hi-secure 1.0.15 → 1.0.16

package/dist/adapters/XSSAdapter.js

@@ -1,21 +1,135 @@
 "use strict";
+// import { FilterXSS, getDefaultWhiteList, whiteList } from 'xss';
+// import { AdapterError } from "../core/errors/AdapterError.js";
+// import { logger } from "../logging/index.js";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.XSSAdapter = void 0;
+// export interface XSSOptions {
+//     whiteList?: typeof whiteList;
+//     stripIgnoreTag?: boolean;
+//     stripIgnoreTagBody?: string[];
+//     allowCommentTag?: boolean;
+//     css?: boolean | { [key: string]: boolean };
+//     onTag?: (tag: string, html: string, options: any) => string;
+//     onTagAttr?: (tag: string, name: string, value: string, isWhiteAttr: boolean) => string;
+//     onIgnoreTag?: (tag: string, html: string, options: any) => string;
+//     [key: string]: any;
+// }
+// export class XSSAdapter {
+//     private globalOptions: XSSOptions;
+//     private defaultFilter: FilterXSS;
+//     constructor(options: XSSOptions = {}) {
+//         this.globalOptions = options;
+//         // Default safe configuration
+//         const defaultOptions: XSSOptions = {
+//             whiteList: getDefaultWhiteList(),
+//             stripIgnoreTag: true, 
+//             stripIgnoreTagBody: ['script', 'style', 'iframe', 'object', 'embed'],
+//             allowCommentTag: false,
+//             css: false, 
+//             onTag: (tag, html, options) => {
+//                 if (tag === 'a') {
+//                     return html.replace(/<a /i, '<a target="_blank" rel="noopener noreferrer" ');
+//                 }
+//                 return html;
+//             }
+//         };
+//         const finalOptions = { ...defaultOptions, ...options };
+//         this.defaultFilter = new FilterXSS(finalOptions);
+//     }
+//     sanitize(input: string, dynamicOptions?: XSSOptions): string {
+//         try {
+//             if (typeof input !== "string") {
+//                 return input as any;
+//             }
+//             if (!dynamicOptions || Object.keys(dynamicOptions).length === 0) {
+//                 return this.defaultFilter.process(input);
+//             }
+//             const mergedOptions = { ...this.globalOptions, ...dynamicOptions };
+//             const customFilter = new FilterXSS(mergedOptions);
+//             return customFilter.process(input);
+//         } catch (err: any) {
+//             logger.error("XSS sanitizer failed", {
+//                 error: err?.message,
+//                 preview: input?.slice?.(0, 80)
+//             });
+//             throw new AdapterError("XSS sanitizer failed.");
+//         }
+//     }
+//     middleware(dynamicOptions?: XSSOptions) {
+//         return (req: any, _res: any, next: any) => {
+//             try {
+//                 if (req.body && typeof req.body === "object") {
+//                     const originalBody = req.body;
+//                     const sanitizedBody: any = Array.isArray(originalBody) ? [] : {};
+//                     for (const key of Object.keys(originalBody)) {
+//                         const val = originalBody[key];
+//                         if (typeof val === "string") {
+//                             sanitizedBody[key] = this.sanitize(val, dynamicOptions);
+//                         } else if (Array.isArray(val)) {
+//                             sanitizedBody[key] = val.map((v) =>
+//                                 typeof v === "string"
+//                                     ? this.sanitize(v, dynamicOptions)
+//                                     : v
+//                             );
+//                         } else if (val && typeof val === "object") {
+//                             sanitizedBody[key] = this.deepSanitize(val, dynamicOptions);
+//                         } else {
+//                             sanitizedBody[key] = val;
+//                         }
+//                     }
+//                     req.sanitizedBody = sanitizedBody;
+//                     logger.debug("XSS sanitizer applied", {
+//                         originalKeys: Object.keys(originalBody),
+//                         sanitizedKeys: Object.keys(sanitizedBody)
+//                     });
+//                 }
+//                 next();
+//             } catch (err: any) {
+//                 logger.error("XSS middleware failed", {
+//                     error: err?.message || err
+//                 });
+//                 next(err);
+//             }
+//         };
+//     }
+//     private deepSanitize(obj: any, options?: XSSOptions, visited = new WeakSet()): any {
+//         if (obj && typeof obj === "object") {
+//             if (visited.has(obj)) {
+//                 return obj;
+//             }
+//             visited.add(obj);
+//         }
+//         if (typeof obj === "string") {
+//             return this.sanitize(obj, options);
+//         }
+//         if (Array.isArray(obj)) {
+//             return obj.map(item => this.deepSanitize(item, options, visited));
+//         }
+//         if (obj && typeof obj === "object") {
+//             const result: any = {};
+//             for (const key of Object.keys(obj)) {
+//                 result[key] = this.deepSanitize(obj[key], options, visited);
+//             }
+//             return result;
+//         }
+//         return obj;
+//     }
+// }
 const xss_1 = require("xss");
-const AdapterError_js_1 = require("../core/errors/AdapterError.js");
-const index_js_1 = require("../logging/index.js");
+const AdapterError_1 = require("../core/errors/AdapterError");
+const logging_1 = require("../logging");
 class XSSAdapter {
     constructor(options = {}) {
         this.globalOptions = options;
-        // Default safe configuration
         const defaultOptions = {
             whiteList: (0, xss_1.getDefaultWhiteList)(),
             stripIgnoreTag: true,
-            stripIgnoreTagBody: ['script', 'style', 'iframe', 'object', 'embed'],
+            stripIgnoreTagBody: ["script", "style", "iframe", "object", "embed"],
             allowCommentTag: false,
             css: false,
-            onTag: (tag, html, options) => {
-                if (tag === 'a') {
+            onTag: (tag, html) => {
+                if (tag === "a") {
                     return html.replace(/<a /i, '<a target="_blank" rel="noopener noreferrer" ');
                 }
                 return html;
@@ -26,9 +140,8 @@ class XSSAdapter {
     }
     sanitize(input, dynamicOptions) {
         try {
-            if (typeof input !== "string") {
+            if (typeof input !== "string")
                 return input;
-            }
             if (!dynamicOptions || Object.keys(dynamicOptions).length === 0) {
                 return this.defaultFilter.process(input);
             }
@@ -37,11 +150,12 @@ class XSSAdapter {
             return customFilter.process(input);
         }
         catch (err) {
-            index_js_1.logger.error("XSS sanitizer failed", {
-                error: err?.message,
-                preview: input?.slice?.(0, 80)
+            logging_1.logger.error("XSS sanitization failed", {
+                adapter: "xss",
+                operation: "sanitize",
+                reason: err?.message
             });
-            throw new AdapterError_js_1.AdapterError("XSS sanitizer failed.");
+            throw new AdapterError_1.AdapterError("XSS sanitizer failed.");
         }
     }
     middleware(dynamicOptions) {
@@ -56,7 +170,7 @@ class XSSAdapter {
                             sanitizedBody[key] = this.sanitize(val, dynamicOptions);
                         }
                         else if (Array.isArray(val)) {
-                            sanitizedBody[key] = val.map((v) => typeof v === "string"
+                            sanitizedBody[key] = val.map(v => typeof v === "string"
                                 ? this.sanitize(v, dynamicOptions)
                                 : v);
                         }
@@ -68,16 +182,20 @@ class XSSAdapter {
                         }
                     }
                     req.sanitizedBody = sanitizedBody;
-                    index_js_1.logger.debug("XSS sanitizer applied", {
-                        originalKeys: Object.keys(originalBody),
-                        sanitizedKeys: Object.keys(sanitizedBody)
+                    // ✅ visible + safe info log
+                    logging_1.logger.info("XSS sanitization applied", {
+                        adapter: "xss",
+                        operation: "middleware",
+                        keys: Object.keys(sanitizedBody)
                     });
                 }
                 next();
             }
             catch (err) {
-                index_js_1.logger.error("XSS middleware failed", {
-                    error: err?.message || err
+                logging_1.logger.error("XSS middleware failed", {
+                    adapter: "xss",
+                    operation: "middleware",
+                    reason: err?.message
                 });
                 next(err);
             }
@@ -85,9 +203,8 @@ class XSSAdapter {
     }
     deepSanitize(obj, options, visited = new WeakSet()) {
         if (obj && typeof obj === "object") {
-            if (visited.has(obj)) {
+            if (visited.has(obj))
                 return obj;
-            }
             visited.add(obj);
         }
         if (typeof obj === "string") {

package/dist/adapters/XSSAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"XSSAdapter.js","sourceRoot":"","sources":["../../src/adapters/XSSAdapter.ts"],"names":[],"mappings":";;;AAAA,6BAAgE;AAChE,oEAA8D;AAC9D,kDAA6C;AAc7C,MAAa,UAAU;IAInB,YAAY,UAAsB,EAAE;QAChC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAE7B,6BAA6B;QAC7B,MAAM,cAAc,GAAe;YAC/B,SAAS,EAAE,IAAA,yBAAmB,GAAE;YAChC,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;YACpE,eAAe,EAAE,KAAK;YACtB,GAAG,EAAE,KAAK;YACV,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;gBAE1B,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;oBACd,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,+CAA+C,CAAC,CAAC;gBACjF,CAAC;gBACD,OAAO,IAAI,CAAC;YAChB,CAAC;SACJ,CAAC;QAEF,MAAM,YAAY,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;QACvD,IAAI,CAAC,aAAa,GAAG,IAAI,eAAS,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IAGD,QAAQ,CAAC,KAAa,EAAE,cAA2B;QAC/C,IAAI,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,KAAY,CAAC;YACxB,CAAC;YAGD,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9D,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;YAGD,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,cAAc,EAAE,CAAC;YACnE,MAAM,YAAY,GAAG,IAAI,eAAS,CAAC,aAAa,CAAC,CAAC;YAElD,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEvC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,iBAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;gBACjC,KAAK,EAAE,GAAG,EAAE,OAAO;gBACnB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;aACjC,CAAC,CAAC;YACH,MAAM,IAAI,8BAAY,CAAC,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACL,CAAC;IAGD,UAAU,CAAC,cAA2B;QAClC,OAAO,CAAC,GAAQ,EAAE,IAAS,EAAE,IAAS,EAAE,EAAE;YACtC,IAAI,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC3C,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;oBAC9B,MAAM,aAAa,GAAQ,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAEjE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;wBAC1C,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;wBAE9B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;4BAC1B,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;wBAC5D,CAAC;6BAAM,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC5B,aAAa,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/B,OAAO,CAAC,KAAK,QAAQ;gCACjB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC;gCAClC,CAAC,CAAC,CAAC,CACV,CAAC;wBACN,CAAC;6BAAM,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;4BAExC,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;wBAChE,CAAC;6BAAM,CAAC;4BACJ,aAAa,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;wBAC7B,CAAC;oBACL,CAAC;oBAGD,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;oBAElC,iBAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;wBAClC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;wBACvC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;qBAC5C,CAAC,CAAC;gBACP,CAAC;gBAED,IAAI,EAAE,CAAC;YACX,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,iBAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;oBAClC,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;iBAC7B,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACL,CAAC,CAAC;IACN,CAAC;IAGO,YAAY,CAAC,GAAQ,EAAE,OAAoB,EAAE,OAAO,GAAG,IAAI,OAAO,EAAE;QAExE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnB,OAAO,GAAG,CAAC;YACf,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,MAAM,GAAQ,EAAE,CAAC;YACvB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,OAAO,GAAG,CAAC;IACf,CAAC;CACJ;AAhID,gCAgIC","sourcesContent":["import { FilterXSS, getDefaultWhiteList, whiteList } from 'xss';\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { logger } from \"../logging/index.js\";\r\n\r\nexport interface XSSOptions {\r\n    whiteList?: typeof whiteList;\r\n    stripIgnoreTag?: boolean;\r\n    stripIgnoreTagBody?: string[];\r\n    allowCommentTag?: boolean;\r\n    css?: boolean | { [key: string]: boolean };\r\n    onTag?: (tag: string, html: string, options: any) => string;\r\n    onTagAttr?: (tag: string, name: string, value: string, isWhiteAttr: boolean) => string;\r\n    onIgnoreTag?: (tag: string, html: string, options: any) => string;\r\n    [key: string]: any;\r\n}\r\n\r\nexport class XSSAdapter {\r\n    private globalOptions: XSSOptions;\r\n    private defaultFilter: FilterXSS;\r\n\r\n    constructor(options: XSSOptions = {}) {\r\n        this.globalOptions = options;\r\n        \r\n        // Default safe configuration\r\n        const defaultOptions: XSSOptions = {\r\n            whiteList: getDefaultWhiteList(),\r\n            stripIgnoreTag: true, \r\n            stripIgnoreTagBody: ['script', 'style', 'iframe', 'object', 'embed'],\r\n            allowCommentTag: false,\r\n            css: false, \r\n            onTag: (tag, html, options) => {\r\n               \r\n                if (tag === 'a') {\r\n                    return html.replace(/<a /i, '<a target=\"_blank\" rel=\"noopener noreferrer\" ');\r\n                }\r\n                return html;\r\n            }\r\n        };\r\n\r\n        const finalOptions = { ...defaultOptions, ...options };\r\n        this.defaultFilter = new FilterXSS(finalOptions);\r\n    }\r\n\r\n   \r\n    sanitize(input: string, dynamicOptions?: XSSOptions): string {\r\n        try {\r\n            if (typeof input !== \"string\") {\r\n                return input as any;\r\n            }\r\n\r\n           \r\n            if (!dynamicOptions || Object.keys(dynamicOptions).length === 0) {\r\n                return this.defaultFilter.process(input);\r\n            }\r\n\r\n            \r\n            const mergedOptions = { ...this.globalOptions, ...dynamicOptions };\r\n            const customFilter = new FilterXSS(mergedOptions);\r\n            \r\n            return customFilter.process(input);\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"XSS sanitizer failed\", {\r\n                error: err?.message,\r\n                preview: input?.slice?.(0, 80)\r\n            });\r\n            throw new AdapterError(\"XSS sanitizer failed.\");\r\n        }\r\n    }\r\n\r\n   \r\n    middleware(dynamicOptions?: XSSOptions) {\r\n        return (req: any, _res: any, next: any) => {\r\n            try {\r\n                if (req.body && typeof req.body === \"object\") {\r\n                    const originalBody = req.body;\r\n                    const sanitizedBody: any = Array.isArray(originalBody) ? [] : {};\r\n                    \r\n                    for (const key of Object.keys(originalBody)) {\r\n                        const val = originalBody[key];\r\n\r\n                        if (typeof val === \"string\") {\r\n                            sanitizedBody[key] = this.sanitize(val, dynamicOptions);\r\n                        } else if (Array.isArray(val)) {\r\n                            sanitizedBody[key] = val.map((v) =>\r\n                                typeof v === \"string\"\r\n                                    ? this.sanitize(v, dynamicOptions)\r\n                                    : v\r\n                            );\r\n                        } else if (val && typeof val === \"object\") {\r\n                            \r\n                            sanitizedBody[key] = this.deepSanitize(val, dynamicOptions);\r\n                        } else {\r\n                            sanitizedBody[key] = val;\r\n                        }\r\n                    }\r\n                    \r\n                   \r\n                    req.sanitizedBody = sanitizedBody;\r\n                    \r\n                    logger.debug(\"XSS sanitizer applied\", {\r\n                        originalKeys: Object.keys(originalBody),\r\n                        sanitizedKeys: Object.keys(sanitizedBody)\r\n                    });\r\n                }\r\n\r\n                next();\r\n            } catch (err: any) {\r\n                logger.error(\"XSS middleware failed\", {\r\n                    error: err?.message || err\r\n                });\r\n                next(err);\r\n            }\r\n        };\r\n    }\r\n\r\n   \r\n    private deepSanitize(obj: any, options?: XSSOptions, visited = new WeakSet()): any {\r\n       \r\n        if (obj && typeof obj === \"object\") {\r\n            if (visited.has(obj)) {\r\n                return obj;\r\n            }\r\n            visited.add(obj);\r\n        }\r\n\r\n        if (typeof obj === \"string\") {\r\n            return this.sanitize(obj, options);\r\n        }\r\n\r\n        if (Array.isArray(obj)) {\r\n            return obj.map(item => this.deepSanitize(item, options, visited));\r\n        }\r\n\r\n        if (obj && typeof obj === \"object\") {\r\n            const result: any = {};\r\n            for (const key of Object.keys(obj)) {\r\n                result[key] = this.deepSanitize(obj[key], options, visited);\r\n            }\r\n            return result;\r\n        }\r\n\r\n        return obj;\r\n    }\r\n}"]}
+{"version":3,"file":"XSSAdapter.js","sourceRoot":"","sources":["../../src/adapters/XSSAdapter.ts"],"names":[],"mappings":";AAAA,mEAAmE;AACnE,iEAAiE;AACjE,gDAAgD;;;AAEhD,gCAAgC;AAChC,oCAAoC;AACpC,gCAAgC;AAChC,qCAAqC;AACrC,iCAAiC;AACjC,kDAAkD;AAClD,mEAAmE;AACnE,8FAA8F;AAC9F,yEAAyE;AACzE,0BAA0B;AAC1B,IAAI;AAEJ,4BAA4B;AAC5B,yCAAyC;AACzC,wCAAwC;AAExC,8CAA8C;AAC9C,wCAAwC;AAExC,wCAAwC;AACxC,+CAA+C;AAC/C,gDAAgD;AAChD,qCAAqC;AACrC,oFAAoF;AACpF,sCAAsC;AACtC,2BAA2B;AAC3B,+CAA+C;AAE/C,qCAAqC;AACrC,oGAAoG;AACpG,oBAAoB;AACpB,+BAA+B;AAC/B,gBAAgB;AAChB,aAAa;AAEb,kEAAkE;AAClE,4DAA4D;AAC5D,QAAQ;AAGR,qEAAqE;AACrE,gBAAgB;AAChB,+CAA+C;AAC/C,uCAAuC;AACvC,gBAAgB;AAGhB,iFAAiF;AACjF,4DAA4D;AAC5D,gBAAgB;AAGhB,kFAAkF;AAClF,iEAAiE;AAEjE,kDAAkD;AAElD,+BAA+B;AAC/B,qDAAqD;AACrD,uCAAuC;AACvC,iDAAiD;AACjD,kBAAkB;AAClB,+DAA+D;AAC/D,YAAY;AACZ,QAAQ;AAGR,gDAAgD;AAChD,uDAAuD;AACvD,oBAAoB;AACpB,kEAAkE;AAClE,qDAAqD;AACrD,wFAAwF;AAExF,qEAAqE;AACrE,yDAAyD;AAEzD,yDAAyD;AACzD,uFAAuF;AACvF,2DAA2D;AAC3D,kEAAkE;AAClE,wDAAwD;AACxD,yEAAyE;AACzE,0CAA0C;AAC1C,iCAAiC;AACjC,uEAAuE;AAEvE,2FAA2F;AAC3F,mCAAmC;AACnC,wDAAwD;AACxD,4BAA4B;AAC5B,wBAAwB;AAGxB,yDAAyD;AAEzD,8DAA8D;AAC9D,mEAAmE;AACnE,oEAAoE;AACpE,0BAA0B;AAC1B,oBAAoB;AAEpB,0BAA0B;AAC1B,mCAAmC;AACnC,0DAA0D;AAC1D,iDAAiD;AACjD,sBAAsB;AACtB,6BAA6B;AAC7B,gBAAgB;AAChB,aAAa;AACb,QAAQ;AAGR,2FAA2F;AAE3F,gDAAgD;AAChD,sCAAsC;AACtC,8BAA8B;AAC9B,gBAAgB;AAChB,gCAAgC;AAChC,YAAY;AAEZ,yCAAyC;AACzC,kDAAkD;AAClD,YAAY;AAEZ,oCAAoC;AACpC,iFAAiF;AACjF,YAAY;AAEZ,gDAAgD;AAChD,sCAAsC;AACtC,oDAAoD;AACpD,+EAA+E;AAC/E,gBAAgB;AAChB,6BAA6B;AAC7B,YAAY;AAEZ,sBAAsB;AACtB,QAAQ;AACR,IAAI;AAKJ,6BAAgE;AAChE,8DAA2D;AAC3D,wCAAoC;AAcpC,MAAa,UAAU;IAInB,YAAY,UAAsB,EAAE;QAChC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAE7B,MAAM,cAAc,GAAe;YAC/B,SAAS,EAAE,IAAA,yBAAmB,GAAE;YAChC,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;YACpE,eAAe,EAAE,KAAK;YACtB,GAAG,EAAE,KAAK;YACV,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;gBACjB,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;oBACd,OAAO,IAAI,CAAC,OAAO,CACf,MAAM,EACN,+CAA+C,CAClD,CAAC;gBACN,CAAC;gBACD,OAAO,IAAI,CAAC;YAChB,CAAC;SACJ,CAAC;QAEF,MAAM,YAAY,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;QACvD,IAAI,CAAC,aAAa,GAAG,IAAI,eAAS,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IAED,QAAQ,CAAC,KAAa,EAAE,cAA2B;QAC/C,IAAI,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAY,CAAC;YAEnD,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9D,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;YAED,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,cAAc,EAAE,CAAC;YACnE,MAAM,YAAY,GAAG,IAAI,eAAS,CAAC,aAAa,CAAC,CAAC;YAElD,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEvC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACpC,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,GAAG,EAAE,OAAO;aACvB,CAAC,CAAC;YAEH,MAAM,IAAI,2BAAY,CAAC,uBAAuB,CAAC,CAAC;QACpD,CAAC;IACL,CAAC;IAED,UAAU,CAAC,cAA2B;QAClC,OAAO,CAAC,GAAQ,EAAE,IAAS,EAAE,IAAS,EAAE,EAAE;YACtC,IAAI,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC3C,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;oBAC9B,MAAM,aAAa,GAAQ,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAEjE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;wBAC1C,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;wBAE9B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;4BAC1B,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;wBAC5D,CAAC;6BAAM,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC5B,aAAa,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC7B,OAAO,CAAC,KAAK,QAAQ;gCACjB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC;gCAClC,CAAC,CAAC,CAAC,CACV,CAAC;wBACN,CAAC;6BAAM,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;4BACxC,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;wBAChE,CAAC;6BAAM,CAAC;4BACJ,aAAa,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;wBAC7B,CAAC;oBACL,CAAC;oBAED,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;oBAElC,4BAA4B;oBAC5B,gBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;wBACpC,OAAO,EAAE,KAAK;wBACd,SAAS,EAAE,YAAY;wBACvB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;qBACnC,CAAC,CAAC;gBACP,CAAC;gBAED,IAAI,EAAE,CAAC;YACX,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,gBAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;oBAClC,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,YAAY;oBACvB,MAAM,EAAE,GAAG,EAAE,OAAO;iBACvB,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACL,CAAC,CAAC;IACN,CAAC;IAEO,YAAY,CAAC,GAAQ,EAAE,OAAoB,EAAE,OAAO,GAAG,IAAI,OAAO,EAAE;QACxE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,MAAM,GAAQ,EAAE,CAAC;YACvB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,OAAO,GAAG,CAAC;IACf,CAAC;CACJ;AA3HD,gCA2HC","sourcesContent":["// import { FilterXSS, getDefaultWhiteList, whiteList } from 'xss';\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { logger } from \"../logging/index.js\";\r\n\r\n// export interface XSSOptions {\r\n//     whiteList?: typeof whiteList;\r\n//     stripIgnoreTag?: boolean;\r\n//     stripIgnoreTagBody?: string[];\r\n//     allowCommentTag?: boolean;\r\n//     css?: boolean | { [key: string]: boolean };\r\n//     onTag?: (tag: string, html: string, options: any) => string;\r\n//     onTagAttr?: (tag: string, name: string, value: string, isWhiteAttr: boolean) => string;\r\n//     onIgnoreTag?: (tag: string, html: string, options: any) => string;\r\n//     [key: string]: any;\r\n// }\r\n\r\n// export class XSSAdapter {\r\n//     private globalOptions: XSSOptions;\r\n//     private defaultFilter: FilterXSS;\r\n\r\n//     constructor(options: XSSOptions = {}) {\r\n//         this.globalOptions = options;\r\n        \r\n//         // Default safe configuration\r\n//         const defaultOptions: XSSOptions = {\r\n//             whiteList: getDefaultWhiteList(),\r\n//             stripIgnoreTag: true, \r\n//             stripIgnoreTagBody: ['script', 'style', 'iframe', 'object', 'embed'],\r\n//             allowCommentTag: false,\r\n//             css: false, \r\n//             onTag: (tag, html, options) => {\r\n               \r\n//                 if (tag === 'a') {\r\n//                     return html.replace(/<a /i, '<a target=\"_blank\" rel=\"noopener noreferrer\" ');\r\n//                 }\r\n//                 return html;\r\n//             }\r\n//         };\r\n\r\n//         const finalOptions = { ...defaultOptions, ...options };\r\n//         this.defaultFilter = new FilterXSS(finalOptions);\r\n//     }\r\n\r\n   \r\n//     sanitize(input: string, dynamicOptions?: XSSOptions): string {\r\n//         try {\r\n//             if (typeof input !== \"string\") {\r\n//                 return input as any;\r\n//             }\r\n\r\n           \r\n//             if (!dynamicOptions || Object.keys(dynamicOptions).length === 0) {\r\n//                 return this.defaultFilter.process(input);\r\n//             }\r\n\r\n            \r\n//             const mergedOptions = { ...this.globalOptions, ...dynamicOptions };\r\n//             const customFilter = new FilterXSS(mergedOptions);\r\n            \r\n//             return customFilter.process(input);\r\n\r\n//         } catch (err: any) {\r\n//             logger.error(\"XSS sanitizer failed\", {\r\n//                 error: err?.message,\r\n//                 preview: input?.slice?.(0, 80)\r\n//             });\r\n//             throw new AdapterError(\"XSS sanitizer failed.\");\r\n//         }\r\n//     }\r\n\r\n   \r\n//     middleware(dynamicOptions?: XSSOptions) {\r\n//         return (req: any, _res: any, next: any) => {\r\n//             try {\r\n//                 if (req.body && typeof req.body === \"object\") {\r\n//                     const originalBody = req.body;\r\n//                     const sanitizedBody: any = Array.isArray(originalBody) ? [] : {};\r\n                    \r\n//                     for (const key of Object.keys(originalBody)) {\r\n//                         const val = originalBody[key];\r\n\r\n//                         if (typeof val === \"string\") {\r\n//                             sanitizedBody[key] = this.sanitize(val, dynamicOptions);\r\n//                         } else if (Array.isArray(val)) {\r\n//                             sanitizedBody[key] = val.map((v) =>\r\n//                                 typeof v === \"string\"\r\n//                                     ? this.sanitize(v, dynamicOptions)\r\n//                                     : v\r\n//                             );\r\n//                         } else if (val && typeof val === \"object\") {\r\n                            \r\n//                             sanitizedBody[key] = this.deepSanitize(val, dynamicOptions);\r\n//                         } else {\r\n//                             sanitizedBody[key] = val;\r\n//                         }\r\n//                     }\r\n                    \r\n                   \r\n//                     req.sanitizedBody = sanitizedBody;\r\n                    \r\n//                     logger.debug(\"XSS sanitizer applied\", {\r\n//                         originalKeys: Object.keys(originalBody),\r\n//                         sanitizedKeys: Object.keys(sanitizedBody)\r\n//                     });\r\n//                 }\r\n\r\n//                 next();\r\n//             } catch (err: any) {\r\n//                 logger.error(\"XSS middleware failed\", {\r\n//                     error: err?.message || err\r\n//                 });\r\n//                 next(err);\r\n//             }\r\n//         };\r\n//     }\r\n\r\n   \r\n//     private deepSanitize(obj: any, options?: XSSOptions, visited = new WeakSet()): any {\r\n       \r\n//         if (obj && typeof obj === \"object\") {\r\n//             if (visited.has(obj)) {\r\n//                 return obj;\r\n//             }\r\n//             visited.add(obj);\r\n//         }\r\n\r\n//         if (typeof obj === \"string\") {\r\n//             return this.sanitize(obj, options);\r\n//         }\r\n\r\n//         if (Array.isArray(obj)) {\r\n//             return obj.map(item => this.deepSanitize(item, options, visited));\r\n//         }\r\n\r\n//         if (obj && typeof obj === \"object\") {\r\n//             const result: any = {};\r\n//             for (const key of Object.keys(obj)) {\r\n//                 result[key] = this.deepSanitize(obj[key], options, visited);\r\n//             }\r\n//             return result;\r\n//         }\r\n\r\n//         return obj;\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\nimport { FilterXSS, getDefaultWhiteList, whiteList } from \"xss\";\r\nimport { AdapterError } from \"../core/errors/AdapterError\";\r\nimport { logger } from \"../logging\";\r\n\r\nexport interface XSSOptions {\r\n    whiteList?: typeof whiteList;\r\n    stripIgnoreTag?: boolean;\r\n    stripIgnoreTagBody?: string[];\r\n    allowCommentTag?: boolean;\r\n    css?: boolean | { [key: string]: boolean };\r\n    onTag?: (tag: string, html: string, options: any) => string;\r\n    onTagAttr?: (tag: string, name: string, value: string, isWhiteAttr: boolean) => string;\r\n    onIgnoreTag?: (tag: string, html: string, options: any) => string;\r\n    [key: string]: any;\r\n}\r\n\r\nexport class XSSAdapter {\r\n    private globalOptions: XSSOptions;\r\n    private defaultFilter: FilterXSS;\r\n\r\n    constructor(options: XSSOptions = {}) {\r\n        this.globalOptions = options;\r\n\r\n        const defaultOptions: XSSOptions = {\r\n            whiteList: getDefaultWhiteList(),\r\n            stripIgnoreTag: true,\r\n            stripIgnoreTagBody: [\"script\", \"style\", \"iframe\", \"object\", \"embed\"],\r\n            allowCommentTag: false,\r\n            css: false,\r\n            onTag: (tag, html) => {\r\n                if (tag === \"a\") {\r\n                    return html.replace(\r\n                        /<a /i,\r\n                        '<a target=\"_blank\" rel=\"noopener noreferrer\" '\r\n                    );\r\n                }\r\n                return html;\r\n            }\r\n        };\r\n\r\n        const finalOptions = { ...defaultOptions, ...options };\r\n        this.defaultFilter = new FilterXSS(finalOptions);\r\n    }\r\n\r\n    sanitize(input: string, dynamicOptions?: XSSOptions): string {\r\n        try {\r\n            if (typeof input !== \"string\") return input as any;\r\n\r\n            if (!dynamicOptions || Object.keys(dynamicOptions).length === 0) {\r\n                return this.defaultFilter.process(input);\r\n            }\r\n\r\n            const mergedOptions = { ...this.globalOptions, ...dynamicOptions };\r\n            const customFilter = new FilterXSS(mergedOptions);\r\n\r\n            return customFilter.process(input);\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"XSS sanitization failed\", {\r\n                adapter: \"xss\",\r\n                operation: \"sanitize\",\r\n                reason: err?.message\r\n            });\r\n\r\n            throw new AdapterError(\"XSS sanitizer failed.\");\r\n        }\r\n    }\r\n\r\n    middleware(dynamicOptions?: XSSOptions) {\r\n        return (req: any, _res: any, next: any) => {\r\n            try {\r\n                if (req.body && typeof req.body === \"object\") {\r\n                    const originalBody = req.body;\r\n                    const sanitizedBody: any = Array.isArray(originalBody) ? [] : {};\r\n\r\n                    for (const key of Object.keys(originalBody)) {\r\n                        const val = originalBody[key];\r\n\r\n                        if (typeof val === \"string\") {\r\n                            sanitizedBody[key] = this.sanitize(val, dynamicOptions);\r\n                        } else if (Array.isArray(val)) {\r\n                            sanitizedBody[key] = val.map(v =>\r\n                                typeof v === \"string\"\r\n                                    ? this.sanitize(v, dynamicOptions)\r\n                                    : v\r\n                            );\r\n                        } else if (val && typeof val === \"object\") {\r\n                            sanitizedBody[key] = this.deepSanitize(val, dynamicOptions);\r\n                        } else {\r\n                            sanitizedBody[key] = val;\r\n                        }\r\n                    }\r\n\r\n                    req.sanitizedBody = sanitizedBody;\r\n\r\n                    // ✅ visible + safe info log\r\n                    logger.info(\"XSS sanitization applied\", {\r\n                        adapter: \"xss\",\r\n                        operation: \"middleware\",\r\n                        keys: Object.keys(sanitizedBody)\r\n                    });\r\n                }\r\n\r\n                next();\r\n            } catch (err: any) {\r\n                logger.error(\"XSS middleware failed\", {\r\n                    adapter: \"xss\",\r\n                    operation: \"middleware\",\r\n                    reason: err?.message\r\n                });\r\n                next(err);\r\n            }\r\n        };\r\n    }\r\n\r\n    private deepSanitize(obj: any, options?: XSSOptions, visited = new WeakSet()): any {\r\n        if (obj && typeof obj === \"object\") {\r\n            if (visited.has(obj)) return obj;\r\n            visited.add(obj);\r\n        }\r\n\r\n        if (typeof obj === \"string\") {\r\n            return this.sanitize(obj, options);\r\n        }\r\n\r\n        if (Array.isArray(obj)) {\r\n            return obj.map(item => this.deepSanitize(item, options, visited));\r\n        }\r\n\r\n        if (obj && typeof obj === \"object\") {\r\n            const result: any = {};\r\n            for (const key of Object.keys(obj)) {\r\n                result[key] = this.deepSanitize(obj[key], options, visited);\r\n            }\r\n            return result;\r\n        }\r\n\r\n        return obj;\r\n    }\r\n}\r\n"]}

package/dist/adapters/ZodAdapter.d.ts

@@ -2,6 +2,6 @@ import { ZodSchema } from "zod";
 export declare class ZodAdapter {
     private globalSchema?;
     constructor(globalSchema?: ZodSchema);
-    validate(dynamicSchema?: ZodSchema): (req: any, res: any, next: any) => any;
+    validate(dynamicSchema?: ZodSchema): (req: any, _res: any, next: any) => any;
 }
 //# sourceMappingURL=ZodAdapter.d.ts.map

package/dist/adapters/ZodAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ZodAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/ZodAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAY,MAAM,KAAK,CAAC;AAI1C,qBAAa,UAAU;IACnB,OAAO,CAAC,YAAY,CAAC,CAAY;gBAErB,YAAY,CAAC,EAAE,SAAS;IAIpC,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,IACtB,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG;CA6B5C"}
+{"version":3,"file":"ZodAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/ZodAdapter.ts"],"names":[],"mappings":"AA8CA,OAAO,EAAE,SAAS,EAAY,MAAM,KAAK,CAAC;AAI1C,qBAAa,UAAU;IACnB,OAAO,CAAC,YAAY,CAAC,CAAY;gBAErB,YAAY,CAAC,EAAE,SAAS;IAIpC,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,IACtB,KAAK,GAAG,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG;CA6B7C"}

package/dist/adapters/ZodAdapter.js

@@ -1,14 +1,17 @@
 "use strict";
+// import { ZodSchema, ZodError } from "zod";
+// import { ValidationError } from "../core/errors/ValidationError.js"; 
+// import { logger } from "../logging/index.js";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ZodAdapter = void 0;
-const ValidationError_js_1 = require("../core/errors/ValidationError.js");
-const index_js_1 = require("../logging/index.js");
+const ValidationError_1 = require("../core/errors/ValidationError");
+const logging_1 = require("../logging");
 class ZodAdapter {
     constructor(globalSchema) {
         this.globalSchema = globalSchema;
     }
     validate(dynamicSchema) {
-        return (req, res, next) => {
+        return (req, _res, next) => {
             const schema = dynamicSchema || this.globalSchema;
             if (!schema)
                 return next();
@@ -21,13 +24,15 @@ class ZodAdapter {
                 path: issue.path.join("."),
                 code: issue.code
             }));
-            index_js_1.logger.warn("Zod validation failed", {
-                path: req.path,
+            logging_1.logger.warn("Zod validation failed", {
+                adapter: "zod",
+                operation: "validate",
                 method: req.method,
-                issues,
-                preview: JSON.stringify(req.body).slice(0, 200)
+                path: req.path,
+                issueCount: issues.length,
+                issues
             });
-            return next(new ValidationError_js_1.ValidationError("Validation failed.", issues));
+            return next(new ValidationError_1.ValidationError("Validation failed.", issues));
         };
     }
 }

package/dist/adapters/ZodAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"ZodAdapter.js","sourceRoot":"","sources":["../../src/adapters/ZodAdapter.ts"],"names":[],"mappings":";;;AACA,0EAAoE;AACpE,kDAA6C;AAE7C,MAAa,UAAU;IAGnB,YAAY,YAAwB;QAChC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;IAED,QAAQ,CAAC,aAAyB;QAC9B,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC;YAElD,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,EAAE,CAAC;YAE3B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAE1C,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,IAAI,EAAE,CAAC;YAElC,MAAM,MAAM,GAAa,MAAM,CAAC,KAAK,CAAC;YAEtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACvC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;aACnB,CAAC,CAAC,CAAC;YAEJ,iBAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACjC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aAClD,CAAC,CAAC;YAEH,OAAO,IAAI,CACP,IAAI,oCAAe,CAAC,oBAAoB,EAAE,MAAa,CAAC,CAC3D,CAAC;QACN,CAAC,CAAC;IACN,CAAC;CACJ;AArCD,gCAqCC","sourcesContent":["import { ZodSchema, ZodError } from \"zod\";\r\nimport { ValidationError } from \"../core/errors/ValidationError.js\"; \r\nimport { logger } from \"../logging/index.js\";\r\n\r\nexport class ZodAdapter {\r\n    private globalSchema?: ZodSchema;\r\n\r\n    constructor(globalSchema?: ZodSchema) {\r\n        this.globalSchema = globalSchema;\r\n    }\r\n\r\n    validate(dynamicSchema?: ZodSchema) {\r\n        return (req: any, res: any, next: any) => {\r\n            const schema = dynamicSchema || this.globalSchema;\r\n\r\n            if (!schema) return next();\r\n\r\n            const result = schema.safeParse(req.body);\r\n\r\n            if (result.success) return next();\r\n\r\n            const zodErr: ZodError = result.error;\r\n\r\n            const issues = zodErr.issues.map(issue => ({\r\n                message: issue.message,\r\n                path: issue.path.join(\".\"),\r\n                code: issue.code\r\n            }));\r\n\r\n            logger.warn(\"Zod validation failed\", {\r\n                path: req.path,\r\n                method: req.method,\r\n                issues,\r\n                preview: JSON.stringify(req.body).slice(0, 200)\r\n            });\r\n\r\n            return next(\r\n                new ValidationError(\"Validation failed.\", issues as any) \r\n            );\r\n        };\r\n    }\r\n}"]}
+{"version":3,"file":"ZodAdapter.js","sourceRoot":"","sources":["../../src/adapters/ZodAdapter.ts"],"names":[],"mappings":";AAAA,6CAA6C;AAC7C,wEAAwE;AACxE,gDAAgD;;;AA6ChD,oEAAiE;AACjE,wCAAoC;AAEpC,MAAa,UAAU;IAGnB,YAAY,YAAwB;QAChC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;IAED,QAAQ,CAAC,aAAyB;QAC9B,OAAO,CAAC,GAAQ,EAAE,IAAS,EAAE,IAAS,EAAE,EAAE;YACtC,MAAM,MAAM,GAAG,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC;YAClD,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,EAAE,CAAC;YAE3B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,IAAI,EAAE,CAAC;YAElC,MAAM,MAAM,GAAa,MAAM,CAAC,KAAK,CAAC;YAEtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACvC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;aACnB,CAAC,CAAC,CAAC;YAEJ,gBAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACjC,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,UAAU,EAAE,MAAM,CAAC,MAAM;gBACzB,MAAM;aACT,CAAC,CAAC;YAEH,OAAO,IAAI,CACP,IAAI,iCAAe,CAAC,oBAAoB,EAAE,MAAa,CAAC,CAC3D,CAAC;QACN,CAAC,CAAC;IACN,CAAC;CACJ;AArCD,gCAqCC","sourcesContent":["// import { ZodSchema, ZodError } from \"zod\";\r\n// import { ValidationError } from \"../core/errors/ValidationError.js\"; \r\n// import { logger } from \"../logging/index.js\";\r\n\r\n// export class ZodAdapter {\r\n//     private globalSchema?: ZodSchema;\r\n\r\n//     constructor(globalSchema?: ZodSchema) {\r\n//         this.globalSchema = globalSchema;\r\n//     }\r\n\r\n//     validate(dynamicSchema?: ZodSchema) {\r\n//         return (req: any, res: any, next: any) => {\r\n//             const schema = dynamicSchema || this.globalSchema;\r\n\r\n//             if (!schema) return next();\r\n\r\n//             const result = schema.safeParse(req.body);\r\n\r\n//             if (result.success) return next();\r\n\r\n//             const zodErr: ZodError = result.error;\r\n\r\n//             const issues = zodErr.issues.map(issue => ({\r\n//                 message: issue.message,\r\n//                 path: issue.path.join(\".\"),\r\n//                 code: issue.code\r\n//             }));\r\n\r\n//             logger.warn(\"Zod validation failed\", {\r\n//                 path: req.path,\r\n//                 method: req.method,\r\n//                 issues,\r\n//                 preview: JSON.stringify(req.body).slice(0, 200)\r\n//             });\r\n\r\n//             return next(\r\n//                 new ValidationError(\"Validation failed.\", issues as any) \r\n//             );\r\n//         };\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\nimport { ZodSchema, ZodError } from \"zod\";\r\nimport { ValidationError } from \"../core/errors/ValidationError\";\r\nimport { logger } from \"../logging\";\r\n\r\nexport class ZodAdapter {\r\n    private globalSchema?: ZodSchema;\r\n\r\n    constructor(globalSchema?: ZodSchema) {\r\n        this.globalSchema = globalSchema;\r\n    }\r\n\r\n    validate(dynamicSchema?: ZodSchema) {\r\n        return (req: any, _res: any, next: any) => {\r\n            const schema = dynamicSchema || this.globalSchema;\r\n            if (!schema) return next();\r\n\r\n            const result = schema.safeParse(req.body);\r\n            if (result.success) return next();\r\n\r\n            const zodErr: ZodError = result.error;\r\n\r\n            const issues = zodErr.issues.map(issue => ({\r\n                message: issue.message,\r\n                path: issue.path.join(\".\"),\r\n                code: issue.code\r\n            }));\r\n\r\n            logger.warn(\"Zod validation failed\", {\r\n                adapter: \"zod\",\r\n                operation: \"validate\",\r\n                method: req.method,\r\n                path: req.path,\r\n                issueCount: issues.length,\r\n                issues\r\n            });\r\n\r\n            return next(\r\n                new ValidationError(\"Validation failed.\", issues as any)\r\n            );\r\n        };\r\n    }\r\n}\r\n"]}

package/dist/core/HiSecure.d.ts

@@ -28,11 +28,10 @@ export declare class HiSecure {
     static getInstance(config?: Partial<HiSecureConfig>): HiSecure;
     static resetInstance(): void;
     init(): void;
-    isInitialized(): boolean;
     static auth(options?: {
         required?: boolean;
         roles?: string[];
-    }): (req: import("express").Request, res: import("express").Response, next: import("express").NextFunction) => void;
+    }): (req: import("express").Request, _res: import("express").Response, next: import("express").NextFunction) => void;
     static validate(schema: ValidationSchema): (req: any, res: any, next: any) => any;
     static sanitize(options?: any): (req: any, _res: any, next: any) => void;
     static rateLimit(preset: "strict" | "relaxed" | "api" | object): any;
@@ -42,8 +41,8 @@ export declare class HiSecure {
         end(): any;
     }, next: (err?: any) => any) => void;
     static json(options?: any): import("connect").NextHandleFunction[];
-    static hash(password: string): Promise<string>;
-    static verify(password: string, hash: string): Promise<boolean>;
+    static hash(value: string): Promise<string>;
+    static verify(value: string, hash: string): Promise<boolean>;
     static jwt: {
         sign: (payload: object, options?: any) => string;
         verify: (token: string) => string | import("jsonwebtoken").Jwt | import("jsonwebtoken").JwtPayload;

package/dist/core/HiSecure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HiSecure.d.ts","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkB3D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AASzD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAC,MAAM,0BAA0B,CAAC;AAE1E,qBAAa,QAAQ;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAyB;IAChD,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,WAAW,CAAS;IAGrB,WAAW,EAAG,WAAW,CAAC;IAC1B,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,WAAW,EAAG,WAAW,CAAC;IAC1B,WAAW,EAAG,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,WAAW,CAAC;IAGjC,OAAO,CAAC,cAAc,CAAM;IAC5B,OAAO,CAAC,eAAe,CAAM;IAC7B,OAAO,CAAC,kBAAkB,CAAM;IAChC,OAAO,CAAC,mBAAmB,CAAM;IACjC,OAAO,CAAC,gBAAgB,CAAM;IAC9B,OAAO,CAAC,iBAAiB,CAAM;IAG/B,OAAO;IAMP,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,QAAQ;IAQ9D,MAAM,CAAC,aAAa,IAAI,IAAI;IAI5B,IAAI,IAAI,IAAI;IA0BZ,aAAa,IAAI,OAAO;IAMxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE;IAQ9D,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAIxC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG;IAI7B,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM;IAe9D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;kBA9GJ,CAAC;;;iBAID,CAAC;IA8GtB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;WAUZ,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;WAMvC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrE,MAAM,CAAC,GAAG;wBACU,MAAM,YAAY,GAAG;wBAQrB,MAAM;;qCASO,MAAM;;MAQrC;IAIF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ;IAuBvE,OAAO,CAAC,aAAa;IAqCrB,OAAO,CAAC,aAAa;IA2BrB,OAAO,CAAC,oBAAoB;IAmB5B,OAAO,CAAC,qBAAqB;CAmDhC"}
+{"version":3,"file":"HiSecure.d.ts","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":"AAuWA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkB3D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AASzD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE3E,qBAAa,QAAQ;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAyB;IAChD,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,WAAW,CAAS;IAGrB,WAAW,EAAG,WAAW,CAAC;IAC1B,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,WAAW,EAAG,WAAW,CAAC;IAC1B,WAAW,EAAG,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,WAAW,CAAC;IAGjC,OAAO,CAAC,cAAc,CAAM;IAC5B,OAAO,CAAC,eAAe,CAAM;IAC7B,OAAO,CAAC,kBAAkB,CAAM;IAChC,OAAO,CAAC,mBAAmB,CAAM;IACjC,OAAO,CAAC,gBAAgB,CAAM;IAC9B,OAAO,CAAC,iBAAiB,CAAM;IAE/B,OAAO;IAQP,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,QAAQ;IAW9D,MAAM,CAAC,aAAa,IAAI,IAAI;IAI5B,IAAI,IAAI,IAAI;IA8BZ,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE;IAQ9D,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAIxC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG;IAI7B,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM;IAoB9D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;kBA9dtB,CAAC;;;iBAGY,CAAC;IA+djB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;WAYZ,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;WAMpC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIlE,MAAM,CAAC,GAAG;wBACU,MAAM,YAAY,GAAG;wBAGrB,MAAM;;qCAIO,MAAM;;MAGrC;IAMF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ;IAyBvE,OAAO,CAAC,aAAa;IA0CrB,OAAO,CAAC,aAAa;IA6BrB,OAAO,CAAC,oBAAoB;IAuB5B,OAAO,CAAC,qBAAqB;CAyBhC"}