Validation failed',
+            });
+        }
+    };
+}
+//# sourceMappingURL=pipe.js.map

package/dist/middleware/pipe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipe.js","sourceRoot":"","sources":["../../src/middleware/pipe.ts"],"names":[],"mappings":";;AAQA,oBAkBC;AAtBD;;;GAGG;AACH,SAAgB,IAAI,CAClB,QAAyB,EACzB,GAAW,EACX,WAA8B;IAE9B,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAoC,CAAA;YAC/D,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;YAC9C,CAAC;YACD,IAAI,EAAE,CAAA;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB;aAChE,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/middleware/security.d.ts

@@ -0,0 +1,53 @@
+import type { Handler } from '../types';
+export interface HelmetOptions {
+    contentSecurityPolicy?: string;
+    hsts?: boolean | {
+        maxAge: number;
+        includeSubDomains: boolean;
+    };
+    noSniff?: boolean;
+    xssFilter?: boolean;
+    hidePoweredBy?: boolean;
+    frameguard?: boolean | {
+        action: 'DENY' | 'SAMEORIGIN';
+    };
+}
+/**
+ * Helmet-style middleware for setting strict security headers.
+ */
+export declare function helmet(options?: HelmetOptions): Handler;
+export interface CsrfOptions {
+    cookieName?: string;
+    headerName?: string;
+    cookieOptions?: {
+        httpOnly?: boolean;
+        secure?: boolean;
+        sameSite?: 'Strict' | 'Lax' | 'None';
+        path?: string;
+        maxAge?: number;
+    };
+}
+/**
+ * CSRF middleware using Double Submit Cookie pattern.
+ * Generates a random token on GET requests and sets it as a cookie.
+ * Requires the client to send the same token in a header on state-changing requests.
+ */
+export declare function csrf(options?: CsrfOptions): Handler;
+export interface TimeoutOptions {
+    ms: number;
+    message?: string;
+}
+/**
+ * Times out the request if the response hasn't been sent within the specified ms.
+ */
+export declare function timeout(ms: number | TimeoutOptions): Handler;
+export declare function hpp(): Handler;
+export declare function xss(): Handler;
+export declare function mongoSanitize(): Handler;
+export declare function sqlSanitize(): Handler;
+export interface DbSanitizeOptions {
+    mongo?: boolean;
+    sql?: boolean;
+}
+export declare function dbSanitize(options?: DbSanitizeOptions): Handler;
+//# sourceMappingURL=security.d.ts.map

package/dist/middleware/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/middleware/security.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAmC,MAAM,UAAU,CAAA;AAKxE,MAAM,WAAW,aAAa;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,IAAI,CAAC,EAAE,OAAO,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,OAAO,CAAA;KAAE,CAAA;IAC/D,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,UAAU,CAAC,EAAE,OAAO,GAAG;QAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAAA;KAAE,CAAA;CACzD;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAmD3D;AAID,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE;QACd,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAA;QACpC,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,CAAA;CACF;AAED;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAwCvD;AAID,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,OAAO,CAqB5D;AAID,wBAAgB,GAAG,IAAI,OAAO,CAqB7B;AA2BD,wBAAgB,GAAG,IAAI,OAAO,CAS7B;AAmBD,wBAAgB,aAAa,IAAI,OAAO,CASvC;AAqBD,wBAAgB,WAAW,IAAI,OAAO,CASrC;AAID,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAED,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAA+C,GAAG,OAAO,CAgB5F"}

package/dist/middleware/security.js

@@ -0,0 +1,257 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.helmet = helmet;
+exports.csrf = csrf;
+exports.timeout = timeout;
+exports.hpp = hpp;
+exports.xss = xss;
+exports.mongoSanitize = mongoSanitize;
+exports.sqlSanitize = sqlSanitize;
+exports.dbSanitize = dbSanitize;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const errors_1 = require("../utils/errors");
+/**
+ * Helmet-style middleware for setting strict security headers.
+ */
+function helmet(options = {}) {
+    const staticHeaders = {
+        'X-DNS-Prefetch-Control': 'off',
+        'X-Download-Options': 'noopen',
+        'X-Permitted-Cross-Domain-Policies': 'none',
+        'Referrer-Policy': 'strict-origin-when-cross-origin',
+        'Permissions-Policy': 'geolocation=(), microphone=(), camera=()',
+    };
+    if (options.hsts !== false) {
+        const hstsOpt = typeof options.hsts === 'object'
+            ? options.hsts
+            : { maxAge: 31536000, includeSubDomains: true };
+        let header = `max-age=${hstsOpt.maxAge}`;
+        if (hstsOpt.includeSubDomains)
+            header += '; includeSubDomains';
+        staticHeaders['Strict-Transport-Security'] = header;
+    }
+    if (options.noSniff !== false) {
+        staticHeaders['X-Content-Type-Options'] = 'nosniff';
+    }
+    if (options.xssFilter !== false) {
+        staticHeaders['X-XSS-Protection'] = '1; mode=block';
+    }
+    if (options.frameguard !== false) {
+        const action = typeof options.frameguard === 'object'
+            ? options.frameguard.action
+            : 'DENY';
+        staticHeaders['X-Frame-Options'] = action;
+    }
+    if (options.contentSecurityPolicy) {
+        staticHeaders['Content-Security-Policy'] = options.contentSecurityPolicy;
+    }
+    const hidePoweredBy = options.hidePoweredBy !== false;
+    const headerEntries = Object.entries(staticHeaders);
+    return (req, res, next) => {
+        for (const [key, value] of headerEntries) {
+            res.set(key, value);
+        }
+        if (hidePoweredBy) {
+            res.removeHeader('X-Powered-By');
+        }
+        next();
+    };
+}
+/**
+ * CSRF middleware using Double Submit Cookie pattern.
+ * Generates a random token on GET requests and sets it as a cookie.
+ * Requires the client to send the same token in a header on state-changing requests.
+ */
+function csrf(options = {}) {
+    const cookieName = options.cookieName || 'csrf-token';
+    const headerName = (options.headerName || 'x-csrf-token').toLowerCase();
+    const generateToken = () => node_crypto_1.default.randomUUID();
+    return (req, res, next) => {
+        // Read existing token from cookie
+        let token = req.cookies[cookieName];
+        // If no token exists, generate one
+        if (!token) {
+            token = generateToken();
+            res.cookie(cookieName, token, {
+                httpOnly: options.cookieOptions?.httpOnly ?? false, // Must be readable by client JS to send in header
+                secure: options.cookieOptions?.secure ??
+                    process.env.NODE_ENV === 'production',
+                sameSite: options.cookieOptions?.sameSite ?? 'Lax',
+                path: options.cookieOptions?.path ?? '/',
+                maxAge: options.cookieOptions?.maxAge ?? 86400,
+            });
+        }
+        // Pass token to request object for templates if needed
+        ;
+        req.csrfToken = token;
+        // Safe methods don't need CSRF validation
+        if (['GET', 'HEAD', 'OPTIONS'].includes(req.method)) {
+            return next();
+        }
+        // For state-changing methods, validate the header token matches the cookie
+        const headerToken = req.get(headerName);
+        if (!headerToken || headerToken !== token) {
+            return next(new errors_1.HttpError('Invalid CSRF token', 403, 'CSRF_FAILED'));
+        }
+        next();
+    };
+}
+/**
+ * Times out the request if the response hasn't been sent within the specified ms.
+ */
+function timeout(ms) {
+    const options = typeof ms === 'number' ? { ms } : ms;
+    return (req, res, next) => {
+        const timer = setTimeout(() => {
+            if (!res.headersSent) {
+                res.status(503).json({
+                    success: false,
+                    error: {
+                        code: 'TIMEOUT',
+                        message: options.message || 'Request timeout',
+                    },
+                });
+            }
+        }, options.ms);
+        res.raw.on('finish', () => clearTimeout(timer));
+        res.raw.on('close', () => clearTimeout(timer));
+        next();
+    };
+}
+// ─── HTTP Parameter Pollution (HPP) ───────────────────────────────────────────
+function hpp() {
+    return (req, res, next) => {
+        // If a query parameter is an array (multiple values), take only the last one
+        for (const [key, val] of Object.entries(req.query)) {
+            if (Array.isArray(val)) {
+                req.query[key] = val[val.length - 1];
+            }
+        }
+        // Do the same for body if it's form-urlencoded array
+        if (req.body && typeof req.body === 'object') {
+            for (const [key, val] of Object.entries(req.body)) {
+                if (Array.isArray(val)) {
+                    ;
+                    req.body[key] = val[val.length - 1];
+                }
+            }
+        }
+        next();
+    };
+}
+// ─── XSS Sanitization ─────────────────────────────────────────────────────────
+function sanitizeHtml(str) {
+    if (typeof str !== 'string')
+        return str;
+    return str
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#x27;');
+}
+function traverseAndSanitizeXss(obj) {
+    if (typeof obj === 'string')
+        return sanitizeHtml(obj);
+    if (Array.isArray(obj))
+        return obj.map(traverseAndSanitizeXss);
+    if (obj && typeof obj === 'object') {
+        const sanitized = {};
+        for (const [k, v] of Object.entries(obj)) {
+            sanitized[k] = traverseAndSanitizeXss(v);
+        }
+        return sanitized;
+    }
+    return obj;
+}
+function xss() {
+    return (req, res, next) => {
+        if (req.body)
+            req.body = traverseAndSanitizeXss(req.body);
+        if (Object.keys(req.query).length > 0)
+            req.query = traverseAndSanitizeXss(req.query);
+        if (Object.keys(req.params).length > 0)
+            req.params = traverseAndSanitizeXss(req.params);
+        next();
+    };
+}
+// ─── NoSQL Injection Protection ───────────────────────────────────────────────
+function sanitizeMongo(obj) {
+    if (Array.isArray(obj))
+        return obj.map(sanitizeMongo);
+    if (obj && typeof obj === 'object') {
+        const sanitized = {};
+        for (const [k, v] of Object.entries(obj)) {
+            if (k.startsWith('$') || k.includes('.')) {
+                continue; // Strip dangerous keys
+            }
+            sanitized[k] = sanitizeMongo(v);
+        }
+        return sanitized;
+    }
+    return obj;
+}
+function mongoSanitize() {
+    return (req, res, next) => {
+        if (req.body)
+            req.body = sanitizeMongo(req.body);
+        if (Object.keys(req.query).length > 0)
+            req.query = sanitizeMongo(req.query);
+        if (Object.keys(req.params).length > 0)
+            req.params = sanitizeMongo(req.params);
+        next();
+    };
+}
+// ─── SQL Injection Protection ─────────────────────────────────────────────────
+const SQL_INJECTION_REGEX = /(?:\b(?:UNION|SELECT|INSERT|UPDATE|DELETE|DROP|EXEC|ALTER|TRUNCATE)\b)|(?:--|;)/i;
+function sanitizeSql(obj) {
+    if (typeof obj === 'string') {
+        return obj.replace(new RegExp(SQL_INJECTION_REGEX, 'gi'), '[FILTERED]');
+    }
+    if (Array.isArray(obj))
+        return obj.map(sanitizeSql);
+    if (obj && typeof obj === 'object') {
+        const sanitized = {};
+        for (const [k, v] of Object.entries(obj)) {
+            sanitized[k] = sanitizeSql(v);
+        }
+        return sanitized;
+    }
+    return obj;
+}
+function sqlSanitize() {
+    return (req, res, next) => {
+        if (req.body)
+            req.body = sanitizeSql(req.body);
+        if (Object.keys(req.query).length > 0)
+            req.query = sanitizeSql(req.query);
+        if (Object.keys(req.params).length > 0)
+            req.params = sanitizeSql(req.params);
+        next();
+    };
+}
+function dbSanitize(options = { mongo: true, sql: false }) {
+    return (req, res, next) => {
+        if (options.mongo) {
+            if (req.body)
+                req.body = sanitizeMongo(req.body);
+            if (Object.keys(req.query).length > 0)
+                req.query = sanitizeMongo(req.query);
+            if (Object.keys(req.params).length > 0)
+                req.params = sanitizeMongo(req.params);
+        }
+        if (options.sql) {
+            if (req.body)
+                req.body = sanitizeSql(req.body);
+            if (Object.keys(req.query).length > 0)
+                req.query = sanitizeSql(req.query);
+            if (Object.keys(req.params).length > 0)
+                req.params = sanitizeSql(req.params);
+        }
+        next();
+    };
+}
+//# sourceMappingURL=security.js.map

package/dist/middleware/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/middleware/security.ts"],"names":[],"mappings":";;;;;AAkBA,wBAmDC;AAqBD,oBAwCC;AAYD,0BAqBC;AAID,kBAqBC;AA2BD,kBASC;AAmBD,sCASC;AAqBD,kCASC;AASD,gCAgBC;AAnTD,8DAAgC;AAEhC,4CAA2C;AAa3C;;GAEG;AACH,SAAgB,MAAM,CAAC,UAAyB,EAAE;IAChD,MAAM,aAAa,GAA2B;QAC5C,wBAAwB,EAAE,KAAK;QAC/B,oBAAoB,EAAE,QAAQ;QAC9B,mCAAmC,EAAE,MAAM;QAC3C,iBAAiB,EAAE,iCAAiC;QACpD,oBAAoB,EAAE,0CAA0C;KACjE,CAAA;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;YAC9B,CAAC,CAAC,OAAO,CAAC,IAAI;YACd,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAA;QACnD,IAAI,MAAM,GAAG,WAAW,OAAO,CAAC,MAAM,EAAE,CAAA;QACxC,IAAI,OAAO,CAAC,iBAAiB;YAAE,MAAM,IAAI,qBAAqB,CAAA;QAC9D,aAAa,CAAC,2BAA2B,CAAC,GAAG,MAAM,CAAA;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,aAAa,CAAC,wBAAwB,CAAC,GAAG,SAAS,CAAA;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAChC,aAAa,CAAC,kBAAkB,CAAC,GAAG,eAAe,CAAA;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,MAAM,GACV,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;YACpC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM;YAC3B,CAAC,CAAC,MAAM,CAAA;QACZ,aAAa,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAA;IAC3C,CAAC;IAED,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;QAClC,aAAa,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAA;IAC1E,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,KAAK,CAAA;IACrD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAEnD,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YACzC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACrB,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;QAClC,CAAC;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAgBD;;;;GAIG;AACH,SAAgB,IAAI,CAAC,UAAuB,EAAE;IAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAA;IACrD,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,CAAC,WAAW,EAAE,CAAA;IAEvE,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,qBAAM,CAAC,UAAU,EAAE,CAAA;IAE/C,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,kCAAkC;QAClC,IAAI,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAEnC,mCAAmC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,aAAa,EAAE,CAAA;YACvB,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE;gBAC5B,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,IAAI,KAAK,EAAE,kDAAkD;gBACtG,MAAM,EACJ,OAAO,CAAC,aAAa,EAAE,MAAM;oBAC7B,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBACvC,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,IAAI,KAAK;gBAClD,IAAI,EAAE,OAAO,CAAC,aAAa,EAAE,IAAI,IAAI,GAAG;gBACxC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,IAAI,KAAK;aAC/C,CAAC,CAAA;QACJ,CAAC;QAED,uDAAuD;QACvD,CAAC;QAAC,GAAwC,CAAC,SAAS,GAAG,KAAK,CAAA;QAE5D,0CAA0C;QAC1C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAED,2EAA2E;QAC3E,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACvC,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,IAAI,kBAAS,CAAC,oBAAoB,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;QACtE,CAAC;QAED,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AASD;;GAEG;AACH,SAAgB,OAAO,CAAC,EAA2B;IACjD,MAAM,OAAO,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAEpD,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,iBAAiB;qBAC9C;iBACF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;QAEd,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;QAC/C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;QAE9C,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAgB,GAAG;IACjB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,6EAA6E;QAC7E,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YACtC,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CACrC,GAAG,CAAC,IAA+B,CACpC,EAAE,CAAC;gBACF,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,CAAC;oBAAC,GAAG,CAAC,IAAgC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAA;IACvC,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAY;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IAC9D,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,SAAS,GAA4B,EAAE,CAAA;QAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,SAAS,CAAC,CAAC,CAAC,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAA;QAC1C,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAgB,GAAG;IACjB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,IAAI,GAAG,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YACnC,GAAG,CAAC,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAA2B,CAAA;QACzE,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YACpC,GAAG,CAAC,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAA2B,CAAA;QAC3E,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IACrD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,SAAS,GAA4B,EAAE,CAAA;QAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzC,SAAQ,CAAC,uBAAuB;YAClC,CAAC;YACD,SAAS,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QACjC,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,IAAI,GAAG,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YACnC,GAAG,CAAC,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAA2B,CAAA;QAChE,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YACpC,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAA2B,CAAA;QAClE,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,iFAAiF;AAEjF,MAAM,mBAAmB,GAAG,kFAAkF,CAAA;AAE9G,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,EAAE,YAAY,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACnD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,SAAS,GAA4B,EAAE,CAAA;QAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,SAAS,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAgB,WAAW;IACzB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,IAAI,GAAG,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YACnC,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAA2B,CAAA;QAC9D,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YACpC,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAA2B,CAAA;QAChE,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AASD,SAAgB,UAAU,CAAC,UAA6B,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE;IACjF,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,IAAI;gBAAE,GAAG,CAAC,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAChD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAA2B,CAAA;YACrG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAA2B,CAAA;QAC1G,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,IAAI,GAAG,CAAC,IAAI;gBAAE,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAA2B,CAAA;YACnG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAA2B,CAAA;QACxG,CAAC;QAED,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC"}