hi-secure 1.0.33 → 1.0.35

package/dist/adapters/JWTAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"JWTAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":"AA6GA,OAAO,GAAsC,MAAM,cAAc,CAAC;AAOlE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC9B;AAWD,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAC,CAAY;IAC9B,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,CAAoB;gBAEzB,OAAO,EAAE,iBAAiB;IAoBtC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW;IAmC3C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE;CA8BjE"}
+{"version":3,"file":"JWTAdapter.d.ts","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,GAAsC,MAAM,cAAc,CAAC;AAOlE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC9B;AAWD,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAC,CAAY;IAC9B,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,CAAoB;gBAEzB,OAAO,EAAE,iBAAiB;IAmBtC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW;IAuC3C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE;CAgCjE"}

package/dist/adapters/JWTAdapter.js

@@ -1,98 +1,9 @@
 "use strict";
-// import jwt from "jsonwebtoken";
-// import { randomUUID } from "crypto";
-// import { AdapterError } from "../core/errors/AdapterError";
-// import { logger } from "../logging";
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.JWTAdapter = void 0;
-// export interface JWTAdapterOptions {
-//     secret: string;
-//     expiresIn?: string | number;
-//     algorithm?: jwt.Algorithm;
-//     issuer?: string;
-//     audience?: string | string[];
-// }
-// export interface SignOptions {
-//     expiresIn?: string | number;
-//     jti?: string;
-//     subject?: string;
-//     issuer?: string;
-//     audience?: string | string[];
-// }
-// export class JWTAdapter {
-//     private secret: string;
-//     private expiresIn?: string | number;
-//     private algorithm: jwt.Algorithm;
-//     private issuer?: string;
-//     private audience?: string | string[];
-//     constructor(options: JWTAdapterOptions) {
-//         if (!options.secret) {
-//             throw new AdapterError("JWT secret is required");
-//         }
-//         if (options.secret.length < 32) {
-//             logger.warn("Weak JWT secret detected", {
-//                 adapter: "jwt",
-//                 operation: "init",
-//                 secretLength: options.secret.length
-//             });
-//         }
-//         this.secret = options.secret;
-//         this.expiresIn = options.expiresIn;
-//         this.algorithm = options.algorithm || "HS256";
-//         this.issuer = options.issuer;
-//         this.audience = options.audience;
-//     }
-//     sign(payload: object, options?: SignOptions) {
-//         try {
-//             const jwtOptions: jwt.SignOptions = {
-//                 algorithm: this.algorithm,
-//                 issuer: options?.issuer || this.issuer,
-//                 audience: options?.audience || this.audience,
-//                 jwtid: options?.jti || randomUUID(),
-//                 subject: options?.subject
-//             };
-//             if (options?.expiresIn !== undefined) {
-//                 jwtOptions.expiresIn = options.expiresIn as any;
-//             } else if (this.expiresIn !== undefined) {
-//                 jwtOptions.expiresIn = this.expiresIn as any;
-//             }
-//             return jwt.sign(payload, this.secret, jwtOptions);
-//         } catch (err: any) {
-//             logger.error("JWT signing failed", {
-//                 adapter: "jwt",
-//                 operation: "sign",
-//                 reason: err?.message
-//             });
-//             throw new AdapterError("JWT sign failed");
-//         }
-//     }
-//     verify(token: string, options?: { audience?: string | string[] }) {
-//         try {
-//             const verifyOptions: jwt.VerifyOptions = {
-//                 algorithms: [this.algorithm],
-//                 issuer: this.issuer,
-//                 audience: (options?.audience || this.audience) as string
-//             };
-//             return jwt.verify(token, this.secret, verifyOptions);
-//         } catch (err: any) {
-//             logger.error("JWT verification failed", {
-//                 adapter: "jwt",
-//                 operation: "verify",
-//                 reason: err?.message
-//             });
-//             if (err?.name === "TokenExpiredError") {
-//                 throw new AdapterError("JWT token has expired");
-//             }
-//             if (err?.name === "JsonWebTokenError") {
-//                 throw new AdapterError("Invalid JWT token");
-//             }
-//             throw new AdapterError("JWT verification failed");
-//         }
-//     }
-// }
 const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
 const crypto_1 = require("crypto");
 const AdapterError_1 = require("../core/errors/AdapterError");
@@ -123,17 +34,19 @@ class JWTAdapter {
         this.audience = options.audience;
         this.expiresIn = options.expiresIn;
     }
-    // ================= SIGN =================
     sign(payload, options) {
         try {
             const jwtOptions = {
                 algorithm: this.algorithm,
-                jwtid: options?.jti ?? (0, crypto_1.randomUUID)(),
-                subject: options?.subject
+                jwtid: options?.jti ?? (0, crypto_1.randomUUID)()
             };
+            if (typeof options?.subject === "string") {
+                jwtOptions.subject = options.subject;
+            }
             const issuer = options?.issuer ?? this.issuer;
-            if (issuer)
+            if (typeof issuer === "string") {
                 jwtOptions.issuer = issuer;
+            }
             const audience = normalizeAudience(options?.audience ?? this.audience);
             if (audience)
                 jwtOptions.audience = audience;
@@ -154,14 +67,14 @@ class JWTAdapter {
             throw new AdapterError_1.AdapterError("JWT sign failed");
         }
     }
-    // ================= VERIFY =================
     verify(token, options) {
         try {
             const verifyOptions = {
                 algorithms: [this.algorithm]
             };
-            if (this.issuer)
+            if (typeof this.issuer === "string") {
                 verifyOptions.issuer = this.issuer;
+            }
             const audience = normalizeAudience(options?.audience ?? this.audience);
             if (audience)
                 verifyOptions.audience = audience;

package/dist/adapters/JWTAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"JWTAdapter.js","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":";AAAA,kCAAkC;AAClC,uCAAuC;AACvC,8DAA8D;AAC9D,uCAAuC;;;;;;AAEvC,uCAAuC;AACvC,sBAAsB;AACtB,mCAAmC;AACnC,iCAAiC;AACjC,uBAAuB;AACvB,oCAAoC;AACpC,IAAI;AAEJ,iCAAiC;AACjC,mCAAmC;AACnC,oBAAoB;AACpB,wBAAwB;AACxB,uBAAuB;AACvB,oCAAoC;AACpC,IAAI;AAEJ,4BAA4B;AAC5B,8BAA8B;AAC9B,2CAA2C;AAC3C,wCAAwC;AACxC,+BAA+B;AAC/B,4CAA4C;AAE5C,gDAAgD;AAChD,iCAAiC;AACjC,gEAAgE;AAChE,YAAY;AAEZ,4CAA4C;AAC5C,wDAAwD;AACxD,kCAAkC;AAClC,qCAAqC;AACrC,sDAAsD;AACtD,kBAAkB;AAClB,YAAY;AAEZ,wCAAwC;AACxC,8CAA8C;AAC9C,yDAAyD;AACzD,wCAAwC;AACxC,4CAA4C;AAC5C,QAAQ;AAER,qDAAqD;AACrD,gBAAgB;AAChB,oDAAoD;AACpD,6CAA6C;AAC7C,0DAA0D;AAC1D,gEAAgE;AAChE,uDAAuD;AACvD,4CAA4C;AAC5C,iBAAiB;AAEjB,sDAAsD;AACtD,mEAAmE;AACnE,yDAAyD;AACzD,gEAAgE;AAChE,gBAAgB;AAEhB,iEAAiE;AAEjE,+BAA+B;AAC/B,mDAAmD;AACnD,kCAAkC;AAClC,qCAAqC;AACrC,uCAAuC;AACvC,kBAAkB;AAElB,yDAAyD;AACzD,YAAY;AACZ,QAAQ;AAER,0EAA0E;AAC1E,gBAAgB;AAChB,yDAAyD;AACzD,gDAAgD;AAChD,uCAAuC;AACvC,2EAA2E;AAC3E,iBAAiB;AAEjB,oEAAoE;AAEpE,+BAA+B;AAC/B,wDAAwD;AACxD,kCAAkC;AAClC,uCAAuC;AACvC,uCAAuC;AACvC,kBAAkB;AAElB,uDAAuD;AACvD,mEAAmE;AACnE,gBAAgB;AAEhB,uDAAuD;AACvD,+DAA+D;AAC/D,gBAAgB;AAEhB,iEAAiE;AACjE,YAAY;AACZ,QAAQ;AACR,IAAI;AAIJ,gEAAkE;AAClE,mCAAoC;AACpC,8DAA2D;AAC3D,wCAAoC;AAoBpC,SAAS,iBAAiB,CACxB,GAAuB;IAEvB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAA4B,CAAC;IACxD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAa,UAAU;IAOrB,YAAY,OAA0B;QACpC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,2BAAY,CAAC,wBAAwB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC/B,gBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBACtC,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;aACpC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAsB,CAAC;IAClD,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC,OAAe,EAAE,OAAqB;QACzC,IAAI,CAAC;YACH,MAAM,UAAU,GAAoB;gBAClC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,IAAA,mBAAU,GAAE;gBACnC,OAAO,EAAE,OAAO,EAAE,OAAO;aAC1B,CAAC;YAEF,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;YAC9C,IAAI,MAAM;gBAAE,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;YAEvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvE,IAAI,QAAQ;gBAAE,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAE7C,MAAM,OAAO,GACX,OAAO,EAAE,SAAS,KAAK,SAAS;gBAC9B,CAAC,CAAE,OAAO,CAAC,SAAuB;gBAClC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;YAErB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC;YACjC,CAAC;YAED,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,gBAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBACjC,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,GAAG,EAAE,OAAO;aACrB,CAAC,CAAC;YACH,MAAM,IAAI,2BAAY,CAAC,iBAAiB,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,CAAC,KAAa,EAAE,OAA0C;QAC9D,IAAI,CAAC;YACH,MAAM,aAAa,GAAsB;gBACvC,UAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;aAC7B,CAAC;YAEF,IAAI,IAAI,CAAC,MAAM;gBAAE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAEpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvE,IAAI,QAAQ;gBAAE,aAAa,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAEhD,OAAO,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,gBAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACtC,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,GAAG,EAAE,OAAO;aACrB,CAAC,CAAC;YAEH,IAAI,GAAG,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACtC,MAAM,IAAI,2BAAY,CAAC,uBAAuB,CAAC,CAAC;YAClD,CAAC;YAED,IAAI,GAAG,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACtC,MAAM,IAAI,2BAAY,CAAC,mBAAmB,CAAC,CAAC;YAC9C,CAAC;YAED,MAAM,IAAI,2BAAY,CAAC,yBAAyB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;CACF;AA5FD,gCA4FC","sourcesContent":["// import jwt from \"jsonwebtoken\";\r\n// import { randomUUID } from \"crypto\";\r\n// import { AdapterError } from \"../core/errors/AdapterError\";\r\n// import { logger } from \"../logging\";\r\n\r\n// export interface JWTAdapterOptions {\r\n//     secret: string;\r\n//     expiresIn?: string | number;\r\n//     algorithm?: jwt.Algorithm;\r\n//     issuer?: string;\r\n//     audience?: string | string[];\r\n// }\r\n\r\n// export interface SignOptions {\r\n//     expiresIn?: string | number;\r\n//     jti?: string;\r\n//     subject?: string;\r\n//     issuer?: string;\r\n//     audience?: string | string[];\r\n// }\r\n\r\n// export class JWTAdapter {\r\n//     private secret: string;\r\n//     private expiresIn?: string | number;\r\n//     private algorithm: jwt.Algorithm;\r\n//     private issuer?: string;\r\n//     private audience?: string | string[];\r\n\r\n//     constructor(options: JWTAdapterOptions) {\r\n//         if (!options.secret) {\r\n//             throw new AdapterError(\"JWT secret is required\");\r\n//         }\r\n\r\n//         if (options.secret.length < 32) {\r\n//             logger.warn(\"Weak JWT secret detected\", {\r\n//                 adapter: \"jwt\",\r\n//                 operation: \"init\",\r\n//                 secretLength: options.secret.length\r\n//             });\r\n//         }\r\n\r\n//         this.secret = options.secret;\r\n//         this.expiresIn = options.expiresIn;\r\n//         this.algorithm = options.algorithm || \"HS256\";\r\n//         this.issuer = options.issuer;\r\n//         this.audience = options.audience;\r\n//     }\r\n\r\n//     sign(payload: object, options?: SignOptions) {\r\n//         try {\r\n//             const jwtOptions: jwt.SignOptions = {\r\n//                 algorithm: this.algorithm,\r\n//                 issuer: options?.issuer || this.issuer,\r\n//                 audience: options?.audience || this.audience,\r\n//                 jwtid: options?.jti || randomUUID(),\r\n//                 subject: options?.subject\r\n//             };\r\n\r\n//             if (options?.expiresIn !== undefined) {\r\n//                 jwtOptions.expiresIn = options.expiresIn as any;\r\n//             } else if (this.expiresIn !== undefined) {\r\n//                 jwtOptions.expiresIn = this.expiresIn as any;\r\n//             }\r\n\r\n//             return jwt.sign(payload, this.secret, jwtOptions);\r\n\r\n//         } catch (err: any) {\r\n//             logger.error(\"JWT signing failed\", {\r\n//                 adapter: \"jwt\",\r\n//                 operation: \"sign\",\r\n//                 reason: err?.message\r\n//             });\r\n\r\n//             throw new AdapterError(\"JWT sign failed\");\r\n//         }\r\n//     }\r\n\r\n//     verify(token: string, options?: { audience?: string | string[] }) {\r\n//         try {\r\n//             const verifyOptions: jwt.VerifyOptions = {\r\n//                 algorithms: [this.algorithm],\r\n//                 issuer: this.issuer,\r\n//                 audience: (options?.audience || this.audience) as string\r\n//             };\r\n\r\n//             return jwt.verify(token, this.secret, verifyOptions);\r\n\r\n//         } catch (err: any) {\r\n//             logger.error(\"JWT verification failed\", {\r\n//                 adapter: \"jwt\",\r\n//                 operation: \"verify\",\r\n//                 reason: err?.message\r\n//             });\r\n\r\n//             if (err?.name === \"TokenExpiredError\") {\r\n//                 throw new AdapterError(\"JWT token has expired\");\r\n//             }\r\n\r\n//             if (err?.name === \"JsonWebTokenError\") {\r\n//                 throw new AdapterError(\"Invalid JWT token\");\r\n//             }\r\n\r\n//             throw new AdapterError(\"JWT verification failed\");\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\nimport jwt, { SignOptions as JwtSignOptions } from \"jsonwebtoken\";\r\nimport { randomUUID } from \"crypto\";\r\nimport { AdapterError } from \"../core/errors/AdapterError\";\r\nimport { logger } from \"../logging\";\r\n\r\ntype ExpiresIn = JwtSignOptions[\"expiresIn\"]; // ✅ important\r\n\r\nexport interface JWTAdapterOptions {\r\n  secret: string;\r\n  expiresIn?: string | number;\r\n  algorithm?: jwt.Algorithm;\r\n  issuer?: string;\r\n  audience?: string | string[];\r\n}\r\n\r\nexport interface SignOptions {\r\n  expiresIn?: string | number;\r\n  jti?: string;\r\n  subject?: string;\r\n  issuer?: string;\r\n  audience?: string | string[];\r\n}\r\n\r\nfunction normalizeAudience(\r\n  aud?: string | string[]\r\n): string | [string, ...string[]] | undefined {\r\n  if (!aud) return undefined;\r\n  if (typeof aud === \"string\") return aud;\r\n  if (aud.length > 0) return aud as [string, ...string[]];\r\n  return undefined;\r\n}\r\n\r\nexport class JWTAdapter {\r\n  private secret: string;\r\n  private expiresIn?: ExpiresIn;\r\n  private algorithm: jwt.Algorithm;\r\n  private issuer?: string;\r\n  private audience?: string | string[];\r\n\r\n  constructor(options: JWTAdapterOptions) {\r\n    if (!options.secret) {\r\n      throw new AdapterError(\"JWT secret is required\");\r\n    }\r\n\r\n    if (options.secret.length < 32) {\r\n      logger.warn(\"Weak JWT secret detected\", {\r\n        adapter: \"jwt\",\r\n        secretLength: options.secret.length\r\n      });\r\n    }\r\n\r\n    this.secret = options.secret;\r\n    this.algorithm = options.algorithm ?? \"HS256\";\r\n    this.issuer = options.issuer;\r\n    this.audience = options.audience;\r\n    this.expiresIn = options.expiresIn as ExpiresIn;\r\n  }\r\n\r\n  // ================= SIGN =================\r\n  sign(payload: object, options?: SignOptions) {\r\n    try {\r\n      const jwtOptions: jwt.SignOptions = {\r\n        algorithm: this.algorithm,\r\n        jwtid: options?.jti ?? randomUUID(),\r\n        subject: options?.subject\r\n      };\r\n\r\n      const issuer = options?.issuer ?? this.issuer;\r\n      if (issuer) jwtOptions.issuer = issuer;\r\n\r\n      const audience = normalizeAudience(options?.audience ?? this.audience);\r\n      if (audience) jwtOptions.audience = audience;\r\n\r\n      const expires =\r\n        options?.expiresIn !== undefined\r\n          ? (options.expiresIn as ExpiresIn)\r\n          : this.expiresIn;\r\n\r\n      if (expires !== undefined) {\r\n        jwtOptions.expiresIn = expires;\r\n      }\r\n\r\n      return jwt.sign(payload, this.secret, jwtOptions);\r\n    } catch (err: any) {\r\n      logger.error(\"JWT signing failed\", {\r\n        adapter: \"jwt\",\r\n        operation: \"sign\",\r\n        reason: err?.message\r\n      });\r\n      throw new AdapterError(\"JWT sign failed\");\r\n    }\r\n  }\r\n\r\n  // ================= VERIFY =================\r\n  verify(token: string, options?: { audience?: string | string[] }) {\r\n    try {\r\n      const verifyOptions: jwt.VerifyOptions = {\r\n        algorithms: [this.algorithm]\r\n      };\r\n\r\n      if (this.issuer) verifyOptions.issuer = this.issuer;\r\n\r\n      const audience = normalizeAudience(options?.audience ?? this.audience);\r\n      if (audience) verifyOptions.audience = audience;\r\n\r\n      return jwt.verify(token, this.secret, verifyOptions);\r\n    } catch (err: any) {\r\n      logger.error(\"JWT verification failed\", {\r\n        adapter: \"jwt\",\r\n        operation: \"verify\",\r\n        reason: err?.message\r\n      });\r\n\r\n      if (err?.name === \"TokenExpiredError\") {\r\n        throw new AdapterError(\"JWT token has expired\");\r\n      }\r\n\r\n      if (err?.name === \"JsonWebTokenError\") {\r\n        throw new AdapterError(\"Invalid JWT token\");\r\n      }\r\n\r\n      throw new AdapterError(\"JWT verification failed\");\r\n    }\r\n  }\r\n}\r\n"]}
+{"version":3,"file":"JWTAdapter.js","sourceRoot":"","sources":["../../src/adapters/JWTAdapter.ts"],"names":[],"mappings":";;;;;;AAAA,gEAAkE;AAClE,mCAAoC;AACpC,8DAA2D;AAC3D,wCAAoC;AAoBpC,SAAS,iBAAiB,CACxB,GAAuB;IAEvB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAA4B,CAAC;IACxD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAa,UAAU;IAOrB,YAAY,OAA0B;QACpC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,2BAAY,CAAC,wBAAwB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC/B,gBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBACtC,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;aACpC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAsB,CAAC;IAClD,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAqB;QACzC,IAAI,CAAC;YACH,MAAM,UAAU,GAAoB;gBAClC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,IAAA,mBAAU,GAAE;aACpC,CAAC;YAEF,IAAI,OAAO,OAAO,EAAE,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACzC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YACvC,CAAC;YAED,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;YAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;YAC7B,CAAC;YAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvE,IAAI,QAAQ;gBAAE,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAE7C,MAAM,OAAO,GACX,OAAO,EAAE,SAAS,KAAK,SAAS;gBAC9B,CAAC,CAAE,OAAO,CAAC,SAAuB;gBAClC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;YAErB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC;YACjC,CAAC;YAED,OAAO,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,gBAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBACjC,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,GAAG,EAAE,OAAO;aACrB,CAAC,CAAC;YACH,MAAM,IAAI,2BAAY,CAAC,iBAAiB,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,OAA0C;QAC9D,IAAI,CAAC;YACH,MAAM,aAAa,GAAsB;gBACvC,UAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;aAC7B,CAAC;YAEF,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACpC,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACrC,CAAC;YAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvE,IAAI,QAAQ;gBAAE,aAAa,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAEhD,OAAO,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,gBAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACtC,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,GAAG,EAAE,OAAO;aACrB,CAAC,CAAC;YAEH,IAAI,GAAG,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACtC,MAAM,IAAI,2BAAY,CAAC,uBAAuB,CAAC,CAAC;YAClD,CAAC;YAED,IAAI,GAAG,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACtC,MAAM,IAAI,2BAAY,CAAC,mBAAmB,CAAC,CAAC;YAC9C,CAAC;YAED,MAAM,IAAI,2BAAY,CAAC,yBAAyB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;CACF;AAjGD,gCAiGC","sourcesContent":["import jwt, { SignOptions as JwtSignOptions } from \"jsonwebtoken\";\r\nimport { randomUUID } from \"crypto\";\r\nimport { AdapterError } from \"../core/errors/AdapterError\";\r\nimport { logger } from \"../logging\";\r\n\r\ntype ExpiresIn = JwtSignOptions[\"expiresIn\"];\r\n\r\nexport interface JWTAdapterOptions {\r\n  secret: string;\r\n  expiresIn?: string | number;\r\n  algorithm?: jwt.Algorithm;\r\n  issuer?: string;\r\n  audience?: string | string[];\r\n}\r\n\r\nexport interface SignOptions {\r\n  expiresIn?: string | number;\r\n  jti?: string;\r\n  subject?: string;\r\n  issuer?: string;\r\n  audience?: string | string[];\r\n}\r\n\r\nfunction normalizeAudience(\r\n  aud?: string | string[]\r\n): string | [string, ...string[]] | undefined {\r\n  if (!aud) return undefined;\r\n  if (typeof aud === \"string\") return aud;\r\n  if (aud.length > 0) return aud as [string, ...string[]];\r\n  return undefined;\r\n}\r\n\r\nexport class JWTAdapter {\r\n  private secret: string;\r\n  private expiresIn?: ExpiresIn;\r\n  private algorithm: jwt.Algorithm;\r\n  private issuer?: string;\r\n  private audience?: string | string[];\r\n\r\n  constructor(options: JWTAdapterOptions) {\r\n    if (!options.secret) {\r\n      throw new AdapterError(\"JWT secret is required\");\r\n    }\r\n\r\n    if (options.secret.length < 32) {\r\n      logger.warn(\"Weak JWT secret detected\", {\r\n        adapter: \"jwt\",\r\n        secretLength: options.secret.length\r\n      });\r\n    }\r\n\r\n    this.secret = options.secret;\r\n    this.algorithm = options.algorithm ?? \"HS256\";\r\n    this.issuer = options.issuer;\r\n    this.audience = options.audience;\r\n    this.expiresIn = options.expiresIn as ExpiresIn;\r\n  }\r\n\r\n  sign(payload: object, options?: SignOptions) {\r\n    try {\r\n      const jwtOptions: jwt.SignOptions = {\r\n        algorithm: this.algorithm,\r\n        jwtid: options?.jti ?? randomUUID()\r\n      };\r\n\r\n      if (typeof options?.subject === \"string\") {\r\n        jwtOptions.subject = options.subject;\r\n      }\r\n\r\n      const issuer = options?.issuer ?? this.issuer;\r\n      if (typeof issuer === \"string\") {\r\n        jwtOptions.issuer = issuer;\r\n      }\r\n\r\n      const audience = normalizeAudience(options?.audience ?? this.audience);\r\n      if (audience) jwtOptions.audience = audience;\r\n\r\n      const expires =\r\n        options?.expiresIn !== undefined\r\n          ? (options.expiresIn as ExpiresIn)\r\n          : this.expiresIn;\r\n\r\n      if (expires !== undefined) {\r\n        jwtOptions.expiresIn = expires;\r\n      }\r\n\r\n      return jwt.sign(payload, this.secret, jwtOptions);\r\n    } catch (err: any) {\r\n      logger.error(\"JWT signing failed\", {\r\n        adapter: \"jwt\",\r\n        operation: \"sign\",\r\n        reason: err?.message\r\n      });\r\n      throw new AdapterError(\"JWT sign failed\");\r\n    }\r\n  }\r\n\r\n  verify(token: string, options?: { audience?: string | string[] }) {\r\n    try {\r\n      const verifyOptions: jwt.VerifyOptions = {\r\n        algorithms: [this.algorithm]\r\n      };\r\n\r\n      if (typeof this.issuer === \"string\") {\r\n        verifyOptions.issuer = this.issuer;\r\n      }\r\n\r\n      const audience = normalizeAudience(options?.audience ?? this.audience);\r\n      if (audience) verifyOptions.audience = audience;\r\n\r\n      return jwt.verify(token, this.secret, verifyOptions);\r\n    } catch (err: any) {\r\n      logger.error(\"JWT verification failed\", {\r\n        adapter: \"jwt\",\r\n        operation: \"verify\",\r\n        reason: err?.message\r\n      });\r\n\r\n      if (err?.name === \"TokenExpiredError\") {\r\n        throw new AdapterError(\"JWT token has expired\");\r\n      }\r\n\r\n      if (err?.name === \"JsonWebTokenError\") {\r\n        throw new AdapterError(\"Invalid JWT token\");\r\n      }\r\n\r\n      throw new AdapterError(\"JWT verification failed\");\r\n    }\r\n  }\r\n}\r\n"]}

package/dist/core/HiSecure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HiSecure.d.ts","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":"AAwUA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAiC3D,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE3E,KAAK,gBAAgB,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEpD,qBAAa,QAAQ;IACnB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAyB;IAEhD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,WAAW,CAAS;IAE5B,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,WAAW,CAAC,CAAc;IAElC,OAAO;IAKP,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,QAAQ;IAU3D,OAAO,CAAC,MAAM,CAAC,GAAG;IAOlB,OAAO,CAAC,SAAS;IAgEjB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE;IAO9D,MAAM,CAAC,GAAG;sBACM,MAAM,YAAY,GAAG;sBAMrB,MAAM;;mCAOK,MAAM;;MAO/B;IAGF,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAIxC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG;IAI7B,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM;IAgB9D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;kBA7eV,CAAA;;;iBAGY,CAAC;IA8e5B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;WAKZ,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOjD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5D,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,gBAAgB;IAe5D,OAAO,CAAC,WAAW;CAqBpB"}
+{"version":3,"file":"HiSecure.d.ts","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAiC3D,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE3E,KAAK,gBAAgB,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEpD,qBAAa,QAAQ;IACnB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAyB;IAEhD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,WAAW,CAAS;IAE5B,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,WAAW,CAAC,CAAc;IAElC,OAAO;IAIP,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,QAAQ;IAU3D,OAAO,CAAC,MAAM,CAAC,GAAG;IAOlB,OAAO,CAAC,SAAS;IA6DjB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE;IAM9D,MAAM,CAAC,GAAG;sBACM,MAAM,YAAY,GAAG;sBAMrB,MAAM;;mCAOK,MAAM;;MAO/B;IAEF,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAIxC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG;IAI7B,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM;IAgB9D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;kBA7JO,CAAC;;;iBAID,CAAC;IA6JjC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;WAKZ,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOjD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5D,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,gBAAgB;IAe5D,OAAO,CAAC,WAAW;CAqBpB"}

package/dist/core/HiSecure.js

@@ -1,10 +1,4 @@
 "use strict";
-// import { HiSecureConfig } from "./types/HiSecureConfig.js";
-// import { defaultConfig } from "./config.js";
-// import { LIB_NAME, LIB_VERSION } from "./constants.js";
-// import { deepMerge } from "../utils/deepMerge.js";
-// import { deepFreeze } from "../utils/deepFreeze.js";
-// import { logger } from "../logging";
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -42,7 +36,6 @@ class HiSecure {
         this.initialized = false;
         this.config = config;
     }
-    // ================= INIT (ONLY ONCE) =================
     static init(userConfig) {
         if (HiSecure.instance)
             return HiSecure.instance;
@@ -66,7 +59,6 @@ class HiSecure {
             lib: constants_js_1.LIB_NAME,
             version: constants_js_1.LIB_VERSION
         });
-        // ===== Core Managers =====
         this.hashManager = new HashManager_js_1.HashManager(this.config.hashing, this.config.hashing.primary === "argon2"
             ? new ArgonAdapter_js_1.ArgonAdapter()
             : new BcryptAdapter_js_1.BcryptAdapter(this.config.hashing.saltRounds), this.config.hashing.fallback
@@ -79,7 +71,6 @@ class HiSecure {
         this.sanitizerManager = new SanitizerManager_js_1.SanitizerManager(new SanitizeHtmlAdapter_js_1.SanitizeHtmlAdapter(this.config.sanitizer), new XSSAdapter_js_1.XSSAdapter(this.config.sanitizer));
         this.jsonManager = new JsonManager_js_1.JsonManager();
         this.corsManager = new CorsManager_js_1.CorsManager();
-        // ===== AUTH (OPTIONAL) =====
         if (this.config.auth?.enabled) {
             this.authManager = new AuthManager_js_1.AuthManager({
                 jwtSecret: process.env.JWT_SECRET || this.config.auth.jwtSecret,
@@ -97,14 +88,12 @@ class HiSecure {
             layer: "hisecure-core"
         });
     }
-    // ================= AUTH =================
     static auth(options) {
         const i = HiSecure.get();
         if (!i.authManager)
             throw new Error("Auth not enabled");
         return i.authManager.protect(options);
     }
-    // ================= OTHER UTILS =================
     static validate(schema) {
         return HiSecure.get().validatorManager.validate(schema);
     }
@@ -139,7 +128,6 @@ class HiSecure {
     static verify(value, hash) {
         return HiSecure.get().hashManager.verify(value, hash);
     }
-    // ================= GLOBAL MIDDLEWARE =================
     static middleware(options) {
         const i = HiSecure.get();
         const presets = {
@@ -174,7 +162,6 @@ class HiSecure {
 }
 exports.HiSecure = HiSecure;
 HiSecure.instance = null;
-// ================= JWT =================
 HiSecure.jwt = {
     sign(payload, options) {
         const i = HiSecure.get();

package/dist/core/HiSecure.js.map

@@ -1 +1 @@
-{"version":3,"file":"HiSecure.js","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":";AAAA,8DAA8D;AAC9D,+CAA+C;AAC/C,0DAA0D;AAC1D,qDAAqD;AACrD,uDAAuD;AACvD,uCAAuC;;;;;;AAoUvC,2CAA4C;AAC5C,iDAAuD;AACvD,wDAAkD;AAClD,0DAAoD;AACpD,wCAAoC;AAEpC,WAAW;AACX,iEAA2D;AAC3D,mEAA6D;AAC7D,2EAAqE;AACrE,yEAAmE;AACnE,6DAAuD;AACvD,uFAAiF;AACjF,+EAAyE;AACzE,6DAAuD;AAEvD,WAAW;AACX,+DAAyD;AACzD,yEAAmE;AACnE,yEAAmE;AACnE,yEAAmE;AACnE,+DAAyD;AACzD,+DAAyD;AACzD,+DAAyD;AAEzD,cAAc;AACd,oDAA4B;AAC5B,8CAAsB;AACtB,8DAAsC;AACtC,oEAA8D;AAO9D,MAAa,QAAQ;IAcnB,YAAoB,MAAsB;QAVlC,gBAAW,GAAG,KAAK,CAAC;QAW1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,uDAAuD;IACvD,MAAM,CAAC,IAAI,CAAC,UAAoC;QAC9C,IAAI,QAAQ,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC;QAEhD,MAAM,WAAW,GAAG,IAAA,wBAAS,EAAC,yBAAa,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3C,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,GAAG;QAChB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC3B,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,gBAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC9C,KAAK,EAAE,eAAe;YACtB,GAAG,EAAE,uBAAQ;YACb,OAAO,EAAE,0BAAW;SACrB,CAAC,CAAC;QAEH,4BAA4B;QAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAChC,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ;YACtC,CAAC,CAAC,IAAI,8BAAY,EAAE;YACpB,CAAC,CAAC,IAAI,gCAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EACrD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ;YAC1B,CAAC,CAAC,IAAI,gCAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YACnD,CAAC,CAAC,IAAI,CACT,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CAC1C,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;YACrC,CAAC,CAAC,IAAI,wCAAiB,EAAE;YACzB,CAAC,CAAC,IAAI,sCAAgB,EAAE,EAC1B,IAAI,sCAAgB,EAAE,CACvB,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CAC1C,IAAI,0BAAU,EAAE,EAChB,IAAI,oDAAuB,EAAE,CAC9B,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CAC1C,IAAI,4CAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAC9C,IAAI,0BAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CACtC,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,EAAE,CAAC;QAErC,8BAA8B;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAAC;gBACjC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU;gBAChE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;gBAC3C,cAAc,EACZ,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc;aAClE,CAAC,CAAC;YAEH,gBAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,gBAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAA,0BAAU,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,gBAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;YAChD,KAAK,EAAE,eAAe;SACvB,CAAC,CAAC;IACL,CAAC;IAED,2CAA2C;IAC3C,MAAM,CAAC,IAAI,CAAC,OAAkD;QAC5D,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IA0BD,kDAAkD;IAClD,MAAM,CAAC,QAAQ,CAAC,MAAwB;QACtC,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAa;QAC3B,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAA6C;QAC5D,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG;gBACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC5B,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;aACZ,CAAC;YAEX,OAAO,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAa;QACvB,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAa;QACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAa;QAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE;YAC5D,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,KAAa,EAAE,IAAY;QACvC,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAED,wDAAwD;IACxD,MAAM,CAAC,UAAU,CAAC,OAA0C;QAC1D,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,OAAO,GAA4C;YACvD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;YACvE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;YACzD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;SACxC,CAAC;QAEF,MAAM,YAAY,GAChB,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAEjE,OAAO,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAEO,WAAW,CAAC,OAAsB;QACxC,MAAM,KAAK,GAAU,EAAE,CAAC;QAExB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAEhE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,IAAA,gBAAM,GAAE,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAA,aAAG,GAAE,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAC/B,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,EAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAEnD,IAAI,OAAO,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,SAAS;YACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW;YAClC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAEzC,KAAK,CAAC,IAAI,CAAC,8BAAY,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;;AAnNH,4BAoNC;AAnNgB,iBAAQ,GAAoB,IAAI,AAAxB,CAAyB;AAyGhD,0CAA0C;AACnC,YAAG,GAAG;IACX,IAAI,CAAC,OAAe,EAAE,OAAa;QACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,EAAE;QACN,aAAa,CAAC,OAAe;YAC3B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,CAAC,WAAW;gBAChB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,OAAO,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;KACF;CACF,AArBS,CAqBR","sourcesContent":["// import { HiSecureConfig } from \"./types/HiSecureConfig.js\";\r\n// import { defaultConfig } from \"./config.js\";\r\n// import { LIB_NAME, LIB_VERSION } from \"./constants.js\";\r\n// import { deepMerge } from \"../utils/deepMerge.js\";\r\n// import { deepFreeze } from \"../utils/deepFreeze.js\";\r\n// import { logger } from \"../logging\";\r\n\r\n// // Adapters\r\n// import { ArgonAdapter } from \"../adapters/ArgonAdapter.js\";\r\n// import { BcryptAdapter } from \"../adapters/BcryptAdapter.js\";\r\n// import { RLFlexibleAdapter } from \"../adapters/RLFlexibleAdapter.js\";\r\n// import { ExpressRLAdapter } from \"../adapters/ExpressRLAdapter.js\";\r\n// import { ZodAdapter } from \"../adapters/ZodAdapter.js\";\r\n// import { ExpressValidatorAdapter } from \"../adapters/ExpressValidatorAdapter.js\";\r\n// import { SanitizeHtmlAdapter } from \"../adapters/SanitizeHtmlAdapter.js\";\r\n// import { XSSAdapter } from \"../adapters/XSSAdapter.js\";\r\n\r\n// // Managers\r\n// import { HashManager } from \"../managers/HashManager.js\";\r\n// import { RateLimitManager } from \"../managers/RateLimitManager.js\";\r\n// import { ValidatorManager } from \"../managers/ValidatorManager.js\";\r\n// import { SanitizerManager } from \"../managers/SanitizerManager.js\";\r\n// import { JsonManager } from \"../managers/JsonManager.js\";\r\n// import { CorsManager } from \"../managers/CorsManager.js\";\r\n// import { AuthManager } from \"../managers/AuthManager.js\";\r\n\r\n// // Middlewares\r\n// import helmet from \"helmet\";\r\n// import hpp from \"hpp\";\r\n// import compression from \"compression\";\r\n// import { errorHandler } from \"../middlewares/errorHandler.js\";\r\n\r\n// // Types\r\n// import { SecureOptions, ValidationSchema } from \"./types/SecureOptions.js\";\r\n\r\n// export class HiSecure {\r\n//     private static instance: HiSecure | null = null;\r\n//     private config: HiSecureConfig;\r\n//     private initialized = false;\r\n\r\n//     // Managers\r\n//     public hashManager!: HashManager;\r\n//     public rateLimitManager!: RateLimitManager;\r\n//     public validatorManager!: ValidatorManager;\r\n//     public sanitizerManager!: SanitizerManager;\r\n//     public jsonManager!: JsonManager;\r\n//     public corsManager!: CorsManager;\r\n//     public authManager?: AuthManager;\r\n\r\n//     // Internal adapters\r\n//     private hashingPrimary: any;\r\n//     private hashingFallback: any;\r\n//     private rateLimiterPrimary: any;\r\n//     private rateLimiterFallback: any;\r\n//     private sanitizerPrimary: any;\r\n//     private sanitizerFallback: any;\r\n\r\n//     private constructor(userConfig: Partial<HiSecureConfig> = {}) {\r\n//         this.config = deepMerge(defaultConfig, userConfig);\r\n//     }\r\n\r\n//     // Singleton & Init\r\n\r\n//     static getInstance(config?: Partial<HiSecureConfig>): HiSecure {\r\n//         if (!HiSecure.instance) {\r\n//             logger.info(\"Creating HiSecure singleton\", {\r\n//                 layer: \"hisecure-core\"\r\n//             });\r\n//             HiSecure.instance = new HiSecure(config);\r\n//             HiSecure.instance.init();\r\n//         }\r\n//         return HiSecure.instance;\r\n//     }\r\n\r\n//     static resetInstance(): void {\r\n//         HiSecure.instance = null;\r\n//     }\r\n\r\n//     init(): void {\r\n//         if (this.initialized) {\r\n//             logger.warn(\"Initialization skipped (already initialized)\", {\r\n//                 layer: \"hisecure-core\"\r\n//             });\r\n//             return;\r\n//         }\r\n\r\n//         logger.info(\"Framework initialization started\", {\r\n//             layer: \"hisecure-core\",\r\n//             lib: LIB_NAME,\r\n//             version: LIB_VERSION\r\n//         });\r\n\r\n//         this.setupAdapters();\r\n//         this.setupManagers();\r\n//         this.setupDynamicManagers();\r\n\r\n//         deepFreeze(this.config);\r\n//         this.initialized = true;\r\n\r\n//         logger.info(\"Framework initialized successfully\", {\r\n//             layer: \"hisecure-core\"\r\n//         });\r\n//     }\r\n\r\n//     // Public Fluent API\r\n//     static auth(options?: { required?: boolean; roles?: string[] }) {\r\n//         const instance = this.getInstance();\r\n//         if (!instance.authManager) {\r\n//             throw new Error(\"Auth not enabled. Set auth.enabled=true in config.\");\r\n//         }\r\n//         return instance.authManager.protect(options);\r\n//     }\r\n\r\n//     static validate(schema: ValidationSchema) {\r\n//         return this.getInstance().validatorManager.validate(schema);\r\n//     }\r\n\r\n//     static sanitize(options?: any) {\r\n//         return this.getInstance().sanitizerManager.middleware(options);\r\n//     }\r\n\r\n//     static rateLimit(preset: \"strict\" | \"relaxed\" | \"api\" | object) {\r\n//         const instance = this.getInstance();\r\n\r\n//         if (typeof preset === \"string\") {\r\n//             logger.info(\"Rate limit preset applied\", {\r\n//                 layer: \"hisecure-core\",\r\n//                 preset\r\n//             });\r\n\r\n//             const presets: any = {\r\n//                 strict: { mode: \"strict\" },\r\n//                 relaxed: { mode: \"relaxed\" },\r\n//                 api: { mode: \"api\" }\r\n//             };\r\n//             return instance.rateLimitManager.middleware(presets[preset]);\r\n//         }\r\n\r\n//         return instance.rateLimitManager.middleware({ options: preset });\r\n//     }\r\n\r\n//     static cors(options?: any) {\r\n//         return this.getInstance().corsManager.middleware(options);\r\n//     }\r\n\r\n//     static json(options?: any) {\r\n//         const instance = this.getInstance();\r\n//         return [\r\n//             instance.jsonManager.middleware(options),\r\n//             instance.jsonManager.urlencoded()\r\n//         ];\r\n//     }\r\n\r\n//     // Utilities\r\n\r\n//     static async hash(value: string): Promise<string> {\r\n//         const instance = this.getInstance();\r\n//         const result = await instance.hashManager.hash(value, { allowFallback: true });\r\n//         return result.hash;\r\n//     }\r\n\r\n//     static async verify(value: string, hash: string): Promise<boolean> {\r\n//         return this.getInstance().hashManager.verify(value, hash);\r\n//     }\r\n\r\n//     static jwt = {\r\n//         sign: (payload: object, options?: any) =>\r\n//             HiSecure.getInstance().authManager!.sign(payload, options),\r\n\r\n//         verify: (token: string) =>\r\n//             HiSecure.getInstance().authManager!.verify(token),\r\n\r\n//         google: {\r\n//             verifyIdToken: (idToken: string) =>\r\n//                 HiSecure.getInstance().authManager!.verifyGoogleIdToken(idToken)\r\n//         }\r\n//     };\r\n\r\n//     // Global Middleware - globalLevel\r\n//     static middleware(options?: SecureOptions | \"api\" | \"strict\" | \"public\") {\r\n//         const instance = this.getInstance();\r\n\r\n//         if (typeof options === \"string\") {\r\n//             logger.info(\"Global middleware preset applied\", {\r\n//                 layer: \"hisecure-core\",\r\n//                 preset: options\r\n//             });\r\n\r\n//             const presets: any = {\r\n//                 api: { cors: true, rateLimit: \"relaxed\", sanitize: true },\r\n//                 strict: { cors: true, rateLimit: \"strict\", sanitize: true, auth: true },\r\n//                 public: { cors: true, rateLimit: true, sanitize: false }\r\n//             };\r\n\r\n//             return instance.createMiddlewareChain(presets[options] || {});\r\n//         }\r\n\r\n//         return instance.createMiddlewareChain(options || {});\r\n//     }\r\n\r\n//     // Internal Setup\r\n\r\n//     private setupAdapters() {\r\n//         logger.info(\"Adapters setup started\", {\r\n//             layer: \"hisecure-core\"\r\n//         });\r\n\r\n//         this.hashingPrimary =\r\n//             this.config.hashing.primary === \"argon2\"\r\n//                 ? new ArgonAdapter()\r\n//                 : new BcryptAdapter(this.config.hashing.saltRounds);\r\n\r\n//         this.hashingFallback =\r\n//             this.config.hashing.fallback === \"bcrypt\"\r\n//                 ? new BcryptAdapter(this.config.hashing.saltRounds)\r\n//                 : null;\r\n\r\n//         logger.info(\"Hashing adapters configured\", {\r\n//             layer: \"hisecure-core\",\r\n//             primary: this.config.hashing.primary,\r\n//             fallback: this.config.hashing.fallback ?? null\r\n//         });\r\n\r\n//         this.rateLimiterPrimary = this.config.rateLimiter.useAdaptiveMode\r\n//             ? new RLFlexibleAdapter()\r\n//             : new ExpressRLAdapter();\r\n\r\n//         this.rateLimiterFallback = new ExpressRLAdapter();\r\n\r\n//         logger.info(\"Rate limiter adapters configured\", {\r\n//             layer: \"hisecure-core\",\r\n//             adaptive: this.config.rateLimiter.useAdaptiveMode\r\n//         });\r\n\r\n//         this.sanitizerPrimary = new SanitizeHtmlAdapter(this.config.sanitizer);\r\n//         this.sanitizerFallback = new XSSAdapter(this.config.sanitizer);\r\n\r\n//         logger.info(\"Sanitizer adapters configured\", {\r\n//             layer: \"hisecure-core\",\r\n//             primary: \"sanitize-html\",\r\n//             fallback: \"xss\"\r\n//         });\r\n//     }\r\n\r\n//     private setupManagers() {\r\n//         this.hashManager = new HashManager(\r\n//             this.config.hashing,\r\n//             this.hashingPrimary,\r\n//             this.hashingFallback\r\n//         );\r\n\r\n//         this.rateLimitManager = new RateLimitManager(\r\n//             this.config.rateLimiter,\r\n//             this.rateLimiterPrimary,\r\n//             this.rateLimiterFallback\r\n//         );\r\n\r\n//         this.validatorManager = new ValidatorManager(\r\n//             new ZodAdapter(),\r\n//             new ExpressValidatorAdapter()\r\n//         );\r\n\r\n//         this.sanitizerManager = new SanitizerManager(\r\n//             this.sanitizerPrimary,\r\n//             this.sanitizerFallback\r\n//         );\r\n\r\n//         logger.info(\"Core managers initialized\", {\r\n//             layer: \"hisecure-core\",\r\n//             managers: [\"hash\", \"rate-limit\", \"validator\", \"sanitizer\"]\r\n//         });\r\n//     }\r\n\r\n//     private setupDynamicManagers() {\r\n//         this.jsonManager = new JsonManager();\r\n//         this.corsManager = new CorsManager();\r\n\r\n//         if (this.config.auth.enabled) {\r\n//             this.authManager = new AuthManager({\r\n//                 jwtSecret: process.env.JWT_SECRET || this.config.auth.jwtSecret!,\r\n//                 jwtExpiresIn: this.config.auth.jwtExpiresIn,\r\n//                 googleClientId:\r\n//                     process.env.GOOGLE_CLIENT_ID || this.config.auth.googleClientId\r\n//             });\r\n\r\n//             logger.info(\"Authentication enabled\", {\r\n//                 layer: \"hisecure-core\",\r\n//                 google: !!this.config.auth.googleClientId\r\n//             });\r\n//         } else {\r\n//             logger.info(\"Authentication disabled\", {\r\n//                 layer: \"hisecure-core\"\r\n//             });\r\n//         }\r\n//     }\r\n\r\n//     private createMiddlewareChain(options: SecureOptions): any[] {\r\n//         const chain: any[] = [];\r\n\r\n//         chain.push(this.jsonManager.middleware(this.config.json));\r\n//         chain.push(this.jsonManager.urlencoded(this.config.urlencoded));\r\n\r\n//         if (this.config.enableHelmet) chain.push(helmet());\r\n//         if (this.config.enableHPP) chain.push(hpp());\r\n\r\n//         if (this.config.enableCompression)\r\n//             chain.push(compression(this.config.compression));\r\n\r\n//         if (options.cors) chain.push(this.corsManager.middleware(this.config.cors));\r\n//         if (options.sanitize)\r\n//             chain.push(this.sanitizerManager.middleware());\r\n\r\n//         if (options.rateLimit)\r\n//             chain.push(this.rateLimitManager.middleware({}));\r\n\r\n//         if (options.auth && this.authManager)\r\n//             chain.push(this.authManager.protect());\r\n\r\n//         chain.push(errorHandler);\r\n//         return chain;\r\n//     }\r\n// }\r\n\r\n\r\n\r\n\r\n\r\n\r\nimport { HiSecureConfig } from \"./types/HiSecureConfig.js\";\r\nimport { defaultConfig } from \"./config.js\";\r\nimport { LIB_NAME, LIB_VERSION } from \"./constants.js\";\r\nimport { deepMerge } from \"../utils/deepMerge.js\";\r\nimport { deepFreeze } from \"../utils/deepFreeze.js\";\r\nimport { logger } from \"../logging\";\r\n\r\n// Adapters\r\nimport { ArgonAdapter } from \"../adapters/ArgonAdapter.js\";\r\nimport { BcryptAdapter } from \"../adapters/BcryptAdapter.js\";\r\nimport { RLFlexibleAdapter } from \"../adapters/RLFlexibleAdapter.js\";\r\nimport { ExpressRLAdapter } from \"../adapters/ExpressRLAdapter.js\";\r\nimport { ZodAdapter } from \"../adapters/ZodAdapter.js\";\r\nimport { ExpressValidatorAdapter } from \"../adapters/ExpressValidatorAdapter.js\";\r\nimport { SanitizeHtmlAdapter } from \"../adapters/SanitizeHtmlAdapter.js\";\r\nimport { XSSAdapter } from \"../adapters/XSSAdapter.js\";\r\n\r\n// Managers\r\nimport { HashManager } from \"../managers/HashManager.js\";\r\nimport { RateLimitManager } from \"../managers/RateLimitManager.js\";\r\nimport { ValidatorManager } from \"../managers/ValidatorManager.js\";\r\nimport { SanitizerManager } from \"../managers/SanitizerManager.js\";\r\nimport { JsonManager } from \"../managers/JsonManager.js\";\r\nimport { CorsManager } from \"../managers/CorsManager.js\";\r\nimport { AuthManager } from \"../managers/AuthManager.js\";\r\n\r\n// Middlewares\r\nimport helmet from \"helmet\";\r\nimport hpp from \"hpp\";\r\nimport compression from \"compression\";\r\nimport { errorHandler } from \"../middlewares/errorHandler.js\";\r\n\r\n// Types\r\nimport { SecureOptions, ValidationSchema } from \"./types/SecureOptions.js\";\r\n\r\ntype MiddlewarePreset = \"strict\" | \"api\" | \"public\";\r\n\r\nexport class HiSecure {\r\n  private static instance: HiSecure | null = null;\r\n\r\n  private readonly config: HiSecureConfig;\r\n  private initialized = false;\r\n\r\n  private hashManager!: HashManager;\r\n  private rateLimitManager!: RateLimitManager;\r\n  private validatorManager!: ValidatorManager;\r\n  private sanitizerManager!: SanitizerManager;\r\n  private jsonManager!: JsonManager;\r\n  private corsManager!: CorsManager;\r\n  private authManager?: AuthManager;\r\n\r\n  private constructor(config: HiSecureConfig) {\r\n    this.config = config;\r\n  }\r\n\r\n  // ================= INIT (ONLY ONCE) =================\r\n  static init(userConfig?: Partial<HiSecureConfig>): HiSecure {\r\n    if (HiSecure.instance) return HiSecure.instance;\r\n\r\n    const finalConfig = deepMerge(defaultConfig, userConfig ?? {});\r\n    const instance = new HiSecure(finalConfig);\r\n    HiSecure.instance = instance;\r\n    instance.bootstrap();\r\n    return instance;\r\n  }\r\n\r\n  private static get(): HiSecure {\r\n    if (!HiSecure.instance) {\r\n      throw new Error(\"HiSecure not initialized. Call HiSecure.init() first.\");\r\n    }\r\n    return HiSecure.instance;\r\n  }\r\n\r\n  private bootstrap(): void {\r\n    if (this.initialized) return;\r\n\r\n    logger.info(\"Framework initialization started\", {\r\n      layer: \"hisecure-core\",\r\n      lib: LIB_NAME,\r\n      version: LIB_VERSION\r\n    });\r\n\r\n    // ===== Core Managers =====\r\n    this.hashManager = new HashManager(\r\n      this.config.hashing,\r\n      this.config.hashing.primary === \"argon2\"\r\n        ? new ArgonAdapter()\r\n        : new BcryptAdapter(this.config.hashing.saltRounds),\r\n      this.config.hashing.fallback\r\n        ? new BcryptAdapter(this.config.hashing.saltRounds)\r\n        : null\r\n    );\r\n\r\n    this.rateLimitManager = new RateLimitManager(\r\n      this.config.rateLimiter,\r\n      this.config.rateLimiter.useAdaptiveMode\r\n        ? new RLFlexibleAdapter()\r\n        : new ExpressRLAdapter(),\r\n      new ExpressRLAdapter()\r\n    );\r\n\r\n    this.validatorManager = new ValidatorManager(\r\n      new ZodAdapter(),\r\n      new ExpressValidatorAdapter()\r\n    );\r\n\r\n    this.sanitizerManager = new SanitizerManager(\r\n      new SanitizeHtmlAdapter(this.config.sanitizer),\r\n      new XSSAdapter(this.config.sanitizer)\r\n    );\r\n\r\n    this.jsonManager = new JsonManager();\r\n    this.corsManager = new CorsManager();\r\n\r\n    // ===== AUTH (OPTIONAL) =====\r\n    if (this.config.auth?.enabled) {\r\n      this.authManager = new AuthManager({\r\n        jwtSecret: process.env.JWT_SECRET || this.config.auth.jwtSecret!,\r\n        jwtExpiresIn: this.config.auth.jwtExpiresIn,\r\n        googleClientId:\r\n          process.env.GOOGLE_CLIENT_ID || this.config.auth.googleClientId\r\n      });\r\n\r\n      logger.info(\"Authentication enabled\", { layer: \"hisecure-core\" });\r\n    } else {\r\n      logger.info(\"Authentication disabled\", { layer: \"hisecure-core\" });\r\n    }\r\n\r\n    deepFreeze(this.config);\r\n    this.initialized = true;\r\n\r\n    logger.info(\"Framework initialized successfully\", {\r\n      layer: \"hisecure-core\"\r\n    });\r\n  }\r\n\r\n  // ================= AUTH =================\r\n  static auth(options?: { required?: boolean; roles?: string[] }) {\r\n    const i = HiSecure.get();\r\n    if (!i.authManager) throw new Error(\"Auth not enabled\");\r\n    return i.authManager.protect(options);\r\n  }\r\n\r\n  // ================= JWT =================\r\n  static jwt = {\r\n    sign(payload: object, options?: any) {\r\n      const i = HiSecure.get();\r\n      if (!i.authManager) throw new Error(\"Auth not enabled\");\r\n      return i.authManager.sign(payload, options);\r\n    },\r\n\r\n    verify(token: string) {\r\n      const i = HiSecure.get();\r\n      if (!i.authManager) throw new Error(\"Auth not enabled\");\r\n      return i.authManager.verify(token);\r\n    },\r\n\r\n    google: {\r\n      verifyIdToken(idToken: string) {\r\n        const i = HiSecure.get();\r\n        if (!i.authManager)\r\n          throw new Error(\"Auth not enabled (Google)\");\r\n        return i.authManager.verifyGoogleIdToken(idToken);\r\n      }\r\n    }\r\n  };\r\n\r\n  // ================= OTHER UTILS =================\r\n  static validate(schema: ValidationSchema) {\r\n    return HiSecure.get().validatorManager.validate(schema);\r\n  }\r\n\r\n  static sanitize(options?: any) {\r\n    return HiSecure.get().sanitizerManager.middleware(options);\r\n  }\r\n\r\n  static rateLimit(preset: \"strict\" | \"relaxed\" | \"api\" | object) {\r\n    const i = HiSecure.get();\r\n\r\n    if (typeof preset === \"string\") {\r\n      const presets = {\r\n        strict: { mode: \"strict\" },\r\n        relaxed: { mode: \"relaxed\" },\r\n        api: { mode: \"api\" }\r\n      } as const;\r\n\r\n      return i.rateLimitManager.middleware(presets[preset]);\r\n    }\r\n\r\n    return i.rateLimitManager.middleware({ options: preset });\r\n  }\r\n\r\n  static cors(options?: any) {\r\n    return HiSecure.get().corsManager.middleware(options);\r\n  }\r\n\r\n  static json(options?: any) {\r\n    const i = HiSecure.get();\r\n    return [i.jsonManager.middleware(options), i.jsonManager.urlencoded()];\r\n  }\r\n\r\n  static async hash(value: string): Promise<string> {\r\n    const { hash } = await HiSecure.get().hashManager.hash(value, {\r\n      allowFallback: true\r\n    });\r\n    return hash;\r\n  }\r\n\r\n  static verify(value: string, hash: string): Promise<boolean> {\r\n    return HiSecure.get().hashManager.verify(value, hash);\r\n  }\r\n\r\n  // ================= GLOBAL MIDDLEWARE =================\r\n  static middleware(options?: SecureOptions | MiddlewarePreset) {\r\n    const i = HiSecure.get();\r\n\r\n    const presets: Record<MiddlewarePreset, SecureOptions> = {\r\n      strict: { cors: true, rateLimit: \"strict\", sanitize: true, auth: true },\r\n      api: { cors: true, rateLimit: \"relaxed\", sanitize: true },\r\n      public: { cors: true, rateLimit: true }\r\n    };\r\n\r\n    const finalOptions =\r\n      typeof options === \"string\" ? presets[options] : options ?? {};\r\n\r\n    return i.createChain(finalOptions);\r\n  }\r\n\r\n  private createChain(options: SecureOptions): any[] {\r\n    const chain: any[] = [];\r\n\r\n    chain.push(this.jsonManager.middleware(this.config.json));\r\n    chain.push(this.jsonManager.urlencoded(this.config.urlencoded));\r\n\r\n    if (this.config.enableHelmet) chain.push(helmet());\r\n    if (this.config.enableHPP) chain.push(hpp());\r\n    if (this.config.enableCompression)\r\n      chain.push(compression(this.config.compression));\r\n\r\n    if (options.cors) chain.push(this.corsManager.middleware());\r\n    if (options.sanitize) chain.push(this.sanitizerManager.middleware());\r\n    if (options.rateLimit)\r\n      chain.push(this.rateLimitManager.middleware({}));\r\n    if (options.auth && this.authManager)\r\n      chain.push(this.authManager.protect());\r\n\r\n    chain.push(errorHandler);\r\n    return chain;\r\n  }\r\n}\r\n"]}
+{"version":3,"file":"HiSecure.js","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":";;;;;;AACA,2CAA4C;AAC5C,iDAAuD;AACvD,wDAAkD;AAClD,0DAAoD;AACpD,wCAAoC;AAEpC,WAAW;AACX,iEAA2D;AAC3D,mEAA6D;AAC7D,2EAAqE;AACrE,yEAAmE;AACnE,6DAAuD;AACvD,uFAAiF;AACjF,+EAAyE;AACzE,6DAAuD;AAEvD,WAAW;AACX,+DAAyD;AACzD,yEAAmE;AACnE,yEAAmE;AACnE,yEAAmE;AACnE,+DAAyD;AACzD,+DAAyD;AACzD,+DAAyD;AAEzD,cAAc;AACd,oDAA4B;AAC5B,8CAAsB;AACtB,8DAAsC;AACtC,oEAA8D;AAO9D,MAAa,QAAQ;IAcnB,YAAoB,MAAsB;QAVlC,gBAAW,GAAG,KAAK,CAAC;QAW1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,UAAoC;QAC9C,IAAI,QAAQ,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC;QAEhD,MAAM,WAAW,GAAG,IAAA,wBAAS,EAAC,yBAAa,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3C,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,MAAM,CAAC,GAAG;QAChB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC3B,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,gBAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC9C,KAAK,EAAE,eAAe;YACtB,GAAG,EAAE,uBAAQ;YACb,OAAO,EAAE,0BAAW;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAChC,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ;YACtC,CAAC,CAAC,IAAI,8BAAY,EAAE;YACpB,CAAC,CAAC,IAAI,gCAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EACrD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ;YAC1B,CAAC,CAAC,IAAI,gCAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YACnD,CAAC,CAAC,IAAI,CACT,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CAC1C,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;YACrC,CAAC,CAAC,IAAI,wCAAiB,EAAE;YACzB,CAAC,CAAC,IAAI,sCAAgB,EAAE,EAC1B,IAAI,sCAAgB,EAAE,CACvB,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CAC1C,IAAI,0BAAU,EAAE,EAChB,IAAI,oDAAuB,EAAE,CAC9B,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CAC1C,IAAI,4CAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAC9C,IAAI,0BAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CACtC,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,EAAE,CAAC;QAErC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAAC;gBACjC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAU;gBAChE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;gBAC3C,cAAc,EACZ,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc;aAClE,CAAC,CAAC;YAEH,gBAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,gBAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAA,0BAAU,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,gBAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;YAChD,KAAK,EAAE,eAAe;SACvB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAkD;QAC5D,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAyBD,MAAM,CAAC,QAAQ,CAAC,MAAwB;QACtC,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAa;QAC3B,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAA6C;QAC5D,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG;gBACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC5B,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;aACZ,CAAC;YAEX,OAAO,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAa;QACvB,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAa;QACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAa;QAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE;YAC5D,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,KAAa,EAAE,IAAY;QACvC,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,OAA0C;QAC1D,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QAEzB,MAAM,OAAO,GAA4C;YACvD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;YACvE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;YACzD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;SACxC,CAAC;QAEF,MAAM,YAAY,GAChB,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAEjE,OAAO,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAEO,WAAW,CAAC,OAAsB;QACxC,MAAM,KAAK,GAAU,EAAE,CAAC;QAExB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAEhE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,IAAA,gBAAM,GAAE,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAA,aAAG,GAAE,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAC/B,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,EAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAEnD,IAAI,OAAO,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,SAAS;YACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW;YAClC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAEzC,KAAK,CAAC,IAAI,CAAC,8BAAY,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;;AA5MH,4BA6MC;AA5MgB,iBAAQ,GAAoB,IAAI,AAAxB,CAAyB;AAqGzC,YAAG,GAAG;IACX,IAAI,CAAC,OAAe,EAAE,OAAa;QACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,EAAE;QACN,aAAa,CAAC,OAAe;YAC3B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,CAAC,WAAW;gBAChB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,OAAO,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;KACF;CACF,AArBS,CAqBR","sourcesContent":["import { HiSecureConfig } from \"./types/HiSecureConfig.js\";\r\nimport { defaultConfig } from \"./config.js\";\r\nimport { LIB_NAME, LIB_VERSION } from \"./constants.js\";\r\nimport { deepMerge } from \"../utils/deepMerge.js\";\r\nimport { deepFreeze } from \"../utils/deepFreeze.js\";\r\nimport { logger } from \"../logging\";\r\n\r\n// Adapters\r\nimport { ArgonAdapter } from \"../adapters/ArgonAdapter.js\";\r\nimport { BcryptAdapter } from \"../adapters/BcryptAdapter.js\";\r\nimport { RLFlexibleAdapter } from \"../adapters/RLFlexibleAdapter.js\";\r\nimport { ExpressRLAdapter } from \"../adapters/ExpressRLAdapter.js\";\r\nimport { ZodAdapter } from \"../adapters/ZodAdapter.js\";\r\nimport { ExpressValidatorAdapter } from \"../adapters/ExpressValidatorAdapter.js\";\r\nimport { SanitizeHtmlAdapter } from \"../adapters/SanitizeHtmlAdapter.js\";\r\nimport { XSSAdapter } from \"../adapters/XSSAdapter.js\";\r\n\r\n// Managers\r\nimport { HashManager } from \"../managers/HashManager.js\";\r\nimport { RateLimitManager } from \"../managers/RateLimitManager.js\";\r\nimport { ValidatorManager } from \"../managers/ValidatorManager.js\";\r\nimport { SanitizerManager } from \"../managers/SanitizerManager.js\";\r\nimport { JsonManager } from \"../managers/JsonManager.js\";\r\nimport { CorsManager } from \"../managers/CorsManager.js\";\r\nimport { AuthManager } from \"../managers/AuthManager.js\";\r\n\r\n// Middlewares\r\nimport helmet from \"helmet\";\r\nimport hpp from \"hpp\";\r\nimport compression from \"compression\";\r\nimport { errorHandler } from \"../middlewares/errorHandler.js\";\r\n\r\n// Types\r\nimport { SecureOptions, ValidationSchema } from \"./types/SecureOptions.js\";\r\n\r\ntype MiddlewarePreset = \"strict\" | \"api\" | \"public\";\r\n\r\nexport class HiSecure {\r\n  private static instance: HiSecure | null = null;\r\n\r\n  private readonly config: HiSecureConfig;\r\n  private initialized = false;\r\n\r\n  private hashManager!: HashManager;\r\n  private rateLimitManager!: RateLimitManager;\r\n  private validatorManager!: ValidatorManager;\r\n  private sanitizerManager!: SanitizerManager;\r\n  private jsonManager!: JsonManager;\r\n  private corsManager!: CorsManager;\r\n  private authManager?: AuthManager;\r\n\r\n  private constructor(config: HiSecureConfig) {\r\n    this.config = config;\r\n  }\r\n\r\n  static init(userConfig?: Partial<HiSecureConfig>): HiSecure {\r\n    if (HiSecure.instance) return HiSecure.instance;\r\n\r\n    const finalConfig = deepMerge(defaultConfig, userConfig ?? {});\r\n    const instance = new HiSecure(finalConfig);\r\n    HiSecure.instance = instance;\r\n    instance.bootstrap();\r\n    return instance;\r\n  }\r\n\r\n  private static get(): HiSecure {\r\n    if (!HiSecure.instance) {\r\n      throw new Error(\"HiSecure not initialized. Call HiSecure.init() first.\");\r\n    }\r\n    return HiSecure.instance;\r\n  }\r\n\r\n  private bootstrap(): void {\r\n    if (this.initialized) return;\r\n\r\n    logger.info(\"Framework initialization started\", {\r\n      layer: \"hisecure-core\",\r\n      lib: LIB_NAME,\r\n      version: LIB_VERSION\r\n    });\r\n\r\n    this.hashManager = new HashManager(\r\n      this.config.hashing,\r\n      this.config.hashing.primary === \"argon2\"\r\n        ? new ArgonAdapter()\r\n        : new BcryptAdapter(this.config.hashing.saltRounds),\r\n      this.config.hashing.fallback\r\n        ? new BcryptAdapter(this.config.hashing.saltRounds)\r\n        : null\r\n    );\r\n\r\n    this.rateLimitManager = new RateLimitManager(\r\n      this.config.rateLimiter,\r\n      this.config.rateLimiter.useAdaptiveMode\r\n        ? new RLFlexibleAdapter()\r\n        : new ExpressRLAdapter(),\r\n      new ExpressRLAdapter()\r\n    );\r\n\r\n    this.validatorManager = new ValidatorManager(\r\n      new ZodAdapter(),\r\n      new ExpressValidatorAdapter()\r\n    );\r\n\r\n    this.sanitizerManager = new SanitizerManager(\r\n      new SanitizeHtmlAdapter(this.config.sanitizer),\r\n      new XSSAdapter(this.config.sanitizer)\r\n    );\r\n\r\n    this.jsonManager = new JsonManager();\r\n    this.corsManager = new CorsManager();\r\n\r\n    if (this.config.auth?.enabled) {\r\n      this.authManager = new AuthManager({\r\n        jwtSecret: process.env.JWT_SECRET || this.config.auth.jwtSecret!,\r\n        jwtExpiresIn: this.config.auth.jwtExpiresIn,\r\n        googleClientId:\r\n          process.env.GOOGLE_CLIENT_ID || this.config.auth.googleClientId\r\n      });\r\n\r\n      logger.info(\"Authentication enabled\", { layer: \"hisecure-core\" });\r\n    } else {\r\n      logger.info(\"Authentication disabled\", { layer: \"hisecure-core\" });\r\n    }\r\n\r\n    deepFreeze(this.config);\r\n    this.initialized = true;\r\n\r\n    logger.info(\"Framework initialized successfully\", {\r\n      layer: \"hisecure-core\"\r\n    });\r\n  }\r\n\r\n  static auth(options?: { required?: boolean; roles?: string[] }) {\r\n    const i = HiSecure.get();\r\n    if (!i.authManager) throw new Error(\"Auth not enabled\");\r\n    return i.authManager.protect(options);\r\n  }\r\n\r\n  static jwt = {\r\n    sign(payload: object, options?: any) {\r\n      const i = HiSecure.get();\r\n      if (!i.authManager) throw new Error(\"Auth not enabled\");\r\n      return i.authManager.sign(payload, options);\r\n    },\r\n\r\n    verify(token: string) {\r\n      const i = HiSecure.get();\r\n      if (!i.authManager) throw new Error(\"Auth not enabled\");\r\n      return i.authManager.verify(token);\r\n    },\r\n\r\n    google: {\r\n      verifyIdToken(idToken: string) {\r\n        const i = HiSecure.get();\r\n        if (!i.authManager)\r\n          throw new Error(\"Auth not enabled (Google)\");\r\n        return i.authManager.verifyGoogleIdToken(idToken);\r\n      }\r\n    }\r\n  };\r\n\r\n  static validate(schema: ValidationSchema) {\r\n    return HiSecure.get().validatorManager.validate(schema);\r\n  }\r\n\r\n  static sanitize(options?: any) {\r\n    return HiSecure.get().sanitizerManager.middleware(options);\r\n  }\r\n\r\n  static rateLimit(preset: \"strict\" | \"relaxed\" | \"api\" | object) {\r\n    const i = HiSecure.get();\r\n\r\n    if (typeof preset === \"string\") {\r\n      const presets = {\r\n        strict: { mode: \"strict\" },\r\n        relaxed: { mode: \"relaxed\" },\r\n        api: { mode: \"api\" }\r\n      } as const;\r\n\r\n      return i.rateLimitManager.middleware(presets[preset]);\r\n    }\r\n\r\n    return i.rateLimitManager.middleware({ options: preset });\r\n  }\r\n\r\n  static cors(options?: any) {\r\n    return HiSecure.get().corsManager.middleware(options);\r\n  }\r\n\r\n  static json(options?: any) {\r\n    const i = HiSecure.get();\r\n    return [i.jsonManager.middleware(options), i.jsonManager.urlencoded()];\r\n  }\r\n\r\n  static async hash(value: string): Promise<string> {\r\n    const { hash } = await HiSecure.get().hashManager.hash(value, {\r\n      allowFallback: true\r\n    });\r\n    return hash;\r\n  }\r\n\r\n  static verify(value: string, hash: string): Promise<boolean> {\r\n    return HiSecure.get().hashManager.verify(value, hash);\r\n  }\r\n\r\n  static middleware(options?: SecureOptions | MiddlewarePreset) {\r\n    const i = HiSecure.get();\r\n\r\n    const presets: Record<MiddlewarePreset, SecureOptions> = {\r\n      strict: { cors: true, rateLimit: \"strict\", sanitize: true, auth: true },\r\n      api: { cors: true, rateLimit: \"relaxed\", sanitize: true },\r\n      public: { cors: true, rateLimit: true }\r\n    };\r\n\r\n    const finalOptions =\r\n      typeof options === \"string\" ? presets[options] : options ?? {};\r\n\r\n    return i.createChain(finalOptions);\r\n  }\r\n\r\n  private createChain(options: SecureOptions): any[] {\r\n    const chain: any[] = [];\r\n\r\n    chain.push(this.jsonManager.middleware(this.config.json));\r\n    chain.push(this.jsonManager.urlencoded(this.config.urlencoded));\r\n\r\n    if (this.config.enableHelmet) chain.push(helmet());\r\n    if (this.config.enableHPP) chain.push(hpp());\r\n    if (this.config.enableCompression)\r\n      chain.push(compression(this.config.compression));\r\n\r\n    if (options.cors) chain.push(this.corsManager.middleware());\r\n    if (options.sanitize) chain.push(this.sanitizerManager.middleware());\r\n    if (options.rateLimit)\r\n      chain.push(this.rateLimitManager.middleware({}));\r\n    if (options.auth && this.authManager)\r\n      chain.push(this.authManager.protect());\r\n\r\n    chain.push(errorHandler);\r\n    return chain;\r\n  }\r\n}\r\n"]}

package/dist/core/useSecure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useSecure.d.ts","sourceRoot":"","sources":["../../src/core/useSecure.ts"],"names":[],"mappings":"AAoDA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD;;GAEG;AACH,wBAAgB,SAAS,CACvB,OAAO,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,SAItD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,SAsClD"}
+{"version":3,"file":"useSecure.d.ts","sourceRoot":"","sources":["../../src/core/useSecure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD;;GAEG;AACH,wBAAgB,SAAS,CACvB,OAAO,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,SAItD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,SAsClD"}

package/dist/core/useSecure.js

@@ -1,45 +1,7 @@
 "use strict";
-// import { HiSecure } from "./HiSecure.js";
-// import { SecureOptions } from "./types/SecureOptions.js";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.useSecure = useSecure;
 exports.secureRoute = secureRoute;
-// /**
-//  * @deprecated Use HiSecure.middleware() or fluent API instead
-//  */
-// export function useSecure(options?: SecureOptions | "api" | "strict" | "public") {
-//     console.warn("useSecure() is deprecated. Use HiSecure.middleware() or fluent API methods.");
-//     return HiSecure.middleware(options);
-// }
-// //  Legacy support - route-level security
-// export function secureRoute(options?: SecureOptions) {
-//     const chain: any[] = [];
-//     if (options?.cors) {
-//         chain.push(HiSecure.cors(
-//             typeof options.cors === 'object' ? options.cors : undefined
-//         ));
-//     }
-//     if (options?.rateLimit) {
-//         chain.push(HiSecure.rateLimit(
-//             typeof options.rateLimit === 'object' ? options.rateLimit : 
-//             options.rateLimit === "strict" ? "strict" : "relaxed"
-//         ));
-//     }
-//     if (options?.sanitize) {
-//         chain.push(HiSecure.sanitize(
-//             typeof options.sanitize === 'object' ? options.sanitize : undefined
-//         ));
-//     }
-//     if (options?.validate) {
-//         chain.push(HiSecure.validate(options.validate));
-//     }
-//     if (options?.auth) {
-//         chain.push(HiSecure.auth(
-//             typeof options.auth === 'object' ? options.auth : undefined
-//         ));
-//     }
-//     return chain;
-// }
 const HiSecure_js_1 = require("./HiSecure.js");
 /**
  * @deprecated Use HiSecure.middleware()

package/dist/core/useSecure.js.map

@@ -1 +1 @@
-{"version":3,"file":"useSecure.js","sourceRoot":"","sources":["../../src/core/useSecure.ts"],"names":[],"mappings":";AAAA,4CAA4C;AAC5C,4DAA4D;;AAwD5D,8BAKC;AAKD,kCAsCC;AAtGD,MAAM;AACN,iEAAiE;AACjE,MAAM;AAEN,qFAAqF;AACrF,mGAAmG;AACnG,2CAA2C;AAC3C,IAAI;AAGJ,4CAA4C;AAE5C,yDAAyD;AACzD,+BAA+B;AAE/B,2BAA2B;AAC3B,oCAAoC;AACpC,0EAA0E;AAC1E,cAAc;AACd,QAAQ;AAER,gCAAgC;AAChC,yCAAyC;AACzC,2EAA2E;AAC3E,oEAAoE;AACpE,cAAc;AACd,QAAQ;AAER,+BAA+B;AAC/B,wCAAwC;AACxC,kFAAkF;AAClF,cAAc;AACd,QAAQ;AAER,+BAA+B;AAC/B,2DAA2D;AAC3D,QAAQ;AAER,2BAA2B;AAC3B,oCAAoC;AACpC,0EAA0E;AAC1E,cAAc;AACd,QAAQ;AACR,oBAAoB;AACpB,IAAI;AAIJ,+CAAyC;AAGzC;;GAEG;AACH,SAAgB,SAAS,CACvB,OAAqD;IAErD,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC9E,OAAO,sBAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,OAAuB;IACjD,MAAM,KAAK,GAAU,EAAE,CAAC;IAExB,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CACR,sBAAQ,CAAC,SAAS,CAChB,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;YACnC,CAAC,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ;gBAChC,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,SAAS,CACd,CACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CACR,sBAAQ,CAAC,IAAI,CACX,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAC5D,CACF,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["// import { HiSecure } from \"./HiSecure.js\";\r\n// import { SecureOptions } from \"./types/SecureOptions.js\";\r\n\r\n// /**\r\n//  * @deprecated Use HiSecure.middleware() or fluent API instead\r\n//  */\r\n\r\n// export function useSecure(options?: SecureOptions | \"api\" | \"strict\" | \"public\") {\r\n//     console.warn(\"useSecure() is deprecated. Use HiSecure.middleware() or fluent API methods.\");\r\n//     return HiSecure.middleware(options);\r\n// }\r\n\r\n\r\n// //  Legacy support - route-level security\r\n\r\n// export function secureRoute(options?: SecureOptions) {\r\n//     const chain: any[] = [];\r\n    \r\n//     if (options?.cors) {\r\n//         chain.push(HiSecure.cors(\r\n//             typeof options.cors === 'object' ? options.cors : undefined\r\n//         ));\r\n//     }\r\n    \r\n//     if (options?.rateLimit) {\r\n//         chain.push(HiSecure.rateLimit(\r\n//             typeof options.rateLimit === 'object' ? options.rateLimit : \r\n//             options.rateLimit === \"strict\" ? \"strict\" : \"relaxed\"\r\n//         ));\r\n//     }\r\n    \r\n//     if (options?.sanitize) {\r\n//         chain.push(HiSecure.sanitize(\r\n//             typeof options.sanitize === 'object' ? options.sanitize : undefined\r\n//         ));\r\n//     }\r\n    \r\n//     if (options?.validate) {\r\n//         chain.push(HiSecure.validate(options.validate));\r\n//     }\r\n    \r\n//     if (options?.auth) {\r\n//         chain.push(HiSecure.auth(\r\n//             typeof options.auth === 'object' ? options.auth : undefined\r\n//         ));\r\n//     }\r\n//     return chain;\r\n// }\r\n\r\n\r\n\r\nimport { HiSecure } from \"./HiSecure.js\";\r\nimport { SecureOptions } from \"./types/SecureOptions.js\";\r\n\r\n/**\r\n * @deprecated Use HiSecure.middleware()\r\n */\r\nexport function useSecure(\r\n  options?: SecureOptions | \"api\" | \"strict\" | \"public\"\r\n) {\r\n  console.warn(\"useSecure() is deprecated. Use HiSecure.middleware() instead.\");\r\n  return HiSecure.middleware(options);\r\n}\r\n\r\n/**\r\n * Legacy route-level security\r\n */\r\nexport function secureRoute(options?: SecureOptions) {\r\n  const chain: any[] = [];\r\n\r\n  if (!options) return chain;\r\n\r\n  if (options.cors) {\r\n    chain.push(HiSecure.cors());\r\n  }\r\n\r\n  if (options.rateLimit) {\r\n    chain.push(\r\n      HiSecure.rateLimit(\r\n        typeof options.rateLimit === \"object\"\r\n          ? options.rateLimit\r\n          : options.rateLimit === \"strict\"\r\n          ? \"strict\"\r\n          : \"relaxed\"\r\n      )\r\n    );\r\n  }\r\n\r\n  if (options.sanitize) {\r\n    chain.push(HiSecure.sanitize());\r\n  }\r\n\r\n  if (options.validate) {\r\n    chain.push(HiSecure.validate(options.validate));\r\n  }\r\n\r\n  if (options.auth) {\r\n    chain.push(\r\n      HiSecure.auth(\r\n        typeof options.auth === \"object\" ? options.auth : undefined\r\n      )\r\n    );\r\n  }\r\n\r\n  return chain;\r\n}\r\n"]}
+{"version":3,"file":"useSecure.js","sourceRoot":"","sources":["../../src/core/useSecure.ts"],"names":[],"mappings":";;AAMA,8BAKC;AAKD,kCAsCC;AAtDD,+CAAyC;AAGzC;;GAEG;AACH,SAAgB,SAAS,CACvB,OAAqD;IAErD,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC9E,OAAO,sBAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,OAAuB;IACjD,MAAM,KAAK,GAAU,EAAE,CAAC;IAExB,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CACR,sBAAQ,CAAC,SAAS,CAChB,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;YACnC,CAAC,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ;gBAChC,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,SAAS,CACd,CACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CACR,sBAAQ,CAAC,IAAI,CACX,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAC5D,CACF,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { HiSecure } from \"./HiSecure.js\";\r\nimport { SecureOptions } from \"./types/SecureOptions.js\";\r\n\r\n/**\r\n * @deprecated Use HiSecure.middleware()\r\n */\r\nexport function useSecure(\r\n  options?: SecureOptions | \"api\" | \"strict\" | \"public\"\r\n) {\r\n  console.warn(\"useSecure() is deprecated. Use HiSecure.middleware() instead.\");\r\n  return HiSecure.middleware(options);\r\n}\r\n\r\n/**\r\n * Legacy route-level security\r\n */\r\nexport function secureRoute(options?: SecureOptions) {\r\n  const chain: any[] = [];\r\n\r\n  if (!options) return chain;\r\n\r\n  if (options.cors) {\r\n    chain.push(HiSecure.cors());\r\n  }\r\n\r\n  if (options.rateLimit) {\r\n    chain.push(\r\n      HiSecure.rateLimit(\r\n        typeof options.rateLimit === \"object\"\r\n          ? options.rateLimit\r\n          : options.rateLimit === \"strict\"\r\n          ? \"strict\"\r\n          : \"relaxed\"\r\n      )\r\n    );\r\n  }\r\n\r\n  if (options.sanitize) {\r\n    chain.push(HiSecure.sanitize());\r\n  }\r\n\r\n  if (options.validate) {\r\n    chain.push(HiSecure.validate(options.validate));\r\n  }\r\n\r\n  if (options.auth) {\r\n    chain.push(\r\n      HiSecure.auth(\r\n        typeof options.auth === \"object\" ? options.auth : undefined\r\n      )\r\n    );\r\n  }\r\n\r\n  return chain;\r\n}\r\n"]}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAG/D,OAAO,EACL,QAAQ,EACR,SAAS,EACT,WAAW,EACZ,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAG/D,OAAO,EACL,QAAQ,EACR,SAAS,EACT,WAAW,EACZ,CAAC"}

package/dist/index.js

@@ -1,18 +1,6 @@
 "use strict";
-// import { HiSecure } from "./core/HiSecure.js";
-// import { useSecure, secureRoute } from "./core/useSecure.js";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.secureRoute = exports.useSecure = exports.HiSecure = exports.header = exports.param = exports.query = exports.body = exports.z = void 0;
-// export { z } from "zod";
-// export { body, query, param, header } from "express-validator";
-// const hiSecure = HiSecure.getInstance();
-// export { 
-//     HiSecure,        
-//     hiSecure,        
-//     useSecure,       
-//     secureRoute      
-// };
-// export default hiSecure;
 const HiSecure_js_1 = require("./core/HiSecure.js");
 Object.defineProperty(exports, "HiSecure", { enumerable: true, get: function () { return HiSecure_js_1.HiSecure; } });
 const useSecure_js_1 = require("./core/useSecure.js");

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,iDAAiD;AACjD,gEAAgE;;;AAGhE,2BAA2B;AAC3B,kEAAkE;AAElE,2CAA2C;AAE3C,YAAY;AACZ,wBAAwB;AACxB,wBAAwB;AACxB,wBAAwB;AACxB,wBAAwB;AACxB,KAAK;AAEL,2BAA2B;AAK3B,oDAA8C;AAQ5C,yFARO,sBAAQ,OAQP;AAPV,sDAA6D;AAQ3D,0FARO,wBAAS,OAQP;AACT,4FATkB,0BAAW,OASlB;AAPb,2BAAwB;AAAf,wFAAA,CAAC,OAAA;AACV,uDAA+D;AAAtD,yGAAA,IAAI,OAAA;AAAE,0GAAA,KAAK,OAAA;AAAE,0GAAA,KAAK,OAAA;AAAE,2GAAA,MAAM,OAAA","sourcesContent":["// import { HiSecure } from \"./core/HiSecure.js\";\r\n// import { useSecure, secureRoute } from \"./core/useSecure.js\";\r\n\r\n\r\n// export { z } from \"zod\";\r\n// export { body, query, param, header } from \"express-validator\";\r\n\r\n// const hiSecure = HiSecure.getInstance();\r\n\r\n// export { \r\n//     HiSecure,        \r\n//     hiSecure,        \r\n//     useSecure,       \r\n//     secureRoute      \r\n// };\r\n\r\n// export default hiSecure;\r\n\r\n\r\n\r\n\r\nimport { HiSecure } from \"./core/HiSecure.js\";\r\nimport { useSecure, secureRoute } from \"./core/useSecure.js\";\r\n\r\nexport { z } from \"zod\";\r\nexport { body, query, param, header } from \"express-validator\";\r\n\r\n\r\nexport {\r\n  HiSecure,\r\n  useSecure,\r\n  secureRoute\r\n};\r\n\r\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,oDAA8C;AAQ5C,yFARO,sBAAQ,OAQP;AAPV,sDAA6D;AAQ3D,0FARO,wBAAS,OAQP;AACT,4FATkB,0BAAW,OASlB;AAPb,2BAAwB;AAAf,wFAAA,CAAC,OAAA;AACV,uDAA+D;AAAtD,yGAAA,IAAI,OAAA;AAAE,0GAAA,KAAK,OAAA;AAAE,0GAAA,KAAK,OAAA;AAAE,2GAAA,MAAM,OAAA","sourcesContent":["import { HiSecure } from \"./core/HiSecure.js\";\r\nimport { useSecure, secureRoute } from \"./core/useSecure.js\";\r\n\r\nexport { z } from \"zod\";\r\nexport { body, query, param, header } from \"express-validator\";\r\n\r\n\r\nexport {\r\n  HiSecure,\r\n  useSecure,\r\n  secureRoute\r\n};\r\n\r\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "hi-secure",
-    "version": "1.0.33",
+    "version": "1.0.35",
     "description": "Unified security layer for Express.js: authentication, validation, sanitization, rate limiting and CORS",
     "license": "MIT",
     "main": "dist/index.js",

package/src/adapters/JWTAdapter.ts

@@ -1,118 +1,9 @@
-// import jwt from "jsonwebtoken";
-// import { randomUUID } from "crypto";
-// import { AdapterError } from "../core/errors/AdapterError";
-// import { logger } from "../logging";
-
-// export interface JWTAdapterOptions {
-//     secret: string;
-//     expiresIn?: string | number;
-//     algorithm?: jwt.Algorithm;
-//     issuer?: string;
-//     audience?: string | string[];
-// }
-
-// export interface SignOptions {
-//     expiresIn?: string | number;
-//     jti?: string;
-//     subject?: string;
-//     issuer?: string;
-//     audience?: string | string[];
-// }
-
-// export class JWTAdapter {
-//     private secret: string;
-//     private expiresIn?: string | number;
-//     private algorithm: jwt.Algorithm;
-//     private issuer?: string;
-//     private audience?: string | string[];
-
-//     constructor(options: JWTAdapterOptions) {
-//         if (!options.secret) {
-//             throw new AdapterError("JWT secret is required");
-//         }
-
-//         if (options.secret.length < 32) {
-//             logger.warn("Weak JWT secret detected", {
-//                 adapter: "jwt",
-//                 operation: "init",
-//                 secretLength: options.secret.length
-//             });
-//         }
-
-//         this.secret = options.secret;
-//         this.expiresIn = options.expiresIn;
-//         this.algorithm = options.algorithm || "HS256";
-//         this.issuer = options.issuer;
-//         this.audience = options.audience;
-//     }
-
-//     sign(payload: object, options?: SignOptions) {
-//         try {
-//             const jwtOptions: jwt.SignOptions = {
-//                 algorithm: this.algorithm,
-//                 issuer: options?.issuer || this.issuer,
-//                 audience: options?.audience || this.audience,
-//                 jwtid: options?.jti || randomUUID(),
-//                 subject: options?.subject
-//             };
-
-//             if (options?.expiresIn !== undefined) {
-//                 jwtOptions.expiresIn = options.expiresIn as any;
-//             } else if (this.expiresIn !== undefined) {
-//                 jwtOptions.expiresIn = this.expiresIn as any;
-//             }
-
-//             return jwt.sign(payload, this.secret, jwtOptions);
-
-//         } catch (err: any) {
-//             logger.error("JWT signing failed", {
-//                 adapter: "jwt",
-//                 operation: "sign",
-//                 reason: err?.message
-//             });
-
-//             throw new AdapterError("JWT sign failed");
-//         }
-//     }
-
-//     verify(token: string, options?: { audience?: string | string[] }) {
-//         try {
-//             const verifyOptions: jwt.VerifyOptions = {
-//                 algorithms: [this.algorithm],
-//                 issuer: this.issuer,
-//                 audience: (options?.audience || this.audience) as string
-//             };
-
-//             return jwt.verify(token, this.secret, verifyOptions);
-
-//         } catch (err: any) {
-//             logger.error("JWT verification failed", {
-//                 adapter: "jwt",
-//                 operation: "verify",
-//                 reason: err?.message
-//             });
-
-//             if (err?.name === "TokenExpiredError") {
-//                 throw new AdapterError("JWT token has expired");
-//             }
-
-//             if (err?.name === "JsonWebTokenError") {
-//                 throw new AdapterError("Invalid JWT token");
-//             }
-
-//             throw new AdapterError("JWT verification failed");
-//         }
-//     }
-// }
-
-
-
 import jwt, { SignOptions as JwtSignOptions } from "jsonwebtoken";
 import { randomUUID } from "crypto";
 import { AdapterError } from "../core/errors/AdapterError";
 import { logger } from "../logging";
 
-type ExpiresIn = JwtSignOptions["expiresIn"]; // ✅ important
+type ExpiresIn = JwtSignOptions["expiresIn"];
 
 export interface JWTAdapterOptions {
   secret: string;
@@ -165,17 +56,21 @@ export class JWTAdapter {
     this.expiresIn = options.expiresIn as ExpiresIn;
   }
 
-  // ================= SIGN =================
   sign(payload: object, options?: SignOptions) {
     try {
       const jwtOptions: jwt.SignOptions = {
         algorithm: this.algorithm,
-        jwtid: options?.jti ?? randomUUID(),
-        subject: options?.subject
+        jwtid: options?.jti ?? randomUUID()
       };
 
+      if (typeof options?.subject === "string") {
+        jwtOptions.subject = options.subject;
+      }
+
       const issuer = options?.issuer ?? this.issuer;
-      if (issuer) jwtOptions.issuer = issuer;
+      if (typeof issuer === "string") {
+        jwtOptions.issuer = issuer;
+      }
 
       const audience = normalizeAudience(options?.audience ?? this.audience);
       if (audience) jwtOptions.audience = audience;
@@ -200,14 +95,15 @@ export class JWTAdapter {
     }
   }
 
-  // ================= VERIFY =================
   verify(token: string, options?: { audience?: string | string[] }) {
     try {
       const verifyOptions: jwt.VerifyOptions = {
         algorithms: [this.algorithm]
       };
 
-      if (this.issuer) verifyOptions.issuer = this.issuer;
+      if (typeof this.issuer === "string") {
+        verifyOptions.issuer = this.issuer;
+      }
 
       const audience = normalizeAudience(options?.audience ?? this.audience);
       if (audience) verifyOptions.audience = audience;

package/src/core/HiSecure.ts

@@ -1,331 +1,3 @@
-// import { HiSecureConfig } from "./types/HiSecureConfig.js";
-// import { defaultConfig } from "./config.js";
-// import { LIB_NAME, LIB_VERSION } from "./constants.js";
-// import { deepMerge } from "../utils/deepMerge.js";
-// import { deepFreeze } from "../utils/deepFreeze.js";
-// import { logger } from "../logging";
-
-// // Adapters
-// import { ArgonAdapter } from "../adapters/ArgonAdapter.js";
-// import { BcryptAdapter } from "../adapters/BcryptAdapter.js";
-// import { RLFlexibleAdapter } from "../adapters/RLFlexibleAdapter.js";
-// import { ExpressRLAdapter } from "../adapters/ExpressRLAdapter.js";
-// import { ZodAdapter } from "../adapters/ZodAdapter.js";
-// import { ExpressValidatorAdapter } from "../adapters/ExpressValidatorAdapter.js";
-// import { SanitizeHtmlAdapter } from "../adapters/SanitizeHtmlAdapter.js";
-// import { XSSAdapter } from "../adapters/XSSAdapter.js";
-
-// // Managers
-// import { HashManager } from "../managers/HashManager.js";
-// import { RateLimitManager } from "../managers/RateLimitManager.js";
-// import { ValidatorManager } from "../managers/ValidatorManager.js";
-// import { SanitizerManager } from "../managers/SanitizerManager.js";
-// import { JsonManager } from "../managers/JsonManager.js";
-// import { CorsManager } from "../managers/CorsManager.js";
-// import { AuthManager } from "../managers/AuthManager.js";
-
-// // Middlewares
-// import helmet from "helmet";
-// import hpp from "hpp";
-// import compression from "compression";
-// import { errorHandler } from "../middlewares/errorHandler.js";
-
-// // Types
-// import { SecureOptions, ValidationSchema } from "./types/SecureOptions.js";
-
-// export class HiSecure {
-//     private static instance: HiSecure | null = null;
-//     private config: HiSecureConfig;
-//     private initialized = false;
-
-//     // Managers
-//     public hashManager!: HashManager;
-//     public rateLimitManager!: RateLimitManager;
-//     public validatorManager!: ValidatorManager;
-//     public sanitizerManager!: SanitizerManager;
-//     public jsonManager!: JsonManager;
-//     public corsManager!: CorsManager;
-//     public authManager?: AuthManager;
-
-//     // Internal adapters
-//     private hashingPrimary: any;
-//     private hashingFallback: any;
-//     private rateLimiterPrimary: any;
-//     private rateLimiterFallback: any;
-//     private sanitizerPrimary: any;
-//     private sanitizerFallback: any;
-
-//     private constructor(userConfig: Partial<HiSecureConfig> = {}) {
-//         this.config = deepMerge(defaultConfig, userConfig);
-//     }
-
-//     // Singleton & Init
-
-//     static getInstance(config?: Partial<HiSecureConfig>): HiSecure {
-//         if (!HiSecure.instance) {
-//             logger.info("Creating HiSecure singleton", {
-//                 layer: "hisecure-core"
-//             });
-//             HiSecure.instance = new HiSecure(config);
-//             HiSecure.instance.init();
-//         }
-//         return HiSecure.instance;
-//     }
-
-//     static resetInstance(): void {
-//         HiSecure.instance = null;
-//     }
-
-//     init(): void {
-//         if (this.initialized) {
-//             logger.warn("Initialization skipped (already initialized)", {
-//                 layer: "hisecure-core"
-//             });
-//             return;
-//         }
-
-//         logger.info("Framework initialization started", {
-//             layer: "hisecure-core",
-//             lib: LIB_NAME,
-//             version: LIB_VERSION
-//         });
-
-//         this.setupAdapters();
-//         this.setupManagers();
-//         this.setupDynamicManagers();
-
-//         deepFreeze(this.config);
-//         this.initialized = true;
-
-//         logger.info("Framework initialized successfully", {
-//             layer: "hisecure-core"
-//         });
-//     }
-
-//     // Public Fluent API
-//     static auth(options?: { required?: boolean; roles?: string[] }) {
-//         const instance = this.getInstance();
-//         if (!instance.authManager) {
-//             throw new Error("Auth not enabled. Set auth.enabled=true in config.");
-//         }
-//         return instance.authManager.protect(options);
-//     }
-
-//     static validate(schema: ValidationSchema) {
-//         return this.getInstance().validatorManager.validate(schema);
-//     }
-
-//     static sanitize(options?: any) {
-//         return this.getInstance().sanitizerManager.middleware(options);
-//     }
-
-//     static rateLimit(preset: "strict" | "relaxed" | "api" | object) {
-//         const instance = this.getInstance();
-
-//         if (typeof preset === "string") {
-//             logger.info("Rate limit preset applied", {
-//                 layer: "hisecure-core",
-//                 preset
-//             });
-
-//             const presets: any = {
-//                 strict: { mode: "strict" },
-//                 relaxed: { mode: "relaxed" },
-//                 api: { mode: "api" }
-//             };
-//             return instance.rateLimitManager.middleware(presets[preset]);
-//         }
-
-//         return instance.rateLimitManager.middleware({ options: preset });
-//     }
-
-//     static cors(options?: any) {
-//         return this.getInstance().corsManager.middleware(options);
-//     }
-
-//     static json(options?: any) {
-//         const instance = this.getInstance();
-//         return [
-//             instance.jsonManager.middleware(options),
-//             instance.jsonManager.urlencoded()
-//         ];
-//     }
-
-//     // Utilities
-
-//     static async hash(value: string): Promise<string> {
-//         const instance = this.getInstance();
-//         const result = await instance.hashManager.hash(value, { allowFallback: true });
-//         return result.hash;
-//     }
-
-//     static async verify(value: string, hash: string): Promise<boolean> {
-//         return this.getInstance().hashManager.verify(value, hash);
-//     }
-
-//     static jwt = {
-//         sign: (payload: object, options?: any) =>
-//             HiSecure.getInstance().authManager!.sign(payload, options),
-
-//         verify: (token: string) =>
-//             HiSecure.getInstance().authManager!.verify(token),
-
-//         google: {
-//             verifyIdToken: (idToken: string) =>
-//                 HiSecure.getInstance().authManager!.verifyGoogleIdToken(idToken)
-//         }
-//     };
-
-//     // Global Middleware - globalLevel
-//     static middleware(options?: SecureOptions | "api" | "strict" | "public") {
-//         const instance = this.getInstance();
-
-//         if (typeof options === "string") {
-//             logger.info("Global middleware preset applied", {
-//                 layer: "hisecure-core",
-//                 preset: options
-//             });
-
-//             const presets: any = {
-//                 api: { cors: true, rateLimit: "relaxed", sanitize: true },
-//                 strict: { cors: true, rateLimit: "strict", sanitize: true, auth: true },
-//                 public: { cors: true, rateLimit: true, sanitize: false }
-//             };
-
-//             return instance.createMiddlewareChain(presets[options] || {});
-//         }
-
-//         return instance.createMiddlewareChain(options || {});
-//     }
-
-//     // Internal Setup
-
-//     private setupAdapters() {
-//         logger.info("Adapters setup started", {
-//             layer: "hisecure-core"
-//         });
-
-//         this.hashingPrimary =
-//             this.config.hashing.primary === "argon2"
-//                 ? new ArgonAdapter()
-//                 : new BcryptAdapter(this.config.hashing.saltRounds);
-
-//         this.hashingFallback =
-//             this.config.hashing.fallback === "bcrypt"
-//                 ? new BcryptAdapter(this.config.hashing.saltRounds)
-//                 : null;
-
-//         logger.info("Hashing adapters configured", {
-//             layer: "hisecure-core",
-//             primary: this.config.hashing.primary,
-//             fallback: this.config.hashing.fallback ?? null
-//         });
-
-//         this.rateLimiterPrimary = this.config.rateLimiter.useAdaptiveMode
-//             ? new RLFlexibleAdapter()
-//             : new ExpressRLAdapter();
-
-//         this.rateLimiterFallback = new ExpressRLAdapter();
-
-//         logger.info("Rate limiter adapters configured", {
-//             layer: "hisecure-core",
-//             adaptive: this.config.rateLimiter.useAdaptiveMode
-//         });
-
-//         this.sanitizerPrimary = new SanitizeHtmlAdapter(this.config.sanitizer);
-//         this.sanitizerFallback = new XSSAdapter(this.config.sanitizer);
-
-//         logger.info("Sanitizer adapters configured", {
-//             layer: "hisecure-core",
-//             primary: "sanitize-html",
-//             fallback: "xss"
-//         });
-//     }
-
-//     private setupManagers() {
-//         this.hashManager = new HashManager(
-//             this.config.hashing,
-//             this.hashingPrimary,
-//             this.hashingFallback
-//         );
-
-//         this.rateLimitManager = new RateLimitManager(
-//             this.config.rateLimiter,
-//             this.rateLimiterPrimary,
-//             this.rateLimiterFallback
-//         );
-
-//         this.validatorManager = new ValidatorManager(
-//             new ZodAdapter(),
-//             new ExpressValidatorAdapter()
-//         );
-
-//         this.sanitizerManager = new SanitizerManager(
-//             this.sanitizerPrimary,
-//             this.sanitizerFallback
-//         );
-
-//         logger.info("Core managers initialized", {
-//             layer: "hisecure-core",
-//             managers: ["hash", "rate-limit", "validator", "sanitizer"]
-//         });
-//     }
-
-//     private setupDynamicManagers() {
-//         this.jsonManager = new JsonManager();
-//         this.corsManager = new CorsManager();
-
-//         if (this.config.auth.enabled) {
-//             this.authManager = new AuthManager({
-//                 jwtSecret: process.env.JWT_SECRET || this.config.auth.jwtSecret!,
-//                 jwtExpiresIn: this.config.auth.jwtExpiresIn,
-//                 googleClientId:
-//                     process.env.GOOGLE_CLIENT_ID || this.config.auth.googleClientId
-//             });
-
-//             logger.info("Authentication enabled", {
-//                 layer: "hisecure-core",
-//                 google: !!this.config.auth.googleClientId
-//             });
-//         } else {
-//             logger.info("Authentication disabled", {
-//                 layer: "hisecure-core"
-//             });
-//         }
-//     }
-
-//     private createMiddlewareChain(options: SecureOptions): any[] {
-//         const chain: any[] = [];
-
-//         chain.push(this.jsonManager.middleware(this.config.json));
-//         chain.push(this.jsonManager.urlencoded(this.config.urlencoded));
-
-//         if (this.config.enableHelmet) chain.push(helmet());
-//         if (this.config.enableHPP) chain.push(hpp());
-
-//         if (this.config.enableCompression)
-//             chain.push(compression(this.config.compression));
-
-//         if (options.cors) chain.push(this.corsManager.middleware(this.config.cors));
-//         if (options.sanitize)
-//             chain.push(this.sanitizerManager.middleware());
-
-//         if (options.rateLimit)
-//             chain.push(this.rateLimitManager.middleware({}));
-
-//         if (options.auth && this.authManager)
-//             chain.push(this.authManager.protect());
-
-//         chain.push(errorHandler);
-//         return chain;
-//     }
-// }
-
-
-
-
-
-
 import { HiSecureConfig } from "./types/HiSecureConfig.js";
 import { defaultConfig } from "./config.js";
 import { LIB_NAME, LIB_VERSION } from "./constants.js";
@@ -381,7 +53,6 @@ export class HiSecure {
     this.config = config;
   }
 
-  // ================= INIT (ONLY ONCE) =================
   static init(userConfig?: Partial<HiSecureConfig>): HiSecure {
     if (HiSecure.instance) return HiSecure.instance;
 
@@ -408,7 +79,6 @@ export class HiSecure {
       version: LIB_VERSION
     });
 
-    // ===== Core Managers =====
     this.hashManager = new HashManager(
       this.config.hashing,
       this.config.hashing.primary === "argon2"
@@ -440,7 +110,6 @@ export class HiSecure {
     this.jsonManager = new JsonManager();
     this.corsManager = new CorsManager();
 
-    // ===== AUTH (OPTIONAL) =====
     if (this.config.auth?.enabled) {
       this.authManager = new AuthManager({
         jwtSecret: process.env.JWT_SECRET || this.config.auth.jwtSecret!,
@@ -462,14 +131,12 @@ export class HiSecure {
     });
   }
 
-  // ================= AUTH =================
   static auth(options?: { required?: boolean; roles?: string[] }) {
     const i = HiSecure.get();
     if (!i.authManager) throw new Error("Auth not enabled");
     return i.authManager.protect(options);
   }
 
-  // ================= JWT =================
   static jwt = {
     sign(payload: object, options?: any) {
       const i = HiSecure.get();
@@ -493,7 +160,6 @@ export class HiSecure {
     }
   };
 
-  // ================= OTHER UTILS =================
   static validate(schema: ValidationSchema) {
     return HiSecure.get().validatorManager.validate(schema);
   }
@@ -538,7 +204,6 @@ export class HiSecure {
     return HiSecure.get().hashManager.verify(value, hash);
   }
 
-  // ================= GLOBAL MIDDLEWARE =================
   static middleware(options?: SecureOptions | MiddlewarePreset) {
     const i = HiSecure.get();
 

package/src/core/useSecure.ts

@@ -1,54 +1,3 @@
-// import { HiSecure } from "./HiSecure.js";
-// import { SecureOptions } from "./types/SecureOptions.js";
-
-// /**
-//  * @deprecated Use HiSecure.middleware() or fluent API instead
-//  */
-
-// export function useSecure(options?: SecureOptions | "api" | "strict" | "public") {
-//     console.warn("useSecure() is deprecated. Use HiSecure.middleware() or fluent API methods.");
-//     return HiSecure.middleware(options);
-// }
-
-
-// //  Legacy support - route-level security
-
-// export function secureRoute(options?: SecureOptions) {
-//     const chain: any[] = [];
-    
-//     if (options?.cors) {
-//         chain.push(HiSecure.cors(
-//             typeof options.cors === 'object' ? options.cors : undefined
-//         ));
-//     }
-    
-//     if (options?.rateLimit) {
-//         chain.push(HiSecure.rateLimit(
-//             typeof options.rateLimit === 'object' ? options.rateLimit : 
-//             options.rateLimit === "strict" ? "strict" : "relaxed"
-//         ));
-//     }
-    
-//     if (options?.sanitize) {
-//         chain.push(HiSecure.sanitize(
-//             typeof options.sanitize === 'object' ? options.sanitize : undefined
-//         ));
-//     }
-    
-//     if (options?.validate) {
-//         chain.push(HiSecure.validate(options.validate));
-//     }
-    
-//     if (options?.auth) {
-//         chain.push(HiSecure.auth(
-//             typeof options.auth === 'object' ? options.auth : undefined
-//         ));
-//     }
-//     return chain;
-// }
-
-
-
 import { HiSecure } from "./HiSecure.js";
 import { SecureOptions } from "./types/SecureOptions.js";
 

package/src/index.ts

@@ -1,24 +1,3 @@
-// import { HiSecure } from "./core/HiSecure.js";
-// import { useSecure, secureRoute } from "./core/useSecure.js";
-
-
-// export { z } from "zod";
-// export { body, query, param, header } from "express-validator";
-
-// const hiSecure = HiSecure.getInstance();
-
-// export { 
-//     HiSecure,        
-//     hiSecure,        
-//     useSecure,       
-//     secureRoute      
-// };
-
-// export default hiSecure;
-
-
-
-
 import { HiSecure } from "./core/HiSecure.js";
 import { useSecure, secureRoute } from "./core/useSecure.js";