hi-secure 1.0.15 → 1.0.17

package/dist/managers/AuthManager.js

@@ -1,100 +1,128 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthManager = void 0;
-const JWTAdapter_js_1 = require("../adapters/JWTAdapter.js");
-const GoogleAdapter_js_1 = require("../adapters/GoogleAdapter.js");
-const AdapterError_js_1 = require("../core/errors/AdapterError.js");
-const HttpError_js_1 = require("../core/errors/HttpError.js");
+const JWTAdapter_1 = require("../adapters/JWTAdapter");
+const GoogleAdapter_1 = require("../adapters/GoogleAdapter");
+const AdapterError_1 = require("../core/errors/AdapterError");
+const HttpError_1 = require("../core/errors/HttpError");
 const logging_1 = require("../logging");
 class AuthManager {
     constructor(opts) {
         if (!opts.jwtSecret) {
-            throw new AdapterError_js_1.AdapterError("jwtSecret required in AuthOptions");
+            throw new AdapterError_1.AdapterError("jwtSecret required in AuthOptions");
         }
         if (opts.jwtSecret.length < 32) {
-            logging_1.logger.warn(" JWT secret is less than 32 characters - consider using a stronger secret");
+            logging_1.logger.warn("Weak JWT secret detected", {
+                layer: "auth-manager",
+                operation: "init",
+                secretLength: opts.jwtSecret.length
+            });
         }
-        logging_1.logger.info("AuthManager initialized");
-        this.jwtAdapter = new JWTAdapter_js_1.JWTAdapter({
+        logging_1.logger.info("AuthManager initialized", {
+            layer: "auth-manager",
+            jwtExpiresIn: opts.jwtExpiresIn ?? "1d",
+            googleEnabled: !!opts.googleClientId
+        });
+        this.jwtAdapter = new JWTAdapter_1.JWTAdapter({
             secret: opts.jwtSecret,
-            expiresIn: opts.jwtExpiresIn ?? "1d",
+            expiresIn: opts.jwtExpiresIn ?? "1d"
         });
         if (opts.googleClientId) {
-            this.googleAdapter = new GoogleAdapter_js_1.GoogleAdapter(opts.googleClientId);
-            logging_1.logger.info("GoogleAdapter enabled");
+            this.googleAdapter = new GoogleAdapter_1.GoogleAdapter(opts.googleClientId);
+            logging_1.logger.info("Google authentication enabled", {
+                layer: "auth-manager"
+            });
         }
     }
     sign(payload, options) {
-        logging_1.logger.info("JWT Sign called");
+        logging_1.logger.info("JWT sign requested", {
+            layer: "auth-manager",
+            operation: "sign"
+        });
         return this.jwtAdapter.sign(payload, options);
     }
     verify(token) {
-        logging_1.logger.info("JWT Verify called");
+        logging_1.logger.info("JWT verify requested", {
+            layer: "auth-manager",
+            operation: "verify"
+        });
         return this.jwtAdapter.verify(token);
     }
     async verifyGoogleIdToken(idToken) {
         if (!this.googleAdapter) {
-            throw new AdapterError_js_1.AdapterError("GoogleAdapter not configured.");
+            throw new AdapterError_1.AdapterError("GoogleAdapter not configured.");
         }
-        logging_1.logger.info("Google ID Token verify called");
+        logging_1.logger.info("Google ID token verification requested", {
+            layer: "auth-manager",
+            operation: "google-verify"
+        });
         try {
             return await this.googleAdapter.verifyIdToken(idToken);
         }
         catch (err) {
-            logging_1.logger.error("Google ID Token verification failed", { error: err?.message });
-            throw HttpError_js_1.HttpError.Unauthorized("Invalid Google ID token");
+            logging_1.logger.error("Google ID token verification failed", {
+                layer: "auth-manager",
+                operation: "google-verify",
+                reason: err?.message
+            });
+            throw HttpError_1.HttpError.Unauthorized("Invalid Google ID token");
         }
     }
     protect(options) {
         const required = options?.required ?? true;
         const roles = options?.roles;
-        return (req, res, next) => {
+        return (req, _res, next) => {
             const header = req.headers["authorization"];
             if (!required && !header) {
                 return next();
             }
             if (!header) {
-                logging_1.logger.warn("Missing Authorization header", {
+                logging_1.logger.warn("Authorization header missing", {
+                    layer: "auth-manager",
+                    operation: "protect",
                     path: req.path,
                     method: req.method
                 });
-                return next(HttpError_js_1.HttpError.Unauthorized("Missing Authorization header"));
+                return next(HttpError_1.HttpError.Unauthorized("Missing Authorization header"));
             }
             const [type, token] = String(header).split(" ");
             if (type !== "Bearer" || !token) {
-                logging_1.logger.warn("Invalid Authorization header", {
+                logging_1.logger.warn("Invalid Authorization header format", {
+                    layer: "auth-manager",
+                    operation: "protect",
                     path: req.path,
                     method: req.method
                 });
-                return next(HttpError_js_1.HttpError.Unauthorized("Invalid Authorization header"));
+                return next(HttpError_1.HttpError.Unauthorized("Invalid Authorization header"));
             }
             try {
-                // Verify JWT
                 const decoded = this.verify(token);
-                // Attach to request
                 req.auth = decoded;
                 req.user = decoded;
-                // Role-based authorization - role added Middleware
                 if (roles && roles.length > 0) {
                     const userRole = decoded.role || decoded.roles?.[0];
                     if (!userRole || !roles.includes(userRole)) {
-                        logging_1.logger.warn("Insufficient permissions", {
+                        logging_1.logger.warn("Access denied: insufficient role", {
+                            layer: "auth-manager",
+                            operation: "authorize",
                             path: req.path,
                             requiredRoles: roles,
                             userRole
                         });
-                        return next(HttpError_js_1.HttpError.Forbidden("Insufficient permissions"));
+                        return next(HttpError_1.HttpError.Forbidden("Insufficient permissions"));
                     }
                 }
                 return next();
             }
             catch (err) {
-                logging_1.logger.error("JWT verify failed", {
-                    error: err?.message,
+                logging_1.logger.error("JWT authentication failed", {
+                    layer: "auth-manager",
+                    operation: "protect",
                     path: req.path,
-                    method: req.method
+                    method: req.method,
+                    reason: err?.message
                 });
-                return next(HttpError_js_1.HttpError.Unauthorized("Invalid or expired token"));
+                return next(HttpError_1.HttpError.Unauthorized("Invalid or expired token"));
             }
         };
     }

package/dist/managers/AuthManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthManager.js","sourceRoot":"","sources":["../../src/managers/AuthManager.ts"],"names":[],"mappings":";;;AAAA,6DAAuD;AACvD,mEAA6D;AAC7D,oEAA8D;AAC9D,8DAAwD;AAExD,wCAAoC;AAcpC,MAAa,WAAW;IAIpB,YAAY,IAAiB;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAY,CAAC,mCAAmC,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,gBAAM,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QAC7F,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAEvC,IAAI,CAAC,UAAU,GAAG,IAAI,0BAAU,CAAC;YAC7B,MAAM,EAAE,IAAI,CAAC,SAAS;YACtB,SAAS,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;SACvC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,GAAG,IAAI,gCAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5D,gBAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAuD;QACzE,gBAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,KAAa;QAChB,gBAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACrC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,8BAAY,CAAC,+BAA+B,CAAC,CAAC;QAC5D,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAE7C,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7E,MAAM,wBAAS,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;IAED,OAAO,CAAC,OAAwB;QAC5B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAE7B,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACvD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAG5C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvB,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAGD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,gBAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACxC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAGD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,gBAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACxC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,CAAC;gBAED,aAAa;gBACb,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAEnC,oBAAoB;gBACnB,GAAW,CAAC,IAAI,GAAG,OAAO,CAAC;gBAC3B,GAAW,CAAC,IAAI,GAAG,OAAO,CAAC;gBAE5B,mDAAmD;gBACnD,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAI,OAAe,CAAC,IAAI,IAAK,OAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;oBACtE,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACzC,gBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;4BACpC,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,aAAa,EAAE,KAAK;4BACpB,QAAQ;yBACX,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAC;oBACjE,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,gBAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;oBAC9B,KAAK,EAAE,GAAG,EAAE,OAAO;oBACnB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC,CAAC;IACN,CAAC;CACJ;AAnHD,kCAmHC","sourcesContent":["import { JWTAdapter } from \"../adapters/JWTAdapter.js\";\r\nimport { GoogleAdapter } from \"../adapters/GoogleAdapter.js\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { HttpError } from \"../core/errors/HttpError.js\";\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { logger } from \"../logging\";\r\n\r\n\r\nexport interface AuthOptions {\r\n    jwtSecret: string;\r\n    jwtExpiresIn?: string | number;\r\n    googleClientId?: string;\r\n}\r\n\r\nexport interface ProtectOptions {\r\n    required?: boolean;\r\n    roles?: string[];\r\n}\r\n\r\nexport class AuthManager {\r\n    private jwtAdapter: JWTAdapter;\r\n    private googleAdapter?: GoogleAdapter;\r\n\r\n    constructor(opts: AuthOptions) {\r\n        if (!opts.jwtSecret) {\r\n            throw new AdapterError(\"jwtSecret required in AuthOptions\");\r\n        }\r\n\r\n        if (opts.jwtSecret.length < 32) {\r\n            logger.warn(\" JWT secret is less than 32 characters - consider using a stronger secret\");\r\n        }\r\n\r\n        logger.info(\"AuthManager initialized\");\r\n\r\n        this.jwtAdapter = new JWTAdapter({\r\n            secret: opts.jwtSecret,\r\n            expiresIn: opts.jwtExpiresIn ?? \"1d\",\r\n        });\r\n\r\n        if (opts.googleClientId) {\r\n            this.googleAdapter = new GoogleAdapter(opts.googleClientId);\r\n            logger.info(\"GoogleAdapter enabled\");\r\n        }\r\n    }\r\n\r\n    sign(payload: object, options?: { expiresIn?: string | number, jti?: string }) {\r\n        logger.info(\"JWT Sign called\");\r\n        return this.jwtAdapter.sign(payload, options);\r\n    }\r\n\r\n    verify(token: string) {\r\n        logger.info(\"JWT Verify called\");\r\n        return this.jwtAdapter.verify(token);\r\n    }\r\n\r\n    async verifyGoogleIdToken(idToken: string) {\r\n        if (!this.googleAdapter) {\r\n            throw new AdapterError(\"GoogleAdapter not configured.\");\r\n        }\r\n\r\n        logger.info(\"Google ID Token verify called\");\r\n\r\n        try {\r\n            return await this.googleAdapter.verifyIdToken(idToken);\r\n        } catch (err: any) {\r\n            logger.error(\"Google ID Token verification failed\", { error: err?.message });\r\n            throw HttpError.Unauthorized(\"Invalid Google ID token\");\r\n        }\r\n    }\r\n\r\n    protect(options?: ProtectOptions) {\r\n        const required = options?.required ?? true;\r\n        const roles = options?.roles;\r\n\r\n        return (req: Request, res: Response, next: NextFunction) => {\r\n            const header = req.headers[\"authorization\"];\r\n\r\n            \r\n            if (!required && !header) {\r\n                return next();\r\n            }\r\n\r\n           \r\n            if (!header) {\r\n                logger.warn(\"Missing Authorization header\", {\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Missing Authorization header\"));\r\n            }\r\n\r\n          \r\n            const [type, token] = String(header).split(\" \");\r\n            if (type !== \"Bearer\" || !token) {\r\n                logger.warn(\"Invalid Authorization header\", {\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Invalid Authorization header\"));\r\n            }\r\n\r\n            try {\r\n\r\n                // Verify JWT\r\n                const decoded = this.verify(token);\r\n                \r\n                // Attach to request\r\n                (req as any).auth = decoded;\r\n                (req as any).user = decoded; \r\n                \r\n                // Role-based authorization - role added Middleware\r\n                if (roles && roles.length > 0) {\r\n                    const userRole = (decoded as any).role || (decoded as any).roles?.[0];\r\n                    if (!userRole || !roles.includes(userRole)) {\r\n                        logger.warn(\"Insufficient permissions\", {\r\n                            path: req.path,\r\n                            requiredRoles: roles,\r\n                            userRole\r\n                        });\r\n                        return next(HttpError.Forbidden(\"Insufficient permissions\"));\r\n                    }\r\n                }\r\n                \r\n                return next();\r\n            } catch (err: any) {\r\n                logger.error(\"JWT verify failed\", {\r\n                    error: err?.message,\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Invalid or expired token\"));\r\n            }\r\n        };\r\n    }\r\n}"]}
+{"version":3,"file":"AuthManager.js","sourceRoot":"","sources":["../../src/managers/AuthManager.ts"],"names":[],"mappings":";;;AAAA,uDAAoD;AACpD,6DAA0D;AAC1D,8DAA2D;AAC3D,wDAAqD;AAErD,wCAAoC;AAapC,MAAa,WAAW;IAIpB,YAAY,IAAiB;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,2BAAY,CAAC,mCAAmC,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,gBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBACpC,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,MAAM;gBACjB,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;aACtC,CAAC,CAAC;QACP,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YACnC,KAAK,EAAE,cAAc;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;YACvC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc;SACvC,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,GAAG,IAAI,uBAAU,CAAC;YAC7B,MAAM,EAAE,IAAI,CAAC,SAAS;YACtB,SAAS,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;SACvC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,GAAG,IAAI,6BAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5D,gBAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBACzC,KAAK,EAAE,cAAc;aACxB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAuD;QACzE,gBAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC9B,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE,MAAM;SACpB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,KAAa;QAChB,gBAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;YAChC,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE,QAAQ;SACtB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACrC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,2BAAY,CAAC,+BAA+B,CAAC,CAAC;QAC5D,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;YAClD,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE,eAAe;SAC7B,CAAC,CAAC;QAEH,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;gBAChD,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,eAAe;gBAC1B,MAAM,EAAE,GAAG,EAAE,OAAO;aACvB,CAAC,CAAC;YAEH,MAAM,qBAAS,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;IAED,OAAO,CAAC,OAAwB;QAC5B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAE7B,OAAO,CAAC,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;YACxD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAE5C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvB,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAED,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,gBAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACxC,KAAK,EAAE,cAAc;oBACrB,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,qBAAS,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,gBAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;oBAC/C,KAAK,EAAE,cAAc;oBACrB,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,qBAAS,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAElC,GAAW,CAAC,IAAI,GAAG,OAAO,CAAC;gBAC3B,GAAW,CAAC,IAAI,GAAG,OAAO,CAAC;gBAE5B,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GACT,OAAe,CAAC,IAAI,IAAK,OAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;oBAEzD,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACzC,gBAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;4BAC5C,KAAK,EAAE,cAAc;4BACrB,SAAS,EAAE,WAAW;4BACtB,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,aAAa,EAAE,KAAK;4BACpB,QAAQ;yBACX,CAAC,CAAC;wBAEH,OAAO,IAAI,CAAC,qBAAS,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAC;oBACjE,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,gBAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;oBACtC,KAAK,EAAE,cAAc;oBACrB,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,MAAM,EAAE,GAAG,EAAE,OAAO;iBACvB,CAAC,CAAC;gBAEH,OAAO,IAAI,CAAC,qBAAS,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC,CAAC;IACN,CAAC;CACJ;AAlJD,kCAkJC","sourcesContent":["import { JWTAdapter } from \"../adapters/JWTAdapter\";\r\nimport { GoogleAdapter } from \"../adapters/GoogleAdapter\";\r\nimport { AdapterError } from \"../core/errors/AdapterError\";\r\nimport { HttpError } from \"../core/errors/HttpError\";\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { logger } from \"../logging\";\r\n\r\nexport interface AuthOptions {\r\n    jwtSecret: string;\r\n    jwtExpiresIn?: string | number;\r\n    googleClientId?: string;\r\n}\r\n\r\nexport interface ProtectOptions {\r\n    required?: boolean;\r\n    roles?: string[];\r\n}\r\n\r\nexport class AuthManager {\r\n    private jwtAdapter: JWTAdapter;\r\n    private googleAdapter?: GoogleAdapter;\r\n\r\n    constructor(opts: AuthOptions) {\r\n        if (!opts.jwtSecret) {\r\n            throw new AdapterError(\"jwtSecret required in AuthOptions\");\r\n        }\r\n\r\n        if (opts.jwtSecret.length < 32) {\r\n            logger.warn(\"Weak JWT secret detected\", {\r\n                layer: \"auth-manager\",\r\n                operation: \"init\",\r\n                secretLength: opts.jwtSecret.length\r\n            });\r\n        }\r\n\r\n        logger.info(\"AuthManager initialized\", {\r\n            layer: \"auth-manager\",\r\n            jwtExpiresIn: opts.jwtExpiresIn ?? \"1d\",\r\n            googleEnabled: !!opts.googleClientId\r\n        });\r\n\r\n        this.jwtAdapter = new JWTAdapter({\r\n            secret: opts.jwtSecret,\r\n            expiresIn: opts.jwtExpiresIn ?? \"1d\"\r\n        });\r\n\r\n        if (opts.googleClientId) {\r\n            this.googleAdapter = new GoogleAdapter(opts.googleClientId);\r\n            logger.info(\"Google authentication enabled\", {\r\n                layer: \"auth-manager\"\r\n            });\r\n        }\r\n    }\r\n\r\n    sign(payload: object, options?: { expiresIn?: string | number; jti?: string }) {\r\n        logger.info(\"JWT sign requested\", {\r\n            layer: \"auth-manager\",\r\n            operation: \"sign\"\r\n        });\r\n\r\n        return this.jwtAdapter.sign(payload, options);\r\n    }\r\n\r\n    verify(token: string) {\r\n        logger.info(\"JWT verify requested\", {\r\n            layer: \"auth-manager\",\r\n            operation: \"verify\"\r\n        });\r\n\r\n        return this.jwtAdapter.verify(token);\r\n    }\r\n\r\n    async verifyGoogleIdToken(idToken: string) {\r\n        if (!this.googleAdapter) {\r\n            throw new AdapterError(\"GoogleAdapter not configured.\");\r\n        }\r\n\r\n        logger.info(\"Google ID token verification requested\", {\r\n            layer: \"auth-manager\",\r\n            operation: \"google-verify\"\r\n        });\r\n\r\n        try {\r\n            return await this.googleAdapter.verifyIdToken(idToken);\r\n        } catch (err: any) {\r\n            logger.error(\"Google ID token verification failed\", {\r\n                layer: \"auth-manager\",\r\n                operation: \"google-verify\",\r\n                reason: err?.message\r\n            });\r\n\r\n            throw HttpError.Unauthorized(\"Invalid Google ID token\");\r\n        }\r\n    }\r\n\r\n    protect(options?: ProtectOptions) {\r\n        const required = options?.required ?? true;\r\n        const roles = options?.roles;\r\n\r\n        return (req: Request, _res: Response, next: NextFunction) => {\r\n            const header = req.headers[\"authorization\"];\r\n\r\n            if (!required && !header) {\r\n                return next();\r\n            }\r\n\r\n            if (!header) {\r\n                logger.warn(\"Authorization header missing\", {\r\n                    layer: \"auth-manager\",\r\n                    operation: \"protect\",\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Missing Authorization header\"));\r\n            }\r\n\r\n            const [type, token] = String(header).split(\" \");\r\n            if (type !== \"Bearer\" || !token) {\r\n                logger.warn(\"Invalid Authorization header format\", {\r\n                    layer: \"auth-manager\",\r\n                    operation: \"protect\",\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Invalid Authorization header\"));\r\n            }\r\n\r\n            try {\r\n                const decoded = this.verify(token);\r\n\r\n                (req as any).auth = decoded;\r\n                (req as any).user = decoded;\r\n\r\n                if (roles && roles.length > 0) {\r\n                    const userRole =\r\n                        (decoded as any).role || (decoded as any).roles?.[0];\r\n\r\n                    if (!userRole || !roles.includes(userRole)) {\r\n                        logger.warn(\"Access denied: insufficient role\", {\r\n                            layer: \"auth-manager\",\r\n                            operation: \"authorize\",\r\n                            path: req.path,\r\n                            requiredRoles: roles,\r\n                            userRole\r\n                        });\r\n\r\n                        return next(HttpError.Forbidden(\"Insufficient permissions\"));\r\n                    }\r\n                }\r\n\r\n                return next();\r\n            } catch (err: any) {\r\n                logger.error(\"JWT authentication failed\", {\r\n                    layer: \"auth-manager\",\r\n                    operation: \"protect\",\r\n                    path: req.path,\r\n                    method: req.method,\r\n                    reason: err?.message\r\n                });\r\n\r\n                return next(HttpError.Unauthorized(\"Invalid or expired token\"));\r\n            }\r\n        };\r\n    }\r\n}\r\n"]}

package/dist/managers/CorsManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CorsManager.d.ts","sourceRoot":"","sources":["../../src/managers/CorsManager.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB,qBAAa,WAAW;IAEpB,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG;kBA2BiP,CAAC;;;iBAAmH,CAAC;CAAjY"}
+{"version":3,"file":"CorsManager.d.ts","sourceRoot":"","sources":["../../src/managers/CorsManager.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB,qBAAa,WAAW;IACpB,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG;kBAoC6C,CAAC;;;iBAAmH,CAAC;CAD7L"}

package/dist/managers/CorsManager.js

@@ -6,30 +6,37 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CorsManager = void 0;
 const cors_1 = __importDefault(require("cors"));
 const logging_1 = require("../logging");
-const AdapterError_js_1 = require("../core/errors/AdapterError.js");
+const AdapterError_1 = require("../core/errors/AdapterError");
 class CorsManager {
     middleware(options) {
         try {
             const defaultOptions = {
-                origin: '*',
-                methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
-                allowedHeaders: ['Content-Type', 'Authorization'],
+                origin: "*",
+                methods: ["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS"],
+                allowedHeaders: ["Content-Type", "Authorization"],
                 credentials: false,
                 maxAge: 86400
             };
-            const finalOptions = options ? { ...defaultOptions, ...options } : defaultOptions;
-            logging_1.logger.debug("CORS configured", {
+            const finalOptions = options
+                ? { ...defaultOptions, ...options }
+                : defaultOptions;
+            // ✅ visible + clean log
+            logging_1.logger.info("CORS middleware configured", {
+                layer: "cors-manager",
+                operation: "init",
                 origin: finalOptions.origin,
-                methods: finalOptions.methods
+                methods: finalOptions.methods,
+                credentials: finalOptions.credentials
             });
             return (0, cors_1.default)(finalOptions);
         }
         catch (err) {
-            logging_1.logger.error(" CORS Manager: failed to create CORS middleware", {
-                error: err?.message || err,
-                options
+            logging_1.logger.error("CORS middleware initialization failed", {
+                layer: "cors-manager",
+                operation: "init",
+                reason: err?.message
             });
-            throw new AdapterError_js_1.AdapterError("CORS middleware initialization failed.");
+            throw new AdapterError_1.AdapterError("CORS middleware initialization failed.");
         }
     }
 }

package/dist/managers/CorsManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"CorsManager.js","sourceRoot":"","sources":["../../src/managers/CorsManager.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AACxB,wCAAoC;AACpC,oEAA8D;AAE9D,MAAa,WAAW;IAEpB,UAAU,CAAC,OAAa;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;gBAC7D,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;gBACjD,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,KAAK;aAChB,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;YAElF,gBAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;gBAC5B,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,YAAY,CAAC,OAAO;aAChC,CAAC,CAAC;YAEH,OAAO,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC;QAE9B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE;gBAC5D,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;gBAC1B,OAAO;aACV,CAAC,CAAC;YACH,MAAM,IAAI,8BAAY,CAAC,wCAAwC,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;CACJ;AA7BD,kCA6BC","sourcesContent":["import cors from \"cors\";\r\nimport { logger } from \"../logging\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\nexport class CorsManager {\r\n    \r\n    middleware(options?: any) {\r\n        try {\r\n            const defaultOptions = {\r\n                origin: '*',\r\n                methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\r\n                allowedHeaders: ['Content-Type', 'Authorization'],\r\n                credentials: false,\r\n                maxAge: 86400\r\n            };\r\n            \r\n            const finalOptions = options ? { ...defaultOptions, ...options } : defaultOptions;\r\n            \r\n            logger.debug(\"CORS configured\", {\r\n                origin: finalOptions.origin,\r\n                methods: finalOptions.methods\r\n            });\r\n            \r\n            return cors(finalOptions);\r\n            \r\n        } catch (err: any) {\r\n            logger.error(\" CORS Manager: failed to create CORS middleware\", {\r\n                error: err?.message || err,\r\n                options\r\n            });\r\n            throw new AdapterError(\"CORS middleware initialization failed.\");\r\n        }\r\n    }\r\n}"]}
+{"version":3,"file":"CorsManager.js","sourceRoot":"","sources":["../../src/managers/CorsManager.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AACxB,wCAAoC;AACpC,8DAA2D;AAE3D,MAAa,WAAW;IACpB,UAAU,CAAC,OAAa;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;gBAC7D,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;gBACjD,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,KAAK;aAChB,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO;gBACxB,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE;gBACnC,CAAC,CAAC,cAAc,CAAC;YAErB,wBAAwB;YACxB,gBAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;gBACtC,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,WAAW,EAAE,YAAY,CAAC,WAAW;aACxC,CAAC,CAAC;YAEH,OAAO,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC;QAE9B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;gBAClD,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,GAAG,EAAE,OAAO;aACvB,CAAC,CAAC;YAEH,MAAM,IAAI,2BAAY,CAAC,wCAAwC,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;CACJ;AApCD,kCAoCC","sourcesContent":["import cors from \"cors\";\r\nimport { logger } from \"../logging\";\r\nimport { AdapterError } from \"../core/errors/AdapterError\";\r\n\r\nexport class CorsManager {\r\n    middleware(options?: any) {\r\n        try {\r\n            const defaultOptions = {\r\n                origin: \"*\",\r\n                methods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\"],\r\n                allowedHeaders: [\"Content-Type\", \"Authorization\"],\r\n                credentials: false,\r\n                maxAge: 86400\r\n            };\r\n\r\n            const finalOptions = options\r\n                ? { ...defaultOptions, ...options }\r\n                : defaultOptions;\r\n\r\n            // ✅ visible + clean log\r\n            logger.info(\"CORS middleware configured\", {\r\n                layer: \"cors-manager\",\r\n                operation: \"init\",\r\n                origin: finalOptions.origin,\r\n                methods: finalOptions.methods,\r\n                credentials: finalOptions.credentials\r\n            });\r\n\r\n            return cors(finalOptions);\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"CORS middleware initialization failed\", {\r\n                layer: \"cors-manager\",\r\n                operation: \"init\",\r\n                reason: err?.message\r\n            });\r\n\r\n            throw new AdapterError(\"CORS middleware initialization failed.\");\r\n        }\r\n    }\r\n}\r\n"]}

package/dist/managers/HashManager.d.ts

@@ -1,4 +1,4 @@
-import { HiSecureConfig } from "../core/types/HiSecureConfig.js";
+import { HiSecureConfig } from "../core/types/HiSecureConfig";
 interface HashAdapter {
     hash(value: string): Promise<string>;
     verify(value: string, hashed: string): Promise<boolean>;

package/dist/managers/HashManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HashManager.d.ts","sourceRoot":"","sources":["../../src/managers/HashManager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAGjE,UAAU,WAAW;IACjB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,UAAU;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;CACzB;AAED,qBAAa,WAAW;IACpB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,cAAc,CAAc;IACpC,OAAO,CAAC,eAAe,CAAqB;gBAGxC,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,EACjC,cAAc,EAAE,WAAW,EAC3B,eAAe,EAAE,WAAW,GAAG,IAAI;IAOjC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IA6C/E,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CA4BhE"}
+{"version":3,"file":"HashManager.d.ts","sourceRoot":"","sources":["../../src/managers/HashManager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAG9D,UAAU,WAAW;IACjB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,UAAU;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;CACzB;AAED,qBAAa,WAAW;IACpB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,cAAc,CAAc;IACpC,OAAO,CAAC,eAAe,CAAqB;gBAGxC,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,EACjC,cAAc,EAAE,WAAW,EAC3B,eAAe,EAAE,WAAW,GAAG,IAAI;IAajC,IAAI,CACN,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC,UAAU,CAAC;IAyDhB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAoChE"}

package/dist/managers/HashManager.js

@@ -1,13 +1,18 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HashManager = void 0;
-const AdapterError_js_1 = require("../core/errors/AdapterError.js");
+const AdapterError_1 = require("../core/errors/AdapterError");
 const logging_1 = require("../logging");
 class HashManager {
     constructor(config, primaryAdapter, fallbackAdapter) {
         this.config = config;
         this.primaryAdapter = primaryAdapter;
         this.fallbackAdapter = fallbackAdapter;
+        logging_1.logger.info("HashManager initialized", {
+            layer: "hash-manager",
+            primary: config.primary,
+            fallbackEnabled: !!fallbackAdapter
+        });
     }
     async hash(value, options) {
         try {
@@ -20,55 +25,68 @@ class HashManager {
         }
         catch (err) {
             logging_1.logger.warn("Primary hashing failed", {
-                error: err.message,
-                algorithm: this.config.primary
+                layer: "hash-manager",
+                operation: "hash",
+                algorithm: this.config.primary,
+                reason: err?.message
             });
             if (!options?.allowFallback || !this.fallbackAdapter) {
-                throw new AdapterError_js_1.AdapterError(`Primary hashing (${this.config.primary}) failed. Fallback not allowed.`);
+                throw new AdapterError_1.AdapterError(`Primary hashing (${this.config.primary}) failed. Fallback not allowed.`);
             }
             try {
                 const hash = await this.fallbackAdapter.hash(value);
-                // Log security downgrade warning
-                logging_1.logger.warn("SECURITY DOWNGRADE: Using fallback hashing", {
+                // ⚠️ security downgrade log (VERY GOOD PRACTICE)
+                logging_1.logger.warn("Hashing fallback used (security downgrade)", {
+                    layer: "hash-manager",
+                    operation: "hash",
                     from: this.config.primary,
                     to: this.config.fallback
                 });
                 return {
                     hash,
-                    algorithm: this.config.fallback || 'bcrypt',
+                    algorithm: this.config.fallback || "bcrypt",
                     usedFallback: true
                 };
             }
             catch (fallbackErr) {
                 logging_1.logger.error("Fallback hashing failed", {
-                    error: fallbackErr?.message,
+                    layer: "hash-manager",
+                    operation: "hash",
+                    from: this.config.primary,
+                    to: this.config.fallback,
+                    reason: fallbackErr?.message
                 });
-                throw new AdapterError_js_1.AdapterError("Both primary and fallback hashing failed.");
+                throw new AdapterError_1.AdapterError("Both primary and fallback hashing failed.");
             }
         }
     }
     async verify(value, hashed) {
-        //  primary adapter - first
         try {
             return await this.primaryAdapter.verify(value, hashed);
         }
         catch (primaryErr) {
-            logging_1.logger.warn("Primary verify failed", {
-                error: primaryErr?.message,
+            logging_1.logger.warn("Primary hash verification failed", {
+                layer: "hash-manager",
+                operation: "verify",
+                algorithm: this.config.primary,
+                reason: primaryErr?.message
             });
-            //  fallback exists -  try it
             if (this.fallbackAdapter) {
                 try {
                     return await this.fallbackAdapter.verify(value, hashed);
                 }
                 catch (fallbackErr) {
-                    logging_1.logger.error(" Fallback verify failed", {
-                        error: fallbackErr?.message,
+                    logging_1.logger.error("Fallback hash verification failed", {
+                        layer: "hash-manager",
+                        operation: "verify",
+                        from: this.config.primary,
+                        to: this.config.fallback,
+                        reason: fallbackErr?.message
                     });
-                    throw new AdapterError_js_1.AdapterError("Both primary and fallback verify failed.");
+                    throw new AdapterError_1.AdapterError("Both primary and fallback verify failed.");
                 }
             }
-            throw new AdapterError_js_1.AdapterError("Primary verify failed and no fallback adapter configured.");
+            throw new AdapterError_1.AdapterError("Primary verify failed and no fallback adapter configured.");
         }
     }
 }

package/dist/managers/HashManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"HashManager.js","sourceRoot":"","sources":["../../src/managers/HashManager.ts"],"names":[],"mappings":";;;AAAA,oEAA8D;AAE9D,wCAAoC;AAapC,MAAa,WAAW;IAKpB,YACI,MAAiC,EACjC,cAA2B,EAC3B,eAAmC;QAEnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,OAAqC;QAC3D,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO;gBACH,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC9B,YAAY,EAAE,KAAK;aACtB,CAAC;QACN,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBAClC,KAAK,EAAE,GAAG,CAAC,OAAO;gBAClB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;aACjC,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBACnD,MAAM,IAAI,8BAAY,CAClB,oBAAoB,IAAI,CAAC,MAAM,CAAC,OAAO,iCAAiC,CAC3E,CAAC;YACN,CAAC;YAED,IAAI,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAEpD,iCAAiC;gBACjC,gBAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;oBACtD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBACzB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAC3B,CAAC,CAAC;gBAEH,OAAO;oBACH,IAAI;oBACJ,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ;oBAC3C,YAAY,EAAE,IAAI;iBACrB,CAAC;YACN,CAAC;YAAC,OAAO,WAAgB,EAAE,CAAC;gBACxB,gBAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;oBACpC,KAAK,EAAE,WAAW,EAAE,OAAO;iBAC9B,CAAC,CAAC;gBACH,MAAM,IAAI,8BAAY,CAClB,2CAA2C,CAC9C,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,MAAc;QACtC,2BAA2B;QAC3B,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,UAAe,EAAE,CAAC;YACvB,gBAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACjC,KAAK,EAAE,UAAU,EAAE,OAAO;aAC7B,CAAC,CAAC;YAEH,6BAA6B;YAC7B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACD,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC5D,CAAC;gBAAC,OAAO,WAAgB,EAAE,CAAC;oBACxB,gBAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;wBACpC,KAAK,EAAE,WAAW,EAAE,OAAO;qBAC9B,CAAC,CAAC;oBACH,MAAM,IAAI,8BAAY,CAClB,0CAA0C,CAC7C,CAAC;gBACN,CAAC;YACL,CAAC;YAED,MAAM,IAAI,8BAAY,CAClB,2DAA2D,CAC9D,CAAC;QACN,CAAC;IACL,CAAC;CACJ;AAxFD,kCAwFC","sourcesContent":["import { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { HiSecureConfig } from \"../core/types/HiSecureConfig.js\";\r\nimport { logger } from \"../logging\";\r\n\r\ninterface HashAdapter {\r\n    hash(value: string): Promise<string>;\r\n    verify(value: string, hashed: string): Promise<boolean>;\r\n}\r\n\r\nexport interface HashResult {\r\n    hash: string;\r\n    algorithm: string;\r\n    usedFallback: boolean;\r\n}\r\n\r\nexport class HashManager {\r\n    private config: HiSecureConfig[\"hashing\"];\r\n    private primaryAdapter: HashAdapter;\r\n    private fallbackAdapter: HashAdapter | null;\r\n\r\n    constructor(\r\n        config: HiSecureConfig[\"hashing\"],\r\n        primaryAdapter: HashAdapter,\r\n        fallbackAdapter: HashAdapter | null\r\n    ) {\r\n        this.config = config;\r\n        this.primaryAdapter = primaryAdapter;\r\n        this.fallbackAdapter = fallbackAdapter;\r\n    }\r\n\r\n    async hash(value: string, options?: { allowFallback?: boolean }): Promise<HashResult> {\r\n        try {\r\n            const hash = await this.primaryAdapter.hash(value);\r\n            return {\r\n                hash,\r\n                algorithm: this.config.primary,\r\n                usedFallback: false\r\n            };\r\n        } catch (err: any) {\r\n            logger.warn(\"Primary hashing failed\", {\r\n                error: err.message,\r\n                algorithm: this.config.primary\r\n            });\r\n\r\n            if (!options?.allowFallback || !this.fallbackAdapter) {\r\n                throw new AdapterError(\r\n                    `Primary hashing (${this.config.primary}) failed. Fallback not allowed.`\r\n                );\r\n            }\r\n\r\n            try {\r\n                const hash = await this.fallbackAdapter.hash(value);\r\n                \r\n                // Log security downgrade warning\r\n                logger.warn(\"SECURITY DOWNGRADE: Using fallback hashing\", {\r\n                    from: this.config.primary,\r\n                    to: this.config.fallback\r\n                });\r\n                \r\n                return {\r\n                    hash,\r\n                    algorithm: this.config.fallback || 'bcrypt',\r\n                    usedFallback: true\r\n                };\r\n            } catch (fallbackErr: any) {\r\n                logger.error(\"Fallback hashing failed\", {\r\n                    error: fallbackErr?.message,\r\n                });\r\n                throw new AdapterError(\r\n                    \"Both primary and fallback hashing failed.\"\r\n                );\r\n            }\r\n        }\r\n    }\r\n\r\n    async verify(value: string, hashed: string): Promise<boolean> {\r\n        //  primary adapter - first\r\n        try {\r\n            return await this.primaryAdapter.verify(value, hashed);\r\n        } catch (primaryErr: any) {\r\n            logger.warn(\"Primary verify failed\", {\r\n                error: primaryErr?.message,\r\n            });\r\n\r\n            //  fallback exists -  try it\r\n            if (this.fallbackAdapter) {\r\n                try {\r\n                    return await this.fallbackAdapter.verify(value, hashed);\r\n                } catch (fallbackErr: any) {\r\n                    logger.error(\" Fallback verify failed\", {\r\n                        error: fallbackErr?.message,\r\n                    });\r\n                    throw new AdapterError(\r\n                        \"Both primary and fallback verify failed.\"\r\n                    );\r\n                }\r\n            }\r\n            \r\n            throw new AdapterError(\r\n                \"Primary verify failed and no fallback adapter configured.\"\r\n            );\r\n        }\r\n    }\r\n}"]}
+{"version":3,"file":"HashManager.js","sourceRoot":"","sources":["../../src/managers/HashManager.ts"],"names":[],"mappings":";;;AAAA,8DAA2D;AAE3D,wCAAoC;AAapC,MAAa,WAAW;IAKpB,YACI,MAAiC,EACjC,cAA2B,EAC3B,eAAmC;QAEnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QAEvC,gBAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YACnC,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,eAAe,EAAE,CAAC,CAAC,eAAe;SACrC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,IAAI,CACN,KAAa,EACb,OAAqC;QAErC,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEnD,OAAO;gBACH,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC9B,YAAY,EAAE,KAAK;aACtB,CAAC;QAEN,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBAClC,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,MAAM;gBACjB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC9B,MAAM,EAAE,GAAG,EAAE,OAAO;aACvB,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBACnD,MAAM,IAAI,2BAAY,CAClB,oBAAoB,IAAI,CAAC,MAAM,CAAC,OAAO,iCAAiC,CAC3E,CAAC;YACN,CAAC;YAED,IAAI,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAEpD,iDAAiD;gBACjD,gBAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;oBACtD,KAAK,EAAE,cAAc;oBACrB,SAAS,EAAE,MAAM;oBACjB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBACzB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAC3B,CAAC,CAAC;gBAEH,OAAO;oBACH,IAAI;oBACJ,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ;oBAC3C,YAAY,EAAE,IAAI;iBACrB,CAAC;YAEN,CAAC;YAAC,OAAO,WAAgB,EAAE,CAAC;gBACxB,gBAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;oBACpC,KAAK,EAAE,cAAc;oBACrB,SAAS,EAAE,MAAM;oBACjB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBACzB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;oBACxB,MAAM,EAAE,WAAW,EAAE,OAAO;iBAC/B,CAAC,CAAC;gBAEH,MAAM,IAAI,2BAAY,CAClB,2CAA2C,CAC9C,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,MAAc;QACtC,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAE3D,CAAC;QAAC,OAAO,UAAe,EAAE,CAAC;YACvB,gBAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC5C,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAC9B,MAAM,EAAE,UAAU,EAAE,OAAO;aAC9B,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACD,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAE5D,CAAC;gBAAC,OAAO,WAAgB,EAAE,CAAC;oBACxB,gBAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;wBAC9C,KAAK,EAAE,cAAc;wBACrB,SAAS,EAAE,QAAQ;wBACnB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;wBACzB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;wBACxB,MAAM,EAAE,WAAW,EAAE,OAAO;qBAC/B,CAAC,CAAC;oBAEH,MAAM,IAAI,2BAAY,CAClB,0CAA0C,CAC7C,CAAC;gBACN,CAAC;YACL,CAAC;YAED,MAAM,IAAI,2BAAY,CAClB,2DAA2D,CAC9D,CAAC;QACN,CAAC;IACL,CAAC;CACJ;AArHD,kCAqHC","sourcesContent":["import { AdapterError } from \"../core/errors/AdapterError\";\r\nimport { HiSecureConfig } from \"../core/types/HiSecureConfig\";\r\nimport { logger } from \"../logging\";\r\n\r\ninterface HashAdapter {\r\n    hash(value: string): Promise<string>;\r\n    verify(value: string, hashed: string): Promise<boolean>;\r\n}\r\n\r\nexport interface HashResult {\r\n    hash: string;\r\n    algorithm: string;\r\n    usedFallback: boolean;\r\n}\r\n\r\nexport class HashManager {\r\n    private config: HiSecureConfig[\"hashing\"];\r\n    private primaryAdapter: HashAdapter;\r\n    private fallbackAdapter: HashAdapter | null;\r\n\r\n    constructor(\r\n        config: HiSecureConfig[\"hashing\"],\r\n        primaryAdapter: HashAdapter,\r\n        fallbackAdapter: HashAdapter | null\r\n    ) {\r\n        this.config = config;\r\n        this.primaryAdapter = primaryAdapter;\r\n        this.fallbackAdapter = fallbackAdapter;\r\n\r\n        logger.info(\"HashManager initialized\", {\r\n            layer: \"hash-manager\",\r\n            primary: config.primary,\r\n            fallbackEnabled: !!fallbackAdapter\r\n        });\r\n    }\r\n\r\n    async hash(\r\n        value: string,\r\n        options?: { allowFallback?: boolean }\r\n    ): Promise<HashResult> {\r\n        try {\r\n            const hash = await this.primaryAdapter.hash(value);\r\n\r\n            return {\r\n                hash,\r\n                algorithm: this.config.primary,\r\n                usedFallback: false\r\n            };\r\n\r\n        } catch (err: any) {\r\n            logger.warn(\"Primary hashing failed\", {\r\n                layer: \"hash-manager\",\r\n                operation: \"hash\",\r\n                algorithm: this.config.primary,\r\n                reason: err?.message\r\n            });\r\n\r\n            if (!options?.allowFallback || !this.fallbackAdapter) {\r\n                throw new AdapterError(\r\n                    `Primary hashing (${this.config.primary}) failed. Fallback not allowed.`\r\n                );\r\n            }\r\n\r\n            try {\r\n                const hash = await this.fallbackAdapter.hash(value);\r\n\r\n                // ⚠️ security downgrade log (VERY GOOD PRACTICE)\r\n                logger.warn(\"Hashing fallback used (security downgrade)\", {\r\n                    layer: \"hash-manager\",\r\n                    operation: \"hash\",\r\n                    from: this.config.primary,\r\n                    to: this.config.fallback\r\n                });\r\n\r\n                return {\r\n                    hash,\r\n                    algorithm: this.config.fallback || \"bcrypt\",\r\n                    usedFallback: true\r\n                };\r\n\r\n            } catch (fallbackErr: any) {\r\n                logger.error(\"Fallback hashing failed\", {\r\n                    layer: \"hash-manager\",\r\n                    operation: \"hash\",\r\n                    from: this.config.primary,\r\n                    to: this.config.fallback,\r\n                    reason: fallbackErr?.message\r\n                });\r\n\r\n                throw new AdapterError(\r\n                    \"Both primary and fallback hashing failed.\"\r\n                );\r\n            }\r\n        }\r\n    }\r\n\r\n    async verify(value: string, hashed: string): Promise<boolean> {\r\n        try {\r\n            return await this.primaryAdapter.verify(value, hashed);\r\n\r\n        } catch (primaryErr: any) {\r\n            logger.warn(\"Primary hash verification failed\", {\r\n                layer: \"hash-manager\",\r\n                operation: \"verify\",\r\n                algorithm: this.config.primary,\r\n                reason: primaryErr?.message\r\n            });\r\n\r\n            if (this.fallbackAdapter) {\r\n                try {\r\n                    return await this.fallbackAdapter.verify(value, hashed);\r\n\r\n                } catch (fallbackErr: any) {\r\n                    logger.error(\"Fallback hash verification failed\", {\r\n                        layer: \"hash-manager\",\r\n                        operation: \"verify\",\r\n                        from: this.config.primary,\r\n                        to: this.config.fallback,\r\n                        reason: fallbackErr?.message\r\n                    });\r\n\r\n                    throw new AdapterError(\r\n                        \"Both primary and fallback verify failed.\"\r\n                    );\r\n                }\r\n            }\r\n\r\n            throw new AdapterError(\r\n                \"Primary verify failed and no fallback adapter configured.\"\r\n            );\r\n        }\r\n    }\r\n}\r\n"]}

package/dist/managers/JsonManager.d.ts

@@ -1,6 +1,6 @@
 export declare class JsonManager {
     middleware(options?: any): import("connect").NextHandleFunction;
     urlencoded(options?: any): import("connect").NextHandleFunction;
-    queryParser(options?: any): (req: any, res: any, next: any) => void;
+    queryParser(options?: any): (req: any, _res: any, next: any) => void;
 }
 //# sourceMappingURL=JsonManager.d.ts.map

package/dist/managers/JsonManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"JsonManager.d.ts","sourceRoot":"","sources":["../../src/managers/JsonManager.ts"],"names":[],"mappings":"AAKA,qBAAa,WAAW;IACpB,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG;IAcxB,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG;IAexB,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,IACb,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG;CAsB5C"}
+{"version":3,"file":"JsonManager.d.ts","sourceRoot":"","sources":["../../src/managers/JsonManager.ts"],"names":[],"mappings":"AAKA,qBAAa,WAAW;IACpB,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG;IA8BxB,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG;IA8BxB,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,IACb,KAAK,GAAG,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG;CAiC7C"}

package/dist/managers/JsonManager.js

@@ -7,41 +7,62 @@ exports.JsonManager = void 0;
 const express_1 = __importDefault(require("express"));
 const qs_1 = __importDefault(require("qs"));
 const logging_1 = require("../logging");
-const AdapterError_js_1 = require("../core/errors/AdapterError.js");
+const AdapterError_1 = require("../core/errors/AdapterError");
 class JsonManager {
     middleware(options) {
         try {
             const defaultOptions = {
-                limit: '1mb',
+                limit: "1mb",
                 inflate: true,
                 strict: true
             };
-            return express_1.default.json({ ...defaultOptions, ...(options || {}) });
+            const finalOptions = { ...defaultOptions, ...(options || {}) };
+            logging_1.logger.info("JSON body parser configured", {
+                layer: "json-manager",
+                operation: "json",
+                limit: finalOptions.limit,
+                strict: finalOptions.strict
+            });
+            return express_1.default.json(finalOptions);
         }
         catch (err) {
-            logging_1.logger.error("JSON Manager: failed to create JSON parser");
-            throw new AdapterError_js_1.AdapterError("JSON parser initialization failed.");
+            logging_1.logger.error("JSON body parser initialization failed", {
+                layer: "json-manager",
+                operation: "json",
+                reason: err?.message
+            });
+            throw new AdapterError_1.AdapterError("JSON parser initialization failed.");
         }
     }
     urlencoded(options) {
         try {
             const defaultOptions = {
                 extended: true,
-                limit: '1mb',
+                limit: "1mb",
                 parameterLimit: 1000
             };
-            const opts = { ...defaultOptions, ...(options || {}) };
-            return express_1.default.urlencoded(opts);
+            const finalOptions = { ...defaultOptions, ...(options || {}) };
+            logging_1.logger.info("URL-encoded parser configured", {
+                layer: "json-manager",
+                operation: "urlencoded",
+                limit: finalOptions.limit,
+                parameterLimit: finalOptions.parameterLimit
+            });
+            return express_1.default.urlencoded(finalOptions);
         }
         catch (err) {
-            logging_1.logger.error("URL-encoded parser failed");
-            throw new AdapterError_js_1.AdapterError("URL-encoded parser initialization failed.");
+            logging_1.logger.error("URL-encoded parser initialization failed", {
+                layer: "json-manager",
+                operation: "urlencoded",
+                reason: err?.message
+            });
+            throw new AdapterError_1.AdapterError("URL-encoded parser initialization failed.");
         }
     }
     queryParser(options) {
-        return (req, res, next) => {
+        return (req, _res, next) => {
             try {
-                if (!req.parsedQuery && req.url.includes('?')) {
+                if (!req.parsedQuery && req.url.includes("?")) {
                     const queryString = req.url.split("?")[1] || "";
                     const parsed = qs_1.default.parse(queryString, {
                         depth: 5,
@@ -49,15 +70,22 @@ class JsonManager {
                         ...options
                     });
                     req.parsedQuery = parsed;
-                    logging_1.logger.debug(" Query parsed", {
-                        keys: Object.keys(parsed)
+                    // ✅ visible + safe info
+                    logging_1.logger.info("Query parameters parsed", {
+                        layer: "json-manager",
+                        operation: "query-parse",
+                        keyCount: Object.keys(parsed).length
                     });
                 }
                 next();
             }
             catch (err) {
-                logging_1.logger.error("Failed to parse query", { error: err?.message });
-                next(new AdapterError_js_1.AdapterError("Query parsing failed."));
+                logging_1.logger.error("Query parsing failed", {
+                    layer: "json-manager",
+                    operation: "query-parse",
+                    reason: err?.message
+                });
+                next(new AdapterError_1.AdapterError("Query parsing failed."));
             }
         };
     }

package/dist/managers/JsonManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"JsonManager.js","sourceRoot":"","sources":["../../src/managers/JsonManager.ts"],"names":[],"mappings":";;;;;;AAAA,sDAA8B;AAC9B,4CAAoB;AACpB,wCAAoC;AACpC,oEAA8D;AAE9D,MAAa,WAAW;IACpB,UAAU,CAAC,OAAa;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI;aACf,CAAC;YACF,OAAO,iBAAO,CAAC,IAAI,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC3D,MAAM,IAAI,8BAAY,CAAC,oCAAoC,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IAED,UAAU,CAAC,OAAa;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,KAAK;gBACZ,cAAc,EAAE,IAAI;aACvB,CAAC;YACF,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,OAAO,iBAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC1C,MAAM,IAAI,8BAAY,CAAC,2CAA2C,CAAC,CAAC;QACxE,CAAC;IACL,CAAC;IAED,WAAW,CAAC,OAAa;QACrB,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;YACrC,IAAI,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5C,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAChD,MAAM,MAAM,GAAG,YAAE,CAAC,KAAK,CAAC,WAAW,EAAE;wBACjC,KAAK,EAAE,CAAC;wBACR,cAAc,EAAE,GAAG;wBACnB,GAAG,OAAO;qBACb,CAAC,CAAC;oBAEH,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC;oBACzB,gBAAM,CAAC,KAAK,CAAC,eAAe,EAAE;wBAC1B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;qBAC5B,CAAC,CAAC;gBACP,CAAC;gBACD,IAAI,EAAE,CAAC;YACX,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,gBAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC/D,IAAI,CAAC,IAAI,8BAAY,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACpD,CAAC;QACL,CAAC,CAAC;IACN,CAAC;CACJ;AArDD,kCAqDC","sourcesContent":["import express from \"express\";\r\nimport qs from \"qs\";\r\nimport { logger } from \"../logging\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\nexport class JsonManager {\r\n    middleware(options?: any) {\r\n        try {\r\n            const defaultOptions = {\r\n                limit: '1mb',\r\n                inflate: true,\r\n                strict: true\r\n            };\r\n            return express.json({ ...defaultOptions, ...(options || {}) });\r\n        } catch (err: any) {\r\n            logger.error(\"JSON Manager: failed to create JSON parser\");\r\n            throw new AdapterError(\"JSON parser initialization failed.\");\r\n        }\r\n    }\r\n\r\n    urlencoded(options?: any) {\r\n        try {\r\n            const defaultOptions = {\r\n                extended: true,\r\n                limit: '1mb',\r\n                parameterLimit: 1000\r\n            };\r\n            const opts = { ...defaultOptions, ...(options || {}) };\r\n            return express.urlencoded(opts);\r\n        } catch (err: any) {\r\n            logger.error(\"URL-encoded parser failed\");\r\n            throw new AdapterError(\"URL-encoded parser initialization failed.\");\r\n        }\r\n    }\r\n\r\n    queryParser(options?: any) {\r\n        return (req: any, res: any, next: any) => {\r\n            try {\r\n                if (!req.parsedQuery && req.url.includes('?')) {\r\n                    const queryString = req.url.split(\"?\")[1] || \"\";\r\n                    const parsed = qs.parse(queryString, {\r\n                        depth: 5,\r\n                        parameterLimit: 100,\r\n                        ...options\r\n                    });\r\n                    \r\n                    req.parsedQuery = parsed;\r\n                    logger.debug(\" Query parsed\", {\r\n                        keys: Object.keys(parsed)\r\n                    });\r\n                }\r\n                next();\r\n            } catch (err: any) {\r\n                logger.error(\"Failed to parse query\", { error: err?.message });\r\n                next(new AdapterError(\"Query parsing failed.\"));\r\n            }\r\n        };\r\n    }\r\n}"]}
+{"version":3,"file":"JsonManager.js","sourceRoot":"","sources":["../../src/managers/JsonManager.ts"],"names":[],"mappings":";;;;;;AAAA,sDAA8B;AAC9B,4CAAoB;AACpB,wCAAoC;AACpC,8DAA2D;AAE3D,MAAa,WAAW;IACpB,UAAU,CAAC,OAAa;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI;aACf,CAAC;YAEF,MAAM,YAAY,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAE/D,gBAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBACvC,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,MAAM;gBACjB,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,MAAM,EAAE,YAAY,CAAC,MAAM;aAC9B,CAAC,CAAC;YAEH,OAAO,iBAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEtC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;gBACnD,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,GAAG,EAAE,OAAO;aACvB,CAAC,CAAC;YAEH,MAAM,IAAI,2BAAY,CAAC,oCAAoC,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IAED,UAAU,CAAC,OAAa;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,KAAK;gBACZ,cAAc,EAAE,IAAI;aACvB,CAAC;YAEF,MAAM,YAAY,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAE/D,gBAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBACzC,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,YAAY;gBACvB,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,cAAc,EAAE,YAAY,CAAC,cAAc;aAC9C,CAAC,CAAC;YAEH,OAAO,iBAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAE5C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;gBACrD,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,GAAG,EAAE,OAAO;aACvB,CAAC,CAAC;YAEH,MAAM,IAAI,2BAAY,CAAC,2CAA2C,CAAC,CAAC;QACxE,CAAC;IACL,CAAC;IAED,WAAW,CAAC,OAAa;QACrB,OAAO,CAAC,GAAQ,EAAE,IAAS,EAAE,IAAS,EAAE,EAAE;YACtC,IAAI,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5C,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAEhD,MAAM,MAAM,GAAG,YAAE,CAAC,KAAK,CAAC,WAAW,EAAE;wBACjC,KAAK,EAAE,CAAC;wBACR,cAAc,EAAE,GAAG;wBACnB,GAAG,OAAO;qBACb,CAAC,CAAC;oBAEH,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC;oBAEzB,wBAAwB;oBACxB,gBAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;wBACnC,KAAK,EAAE,cAAc;wBACrB,SAAS,EAAE,aAAa;wBACxB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM;qBACvC,CAAC,CAAC;gBACP,CAAC;gBAED,IAAI,EAAE,CAAC;YACX,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,gBAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;oBACjC,KAAK,EAAE,cAAc;oBACrB,SAAS,EAAE,aAAa;oBACxB,MAAM,EAAE,GAAG,EAAE,OAAO;iBACvB,CAAC,CAAC;gBAEH,IAAI,CAAC,IAAI,2BAAY,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACpD,CAAC;QACL,CAAC,CAAC;IACN,CAAC;CACJ;AA/FD,kCA+FC","sourcesContent":["import express from \"express\";\r\nimport qs from \"qs\";\r\nimport { logger } from \"../logging\";\r\nimport { AdapterError } from \"../core/errors/AdapterError\";\r\n\r\nexport class JsonManager {\r\n    middleware(options?: any) {\r\n        try {\r\n            const defaultOptions = {\r\n                limit: \"1mb\",\r\n                inflate: true,\r\n                strict: true\r\n            };\r\n\r\n            const finalOptions = { ...defaultOptions, ...(options || {}) };\r\n\r\n            logger.info(\"JSON body parser configured\", {\r\n                layer: \"json-manager\",\r\n                operation: \"json\",\r\n                limit: finalOptions.limit,\r\n                strict: finalOptions.strict\r\n            });\r\n\r\n            return express.json(finalOptions);\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"JSON body parser initialization failed\", {\r\n                layer: \"json-manager\",\r\n                operation: \"json\",\r\n                reason: err?.message\r\n            });\r\n\r\n            throw new AdapterError(\"JSON parser initialization failed.\");\r\n        }\r\n    }\r\n\r\n    urlencoded(options?: any) {\r\n        try {\r\n            const defaultOptions = {\r\n                extended: true,\r\n                limit: \"1mb\",\r\n                parameterLimit: 1000\r\n            };\r\n\r\n            const finalOptions = { ...defaultOptions, ...(options || {}) };\r\n\r\n            logger.info(\"URL-encoded parser configured\", {\r\n                layer: \"json-manager\",\r\n                operation: \"urlencoded\",\r\n                limit: finalOptions.limit,\r\n                parameterLimit: finalOptions.parameterLimit\r\n            });\r\n\r\n            return express.urlencoded(finalOptions);\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"URL-encoded parser initialization failed\", {\r\n                layer: \"json-manager\",\r\n                operation: \"urlencoded\",\r\n                reason: err?.message\r\n            });\r\n\r\n            throw new AdapterError(\"URL-encoded parser initialization failed.\");\r\n        }\r\n    }\r\n\r\n    queryParser(options?: any) {\r\n        return (req: any, _res: any, next: any) => {\r\n            try {\r\n                if (!req.parsedQuery && req.url.includes(\"?\")) {\r\n                    const queryString = req.url.split(\"?\")[1] || \"\";\r\n\r\n                    const parsed = qs.parse(queryString, {\r\n                        depth: 5,\r\n                        parameterLimit: 100,\r\n                        ...options\r\n                    });\r\n\r\n                    req.parsedQuery = parsed;\r\n\r\n                    // ✅ visible + safe info\r\n                    logger.info(\"Query parameters parsed\", {\r\n                        layer: \"json-manager\",\r\n                        operation: \"query-parse\",\r\n                        keyCount: Object.keys(parsed).length\r\n                    });\r\n                }\r\n\r\n                next();\r\n            } catch (err: any) {\r\n                logger.error(\"Query parsing failed\", {\r\n                    layer: \"json-manager\",\r\n                    operation: \"query-parse\",\r\n                    reason: err?.message\r\n                });\r\n\r\n                next(new AdapterError(\"Query parsing failed.\"));\r\n            }\r\n        };\r\n    }\r\n}\r\n"]}

package/dist/managers/RateLimitManager.d.ts

@@ -1,4 +1,4 @@
-import { HiSecureConfig } from "../core/types/HiSecureConfig.js";
+import { HiSecureConfig } from "../core/types/HiSecureConfig";
 interface RateLimiterAdapter {
     getMiddleware: (options?: any) => any;
 }

package/dist/managers/RateLimitManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RateLimitManager.d.ts","sourceRoot":"","sources":["../../src/managers/RateLimitManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAIjE,UAAU,kBAAkB;IACxB,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,CAAC;CACzC;AAED,qBAAa,gBAAgB;IACzB,OAAO,CAAC,MAAM,CAAgC;IAC9C,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,eAAe,CAA4B;gBAG/C,MAAM,EAAE,cAAc,CAAC,aAAa,CAAC,EACrC,cAAc,EAAE,kBAAkB,EAClC,eAAe,EAAE,kBAAkB,GAAG,IAAI;IAO9C,UAAU,CAAC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAA;KAAE;CAqF3E"}
+{"version":3,"file":"RateLimitManager.d.ts","sourceRoot":"","sources":["../../src/managers/RateLimitManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAI9D,UAAU,kBAAkB;IACxB,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,CAAC;CACzC;AAED,qBAAa,gBAAgB;IACzB,OAAO,CAAC,MAAM,CAAgC;IAC9C,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,eAAe,CAA4B;gBAG/C,MAAM,EAAE,cAAc,CAAC,aAAa,CAAC,EACrC,cAAc,EAAE,kBAAkB,EAClC,eAAe,EAAE,kBAAkB,GAAG,IAAI;IAa9C,UAAU,CAAC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAA;KAAE;CA+G3E"}