exisjs 0.7.3 → 0.7.4

package/dist/middleware/security.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.helmet = helmet;
 exports.csrf = csrf;
 exports.timeout = timeout;
+exports.routeTimeout = routeTimeout;
 exports.hpp = hpp;
 exports.mongoSanitize = mongoSanitize;
 exports.dbSanitize = dbSanitize;
@@ -156,26 +157,109 @@ function csrf(options) {
 }
 /**
  * Times out the request if the response hasn't been sent within the specified ms.
+ * Defaults to 60,000ms (60 seconds) to accommodate cloud storage, AI/LLM streaming,
+ * and heavy asset uploads.
  */
-function timeout(ms) {
-    const options = typeof ms === 'number' ? { ms } : ms;
+function timeout(msOrOptions) {
+    const options = typeof msOrOptions === 'number'
+        ? { ms: msOrOptions }
+        : { ms: 60000, ...msOrOptions };
+    const defaultMs = options.ms ?? 60000;
+    const statusCode = options.statusCode ?? 503;
+    const message = options.message || 'Request timeout';
     return (req, res, next) => {
-        const timer = setTimeout(() => {
-            if (!res.headersSent) {
-                res.status(503).json({
-                    success: false,
-                    error: {
-                        code: 'TIMEOUT',
-                        message: options.message || 'Request timeout',
-                    },
-                });
+        // Check exclusions
+        if (options.exclude) {
+            if (typeof options.exclude === 'function' && options.exclude(req)) {
+                return next();
             }
-        }, options.ms);
-        res.raw.on('finish', () => clearTimeout(timer));
-        res.raw.on('close', () => clearTimeout(timer));
+            if (Array.isArray(options.exclude)) {
+                const path = req.path || req.url || '/';
+                const isExcluded = options.exclude.some((pattern) => typeof pattern === 'string'
+                    ? path.startsWith(pattern)
+                    : pattern.test(path));
+                if (isExcluded)
+                    return next();
+            }
+        }
+        let timer = null;
+        const setTimer = (currentMs) => {
+            if (timer)
+                clearTimeout(timer);
+            timer = setTimeout(() => {
+                if (!res.headersSent) {
+                    res.status(statusCode).json({
+                        success: false,
+                        error: {
+                            code: 'TIMEOUT',
+                            message,
+                        },
+                    });
+                }
+            }, currentMs);
+            if (typeof timer.unref === 'function') {
+                timer.unref();
+            }
+        };
+        // Attach dynamic timeout adjustment to req
+        const setTimeoutFn = (newMs) => {
+            if (newMs <= 0) {
+                if (timer)
+                    clearTimeout(timer);
+                timer = null;
+            }
+            else {
+                setTimer(newMs);
+            }
+            return req;
+        };
+        const clearTimeoutFn = () => {
+            if (timer)
+                clearTimeout(timer);
+            timer = null;
+            return req;
+        };
+        req.setTimeout = setTimeoutFn;
+        req.clearTimeout = clearTimeoutFn;
+        req._timeoutSetter = setTimeoutFn;
+        req._timeoutClearer = clearTimeoutFn;
+        setTimer(defaultMs);
+        res.raw.on('finish', () => {
+            if (timer)
+                clearTimeout(timer);
+        });
+        res.raw.on('close', () => {
+            if (timer)
+                clearTimeout(timer);
+        });
         next();
     };
 }
+/**
+ * Route-level timeout override middleware.
+ * If a global timeout is already active on req, seamlessly updates the timer to the route's custom duration.
+ * If no global timeout is installed, mounts an isolated timeout lifecycle for this endpoint.
+ */
+function routeTimeout(msOrOptions) {
+    const options = typeof msOrOptions === 'number'
+        ? { ms: msOrOptions }
+        : { ms: 60000, ...msOrOptions };
+    const ms = options.ms ?? 60000;
+    return (req, res, next) => {
+        if (typeof req._timeoutSetter === 'function') {
+            if (ms <= 0) {
+                req.clearTimeout?.();
+            }
+            else {
+                req.setTimeout(ms);
+            }
+            next();
+        }
+        else {
+            timeout(options)(req, res, next);
+        }
+    };
+}
 // ─── HTTP Parameter Pollution (HPP) ───────────────────────────────────────────
 function hpp() {
     return async (req, res, next) => {

package/dist/middleware/security.js.map

@@ -1 +1 @@
-{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/middleware/security.ts"],"names":[],"mappings":";;;;;AAkBA,wBAuEC;AA+CD,oBAmEC;AAYD,0BAqBC;AAID,kBAoCC;AAmBD,sCA+BC;AAQD,gCAoCC;AAlXD,8DAAgC;AAEhC,4CAA2C;AAa3C;;GAEG;AACH,SAAgB,MAAM,CAAC,UAAyB,EAAE;IAChD,MAAM,aAAa,GAA2B;QAC5C,wBAAwB,EAAE,KAAK;QAC/B,oBAAoB,EAAE,QAAQ;QAC9B,mCAAmC,EAAE,MAAM;QAC3C,iBAAiB,EAAE,iCAAiC;QACpD,oBAAoB,EAAE,0CAA0C;KACjE,CAAA;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;YAC9B,CAAC,CAAC,OAAO,CAAC,IAAI;YACd,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAA;QACnD,IAAI,MAAM,GAAG,WAAW,OAAO,CAAC,MAAM,EAAE,CAAA;QACxC,IAAI,OAAO,CAAC,iBAAiB;YAAE,MAAM,IAAI,qBAAqB,CAAA;QAC9D,aAAa,CAAC,2BAA2B,CAAC,GAAG,MAAM,CAAA;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,aAAa,CAAC,wBAAwB,CAAC,GAAG,SAAS,CAAA;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAChC,aAAa,CAAC,kBAAkB,CAAC,GAAG,eAAe,CAAA;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,MAAM,GACV,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;YACpC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM;YAC3B,CAAC,CAAC,MAAM,CAAA;QACZ,aAAa,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAA;IAC3C,CAAC;IAED,IACE,OAAO,CAAC,qBAAqB;QAC7B,CAAC,OAAO,CAAC,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAClD,CAAC;QACD,aAAa,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAA;IAC1E,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,KAAK,CAAA;IACrD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACjD,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAA;IAErC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,+BAA+B;QAC/B,IACE,OAAO,CAAC,qBAAqB;YAC7B,OAAO,CAAC,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC,EACjD,CAAC;YACD,MAAM,KAAK,GAAG,qBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CACzD;YAAC,GAAW,CAAC,QAAQ,GAAG,KAAK,CAAA;YAC9B,GAAG,CAAC,SAAS,CACX,yBAAyB,EACzB,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAC3D,CAAA;QACH,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;QAClC,CAAC;QAED,uEAAuE;QACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAiBD,SAAS,aAAa,CAAC,GAAW,EAAE,MAAc;IAChD,MAAM,SAAS,GAAG,qBAAM;SACrB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,WAAW,CAAC,CAAA;IACtB,OAAO,GAAG,GAAG,IAAI,SAAS,EAAE,CAAA;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,MAAc;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACpC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,KAAK,CAAA;IAC9B,MAAM,iBAAiB,GAAG,qBAAM;SAC7B,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,WAAW,CAAC,CAAA;IAEtB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAElD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACtD,IAAI,CAAC,qBAAM,CAAC,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC;QAAE,OAAO,KAAK,CAAA;IAC9D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,SAAgB,IAAI,CAAC,OAAoB;IACvC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC5E,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAA;IACrD,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,CAAC,WAAW,EAAE,CAAA;IAEvE,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,qBAAM,CAAC,UAAU,EAAE,CAAA;IAE/C,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACzC,IAAI,KAAK,GAAmB,KAAK,CAAA;QAEjC,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,GAAG,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QACpD,CAAC;QAED,oEAAoE;QACpE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,aAAa,EAAE,CAAA;YACvB,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC3D,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,IAAI,KAAK,EAAE,kDAAkD;gBACtG,MAAM,EACJ,OAAO,CAAC,aAAa,EAAE,MAAM;oBAC7B,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBACvC,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,IAAI,KAAK;gBAClD,IAAI,EAAE,OAAO,CAAC,aAAa,EAAE,IAAI,IAAI,GAAG;gBACxC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,IAAI,KAAK;aAC/C,CAAC,CAAA;QACJ,CAAC;QAED,uDAAuD;QACvD,CAAC;QAAC,GAAwC,CAAC,SAAS,GAAG,KAAK,CAAA;QAE5D,0CAA0C;QAC1C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAED,0FAA0F;QAC1F,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACvC,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,IAAI,kBAAS,CAAC,oBAAoB,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;QACtE,CAAC;QAED,uEAAuE;QACvE,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAE5B,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,IAAI,EAAE,CAAA;YACtC,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAA;gBACvC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;oBACxB,OAAO,IAAI,CAAC,IAAI,kBAAS,CAAC,sBAAsB,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;gBACxE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CACT,IAAI,kBAAS,CAAC,+BAA+B,EAAE,GAAG,EAAE,aAAa,CAAC,CACnE,CAAA;YACH,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AASD;;GAEG;AACH,SAAgB,OAAO,CAAC,EAA2B;IACjD,MAAM,OAAO,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAEpD,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,iBAAiB;qBAC9C;iBACF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;QAEd,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;QAC/C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;QAE9C,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAgB,GAAG;IACjB,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,6EAA6E;QAC7E,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAED,qFAAqF;QACrF,IACE,GAAG,CAAC,IAAI,KAAK,SAAS;YACtB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7C,OAAQ,GAAW,CAAC,IAAI,KAAK,UAAU,EACvC,CAAC;YACD,IAAI,CAAC;gBACH,MAAO,GAAW,CAAC,IAAI,EAAE,CAAA;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CACrC,GAAG,CAAC,IAA+B,CACpC,EAAE,CAAC;gBACF,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,CAAC;oBAAC,GAAG,CAAC,IAAgC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IACrD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,SAAS,GAA4B,EAAE,CAAA;QAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzC,SAAQ,CAAC,uBAAuB;YAClC,CAAC;YACD,SAAS,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QACjC,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,IACE,GAAG,CAAC,IAAI,KAAK,SAAS;YACtB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7C,OAAQ,GAAW,CAAC,IAAI,KAAK,UAAU,EACvC,CAAC;YACD,IAAI,CAAC;gBACH,MAAO,GAAW,CAAC,IAAI,EAAE,CAAA;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChD,IACE,GAAG,CAAC,KAAK;YACT,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;YAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EACjC,CAAC;YACD,GAAG,CAAC,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAA2B,CAAA;QAChE,CAAC;QACD,IACE,GAAG,CAAC,MAAM;YACV,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAClC,CAAC;YACD,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAA2B,CAAA;QAClE,CAAC;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAQD,SAAgB,UAAU,CACxB,UAA6B,EAAE,KAAK,EAAE,IAAI,EAAE;IAE5C,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IACE,GAAG,CAAC,IAAI,KAAK,SAAS;gBACtB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC7C,OAAQ,GAAW,CAAC,IAAI,KAAK,UAAU,EACvC,CAAC;gBACD,IAAI,CAAC;oBACH,MAAO,GAAW,CAAC,IAAI,EAAE,CAAA;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,IAAI;gBAAE,GAAG,CAAC,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAChD,IACE,GAAG,CAAC,KAAK;gBACT,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;gBAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EACjC,CAAC;gBACD,GAAG,CAAC,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAA2B,CAAA;YAChE,CAAC;YACD,IACE,GAAG,CAAC,MAAM;gBACV,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;gBAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAClC,CAAC;gBACD,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAA2B,CAAA;YAClE,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC"}
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/middleware/security.ts"],"names":[],"mappings":";;;;;AAkBA,wBAuEC;AA+CD,oBAmEC;AAgBD,0BA+EC;AAOD,oCAmBC;AAID,kBAoCC;AAmBD,sCA+BC;AAQD,gCAoCC;AA1cD,8DAAgC;AAEhC,4CAA2C;AAa3C;;GAEG;AACH,SAAgB,MAAM,CAAC,UAAyB,EAAE;IAChD,MAAM,aAAa,GAA2B;QAC5C,wBAAwB,EAAE,KAAK;QAC/B,oBAAoB,EAAE,QAAQ;QAC9B,mCAAmC,EAAE,MAAM;QAC3C,iBAAiB,EAAE,iCAAiC;QACpD,oBAAoB,EAAE,0CAA0C;KACjE,CAAA;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;YAC9B,CAAC,CAAC,OAAO,CAAC,IAAI;YACd,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAA;QACnD,IAAI,MAAM,GAAG,WAAW,OAAO,CAAC,MAAM,EAAE,CAAA;QACxC,IAAI,OAAO,CAAC,iBAAiB;YAAE,MAAM,IAAI,qBAAqB,CAAA;QAC9D,aAAa,CAAC,2BAA2B,CAAC,GAAG,MAAM,CAAA;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,aAAa,CAAC,wBAAwB,CAAC,GAAG,SAAS,CAAA;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAChC,aAAa,CAAC,kBAAkB,CAAC,GAAG,eAAe,CAAA;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,MAAM,GACV,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;YACpC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM;YAC3B,CAAC,CAAC,MAAM,CAAA;QACZ,aAAa,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAA;IAC3C,CAAC;IAED,IACE,OAAO,CAAC,qBAAqB;QAC7B,CAAC,OAAO,CAAC,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAClD,CAAC;QACD,aAAa,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAA;IAC1E,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,KAAK,CAAA;IACrD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACjD,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAA;IAErC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,+BAA+B;QAC/B,IACE,OAAO,CAAC,qBAAqB;YAC7B,OAAO,CAAC,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC,EACjD,CAAC;YACD,MAAM,KAAK,GAAG,qBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CACzD;YAAC,GAAW,CAAC,QAAQ,GAAG,KAAK,CAAA;YAC9B,GAAG,CAAC,SAAS,CACX,yBAAyB,EACzB,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAC3D,CAAA;QACH,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;QAClC,CAAC;QAED,uEAAuE;QACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAiBD,SAAS,aAAa,CAAC,GAAW,EAAE,MAAc;IAChD,MAAM,SAAS,GAAG,qBAAM;SACrB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,WAAW,CAAC,CAAA;IACtB,OAAO,GAAG,GAAG,IAAI,SAAS,EAAE,CAAA;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,MAAc;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACpC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,KAAK,CAAA;IAC9B,MAAM,iBAAiB,GAAG,qBAAM;SAC7B,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,WAAW,CAAC,CAAA;IAEtB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAElD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACtD,IAAI,CAAC,qBAAM,CAAC,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC;QAAE,OAAO,KAAK,CAAA;IAC9D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,SAAgB,IAAI,CAAC,OAAoB;IACvC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC5E,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAA;IACrD,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC,CAAC,WAAW,EAAE,CAAA;IAEvE,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,qBAAM,CAAC,UAAU,EAAE,CAAA;IAE/C,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACzC,IAAI,KAAK,GAAmB,KAAK,CAAA;QAEjC,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,GAAG,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QACpD,CAAC;QAED,oEAAoE;QACpE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,aAAa,EAAE,CAAA;YACvB,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC3D,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,IAAI,KAAK,EAAE,kDAAkD;gBACtG,MAAM,EACJ,OAAO,CAAC,aAAa,EAAE,MAAM;oBAC7B,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBACvC,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,IAAI,KAAK;gBAClD,IAAI,EAAE,OAAO,CAAC,aAAa,EAAE,IAAI,IAAI,GAAG;gBACxC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,IAAI,KAAK;aAC/C,CAAC,CAAA;QACJ,CAAC;QAED,uDAAuD;QACvD,CAAC;QAAC,GAAwC,CAAC,SAAS,GAAG,KAAK,CAAA;QAE5D,0CAA0C;QAC1C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAED,0FAA0F;QAC1F,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACvC,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,IAAI,kBAAS,CAAC,oBAAoB,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;QACtE,CAAC;QAED,uEAAuE;QACvE,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAE5B,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,IAAI,EAAE,CAAA;YACtC,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAA;gBACvC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;oBACxB,OAAO,IAAI,CAAC,IAAI,kBAAS,CAAC,sBAAsB,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAA;gBACxE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CACT,IAAI,kBAAS,CAAC,+BAA+B,EAAE,GAAG,EAAE,aAAa,CAAC,CACnE,CAAA;YACH,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAWD;;;;GAIG;AACH,SAAgB,OAAO,CAAC,WAAqC;IAC3D,MAAM,OAAO,GACX,OAAO,WAAW,KAAK,QAAQ;QAC7B,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,WAAW,EAAE,CAAA;IAEnC,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,CAAA;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,GAAG,CAAA;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,iBAAiB,CAAA;IAEpD,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,mBAAmB;QACnB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClE,OAAO,IAAI,EAAE,CAAA;YACf,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAA;gBACvC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAClD,OAAO,OAAO,KAAK,QAAQ;oBACzB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC1B,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACvB,CAAA;gBACD,IAAI,UAAU;oBAAE,OAAO,IAAI,EAAE,CAAA;YAC/B,CAAC;QACH,CAAC;QAED,IAAI,KAAK,GAA0B,IAAI,CAAA;QAEvC,MAAM,QAAQ,GAAG,CAAC,SAAiB,EAAE,EAAE;YACrC,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC9B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;wBAC1B,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,SAAS;4BACf,OAAO;yBACR;qBACF,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC,EAAE,SAAS,CAAC,CAAA;YACb,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACtC,KAAK,CAAC,KAAK,EAAE,CAAA;YACf,CAAC;QACH,CAAC,CAAA;QAED,2CAA2C;QAC3C,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE;YACrC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACf,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;gBAC9B,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,KAAK,CAAC,CAAA;YACjB,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC,CAAA;QACD,MAAM,cAAc,GAAG,GAAG,EAAE;YAC1B,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC9B,KAAK,GAAG,IAAI,CAAA;YACZ,OAAO,GAAG,CAAA;QACZ,CAAC,CAEA;QAAC,GAAW,CAAC,UAAU,GAAG,YAAY,CACtC;QAAC,GAAW,CAAC,YAAY,GAAG,cAAc,CAC1C;QAAC,GAAW,CAAC,cAAc,GAAG,YAAY,CAC1C;QAAC,GAAW,CAAC,eAAe,GAAG,cAAc,CAAA;QAE9C,QAAQ,CAAC,SAAS,CAAC,CAAA;QAEnB,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACxB,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;QAEF,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,WAAoC;IAC/D,MAAM,OAAO,GACX,OAAO,WAAW,KAAK,QAAQ;QAC7B,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE;QACrB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,WAAW,EAAE,CAAA;IACnC,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,CAAA;IAE9B,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;QACvC,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YAC7C,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBACZ,GAAG,CAAC,YAAY,EAAE,EAAE,CAAA;YACtB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;YACpB,CAAC;YACD,IAAI,EAAE,CAAA;QACR,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QAClC,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAgB,GAAG;IACjB,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,6EAA6E;QAC7E,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAED,qFAAqF;QACrF,IACE,GAAG,CAAC,IAAI,KAAK,SAAS;YACtB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7C,OAAQ,GAAW,CAAC,IAAI,KAAK,UAAU,EACvC,CAAC;YACD,IAAI,CAAC;gBACH,MAAO,GAAW,CAAC,IAAI,EAAE,CAAA;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CACrC,GAAG,CAAC,IAA+B,CACpC,EAAE,CAAC;gBACF,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,CAAC;oBAAC,GAAG,CAAC,IAAgC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IACrD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,SAAS,GAA4B,EAAE,CAAA;QAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzC,SAAQ,CAAC,uBAAuB;YAClC,CAAC;YACD,SAAS,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QACjC,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,IACE,GAAG,CAAC,IAAI,KAAK,SAAS;YACtB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7C,OAAQ,GAAW,CAAC,IAAI,KAAK,UAAU,EACvC,CAAC;YACD,IAAI,CAAC;gBACH,MAAO,GAAW,CAAC,IAAI,EAAE,CAAA;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChD,IACE,GAAG,CAAC,KAAK;YACT,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;YAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EACjC,CAAC;YACD,GAAG,CAAC,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAA2B,CAAA;QAChE,CAAC;QACD,IACE,GAAG,CAAC,MAAM;YACV,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAClC,CAAC;YACD,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAA2B,CAAA;QAClE,CAAC;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAQD,SAAgB,UAAU,CACxB,UAA6B,EAAE,KAAK,EAAE,IAAI,EAAE;IAE5C,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IACE,GAAG,CAAC,IAAI,KAAK,SAAS;gBACtB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC7C,OAAQ,GAAW,CAAC,IAAI,KAAK,UAAU,EACvC,CAAC;gBACD,IAAI,CAAC;oBACH,MAAO,GAAW,CAAC,IAAI,EAAE,CAAA;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,IAAI;gBAAE,GAAG,CAAC,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAChD,IACE,GAAG,CAAC,KAAK;gBACT,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;gBAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EACjC,CAAC;gBACD,GAAG,CAAC,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAA2B,CAAA;YAChE,CAAC;YACD,IACE,GAAG,CAAC,MAAM;gBACV,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;gBAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAClC,CAAC;gBACD,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAA2B,CAAA;YAClE,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC"}

package/dist/middleware/upload.d.ts

@@ -0,0 +1,82 @@
+import type { Handler } from '../types';
+export interface FileUploadLimits {
+    fileSize?: number;
+    files?: number;
+    fields?: number;
+    parts?: number;
+}
+export interface FileUploadOptions {
+    /** Single field name to match */
+    field?: string;
+    /** Multiple fields configuration */
+    fields?: {
+        name: string;
+        maxCount?: number;
+    }[];
+    /** Maximum number of files to accept */
+    maxCount?: number;
+    /** Disk directory to automatically save uploaded files to */
+    dest?: string;
+    /** Destination mode: 'memory' | 'disk' | 'stream' or directory path */
+    destination?: 'memory' | 'disk' | 'stream' | string;
+    /** Storage mode: 'memory' | 'disk' */
+    storage?: 'memory' | 'disk';
+    /** Maximum file size as number (bytes) or string (e.g. '10MB', '500KB') */
+    maxSize?: number | string;
+    /** Size and file count limits */
+    limits?: FileUploadLimits;
+    /** Allowed MIME types (e.g. ['image/jpeg', 'image/png'] or ['image/*']) */
+    allowedMimeTypes?: string[];
+    /** Alias for allowedMimeTypes */
+    mimeTypes?: string[];
+    /** Custom filter predicate to allow or reject a file */
+    fileFilter?: (file: {
+        fieldname: string;
+        filename: string;
+        mimetype: string;
+    }) => boolean | Promise<boolean>;
+}
+export declare function parseSizeToBytes(size: string | number | undefined): number | undefined;
+/**
+ * Native first-party multipart file upload middleware.
+ * Supports memory buffering, disk saving, MIME validation, and Multer-like ergonomics.
+ *
+ * Examples:
+ * ```ts
+ * route.post('/avatar', fileUpload.single('avatar'), (req, res) => {
+ *   res.json({ file: req.file })
+ * })
+ *
+ * route.post('/photos', fileUpload.array('photos', 5), (req, res) => {
+ *   res.json({ files: req.files })
+ * })
+ * ```
+ */
+export declare function fileUpload(rawOptions?: FileUploadOptions): Handler;
+export declare namespace fileUpload {
+    var single: (fieldName: string, options?: Omit<FileUploadOptions, "field">) => Handler;
+    var array: (fieldName: string, maxCount?: number, options?: Omit<FileUploadOptions, "field" | "maxCount">) => Handler;
+    var fields: (fields: {
+        name: string;
+        maxCount?: number;
+    }[], options?: Omit<FileUploadOptions, "fields">) => Handler;
+    var any: (options?: FileUploadOptions) => Handler;
+    var none: (options?: FileUploadOptions) => Handler;
+    var fromExpress: typeof import("./upload").fromExpress;
+}
+/**
+ * Seamlessly run any standard Express/Connect middleware (e.g. Multer, Passport)
+ * in ExisJS with automatic synchronization of `req.file`, `req.files`, and `req.body`.
+ *
+ * Example:
+ * ```ts
+ * import multer from 'multer'
+ * const upload = multer({ dest: './uploads' })
+ *
+ * route.post('/avatar', fromExpress(upload.single('avatar')), (req, res) => {
+ *   res.json({ file: req.file })
+ * })
+ * ```
+ */
+export declare function fromExpress(expressMiddleware: (req: any, res: any, next: (err?: any) => void) => void): Handler;
+//# sourceMappingURL=upload.d.ts.map

package/dist/middleware/upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../src/middleware/upload.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,OAAO,EAKR,MAAM,UAAU,CAAA;AAOjB,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC9C,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,uEAAuE;IACvE,WAAW,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAA;IACnD,sCAAsC;IACtC,OAAO,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;IAC3B,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACzB,iCAAiC;IACjC,MAAM,CAAC,EAAE,gBAAgB,CAAA;IACzB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC3B,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,wDAAwD;IACxD,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;QAClB,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;KACjB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACjC;AAED,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAmBpB;AAWD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CAAC,UAAU,GAAE,iBAAsB,GAAG,OAAO,CA2PtE;yBA3Pe,UAAU;4BA+Pb,MAAM,YACP,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,KACzC,OAAO;2BAMG,MAAM,aACN,MAAM,YACP,IAAI,CAAC,iBAAiB,EAAE,OAAO,GAAG,UAAU,CAAC,KACtD,OAAO;yBAMA;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,YACnC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,KAC1C,OAAO;wBAK2B,iBAAiB,KAAG,OAAO;yBAK1B,iBAAiB,KAAG,OAAO;;;AAWjE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CACzB,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,IAAI,KAAK,IAAI,GACzE,OAAO,CA2CT"}

package/dist/middleware/upload.js

@@ -0,0 +1,387 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSizeToBytes = parseSizeToBytes;
+exports.fileUpload = fileUpload;
+exports.fromExpress = fromExpress;
+const errors_1 = require("../error/errors");
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const busboy = require('busboy');
+const path = __importStar(require("node:path"));
+const fs = __importStar(require("node:fs/promises"));
+function parseSizeToBytes(size) {
+    if (typeof size === 'number')
+        return size;
+    if (!size || typeof size !== 'string')
+        return undefined;
+    const match = size.trim().match(/^(\d+(?:\.\d+)?)\s*(b|kb|mb|gb|tb)?$/i);
+    if (!match)
+        return undefined;
+    const val = parseFloat(match[1]);
+    const unit = (match[2] || 'b').toLowerCase();
+    switch (unit) {
+        case 'kb':
+            return Math.round(val * 1024);
+        case 'mb':
+            return Math.round(val * 1024 * 1024);
+        case 'gb':
+            return Math.round(val * 1024 * 1024 * 1024);
+        case 'tb':
+            return Math.round(val * 1024 * 1024 * 1024 * 1024);
+        default:
+            return Math.round(val);
+    }
+}
+function matchesMime(mimetype, pattern) {
+    if (pattern === '*' || pattern === '*/*')
+        return true;
+    if (pattern.endsWith('/*')) {
+        const prefix = pattern.slice(0, pattern.indexOf('/*'));
+        return mimetype.startsWith(prefix + '/');
+    }
+    return mimetype.toLowerCase() === pattern.toLowerCase();
+}
+/**
+ * Native first-party multipart file upload middleware.
+ * Supports memory buffering, disk saving, MIME validation, and Multer-like ergonomics.
+ *
+ * Examples:
+ * ```ts
+ * route.post('/avatar', fileUpload.single('avatar'), (req, res) => {
+ *   res.json({ file: req.file })
+ * })
+ *
+ * route.post('/photos', fileUpload.array('photos', 5), (req, res) => {
+ *   res.json({ files: req.files })
+ * })
+ * ```
+ */
+function fileUpload(rawOptions = {}) {
+    const options = { ...rawOptions };
+    const parsedSize = parseSizeToBytes(options.maxSize);
+    if (parsedSize && (!options.limits || !options.limits.fileSize)) {
+        options.limits = {
+            ...(options.limits || {}),
+            fileSize: parsedSize,
+        };
+    }
+    if (options.destination &&
+        !options.dest &&
+        options.destination !== 'memory' &&
+        options.destination !== 'stream') {
+        options.dest = options.destination;
+    }
+    if (options.destination === 'memory' || options.storage === 'memory') {
+        delete options.dest;
+    }
+    if (options.mimeTypes && !options.allowedMimeTypes) {
+        options.allowedMimeTypes = options.mimeTypes;
+    }
+    return (req, res, next) => {
+        const contentType = req.get('content-type') || '';
+        if (!contentType.includes('multipart/form-data')) {
+            return next();
+        }
+        if (!contentType.includes('boundary=')) {
+            return next(errors_1.HttpError.badRequest('Missing multipart boundary. Ensure you are not manually overriding the Content-Type header in your client.'));
+        }
+        return new Promise((resolve) => {
+            let settled = false;
+            const done = (err) => {
+                if (settled)
+                    return;
+                settled = true;
+                if (err) {
+                    next(err);
+                }
+                else {
+                    next();
+                }
+                resolve();
+            };
+            const bbLimits = {};
+            if (options.limits?.fileSize)
+                bbLimits.fileSize = options.limits.fileSize;
+            if (options.limits?.files)
+                bbLimits.files = options.limits.files;
+            if (options.maxCount)
+                bbLimits.files = options.maxCount;
+            if (options.limits?.fields)
+                bbLimits.fields = options.limits.fields;
+            if (options.limits?.parts)
+                bbLimits.parts = options.limits.parts;
+            const fieldsMap = {};
+            const collectedFiles = [];
+            let hasLimitError = false;
+            let limitErrorMessage = '';
+            let filterError = null;
+            try {
+                const bb = busboy({
+                    headers: req.raw.headers,
+                    limits: Object.keys(bbLimits).length > 0 ? bbLimits : undefined,
+                });
+                bb.on('field', (name, val) => {
+                    fieldsMap[name] = val;
+                });
+                bb.on('filesLimit', () => {
+                    hasLimitError = true;
+                    limitErrorMessage = `Exceeded maximum file upload limit`;
+                });
+                bb.on('file', (name, fileStream, info) => {
+                    const filename = info.filename || 'unknown';
+                    const mimetype = info.mimeType || 'application/octet-stream';
+                    // Verify field restriction if single field configured
+                    if (options.field && name !== options.field) {
+                        fileStream.resume(); // Drain stream
+                        return;
+                    }
+                    // Verify field restriction if fields array configured
+                    if (options.fields) {
+                        const fieldConfig = options.fields.find((f) => f.name === name);
+                        if (!fieldConfig) {
+                            fileStream.resume(); // Drain
+                            return;
+                        }
+                        if (fieldConfig.maxCount) {
+                            const currentCount = collectedFiles.filter((f) => f.fieldname === name).length;
+                            if (currentCount >= fieldConfig.maxCount) {
+                                fileStream.resume();
+                                hasLimitError = true;
+                                limitErrorMessage = `Field '${name}' exceeded maxCount of ${fieldConfig.maxCount}`;
+                                return;
+                            }
+                        }
+                    }
+                    // Validate MIME type
+                    if (options.allowedMimeTypes &&
+                        options.allowedMimeTypes.length > 0) {
+                        const isAllowed = options.allowedMimeTypes.some((pattern) => matchesMime(mimetype, pattern));
+                        if (!isAllowed) {
+                            fileStream.resume();
+                            filterError = errors_1.HttpError.badRequest(`File '${filename}' has invalid MIME type '${mimetype}'. Allowed: ${options.allowedMimeTypes.join(', ')}`);
+                            return;
+                        }
+                    }
+                    // Validate custom filter
+                    if (options.fileFilter) {
+                        try {
+                            const allowed = options.fileFilter({
+                                fieldname: name,
+                                filename,
+                                mimetype,
+                            });
+                            if (!allowed) {
+                                fileStream.resume();
+                                return;
+                            }
+                        }
+                        catch (err) {
+                            fileStream.resume();
+                            filterError =
+                                err instanceof Error ? err : new Error(String(err));
+                            return;
+                        }
+                    }
+                    let fileTruncated = false;
+                    fileStream.on('limit', () => {
+                        fileTruncated = true;
+                        hasLimitError = true;
+                        const limit = options.limits?.fileSize;
+                        limitErrorMessage = limit
+                            ? `File '${filename}' exceeds size limit of ${limit} bytes`
+                            : `File '${filename}' exceeds size limit`;
+                    });
+                    const chunks = [];
+                    let size = 0;
+                    fileStream.on('data', (chunk) => {
+                        chunks.push(chunk);
+                        size += chunk.length;
+                    });
+                    fileStream.on('end', () => {
+                        if (fileTruncated)
+                            return;
+                        const data = Buffer.concat(chunks);
+                        const fileItem = {
+                            fieldname: name,
+                            filename,
+                            mimetype,
+                            data,
+                            buffer: data, // Multer compatibility
+                            size,
+                            saveToDisk: async (destDir) => {
+                                await fs.mkdir(destDir, { recursive: true });
+                                const ext = path.extname(filename);
+                                const uniqueSuffix = Date.now() + '-' + Math.round(Math.random() * 1e9);
+                                const finalName = `${name}-${uniqueSuffix}${ext}`;
+                                const destPath = path.join(destDir, finalName);
+                                await fs.writeFile(destPath, data);
+                                fileItem.path = destPath;
+                                return destPath;
+                            },
+                        };
+                        collectedFiles.push(fileItem);
+                    });
+                });
+                bb.on('finish', async () => {
+                    if (filterError) {
+                        return done(filterError);
+                    }
+                    if (hasLimitError) {
+                        return done(errors_1.HttpError.payloadTooLarge(limitErrorMessage));
+                    }
+                    // Auto-save to destination if dest option is set
+                    if (options.dest && collectedFiles.length > 0) {
+                        try {
+                            await fs.mkdir(options.dest, { recursive: true });
+                            for (const file of collectedFiles) {
+                                await file.saveToDisk(options.dest);
+                            }
+                        }
+                        catch (err) {
+                            return done(err);
+                        }
+                    }
+                    // Attach to request
+                    req.files = collectedFiles;
+                    if (collectedFiles.length > 0) {
+                        if (options.field) {
+                            const matched = collectedFiles.find((f) => f.fieldname === options.field);
+                            req.file = matched || collectedFiles[0];
+                        }
+                        else {
+                            req.file = collectedFiles[0];
+                        }
+                    }
+                    req.body = { ...(req.body || {}), ...fieldsMap };
+                    done();
+                });
+                bb.on('error', (err) => {
+                    done(errors_1.HttpError.badRequest(err.message || 'Failed to parse multipart upload'));
+                });
+                req.raw.pipe(bb);
+            }
+            catch (err) {
+                done(err);
+            }
+        });
+    };
+}
+/** Accept a single file with the given field name */
+fileUpload.single = function (fieldName, options) {
+    return fileUpload({ ...options, field: fieldName, maxCount: 1 });
+};
+/** Accept multiple files under a single field name */
+fileUpload.array = function (fieldName, maxCount, options) {
+    return fileUpload({ ...options, field: fieldName, maxCount });
+};
+/** Accept a mixture of files specified by fields array */
+fileUpload.fields = function (fields, options) {
+    return fileUpload({ ...options, fields });
+};
+/** Accept all files that arrive on the multipart request */
+fileUpload.any = function (options) {
+    return fileUpload(options);
+};
+/** Accept only text fields, reject any uploaded files */
+fileUpload.none = function (options) {
+    return fileUpload({
+        ...options,
+        fileFilter: () => {
+            throw errors_1.HttpError.badRequest('Multipart files are not accepted on this route');
+        },
+    });
+};
+/**
+ * Seamlessly run any standard Express/Connect middleware (e.g. Multer, Passport)
+ * in ExisJS with automatic synchronization of `req.file`, `req.files`, and `req.body`.
+ *
+ * Example:
+ * ```ts
+ * import multer from 'multer'
+ * const upload = multer({ dest: './uploads' })
+ *
+ * route.post('/avatar', fromExpress(upload.single('avatar')), (req, res) => {
+ *   res.json({ file: req.file })
+ * })
+ * ```
+ */
+function fromExpress(expressMiddleware) {
+    return (req, res, next) => {
+        const rawReq = req.raw;
+        const rawRes = res.raw;
+        rawReq.params = req.params;
+        rawReq.query = req.query;
+        rawReq.headers = req.headers;
+        expressMiddleware(rawReq, rawRes, (err) => {
+            if (err)
+                return next(err);
+            // Bridge Multer properties back onto ExisRequest
+            if (rawReq.file) {
+                req.file = rawReq.file;
+                if (!req.files)
+                    req.files = [];
+                if (!req.files.includes(rawReq.file))
+                    req.files.push(rawReq.file);
+            }
+            if (rawReq.files) {
+                if (Array.isArray(rawReq.files)) {
+                    req.files = rawReq.files;
+                    if (rawReq.files.length > 0 && !req.file) {
+                        req.file = rawReq.files[0];
+                    }
+                }
+                else if (typeof rawReq.files === 'object') {
+                    // Flatten dictionary of arrays e.g. { avatar: [file], cover: [file] }
+                    const flatList = [];
+                    for (const list of Object.values(rawReq.files)) {
+                        if (Array.isArray(list))
+                            flatList.push(...list);
+                    }
+                    req.files = flatList;
+                    if (flatList.length > 0 && !req.file) {
+                        req.file = flatList[0];
+                    }
+                }
+            }
+            if (rawReq.body && typeof rawReq.body === 'object') {
+                req.body = { ...(req.body || {}), ...rawReq.body };
+            }
+            next();
+        });
+    };
+}
+/** Alias to fromExpress for Multer convenience */
+fileUpload.fromExpress = fromExpress;
+//# sourceMappingURL=upload.js.map