hi-secure 1.0.0

package/dist/managers/HashManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HashManager.js","sourceRoot":"","sources":["../../src/managers/HashManager.ts"],"names":[],"mappings":";AAAA,oEAAoE;AACpE,yDAAyD;AACzD,6CAA6C;;;AAE7C,mCAAmC;AACnC,uDAAuD;AACvD,sCAAsC;AACtC,0DAA0D;AAC1D,6EAA6E;AAC7E,eAAe;AACf,uCAAuC;AACvC,0DAA0D;AAC1D,6EAA6E;AAC7E,sBAAsB;AAEtB,yBAAyB;AACzB,mDAAmD;AACnD,qCAAqC;AACrC,qCAAqC;AACrC,gBAAgB;AAChB,sCAAsC;AACtC,sDAAsD;AACtD,wDAAwD;AACxD,cAAc;AAEd,gBAAgB;AAChB,8DAA8D;AAC9D,+CAA+C;AAC/C,gBAAgB;AAChB,yDAAyD;AACzD,sBAAsB;AACtB,kEAAkE;AAClE,qCAAqC;AACrC,sFAAsF;AACtF,6CAA6C;AAC7C,wBAAwB;AAExB,iDAAiD;AACjD,gDAAgD;AAChD,4FAA4F;AAC5F,2BAA2B;AAC3B,sBAAsB;AAEtB,0BAA0B;AAC1B,uEAAuE;AACvE,iDAAiD;AACjD,oEAAoE;AACpE,yDAAyD;AACzD,4BAA4B;AAC5B,gDAAgD;AAChD,wEAAwE;AACxE,2BAA2B;AAC3B,sBAAsB;AACtB,kBAAkB;AAClB,cAAc;AAEd,gBAAgB;AAChB,oDAAoD;AACpD,sDAAsD;AACtD,gBAAgB;AAChB,4EAA4E;AAC5E,sBAAsB;AACtB,4EAA4E;AAC5E,qCAAqC;AACrC,+EAA+E;AAC/E,6CAA6C;AAC7C,wBAAwB;AAExB,iDAAiD;AACjD,gDAAgD;AAChD,2FAA2F;AAC3F,2BAA2B;AAC3B,sBAAsB;AAEtB,0BAA0B;AAC1B,iFAAiF;AACjF,iDAAiD;AACjD,mEAAmE;AACnE,yDAAyD;AACzD,4BAA4B;AAE5B,gDAAgD;AAChD,uEAAuE;AACvE,2BAA2B;AAC3B,sBAAsB;AACtB,kBAAkB;AAClB,cAAc;AACd,UAAU;AAQV,oEAAoE;AACpE,yDAAyD;AACzD,0CAA0C;AAE1C,6BAA6B;AAC7B,+CAA+C;AAC/C,kEAAkE;AAClE,OAAO;AAEP,gCAAgC;AAChC,oDAAoD;AACpD,8CAA8C;AAC9C,sDAAsD;AAEtD,sBAAsB;AACtB,gDAAgD;AAChD,0CAA0C;AAC1C,iDAAiD;AACjD,aAAa;AACb,mCAAmC;AACnC,mDAAmD;AACnD,qDAAqD;AACrD,WAAW;AAEX,sDAAsD;AACtD,mBAAmB;AACnB,+DAA+D;AAC/D,kCAAkC;AAClC,6EAA6E;AAC7E,0CAA0C;AAC1C,qBAAqB;AAErB,8CAA8C;AAC9C,6CAA6C;AAC7C,sFAAsF;AACtF,wBAAwB;AACxB,mBAAmB;AAEnB,uBAAuB;AACvB,oEAAoE;AACpE,8CAA8C;AAC9C,iEAAiE;AACjE,sDAAsD;AACtD,yBAAyB;AACzB,6CAA6C;AAC7C,qEAAqE;AACrE,wBAAwB;AACxB,mBAAmB;AACnB,eAAe;AACf,WAAW;AAEX,yEAAyE;AACzE,mBAAmB;AACnB,yEAAyE;AACzE,kCAAkC;AAClC,4EAA4E;AAC5E,0CAA0C;AAC1C,qBAAqB;AAErB,8CAA8C;AAC9C,6CAA6C;AAC7C,qFAAqF;AACrF,wBAAwB;AACxB,mBAAmB;AAEnB,uBAAuB;AACvB,8EAA8E;AAC9E,8CAA8C;AAC9C,gEAAgE;AAChE,sDAAsD;AACtD,yBAAyB;AACzB,6CAA6C;AAC7C,oEAAoE;AACpE,wBAAwB;AACxB,mBAAmB;AACnB,eAAe;AACf,WAAW;AACX,OAAO;AAIP,yCAAyC;AACzC,iEAAiE;AACjE,oEAAoE;AACpE,uCAAuC;AAEvC,0BAA0B;AAC1B,4CAA4C;AAC5C,+DAA+D;AAC/D,8BAA8B;AAC9B,IAAI;AAEJ,gCAAgC;AAChC,oBAAoB;AACpB,yBAAyB;AACzB,6BAA6B;AAC7B,IAAI;AAEJ,6BAA6B;AAC7B,iDAAiD;AACjD,2CAA2C;AAC3C,mDAAmD;AAEnD,mBAAmB;AACnB,6CAA6C;AAC7C,uCAAuC;AACvC,8CAA8C;AAC9C,UAAU;AACV,gCAAgC;AAChC,gDAAgD;AAChD,kDAAkD;AAClD,QAAQ;AAER,8FAA8F;AAC9F,gBAAgB;AAChB,kEAAkE;AAClE,uBAAuB;AACvB,wBAAwB;AACxB,kDAAkD;AAClD,sCAAsC;AACtC,iBAAiB;AACjB,+BAA+B;AAC/B,wDAAwD;AACxD,sCAAsC;AACtC,iDAAiD;AACjD,kBAAkB;AAElB,sEAAsE;AACtE,0CAA0C;AAC1C,+FAA+F;AAC/F,qBAAqB;AACrB,gBAAgB;AAEhB,oBAAoB;AACpB,uEAAuE;AAEvE,oDAAoD;AACpD,gFAAgF;AAChF,iDAAiD;AACjD,+CAA+C;AAC/C,sBAAsB;AAEtB,2BAA2B;AAC3B,4BAA4B;AAC5B,mEAAmE;AACnE,yCAAyC;AACzC,qBAAqB;AACrB,2CAA2C;AAC3C,8DAA8D;AAC9D,mDAAmD;AACnD,sBAAsB;AACtB,0CAA0C;AAC1C,kEAAkE;AAClE,qBAAqB;AACrB,gBAAgB;AAChB,YAAY;AACZ,QAAQ;AAER,sEAAsE;AACtE,uCAAuC;AACvC,gBAAgB;AAChB,sEAAsE;AACtE,sCAAsC;AACtC,uDAAuD;AACvD,8CAA8C;AAC9C,kBAAkB;AAElB,4CAA4C;AAC5C,0CAA0C;AAC1C,wBAAwB;AACxB,+EAA+E;AAC/E,+CAA+C;AAC/C,iEAAiE;AACjE,uDAAuD;AACvD,0BAA0B;AAC1B,8CAA8C;AAC9C,qEAAqE;AACrE,yBAAyB;AACzB,oBAAoB;AACpB,gBAAgB;AAEhB,sCAAsC;AACtC,8EAA8E;AAC9E,iBAAiB;AACjB,YAAY;AACZ,QAAQ;AACR,IAAI;AAGJ,+CAA+C;AAC/C,oEAA8D;AAE9D,wCAAoC;AAcpC,MAAa,WAAW;IAKpB,YACI,MAAiC,EACjC,cAA2B,EAC3B,eAAmC;QAEnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,OAAqC;QAC3D,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO;gBACH,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC9B,YAAY,EAAE,KAAK;aACtB,CAAC;QACN,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBACpC,KAAK,EAAE,GAAG,CAAC,OAAO;gBAClB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;aACjC,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBACnD,MAAM,IAAI,8BAAY,CAClB,oBAAoB,IAAI,CAAC,MAAM,CAAC,OAAO,iCAAiC,CAC3E,CAAC;YACN,CAAC;YAED,IAAI,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAEpD,iCAAiC;gBACjC,gBAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;oBACxD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBACzB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAC3B,CAAC,CAAC;gBAEH,OAAO;oBACH,IAAI;oBACJ,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ;oBAC3C,YAAY,EAAE,IAAI;iBACrB,CAAC;YACN,CAAC;YAAC,OAAO,WAAgB,EAAE,CAAC;gBACxB,gBAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;oBACtC,KAAK,EAAE,WAAW,EAAE,OAAO;iBAC9B,CAAC,CAAC;gBACH,MAAM,IAAI,8BAAY,CAClB,2CAA2C,CAC9C,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,MAAc;QACtC,4BAA4B;QAC5B,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,UAAe,EAAE,CAAC;YACvB,gBAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;gBACnC,KAAK,EAAE,UAAU,EAAE,OAAO;aAC7B,CAAC,CAAC;YAEH,6BAA6B;YAC7B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACD,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC5D,CAAC;gBAAC,OAAO,WAAgB,EAAE,CAAC;oBACxB,gBAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;wBACrC,KAAK,EAAE,WAAW,EAAE,OAAO;qBAC9B,CAAC,CAAC;oBACH,MAAM,IAAI,8BAAY,CAClB,0CAA0C,CAC7C,CAAC;gBACN,CAAC;YACL,CAAC;YAED,MAAM,IAAI,8BAAY,CAClB,2DAA2D,CAC9D,CAAC;QACN,CAAC;IACL,CAAC;CACJ;AAxFD,kCAwFC","sourcesContent":["// // // import { AdapterError } from \"../core/errors/AdapterError\";\r\n// // // import { HiSecureConfig } from \"../core/config\";\r\n// // // import { logger } from \"../logging\";\r\n\r\n// // // export class HashManager {\r\n// // //     private config: HiSecureConfig[\"hashing\"];\r\n// // //     private primaryAdapter: {\r\n// // //         hash: (value: string) => Promise<string>;\r\n// // //         verify: (value: string, hashed: string) => Promise<boolean>;\r\n// // //     };\r\n// // //     private fallbackAdapter: {\r\n// // //         hash: (value: string) => Promise<string>;\r\n// // //         verify: (value: string, hashed: string) => Promise<boolean>;\r\n// // //     } | null;\r\n\r\n// // //     constructor(\r\n// // //         config: HiSecureConfig[\"hashing\"],\r\n// // //         primaryAdapter: any,\r\n// // //         fallbackAdapter: any\r\n// // //     ) {\r\n// // //         this.config = config;\r\n// // //         this.primaryAdapter = primaryAdapter;\r\n// // //         this.fallbackAdapter = fallbackAdapter;\r\n// // //     }\r\n\r\n// // //     /**\r\n// // //      * Hash a password using primary adapter (Argon2)\r\n// // //      * If it fails → fallback (Bcrypt)\r\n// // //      */\r\n// // //     async hash(value: string): Promise<string> {\r\n// // //         try {\r\n// // //             return await this.primaryAdapter.hash(value);\r\n// // //         } catch (err: any) {\r\n// // //             logger.warn(\"⚠ Primary hashing failed — switching to fallback\", {\r\n// // //                 error: err?.message,\r\n// // //             });\r\n\r\n// // //             if (!this.fallbackAdapter) {\r\n// // //                 throw new AdapterError(\r\n// // //                     \"Primary hashing failed and no fallback adapter is configured.\"\r\n// // //                 );\r\n// // //             }\r\n\r\n// // //             try {\r\n// // //                 return await this.fallbackAdapter.hash(value);\r\n// // //             } catch (fallbackErr: any) {\r\n// // //                 logger.error(\"❌ Fallback hashing failed\", {\r\n// // //                     error: fallbackErr?.message,\r\n// // //                 });\r\n// // //                 throw new AdapterError(\r\n// // //                     \"Both primary and fallback hashing failed.\"\r\n// // //                 );\r\n// // //             }\r\n// // //         }\r\n// // //     }\r\n\r\n// // //     /**\r\n// // //      * Verify using primary hashing method.\r\n// // //      * If mismatch OR failure → use fallback.\r\n// // //      */\r\n// // //     async verify(value: string, hashed: string): Promise<boolean> {\r\n// // //         try {\r\n// // //             return await this.primaryAdapter.verify(value, hashed);\r\n// // //         } catch (err: any) {\r\n// // //             logger.warn(\"⚠ Primary verify failed — trying fallback\", {\r\n// // //                 error: err?.message,\r\n// // //             });\r\n\r\n// // //             if (!this.fallbackAdapter) {\r\n// // //                 throw new AdapterError(\r\n// // //                     \"Primary verify failed and no fallback adapter is configured.\"\r\n// // //                 );\r\n// // //             }\r\n\r\n// // //             try {\r\n// // //                 return await this.fallbackAdapter.verify(value, hashed);\r\n// // //             } catch (fallbackErr: any) {\r\n// // //                 logger.error(\"❌ Fallback verify failed\", {\r\n// // //                     error: fallbackErr?.message,\r\n// // //                 });\r\n\r\n// // //                 throw new AdapterError(\r\n// // //                     \"Both primary and fallback verify failed.\"\r\n// // //                 );\r\n// // //             }\r\n// // //         }\r\n// // //     }\r\n// // // }\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n// // import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// // import { HiSecureConfig } from \"../core/config.js\";\r\n// // import { logger } from \"../logging\";\r\n\r\n// // interface HashAdapter {\r\n// //     hash(value: string): Promise<string>;\r\n// //     verify(value: string, hashed: string): Promise<boolean>;\r\n// // }\r\n\r\n// // export class HashManager {\r\n// //     private config: HiSecureConfig[\"hashing\"];\r\n// //     private primaryAdapter: HashAdapter;\r\n// //     private fallbackAdapter: HashAdapter | null;\r\n\r\n// //     constructor(\r\n// //         config: HiSecureConfig[\"hashing\"],\r\n// //         primaryAdapter: HashAdapter,\r\n// //         fallbackAdapter: HashAdapter | null\r\n// //     ) {\r\n// //         this.config = config;\r\n// //         this.primaryAdapter = primaryAdapter;\r\n// //         this.fallbackAdapter = fallbackAdapter;\r\n// //     }\r\n\r\n// //     async hash(value: string): Promise<string> {\r\n// //         try {\r\n// //             return await this.primaryAdapter.hash(value);\r\n// //         } catch (err: any) {\r\n// //             logger.warn(\"⚠ Primary hashing failed — trying fallback\", {\r\n// //                 error: err?.message,\r\n// //             });\r\n\r\n// //             if (!this.fallbackAdapter) {\r\n// //                 throw new AdapterError(\r\n// //                     \"Primary hashing failed and no fallback adapter configured.\"\r\n// //                 );\r\n// //             }\r\n\r\n// //             try {\r\n// //                 return await this.fallbackAdapter.hash(value);\r\n// //             } catch (fallbackErr: any) {\r\n// //                 logger.error(\"❌ Fallback hashing failed\", {\r\n// //                     error: fallbackErr?.message,\r\n// //                 });\r\n// //                 throw new AdapterError(\r\n// //                     \"Both primary and fallback hashing failed.\"\r\n// //                 );\r\n// //             }\r\n// //         }\r\n// //     }\r\n\r\n// //     async verify(value: string, hashed: string): Promise<boolean> {\r\n// //         try {\r\n// //             return await this.primaryAdapter.verify(value, hashed);\r\n// //         } catch (err: any) {\r\n// //             logger.warn(\"⚠ Primary verify failed — trying fallback\", {\r\n// //                 error: err?.message,\r\n// //             });\r\n\r\n// //             if (!this.fallbackAdapter) {\r\n// //                 throw new AdapterError(\r\n// //                     \"Primary verify failed and no fallback adapter configured.\"\r\n// //                 );\r\n// //             }\r\n\r\n// //             try {\r\n// //                 return await this.fallbackAdapter.verify(value, hashed);\r\n// //             } catch (fallbackErr: any) {\r\n// //                 logger.error(\"❌ Fallback verify failed\", {\r\n// //                     error: fallbackErr?.message,\r\n// //                 });\r\n// //                 throw new AdapterError(\r\n// //                     \"Both primary and fallback verify failed.\"\r\n// //                 );\r\n// //             }\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n\r\n// // src/managers/HashManager.ts - FIXED\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { HiSecureConfig } from \"../core/types/HiSecureConfig.js\";\r\n// import { logger } from \"../logging\";\r\n\r\n// interface HashAdapter {\r\n//     hash(value: string): Promise<string>;\r\n//     verify(value: string, hashed: string): Promise<boolean>;\r\n//     getAlgorithm(): string;\r\n// }\r\n\r\n// export interface HashResult {\r\n//     hash: string;\r\n//     algorithm: string;\r\n//     usedFallback: boolean;\r\n// }\r\n\r\n// export class HashManager {\r\n//     private config: HiSecureConfig[\"hashing\"];\r\n//     private primaryAdapter: HashAdapter;\r\n//     private fallbackAdapter: HashAdapter | null;\r\n\r\n//     constructor(\r\n//         config: HiSecureConfig[\"hashing\"],\r\n//         primaryAdapter: HashAdapter,\r\n//         fallbackAdapter: HashAdapter | null\r\n//     ) {\r\n//         this.config = config;\r\n//         this.primaryAdapter = primaryAdapter;\r\n//         this.fallbackAdapter = fallbackAdapter;\r\n//     }\r\n\r\n//     async hash(value: string, options?: { allowFallback?: boolean }): Promise<HashResult> {\r\n//         try {\r\n//             const hash = await this.primaryAdapter.hash(value);\r\n//             return {\r\n//                 hash,\r\n//                 algorithm: this.config.primary,\r\n//                 usedFallback: false\r\n//             };\r\n//         } catch (err: any) {\r\n//             logger.warn(\"⚠ Primary hashing failed\", {\r\n//                 error: err.message,\r\n//                 algorithm: this.config.primary\r\n//             });\r\n\r\n//             if (!options?.allowFallback || !this.fallbackAdapter) {\r\n//                 throw new AdapterError(\r\n//                     `Primary hashing (${this.config.primary}) failed. Fallback not allowed.`\r\n//                 );\r\n//             }\r\n\r\n//             try {\r\n//                 const hash = await this.fallbackAdapter.hash(value);\r\n                \r\n//                 // Log security downgrade warning\r\n//                 logger.warn(\"⚠ SECURITY DOWNGRADE: Using fallback hashing\", {\r\n//                     from: this.config.primary,\r\n//                     to: this.config.fallback\r\n//                 });\r\n                \r\n//                 return {\r\n//                     hash,\r\n//                     algorithm: this.config.fallback || 'bcrypt',\r\n//                     usedFallback: true\r\n//                 };\r\n//             } catch (fallbackErr: any) {\r\n//                 logger.error(\"❌ Fallback hashing failed\", {\r\n//                     error: fallbackErr?.message,\r\n//                 });\r\n//                 throw new AdapterError(\r\n//                     \"Both primary and fallback hashing failed.\"\r\n//                 );\r\n//             }\r\n//         }\r\n//     }\r\n\r\n//     async verify(value: string, hashed: string): Promise<boolean> {\r\n//         // Try primary adapter first\r\n//         try {\r\n//             return await this.primaryAdapter.verify(value, hashed);\r\n//         } catch (primaryErr: any) {\r\n//             logger.warn(\"⚠ Primary verify failed\", {\r\n//                 error: primaryErr?.message,\r\n//             });\r\n\r\n//             // If fallback exists, try it\r\n//             if (this.fallbackAdapter) {\r\n//                 try {\r\n//                     return await this.fallbackAdapter.verify(value, hashed);\r\n//                 } catch (fallbackErr: any) {\r\n//                     logger.error(\"❌ Fallback verify failed\", {\r\n//                         error: fallbackErr?.message,\r\n//                     });\r\n//                     throw new AdapterError(\r\n//                         \"Both primary and fallback verify failed.\"\r\n//                     );\r\n//                 }\r\n//             }\r\n            \r\n//             throw new AdapterError(\r\n//                 \"Primary verify failed and no fallback adapter configured.\"\r\n//             );\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n// src/managers/HashManager.ts - COMPLETE FIXED\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { HiSecureConfig } from \"../core/types/HiSecureConfig.js\";\r\nimport { logger } from \"../logging\";\r\n\r\ninterface HashAdapter {\r\n    hash(value: string): Promise<string>;\r\n    verify(value: string, hashed: string): Promise<boolean>;\r\n    // ❌ getAlgorithm() REMOVED - Not needed in adapters\r\n}\r\n\r\nexport interface HashResult {\r\n    hash: string;\r\n    algorithm: string;\r\n    usedFallback: boolean;\r\n}\r\n\r\nexport class HashManager {\r\n    private config: HiSecureConfig[\"hashing\"];\r\n    private primaryAdapter: HashAdapter;\r\n    private fallbackAdapter: HashAdapter | null;\r\n\r\n    constructor(\r\n        config: HiSecureConfig[\"hashing\"],\r\n        primaryAdapter: HashAdapter,\r\n        fallbackAdapter: HashAdapter | null\r\n    ) {\r\n        this.config = config;\r\n        this.primaryAdapter = primaryAdapter;\r\n        this.fallbackAdapter = fallbackAdapter;\r\n    }\r\n\r\n    async hash(value: string, options?: { allowFallback?: boolean }): Promise<HashResult> {\r\n        try {\r\n            const hash = await this.primaryAdapter.hash(value);\r\n            return {\r\n                hash,\r\n                algorithm: this.config.primary,\r\n                usedFallback: false\r\n            };\r\n        } catch (err: any) {\r\n            logger.warn(\"⚠ Primary hashing failed\", {\r\n                error: err.message,\r\n                algorithm: this.config.primary\r\n            });\r\n\r\n            if (!options?.allowFallback || !this.fallbackAdapter) {\r\n                throw new AdapterError(\r\n                    `Primary hashing (${this.config.primary}) failed. Fallback not allowed.`\r\n                );\r\n            }\r\n\r\n            try {\r\n                const hash = await this.fallbackAdapter.hash(value);\r\n                \r\n                // Log security downgrade warning\r\n                logger.warn(\"⚠ SECURITY DOWNGRADE: Using fallback hashing\", {\r\n                    from: this.config.primary,\r\n                    to: this.config.fallback\r\n                });\r\n                \r\n                return {\r\n                    hash,\r\n                    algorithm: this.config.fallback || 'bcrypt',\r\n                    usedFallback: true\r\n                };\r\n            } catch (fallbackErr: any) {\r\n                logger.error(\"❌ Fallback hashing failed\", {\r\n                    error: fallbackErr?.message,\r\n                });\r\n                throw new AdapterError(\r\n                    \"Both primary and fallback hashing failed.\"\r\n                );\r\n            }\r\n        }\r\n    }\r\n\r\n    async verify(value: string, hashed: string): Promise<boolean> {\r\n        // Try primary adapter first\r\n        try {\r\n            return await this.primaryAdapter.verify(value, hashed);\r\n        } catch (primaryErr: any) {\r\n            logger.warn(\"⚠ Primary verify failed\", {\r\n                error: primaryErr?.message,\r\n            });\r\n\r\n            // If fallback exists, try it\r\n            if (this.fallbackAdapter) {\r\n                try {\r\n                    return await this.fallbackAdapter.verify(value, hashed);\r\n                } catch (fallbackErr: any) {\r\n                    logger.error(\"❌ Fallback verify failed\", {\r\n                        error: fallbackErr?.message,\r\n                    });\r\n                    throw new AdapterError(\r\n                        \"Both primary and fallback verify failed.\"\r\n                    );\r\n                }\r\n            }\r\n            \r\n            throw new AdapterError(\r\n                \"Primary verify failed and no fallback adapter configured.\"\r\n            );\r\n        }\r\n    }\r\n}"]}

package/dist/managers/JsonManager.d.ts

@@ -0,0 +1,6 @@
+export declare class JsonManager {
+    middleware(options?: any): import("connect").NextHandleFunction;
+    urlencoded(options?: any): import("connect").NextHandleFunction;
+    queryParser(options?: any): (req: any, res: any, next: any) => void;
+}
+//# sourceMappingURL=JsonManager.d.ts.map

package/dist/managers/JsonManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonManager.d.ts","sourceRoot":"","sources":["../../src/managers/JsonManager.ts"],"names":[],"mappings":"AA0FA,qBAAa,WAAW;IAEpB,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG;IAexB,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG;IAgBxB,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,IACb,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG;CAwB5C"}

package/dist/managers/JsonManager.js

@@ -0,0 +1,142 @@
+"use strict";
+// // import express from "express";
+// // import { logger } from "../logging";
+// // import { AdapterError } from "../core/errors/AdapterError";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JsonManager = void 0;
+// // export class JsonManager {
+// //     /**
+// //      * JSON parser middleware — global + dynamic override
+// //      */
+// //     middleware(options?: any) {
+// //         try {
+// //             const opts = options || {};
+// //             return express.json(opts);
+// //         } catch (err: any) {
+// //             logger.error("❌ JSON Manager: failed to create JSON parser", {
+// //                 error: err?.message || err
+// //             });
+// //             throw new AdapterError("JSON parser initialization failed.");
+// //         }
+// //     }
+// //     /**
+// //      * URL-encoded parser — same global + dynamic style
+// //      */
+// //     urlencoded(options?: any) {
+// //         try {
+// //             const opts = options || { extended: true };
+// //             return express.urlencoded(opts);
+// //         } catch (err: any) {
+// //             logger.error("❌ JSON Manager: failed to create urlencoded parser", {
+// //                 error: err?.message || err
+// //             });
+// //             throw new AdapterError("URL-encoded parser initialization failed.");
+// //         }
+// //     }
+// // }
+// import express from "express";
+// import qs from "qs";
+// import { logger } from "../logging";
+// import { AdapterError } from "../core/errors/AdapterError.js";
+// export class JsonManager {
+//     // JSON parser  
+//     middleware(options?: any) {
+//         try {
+//             return express.json(options || {});
+//         } catch (err: any) {
+//             logger.error("❌ JSON Manager: failed to create JSON parser");
+//             throw new AdapterError("JSON parser initialization failed.");
+//         }
+//     }
+//     // URL-encoded parser  
+//     urlencoded(options?: any) {
+//         try {
+//             const opts = options || { extended: true };
+//             return express.urlencoded(opts);
+//         } catch (err: any) {
+//             logger.error("❌ URL-encoded parser failed");
+//             throw new AdapterError("URL-encoded parser initialization failed.");
+//         }
+//     }
+//     // NEW: Query-string parser  
+//     queryParser() {
+//         return (req: any, res: any, next: any) => {
+//             try {
+//                 req.query = qs.parse(req.url.split("?")[1] || "");
+//             } catch (err: any) {
+//                 logger.error("❌ Failed to parse query", { error: err?.message });
+//                 throw new AdapterError("Query parsing failed.");
+//             }
+//             next();
+//         };
+//     }
+// }
+// src/managers/JsonManager.ts - FIXED
+const express_1 = __importDefault(require("express"));
+const qs_1 = __importDefault(require("qs"));
+const logging_1 = require("../logging");
+const AdapterError_js_1 = require("../core/errors/AdapterError.js");
+class JsonManager {
+    // JSON parser
+    middleware(options) {
+        try {
+            const defaultOptions = {
+                limit: '1mb',
+                inflate: true,
+                strict: true
+            };
+            return express_1.default.json({ ...defaultOptions, ...(options || {}) });
+        }
+        catch (err) {
+            logging_1.logger.error("❌ JSON Manager: failed to create JSON parser");
+            throw new AdapterError_js_1.AdapterError("JSON parser initialization failed.");
+        }
+    }
+    // URL-encoded parser
+    urlencoded(options) {
+        try {
+            const defaultOptions = {
+                extended: true,
+                limit: '1mb',
+                parameterLimit: 1000
+            };
+            const opts = { ...defaultOptions, ...(options || {}) };
+            return express_1.default.urlencoded(opts);
+        }
+        catch (err) {
+            logging_1.logger.error("❌ URL-encoded parser failed");
+            throw new AdapterError_js_1.AdapterError("URL-encoded parser initialization failed.");
+        }
+    }
+    // Query-string parser (doesn't override Express's query)
+    queryParser(options) {
+        return (req, res, next) => {
+            try {
+                // Only parse if not already parsed by Express
+                if (!req.parsedQuery && req.url.includes('?')) {
+                    const queryString = req.url.split("?")[1] || "";
+                    const parsed = qs_1.default.parse(queryString, {
+                        depth: 5, // Prevent deep nesting attacks
+                        parameterLimit: 100,
+                        ...options
+                    });
+                    // Store separately, don't override req.query
+                    req.parsedQuery = parsed;
+                    logging_1.logger.debug("🔍 Query parsed", {
+                        keys: Object.keys(parsed)
+                    });
+                }
+                next();
+            }
+            catch (err) {
+                logging_1.logger.error("❌ Failed to parse query", { error: err?.message });
+                next(new AdapterError_js_1.AdapterError("Query parsing failed."));
+            }
+        };
+    }
+}
+exports.JsonManager = JsonManager;
+//# sourceMappingURL=JsonManager.js.map

package/dist/managers/JsonManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonManager.js","sourceRoot":"","sources":["../../src/managers/JsonManager.ts"],"names":[],"mappings":";AAAA,oCAAoC;AACpC,0CAA0C;AAC1C,iEAAiE;;;;;;AAEjE,gCAAgC;AAEhC,aAAa;AACb,+DAA+D;AAC/D,aAAa;AACb,qCAAqC;AACrC,mBAAmB;AACnB,6CAA6C;AAC7C,4CAA4C;AAC5C,kCAAkC;AAClC,gFAAgF;AAChF,gDAAgD;AAChD,qBAAqB;AACrB,+EAA+E;AAC/E,eAAe;AACf,WAAW;AAEX,aAAa;AACb,6DAA6D;AAC7D,aAAa;AACb,qCAAqC;AACrC,mBAAmB;AACnB,6DAA6D;AAC7D,kDAAkD;AAClD,kCAAkC;AAClC,sFAAsF;AACtF,gDAAgD;AAChD,qBAAqB;AACrB,sFAAsF;AACtF,eAAe;AACf,WAAW;AACX,OAAO;AAIP,iCAAiC;AACjC,uBAAuB;AACvB,uCAAuC;AACvC,iEAAiE;AAEjE,6BAA6B;AAE7B,uBAAuB;AACvB,kCAAkC;AAClC,gBAAgB;AAChB,kDAAkD;AAClD,+BAA+B;AAC/B,4EAA4E;AAC5E,4EAA4E;AAC5E,YAAY;AACZ,QAAQ;AAER,8BAA8B;AAC9B,kCAAkC;AAClC,gBAAgB;AAChB,0DAA0D;AAC1D,+CAA+C;AAC/C,+BAA+B;AAC/B,2DAA2D;AAC3D,mFAAmF;AACnF,YAAY;AACZ,QAAQ;AAER,oCAAoC;AACpC,sBAAsB;AACtB,sDAAsD;AACtD,oBAAoB;AACpB,qEAAqE;AACrE,mCAAmC;AACnC,oFAAoF;AACpF,mEAAmE;AACnE,gBAAgB;AAChB,sBAAsB;AACtB,aAAa;AACb,QAAQ;AACR,IAAI;AAKJ,sCAAsC;AACtC,sDAA8B;AAC9B,4CAAoB;AACpB,wCAAoC;AACpC,oEAA8D;AAE9D,MAAa,WAAW;IACpB,cAAc;IACd,UAAU,CAAC,OAAa;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI;aACf,CAAC;YACF,OAAO,iBAAO,CAAC,IAAI,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC7D,MAAM,IAAI,8BAAY,CAAC,oCAAoC,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IAED,qBAAqB;IACrB,UAAU,CAAC,OAAa;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,KAAK;gBACZ,cAAc,EAAE,IAAI;aACvB,CAAC;YACF,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,OAAO,iBAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC5C,MAAM,IAAI,8BAAY,CAAC,2CAA2C,CAAC,CAAC;QACxE,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,WAAW,CAAC,OAAa;QACrB,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;YACrC,IAAI,CAAC;gBACD,8CAA8C;gBAC9C,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5C,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAChD,MAAM,MAAM,GAAG,YAAE,CAAC,KAAK,CAAC,WAAW,EAAE;wBACjC,KAAK,EAAE,CAAC,EAAE,+BAA+B;wBACzC,cAAc,EAAE,GAAG;wBACnB,GAAG,OAAO;qBACb,CAAC,CAAC;oBAEH,6CAA6C;oBAC7C,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC;oBACzB,gBAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;wBAC5B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;qBAC5B,CAAC,CAAC;gBACP,CAAC;gBACD,IAAI,EAAE,CAAC;YACX,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,gBAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;gBACjE,IAAI,CAAC,IAAI,8BAAY,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACpD,CAAC;QACL,CAAC,CAAC;IACN,CAAC;CACJ;AA1DD,kCA0DC","sourcesContent":["// // import express from \"express\";\r\n// // import { logger } from \"../logging\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError\";\r\n\r\n// // export class JsonManager {\r\n\r\n// //     /**\r\n// //      * JSON parser middleware — global + dynamic override\r\n// //      */\r\n// //     middleware(options?: any) {\r\n// //         try {\r\n// //             const opts = options || {};\r\n// //             return express.json(opts);\r\n// //         } catch (err: any) {\r\n// //             logger.error(\"❌ JSON Manager: failed to create JSON parser\", {\r\n// //                 error: err?.message || err\r\n// //             });\r\n// //             throw new AdapterError(\"JSON parser initialization failed.\");\r\n// //         }\r\n// //     }\r\n\r\n// //     /**\r\n// //      * URL-encoded parser — same global + dynamic style\r\n// //      */\r\n// //     urlencoded(options?: any) {\r\n// //         try {\r\n// //             const opts = options || { extended: true };\r\n// //             return express.urlencoded(opts);\r\n// //         } catch (err: any) {\r\n// //             logger.error(\"❌ JSON Manager: failed to create urlencoded parser\", {\r\n// //                 error: err?.message || err\r\n// //             });\r\n// //             throw new AdapterError(\"URL-encoded parser initialization failed.\");\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n\r\n// import express from \"express\";\r\n// import qs from \"qs\";\r\n// import { logger } from \"../logging\";\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\n// export class JsonManager {\r\n\r\n//     // JSON parser  \r\n//     middleware(options?: any) {\r\n//         try {\r\n//             return express.json(options || {});\r\n//         } catch (err: any) {\r\n//             logger.error(\"❌ JSON Manager: failed to create JSON parser\");\r\n//             throw new AdapterError(\"JSON parser initialization failed.\");\r\n//         }\r\n//     }\r\n\r\n//     // URL-encoded parser  \r\n//     urlencoded(options?: any) {\r\n//         try {\r\n//             const opts = options || { extended: true };\r\n//             return express.urlencoded(opts);\r\n//         } catch (err: any) {\r\n//             logger.error(\"❌ URL-encoded parser failed\");\r\n//             throw new AdapterError(\"URL-encoded parser initialization failed.\");\r\n//         }\r\n//     }\r\n\r\n//     // NEW: Query-string parser  \r\n//     queryParser() {\r\n//         return (req: any, res: any, next: any) => {\r\n//             try {\r\n//                 req.query = qs.parse(req.url.split(\"?\")[1] || \"\");\r\n//             } catch (err: any) {\r\n//                 logger.error(\"❌ Failed to parse query\", { error: err?.message });\r\n//                 throw new AdapterError(\"Query parsing failed.\");\r\n//             }\r\n//             next();\r\n//         };\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\n// src/managers/JsonManager.ts - FIXED\r\nimport express from \"express\";\r\nimport qs from \"qs\";\r\nimport { logger } from \"../logging\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\nexport class JsonManager {\r\n    // JSON parser\r\n    middleware(options?: any) {\r\n        try {\r\n            const defaultOptions = {\r\n                limit: '1mb',\r\n                inflate: true,\r\n                strict: true\r\n            };\r\n            return express.json({ ...defaultOptions, ...(options || {}) });\r\n        } catch (err: any) {\r\n            logger.error(\"❌ JSON Manager: failed to create JSON parser\");\r\n            throw new AdapterError(\"JSON parser initialization failed.\");\r\n        }\r\n    }\r\n\r\n    // URL-encoded parser\r\n    urlencoded(options?: any) {\r\n        try {\r\n            const defaultOptions = {\r\n                extended: true,\r\n                limit: '1mb',\r\n                parameterLimit: 1000\r\n            };\r\n            const opts = { ...defaultOptions, ...(options || {}) };\r\n            return express.urlencoded(opts);\r\n        } catch (err: any) {\r\n            logger.error(\"❌ URL-encoded parser failed\");\r\n            throw new AdapterError(\"URL-encoded parser initialization failed.\");\r\n        }\r\n    }\r\n\r\n    // Query-string parser (doesn't override Express's query)\r\n    queryParser(options?: any) {\r\n        return (req: any, res: any, next: any) => {\r\n            try {\r\n                // Only parse if not already parsed by Express\r\n                if (!req.parsedQuery && req.url.includes('?')) {\r\n                    const queryString = req.url.split(\"?\")[1] || \"\";\r\n                    const parsed = qs.parse(queryString, {\r\n                        depth: 5, // Prevent deep nesting attacks\r\n                        parameterLimit: 100,\r\n                        ...options\r\n                    });\r\n                    \r\n                    // Store separately, don't override req.query\r\n                    req.parsedQuery = parsed;\r\n                    logger.debug(\"🔍 Query parsed\", {\r\n                        keys: Object.keys(parsed)\r\n                    });\r\n                }\r\n                next();\r\n            } catch (err: any) {\r\n                logger.error(\"❌ Failed to parse query\", { error: err?.message });\r\n                next(new AdapterError(\"Query parsing failed.\"));\r\n            }\r\n        };\r\n    }\r\n}"]}

package/dist/managers/RateLimitManager.d.ts

@@ -0,0 +1,16 @@
+import { HiSecureConfig } from "../core/types/HiSecureConfig.js";
+interface RateLimiterAdapter {
+    getMiddleware: (options?: any) => any;
+}
+export declare class RateLimitManager {
+    private config;
+    private primaryAdapter;
+    private fallbackAdapter;
+    constructor(config: HiSecureConfig["rateLimiter"], primaryAdapter: RateLimiterAdapter, fallbackAdapter: RateLimiterAdapter | null);
+    middleware(opts?: {
+        mode?: "strict" | "relaxed" | "api";
+        options?: any;
+    }): any;
+}
+export {};
+//# sourceMappingURL=RateLimitManager.d.ts.map

package/dist/managers/RateLimitManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RateLimitManager.d.ts","sourceRoot":"","sources":["../../src/managers/RateLimitManager.ts"],"names":[],"mappings":"AAyPA,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAIjE,UAAU,kBAAkB;IACxB,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,CAAC;CACzC;AAED,qBAAa,gBAAgB;IACzB,OAAO,CAAC,MAAM,CAAgC;IAC9C,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,eAAe,CAA4B;gBAG/C,MAAM,EAAE,cAAc,CAAC,aAAa,CAAC,EACrC,cAAc,EAAE,kBAAkB,EAClC,eAAe,EAAE,kBAAkB,GAAG,IAAI;IAO9C,UAAU,CAAC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAA;KAAE;CA+F3E"}

package/dist/managers/RateLimitManager.js

@@ -0,0 +1,108 @@
+"use strict";
+// // // src/managers/RateLimitManager.ts - COMPLETE FIXED
+// // import { HiSecureConfig } from "../core/types/HiSecureConfig.js";
+// // import { AdapterError } from "../core/errors/AdapterError.js";
+// // import { logger } from "../logging";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RateLimitManager = void 0;
+const AdapterError_js_1 = require("../core/errors/AdapterError.js");
+const logging_1 = require("../logging");
+class RateLimitManager {
+    constructor(config, primaryAdapter, fallbackAdapter) {
+        this.config = config;
+        this.primaryAdapter = primaryAdapter;
+        this.fallbackAdapter = fallbackAdapter;
+    }
+    middleware(opts) {
+        let finalOptions = {};
+        // Handle presets (user cannot override these)
+        if (opts?.mode === "strict") {
+            finalOptions = {
+                windowMs: 10000,
+                max: 5,
+                // ❌ REMOVED: points: 5,
+                message: "Too many requests, please slow down."
+            };
+        }
+        else if (opts?.mode === "relaxed") {
+            finalOptions = {
+                windowMs: 60000,
+                max: 100,
+                // ❌ REMOVED: points: 100,
+                message: "Rate limit exceeded."
+            };
+        }
+        else if (opts?.mode === "api") {
+            finalOptions = {
+                windowMs: 15 * 60 * 1000, // 15 minutes
+                max: 100,
+                // ❌ REMOVED: points: 100,
+                message: "API rate limit exceeded."
+            };
+        }
+        else {
+            // Use defaults
+            finalOptions = {
+                windowMs: this.config.windowMs,
+                max: this.config.maxRequests,
+                message: this.config.message,
+                standardHeaders: true, // ✅ ADD
+                legacyHeaders: false // ✅ ADD
+            };
+        }
+        // Apply custom options WITHOUT overriding preset values
+        if (opts?.options) {
+            // Only allow specific overrides, not preset overrides
+            const allowedOverrides = ['message', 'skipFailedRequests', 'standardHeaders', 'legacyHeaders'];
+            for (const key of allowedOverrides) {
+                if (opts.options[key] !== undefined) {
+                    finalOptions[key] = opts.options[key];
+                }
+            }
+            // Log if user tried to override preset
+            const attemptedOverrides = Object.keys(opts.options).filter(k => !allowedOverrides.includes(k) && k !== 'mode');
+            if (attemptedOverrides.length > 0) {
+                logging_1.logger.warn("⚠ Rate limit overrides ignored", {
+                    preset: opts?.mode || 'default',
+                    ignoredOptions: attemptedOverrides
+                });
+            }
+        }
+        // Add v8+ options if not present
+        if (finalOptions.standardHeaders === undefined) {
+            finalOptions.standardHeaders = true;
+        }
+        if (finalOptions.legacyHeaders === undefined) {
+            finalOptions.legacyHeaders = false;
+        }
+        // Try primary adapter
+        try {
+            logging_1.logger.info("📌 Applying rate limiting", {
+                mode: opts?.mode || 'default',
+                windowMs: finalOptions.windowMs,
+                max: finalOptions.max
+            });
+            return this.primaryAdapter.getMiddleware(finalOptions);
+        }
+        catch (err) {
+            logging_1.logger.warn("⚠ Primary rate limiter failed → fallback", {
+                error: err?.message
+            });
+            if (!this.fallbackAdapter) {
+                throw new AdapterError_js_1.AdapterError("Rate limiters failed; no fallback adapter.");
+            }
+            try {
+                logging_1.logger.info("📌 Using fallback rate limiter");
+                return this.fallbackAdapter.getMiddleware(finalOptions);
+            }
+            catch (fallbackErr) {
+                logging_1.logger.error("❌ Fallback limiter also failed", {
+                    error: fallbackErr?.message
+                });
+                throw new AdapterError_js_1.AdapterError("Both primary and fallback limiters failed.");
+            }
+        }
+    }
+}
+exports.RateLimitManager = RateLimitManager;
+//# sourceMappingURL=RateLimitManager.js.map

package/dist/managers/RateLimitManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RateLimitManager.js","sourceRoot":"","sources":["../../src/managers/RateLimitManager.ts"],"names":[],"mappings":";AAEA,0DAA0D;AAC1D,uEAAuE;AACvE,oEAAoE;AACpE,0CAA0C;;;AAqP1C,oEAA8D;AAC9D,wCAAoC;AAMpC,MAAa,gBAAgB;IAKzB,YACI,MAAqC,EACrC,cAAkC,EAClC,eAA0C;QAE1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IAC3C,CAAC;IAED,UAAU,CAAC,IAA6D;QACpE,IAAI,YAAY,GAAQ,EAAE,CAAC;QAE3B,8CAA8C;QAC9C,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,YAAY,GAAG;gBACX,QAAQ,EAAE,KAAM;gBAChB,GAAG,EAAE,CAAC;gBACN,wBAAwB;gBACxB,OAAO,EAAE,sCAAsC;aAClD,CAAC;QACN,CAAC;aAAM,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,YAAY,GAAG;gBACX,QAAQ,EAAE,KAAM;gBAChB,GAAG,EAAE,GAAG;gBACR,0BAA0B;gBAC1B,OAAO,EAAE,sBAAsB;aAClC,CAAC;QACN,CAAC;aAAM,IAAI,IAAI,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;YAC9B,YAAY,GAAG;gBACX,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;gBACvC,GAAG,EAAE,GAAG;gBACR,0BAA0B;gBAC1B,OAAO,EAAE,0BAA0B;aACtC,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,eAAe;YACf,YAAY,GAAG;gBACX,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBAC5B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC5B,eAAe,EAAE,IAAI,EAAO,QAAQ;gBACpC,aAAa,EAAE,KAAK,CAAQ,QAAQ;aACvC,CAAC;QACN,CAAC;QAED,wDAAwD;QACxD,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;YAChB,sDAAsD;YACtD,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC;YAC/F,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;oBAClC,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1C,CAAC;YACL,CAAC;YAED,uCAAuC;YACvC,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CACvD,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CACrD,CAAC;YACF,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,gBAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBAC1C,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,SAAS;oBAC/B,cAAc,EAAE,kBAAkB;iBACrC,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,iCAAiC;QACjC,IAAI,YAAY,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC7C,YAAY,CAAC,eAAe,GAAG,IAAI,CAAC;QACxC,CAAC;QACD,IAAI,YAAY,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC3C,YAAY,CAAC,aAAa,GAAG,KAAK,CAAC;QACvC,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC;YACD,gBAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;gBACrC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,SAAS;gBAC7B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,GAAG,EAAE,YAAY,CAAC,GAAG;aACxB,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;gBACpD,KAAK,EAAE,GAAG,EAAE,OAAO;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBACxB,MAAM,IAAI,8BAAY,CAAC,4CAA4C,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,CAAC;gBACD,gBAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBAC9C,OAAO,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,WAAgB,EAAE,CAAC;gBACxB,gBAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;oBAC3C,KAAK,EAAE,WAAW,EAAE,OAAO;iBAC9B,CAAC,CAAC;gBACH,MAAM,IAAI,8BAAY,CAAC,4CAA4C,CAAC,CAAC;YACzE,CAAC;QACL,CAAC;IACL,CAAC;CACJ;AA9GD,4CA8GC","sourcesContent":["\r\n\r\n// // // src/managers/RateLimitManager.ts - COMPLETE FIXED\r\n// // import { HiSecureConfig } from \"../core/types/HiSecureConfig.js\";\r\n// // import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// // import { logger } from \"../logging\";\r\n\r\n// // interface RateLimiterAdapter {\r\n// //     getMiddleware: (options?: any) => any;\r\n// // }\r\n\r\n// // export class RateLimitManager {\r\n// //     private config: HiSecureConfig[\"rateLimiter\"];\r\n// //     private primaryAdapter: RateLimiterAdapter;\r\n// //     private fallbackAdapter: RateLimiterAdapter | null;\r\n\r\n// //     constructor(\r\n// //         config: HiSecureConfig[\"rateLimiter\"],\r\n// //         primaryAdapter: RateLimiterAdapter,\r\n// //         fallbackAdapter: RateLimiterAdapter | null\r\n// //     ) {\r\n// //         this.config = config;\r\n// //         this.primaryAdapter = primaryAdapter;\r\n// //         this.fallbackAdapter = fallbackAdapter;\r\n// //     }\r\n\r\n// //     middleware(opts?: { mode?: \"strict\" | \"relaxed\" | \"api\"; options?: any }) {\r\n// //         let finalOptions: any = {};\r\n\r\n// //         // Handle presets (user cannot override these)\r\n// //         if (opts?.mode === \"strict\") {\r\n// //             finalOptions = {\r\n// //                 windowMs: 10_000,\r\n// //                 max: 5,\r\n// //                 points: 5,\r\n// //                 duration: 10,\r\n// //                 message: \"Too many requests, please slow down.\"\r\n// //             };\r\n// //         } else if (opts?.mode === \"relaxed\") {\r\n// //             finalOptions = {\r\n// //                 windowMs: 60_000,\r\n// //                 max: 100,\r\n// //                 points: 100,\r\n// //                 duration: 60,\r\n// //                 message: \"Rate limit exceeded.\"\r\n// //             };\r\n// //         } else if (opts?.mode === \"api\") {\r\n// //             finalOptions = {\r\n// //                 windowMs: 15 * 60 * 1000, // 15 minutes\r\n// //                 max: 100,\r\n// //                 points: 100,\r\n// //                 duration: 900,\r\n// //                 message: \"API rate limit exceeded.\"\r\n// //             };\r\n// //         } else {\r\n// //             // Use defaults\r\n// //             finalOptions = {\r\n// //                 windowMs: this.config.windowMs,\r\n// //                 max: this.config.maxRequests,\r\n// //                 duration: this.config.windowMs / 1000,\r\n// //                 points: this.config.maxRequests,\r\n// //                 message: this.config.message\r\n// //             };\r\n// //         }\r\n\r\n// //         // Apply custom options WITHOUT overriding preset values\r\n// //         if (opts?.options) {\r\n// //             // Only allow specific overrides, not preset overrides\r\n// //             const allowedOverrides = ['message', 'skipFailedRequests', 'standardHeaders'];\r\n// //             for (const key of allowedOverrides) {\r\n// //                 if (opts.options[key] !== undefined) {\r\n// //                     finalOptions[key] = opts.options[key];\r\n// //                 }\r\n// //             }\r\n            \r\n// //             // Log if user tried to override preset\r\n// //             const attemptedOverrides = Object.keys(opts.options).filter(\r\n// //                 k => !allowedOverrides.includes(k) && k !== 'mode'\r\n// //             );\r\n// //             if (attemptedOverrides.length > 0) {\r\n// //                 logger.warn(\"⚠ Rate limit overrides ignored\", { // ✅ FIXED: Better message\r\n// //                     preset: opts?.mode || 'default', // ✅ FIXED: Handle undefined\r\n// //                     ignoredOptions: attemptedOverrides\r\n// //                 });\r\n// //             }\r\n// //         }\r\n\r\n// //         // Try primary adapter\r\n// //         try {\r\n// //             logger.info(\"📌 Applying rate limiting\", {\r\n// //                 mode: opts?.mode || 'default',\r\n// //                 windowMs: finalOptions.windowMs,\r\n// //                 max: finalOptions.max\r\n// //             });\r\n            \r\n// //             return this.primaryAdapter.getMiddleware(finalOptions);\r\n// //         } catch (err: any) {\r\n// //             logger.warn(\"⚠ Primary rate limiter failed → fallback\", {\r\n// //                 error: err?.message\r\n// //             });\r\n\r\n// //             if (!this.fallbackAdapter) {\r\n// //                 throw new AdapterError(\"Rate limiters failed; no fallback adapter.\");\r\n// //             }\r\n\r\n// //             try {\r\n// //                 logger.info(\"📌 Using fallback rate limiter\");\r\n// //                 return this.fallbackAdapter.getMiddleware(finalOptions);\r\n// //             } catch (fallbackErr: any) {\r\n// //                 logger.error(\"❌ Fallback limiter also failed\", {\r\n// //                     error: fallbackErr?.message\r\n// //                 });\r\n// //                 throw new AdapterError(\"Both primary and fallback limiters failed.\");\r\n// //             }\r\n// //         }\r\n// //     }\r\n// // }\r\n\r\n\r\n\r\n// // src/managers/RateLimitManager.ts - FIXED\r\n// import { HiSecureConfig } from \"../core/types/HiSecureConfig.js\";\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { logger } from \"../logging\";\r\n\r\n// interface RateLimiterAdapter {\r\n//     getMiddleware: (options?: any) => any;\r\n// }\r\n\r\n// export class RateLimitManager {\r\n//     private config: HiSecureConfig[\"rateLimiter\"];\r\n//     private primaryAdapter: RateLimiterAdapter;\r\n//     private fallbackAdapter: RateLimiterAdapter | null;\r\n\r\n//     constructor(\r\n//         config: HiSecureConfig[\"rateLimiter\"],\r\n//         primaryAdapter: RateLimiterAdapter,\r\n//         fallbackAdapter: RateLimiterAdapter | null\r\n//     ) {\r\n//         this.config = config;\r\n//         this.primaryAdapter = primaryAdapter;\r\n//         this.fallbackAdapter = fallbackAdapter;\r\n//     }\r\n\r\n//     middleware(opts?: { mode?: \"strict\" | \"relaxed\" | \"api\"; options?: any }) {\r\n//         let finalOptions: any = {};\r\n\r\n//         // Handle presets (user cannot override these)\r\n//         if (opts?.mode === \"strict\") {\r\n//             finalOptions = {\r\n//                 windowMs: 10_000,\r\n//                 max: 5,\r\n//                 points: 5,\r\n//                 // ❌ REMOVED: duration: 10,\r\n//                 message: \"Too many requests, please slow down.\"\r\n//             };\r\n//         } else if (opts?.mode === \"relaxed\") {\r\n//             finalOptions = {\r\n//                 windowMs: 60_000,\r\n//                 max: 100,\r\n//                 points: 100,\r\n//                 // ❌ REMOVED: duration: 60,\r\n//                 message: \"Rate limit exceeded.\"\r\n//             };\r\n//         } else if (opts?.mode === \"api\") {\r\n//             finalOptions = {\r\n//                 windowMs: 15 * 60 * 1000, // 15 minutes\r\n//                 max: 100,\r\n//                 points: 100,\r\n//                 // ❌ REMOVED: duration: 900,\r\n//                 message: \"API rate limit exceeded.\"\r\n//             };\r\n//         } else {\r\n//             // Use defaults\r\n//             finalOptions = {\r\n//                 windowMs: this.config.windowMs,\r\n//                 max: this.config.maxRequests,\r\n//                 // ❌ REMOVED: duration: this.config.windowMs / 1000,\r\n//                 points: this.config.maxRequests,\r\n//                 message: this.config.message,\r\n//                 standardHeaders: true,      // ✅ ADD\r\n//                 legacyHeaders: false        // ✅ ADD\r\n//             };\r\n//         }\r\n\r\n//         // Apply custom options WITHOUT overriding preset values\r\n//         if (opts?.options) {\r\n//             // Only allow specific overrides, not preset overrides\r\n//             const allowedOverrides = ['message', 'skipFailedRequests', 'standardHeaders', 'legacyHeaders'];\r\n//             for (const key of allowedOverrides) {\r\n//                 if (opts.options[key] !== undefined) {\r\n//                     finalOptions[key] = opts.options[key];\r\n//                 }\r\n//             }\r\n            \r\n//             // Log if user tried to override preset\r\n//             const attemptedOverrides = Object.keys(opts.options).filter(\r\n//                 k => !allowedOverrides.includes(k) && k !== 'mode'\r\n//             );\r\n//             if (attemptedOverrides.length > 0) {\r\n//                 logger.warn(\"⚠ Rate limit overrides ignored\", {\r\n//                     preset: opts?.mode || 'default',\r\n//                     ignoredOptions: attemptedOverrides\r\n//                 });\r\n//             }\r\n//         }\r\n\r\n//         // Add v8+ options if not present\r\n//         if (finalOptions.standardHeaders === undefined) {\r\n//             finalOptions.standardHeaders = true;\r\n//         }\r\n//         if (finalOptions.legacyHeaders === undefined) {\r\n//             finalOptions.legacyHeaders = false;\r\n//         }\r\n\r\n//         // Try primary adapter\r\n//         try {\r\n//             logger.info(\"📌 Applying rate limiting\", {\r\n//                 mode: opts?.mode || 'default',\r\n//                 windowMs: finalOptions.windowMs,\r\n//                 max: finalOptions.max\r\n//             });\r\n            \r\n//             return this.primaryAdapter.getMiddleware(finalOptions);\r\n//         } catch (err: any) {\r\n//             logger.warn(\"⚠ Primary rate limiter failed → fallback\", {\r\n//                 error: err?.message\r\n//             });\r\n\r\n//             if (!this.fallbackAdapter) {\r\n//                 throw new AdapterError(\"Rate limiters failed; no fallback adapter.\");\r\n//             }\r\n\r\n//             try {\r\n//                 logger.info(\"📌 Using fallback rate limiter\");\r\n//                 return this.fallbackAdapter.getMiddleware(finalOptions);\r\n//             } catch (fallbackErr: any) {\r\n//                 logger.error(\"❌ Fallback limiter also failed\", {\r\n//                     error: fallbackErr?.message\r\n//                 });\r\n//                 throw new AdapterError(\"Both primary and fallback limiters failed.\");\r\n//             }\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\n// src/managers/RateLimitManager.ts - COMPLETELY FIXED\r\nimport { HiSecureConfig } from \"../core/types/HiSecureConfig.js\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { logger } from \"../logging\";\r\n\r\ninterface RateLimiterAdapter {\r\n    getMiddleware: (options?: any) => any;\r\n}\r\n\r\nexport class RateLimitManager {\r\n    private config: HiSecureConfig[\"rateLimiter\"];\r\n    private primaryAdapter: RateLimiterAdapter;\r\n    private fallbackAdapter: RateLimiterAdapter | null;\r\n\r\n    constructor(\r\n        config: HiSecureConfig[\"rateLimiter\"],\r\n        primaryAdapter: RateLimiterAdapter,\r\n        fallbackAdapter: RateLimiterAdapter | null\r\n    ) {\r\n        this.config = config;\r\n        this.primaryAdapter = primaryAdapter;\r\n        this.fallbackAdapter = fallbackAdapter;\r\n    }\r\n\r\n    middleware(opts?: { mode?: \"strict\" | \"relaxed\" | \"api\"; options?: any }) {\r\n        let finalOptions: any = {};\r\n\r\n        // Handle presets (user cannot override these)\r\n        if (opts?.mode === \"strict\") {\r\n            finalOptions = {\r\n                windowMs: 10_000,\r\n                max: 5,\r\n                // ❌ REMOVED: points: 5,\r\n                message: \"Too many requests, please slow down.\"\r\n            };\r\n        } else if (opts?.mode === \"relaxed\") {\r\n            finalOptions = {\r\n                windowMs: 60_000,\r\n                max: 100,\r\n                // ❌ REMOVED: points: 100,\r\n                message: \"Rate limit exceeded.\"\r\n            };\r\n        } else if (opts?.mode === \"api\") {\r\n            finalOptions = {\r\n                windowMs: 15 * 60 * 1000, // 15 minutes\r\n                max: 100,\r\n                // ❌ REMOVED: points: 100,\r\n                message: \"API rate limit exceeded.\"\r\n            };\r\n        } else {\r\n            // Use defaults\r\n            finalOptions = {\r\n                windowMs: this.config.windowMs,\r\n                max: this.config.maxRequests,\r\n                message: this.config.message,\r\n                standardHeaders: true,      // ✅ ADD\r\n                legacyHeaders: false        // ✅ ADD\r\n            };\r\n        }\r\n\r\n        // Apply custom options WITHOUT overriding preset values\r\n        if (opts?.options) {\r\n            // Only allow specific overrides, not preset overrides\r\n            const allowedOverrides = ['message', 'skipFailedRequests', 'standardHeaders', 'legacyHeaders'];\r\n            for (const key of allowedOverrides) {\r\n                if (opts.options[key] !== undefined) {\r\n                    finalOptions[key] = opts.options[key];\r\n                }\r\n            }\r\n            \r\n            // Log if user tried to override preset\r\n            const attemptedOverrides = Object.keys(opts.options).filter(\r\n                k => !allowedOverrides.includes(k) && k !== 'mode'\r\n            );\r\n            if (attemptedOverrides.length > 0) {\r\n                logger.warn(\"⚠ Rate limit overrides ignored\", {\r\n                    preset: opts?.mode || 'default',\r\n                    ignoredOptions: attemptedOverrides\r\n                });\r\n            }\r\n        }\r\n\r\n        // Add v8+ options if not present\r\n        if (finalOptions.standardHeaders === undefined) {\r\n            finalOptions.standardHeaders = true;\r\n        }\r\n        if (finalOptions.legacyHeaders === undefined) {\r\n            finalOptions.legacyHeaders = false;\r\n        }\r\n\r\n        // Try primary adapter\r\n        try {\r\n            logger.info(\"📌 Applying rate limiting\", {\r\n                mode: opts?.mode || 'default',\r\n                windowMs: finalOptions.windowMs,\r\n                max: finalOptions.max\r\n            });\r\n            \r\n            return this.primaryAdapter.getMiddleware(finalOptions);\r\n        } catch (err: any) {\r\n            logger.warn(\"⚠ Primary rate limiter failed → fallback\", {\r\n                error: err?.message\r\n            });\r\n\r\n            if (!this.fallbackAdapter) {\r\n                throw new AdapterError(\"Rate limiters failed; no fallback adapter.\");\r\n            }\r\n\r\n            try {\r\n                logger.info(\"📌 Using fallback rate limiter\");\r\n                return this.fallbackAdapter.getMiddleware(finalOptions);\r\n            } catch (fallbackErr: any) {\r\n                logger.error(\"❌ Fallback limiter also failed\", {\r\n                    error: fallbackErr?.message\r\n                });\r\n                throw new AdapterError(\"Both primary and fallback limiters failed.\");\r\n            }\r\n        }\r\n    }\r\n}"]}

package/dist/managers/SanitizerManager.d.ts

@@ -0,0 +1,18 @@
+interface SanitizerAdapter {
+    sanitize: (value: string, options?: any) => string;
+}
+export declare class SanitizerManager {
+    private primary;
+    private fallback;
+    constructor(primary: SanitizerAdapter, fallback?: SanitizerAdapter | null);
+    /**
+     * Sanitize a single value (public API)
+     */
+    sanitize(value: string, options?: any): string;
+    /**
+     * Middleware - Per-request fallback logic
+     */
+    middleware(options?: any): (req: any, _res: any, next: any) => void;
+}
+export {};
+//# sourceMappingURL=SanitizerManager.d.ts.map

package/dist/managers/SanitizerManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SanitizerManager.d.ts","sourceRoot":"","sources":["../../src/managers/SanitizerManager.ts"],"names":[],"mappings":"AA8PA,UAAU,gBAAgB;IACtB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,KAAK,MAAM,CAAC;CACtD;AAED,qBAAa,gBAAgB;IACzB,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,QAAQ,CAA0B;gBAE9B,OAAO,EAAE,gBAAgB,EAAE,QAAQ,GAAE,gBAAgB,GAAG,IAAW;IAK/E;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,MAAM;IAoB9C;;OAEG;IACH,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG,IACZ,KAAK,GAAG,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG;CAgE7C"}