hi-secure 1.0.0 → 1.0.3

package/dist/middlewares/errorHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"errorHandler.js","sourceRoot":"","sources":["../../src/middlewares/errorHandler.ts"],"names":[],"mappings":";AAAA,6DAA6D;AAC7D,uCAAuC;AACvC,8DAA8D;AAC9D,oEAAoE;AACpE,kEAAkE;AAClE,gEAAgE;;AAuKhE,oCA4FC;AApGD,wCAAoC;AAEpC,oEAA8D;AAC9D,0EAAoE;AACpE,wEAAkE;AAClE,sEAAgE;AAChE,gEAAyD;AAEzD,SAAgB,YAAY,CACxB,GAAQ,EACR,GAAY,EACZ,GAAa,EACb,KAAmB;IAEnB,MAAM,OAAO,GACT,OAAO,GAAG,KAAK,QAAQ;QACnB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,GAAG,EAAE,OAAO,IAAI,eAAe,CAAC;IAE1C,MAAM,KAAK,GACP,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,KAAK;QAC7B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;IAEpB,kBAAkB;IAClB,gBAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;QAC7B,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,cAAc;QACjC,OAAO;QACP,MAAM,EAAE,GAAG,EAAE,MAAM;QACnB,IAAI,EAAE,GAAG,EAAE,IAAI;QACf,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK;QACL,GAAG,EAAE,GAAG;KACX,CAAC,CAAC;IAEH,sDAAsD;IACtD,kCAAkC;IAClC,sDAAsD;IACtD,IAAI,GAAG,YAAY,yBAAS,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YAC/B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,GAAG,CAAC,IAAI;YACf,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;SACpC,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,uBAAuB;IACvB,sDAAsD;IACtD,IAAI,GAAG,YAAY,oCAAe,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kBAAkB;YACzB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,sBAAsB;IACtB,sDAAsD;IACtD,IAAI,GAAG,YAAY,kCAAc,EAAE,CAAC;QAChC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iBAAiB;YACxB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,oEAAoE;IACpE,sDAAsD;IACtD,IAAI,GAAG,YAAY,8BAAY,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,eAAe;YACtB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,uDAAuD;IACvD,sDAAsD;IACtD,IAAI,GAAG,YAAY,gCAAa,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,gBAAgB;YACvB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,2BAA2B;IAC3B,sDAAsD;IACtD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACxB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,uBAAuB;QAC9B,OAAO,EAAE,2CAA2C;KACvD,CAAC,CAAC;AACP,CAAC","sourcesContent":["// import { Request, Response, NextFunction } from \"express\";\r\n// import { logger } from \"../logging\";\r\n// import { AdapterError } from \"../core/errors/AdapterError\";\r\n// import { ValidationError } from \"../core/errors/ValidationError\";\r\n// import { SanitizerError } from \"../core/errors/SanitizerError\";\r\n// import { SecurityError } from \"../core/errors/SecurityError\";\r\n\r\n// export function errorHandler(\r\n//     err: any,\r\n//     req: Request,\r\n//     res: Response,\r\n//     _next: NextFunction\r\n// ) {\r\n//     // Normalize unknown errors\r\n//     const errorMessage =\r\n//         typeof err === \"string\"\r\n//             ? err\r\n//             : err?.message || \"Unknown error occurred\";\r\n\r\n//     const errorStack =\r\n//         err instanceof Error && err.stack\r\n//             ? err.stack.split(\"\\n\").slice(0, 2).join(\" | \")\r\n//             : undefined;\r\n\r\n//     // Log error centrally\r\n//     logger.error(\"❌ HiSecure Error Captured\", {\r\n//         message: errorMessage,\r\n//         path: req.path,\r\n//         method: req.method,\r\n//         stack: errorStack,\r\n//         raw: err\r\n//     });\r\n\r\n//     // ------------------------------\r\n//     // CLASSIFIED ERROR RESPONSES\r\n//     // ------------------------------\r\n\r\n//     if (err instanceof ValidationError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"VALIDATION_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SanitizerError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"SANITIZER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof AdapterError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"ADAPTER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SecurityError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"SECURITY_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     // ------------------------------\r\n//     // UNEXPECTED ERROR\r\n//     // ------------------------------\r\n//     return res.status(500).json({\r\n//         success: false,\r\n//         error: \"INTERNAL_SERVER_ERROR\",\r\n//         message: \"An unexpected error occurred in HiSecure middleware.\"\r\n//     });\r\n// }\r\n\r\n\r\n\r\n\r\n// import { Request, Response, NextFunction } from \"express\";\r\n// import { logger } from \"../logging\";\r\n// import { AdapterError } from \"../core/errors/AdapterError\";\r\n// import { ValidationError } from \"../core/errors/ValidationError\";\r\n// import { SanitizerError } from \"../core/errors/SanitizerError\";\r\n// import { SecurityError } from \"../core/errors/SecurityError\";\r\n\r\n// export function errorHandler(\r\n//     err: any,\r\n//     req: Request,\r\n//     res: Response,\r\n//     _next: NextFunction\r\n// ) {\r\n//     // Normalize unknown errors\r\n//     const errorMessage =\r\n//         typeof err === \"string\"\r\n//             ? err\r\n//             : err?.message || \"Unknown error occurred\";\r\n\r\n//     const errorStack =\r\n//         err instanceof Error && err.stack\r\n//             ? err.stack.split(\"\\n\").slice(0, 2).join(\" | \")\r\n//             : undefined;\r\n\r\n//     // Log error centrally\r\n//     logger.error(\"❌ HiSecure Error Captured\", {\r\n//         message: errorMessage,\r\n//         path: req.path,\r\n//         method: req.method,\r\n//         stack: errorStack,\r\n//         raw: err\r\n//     });\r\n\r\n//     // ------------------------------\r\n//     // CLASSIFIED ERROR RESPONSES\r\n//     // ------------------------------\r\n\r\n//     if (err instanceof ValidationError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"VALIDATION_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SanitizerError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"SANITIZER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof AdapterError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"ADAPTER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SecurityError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"SECURITY_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     // ------------------------------\r\n//     // UNEXPECTED ERROR\r\n//     // ------------------------------\r\n//     return res.status(500).json({\r\n//         success: false,\r\n//         error: \"INTERNAL_SERVER_ERROR\",\r\n//         message: \"An unexpected error occurred in HiSecure middleware.\"\r\n//     });\r\n// }\r\n\r\n\r\n\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { logger } from \"../logging\";\r\n\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { ValidationError } from \"../core/errors/ValidationError.js\";\r\nimport { SanitizerError } from \"../core/errors/SanitizerError.js\";\r\nimport { SecurityError } from \"../core/errors/SecurityError.js\";\r\nimport { HttpError } from \"../core/errors/HttpErrror.js\";\r\n\r\nexport function errorHandler(\r\n    err: any,\r\n    req: Request,\r\n    res: Response,\r\n    _next: NextFunction\r\n) {\r\n    const message =\r\n        typeof err === \"string\"\r\n            ? err\r\n            : err?.message || \"Unknown error\";\r\n\r\n    const stack =\r\n        err instanceof Error && err.stack\r\n            ? err.stack.split(\"\\n\").slice(0, 2).join(\" | \")\r\n            : undefined;\r\n\r\n    // Unified logging\r\n    logger.error(\"❌ HiSecure Error\", {\r\n        type: err?.name || \"UnknownError\",\r\n        message,\r\n        status: err?.status,\r\n        code: err?.code,\r\n        path: req.path,\r\n        method: req.method,\r\n        stack,\r\n        raw: err,\r\n    });\r\n\r\n    // ---------------------------------------------------\r\n    // 1. HttpError (developer thrown)\r\n    // ---------------------------------------------------\r\n    if (err instanceof HttpError) {\r\n        return res.status(err.status).json({\r\n            success: false,\r\n            error: err.code,\r\n            message: err.message,\r\n            details: err.details || undefined,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 2. Validation Errors\r\n    // ---------------------------------------------------\r\n    if (err instanceof ValidationError) {\r\n        return res.status(400).json({\r\n            success: false,\r\n            error: \"VALIDATION_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 3. Sanitizer Errors\r\n    // ---------------------------------------------------\r\n    if (err instanceof SanitizerError) {\r\n        return res.status(400).json({\r\n            success: false,\r\n            error: \"SANITIZER_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 4. Adapter Errors (hashing, rate-limit, sanitizer, validator ...)\r\n    // ---------------------------------------------------\r\n    if (err instanceof AdapterError) {\r\n        return res.status(500).json({\r\n            success: false,\r\n            error: \"ADAPTER_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 5. Security Errors (internal library security logic)\r\n    // ---------------------------------------------------\r\n    if (err instanceof SecurityError) {\r\n        return res.status(500).json({\r\n            success: false,\r\n            error: \"SECURITY_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 6. Fallback → Unexpected\r\n    // ---------------------------------------------------\r\n    return res.status(500).json({\r\n        success: false,\r\n        error: \"INTERNAL_SERVER_ERROR\",\r\n        message: \"An unexpected error occurred in HiSecure.\",\r\n    });\r\n}\r\n"]}
+{"version":3,"file":"errorHandler.js","sourceRoot":"","sources":["../../src/middlewares/errorHandler.ts"],"names":[],"mappings":";AAAA,6DAA6D;AAC7D,uCAAuC;AACvC,8DAA8D;AAC9D,oEAAoE;AACpE,kEAAkE;AAClE,gEAAgE;;AAuKhE,oCA4FC;AApGD,wCAAoC;AAEpC,oEAA8D;AAC9D,0EAAoE;AACpE,wEAAkE;AAClE,sEAAgE;AAChE,8DAAwD;AAExD,SAAgB,YAAY,CACxB,GAAQ,EACR,GAAY,EACZ,GAAa,EACb,KAAmB;IAEnB,MAAM,OAAO,GACT,OAAO,GAAG,KAAK,QAAQ;QACnB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,GAAG,EAAE,OAAO,IAAI,eAAe,CAAC;IAE1C,MAAM,KAAK,GACP,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,KAAK;QAC7B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;IAEpB,kBAAkB;IAClB,gBAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;QAC7B,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,cAAc;QACjC,OAAO;QACP,MAAM,EAAE,GAAG,EAAE,MAAM;QACnB,IAAI,EAAE,GAAG,EAAE,IAAI;QACf,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK;QACL,GAAG,EAAE,GAAG;KACX,CAAC,CAAC;IAEH,sDAAsD;IACtD,kCAAkC;IAClC,sDAAsD;IACtD,IAAI,GAAG,YAAY,wBAAS,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YAC/B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,GAAG,CAAC,IAAI;YACf,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;SACpC,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,uBAAuB;IACvB,sDAAsD;IACtD,IAAI,GAAG,YAAY,oCAAe,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kBAAkB;YACzB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,sBAAsB;IACtB,sDAAsD;IACtD,IAAI,GAAG,YAAY,kCAAc,EAAE,CAAC;QAChC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iBAAiB;YACxB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,oEAAoE;IACpE,sDAAsD;IACtD,IAAI,GAAG,YAAY,8BAAY,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,eAAe;YACtB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,uDAAuD;IACvD,sDAAsD;IACtD,IAAI,GAAG,YAAY,gCAAa,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,gBAAgB;YACvB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED,sDAAsD;IACtD,2BAA2B;IAC3B,sDAAsD;IACtD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACxB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,uBAAuB;QAC9B,OAAO,EAAE,2CAA2C;KACvD,CAAC,CAAC;AACP,CAAC","sourcesContent":["// import { Request, Response, NextFunction } from \"express\";\r\n// import { logger } from \"../logging\";\r\n// import { AdapterError } from \"../core/errors/AdapterError\";\r\n// import { ValidationError } from \"../core/errors/ValidationError\";\r\n// import { SanitizerError } from \"../core/errors/SanitizerError\";\r\n// import { SecurityError } from \"../core/errors/SecurityError\";\r\n\r\n// export function errorHandler(\r\n//     err: any,\r\n//     req: Request,\r\n//     res: Response,\r\n//     _next: NextFunction\r\n// ) {\r\n//     // Normalize unknown errors\r\n//     const errorMessage =\r\n//         typeof err === \"string\"\r\n//             ? err\r\n//             : err?.message || \"Unknown error occurred\";\r\n\r\n//     const errorStack =\r\n//         err instanceof Error && err.stack\r\n//             ? err.stack.split(\"\\n\").slice(0, 2).join(\" | \")\r\n//             : undefined;\r\n\r\n//     // Log error centrally\r\n//     logger.error(\"❌ HiSecure Error Captured\", {\r\n//         message: errorMessage,\r\n//         path: req.path,\r\n//         method: req.method,\r\n//         stack: errorStack,\r\n//         raw: err\r\n//     });\r\n\r\n//     // ------------------------------\r\n//     // CLASSIFIED ERROR RESPONSES\r\n//     // ------------------------------\r\n\r\n//     if (err instanceof ValidationError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"VALIDATION_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SanitizerError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"SANITIZER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof AdapterError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"ADAPTER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SecurityError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"SECURITY_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     // ------------------------------\r\n//     // UNEXPECTED ERROR\r\n//     // ------------------------------\r\n//     return res.status(500).json({\r\n//         success: false,\r\n//         error: \"INTERNAL_SERVER_ERROR\",\r\n//         message: \"An unexpected error occurred in HiSecure middleware.\"\r\n//     });\r\n// }\r\n\r\n\r\n\r\n\r\n// import { Request, Response, NextFunction } from \"express\";\r\n// import { logger } from \"../logging\";\r\n// import { AdapterError } from \"../core/errors/AdapterError\";\r\n// import { ValidationError } from \"../core/errors/ValidationError\";\r\n// import { SanitizerError } from \"../core/errors/SanitizerError\";\r\n// import { SecurityError } from \"../core/errors/SecurityError\";\r\n\r\n// export function errorHandler(\r\n//     err: any,\r\n//     req: Request,\r\n//     res: Response,\r\n//     _next: NextFunction\r\n// ) {\r\n//     // Normalize unknown errors\r\n//     const errorMessage =\r\n//         typeof err === \"string\"\r\n//             ? err\r\n//             : err?.message || \"Unknown error occurred\";\r\n\r\n//     const errorStack =\r\n//         err instanceof Error && err.stack\r\n//             ? err.stack.split(\"\\n\").slice(0, 2).join(\" | \")\r\n//             : undefined;\r\n\r\n//     // Log error centrally\r\n//     logger.error(\"❌ HiSecure Error Captured\", {\r\n//         message: errorMessage,\r\n//         path: req.path,\r\n//         method: req.method,\r\n//         stack: errorStack,\r\n//         raw: err\r\n//     });\r\n\r\n//     // ------------------------------\r\n//     // CLASSIFIED ERROR RESPONSES\r\n//     // ------------------------------\r\n\r\n//     if (err instanceof ValidationError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"VALIDATION_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SanitizerError) {\r\n//         return res.status(400).json({\r\n//             success: false,\r\n//             error: \"SANITIZER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof AdapterError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"ADAPTER_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     if (err instanceof SecurityError) {\r\n//         return res.status(500).json({\r\n//             success: false,\r\n//             error: \"SECURITY_ERROR\",\r\n//             message: errorMessage\r\n//         });\r\n//     }\r\n\r\n//     // ------------------------------\r\n//     // UNEXPECTED ERROR\r\n//     // ------------------------------\r\n//     return res.status(500).json({\r\n//         success: false,\r\n//         error: \"INTERNAL_SERVER_ERROR\",\r\n//         message: \"An unexpected error occurred in HiSecure middleware.\"\r\n//     });\r\n// }\r\n\r\n\r\n\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { logger } from \"../logging\";\r\n\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { ValidationError } from \"../core/errors/ValidationError.js\";\r\nimport { SanitizerError } from \"../core/errors/SanitizerError.js\";\r\nimport { SecurityError } from \"../core/errors/SecurityError.js\";\r\nimport { HttpError } from \"../core/errors/HttpError.js\";\r\n\r\nexport function errorHandler(\r\n    err: any,\r\n    req: Request,\r\n    res: Response,\r\n    _next: NextFunction\r\n) {\r\n    const message =\r\n        typeof err === \"string\"\r\n            ? err\r\n            : err?.message || \"Unknown error\";\r\n\r\n    const stack =\r\n        err instanceof Error && err.stack\r\n            ? err.stack.split(\"\\n\").slice(0, 2).join(\" | \")\r\n            : undefined;\r\n\r\n    // Unified logging\r\n    logger.error(\"❌ HiSecure Error\", {\r\n        type: err?.name || \"UnknownError\",\r\n        message,\r\n        status: err?.status,\r\n        code: err?.code,\r\n        path: req.path,\r\n        method: req.method,\r\n        stack,\r\n        raw: err,\r\n    });\r\n\r\n    // ---------------------------------------------------\r\n    // 1. HttpError (developer thrown)\r\n    // ---------------------------------------------------\r\n    if (err instanceof HttpError) {\r\n        return res.status(err.status).json({\r\n            success: false,\r\n            error: err.code,\r\n            message: err.message,\r\n            details: err.details || undefined,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 2. Validation Errors\r\n    // ---------------------------------------------------\r\n    if (err instanceof ValidationError) {\r\n        return res.status(400).json({\r\n            success: false,\r\n            error: \"VALIDATION_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 3. Sanitizer Errors\r\n    // ---------------------------------------------------\r\n    if (err instanceof SanitizerError) {\r\n        return res.status(400).json({\r\n            success: false,\r\n            error: \"SANITIZER_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 4. Adapter Errors (hashing, rate-limit, sanitizer, validator ...)\r\n    // ---------------------------------------------------\r\n    if (err instanceof AdapterError) {\r\n        return res.status(500).json({\r\n            success: false,\r\n            error: \"ADAPTER_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 5. Security Errors (internal library security logic)\r\n    // ---------------------------------------------------\r\n    if (err instanceof SecurityError) {\r\n        return res.status(500).json({\r\n            success: false,\r\n            error: \"SECURITY_ERROR\",\r\n            message,\r\n        });\r\n    }\r\n\r\n    // ---------------------------------------------------\r\n    // 6. Fallback → Unexpected\r\n    // ---------------------------------------------------\r\n    return res.status(500).json({\r\n        success: false,\r\n        error: \"INTERNAL_SERVER_ERROR\",\r\n        message: \"An unexpected error occurred in HiSecure.\",\r\n    });\r\n}\r\n"]}

package/dist/utils/normalizeOptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"normalizeOptions.d.ts","sourceRoot":"","sources":["../../src/utils/normalizeOptions.ts"],"names":[],"mappings":"AAqHA,OAAO,EACH,aAAa,EACO,aAAa;AACjC,gBAAgB,EAAI,eAAe;AACnC,eAAe,EAClB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,SAAS,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC;IACzF,QAAQ,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;IAC1D,QAAQ,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;IAC7C,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAChE,WAAW,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACvD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,iBAAiB,CA6CjF;AAqDD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,CAgCvF"}
+{"version":3,"file":"normalizeOptions.d.ts","sourceRoot":"","sources":["../../src/utils/normalizeOptions.ts"],"names":[],"mappings":"AAqHA,OAAO,EACH,aAAa,EACO,aAAa;AACjC,gBAAgB,EAAI,eAAe;AACnC,eAAe,EAClB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,SAAS,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC;IACzF,QAAQ,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;IAC1D,QAAQ,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;IAC7C,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAChE,WAAW,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACvD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,iBAAiB,CAmDjF;AA8DD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,CAgCvF"}

package/dist/utils/normalizeOptions.js

@@ -26,9 +26,13 @@ function normalizeOptions(input) {
             enabled: opts.sanitize === undefined ? true : opts.sanitize !== false,
             options: typeof opts.sanitize === "object" ? opts.sanitize : undefined
         },
+        // validate: {
+        //     enabled: !!opts.validate,
+        //     schema: opts.validate || undefined
+        // },
         validate: {
-            enabled: !!opts.validate,
-            schema: opts.validate || undefined
+            enabled: opts.validate !== undefined,
+            schema: opts.validate
         },
         json: {
             enabled: opts.json === undefined ? true : opts.json !== false,
@@ -70,10 +74,16 @@ function normalizeRateLimit(value) {
     return { enabled: true };
 }
 function normalizeAuth(value) {
-    if (value === false) {
+    // if (value === false) {
+    //     return { enabled: false, required: false };
+    // }
+    // if (value === true || value === undefined) {
+    //     return { enabled: true, required: true };
+    // }
+    if (value === undefined) {
         return { enabled: false, required: false };
     }
-    if (value === true || value === undefined) {
+    if (value === true) {
         return { enabled: true, required: true };
     }
     const authOptions = value;

package/dist/utils/normalizeOptions.js.map

@@ -1 +1 @@
-{"version":3,"file":"normalizeOptions.js","sourceRoot":"","sources":["../../src/utils/normalizeOptions.ts"],"names":[],"mappings":";AACA,kEAAkE;;AAqIlE,4CA6CC;AAqDD,4CAgCC;AAlID,SAAgB,gBAAgB,CAAC,KAA6B;IAC1D,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO;YACH,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACxB,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC7B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACxB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,WAAW,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAClC,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IAEzB,OAAO;QACH,IAAI,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK;YAC7D,OAAO,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACjE;QAED,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAE7C,QAAQ,EAAE;YACN,OAAO,EAAE,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK;YACrE,OAAO,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACzE;QAED,QAAQ,EAAE;YACN,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;YACxB,MAAM,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;SACrC;QAED,IAAI,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK;YAC7D,OAAO,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACjE;QAED,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAE9B,WAAW,EAAE;YACT,OAAO,EAAE,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK;YAC3E,OAAO,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;SAC/E;KACJ,CAAC;AACN,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAiC;IACzD,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE/C,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;SACvC,CAAC;IACN,CAAC;IAED,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;SACzC,CAAC;IACN,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAyB,CAAC;QACtC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,CAAC;QACjC,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAClE,OAAO;SACV,CAAC;IACN,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,KAA4B;IAC/C,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,WAAW,GAAG,KAAoB,CAAC;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC;IAE/C,OAAO;QACH,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,WAAW,CAAC,KAAK;KAC3B,CAAC;AACN,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAmC;IAChE,MAAM,OAAO,GAAG;QACZ,GAAG,EAAE;YACD,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACjD,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAkB,EAAE;YACtD,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC;QACD,MAAM,EAAE;YACJ,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,EAAE,EAAE;YAC/E,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAiB,EAAE;YACrD,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;YACvC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC;QACD,MAAM,EAAE;YACJ,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACjD,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC5B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC;KACJ,CAAC;IAEF,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC;AAC1C,CAAC","sourcesContent":["\r\n// import { SecureOptions } from \"../core/types/SecureOptions.js\";\r\n\r\n// export interface NormalizedOptions {\r\n//     cors: { enabled: boolean; options?: any };\r\n//     rateLimit: { enabled: boolean; mode?: \"strict\" | \"relaxed\" | undefined; options?: any };\r\n//     sanitize: { enabled: boolean };\r\n//     validate: { enabled: boolean; schema?: any };\r\n//     json: { enabled: boolean; options?: any };\r\n\r\n//     /** NEW */\r\n//     auth: { enabled: boolean; required: boolean };\r\n// }\r\n\r\n// export function normalizeOptions(input?: SecureOptions | false): NormalizedOptions {\r\n//     if (input === false) {\r\n//         return {\r\n//             cors: { enabled: false },\r\n//             rateLimit: { enabled: false, mode: undefined, options: undefined },\r\n//             sanitize: { enabled: false },\r\n//             validate: { enabled: false },\r\n//             json: { enabled: false },\r\n//             auth: { enabled: false, required: true }\r\n//         };\r\n//     }\r\n\r\n//     const opts = input || {};\r\n\r\n//     return {\r\n//         cors: {\r\n//             enabled: opts.cors === undefined ? true : opts.cors !== false,\r\n//             options: typeof opts.cors === \"object\" ? opts.cors : undefined\r\n//         },\r\n\r\n//         rateLimit: normalizeRateLimit(opts.rateLimit),\r\n\r\n//         sanitize: {\r\n//             enabled: opts.sanitize === undefined ? true : opts.sanitize !== false\r\n//         },\r\n\r\n//         validate: {\r\n//             enabled: !!opts.validate,\r\n//             schema: opts.validate || undefined\r\n//         },\r\n\r\n//         json: {\r\n//             enabled: opts.json === undefined ? true : opts.json !== false,\r\n//             options: typeof opts.json === \"object\" ? opts.json : undefined\r\n//         },\r\n\r\n//         auth: normalizeAuth(opts.auth)\r\n//     };\r\n// }\r\n\r\n// // ---------------------------------------------------------------\r\n// // RATE LIMIT — EXACT TYPES, NO TS ERROR\r\n// // ---------------------------------------------------------------\r\n// function normalizeRateLimit(value: SecureOptions[\"rateLimit\"]): {\r\n//     enabled: boolean;\r\n//     mode?: \"strict\" | \"relaxed\" | undefined;\r\n//     options?: any;\r\n// } {\r\n//     if (value === false) {\r\n//         return { enabled: false, mode: undefined, options: undefined };\r\n//     }\r\n\r\n//     if (value === \"strict\") {\r\n//         return {\r\n//             enabled: true,\r\n//             mode: \"strict\",\r\n//             options: { max: 5, windowMs: 10000 }\r\n//         };\r\n//     }\r\n\r\n//     if (value === \"relaxed\") {\r\n//         return {\r\n//             enabled: true,\r\n//             mode: \"relaxed\",\r\n//             options: { max: 100, windowMs: 60000 }\r\n//         };\r\n//     }\r\n\r\n//     if (typeof value === \"object\") {\r\n//         return {\r\n//             enabled: true,\r\n//             mode: undefined,   // VERY IMPORTANT!\r\n//             options: value\r\n//         };\r\n//     }\r\n\r\n//     // Default → enabled and optional fields omitted\r\n//     return {\r\n//         enabled: true,\r\n//         mode: undefined,\r\n//         options: undefined\r\n//     };\r\n// }\r\n\r\n// // ---------------------------------------------------------------\r\n// // AUTH NORMALIZER — EXACT FOR useSecure\r\n// // ---------------------------------------------------------------\r\n// function normalizeAuth(value: SecureOptions[\"auth\"]) {\r\n//     if (value === false) return { enabled: false, required: true };\r\n\r\n//     if (value === true || value === undefined)\r\n//         return { enabled: true, required: true };\r\n\r\n//     return {\r\n//         enabled: true,\r\n//         required: value.required !== false\r\n//     };\r\n// }\r\n\r\n\r\n\r\n\r\n// src/utils/normalizeOptions.ts\r\nimport { \r\n    SecureOptions,\r\n    AuthOptions,        // ✅ ADD THIS\r\n    RateLimitOptions,   // ✅ ADD THIS  \r\n    SanitizeOptions     // ✅ ADD THIS\r\n} from \"../core/types/SecureOptions.js\";\r\n\r\nexport interface NormalizedOptions {\r\n    cors: { enabled: boolean; options?: object };\r\n    rateLimit: { enabled: boolean; mode?: \"strict\" | \"relaxed\"; options?: RateLimitOptions };\r\n    sanitize: { enabled: boolean; options?: SanitizeOptions };\r\n    validate: { enabled: boolean; schema?: any };\r\n    json: { enabled: boolean; options?: object };\r\n    auth: { enabled: boolean; required: boolean; roles?: string[] };\r\n    compression: { enabled: boolean; options?: object };\r\n}\r\n\r\nexport function normalizeOptions(input?: SecureOptions | false): NormalizedOptions {\r\n    if (input === false) {\r\n        return {\r\n            cors: { enabled: false },\r\n            rateLimit: { enabled: false },\r\n            sanitize: { enabled: false },\r\n            validate: { enabled: false },\r\n            json: { enabled: false },\r\n            auth: { enabled: false, required: false },\r\n            compression: { enabled: false }\r\n        };\r\n    }\r\n\r\n    const opts = input || {};\r\n\r\n    return {\r\n        cors: {\r\n            enabled: opts.cors === undefined ? true : opts.cors !== false,\r\n            options: typeof opts.cors === \"object\" ? opts.cors : undefined\r\n        },\r\n\r\n        rateLimit: normalizeRateLimit(opts.rateLimit),\r\n\r\n        sanitize: {\r\n            enabled: opts.sanitize === undefined ? true : opts.sanitize !== false,\r\n            options: typeof opts.sanitize === \"object\" ? opts.sanitize : undefined\r\n        },\r\n\r\n        validate: {\r\n            enabled: !!opts.validate,\r\n            schema: opts.validate || undefined\r\n        },\r\n\r\n        json: {\r\n            enabled: opts.json === undefined ? true : opts.json !== false,\r\n            options: typeof opts.json === \"object\" ? opts.json : undefined\r\n        },\r\n\r\n        auth: normalizeAuth(opts.auth),\r\n\r\n        compression: {\r\n            enabled: opts.compression === undefined ? true : opts.compression !== false,\r\n            options: typeof opts.compression === \"object\" ? opts.compression : undefined\r\n        }\r\n    };\r\n}\r\n\r\nfunction normalizeRateLimit(value: SecureOptions[\"rateLimit\"]): NormalizedOptions[\"rateLimit\"] {\r\n    if (value === false) return { enabled: false };\r\n    \r\n    if (value === \"strict\") {\r\n        return {\r\n            enabled: true,\r\n            mode: \"strict\",\r\n            options: { max: 5, windowMs: 10000 }\r\n        };\r\n    }\r\n    \r\n    if (value === \"relaxed\") {\r\n        return {\r\n            enabled: true,\r\n            mode: \"relaxed\",\r\n            options: { max: 100, windowMs: 60000 }\r\n        };\r\n    }\r\n    \r\n    if (typeof value === \"object\") {\r\n        const val = value as RateLimitOptions;\r\n        const { mode, ...options } = val;\r\n        return {\r\n            enabled: true,\r\n            mode: (mode === \"strict\" || mode === \"relaxed\") ? mode : undefined,\r\n            options\r\n        };\r\n    }\r\n    \r\n    return { enabled: true };\r\n}\r\n\r\nfunction normalizeAuth(value: SecureOptions[\"auth\"]): NormalizedOptions[\"auth\"] {\r\n    if (value === false) {\r\n        return { enabled: false, required: false };\r\n    }\r\n    \r\n    if (value === true || value === undefined) {\r\n        return { enabled: true, required: true };\r\n    }\r\n    \r\n    const authOptions = value as AuthOptions;\r\n    const enabled = authOptions.required !== false;\r\n    \r\n    return {\r\n        enabled,\r\n        required: enabled,\r\n        roles: authOptions.roles\r\n    };\r\n}\r\n\r\nexport function getPresetOptions(preset: 'api' | 'strict' | 'public'): NormalizedOptions {\r\n    const presets = {\r\n        api: {\r\n            cors: { enabled: true, options: { origin: '*' } },\r\n            rateLimit: { enabled: true, mode: 'relaxed' as const },\r\n            sanitize: { enabled: true },\r\n            validate: { enabled: false },\r\n            json: { enabled: true },\r\n            auth: { enabled: false, required: false },\r\n            compression: { enabled: true }\r\n        },\r\n        strict: {\r\n            cors: { enabled: true, options: { origin: process.env.ALLOWED_ORIGIN || '*' } },\r\n            rateLimit: { enabled: true, mode: 'strict' as const },\r\n            sanitize: { enabled: true },\r\n            validate: { enabled: true },\r\n            json: { enabled: true },\r\n            auth: { enabled: true, required: true },\r\n            compression: { enabled: true }\r\n        },\r\n        public: {\r\n            cors: { enabled: true, options: { origin: '*' } },\r\n            rateLimit: { enabled: true },\r\n            sanitize: { enabled: false },\r\n            validate: { enabled: false },\r\n            json: { enabled: true },\r\n            auth: { enabled: false, required: false },\r\n            compression: { enabled: true }\r\n        }\r\n    };\r\n    \r\n    return presets[preset] || presets.api;\r\n}"]}
+{"version":3,"file":"normalizeOptions.js","sourceRoot":"","sources":["../../src/utils/normalizeOptions.ts"],"names":[],"mappings":";AACA,kEAAkE;;AAqIlE,4CAmDC;AA8DD,4CAgCC;AAjJD,SAAgB,gBAAgB,CAAC,KAA6B;IAC1D,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO;YACH,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACxB,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC7B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACxB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,WAAW,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAClC,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IAEzB,OAAO;QACH,IAAI,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK;YAC7D,OAAO,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACjE;QAED,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAE7C,QAAQ,EAAE;YACN,OAAO,EAAE,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK;YACrE,OAAO,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACzE;QAED,cAAc;QACd,gCAAgC;QAChC,yCAAyC;QACzC,KAAK;QAEL,QAAQ,EAAE;YACd,OAAO,EAAE,IAAI,CAAC,QAAQ,KAAK,SAAS;YACpC,MAAM,EAAE,IAAI,CAAC,QAAQ;SACxB;QAGO,IAAI,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK;YAC7D,OAAO,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACjE;QAED,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAE9B,WAAW,EAAE;YACT,OAAO,EAAE,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK;YAC3E,OAAO,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;SAC/E;KACJ,CAAC;AACN,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAiC;IACzD,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE/C,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;SACvC,CAAC;IACN,CAAC;IAED,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;SACzC,CAAC;IACN,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAyB,CAAC;QACtC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,CAAC;QACjC,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAClE,OAAO;SACV,CAAC;IACN,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,KAA4B;IAC/C,yBAAyB;IACzB,kDAAkD;IAClD,IAAI;IAEJ,+CAA+C;IAC/C,gDAAgD;IAChD,IAAI;IAGJ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAGG,MAAM,WAAW,GAAG,KAAoB,CAAC;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC;IAE/C,OAAO;QACH,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,WAAW,CAAC,KAAK;KAC3B,CAAC;AACN,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAmC;IAChE,MAAM,OAAO,GAAG;QACZ,GAAG,EAAE;YACD,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACjD,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAkB,EAAE;YACtD,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC;QACD,MAAM,EAAE;YACJ,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,EAAE,EAAE;YAC/E,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAiB,EAAE;YACrD,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC3B,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;YACvC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC;QACD,MAAM,EAAE;YACJ,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACjD,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC5B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5B,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YACvB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACjC;KACJ,CAAC;IAEF,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC;AAC1C,CAAC","sourcesContent":["\r\n// import { SecureOptions } from \"../core/types/SecureOptions.js\";\r\n\r\n// export interface NormalizedOptions {\r\n//     cors: { enabled: boolean; options?: any };\r\n//     rateLimit: { enabled: boolean; mode?: \"strict\" | \"relaxed\" | undefined; options?: any };\r\n//     sanitize: { enabled: boolean };\r\n//     validate: { enabled: boolean; schema?: any };\r\n//     json: { enabled: boolean; options?: any };\r\n\r\n//     /** NEW */\r\n//     auth: { enabled: boolean; required: boolean };\r\n// }\r\n\r\n// export function normalizeOptions(input?: SecureOptions | false): NormalizedOptions {\r\n//     if (input === false) {\r\n//         return {\r\n//             cors: { enabled: false },\r\n//             rateLimit: { enabled: false, mode: undefined, options: undefined },\r\n//             sanitize: { enabled: false },\r\n//             validate: { enabled: false },\r\n//             json: { enabled: false },\r\n//             auth: { enabled: false, required: true }\r\n//         };\r\n//     }\r\n\r\n//     const opts = input || {};\r\n\r\n//     return {\r\n//         cors: {\r\n//             enabled: opts.cors === undefined ? true : opts.cors !== false,\r\n//             options: typeof opts.cors === \"object\" ? opts.cors : undefined\r\n//         },\r\n\r\n//         rateLimit: normalizeRateLimit(opts.rateLimit),\r\n\r\n//         sanitize: {\r\n//             enabled: opts.sanitize === undefined ? true : opts.sanitize !== false\r\n//         },\r\n\r\n//         validate: {\r\n//             enabled: !!opts.validate,\r\n//             schema: opts.validate || undefined\r\n//         },\r\n\r\n//         json: {\r\n//             enabled: opts.json === undefined ? true : opts.json !== false,\r\n//             options: typeof opts.json === \"object\" ? opts.json : undefined\r\n//         },\r\n\r\n//         auth: normalizeAuth(opts.auth)\r\n//     };\r\n// }\r\n\r\n// // ---------------------------------------------------------------\r\n// // RATE LIMIT — EXACT TYPES, NO TS ERROR\r\n// // ---------------------------------------------------------------\r\n// function normalizeRateLimit(value: SecureOptions[\"rateLimit\"]): {\r\n//     enabled: boolean;\r\n//     mode?: \"strict\" | \"relaxed\" | undefined;\r\n//     options?: any;\r\n// } {\r\n//     if (value === false) {\r\n//         return { enabled: false, mode: undefined, options: undefined };\r\n//     }\r\n\r\n//     if (value === \"strict\") {\r\n//         return {\r\n//             enabled: true,\r\n//             mode: \"strict\",\r\n//             options: { max: 5, windowMs: 10000 }\r\n//         };\r\n//     }\r\n\r\n//     if (value === \"relaxed\") {\r\n//         return {\r\n//             enabled: true,\r\n//             mode: \"relaxed\",\r\n//             options: { max: 100, windowMs: 60000 }\r\n//         };\r\n//     }\r\n\r\n//     if (typeof value === \"object\") {\r\n//         return {\r\n//             enabled: true,\r\n//             mode: undefined,   // VERY IMPORTANT!\r\n//             options: value\r\n//         };\r\n//     }\r\n\r\n//     // Default → enabled and optional fields omitted\r\n//     return {\r\n//         enabled: true,\r\n//         mode: undefined,\r\n//         options: undefined\r\n//     };\r\n// }\r\n\r\n// // ---------------------------------------------------------------\r\n// // AUTH NORMALIZER — EXACT FOR useSecure\r\n// // ---------------------------------------------------------------\r\n// function normalizeAuth(value: SecureOptions[\"auth\"]) {\r\n//     if (value === false) return { enabled: false, required: true };\r\n\r\n//     if (value === true || value === undefined)\r\n//         return { enabled: true, required: true };\r\n\r\n//     return {\r\n//         enabled: true,\r\n//         required: value.required !== false\r\n//     };\r\n// }\r\n\r\n\r\n\r\n\r\n// src/utils/normalizeOptions.ts\r\nimport { \r\n    SecureOptions,\r\n    AuthOptions,        // ✅ ADD THIS\r\n    RateLimitOptions,   // ✅ ADD THIS  \r\n    SanitizeOptions     // ✅ ADD THIS\r\n} from \"../core/types/SecureOptions.js\";\r\n\r\nexport interface NormalizedOptions {\r\n    cors: { enabled: boolean; options?: object };\r\n    rateLimit: { enabled: boolean; mode?: \"strict\" | \"relaxed\"; options?: RateLimitOptions };\r\n    sanitize: { enabled: boolean; options?: SanitizeOptions };\r\n    validate: { enabled: boolean; schema?: any };\r\n    json: { enabled: boolean; options?: object };\r\n    auth: { enabled: boolean; required: boolean; roles?: string[] };\r\n    compression: { enabled: boolean; options?: object };\r\n}\r\n\r\nexport function normalizeOptions(input?: SecureOptions | false): NormalizedOptions {\r\n    if (input === false) {\r\n        return {\r\n            cors: { enabled: false },\r\n            rateLimit: { enabled: false },\r\n            sanitize: { enabled: false },\r\n            validate: { enabled: false },\r\n            json: { enabled: false },\r\n            auth: { enabled: false, required: false },\r\n            compression: { enabled: false }\r\n        };\r\n    }\r\n\r\n    const opts = input || {};\r\n\r\n    return {\r\n        cors: {\r\n            enabled: opts.cors === undefined ? true : opts.cors !== false,\r\n            options: typeof opts.cors === \"object\" ? opts.cors : undefined\r\n        },\r\n\r\n        rateLimit: normalizeRateLimit(opts.rateLimit),\r\n\r\n        sanitize: {\r\n            enabled: opts.sanitize === undefined ? true : opts.sanitize !== false,\r\n            options: typeof opts.sanitize === \"object\" ? opts.sanitize : undefined\r\n        },\r\n\r\n        // validate: {\r\n        //     enabled: !!opts.validate,\r\n        //     schema: opts.validate || undefined\r\n        // },\r\n\r\n        validate: {\r\n    enabled: opts.validate !== undefined,\r\n    schema: opts.validate\r\n},\r\n\r\n\r\n        json: {\r\n            enabled: opts.json === undefined ? true : opts.json !== false,\r\n            options: typeof opts.json === \"object\" ? opts.json : undefined\r\n        },\r\n\r\n        auth: normalizeAuth(opts.auth),\r\n\r\n        compression: {\r\n            enabled: opts.compression === undefined ? true : opts.compression !== false,\r\n            options: typeof opts.compression === \"object\" ? opts.compression : undefined\r\n        }\r\n    };\r\n}\r\n\r\nfunction normalizeRateLimit(value: SecureOptions[\"rateLimit\"]): NormalizedOptions[\"rateLimit\"] {\r\n    if (value === false) return { enabled: false };\r\n    \r\n    if (value === \"strict\") {\r\n        return {\r\n            enabled: true,\r\n            mode: \"strict\",\r\n            options: { max: 5, windowMs: 10000 }\r\n        };\r\n    }\r\n    \r\n    if (value === \"relaxed\") {\r\n        return {\r\n            enabled: true,\r\n            mode: \"relaxed\",\r\n            options: { max: 100, windowMs: 60000 }\r\n        };\r\n    }\r\n    \r\n    if (typeof value === \"object\") {\r\n        const val = value as RateLimitOptions;\r\n        const { mode, ...options } = val;\r\n        return {\r\n            enabled: true,\r\n            mode: (mode === \"strict\" || mode === \"relaxed\") ? mode : undefined,\r\n            options\r\n        };\r\n    }\r\n    \r\n    return { enabled: true };\r\n}\r\n\r\nfunction normalizeAuth(value: SecureOptions[\"auth\"]): NormalizedOptions[\"auth\"] {\r\n    // if (value === false) {\r\n    //     return { enabled: false, required: false };\r\n    // }\r\n    \r\n    // if (value === true || value === undefined) {\r\n    //     return { enabled: true, required: true };\r\n    // }\r\n\r\n\r\n    if (value === undefined) {\r\n    return { enabled: false, required: false };\r\n}\r\nif (value === true) {\r\n    return { enabled: true, required: true };\r\n}\r\n\r\n    \r\n    const authOptions = value as AuthOptions;\r\n    const enabled = authOptions.required !== false;\r\n    \r\n    return {\r\n        enabled,\r\n        required: enabled,\r\n        roles: authOptions.roles\r\n    };\r\n}\r\n\r\nexport function getPresetOptions(preset: 'api' | 'strict' | 'public'): NormalizedOptions {\r\n    const presets = {\r\n        api: {\r\n            cors: { enabled: true, options: { origin: '*' } },\r\n            rateLimit: { enabled: true, mode: 'relaxed' as const },\r\n            sanitize: { enabled: true },\r\n            validate: { enabled: false },\r\n            json: { enabled: true },\r\n            auth: { enabled: false, required: false },\r\n            compression: { enabled: true }\r\n        },\r\n        strict: {\r\n            cors: { enabled: true, options: { origin: process.env.ALLOWED_ORIGIN || '*' } },\r\n            rateLimit: { enabled: true, mode: 'strict' as const },\r\n            sanitize: { enabled: true },\r\n            validate: { enabled: true },\r\n            json: { enabled: true },\r\n            auth: { enabled: true, required: true },\r\n            compression: { enabled: true }\r\n        },\r\n        public: {\r\n            cors: { enabled: true, options: { origin: '*' } },\r\n            rateLimit: { enabled: true },\r\n            sanitize: { enabled: false },\r\n            validate: { enabled: false },\r\n            json: { enabled: true },\r\n            auth: { enabled: false, required: false },\r\n            compression: { enabled: true }\r\n        }\r\n    };\r\n    \r\n    return presets[preset] || presets.api;\r\n}"]}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "hi-secure",
-    "version": "1.0.0",
+    "version": "1.0.3",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",
     "scripts": {
@@ -47,4 +47,4 @@
         "tsx": "^4.19.3",
         "typescript": "^5.9.3"
     }
-}
+}

package/readme.md

@@ -0,0 +1,195 @@
+<h1 align="center">🔒 HiSecure</h1>
+<p align="center"><strong>One-line security for Express.js applications</strong></p>
+
+<p align="center">
+HiSecure is an all-in-one security framework for Express.js.<br/>
+It bundles hashing, authentication, validation, sanitization, rate-limiting, logging, and security headers —  
+all through a <strong>single middleware line</strong>.
+</p>
+
+<br/>
+
+<!-- 🌟 FEATURE SECTION -->
+<div style="border-left:5px solid #6366F1; padding:20px; border-radius:8px; background:#fafafa;">
+
+<h2>✨ Features</h2>
+
+<h3 style="color:#10B981;">🔐 Password Security</h3>
+<ul>
+  <li><strong>Argon2</strong> – Industry-leading hashing</li>
+  <li><strong>Bcrypt fallback</strong> – Auto-fallback system</li>
+  <li>Simple hash + verify utilities</li>
+</ul>
+
+<h3 style="color:#3B82F6;">🔑 Authentication</h3>
+<ul>
+  <li><strong>JWT Authentication</strong> (issuer, audience, expiry)</li>
+  <li><strong>Google OAuth</strong> integration</li>
+  <li><strong>Route protection middleware</strong></li>
+</ul>
+
+<h3 style="color:#F59E0B;">⏱️ Rate Limiting</h3>
+<ul>
+  <li><strong>express-rate-limit</strong> – (Primary)</li>
+  <li><strong>rate-limiter-flexible</strong> – (Fallback)</li>
+  <li>Modes:
+    <ul>
+      <li>🛑 <strong>Strict</strong>: 5 req / 10 sec</li>
+      <li>🟡 <strong>Relaxed</strong>: 100 req / 15 min</li>
+      <li>⚙️ <strong>API</strong>: Custom config</li>
+    </ul>
+  </li>
+</ul>
+
+<h3 style="color:#EC4899;">🧼 Input Sanitization</h3>
+<ul>
+  <li><strong>sanitize-html</strong> – HTML sanitization</li>
+  <li><strong>xss</strong> – Fallback for XSS</li>
+  <li>Auto-cleans request body, query & params</li>
+</ul>
+
+<h3 style="color:#8B5CF6;">🛡️ Additional Security Layers</h3>
+<ul>
+  <li>CORS • Helmet • HPP</li>
+  <li>Secure JSON parsing</li>
+  <li>Query parser hardening</li>
+  <li>Gzip compression</li>
+  <li>Structured logging</li>
+</ul>
+
+</div>
+
+<br/>
+
+<!-- 🚀 QUICK START SECTION -->
+<div style="border-left:5px solid #10B981; padding:20px; border-radius:8px; background:#fafafa;">
+
+<h2>🚀 Quick Start</h2>
+
+<h3>📦 Installation</h3>
+
+```bash
+npm install hi-secure
+```
+
+<h3>🔥 Basic Setup</h3>
+
+```bash
+import express from "express";
+import { HiSecure } from "hi-secure";
+
+const app = express();
+
+app.use(
+  HiSecure.middleware('api')  
+  // { cors: true, rateLimit: "relaxed", sanitize: true }
+);
+
+app.listen(3000, () => console.log("Server running"));
+```
+
+<h3 style="color:#A855F7;">✔ Using inside secureRoute()</h3>
+
+```bash
+
+router.post(
+  "/feedback",
+  ...secureRoute({
+    sanitize: true,
+    validate: z.object({
+      message: z.string().min(5),
+      rating: z.number().min(1).max(5)
+    }),
+  }),
+  handleFeedback
+);
+
+```
+
+
+</div> <br/> <!-- 🧩 FULL AUTH SECTION --> <div style="border-left:5px solid #F43F5E; padding:20px; border-radius:8px; background:#fafafa;"> <h2>🧩 Full Authentication Example</h2> <h3 style="color:#F43F5E;">🔐 Register User</h3>
+
+
+```bash
+export const registerUser = async (req, res) => {
+  const { name, email, password } = req.body;
+
+  const hashed = await HiSecure.hash(password);
+
+  const user = await User.create({ name, email, password: hashed });
+
+  const token = HiSecure.jwt.sign({ userId: user._id });
+
+  res.json({ message: "Registered", token });
+};
+
+```
+
+
+<h3 style="color:#F43F5E;">🔐 Login User</h3>
+
+
+```bash
+
+export const loginUser = async (req, res) => {
+  const { email, password } = req.body;
+
+  const user = await User.findOne({ email });
+
+  const valid = await HiSecure.verify(password, user.password);
+  if (!valid) return res.status(401).json({ error: "Invalid credentials" });
+
+  const token = HiSecure.jwt.sign({ userId: user._id });
+
+  res.json({ token });
+};
+
+
+```
+
+<h3 style="color:#F43F5E;">👤 Protected Route</h3>
+
+```bash
+
+router.get("/profile", HiSecure.auth({ required: true }), getProfile);
+
+```
+
+
+
+</div> <br/> <!-- ROUTES --> <div style="border-left:5px solid #F59E0B; padding:20px; border-radius:8px; background:#fafafa;"> <h2>📌 Routes Example</h2>
+
+
+```bash
+
+router.post("/register", 
+  HiSecure.validate(registerSchema), 
+  registerUser
+);
+
+router.post(
+  "/login",
+  HiSecure.rateLimit("strict"),
+  HiSecure.validate(loginSchema),
+  loginUser
+);
+
+router.get(
+  "/profile",
+  HiSecure.auth({ required: true }),
+  getProfile
+);
+
+
+```
+
+
+</div> <br/> <h2 align="center">🛠️ More features & docs coming soon…</h2>
+<h3 align="center">Made with 🔒 for secure Node.js apps</h3> 
+
+
+
+
+
+
+

package/src/adapters/ExpressRLAdapter.ts

@@ -1,41 +1,3 @@
-// import rateLimit from "express-rate-limit";
-// import { logger } from "../logging";
-// import { AdapterError } from "../core/errors/AdapterError";
-
-// export class ExpressRLAdapter {
-
-//     /**
-//      * Create express rate-limit middleware dynamically
-//      */
-//     getMiddleware(options: {
-//         windowMs?: number;
-//         max?: number;
-//         message?: any;
-//     } = {}) {
-
-//         try {
-//             const limiter = rateLimit({
-//                 windowMs: options.windowMs ?? 15 * 60 * 1000, // default
-//                 max: options.max ?? 100,
-//                 message: options.message ?? { error: "Too many requests" },
-//                 standardHeaders: true,
-//                 legacyHeaders: false,
-//             });
-
-//             return limiter;
-
-//         } catch (err: any) {
-//             logger.error("❌ ExpressRLAdapter: failed to create limiter", {
-//                 error: err?.message || err
-//             });
-//             throw new AdapterError("Express rate limiter creation failed.");
-//         }
-//     }
-// }
-
-
-
-
 // src/adapters/ExpressRLAdapter.ts - IMPROVED
 import rateLimit from "express-rate-limit";
 import { logger } from "../logging/index.js";

package/src/adapters/GoogleAdapter.ts

@@ -128,7 +128,9 @@
 // src/adapters/GoogleAdapter.ts - FIXED
 import { OAuth2Client, LoginTicket } from "google-auth-library";
 import { AdapterError } from "../core/errors/AdapterError.js";
-import { logWarn, logError } from "../logging/index.js";
+// import { logWarn, logError } from "../logging/index.js";
+
+import {logger} from '../logging';
 
 export interface GoogleTokenPayload {
     sub: string;
@@ -171,7 +173,7 @@ export class GoogleAdapter {
             const payload = ticket.getPayload();
             
             if (!payload) {
-                logWarn("GoogleAdapter: Empty payload");
+                logger.warn("GoogleAdapter: Empty payload");
                 throw new AdapterError("Invalid Google ID token payload.");
             }
 
@@ -191,7 +193,7 @@ export class GoogleAdapter {
             return result;
 
         } catch (err: any) {
-            logError("GoogleAdapter.verifyIdToken failed", { 
+            logger.error("GoogleAdapter.verifyIdToken failed", { 
                 error: err?.message,
                 hasClientId: !!this.clientId 
             });

package/src/adapters/JWTAdapter.ts

@@ -256,6 +256,7 @@ import jwt from "jsonwebtoken";
 import { randomUUID } from "crypto";  // Built-in Node.js
 import { AdapterError } from "../core/errors/AdapterError.js";
 import { logError } from "../logging/index.js";
+import { logger } from "../logging";
 
 export interface JWTAdapterOptions {
     secret: string;
@@ -286,7 +287,8 @@ export class JWTAdapter {
         }
 
         if (options.secret.length < 32) {
-            logError("⚠ JWT secret is too short (minimum 32 characters recommended)");
+            logger.warn("🚨 JWT secret shorter than 32 chars. Consider using stronger secret.");
+            // logError("⚠ JWT secret is too short (minimum 32 characters recommended)");
         }
 
         this.secret = options.secret;