hi-secure 1.0.26 → 1.0.27

package/dist/adapters/JWTAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"JWTAdapter.js","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":";;;;;;AAAA,gEAA+B;AAC/B,mCAAoC;AACpC,8DAA2D;AAC3D,wCAAoC;AAkBpC,MAAa,UAAU;IAOnB,YAAY,OAA0B;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,2BAAY,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,gBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBACpC,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,MAAM;gBACjB,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;aACtC,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAqB;QACvC,IAAI,CAAC;YACD,MAAM,UAAU,GAAoB;gBAChC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;gBACtC,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;gBAC5C,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,IAAA,mBAAU,GAAE;gBACnC,OAAO,EAAE,OAAO,EAAE,OAAO;aAC5B,CAAC;YAEF,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC,SAAgB,CAAC;YACpD,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,SAAgB,CAAC;YACjD,CAAC;YAED,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAEtD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBAC/B,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,GAAG,EAAE,OAAO;aACvB,CAAC,CAAC;YAEH,MAAM,IAAI,2BAAY,CAAC,iBAAiB,CAAC,CAAC;QAC9C,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,OAA0C;QAC5D,IAAI,CAAC;YACD,MAAM,aAAa,GAAsB;gBACrC,UAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAW;aAC3D,CAAC;YAEF,OAAO,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAEzD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACpC,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,GAAG,EAAE,OAAO;aACvB,CAAC,CAAC;YAEH,IAAI,GAAG,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACpC,MAAM,IAAI,2BAAY,CAAC,uBAAuB,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,GAAG,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACpC,MAAM,IAAI,2BAAY,CAAC,mBAAmB,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,IAAI,2BAAY,CAAC,yBAAyB,CAAC,CAAC;QACtD,CAAC;IACL,CAAC;CACJ;AApFD,gCAoFC","sourcesContent":["import jwt from \"jsonwebtoken\";\r\nimport { randomUUID } from \"crypto\";\r\nimport { AdapterError } from \"../core/errors/AdapterError\";\r\nimport { logger } from \"../logging\";\r\n\r\nexport interface JWTAdapterOptions {\r\n    secret: string;\r\n    expiresIn?: string | number;\r\n    algorithm?: jwt.Algorithm;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport interface SignOptions {\r\n    expiresIn?: string | number;\r\n    jti?: string;\r\n    subject?: string;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport class JWTAdapter {\r\n    private secret: string;\r\n    private expiresIn?: string | number;\r\n    private algorithm: jwt.Algorithm;\r\n    private issuer?: string;\r\n    private audience?: string | string[];\r\n\r\n    constructor(options: JWTAdapterOptions) {\r\n        if (!options.secret) {\r\n            throw new AdapterError(\"JWT secret is required\");\r\n        }\r\n\r\n        if (options.secret.length < 32) {\r\n            logger.warn(\"Weak JWT secret detected\", {\r\n                adapter: \"jwt\",\r\n                operation: \"init\",\r\n                secretLength: options.secret.length\r\n            });\r\n        }\r\n\r\n        this.secret = options.secret;\r\n        this.expiresIn = options.expiresIn;\r\n        this.algorithm = options.algorithm || \"HS256\";\r\n        this.issuer = options.issuer;\r\n        this.audience = options.audience;\r\n    }\r\n\r\n    sign(payload: object, options?: SignOptions) {\r\n        try {\r\n            const jwtOptions: jwt.SignOptions = {\r\n                algorithm: this.algorithm,\r\n                issuer: options?.issuer || this.issuer,\r\n                audience: options?.audience || this.audience,\r\n                jwtid: options?.jti || randomUUID(),\r\n                subject: options?.subject\r\n            };\r\n\r\n            if (options?.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = options.expiresIn as any;\r\n            } else if (this.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = this.expiresIn as any;\r\n            }\r\n\r\n            return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"JWT signing failed\", {\r\n                adapter: \"jwt\",\r\n                operation: \"sign\",\r\n                reason: err?.message\r\n            });\r\n\r\n            throw new AdapterError(\"JWT sign failed\");\r\n        }\r\n    }\r\n\r\n    verify(token: string, options?: { audience?: string | string[] }) {\r\n        try {\r\n            const verifyOptions: jwt.VerifyOptions = {\r\n                algorithms: [this.algorithm],\r\n                issuer: this.issuer,\r\n                audience: (options?.audience || this.audience) as string\r\n            };\r\n\r\n            return jwt.verify(token, this.secret, verifyOptions);\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"JWT verification failed\", {\r\n                adapter: \"jwt\",\r\n                operation: \"verify\",\r\n                reason: err?.message\r\n            });\r\n\r\n            if (err?.name === \"TokenExpiredError\") {\r\n                throw new AdapterError(\"JWT token has expired\");\r\n            }\r\n\r\n            if (err?.name === \"JsonWebTokenError\") {\r\n                throw new AdapterError(\"Invalid JWT token\");\r\n            }\r\n\r\n            throw new AdapterError(\"JWT verification failed\");\r\n        }\r\n    }\r\n}"]}
+{"version":3,"file":"JWTAdapter.js","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":";;;;;;AAAA,gEAA+B;AAC/B,mCAAoC;AACpC,8DAA2D;AAC3D,wCAAoC;AAkBpC,MAAa,UAAU;IAOnB,YAAY,OAA0B;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,2BAAY,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,gBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBACpC,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,MAAM;gBACjB,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;aACtC,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAqB;QACvC,IAAI,CAAC;YACD,MAAM,UAAU,GAAoB;gBAChC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;gBACtC,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;gBAC5C,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,IAAA,mBAAU,GAAE;gBACnC,OAAO,EAAE,OAAO,EAAE,OAAO;aAC5B,CAAC;YAEF,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC,SAAgB,CAAC;YACpD,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,SAAgB,CAAC;YACjD,CAAC;YAED,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAEtD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBAC/B,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,GAAG,EAAE,OAAO;aACvB,CAAC,CAAC;YAEH,MAAM,IAAI,2BAAY,CAAC,iBAAiB,CAAC,CAAC;QAC9C,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,OAA0C;QAC5D,IAAI,CAAC;YACD,MAAM,aAAa,GAAsB;gBACrC,UAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAW;aAC3D,CAAC;YAEF,OAAO,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAEzD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACpC,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,GAAG,EAAE,OAAO;aACvB,CAAC,CAAC;YAEH,IAAI,GAAG,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACpC,MAAM,IAAI,2BAAY,CAAC,uBAAuB,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,GAAG,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACpC,MAAM,IAAI,2BAAY,CAAC,mBAAmB,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,IAAI,2BAAY,CAAC,yBAAyB,CAAC,CAAC;QACtD,CAAC;IACL,CAAC;CACJ;AApFD,gCAoFC","sourcesContent":["import jwt from \"jsonwebtoken\";\r\nimport { randomUUID } from \"crypto\";\r\nimport { AdapterError } from \"../core/errors/AdapterError\";\r\nimport { logger } from \"../logging\";\r\n\r\nexport interface JWTAdapterOptions {\r\n    secret: string;\r\n    expiresIn?: string | number;\r\n    algorithm?: jwt.Algorithm;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport interface SignOptions {\r\n    expiresIn?: string | number;\r\n    jti?: string;\r\n    subject?: string;\r\n    issuer?: string;\r\n    audience?: string | string[];\r\n}\r\n\r\nexport class JWTAdapter {\r\n    private secret: string;\r\n    private expiresIn?: string | number;\r\n    private algorithm: jwt.Algorithm;\r\n    private issuer?: string;\r\n    private audience?: string | string[];\r\n\r\n    constructor(options: JWTAdapterOptions) {\r\n        if (!options.secret) {\r\n            throw new AdapterError(\"JWT secret is required\");\r\n        }\r\n\r\n        if (options.secret.length < 32) {\r\n            logger.warn(\"Weak JWT secret detected\", {\r\n                adapter: \"jwt\",\r\n                operation: \"init\",\r\n                secretLength: options.secret.length\r\n            });\r\n        }\r\n\r\n        this.secret = options.secret;\r\n        this.expiresIn = options.expiresIn;\r\n        this.algorithm = options.algorithm || \"HS256\";\r\n        this.issuer = options.issuer;\r\n        this.audience = options.audience;\r\n    }\r\n\r\n    sign(payload: object, options?: SignOptions) {\r\n        try {\r\n            const jwtOptions: jwt.SignOptions = {\r\n                algorithm: this.algorithm,\r\n                issuer: options?.issuer || this.issuer,\r\n                audience: options?.audience || this.audience,\r\n                jwtid: options?.jti || randomUUID(),\r\n                subject: options?.subject\r\n            };\r\n\r\n            if (options?.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = options.expiresIn as any;\r\n            } else if (this.expiresIn !== undefined) {\r\n                jwtOptions.expiresIn = this.expiresIn as any;\r\n            }\r\n\r\n            return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"JWT signing failed\", {\r\n                adapter: \"jwt\",\r\n                operation: \"sign\",\r\n                reason: err?.message\r\n            });\r\n\r\n            throw new AdapterError(\"JWT sign failed\");\r\n        }\r\n    }\r\n\r\n    verify(token: string, options?: { audience?: string | string[] }) {\r\n        try {\r\n            const verifyOptions: jwt.VerifyOptions = {\r\n                algorithms: [this.algorithm],\r\n                issuer: this.issuer,\r\n                audience: (options?.audience || this.audience) as string\r\n            };\r\n\r\n            return jwt.verify(token, this.secret, verifyOptions);\r\n\r\n        } catch (err: any) {\r\n            logger.error(\"JWT verification failed\", {\r\n                adapter: \"jwt\",\r\n                operation: \"verify\",\r\n                reason: err?.message\r\n            });\r\n\r\n            if (err?.name === \"TokenExpiredError\") {\r\n                throw new AdapterError(\"JWT token has expired\");\r\n            }\r\n\r\n            if (err?.name === \"JsonWebTokenError\") {\r\n                throw new AdapterError(\"Invalid JWT token\");\r\n            }\r\n\r\n            throw new AdapterError(\"JWT verification failed\");\r\n        }\r\n    }\r\n}\r\n"]}

package/dist/core/HiSecure.d.ts

@@ -1,33 +1,21 @@
 import { HiSecureConfig } from "./types/HiSecureConfig.js";
-import { HashManager } from "../managers/HashManager.js";
-import { RateLimitManager } from "../managers/RateLimitManager.js";
-import { ValidatorManager } from "../managers/ValidatorManager.js";
-import { SanitizerManager } from "../managers/SanitizerManager.js";
-import { JsonManager } from "../managers/JsonManager.js";
-import { CorsManager } from "../managers/CorsManager.js";
-import { AuthManager } from "../managers/AuthManager.js";
 import { SecureOptions, ValidationSchema } from "./types/SecureOptions.js";
+type MiddlewarePreset = "strict" | "api" | "public";
 export declare class HiSecure {
     private static instance;
-    private config;
+    private readonly config;
     private initialized;
-    hashManager: HashManager;
-    rateLimitManager: RateLimitManager;
-    validatorManager: ValidatorManager;
-    sanitizerManager: SanitizerManager;
-    jsonManager: JsonManager;
-    corsManager: CorsManager;
-    authManager?: AuthManager;
-    private hashingPrimary;
-    private hashingFallback;
-    private rateLimiterPrimary;
-    private rateLimiterFallback;
-    private sanitizerPrimary;
-    private sanitizerFallback;
+    private hashManager;
+    private rateLimitManager;
+    private validatorManager;
+    private sanitizerManager;
+    private jsonManager;
+    private corsManager;
+    private authManager?;
     private constructor();
-    static getInstance(config?: Partial<HiSecureConfig>): HiSecure;
-    static resetInstance(): void;
-    init(): void;
+    static init(userConfig?: Partial<HiSecureConfig>): HiSecure;
+    private static get;
+    private bootstrap;
     static auth(options?: {
         required?: boolean;
         roles?: string[];
@@ -43,17 +31,8 @@ export declare class HiSecure {
     static json(options?: any): import("connect").NextHandleFunction[];
     static hash(value: string): Promise<string>;
     static verify(value: string, hash: string): Promise<boolean>;
-    static jwt: {
-        sign: (payload: object, options?: any) => string;
-        verify: (token: string) => string | import("jsonwebtoken").Jwt | import("jsonwebtoken").JwtPayload;
-        google: {
-            verifyIdToken: (idToken: string) => Promise<import("../adapters/GoogleAdapter.js").GoogleTokenPayload>;
-        };
-    };
-    static middleware(options?: SecureOptions | "api" | "strict" | "public"): any[];
-    private setupAdapters;
-    private setupManagers;
-    private setupDynamicManagers;
-    private createMiddlewareChain;
+    static middleware(options?: SecureOptions | MiddlewarePreset): any[];
+    private createChain;
 }
+export {};
 //# sourceMappingURL=HiSecure.d.ts.map

package/dist/core/HiSecure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HiSecure.d.ts","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkB3D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AASzD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE3E,qBAAa,QAAQ;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAyB;IAChD,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,WAAW,CAAS;IAGrB,WAAW,EAAG,WAAW,CAAC;IAC1B,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,gBAAgB,EAAG,gBAAgB,CAAC;IACpC,WAAW,EAAG,WAAW,CAAC;IAC1B,WAAW,EAAG,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,WAAW,CAAC;IAGjC,OAAO,CAAC,cAAc,CAAM;IAC5B,OAAO,CAAC,eAAe,CAAM;IAC7B,OAAO,CAAC,kBAAkB,CAAM;IAChC,OAAO,CAAC,mBAAmB,CAAM;IACjC,OAAO,CAAC,gBAAgB,CAAM;IAC9B,OAAO,CAAC,iBAAiB,CAAM;IAE/B,OAAO;IAMP,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,QAAQ;IAW9D,MAAM,CAAC,aAAa,IAAI,IAAI;IAI5B,IAAI,IAAI,IAAI;IA2BZ,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE;IAQ9D,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAIxC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG;IAI7B,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM;IAoB9D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;kBAhHK,CAAC;;;iBAID,CAAC;IAgH/B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;WAUZ,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;WAMpC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIlE,MAAM,CAAC,GAAG;wBACU,MAAM,YAAY,GAAG;wBAGrB,MAAM;;qCAIO,MAAM;;MAGrC;IAGF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ;IAuBvE,OAAO,CAAC,aAAa;IA0CrB,OAAO,CAAC,aAAa;IA6BrB,OAAO,CAAC,oBAAoB;IAuB5B,OAAO,CAAC,qBAAqB;CAyBhC"}
+{"version":3,"file":"HiSecure.d.ts","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":"AAwUA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAiC3D,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE3E,KAAK,gBAAgB,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEpD,qBAAa,QAAQ;IACnB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAyB;IAEhD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,WAAW,CAAS;IAE5B,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,WAAW,CAAC,CAAc;IAElC,OAAO;IAKP,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,QAAQ;IAU3D,OAAO,CAAC,MAAM,CAAC,GAAG;IAOlB,OAAO,CAAC,SAAS;IAiEjB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE;IAM9D,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAIxC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG;IAI7B,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM;IAiB9D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;kBAtdV,CAAA;;;iBAGY,CAAC;IAud5B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;WAKZ,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOjD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5D,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,gBAAgB;IAe5D,OAAO,CAAC,WAAW;CAqBpB"}

package/dist/core/HiSecure.js

@@ -1,4 +1,10 @@
 "use strict";
+// import { HiSecureConfig } from "./types/HiSecureConfig.js";
+// import { defaultConfig } from "./config.js";
+// import { LIB_NAME, LIB_VERSION } from "./constants.js";
+// import { deepMerge } from "../utils/deepMerge.js";
+// import { deepFreeze } from "../utils/deepFreeze.js";
+// import { logger } from "../logging";
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -32,176 +38,117 @@ const hpp_1 = __importDefault(require("hpp"));
 const compression_1 = __importDefault(require("compression"));
 const errorHandler_js_1 = require("../middlewares/errorHandler.js");
 class HiSecure {
-    constructor(userConfig = {}) {
+    constructor(config) {
         this.initialized = false;
-        this.config = (0, deepMerge_js_1.deepMerge)(config_js_1.defaultConfig, userConfig);
-    }
-    // Singleton & Init
-    static getInstance(config) {
+        this.config = config;
+    }
+    // ===== INIT (ONLY ONCE) =====
+    static init(userConfig) {
+        if (HiSecure.instance)
+            return HiSecure.instance;
+        const finalConfig = (0, deepMerge_js_1.deepMerge)(config_js_1.defaultConfig, userConfig ?? {});
+        const instance = new HiSecure(finalConfig);
+        HiSecure.instance = instance;
+        instance.bootstrap();
+        return instance;
+    }
+    static get() {
         if (!HiSecure.instance) {
-            logging_1.logger.info("Creating HiSecure singleton", {
-                layer: "hisecure-core"
-            });
-            HiSecure.instance = new HiSecure(config);
-            HiSecure.instance.init();
+            throw new Error("HiSecure not initialized. Call HiSecure.init() first.");
         }
         return HiSecure.instance;
     }
-    static resetInstance() {
-        HiSecure.instance = null;
-    }
-    init() {
-        if (this.initialized) {
-            logging_1.logger.warn("Initialization skipped (already initialized)", {
-                layer: "hisecure-core"
-            });
+    bootstrap() {
+        if (this.initialized)
             return;
-        }
         logging_1.logger.info("Framework initialization started", {
             layer: "hisecure-core",
             lib: constants_js_1.LIB_NAME,
             version: constants_js_1.LIB_VERSION
         });
-        this.setupAdapters();
-        this.setupManagers();
-        this.setupDynamicManagers();
+        // Core managers
+        this.hashManager = new HashManager_js_1.HashManager(this.config.hashing, this.config.hashing.primary === "argon2"
+            ? new ArgonAdapter_js_1.ArgonAdapter()
+            : new BcryptAdapter_js_1.BcryptAdapter(this.config.hashing.saltRounds), this.config.hashing.fallback
+            ? new BcryptAdapter_js_1.BcryptAdapter(this.config.hashing.saltRounds)
+            : null);
+        this.rateLimitManager = new RateLimitManager_js_1.RateLimitManager(this.config.rateLimiter, this.config.rateLimiter.useAdaptiveMode
+            ? new RLFlexibleAdapter_js_1.RLFlexibleAdapter()
+            : new ExpressRLAdapter_js_1.ExpressRLAdapter(), new ExpressRLAdapter_js_1.ExpressRLAdapter());
+        this.validatorManager = new ValidatorManager_js_1.ValidatorManager(new ZodAdapter_js_1.ZodAdapter(), new ExpressValidatorAdapter_js_1.ExpressValidatorAdapter());
+        this.sanitizerManager = new SanitizerManager_js_1.SanitizerManager(new SanitizeHtmlAdapter_js_1.SanitizeHtmlAdapter(this.config.sanitizer), new XSSAdapter_js_1.XSSAdapter(this.config.sanitizer));
+        this.jsonManager = new JsonManager_js_1.JsonManager();
+        this.corsManager = new CorsManager_js_1.CorsManager();
+        // Auth (optional)
+        if (this.config.auth?.enabled) {
+            this.authManager = new AuthManager_js_1.AuthManager({
+                jwtSecret: process.env.JWT_SECRET || this.config.auth.jwtSecret,
+                jwtExpiresIn: this.config.auth.jwtExpiresIn,
+                googleClientId: process.env.GOOGLE_CLIENT_ID || this.config.auth.googleClientId
+            });
+            logging_1.logger.info("Authentication enabled", { layer: "hisecure-core" });
+        }
+        else {
+            logging_1.logger.info("Authentication disabled", { layer: "hisecure-core" });
+        }
         (0, deepFreeze_js_1.deepFreeze)(this.config);
         this.initialized = true;
         logging_1.logger.info("Framework initialized successfully", {
             layer: "hisecure-core"
         });
     }
-    // Public Fluent API
+    // ===== PUBLIC STATIC API =====
     static auth(options) {
-        const instance = this.getInstance();
-        if (!instance.authManager) {
-            throw new Error("Auth not enabled. Set auth.enabled=true in config.");
-        }
-        return instance.authManager.protect(options);
+        const i = HiSecure.get();
+        if (!i.authManager)
+            throw new Error("Auth not enabled");
+        return i.authManager.protect(options);
     }
     static validate(schema) {
-        return this.getInstance().validatorManager.validate(schema);
+        return HiSecure.get().validatorManager.validate(schema);
     }
     static sanitize(options) {
-        return this.getInstance().sanitizerManager.middleware(options);
+        return HiSecure.get().sanitizerManager.middleware(options);
     }
     static rateLimit(preset) {
-        const instance = this.getInstance();
+        const i = HiSecure.get();
         if (typeof preset === "string") {
-            logging_1.logger.info("Rate limit preset applied", {
-                layer: "hisecure-core",
-                preset
-            });
             const presets = {
                 strict: { mode: "strict" },
                 relaxed: { mode: "relaxed" },
                 api: { mode: "api" }
             };
-            return instance.rateLimitManager.middleware(presets[preset]);
+            return i.rateLimitManager.middleware(presets[preset]);
         }
-        return instance.rateLimitManager.middleware({ options: preset });
+        return i.rateLimitManager.middleware({ options: preset });
     }
     static cors(options) {
-        return this.getInstance().corsManager.middleware(options);
+        return HiSecure.get().corsManager.middleware(options);
     }
     static json(options) {
-        const instance = this.getInstance();
-        return [
-            instance.jsonManager.middleware(options),
-            instance.jsonManager.urlencoded()
-        ];
+        const i = HiSecure.get();
+        return [i.jsonManager.middleware(options), i.jsonManager.urlencoded()];
     }
-    // Utilities
     static async hash(value) {
-        const instance = this.getInstance();
-        const result = await instance.hashManager.hash(value, { allowFallback: true });
-        return result.hash;
-    }
-    static async verify(value, hash) {
-        return this.getInstance().hashManager.verify(value, hash);
-    }
-    // Global Middleware - globalLevel
-    static middleware(options) {
-        const instance = this.getInstance();
-        if (typeof options === "string") {
-            logging_1.logger.info("Global middleware preset applied", {
-                layer: "hisecure-core",
-                preset: options
-            });
-            const presets = {
-                api: { cors: true, rateLimit: "relaxed", sanitize: true },
-                strict: { cors: true, rateLimit: "strict", sanitize: true, auth: true },
-                public: { cors: true, rateLimit: true, sanitize: false }
-            };
-            return instance.createMiddlewareChain(presets[options] || {});
-        }
-        return instance.createMiddlewareChain(options || {});
-    }
-    // Internal Setup
-    setupAdapters() {
-        logging_1.logger.info("Adapters setup started", {
-            layer: "hisecure-core"
-        });
-        this.hashingPrimary =
-            this.config.hashing.primary === "argon2"
-                ? new ArgonAdapter_js_1.ArgonAdapter()
-                : new BcryptAdapter_js_1.BcryptAdapter(this.config.hashing.saltRounds);
-        this.hashingFallback =
-            this.config.hashing.fallback === "bcrypt"
-                ? new BcryptAdapter_js_1.BcryptAdapter(this.config.hashing.saltRounds)
-                : null;
-        logging_1.logger.info("Hashing adapters configured", {
-            layer: "hisecure-core",
-            primary: this.config.hashing.primary,
-            fallback: this.config.hashing.fallback ?? null
-        });
-        this.rateLimiterPrimary = this.config.rateLimiter.useAdaptiveMode
-            ? new RLFlexibleAdapter_js_1.RLFlexibleAdapter()
-            : new ExpressRLAdapter_js_1.ExpressRLAdapter();
-        this.rateLimiterFallback = new ExpressRLAdapter_js_1.ExpressRLAdapter();
-        logging_1.logger.info("Rate limiter adapters configured", {
-            layer: "hisecure-core",
-            adaptive: this.config.rateLimiter.useAdaptiveMode
-        });
-        this.sanitizerPrimary = new SanitizeHtmlAdapter_js_1.SanitizeHtmlAdapter(this.config.sanitizer);
-        this.sanitizerFallback = new XSSAdapter_js_1.XSSAdapter(this.config.sanitizer);
-        logging_1.logger.info("Sanitizer adapters configured", {
-            layer: "hisecure-core",
-            primary: "sanitize-html",
-            fallback: "xss"
+        const { hash } = await HiSecure.get().hashManager.hash(value, {
+            allowFallback: true
         });
+        return hash;
     }
-    setupManagers() {
-        this.hashManager = new HashManager_js_1.HashManager(this.config.hashing, this.hashingPrimary, this.hashingFallback);
-        this.rateLimitManager = new RateLimitManager_js_1.RateLimitManager(this.config.rateLimiter, this.rateLimiterPrimary, this.rateLimiterFallback);
-        this.validatorManager = new ValidatorManager_js_1.ValidatorManager(new ZodAdapter_js_1.ZodAdapter(), new ExpressValidatorAdapter_js_1.ExpressValidatorAdapter());
-        this.sanitizerManager = new SanitizerManager_js_1.SanitizerManager(this.sanitizerPrimary, this.sanitizerFallback);
-        logging_1.logger.info("Core managers initialized", {
-            layer: "hisecure-core",
-            managers: ["hash", "rate-limit", "validator", "sanitizer"]
-        });
+    static verify(value, hash) {
+        return HiSecure.get().hashManager.verify(value, hash);
     }
-    setupDynamicManagers() {
-        this.jsonManager = new JsonManager_js_1.JsonManager();
-        this.corsManager = new CorsManager_js_1.CorsManager();
-        if (this.config.auth.enabled) {
-            this.authManager = new AuthManager_js_1.AuthManager({
-                jwtSecret: process.env.JWT_SECRET || this.config.auth.jwtSecret,
-                jwtExpiresIn: this.config.auth.jwtExpiresIn,
-                googleClientId: process.env.GOOGLE_CLIENT_ID || this.config.auth.googleClientId
-            });
-            logging_1.logger.info("Authentication enabled", {
-                layer: "hisecure-core",
-                google: !!this.config.auth.googleClientId
-            });
-        }
-        else {
-            logging_1.logger.info("Authentication disabled", {
-                layer: "hisecure-core"
-            });
-        }
-    }
-    createMiddlewareChain(options) {
+    static middleware(options) {
+        const i = HiSecure.get();
+        const presets = {
+            strict: { cors: true, rateLimit: "strict", sanitize: true, auth: true },
+            api: { cors: true, rateLimit: "relaxed", sanitize: true },
+            public: { cors: true, rateLimit: true }
+        };
+        const finalOptions = typeof options === "string" ? presets[options] : options ?? {};
+        return i.createChain(finalOptions);
+    }
+    createChain(options) {
         const chain = [];
         chain.push(this.jsonManager.middleware(this.config.json));
         chain.push(this.jsonManager.urlencoded(this.config.urlencoded));
@@ -212,7 +159,7 @@ class HiSecure {
         if (this.config.enableCompression)
             chain.push((0, compression_1.default)(this.config.compression));
         if (options.cors)
-            chain.push(this.corsManager.middleware(this.config.cors));
+            chain.push(this.corsManager.middleware());
         if (options.sanitize)
             chain.push(this.sanitizerManager.middleware());
         if (options.rateLimit)
@@ -225,11 +172,4 @@ class HiSecure {
 }
 exports.HiSecure = HiSecure;
 HiSecure.instance = null;
-HiSecure.jwt = {
-    sign: (payload, options) => HiSecure.getInstance().authManager.sign(payload, options),
-    verify: (token) => HiSecure.getInstance().authManager.verify(token),
-    google: {
-        verifyIdToken: (idToken) => HiSecure.getInstance().authManager.verifyGoogleIdToken(idToken)
-    }
-};
 //# sourceMappingURL=HiSecure.js.map

package/dist/core/HiSecure.js.map

@@ -1 +1 @@
-{"version":3,"file":"HiSecure.js","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":";;;;;;AACA,2CAA4C;AAC5C,iDAAuD;AACvD,wDAAkD;AAClD,0DAAoD;AACpD,wCAAoC;AAEpC,WAAW;AACX,iEAA2D;AAC3D,mEAA6D;AAC7D,2EAAqE;AACrE,yEAAmE;AACnE,6DAAuD;AACvD,uFAAiF;AACjF,+EAAyE;AACzE,6DAAuD;AAEvD,WAAW;AACX,+DAAyD;AACzD,yEAAmE;AACnE,yEAAmE;AACnE,yEAAmE;AACnE,+DAAyD;AACzD,+DAAyD;AACzD,+DAAyD;AAEzD,cAAc;AACd,oDAA4B;AAC5B,8CAAsB;AACtB,8DAAsC;AACtC,oEAA8D;AAK9D,MAAa,QAAQ;IAsBjB,YAAoB,aAAsC,EAAE;QAnBpD,gBAAW,GAAG,KAAK,CAAC;QAoBxB,IAAI,CAAC,MAAM,GAAG,IAAA,wBAAS,EAAC,yBAAa,EAAE,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,mBAAmB;IAEnB,MAAM,CAAC,WAAW,CAAC,MAAgC;QAC/C,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACrB,gBAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBACvC,KAAK,EAAE,eAAe;aACzB,CAAC,CAAC;YACH,QAAQ,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,aAAa;QAChB,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,IAAI;QACA,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,gBAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;gBACxD,KAAK,EAAE,eAAe;aACzB,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC5C,KAAK,EAAE,eAAe;YACtB,GAAG,EAAE,uBAAQ;YACb,OAAO,EAAE,0BAAW;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE5B,IAAA,0BAAU,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,gBAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;YAC9C,KAAK,EAAE,eAAe;SACzB,CAAC,CAAC;IACP,CAAC;IAED,oBAAoB;IACpB,MAAM,CAAC,IAAI,CAAC,OAAkD;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,MAAwB;QACpC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAa;QACzB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAA6C;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEpC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,gBAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;gBACrC,KAAK,EAAE,eAAe;gBACtB,MAAM;aACT,CAAC,CAAC;YAEH,MAAM,OAAO,GAAQ;gBACjB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC5B,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;aACvB,CAAC;YACF,OAAO,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAa;QACrB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAa;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO;YACH,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC;YACxC,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE;SACpC,CAAC;IACN,CAAC;IAED,YAAY;IAEZ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAa;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,IAAY;QAC3C,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAeD,kCAAkC;IAClC,MAAM,CAAC,UAAU,CAAC,OAAqD;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEpC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,gBAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC5C,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,OAAO;aAClB,CAAC,CAAC;YAEH,MAAM,OAAO,GAAQ;gBACjB,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACzD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;gBACvE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC3D,CAAC;YAEF,OAAO,QAAQ,CAAC,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,QAAQ,CAAC,qBAAqB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,iBAAiB;IAET,aAAa;QACjB,gBAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;YAClC,KAAK,EAAE,eAAe;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc;YACf,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ;gBACpC,CAAC,CAAC,IAAI,8BAAY,EAAE;gBACpB,CAAC,CAAC,IAAI,gCAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAE5D,IAAI,CAAC,eAAe;YAChB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBACrC,CAAC,CAAC,IAAI,gCAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;gBACnD,CAAC,CAAC,IAAI,CAAC;QAEf,gBAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;YACvC,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO;YACpC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI;SACjD,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;YAC7D,CAAC,CAAC,IAAI,wCAAiB,EAAE;YACzB,CAAC,CAAC,IAAI,sCAAgB,EAAE,CAAC;QAE7B,IAAI,CAAC,mBAAmB,GAAG,IAAI,sCAAgB,EAAE,CAAC;QAElD,gBAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC5C,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,GAAG,IAAI,4CAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,iBAAiB,GAAG,IAAI,0BAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE/D,gBAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;YACzC,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,KAAK;SAClB,CAAC,CAAC;IACP,CAAC;IAEO,aAAa;QACjB,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,eAAe,CACvB,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CACxC,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,mBAAmB,CAC3B,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CACxC,IAAI,0BAAU,EAAE,EAChB,IAAI,oDAAuB,EAAE,CAChC,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CACxC,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,iBAAiB,CACzB,CAAC;QAEF,gBAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;YACrC,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC;SAC7D,CAAC,CAAC;IACP,CAAC;IAEO,oBAAoB;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,EAAE,CAAC;QAErC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAAC;gBAC/B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU;gBAChE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;gBAC3C,cAAc,EACV,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc;aACtE,CAAC,CAAC;YAEH,gBAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBAClC,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc;aAC5C,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,gBAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;gBACnC,KAAK,EAAE,eAAe;aACzB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAEO,qBAAqB,CAAC,OAAsB;QAChD,MAAM,KAAK,GAAU,EAAE,CAAC;QAExB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAEhE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,IAAA,gBAAM,GAAE,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAA,aAAG,GAAE,CAAC,CAAC;QAE7C,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAC7B,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,EAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAErD,IAAI,OAAO,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,OAAO,CAAC,QAAQ;YAChB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,CAAC;QAEnD,IAAI,OAAO,CAAC,SAAS;YACjB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAErD,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW;YAChC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAE3C,KAAK,CAAC,IAAI,CAAC,8BAAY,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC;IACjB,CAAC;;AA7RL,4BA8RC;AA7RkB,iBAAQ,GAAoB,IAAI,AAAxB,CAAyB;AAiIzC,YAAG,GAAG;IACT,IAAI,EAAE,CAAC,OAAe,EAAE,OAAa,EAAE,EAAE,CACrC,QAAQ,CAAC,WAAW,EAAE,CAAC,WAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;IAE9D,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CACtB,QAAQ,CAAC,WAAW,EAAE,CAAC,WAAY,CAAC,MAAM,CAAC,KAAK,CAAC;IAErD,MAAM,EAAE;QACJ,aAAa,EAAE,CAAC,OAAe,EAAE,EAAE,CAC/B,QAAQ,CAAC,WAAW,EAAE,CAAC,WAAY,CAAC,mBAAmB,CAAC,OAAO,CAAC;KACvE;CACJ,AAXS,CAWR","sourcesContent":["import { HiSecureConfig } from \"./types/HiSecureConfig.js\";\r\nimport { defaultConfig } from \"./config.js\";\r\nimport { LIB_NAME, LIB_VERSION } from \"./constants.js\";\r\nimport { deepMerge } from \"../utils/deepMerge.js\";\r\nimport { deepFreeze } from \"../utils/deepFreeze.js\";\r\nimport { logger } from \"../logging\";\r\n\r\n// Adapters\r\nimport { ArgonAdapter } from \"../adapters/ArgonAdapter.js\";\r\nimport { BcryptAdapter } from \"../adapters/BcryptAdapter.js\";\r\nimport { RLFlexibleAdapter } from \"../adapters/RLFlexibleAdapter.js\";\r\nimport { ExpressRLAdapter } from \"../adapters/ExpressRLAdapter.js\";\r\nimport { ZodAdapter } from \"../adapters/ZodAdapter.js\";\r\nimport { ExpressValidatorAdapter } from \"../adapters/ExpressValidatorAdapter.js\";\r\nimport { SanitizeHtmlAdapter } from \"../adapters/SanitizeHtmlAdapter.js\";\r\nimport { XSSAdapter } from \"../adapters/XSSAdapter.js\";\r\n\r\n// Managers\r\nimport { HashManager } from \"../managers/HashManager.js\";\r\nimport { RateLimitManager } from \"../managers/RateLimitManager.js\";\r\nimport { ValidatorManager } from \"../managers/ValidatorManager.js\";\r\nimport { SanitizerManager } from \"../managers/SanitizerManager.js\";\r\nimport { JsonManager } from \"../managers/JsonManager.js\";\r\nimport { CorsManager } from \"../managers/CorsManager.js\";\r\nimport { AuthManager } from \"../managers/AuthManager.js\";\r\n\r\n// Middlewares\r\nimport helmet from \"helmet\";\r\nimport hpp from \"hpp\";\r\nimport compression from \"compression\";\r\nimport { errorHandler } from \"../middlewares/errorHandler.js\";\r\n\r\n// Types\r\nimport { SecureOptions, ValidationSchema } from \"./types/SecureOptions.js\";\r\n\r\nexport class HiSecure {\r\n    private static instance: HiSecure | null = null;\r\n    private config: HiSecureConfig;\r\n    private initialized = false;\r\n\r\n    // Managers\r\n    public hashManager!: HashManager;\r\n    public rateLimitManager!: RateLimitManager;\r\n    public validatorManager!: ValidatorManager;\r\n    public sanitizerManager!: SanitizerManager;\r\n    public jsonManager!: JsonManager;\r\n    public corsManager!: CorsManager;\r\n    public authManager?: AuthManager;\r\n\r\n    // Internal adapters\r\n    private hashingPrimary: any;\r\n    private hashingFallback: any;\r\n    private rateLimiterPrimary: any;\r\n    private rateLimiterFallback: any;\r\n    private sanitizerPrimary: any;\r\n    private sanitizerFallback: any;\r\n\r\n    private constructor(userConfig: Partial<HiSecureConfig> = {}) {\r\n        this.config = deepMerge(defaultConfig, userConfig);\r\n    }\r\n\r\n    // Singleton & Init\r\n\r\n    static getInstance(config?: Partial<HiSecureConfig>): HiSecure {\r\n        if (!HiSecure.instance) {\r\n            logger.info(\"Creating HiSecure singleton\", {\r\n                layer: \"hisecure-core\"\r\n            });\r\n            HiSecure.instance = new HiSecure(config);\r\n            HiSecure.instance.init();\r\n        }\r\n        return HiSecure.instance;\r\n    }\r\n\r\n    static resetInstance(): void {\r\n        HiSecure.instance = null;\r\n    }\r\n\r\n    init(): void {\r\n        if (this.initialized) {\r\n            logger.warn(\"Initialization skipped (already initialized)\", {\r\n                layer: \"hisecure-core\"\r\n            });\r\n            return;\r\n        }\r\n\r\n        logger.info(\"Framework initialization started\", {\r\n            layer: \"hisecure-core\",\r\n            lib: LIB_NAME,\r\n            version: LIB_VERSION\r\n        });\r\n\r\n        this.setupAdapters();\r\n        this.setupManagers();\r\n        this.setupDynamicManagers();\r\n\r\n        deepFreeze(this.config);\r\n        this.initialized = true;\r\n\r\n        logger.info(\"Framework initialized successfully\", {\r\n            layer: \"hisecure-core\"\r\n        });\r\n    }\r\n\r\n    // Public Fluent API\r\n    static auth(options?: { required?: boolean; roles?: string[] }) {\r\n        const instance = this.getInstance();\r\n        if (!instance.authManager) {\r\n            throw new Error(\"Auth not enabled. Set auth.enabled=true in config.\");\r\n        }\r\n        return instance.authManager.protect(options);\r\n    }\r\n\r\n    static validate(schema: ValidationSchema) {\r\n        return this.getInstance().validatorManager.validate(schema);\r\n    }\r\n\r\n    static sanitize(options?: any) {\r\n        return this.getInstance().sanitizerManager.middleware(options);\r\n    }\r\n\r\n    static rateLimit(preset: \"strict\" | \"relaxed\" | \"api\" | object) {\r\n        const instance = this.getInstance();\r\n\r\n        if (typeof preset === \"string\") {\r\n            logger.info(\"Rate limit preset applied\", {\r\n                layer: \"hisecure-core\",\r\n                preset\r\n            });\r\n\r\n            const presets: any = {\r\n                strict: { mode: \"strict\" },\r\n                relaxed: { mode: \"relaxed\" },\r\n                api: { mode: \"api\" }\r\n            };\r\n            return instance.rateLimitManager.middleware(presets[preset]);\r\n        }\r\n\r\n        return instance.rateLimitManager.middleware({ options: preset });\r\n    }\r\n\r\n    static cors(options?: any) {\r\n        return this.getInstance().corsManager.middleware(options);\r\n    }\r\n\r\n    static json(options?: any) {\r\n        const instance = this.getInstance();\r\n        return [\r\n            instance.jsonManager.middleware(options),\r\n            instance.jsonManager.urlencoded()\r\n        ];\r\n    }\r\n\r\n    // Utilities\r\n\r\n    static async hash(value: string): Promise<string> {\r\n        const instance = this.getInstance();\r\n        const result = await instance.hashManager.hash(value, { allowFallback: true });\r\n        return result.hash;\r\n    }\r\n\r\n    static async verify(value: string, hash: string): Promise<boolean> {\r\n        return this.getInstance().hashManager.verify(value, hash);\r\n    }\r\n\r\n    static jwt = {\r\n        sign: (payload: object, options?: any) =>\r\n            HiSecure.getInstance().authManager!.sign(payload, options),\r\n\r\n        verify: (token: string) =>\r\n            HiSecure.getInstance().authManager!.verify(token),\r\n\r\n        google: {\r\n            verifyIdToken: (idToken: string) =>\r\n                HiSecure.getInstance().authManager!.verifyGoogleIdToken(idToken)\r\n        }\r\n    };\r\n\r\n    // Global Middleware - globalLevel\r\n    static middleware(options?: SecureOptions | \"api\" | \"strict\" | \"public\") {\r\n        const instance = this.getInstance();\r\n\r\n        if (typeof options === \"string\") {\r\n            logger.info(\"Global middleware preset applied\", {\r\n                layer: \"hisecure-core\",\r\n                preset: options\r\n            });\r\n\r\n            const presets: any = {\r\n                api: { cors: true, rateLimit: \"relaxed\", sanitize: true },\r\n                strict: { cors: true, rateLimit: \"strict\", sanitize: true, auth: true },\r\n                public: { cors: true, rateLimit: true, sanitize: false }\r\n            };\r\n\r\n            return instance.createMiddlewareChain(presets[options] || {});\r\n        }\r\n\r\n        return instance.createMiddlewareChain(options || {});\r\n    }\r\n\r\n    // Internal Setup\r\n\r\n    private setupAdapters() {\r\n        logger.info(\"Adapters setup started\", {\r\n            layer: \"hisecure-core\"\r\n        });\r\n\r\n        this.hashingPrimary =\r\n            this.config.hashing.primary === \"argon2\"\r\n                ? new ArgonAdapter()\r\n                : new BcryptAdapter(this.config.hashing.saltRounds);\r\n\r\n        this.hashingFallback =\r\n            this.config.hashing.fallback === \"bcrypt\"\r\n                ? new BcryptAdapter(this.config.hashing.saltRounds)\r\n                : null;\r\n\r\n        logger.info(\"Hashing adapters configured\", {\r\n            layer: \"hisecure-core\",\r\n            primary: this.config.hashing.primary,\r\n            fallback: this.config.hashing.fallback ?? null\r\n        });\r\n\r\n        this.rateLimiterPrimary = this.config.rateLimiter.useAdaptiveMode\r\n            ? new RLFlexibleAdapter()\r\n            : new ExpressRLAdapter();\r\n\r\n        this.rateLimiterFallback = new ExpressRLAdapter();\r\n\r\n        logger.info(\"Rate limiter adapters configured\", {\r\n            layer: \"hisecure-core\",\r\n            adaptive: this.config.rateLimiter.useAdaptiveMode\r\n        });\r\n\r\n        this.sanitizerPrimary = new SanitizeHtmlAdapter(this.config.sanitizer);\r\n        this.sanitizerFallback = new XSSAdapter(this.config.sanitizer);\r\n\r\n        logger.info(\"Sanitizer adapters configured\", {\r\n            layer: \"hisecure-core\",\r\n            primary: \"sanitize-html\",\r\n            fallback: \"xss\"\r\n        });\r\n    }\r\n\r\n    private setupManagers() {\r\n        this.hashManager = new HashManager(\r\n            this.config.hashing,\r\n            this.hashingPrimary,\r\n            this.hashingFallback\r\n        );\r\n\r\n        this.rateLimitManager = new RateLimitManager(\r\n            this.config.rateLimiter,\r\n            this.rateLimiterPrimary,\r\n            this.rateLimiterFallback\r\n        );\r\n\r\n        this.validatorManager = new ValidatorManager(\r\n            new ZodAdapter(),\r\n            new ExpressValidatorAdapter()\r\n        );\r\n\r\n        this.sanitizerManager = new SanitizerManager(\r\n            this.sanitizerPrimary,\r\n            this.sanitizerFallback\r\n        );\r\n\r\n        logger.info(\"Core managers initialized\", {\r\n            layer: \"hisecure-core\",\r\n            managers: [\"hash\", \"rate-limit\", \"validator\", \"sanitizer\"]\r\n        });\r\n    }\r\n\r\n    private setupDynamicManagers() {\r\n        this.jsonManager = new JsonManager();\r\n        this.corsManager = new CorsManager();\r\n\r\n        if (this.config.auth.enabled) {\r\n            this.authManager = new AuthManager({\r\n                jwtSecret: process.env.JWT_SECRET || this.config.auth.jwtSecret!,\r\n                jwtExpiresIn: this.config.auth.jwtExpiresIn,\r\n                googleClientId:\r\n                    process.env.GOOGLE_CLIENT_ID || this.config.auth.googleClientId\r\n            });\r\n\r\n            logger.info(\"Authentication enabled\", {\r\n                layer: \"hisecure-core\",\r\n                google: !!this.config.auth.googleClientId\r\n            });\r\n        } else {\r\n            logger.info(\"Authentication disabled\", {\r\n                layer: \"hisecure-core\"\r\n            });\r\n        }\r\n    }\r\n\r\n    private createMiddlewareChain(options: SecureOptions): any[] {\r\n        const chain: any[] = [];\r\n\r\n        chain.push(this.jsonManager.middleware(this.config.json));\r\n        chain.push(this.jsonManager.urlencoded(this.config.urlencoded));\r\n\r\n        if (this.config.enableHelmet) chain.push(helmet());\r\n        if (this.config.enableHPP) chain.push(hpp());\r\n\r\n        if (this.config.enableCompression)\r\n            chain.push(compression(this.config.compression));\r\n\r\n        if (options.cors) chain.push(this.corsManager.middleware(this.config.cors));\r\n        if (options.sanitize)\r\n            chain.push(this.sanitizerManager.middleware());\r\n\r\n        if (options.rateLimit)\r\n            chain.push(this.rateLimitManager.middleware({}));\r\n\r\n        if (options.auth && this.authManager)\r\n            chain.push(this.authManager.protect());\r\n\r\n        chain.push(errorHandler);\r\n        return chain;\r\n    }\r\n}"]}
+{"version":3,"file":"HiSecure.js","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":";AAAA,8DAA8D;AAC9D,+CAA+C;AAC/C,0DAA0D;AAC1D,qDAAqD;AACrD,uDAAuD;AACvD,uCAAuC;;;;;;AAoUvC,2CAA4C;AAC5C,iDAAuD;AACvD,wDAAkD;AAClD,0DAAoD;AACpD,wCAAoC;AAEpC,WAAW;AACX,iEAA2D;AAC3D,mEAA6D;AAC7D,2EAAqE;AACrE,yEAAmE;AACnE,6DAAuD;AACvD,uFAAiF;AACjF,+EAAyE;AACzE,6DAAuD;AAEvD,WAAW;AACX,+DAAyD;AACzD,yEAAmE;AACnE,yEAAmE;AACnE,yEAAmE;AACnE,+DAAyD;AACzD,+DAAyD;AACzD,+DAAyD;AAEzD,cAAc;AACd,oDAA4B;AAC5B,8CAAsB;AACtB,8DAAsC;AACtC,oEAA8D;AAO9D,MAAa,QAAQ;IAcnB,YAAoB,MAAsB;QAVlC,gBAAW,GAAG,KAAK,CAAC;QAW1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,+BAA+B;IAC/B,MAAM,CAAC,IAAI,CAAC,UAAoC;QAC9C,IAAI,QAAQ,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC;QAEhD,MAAM,WAAW,GAAG,IAAA,wBAAS,EAAC,yBAAa,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3C,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,GAAG;QAChB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC3B,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,gBAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC9C,KAAK,EAAE,eAAe;YACtB,GAAG,EAAE,uBAAQ;YACb,OAAO,EAAE,0BAAW;SACrB,CAAC,CAAC;QAEH,gBAAgB;QAChB,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAChC,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ;YACtC,CAAC,CAAC,IAAI,8BAAY,EAAE;YACpB,CAAC,CAAC,IAAI,gCAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EACrD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ;YAC1B,CAAC,CAAC,IAAI,gCAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YACnD,CAAC,CAAC,IAAI,CACT,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CAC1C,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;YACrC,CAAC,CAAC,IAAI,wCAAiB,EAAE;YACzB,CAAC,CAAC,IAAI,sCAAgB,EAAE,EAC1B,IAAI,sCAAgB,EAAE,CACvB,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CAC1C,IAAI,0BAAU,EAAE,EAChB,IAAI,oDAAuB,EAAE,CAC9B,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CAC1C,IAAI,4CAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAC9C,IAAI,0BAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CACtC,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,EAAE,CAAC;QAErC,kBAAkB;QAClB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAAC;gBACjC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU;gBAChE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;gBAC3C,cAAc,EACZ,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc;aAClE,CAAC,CAAC;YAEH,gBAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,gBAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAA,0BAAU,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,gBAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;YAChD,KAAK,EAAE,eAAe;SACvB,CAAC,CAAC;IACL,CAAC;IAED,gCAAgC;IAEhC,MAAM,CAAC,IAAI,CAAC,OAAkD;QAC5D,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,MAAwB;QACtC,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAa;QAC3B,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAA6C;QAC9D,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG;gBACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC5B,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;aACZ,CAAC;YAEX,OAAO,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAGC,MAAM,CAAC,IAAI,CAAC,OAAa;QACvB,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAa;QACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAa;QAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE;YAC5D,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,KAAa,EAAE,IAAY;QACvC,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,OAA0C;QAC1D,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,OAAO,GAA4C;YACvD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;YACvE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;YACzD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;SACxC,CAAC;QAEF,MAAM,YAAY,GAChB,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAEjE,OAAO,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAEO,WAAW,CAAC,OAAsB;QACxC,MAAM,KAAK,GAAU,EAAE,CAAC;QAExB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAEhE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,IAAA,gBAAM,GAAE,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAA,aAAG,GAAE,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAC/B,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,EAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAEnD,IAAI,OAAO,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,SAAS;YACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW;YAClC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAEzC,KAAK,CAAC,IAAI,CAAC,8BAAY,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;;AA3LH,4BA4LC;AA3LgB,iBAAQ,GAAoB,IAAI,AAAxB,CAAyB","sourcesContent":["// import { HiSecureConfig } from \"./types/HiSecureConfig.js\";\r\n// import { defaultConfig } from \"./config.js\";\r\n// import { LIB_NAME, LIB_VERSION } from \"./constants.js\";\r\n// import { deepMerge } from \"../utils/deepMerge.js\";\r\n// import { deepFreeze } from \"../utils/deepFreeze.js\";\r\n// import { logger } from \"../logging\";\r\n\r\n// // Adapters\r\n// import { ArgonAdapter } from \"../adapters/ArgonAdapter.js\";\r\n// import { BcryptAdapter } from \"../adapters/BcryptAdapter.js\";\r\n// import { RLFlexibleAdapter } from \"../adapters/RLFlexibleAdapter.js\";\r\n// import { ExpressRLAdapter } from \"../adapters/ExpressRLAdapter.js\";\r\n// import { ZodAdapter } from \"../adapters/ZodAdapter.js\";\r\n// import { ExpressValidatorAdapter } from \"../adapters/ExpressValidatorAdapter.js\";\r\n// import { SanitizeHtmlAdapter } from \"../adapters/SanitizeHtmlAdapter.js\";\r\n// import { XSSAdapter } from \"../adapters/XSSAdapter.js\";\r\n\r\n// // Managers\r\n// import { HashManager } from \"../managers/HashManager.js\";\r\n// import { RateLimitManager } from \"../managers/RateLimitManager.js\";\r\n// import { ValidatorManager } from \"../managers/ValidatorManager.js\";\r\n// import { SanitizerManager } from \"../managers/SanitizerManager.js\";\r\n// import { JsonManager } from \"../managers/JsonManager.js\";\r\n// import { CorsManager } from \"../managers/CorsManager.js\";\r\n// import { AuthManager } from \"../managers/AuthManager.js\";\r\n\r\n// // Middlewares\r\n// import helmet from \"helmet\";\r\n// import hpp from \"hpp\";\r\n// import compression from \"compression\";\r\n// import { errorHandler } from \"../middlewares/errorHandler.js\";\r\n\r\n// // Types\r\n// import { SecureOptions, ValidationSchema } from \"./types/SecureOptions.js\";\r\n\r\n// export class HiSecure {\r\n//     private static instance: HiSecure | null = null;\r\n//     private config: HiSecureConfig;\r\n//     private initialized = false;\r\n\r\n//     // Managers\r\n//     public hashManager!: HashManager;\r\n//     public rateLimitManager!: RateLimitManager;\r\n//     public validatorManager!: ValidatorManager;\r\n//     public sanitizerManager!: SanitizerManager;\r\n//     public jsonManager!: JsonManager;\r\n//     public corsManager!: CorsManager;\r\n//     public authManager?: AuthManager;\r\n\r\n//     // Internal adapters\r\n//     private hashingPrimary: any;\r\n//     private hashingFallback: any;\r\n//     private rateLimiterPrimary: any;\r\n//     private rateLimiterFallback: any;\r\n//     private sanitizerPrimary: any;\r\n//     private sanitizerFallback: any;\r\n\r\n//     private constructor(userConfig: Partial<HiSecureConfig> = {}) {\r\n//         this.config = deepMerge(defaultConfig, userConfig);\r\n//     }\r\n\r\n//     // Singleton & Init\r\n\r\n//     static getInstance(config?: Partial<HiSecureConfig>): HiSecure {\r\n//         if (!HiSecure.instance) {\r\n//             logger.info(\"Creating HiSecure singleton\", {\r\n//                 layer: \"hisecure-core\"\r\n//             });\r\n//             HiSecure.instance = new HiSecure(config);\r\n//             HiSecure.instance.init();\r\n//         }\r\n//         return HiSecure.instance;\r\n//     }\r\n\r\n//     static resetInstance(): void {\r\n//         HiSecure.instance = null;\r\n//     }\r\n\r\n//     init(): void {\r\n//         if (this.initialized) {\r\n//             logger.warn(\"Initialization skipped (already initialized)\", {\r\n//                 layer: \"hisecure-core\"\r\n//             });\r\n//             return;\r\n//         }\r\n\r\n//         logger.info(\"Framework initialization started\", {\r\n//             layer: \"hisecure-core\",\r\n//             lib: LIB_NAME,\r\n//             version: LIB_VERSION\r\n//         });\r\n\r\n//         this.setupAdapters();\r\n//         this.setupManagers();\r\n//         this.setupDynamicManagers();\r\n\r\n//         deepFreeze(this.config);\r\n//         this.initialized = true;\r\n\r\n//         logger.info(\"Framework initialized successfully\", {\r\n//             layer: \"hisecure-core\"\r\n//         });\r\n//     }\r\n\r\n//     // Public Fluent API\r\n//     static auth(options?: { required?: boolean; roles?: string[] }) {\r\n//         const instance = this.getInstance();\r\n//         if (!instance.authManager) {\r\n//             throw new Error(\"Auth not enabled. Set auth.enabled=true in config.\");\r\n//         }\r\n//         return instance.authManager.protect(options);\r\n//     }\r\n\r\n//     static validate(schema: ValidationSchema) {\r\n//         return this.getInstance().validatorManager.validate(schema);\r\n//     }\r\n\r\n//     static sanitize(options?: any) {\r\n//         return this.getInstance().sanitizerManager.middleware(options);\r\n//     }\r\n\r\n//     static rateLimit(preset: \"strict\" | \"relaxed\" | \"api\" | object) {\r\n//         const instance = this.getInstance();\r\n\r\n//         if (typeof preset === \"string\") {\r\n//             logger.info(\"Rate limit preset applied\", {\r\n//                 layer: \"hisecure-core\",\r\n//                 preset\r\n//             });\r\n\r\n//             const presets: any = {\r\n//                 strict: { mode: \"strict\" },\r\n//                 relaxed: { mode: \"relaxed\" },\r\n//                 api: { mode: \"api\" }\r\n//             };\r\n//             return instance.rateLimitManager.middleware(presets[preset]);\r\n//         }\r\n\r\n//         return instance.rateLimitManager.middleware({ options: preset });\r\n//     }\r\n\r\n//     static cors(options?: any) {\r\n//         return this.getInstance().corsManager.middleware(options);\r\n//     }\r\n\r\n//     static json(options?: any) {\r\n//         const instance = this.getInstance();\r\n//         return [\r\n//             instance.jsonManager.middleware(options),\r\n//             instance.jsonManager.urlencoded()\r\n//         ];\r\n//     }\r\n\r\n//     // Utilities\r\n\r\n//     static async hash(value: string): Promise<string> {\r\n//         const instance = this.getInstance();\r\n//         const result = await instance.hashManager.hash(value, { allowFallback: true });\r\n//         return result.hash;\r\n//     }\r\n\r\n//     static async verify(value: string, hash: string): Promise<boolean> {\r\n//         return this.getInstance().hashManager.verify(value, hash);\r\n//     }\r\n\r\n//     static jwt = {\r\n//         sign: (payload: object, options?: any) =>\r\n//             HiSecure.getInstance().authManager!.sign(payload, options),\r\n\r\n//         verify: (token: string) =>\r\n//             HiSecure.getInstance().authManager!.verify(token),\r\n\r\n//         google: {\r\n//             verifyIdToken: (idToken: string) =>\r\n//                 HiSecure.getInstance().authManager!.verifyGoogleIdToken(idToken)\r\n//         }\r\n//     };\r\n\r\n//     // Global Middleware - globalLevel\r\n//     static middleware(options?: SecureOptions | \"api\" | \"strict\" | \"public\") {\r\n//         const instance = this.getInstance();\r\n\r\n//         if (typeof options === \"string\") {\r\n//             logger.info(\"Global middleware preset applied\", {\r\n//                 layer: \"hisecure-core\",\r\n//                 preset: options\r\n//             });\r\n\r\n//             const presets: any = {\r\n//                 api: { cors: true, rateLimit: \"relaxed\", sanitize: true },\r\n//                 strict: { cors: true, rateLimit: \"strict\", sanitize: true, auth: true },\r\n//                 public: { cors: true, rateLimit: true, sanitize: false }\r\n//             };\r\n\r\n//             return instance.createMiddlewareChain(presets[options] || {});\r\n//         }\r\n\r\n//         return instance.createMiddlewareChain(options || {});\r\n//     }\r\n\r\n//     // Internal Setup\r\n\r\n//     private setupAdapters() {\r\n//         logger.info(\"Adapters setup started\", {\r\n//             layer: \"hisecure-core\"\r\n//         });\r\n\r\n//         this.hashingPrimary =\r\n//             this.config.hashing.primary === \"argon2\"\r\n//                 ? new ArgonAdapter()\r\n//                 : new BcryptAdapter(this.config.hashing.saltRounds);\r\n\r\n//         this.hashingFallback =\r\n//             this.config.hashing.fallback === \"bcrypt\"\r\n//                 ? new BcryptAdapter(this.config.hashing.saltRounds)\r\n//                 : null;\r\n\r\n//         logger.info(\"Hashing adapters configured\", {\r\n//             layer: \"hisecure-core\",\r\n//             primary: this.config.hashing.primary,\r\n//             fallback: this.config.hashing.fallback ?? null\r\n//         });\r\n\r\n//         this.rateLimiterPrimary = this.config.rateLimiter.useAdaptiveMode\r\n//             ? new RLFlexibleAdapter()\r\n//             : new ExpressRLAdapter();\r\n\r\n//         this.rateLimiterFallback = new ExpressRLAdapter();\r\n\r\n//         logger.info(\"Rate limiter adapters configured\", {\r\n//             layer: \"hisecure-core\",\r\n//             adaptive: this.config.rateLimiter.useAdaptiveMode\r\n//         });\r\n\r\n//         this.sanitizerPrimary = new SanitizeHtmlAdapter(this.config.sanitizer);\r\n//         this.sanitizerFallback = new XSSAdapter(this.config.sanitizer);\r\n\r\n//         logger.info(\"Sanitizer adapters configured\", {\r\n//             layer: \"hisecure-core\",\r\n//             primary: \"sanitize-html\",\r\n//             fallback: \"xss\"\r\n//         });\r\n//     }\r\n\r\n//     private setupManagers() {\r\n//         this.hashManager = new HashManager(\r\n//             this.config.hashing,\r\n//             this.hashingPrimary,\r\n//             this.hashingFallback\r\n//         );\r\n\r\n//         this.rateLimitManager = new RateLimitManager(\r\n//             this.config.rateLimiter,\r\n//             this.rateLimiterPrimary,\r\n//             this.rateLimiterFallback\r\n//         );\r\n\r\n//         this.validatorManager = new ValidatorManager(\r\n//             new ZodAdapter(),\r\n//             new ExpressValidatorAdapter()\r\n//         );\r\n\r\n//         this.sanitizerManager = new SanitizerManager(\r\n//             this.sanitizerPrimary,\r\n//             this.sanitizerFallback\r\n//         );\r\n\r\n//         logger.info(\"Core managers initialized\", {\r\n//             layer: \"hisecure-core\",\r\n//             managers: [\"hash\", \"rate-limit\", \"validator\", \"sanitizer\"]\r\n//         });\r\n//     }\r\n\r\n//     private setupDynamicManagers() {\r\n//         this.jsonManager = new JsonManager();\r\n//         this.corsManager = new CorsManager();\r\n\r\n//         if (this.config.auth.enabled) {\r\n//             this.authManager = new AuthManager({\r\n//                 jwtSecret: process.env.JWT_SECRET || this.config.auth.jwtSecret!,\r\n//                 jwtExpiresIn: this.config.auth.jwtExpiresIn,\r\n//                 googleClientId:\r\n//                     process.env.GOOGLE_CLIENT_ID || this.config.auth.googleClientId\r\n//             });\r\n\r\n//             logger.info(\"Authentication enabled\", {\r\n//                 layer: \"hisecure-core\",\r\n//                 google: !!this.config.auth.googleClientId\r\n//             });\r\n//         } else {\r\n//             logger.info(\"Authentication disabled\", {\r\n//                 layer: \"hisecure-core\"\r\n//             });\r\n//         }\r\n//     }\r\n\r\n//     private createMiddlewareChain(options: SecureOptions): any[] {\r\n//         const chain: any[] = [];\r\n\r\n//         chain.push(this.jsonManager.middleware(this.config.json));\r\n//         chain.push(this.jsonManager.urlencoded(this.config.urlencoded));\r\n\r\n//         if (this.config.enableHelmet) chain.push(helmet());\r\n//         if (this.config.enableHPP) chain.push(hpp());\r\n\r\n//         if (this.config.enableCompression)\r\n//             chain.push(compression(this.config.compression));\r\n\r\n//         if (options.cors) chain.push(this.corsManager.middleware(this.config.cors));\r\n//         if (options.sanitize)\r\n//             chain.push(this.sanitizerManager.middleware());\r\n\r\n//         if (options.rateLimit)\r\n//             chain.push(this.rateLimitManager.middleware({}));\r\n\r\n//         if (options.auth && this.authManager)\r\n//             chain.push(this.authManager.protect());\r\n\r\n//         chain.push(errorHandler);\r\n//         return chain;\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\n\r\n\r\nimport { HiSecureConfig } from \"./types/HiSecureConfig.js\";\r\nimport { defaultConfig } from \"./config.js\";\r\nimport { LIB_NAME, LIB_VERSION } from \"./constants.js\";\r\nimport { deepMerge } from \"../utils/deepMerge.js\";\r\nimport { deepFreeze } from \"../utils/deepFreeze.js\";\r\nimport { logger } from \"../logging\";\r\n\r\n// Adapters\r\nimport { ArgonAdapter } from \"../adapters/ArgonAdapter.js\";\r\nimport { BcryptAdapter } from \"../adapters/BcryptAdapter.js\";\r\nimport { RLFlexibleAdapter } from \"../adapters/RLFlexibleAdapter.js\";\r\nimport { ExpressRLAdapter } from \"../adapters/ExpressRLAdapter.js\";\r\nimport { ZodAdapter } from \"../adapters/ZodAdapter.js\";\r\nimport { ExpressValidatorAdapter } from \"../adapters/ExpressValidatorAdapter.js\";\r\nimport { SanitizeHtmlAdapter } from \"../adapters/SanitizeHtmlAdapter.js\";\r\nimport { XSSAdapter } from \"../adapters/XSSAdapter.js\";\r\n\r\n// Managers\r\nimport { HashManager } from \"../managers/HashManager.js\";\r\nimport { RateLimitManager } from \"../managers/RateLimitManager.js\";\r\nimport { ValidatorManager } from \"../managers/ValidatorManager.js\";\r\nimport { SanitizerManager } from \"../managers/SanitizerManager.js\";\r\nimport { JsonManager } from \"../managers/JsonManager.js\";\r\nimport { CorsManager } from \"../managers/CorsManager.js\";\r\nimport { AuthManager } from \"../managers/AuthManager.js\";\r\n\r\n// Middlewares\r\nimport helmet from \"helmet\";\r\nimport hpp from \"hpp\";\r\nimport compression from \"compression\";\r\nimport { errorHandler } from \"../middlewares/errorHandler.js\";\r\n\r\n// Types\r\nimport { SecureOptions, ValidationSchema } from \"./types/SecureOptions.js\";\r\n\r\ntype MiddlewarePreset = \"strict\" | \"api\" | \"public\";\r\n\r\nexport class HiSecure {\r\n  private static instance: HiSecure | null = null;\r\n\r\n  private readonly config: HiSecureConfig;\r\n  private initialized = false;\r\n\r\n  private hashManager!: HashManager;\r\n  private rateLimitManager!: RateLimitManager;\r\n  private validatorManager!: ValidatorManager;\r\n  private sanitizerManager!: SanitizerManager;\r\n  private jsonManager!: JsonManager;\r\n  private corsManager!: CorsManager;\r\n  private authManager?: AuthManager;\r\n\r\n  private constructor(config: HiSecureConfig) {\r\n    this.config = config;\r\n  }\r\n\r\n  // ===== INIT (ONLY ONCE) =====\r\n  static init(userConfig?: Partial<HiSecureConfig>): HiSecure {\r\n    if (HiSecure.instance) return HiSecure.instance;\r\n\r\n    const finalConfig = deepMerge(defaultConfig, userConfig ?? {});\r\n    const instance = new HiSecure(finalConfig);\r\n    HiSecure.instance = instance;\r\n    instance.bootstrap();\r\n    return instance;\r\n  }\r\n\r\n  private static get(): HiSecure {\r\n    if (!HiSecure.instance) {\r\n      throw new Error(\"HiSecure not initialized. Call HiSecure.init() first.\");\r\n    }\r\n    return HiSecure.instance;\r\n  }\r\n\r\n  private bootstrap(): void {\r\n    if (this.initialized) return;\r\n\r\n    logger.info(\"Framework initialization started\", {\r\n      layer: \"hisecure-core\",\r\n      lib: LIB_NAME,\r\n      version: LIB_VERSION\r\n    });\r\n\r\n    // Core managers\r\n    this.hashManager = new HashManager(\r\n      this.config.hashing,\r\n      this.config.hashing.primary === \"argon2\"\r\n        ? new ArgonAdapter()\r\n        : new BcryptAdapter(this.config.hashing.saltRounds),\r\n      this.config.hashing.fallback\r\n        ? new BcryptAdapter(this.config.hashing.saltRounds)\r\n        : null\r\n    );\r\n\r\n    this.rateLimitManager = new RateLimitManager(\r\n      this.config.rateLimiter,\r\n      this.config.rateLimiter.useAdaptiveMode\r\n        ? new RLFlexibleAdapter()\r\n        : new ExpressRLAdapter(),\r\n      new ExpressRLAdapter()\r\n    );\r\n\r\n    this.validatorManager = new ValidatorManager(\r\n      new ZodAdapter(),\r\n      new ExpressValidatorAdapter()\r\n    );\r\n\r\n    this.sanitizerManager = new SanitizerManager(\r\n      new SanitizeHtmlAdapter(this.config.sanitizer),\r\n      new XSSAdapter(this.config.sanitizer)\r\n    );\r\n\r\n    this.jsonManager = new JsonManager();\r\n    this.corsManager = new CorsManager();\r\n\r\n    // Auth (optional)\r\n    if (this.config.auth?.enabled) {\r\n      this.authManager = new AuthManager({\r\n        jwtSecret: process.env.JWT_SECRET || this.config.auth.jwtSecret!,\r\n        jwtExpiresIn: this.config.auth.jwtExpiresIn,\r\n        googleClientId:\r\n          process.env.GOOGLE_CLIENT_ID || this.config.auth.googleClientId\r\n      });\r\n\r\n      logger.info(\"Authentication enabled\", { layer: \"hisecure-core\" });\r\n    } else {\r\n      logger.info(\"Authentication disabled\", { layer: \"hisecure-core\" });\r\n    }\r\n\r\n    deepFreeze(this.config);\r\n    this.initialized = true;\r\n\r\n    logger.info(\"Framework initialized successfully\", {\r\n      layer: \"hisecure-core\"\r\n    });\r\n  }\r\n\r\n  // ===== PUBLIC STATIC API =====\r\n\r\n  static auth(options?: { required?: boolean; roles?: string[] }) {\r\n    const i = HiSecure.get();\r\n    if (!i.authManager) throw new Error(\"Auth not enabled\");\r\n    return i.authManager.protect(options);\r\n  }\r\n\r\n  static validate(schema: ValidationSchema) {\r\n    return HiSecure.get().validatorManager.validate(schema);\r\n  }\r\n\r\n  static sanitize(options?: any) {\r\n    return HiSecure.get().sanitizerManager.middleware(options);\r\n  }\r\n\r\n  static rateLimit(preset: \"strict\" | \"relaxed\" | \"api\" | object) {\r\n  const i = HiSecure.get();\r\n\r\n  if (typeof preset === \"string\") {\r\n    const presets = {\r\n      strict: { mode: \"strict\" },\r\n      relaxed: { mode: \"relaxed\" },\r\n      api: { mode: \"api\" }\r\n    } as const;\r\n\r\n    return i.rateLimitManager.middleware(presets[preset]);\r\n  }\r\n\r\n  return i.rateLimitManager.middleware({ options: preset });\r\n}\r\n\r\n\r\n  static cors(options?: any) {\r\n    return HiSecure.get().corsManager.middleware(options);\r\n  }\r\n\r\n  static json(options?: any) {\r\n    const i = HiSecure.get();\r\n    return [i.jsonManager.middleware(options), i.jsonManager.urlencoded()];\r\n  }\r\n\r\n  static async hash(value: string): Promise<string> {\r\n    const { hash } = await HiSecure.get().hashManager.hash(value, {\r\n      allowFallback: true\r\n    });\r\n    return hash;\r\n  }\r\n\r\n  static verify(value: string, hash: string): Promise<boolean> {\r\n    return HiSecure.get().hashManager.verify(value, hash);\r\n  }\r\n\r\n  static middleware(options?: SecureOptions | MiddlewarePreset) {\r\n    const i = HiSecure.get();\r\n\r\n    const presets: Record<MiddlewarePreset, SecureOptions> = {\r\n      strict: { cors: true, rateLimit: \"strict\", sanitize: true, auth: true },\r\n      api: { cors: true, rateLimit: \"relaxed\", sanitize: true },\r\n      public: { cors: true, rateLimit: true }\r\n    };\r\n\r\n    const finalOptions =\r\n      typeof options === \"string\" ? presets[options] : options ?? {};\r\n\r\n    return i.createChain(finalOptions);\r\n  }\r\n\r\n  private createChain(options: SecureOptions): any[] {\r\n    const chain: any[] = [];\r\n\r\n    chain.push(this.jsonManager.middleware(this.config.json));\r\n    chain.push(this.jsonManager.urlencoded(this.config.urlencoded));\r\n\r\n    if (this.config.enableHelmet) chain.push(helmet());\r\n    if (this.config.enableHPP) chain.push(hpp());\r\n    if (this.config.enableCompression)\r\n      chain.push(compression(this.config.compression));\r\n\r\n    if (options.cors) chain.push(this.corsManager.middleware());\r\n    if (options.sanitize) chain.push(this.sanitizerManager.middleware());\r\n    if (options.rateLimit)\r\n      chain.push(this.rateLimitManager.middleware({}));\r\n    if (options.auth && this.authManager)\r\n      chain.push(this.authManager.protect());\r\n\r\n    chain.push(errorHandler);\r\n    return chain;\r\n  }\r\n}\r\n"]}

package/dist/core/useSecure.d.ts

@@ -1,7 +1,10 @@
 import { SecureOptions } from "./types/SecureOptions.js";
 /**
- * @deprecated Use HiSecure.middleware() or fluent API instead
+ * @deprecated Use HiSecure.middleware()
  */
 export declare function useSecure(options?: SecureOptions | "api" | "strict" | "public"): any[];
+/**
+ * Legacy route-level security
+ */
 export declare function secureRoute(options?: SecureOptions): any[];
 //# sourceMappingURL=useSecure.d.ts.map

package/dist/core/useSecure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useSecure.d.ts","sourceRoot":"","sources":["../../src/core/useSecure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD;;GAEG;AAEH,wBAAgB,SAAS,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,SAG9E;AAKD,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,SAgClD"}
+{"version":3,"file":"useSecure.d.ts","sourceRoot":"","sources":["../../src/core/useSecure.ts"],"names":[],"mappings":"AAqDA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD;;GAEG;AACH,wBAAgB,SAAS,CACvB,OAAO,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,SAItD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,SAsClD"}

package/dist/core/useSecure.js

@@ -1,33 +1,78 @@
 "use strict";
+// import { HiSecure } from "./HiSecure.js";
+// import { SecureOptions } from "./types/SecureOptions.js";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.useSecure = useSecure;
 exports.secureRoute = secureRoute;
+// /**
+//  * @deprecated Use HiSecure.middleware() or fluent API instead
+//  */
+// export function useSecure(options?: SecureOptions | "api" | "strict" | "public") {
+//     console.warn("useSecure() is deprecated. Use HiSecure.middleware() or fluent API methods.");
+//     return HiSecure.middleware(options);
+// }
+// //  Legacy support - route-level security
+// export function secureRoute(options?: SecureOptions) {
+//     const chain: any[] = [];
+//     if (options?.cors) {
+//         chain.push(HiSecure.cors(
+//             typeof options.cors === 'object' ? options.cors : undefined
+//         ));
+//     }
+//     if (options?.rateLimit) {
+//         chain.push(HiSecure.rateLimit(
+//             typeof options.rateLimit === 'object' ? options.rateLimit : 
+//             options.rateLimit === "strict" ? "strict" : "relaxed"
+//         ));
+//     }
+//     if (options?.sanitize) {
+//         chain.push(HiSecure.sanitize(
+//             typeof options.sanitize === 'object' ? options.sanitize : undefined
+//         ));
+//     }
+//     if (options?.validate) {
+//         chain.push(HiSecure.validate(options.validate));
+//     }
+//     if (options?.auth) {
+//         chain.push(HiSecure.auth(
+//             typeof options.auth === 'object' ? options.auth : undefined
+//         ));
+//     }
+//     return chain;
+// }
 const HiSecure_js_1 = require("./HiSecure.js");
 /**
- * @deprecated Use HiSecure.middleware() or fluent API instead
+ * @deprecated Use HiSecure.middleware()
  */
 function useSecure(options) {
-    console.warn("useSecure() is deprecated. Use HiSecure.middleware() or fluent API methods.");
+    console.warn("useSecure() is deprecated. Use HiSecure.middleware() instead.");
     return HiSecure_js_1.HiSecure.middleware(options);
 }
-//  Legacy support - route-level security
+/**
+ * Legacy route-level security
+ */
 function secureRoute(options) {
     const chain = [];
-    if (options?.cors) {
-        chain.push(HiSecure_js_1.HiSecure.cors(typeof options.cors === 'object' ? options.cors : undefined));
+    if (!options)
+        return chain;
+    if (options.cors) {
+        chain.push(HiSecure_js_1.HiSecure.cors());
     }
-    if (options?.rateLimit) {
-        chain.push(HiSecure_js_1.HiSecure.rateLimit(typeof options.rateLimit === 'object' ? options.rateLimit :
-            options.rateLimit === "strict" ? "strict" : "relaxed"));
+    if (options.rateLimit) {
+        chain.push(HiSecure_js_1.HiSecure.rateLimit(typeof options.rateLimit === "object"
+            ? options.rateLimit
+            : options.rateLimit === "strict"
+                ? "strict"
+                : "relaxed"));
     }
-    if (options?.sanitize) {
-        chain.push(HiSecure_js_1.HiSecure.sanitize(typeof options.sanitize === 'object' ? options.sanitize : undefined));
+    if (options.sanitize) {
+        chain.push(HiSecure_js_1.HiSecure.sanitize());
     }
-    if (options?.validate) {
+    if (options.validate) {
         chain.push(HiSecure_js_1.HiSecure.validate(options.validate));
     }
-    if (options?.auth) {
-        chain.push(HiSecure_js_1.HiSecure.auth(typeof options.auth === 'object' ? options.auth : undefined));
+    if (options.auth) {
+        chain.push(HiSecure_js_1.HiSecure.auth(typeof options.auth === "object" ? options.auth : undefined));
     }
     return chain;
 }