hi-secure 1.0.7 → 1.0.11

package/dist/core/HiSecure.js.map

@@ -1 +1 @@
-{"version":3,"file":"HiSecure.js","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":";;;;;;AAEA,2CAA4C;AAC5C,iDAAuD;AACvD,wDAAkD;AAClD,0DAAoD;AACpD,kDAA6C;AAE7C,WAAW;AACX,iEAA2D;AAC3D,mEAA6D;AAC7D,2EAAqE;AACrE,yEAAmE;AACnE,6DAAuD;AACvD,uFAAiF;AACjF,+EAAyE;AACzE,6DAAuD;AAEvD,WAAW;AACX,+DAAyD;AACzD,yEAAmE;AACnE,yEAAmE;AACnE,yEAAmE;AACnE,+DAAyD;AACzD,+DAAyD;AACzD,+DAAyD;AAEzD,cAAc;AACd,oDAA4B;AAC5B,8CAAsB;AACtB,8DAAsC;AACtC,oEAA8D;AAK9D,MAAa,QAAQ;IAwBjB,oCAAoC;IACpC,YAAoB,aAAsC,EAAE;QAtBpD,gBAAW,GAAG,KAAK,CAAC;QAuBxB,IAAI,CAAC,MAAM,GAAG,IAAA,wBAAS,EAAC,yBAAa,EAAE,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,wDAAwD;IACxD,6BAA6B;IAC7B,wDAAwD;IAExD,MAAM,CAAC,WAAW,CAAC,MAAgC;QAC/C,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACrB,QAAQ,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,aAAa;QAChB,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,IAAI;QACA,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,iBAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO;QACX,CAAC;QAED,iBAAM,CAAC,IAAI,CAAC,MAAM,uBAAQ,KAAK,0BAAW,kBAAkB,CAAC,CAAC;QAE9D,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE5B,4BAA4B;QAC5B,IAAA,0BAAU,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,gCAAgC;QAChC,qCAAqC;QACrC,qCAAqC;QACrC,qCAAqC;QACrC,gCAAgC;QAChC,gCAAgC;QAChC,sDAAsD;QAEtD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,iBAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACvD,CAAC;IAED,aAAa;QACT,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,wDAAwD;IACxD,4CAA4C;IAC5C,wDAAwD;IAExD,MAAM,CAAC,IAAI,CAAC,OAAkD;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,MAAwB;QACpC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAa;QACzB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAA6C;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEpC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,OAAO,GAA2E;gBACpF,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC5B,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;aAC/D,CAAC;YACF,OAAO,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAa;QACrB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAa;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,wDAAwD;IACxD,iCAAiC;IACjC,wDAAwD;IAExD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAgB;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,OAAO,MAAM,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,IAAY;QAC9C,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;IA8BD,wDAAwD;IACxD,gCAAgC;IAChC,wDAAwD;IAExD,MAAM,CAAC,UAAU,CAAC,OAAqD;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEpC,wBAAwB;QACxB,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAkC;gBAC3C,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAChE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC9E,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAW,EAAE,QAAQ,EAAE,KAAK,EAAE;aAClE,CAAC;YACF,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,aAAa,EAAE,CAAC;gBAChB,OAAO,QAAQ,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,QAAQ,CAAC,qBAAqB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,wDAAwD;IACxD,mBAAmB;IACnB,wDAAwD;IAEhD,aAAa;QACjB,iBAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAEzC,UAAU;QACV,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ;YAC1D,CAAC,CAAC,IAAI,8BAAY,EAAE;YACpB,CAAC,CAAC,IAAI,gCAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAExD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAC5D,CAAC,CAAC,IAAI,gCAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YACnD,CAAC,CAAC,IAAI,CAAC;QAEX,gBAAgB;QAChB,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;YAC7D,CAAC,CAAC,IAAI,wCAAiB,EAAE;YACzB,CAAC,CAAC,IAAI,sCAAgB,EAAE,CAAC;QAC7B,IAAI,CAAC,mBAAmB,GAAG,IAAI,sCAAgB,EAAE,CAAC;QAElD,aAAa;QACb,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,KAAK;YACzD,CAAC,CAAC,IAAI,0BAAU,EAAE;YAClB,CAAC,CAAC,IAAI,oDAAuB,EAAE,CAAC;QACpC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,KAAK,mBAAmB;YAC5E,CAAC,CAAC,IAAI,oDAAuB,EAAE;YAC/B,CAAC,CAAC,IAAI,CAAC;QAEX,eAAe;QACf,IAAI,CAAC,gBAAgB,GAAG,IAAI,4CAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,iBAAiB,GAAG,IAAI,0BAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE/D,iBAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACpC,CAAC;IAEO,aAAa;QACjB,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,eAAe,CACvB,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CACxC,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,mBAAmB,CAC3B,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB;QACxC,0BAA0B;QAC1B,yBAAyB;QACzB,yBAAyB;QACzB,IAAI,0BAAU,EAAE,EAChB,IAAI,oDAAuB,EAAE,CAChC,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CACxC,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,iBAAiB,CACzB,CAAC;IACN,CAAC;IAEO,oBAAoB;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,EAAE,CAAC;QAErC,iCAAiC;QACjC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACvE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;YACjH,CAAC;YAED,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAAC;gBAC/B,SAAS;gBACT,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;gBAC3C,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc;gBAC/E,6CAA6C;aAChD,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAEO,qBAAqB,CAAC,OAAsB;QAChD,MAAM,KAAK,GAAU,EAAE,CAAC;QAExB,eAAe;QACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAEhE,mBAAmB;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,IAAA,gBAAM,GAAE,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAA,aAAG,GAAE,CAAC,CAAC;QAE7C,mDAAmD;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,EAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,GAAE,CAAC,CAAC,CAAC,eAAe;QAC9C,CAAC;QAED,OAAO;QACP,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC5C,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,eAAe;QACf,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClD,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACzC,CAAC,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC5F,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,gBAAgB;QAChB,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACrD,MAAM,aAAa,GAAG,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;gBACzC,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,iBAAiB;QACjB,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACrC,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,8BAA8B;QAC9B,KAAK,CAAC,IAAI,CAAC,8BAAY,CAAC,CAAC;QAEzB,OAAO,KAAK,CAAC;IACjB,CAAC;;AAlUL,4BAmUC;AAlUkB,iBAAQ,GAAoB,IAAI,AAAxB,CAAyB;AAuIzC,YAAG,GAAG;IACT,IAAI,EAAE,CAAC,OAAe,EAAE,OAAa,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,EAAE;QACJ,aAAa,EAAE,CAAC,OAAe,EAAE,EAAE;YAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,QAAQ,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7D,CAAC;KACJ;CACJ,AA1BS,CA0BR","sourcesContent":["// src/core/HiSecure.ts - COMPLETELY FIXED\r\nimport { HiSecureConfig } from \"./types/HiSecureConfig.js\";\r\nimport { defaultConfig } from \"./config.js\";\r\nimport { LIB_NAME, LIB_VERSION } from \"./constants.js\";\r\nimport { deepMerge } from \"../utils/deepMerge.js\";\r\nimport { deepFreeze } from \"../utils/deepFreeze.js\";\r\nimport { logger } from \"../logging/index.js\";\r\n\r\n// Adapters\r\nimport { ArgonAdapter } from \"../adapters/ArgonAdapter.js\";\r\nimport { BcryptAdapter } from \"../adapters/BcryptAdapter.js\";\r\nimport { RLFlexibleAdapter } from \"../adapters/RLFlexibleAdapter.js\";\r\nimport { ExpressRLAdapter } from \"../adapters/ExpressRLAdapter.js\";\r\nimport { ZodAdapter } from \"../adapters/ZodAdapter.js\";\r\nimport { ExpressValidatorAdapter } from \"../adapters/ExpressValidatorAdapter.js\";\r\nimport { SanitizeHtmlAdapter } from \"../adapters/SanitizeHtmlAdapter.js\";\r\nimport { XSSAdapter } from \"../adapters/XSSAdapter.js\";\r\n\r\n// Managers\r\nimport { HashManager } from \"../managers/HashManager.js\";\r\nimport { RateLimitManager } from \"../managers/RateLimitManager.js\";\r\nimport { ValidatorManager } from \"../managers/ValidatorManager.js\";\r\nimport { SanitizerManager } from \"../managers/SanitizerManager.js\";\r\nimport { JsonManager } from \"../managers/JsonManager.js\";\r\nimport { CorsManager } from \"../managers/CorsManager.js\";\r\nimport { AuthManager } from \"../managers/AuthManager.js\";\r\n\r\n// Middlewares\r\nimport helmet from \"helmet\";\r\nimport hpp from \"hpp\";\r\nimport compression from \"compression\";\r\nimport { errorHandler } from \"../middlewares/errorHandler.js\";\r\n\r\n// Types\r\nimport { SecureOptions, ValidationSchema, RateLimitOptions } from \"./types/SecureOptions.js\";\r\n\r\nexport class HiSecure {\r\n    private static instance: HiSecure | null = null;\r\n    private config: HiSecureConfig;\r\n    private initialized = false;\r\n\r\n    // Managers\r\n    public hashManager!: HashManager;\r\n    public rateLimitManager!: RateLimitManager;\r\n    public validatorManager!: ValidatorManager;\r\n    public sanitizerManager!: SanitizerManager;\r\n    public jsonManager!: JsonManager;\r\n    public corsManager!: CorsManager;\r\n    public authManager?: AuthManager;\r\n\r\n    // Internal adapters\r\n    private hashingPrimary: any;\r\n    private hashingFallback: any;\r\n    private rateLimiterPrimary: any;\r\n    private rateLimiterFallback: any;\r\n    private validatorPrimary: any;\r\n    private validatorFallback: any;\r\n    private sanitizerPrimary: any;\r\n    private sanitizerFallback: any;\r\n\r\n    // Private constructor for singleton\r\n    private constructor(userConfig: Partial<HiSecureConfig> = {}) {\r\n        this.config = deepMerge(defaultConfig, userConfig);\r\n    }\r\n\r\n    // =====================================================\r\n    // SINGLETON & INITIALIZATION\r\n    // =====================================================\r\n    \r\n    static getInstance(config?: Partial<HiSecureConfig>): HiSecure {\r\n        if (!HiSecure.instance) {\r\n            HiSecure.instance = new HiSecure(config);\r\n            HiSecure.instance.init();\r\n        }\r\n        return HiSecure.instance;\r\n    }\r\n\r\n    static resetInstance(): void {\r\n        HiSecure.instance = null;\r\n    }\r\n\r\n    init(): void {\r\n        if (this.initialized) {\r\n            logger.warn(\"⚠ HiSecure already initialized\");\r\n            return;\r\n        }\r\n\r\n        logger.info(`🔐 ${LIB_NAME} v${LIB_VERSION} initializing...`);\r\n\r\n        this.setupAdapters();\r\n        this.setupManagers();\r\n        this.setupDynamicManagers();\r\n\r\n        // Make everything immutable\r\n        deepFreeze(this.config);\r\n        // deepFreeze(this.hashManager);\r\n        // deepFreeze(this.rateLimitManager);\r\n        // deepFreeze(this.validatorManager);\r\n        // deepFreeze(this.sanitizerManager);\r\n        // deepFreeze(this.jsonManager);\r\n        // deepFreeze(this.corsManager);\r\n        // if (this.authManager) deepFreeze(this.authManager);\r\n\r\n        this.initialized = true;\r\n        logger.info(\"✅ HiSecure initialized successfully\");\r\n    }\r\n\r\n    isInitialized(): boolean {\r\n        return this.initialized;\r\n    }\r\n\r\n    // =====================================================\r\n    // FLUENT API METHODS (Route-level security)\r\n    // =====================================================\r\n    \r\n    static auth(options?: { required?: boolean; roles?: string[] }) {\r\n        const instance = this.getInstance();\r\n        if (!instance.authManager) {\r\n            throw new Error(\"Auth not enabled. Set auth.enabled=true in config.\");\r\n        }\r\n        return instance.authManager.protect(options);\r\n    }\r\n\r\n    static validate(schema: ValidationSchema) {\r\n        return this.getInstance().validatorManager.validate(schema);\r\n    }\r\n\r\n    static sanitize(options?: any) {\r\n        return this.getInstance().sanitizerManager.middleware(options);\r\n    }\r\n\r\n    static rateLimit(preset: \"strict\" | \"relaxed\" | \"api\" | object) {\r\n        const instance = this.getInstance();\r\n        \r\n        if (typeof preset === \"string\") {\r\n            const presets: Record<string, { mode?: \"strict\" | \"relaxed\" | \"api\"; options?: any }> = {\r\n                strict: { mode: \"strict\" },\r\n                relaxed: { mode: \"relaxed\" },\r\n                api: { mode: \"api\", options: { max: 100, windowMs: 60000 } }\r\n            };\r\n            return instance.rateLimitManager.middleware(presets[preset] || {});\r\n        }\r\n        \r\n        return instance.rateLimitManager.middleware({ options: preset });\r\n    }\r\n\r\n    static cors(options?: any) {\r\n        return this.getInstance().corsManager.middleware(options);\r\n    }\r\n\r\n    static json(options?: any) {\r\n        const instance = this.getInstance();\r\n        const chain = [];\r\n        chain.push(instance.jsonManager.middleware(options));\r\n        chain.push(instance.jsonManager.urlencoded());\r\n        return chain;\r\n    }\r\n\r\n    // =====================================================\r\n    // UTILITY METHODS (Direct usage)\r\n    // =====================================================\r\n    \r\n    static async hash(password: string): Promise<string> {\r\n        const instance = this.getInstance();\r\n        const result = await instance.hashManager.hash(password, { allowFallback: true });\r\n        return result.hash;\r\n    }\r\n\r\n    static async verify(password: string, hash: string): Promise<boolean> {\r\n        return this.getInstance().hashManager.verify(password, hash);\r\n    }\r\n\r\n    static jwt = {\r\n        sign: (payload: object, options?: any) => {\r\n            const instance = HiSecure.getInstance();\r\n            if (!instance.authManager) {\r\n                throw new Error(\"Auth not enabled\");\r\n            }\r\n            return instance.authManager.sign(payload, options);\r\n        },\r\n        \r\n        verify: (token: string) => {\r\n            const instance = HiSecure.getInstance();\r\n            if (!instance.authManager) {\r\n                throw new Error(\"Auth not enabled\");\r\n            }\r\n            return instance.authManager.verify(token);\r\n        },\r\n        \r\n        google: {\r\n            verifyIdToken: (idToken: string) => {\r\n                const instance = HiSecure.getInstance();\r\n                if (!instance.authManager) {\r\n                    throw new Error(\"Auth not enabled\");\r\n                }\r\n                return instance.authManager.verifyGoogleIdToken(idToken);\r\n            }\r\n        }\r\n    };\r\n\r\n    // =====================================================\r\n    // GLOBAL MIDDLEWARE (app.use())\r\n    // =====================================================\r\n    \r\n    static middleware(options?: SecureOptions | \"api\" | \"strict\" | \"public\") {\r\n        const instance = this.getInstance();\r\n        \r\n        // Handle preset strings\r\n        if (typeof options === \"string\") {\r\n            const presets: Record<string, SecureOptions> = {\r\n                api: { cors: true, rateLimit: \"relaxed\" as any, sanitize: true },\r\n                strict: { cors: true, rateLimit: \"strict\" as any, sanitize: true, auth: true },\r\n                public: { cors: true, rateLimit: true as any, sanitize: false }\r\n            };\r\n            const presetOptions = presets[options];\r\n            if (presetOptions) {\r\n                return instance.createMiddlewareChain(presetOptions);\r\n            }\r\n            return instance.createMiddlewareChain({});\r\n        }\r\n        \r\n        return instance.createMiddlewareChain(options || {});\r\n    }\r\n\r\n    // =====================================================\r\n    // INTERNAL METHODS\r\n    // =====================================================\r\n    \r\n    private setupAdapters(): void {\r\n        logger.info(\"🧩 Setting up adapters...\");\r\n\r\n        // Hashing\r\n        this.hashingPrimary = this.config.hashing.primary === \"argon2\"\r\n            ? new ArgonAdapter()\r\n            : new BcryptAdapter(this.config.hashing.saltRounds);\r\n\r\n        this.hashingFallback = this.config.hashing.fallback === \"bcrypt\"\r\n            ? new BcryptAdapter(this.config.hashing.saltRounds)\r\n            : null;\r\n\r\n        // Rate limiting\r\n        this.rateLimiterPrimary = this.config.rateLimiter.useAdaptiveMode\r\n            ? new RLFlexibleAdapter()\r\n            : new ExpressRLAdapter();\r\n        this.rateLimiterFallback = new ExpressRLAdapter();\r\n\r\n        // Validation\r\n        this.validatorPrimary = this.config.validation.mode === \"zod\"\r\n            ? new ZodAdapter()\r\n            : new ExpressValidatorAdapter();\r\n        this.validatorFallback = this.config.validation.fallback === \"express-validator\"\r\n            ? new ExpressValidatorAdapter()\r\n            : null;\r\n\r\n        // Sanitization\r\n        this.sanitizerPrimary = new SanitizeHtmlAdapter(this.config.sanitizer);\r\n        this.sanitizerFallback = new XSSAdapter(this.config.sanitizer);\r\n\r\n        logger.info(\"✅ Adapters ready\");\r\n    }\r\n\r\n    private setupManagers(): void {\r\n        this.hashManager = new HashManager(\r\n            this.config.hashing,\r\n            this.hashingPrimary,\r\n            this.hashingFallback\r\n        );\r\n\r\n        this.rateLimitManager = new RateLimitManager(\r\n            this.config.rateLimiter,\r\n            this.rateLimiterPrimary,\r\n            this.rateLimiterFallback\r\n        );\r\n\r\n        this.validatorManager = new ValidatorManager(\r\n            // this.config.validation,\r\n            // this.validatorPrimary,\r\n            // this.validatorFallback\r\n            new ZodAdapter(),\r\n            new ExpressValidatorAdapter()\r\n        );\r\n\r\n        this.sanitizerManager = new SanitizerManager(\r\n            this.sanitizerPrimary,\r\n            this.sanitizerFallback\r\n        );\r\n    }\r\n\r\n    private setupDynamicManagers(): void {\r\n        this.jsonManager = new JsonManager();\r\n        this.corsManager = new CorsManager();\r\n\r\n        // Auth manager (only if enabled)\r\n        if (this.config.auth.enabled) {\r\n            const jwtSecret = process.env.JWT_SECRET || this.config.auth.jwtSecret;\r\n            if (!jwtSecret) {\r\n                throw new Error(\"JWT_SECRET environment variable or jwtSecret in config is required when auth.enabled=true\");\r\n            }\r\n\r\n            this.authManager = new AuthManager({\r\n                jwtSecret,\r\n                jwtExpiresIn: this.config.auth.jwtExpiresIn,\r\n                googleClientId: process.env.GOOGLE_CLIENT_ID || this.config.auth.googleClientId\r\n                // Removed algorithm - handled in AuthManager\r\n            });\r\n        }\r\n    }\r\n\r\n    private createMiddlewareChain(options: SecureOptions): any[] {\r\n        const chain: any[] = [];\r\n        \r\n        // JSON parsing\r\n        chain.push(this.jsonManager.middleware(this.config.json));\r\n        chain.push(this.jsonManager.urlencoded(this.config.urlencoded));\r\n        \r\n        // Security headers\r\n        if (this.config.enableHelmet) chain.push(helmet());\r\n        if (this.config.enableHPP) chain.push(hpp());\r\n        \r\n        // Compression (check if compression config exists)\r\n        if (this.config.enableCompression && this.config.compression) {\r\n            chain.push(compression(this.config.compression));\r\n        } else if (this.config.enableCompression) {\r\n            chain.push(compression()); // Use defaults\r\n        }\r\n        \r\n        // CORS\r\n        if (this.config.enableCORS || options.cors) {\r\n            const corsOptions = options.cors === true ? this.config.cors : \r\n                              (typeof options.cors === 'object' ? options.cors : this.config.cors);\r\n            chain.push(this.corsManager.middleware(corsOptions));\r\n        }\r\n        \r\n        // Sanitization\r\n        if (this.config.enableSanitizer || options.sanitize) {\r\n            const sanitizeOptions = options.sanitize === true ? undefined : \r\n                                  (typeof options.sanitize === 'object' ? options.sanitize : undefined);\r\n            chain.push(this.sanitizerManager.middleware(sanitizeOptions));\r\n        }\r\n        \r\n        // Rate limiting\r\n        if (this.config.enableRateLimiter || options.rateLimit) {\r\n            const rateLimitOpts = typeof options.rateLimit === 'object' ? \r\n                                { options: options.rateLimit } : {};\r\n            chain.push(this.rateLimitManager.middleware(rateLimitOpts));\r\n        }\r\n        \r\n        // Authentication\r\n        if (options.auth && this.authManager) {\r\n            const authOpts = options.auth === true ? undefined : \r\n                           (typeof options.auth === 'object' ? options.auth : undefined);\r\n            chain.push(this.authManager.protect(authOpts));\r\n        }\r\n        \r\n        // Error handler (always last)\r\n        chain.push(errorHandler);\r\n        \r\n        return chain;\r\n    }\r\n}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n"]}
+{"version":3,"file":"HiSecure.js","sourceRoot":"","sources":["../../src/core/HiSecure.ts"],"names":[],"mappings":";;;;;;AACA,2CAA4C;AAC5C,iDAAuD;AACvD,wDAAkD;AAClD,0DAAoD;AACpD,kDAA6C;AAE7C,WAAW;AACX,iEAA2D;AAC3D,mEAA6D;AAC7D,2EAAqE;AACrE,yEAAmE;AACnE,6DAAuD;AACvD,uFAAiF;AACjF,+EAAyE;AACzE,6DAAuD;AAEvD,WAAW;AACX,+DAAyD;AACzD,yEAAmE;AACnE,yEAAmE;AACnE,yEAAmE;AACnE,+DAAyD;AACzD,+DAAyD;AACzD,+DAAyD;AAEzD,cAAc;AACd,oDAA4B;AAC5B,8CAAsB;AACtB,8DAAsC;AACtC,oEAA8D;AAK9D,MAAa,QAAQ;IAsBjB,oCAAoC;IACpC,YAAoB,aAAsC,EAAE;QApBpD,gBAAW,GAAG,KAAK,CAAC;QAqBxB,IAAI,CAAC,MAAM,GAAG,IAAA,wBAAS,EAAC,yBAAa,EAAE,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,6BAA6B;IAE7B,MAAM,CAAC,WAAW,CAAC,MAAgC;QAC/C,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACrB,QAAQ,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,aAAa;QAChB,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,IAAI;QACA,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,iBAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO;QACX,CAAC;QAED,iBAAM,CAAC,IAAI,CAAC,MAAM,uBAAQ,KAAK,0BAAW,kBAAkB,CAAC,CAAC;QAE9D,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE5B,IAAA,0BAAU,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,gCAAgC;QAChC,qCAAqC;QACrC,qCAAqC;QACrC,qCAAqC;QACrC,gCAAgC;QAChC,gCAAgC;QAChC,sDAAsD;QAEtD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,iBAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACvD,CAAC;IAED,aAAa;QACT,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,4CAA4C;IAE5C,MAAM,CAAC,IAAI,CAAC,OAAkD;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,MAAwB;QACpC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAa;QACzB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAA6C;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEpC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,OAAO,GAA2E;gBACpF,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC5B,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;aAC/D,CAAC;YACF,OAAO,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAa;QACrB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,OAAa;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,iCAAiC;IAEjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAgB;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,OAAO,MAAM,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,IAAY;QAC9C,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;IA8BD,gCAAgC;IAEhC,MAAM,CAAC,UAAU,CAAC,OAAqD;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEpC,wBAAwB;QACxB,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAkC;gBAC3C,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAChE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC9E,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAW,EAAE,QAAQ,EAAE,KAAK,EAAE;aAClE,CAAC;YACF,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,aAAa,EAAE,CAAC;gBAChB,OAAO,QAAQ,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,QAAQ,CAAC,qBAAqB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAGD,mBAAmB;IAEX,aAAa;QACjB,iBAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAEzC,UAAU;QACV,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ;YAC1D,CAAC,CAAC,IAAI,8BAAY,EAAE;YACpB,CAAC,CAAC,IAAI,gCAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAExD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAC5D,CAAC,CAAC,IAAI,gCAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YACnD,CAAC,CAAC,IAAI,CAAC;QAEX,gBAAgB;QAChB,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;YAC7D,CAAC,CAAC,IAAI,wCAAiB,EAAE;YACzB,CAAC,CAAC,IAAI,sCAAgB,EAAE,CAAC;QAC7B,IAAI,CAAC,mBAAmB,GAAG,IAAI,sCAAgB,EAAE,CAAC;QAIlD,gBAAgB;QAChB,gEAAgE;QAChE,yBAAyB;QACzB,uCAAuC;QACvC,mFAAmF;QACnF,sCAAsC;QACtC,cAAc;QAGd,eAAe;QACf,IAAI,CAAC,gBAAgB,GAAG,IAAI,4CAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,iBAAiB,GAAG,IAAI,0BAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE/D,iBAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACpC,CAAC;IAEO,aAAa;QACjB,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,eAAe,CACvB,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CACxC,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,mBAAmB,CAC3B,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB;QACxC,0BAA0B;QAC1B,yBAAyB;QACzB,yBAAyB;QACzB,IAAI,0BAAU,EAAE,EAChB,IAAI,oDAAuB,EAAE,CAChC,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,sCAAgB,CACxC,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,iBAAiB,CACzB,CAAC;IACN,CAAC;IAEO,oBAAoB;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,EAAE,CAAC;QAErC,iCAAiC;QACjC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACvE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;YACjH,CAAC;YAED,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAAC;gBAC/B,SAAS;gBACT,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;gBAC3C,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc;aAClF,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAEO,qBAAqB,CAAC,OAAsB;QAChD,MAAM,KAAK,GAAU,EAAE,CAAC;QAExB,eAAe;QACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAEhE,mBAAmB;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,IAAA,gBAAM,GAAE,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAA,aAAG,GAAE,CAAC,CAAC;QAE7C,mDAAmD;QACnD,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,EAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,IAAA,qBAAW,GAAE,CAAC,CAAC,CAAC,eAAe;QAC9C,CAAC;QAED,OAAO;QACP,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC5C,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,eAAe;QACf,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClD,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACzC,CAAC,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC5F,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,gBAAgB;QAChB,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACrD,MAAM,aAAa,GAAG,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;gBACzC,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,iBAAiB;QACjB,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACrC,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,8BAA8B;QAC9B,KAAK,CAAC,IAAI,CAAC,8BAAY,CAAC,CAAC;QAEzB,OAAO,KAAK,CAAC;IACjB,CAAC;;AAxTL,4BAyTC;AAxTkB,iBAAQ,GAAoB,IAAI,AAAxB,CAAyB;AA8HzC,YAAG,GAAG;IACT,IAAI,EAAE,CAAC,OAAe,EAAE,OAAa,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,EAAE;QACJ,aAAa,EAAE,CAAC,OAAe,EAAE,EAAE;YAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,QAAQ,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7D,CAAC;KACJ;CACJ,AA1BS,CA0BR","sourcesContent":["import { HiSecureConfig } from \"./types/HiSecureConfig.js\";\r\nimport { defaultConfig } from \"./config.js\";\r\nimport { LIB_NAME, LIB_VERSION } from \"./constants.js\";\r\nimport { deepMerge } from \"../utils/deepMerge.js\";\r\nimport { deepFreeze } from \"../utils/deepFreeze.js\";\r\nimport { logger } from \"../logging/index.js\";\r\n\r\n// Adapters\r\nimport { ArgonAdapter } from \"../adapters/ArgonAdapter.js\";\r\nimport { BcryptAdapter } from \"../adapters/BcryptAdapter.js\";\r\nimport { RLFlexibleAdapter } from \"../adapters/RLFlexibleAdapter.js\";\r\nimport { ExpressRLAdapter } from \"../adapters/ExpressRLAdapter.js\";\r\nimport { ZodAdapter } from \"../adapters/ZodAdapter.js\";\r\nimport { ExpressValidatorAdapter } from \"../adapters/ExpressValidatorAdapter.js\";\r\nimport { SanitizeHtmlAdapter } from \"../adapters/SanitizeHtmlAdapter.js\";\r\nimport { XSSAdapter } from \"../adapters/XSSAdapter.js\";\r\n\r\n// Managers\r\nimport { HashManager } from \"../managers/HashManager.js\";\r\nimport { RateLimitManager } from \"../managers/RateLimitManager.js\";\r\nimport { ValidatorManager } from \"../managers/ValidatorManager.js\";\r\nimport { SanitizerManager } from \"../managers/SanitizerManager.js\";\r\nimport { JsonManager } from \"../managers/JsonManager.js\";\r\nimport { CorsManager } from \"../managers/CorsManager.js\";\r\nimport { AuthManager } from \"../managers/AuthManager.js\";\r\n\r\n// Middlewares\r\nimport helmet from \"helmet\";\r\nimport hpp from \"hpp\";\r\nimport compression from \"compression\";\r\nimport { errorHandler } from \"../middlewares/errorHandler.js\";\r\n\r\n// Types\r\nimport { SecureOptions, ValidationSchema} from \"./types/SecureOptions.js\";\r\n\r\nexport class HiSecure {\r\n    private static instance: HiSecure | null = null;\r\n    private config: HiSecureConfig;\r\n    private initialized = false;\r\n\r\n    // Managers\r\n    public hashManager!: HashManager;\r\n    public rateLimitManager!: RateLimitManager;\r\n    public validatorManager!: ValidatorManager;\r\n    public sanitizerManager!: SanitizerManager;\r\n    public jsonManager!: JsonManager;\r\n    public corsManager!: CorsManager;\r\n    public authManager?: AuthManager;\r\n\r\n    // Internal adapters\r\n    private hashingPrimary: any;\r\n    private hashingFallback: any;\r\n    private rateLimiterPrimary: any;\r\n    private rateLimiterFallback: any;\r\n    private sanitizerPrimary: any;\r\n    private sanitizerFallback: any;\r\n\r\n    // Private constructor for singleton\r\n    private constructor(userConfig: Partial<HiSecureConfig> = {}) {\r\n        this.config = deepMerge(defaultConfig, userConfig);\r\n    }\r\n\r\n    // SINGLETON & INITIALIZATION\r\n    \r\n    static getInstance(config?: Partial<HiSecureConfig>): HiSecure {\r\n        if (!HiSecure.instance) {\r\n            HiSecure.instance = new HiSecure(config);\r\n            HiSecure.instance.init();\r\n        }\r\n        return HiSecure.instance;\r\n    }\r\n\r\n    static resetInstance(): void {\r\n        HiSecure.instance = null;\r\n    }\r\n\r\n    init(): void {\r\n        if (this.initialized) {\r\n            logger.warn(\"⚠ HiSecure already initialized\");\r\n            return;\r\n        }\r\n\r\n        logger.info(`🔐 ${LIB_NAME} v${LIB_VERSION} initializing...`);\r\n\r\n        this.setupAdapters();\r\n        this.setupManagers();\r\n        this.setupDynamicManagers();\r\n\r\n        deepFreeze(this.config);\r\n        // deepFreeze(this.hashManager);\r\n        // deepFreeze(this.rateLimitManager);\r\n        // deepFreeze(this.validatorManager);\r\n        // deepFreeze(this.sanitizerManager);\r\n        // deepFreeze(this.jsonManager);\r\n        // deepFreeze(this.corsManager);\r\n        // if (this.authManager) deepFreeze(this.authManager);\r\n\r\n        this.initialized = true;\r\n        logger.info(\"✅ HiSecure initialized successfully\");\r\n    }\r\n\r\n    isInitialized(): boolean {\r\n        return this.initialized;\r\n    }\r\n\r\n    // FLUENT API METHODS (Route-level security)\r\n    \r\n    static auth(options?: { required?: boolean; roles?: string[] }) {\r\n        const instance = this.getInstance();\r\n        if (!instance.authManager) {\r\n            throw new Error(\"Auth not enabled. Set auth.enabled=true in config.\");\r\n        }\r\n        return instance.authManager.protect(options);\r\n    }\r\n\r\n    static validate(schema: ValidationSchema) {\r\n        return this.getInstance().validatorManager.validate(schema);\r\n    }\r\n\r\n    static sanitize(options?: any) {\r\n        return this.getInstance().sanitizerManager.middleware(options);\r\n    }\r\n\r\n    static rateLimit(preset: \"strict\" | \"relaxed\" | \"api\" | object) {\r\n        const instance = this.getInstance();\r\n        \r\n        if (typeof preset === \"string\") {\r\n            const presets: Record<string, { mode?: \"strict\" | \"relaxed\" | \"api\"; options?: any }> = {\r\n                strict: { mode: \"strict\" },\r\n                relaxed: { mode: \"relaxed\" },\r\n                api: { mode: \"api\", options: { max: 100, windowMs: 60000 } }\r\n            };\r\n            return instance.rateLimitManager.middleware(presets[preset] || {});\r\n        }\r\n        \r\n        return instance.rateLimitManager.middleware({ options: preset });\r\n    }\r\n\r\n    static cors(options?: any) {\r\n        return this.getInstance().corsManager.middleware(options);\r\n    }\r\n\r\n    static json(options?: any) {\r\n        const instance = this.getInstance();\r\n        const chain = [];\r\n        chain.push(instance.jsonManager.middleware(options));\r\n        chain.push(instance.jsonManager.urlencoded());\r\n        return chain;\r\n    }\r\n\r\n    // UTILITY METHODS (Direct usage)\r\n    \r\n    static async hash(password: string): Promise<string> {\r\n        const instance = this.getInstance();\r\n        const result = await instance.hashManager.hash(password, { allowFallback: true });\r\n        return result.hash;\r\n    }\r\n\r\n    static async verify(password: string, hash: string): Promise<boolean> {\r\n        return this.getInstance().hashManager.verify(password, hash);\r\n    }\r\n\r\n    static jwt = {\r\n        sign: (payload: object, options?: any) => {\r\n            const instance = HiSecure.getInstance();\r\n            if (!instance.authManager) {\r\n                throw new Error(\"Auth not enabled\");\r\n            }\r\n            return instance.authManager.sign(payload, options);\r\n        },\r\n        \r\n        verify: (token: string) => {\r\n            const instance = HiSecure.getInstance();\r\n            if (!instance.authManager) {\r\n                throw new Error(\"Auth not enabled\");\r\n            }\r\n            return instance.authManager.verify(token);\r\n        },\r\n        \r\n        google: {\r\n            verifyIdToken: (idToken: string) => {\r\n                const instance = HiSecure.getInstance();\r\n                if (!instance.authManager) {\r\n                    throw new Error(\"Auth not enabled\");\r\n                }\r\n                return instance.authManager.verifyGoogleIdToken(idToken);\r\n            }\r\n        }\r\n    };\r\n\r\n    // GLOBAL MIDDLEWARE (app.use())\r\n    \r\n    static middleware(options?: SecureOptions | \"api\" | \"strict\" | \"public\") {\r\n        const instance = this.getInstance();\r\n        \r\n        // Handle preset strings\r\n        if (typeof options === \"string\") {\r\n            const presets: Record<string, SecureOptions> = {\r\n                api: { cors: true, rateLimit: \"relaxed\" as any, sanitize: true },\r\n                strict: { cors: true, rateLimit: \"strict\" as any, sanitize: true, auth: true },\r\n                public: { cors: true, rateLimit: true as any, sanitize: false }\r\n            };\r\n            const presetOptions = presets[options];\r\n            if (presetOptions) {\r\n                return instance.createMiddlewareChain(presetOptions);\r\n            }\r\n            return instance.createMiddlewareChain({});\r\n        }\r\n        \r\n        return instance.createMiddlewareChain(options || {});\r\n    }\r\n\r\n   \r\n    // Internal Methods\r\n    \r\n    private setupAdapters(): void {\r\n        logger.info(\"🧩 Setting up adapters...\");\r\n\r\n        // Hashing\r\n        this.hashingPrimary = this.config.hashing.primary === \"argon2\"\r\n            ? new ArgonAdapter()\r\n            : new BcryptAdapter(this.config.hashing.saltRounds);\r\n\r\n        this.hashingFallback = this.config.hashing.fallback === \"bcrypt\"\r\n            ? new BcryptAdapter(this.config.hashing.saltRounds)\r\n            : null;\r\n\r\n        // Rate limiting\r\n        this.rateLimiterPrimary = this.config.rateLimiter.useAdaptiveMode\r\n            ? new RLFlexibleAdapter()\r\n            : new ExpressRLAdapter();\r\n        this.rateLimiterFallback = new ExpressRLAdapter();\r\n\r\n\r\n\r\n        // // Validation\r\n        // this.validatorPrimary = this.config.validation.mode === \"zod\"\r\n        //     ? new ZodAdapter()\r\n        //     : new ExpressValidatorAdapter();\r\n        // this.validatorFallback = this.config.validation.fallback === \"express-validator\"\r\n        //     ? new ExpressValidatorAdapter()\r\n        //     : null;\r\n\r\n\r\n        // Sanitization\r\n        this.sanitizerPrimary = new SanitizeHtmlAdapter(this.config.sanitizer);\r\n        this.sanitizerFallback = new XSSAdapter(this.config.sanitizer);\r\n\r\n        logger.info(\"✅ Adapters ready\");\r\n    }\r\n\r\n    private setupManagers(): void {\r\n        this.hashManager = new HashManager(\r\n            this.config.hashing,\r\n            this.hashingPrimary,\r\n            this.hashingFallback\r\n        );\r\n\r\n        this.rateLimitManager = new RateLimitManager(\r\n            this.config.rateLimiter,\r\n            this.rateLimiterPrimary,\r\n            this.rateLimiterFallback\r\n        );\r\n\r\n        this.validatorManager = new ValidatorManager(\r\n            // this.config.validation,\r\n            // this.validatorPrimary,\r\n            // this.validatorFallback\r\n            new ZodAdapter(),\r\n            new ExpressValidatorAdapter()\r\n        );\r\n\r\n        this.sanitizerManager = new SanitizerManager(\r\n            this.sanitizerPrimary,\r\n            this.sanitizerFallback\r\n        );\r\n    }\r\n\r\n    private setupDynamicManagers(): void {\r\n        this.jsonManager = new JsonManager();\r\n        this.corsManager = new CorsManager();\r\n\r\n        // Auth manager (only if enabled)\r\n        if (this.config.auth.enabled) {\r\n            const jwtSecret = process.env.JWT_SECRET || this.config.auth.jwtSecret;\r\n            if (!jwtSecret) {\r\n                throw new Error(\"JWT_SECRET environment variable or jwtSecret in config is required when auth.enabled=true\");\r\n            }\r\n\r\n            this.authManager = new AuthManager({\r\n                jwtSecret,\r\n                jwtExpiresIn: this.config.auth.jwtExpiresIn,\r\n                googleClientId: process.env.GOOGLE_CLIENT_ID || this.config.auth.googleClientId\r\n            });\r\n        }\r\n    }\r\n\r\n    private createMiddlewareChain(options: SecureOptions): any[] {\r\n        const chain: any[] = [];\r\n        \r\n        // JSON parsing\r\n        chain.push(this.jsonManager.middleware(this.config.json));\r\n        chain.push(this.jsonManager.urlencoded(this.config.urlencoded));\r\n        \r\n        // Security headers\r\n        if (this.config.enableHelmet) chain.push(helmet());\r\n        if (this.config.enableHPP) chain.push(hpp());\r\n        \r\n        // Compression (check if compression config exists)\r\n        if (this.config.enableCompression && this.config.compression) {\r\n            chain.push(compression(this.config.compression));\r\n        } else if (this.config.enableCompression) {\r\n            chain.push(compression()); // Use defaults\r\n        }\r\n        \r\n        // CORS\r\n        if (this.config.enableCORS || options.cors) {\r\n            const corsOptions = options.cors === true ? this.config.cors : \r\n                              (typeof options.cors === 'object' ? options.cors : this.config.cors);\r\n            chain.push(this.corsManager.middleware(corsOptions));\r\n        }\r\n        \r\n        // Sanitization\r\n        if (this.config.enableSanitizer || options.sanitize) {\r\n            const sanitizeOptions = options.sanitize === true ? undefined : \r\n                                  (typeof options.sanitize === 'object' ? options.sanitize : undefined);\r\n            chain.push(this.sanitizerManager.middleware(sanitizeOptions));\r\n        }\r\n        \r\n        // Rate limiting\r\n        if (this.config.enableRateLimiter || options.rateLimit) {\r\n            const rateLimitOpts = typeof options.rateLimit === 'object' ? \r\n                                { options: options.rateLimit } : {};\r\n            chain.push(this.rateLimitManager.middleware(rateLimitOpts));\r\n        }\r\n        \r\n        // Authentication\r\n        if (options.auth && this.authManager) {\r\n            const authOpts = options.auth === true ? undefined : \r\n                           (typeof options.auth === 'object' ? options.auth : undefined);\r\n            chain.push(this.authManager.protect(authOpts));\r\n        }\r\n        \r\n        // Error handler (always last)\r\n        chain.push(errorHandler);\r\n        \r\n        return chain;\r\n    }\r\n}\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n"]}

package/dist/core/useSecure.d.ts

@@ -3,8 +3,5 @@ import { SecureOptions } from "./types/SecureOptions.js";
  * @deprecated Use HiSecure.middleware() or fluent API instead
  */
 export declare function useSecure(options?: SecureOptions | "api" | "strict" | "public"): any[];
-/**
- * Legacy support - route-level security
- */
 export declare function secureRoute(options?: SecureOptions): any[];
 //# sourceMappingURL=useSecure.d.ts.map

package/dist/core/useSecure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useSecure.d.ts","sourceRoot":"","sources":["../../src/core/useSecure.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,SAG9E;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,SAiClD"}
+{"version":3,"file":"useSecure.d.ts","sourceRoot":"","sources":["../../src/core/useSecure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD;;GAEG;AAEH,wBAAgB,SAAS,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,SAG9E;AAMD,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,SAiClD"}

package/dist/core/useSecure.js

@@ -1,6 +1,4 @@
 "use strict";
-// src/core/useSecure.ts - SIMPLER VERSION
-// This is now optional since HiSecure class has fluent API
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.useSecure = useSecure;
 exports.secureRoute = secureRoute;
@@ -12,9 +10,7 @@ function useSecure(options) {
     console.warn("⚠ useSecure() is deprecated. Use HiSecure.middleware() or fluent API methods.");
     return HiSecure_js_1.HiSecure.middleware(options);
 }
-/**
- * Legacy support - route-level security
- */
+//  Legacy support - route-level security
 function secureRoute(options) {
     const chain = [];
     if (options?.cors) {

package/dist/core/useSecure.js.map

@@ -1 +1 @@
-{"version":3,"file":"useSecure.js","sourceRoot":"","sources":["../../src/core/useSecure.ts"],"names":[],"mappings":";AAAA,0CAA0C;AAC1C,2DAA2D;;AAS3D,8BAGC;AAKD,kCAiCC;AA/CD,+CAAyC;AAGzC;;GAEG;AACH,SAAgB,SAAS,CAAC,OAAqD;IAC3E,OAAO,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IAC9F,OAAO,sBAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,OAAuB;IAC/C,MAAM,KAAK,GAAU,EAAE,CAAC;IAExB,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,IAAI,CACpB,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC,CAAC;IACP,CAAC;IAED,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,SAAS,CACzB,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3D,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC,CAAC;IACP,CAAC;IAED,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,QAAQ,CACxB,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CACtE,CAAC,CAAC;IACP,CAAC;IAED,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,IAAI,CACpB,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC,CAAC;IACP,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC","sourcesContent":["// src/core/useSecure.ts - SIMPLER VERSION\r\n// This is now optional since HiSecure class has fluent API\r\n\r\n\r\nimport { HiSecure } from \"./HiSecure.js\";\r\nimport { SecureOptions } from \"./types/SecureOptions.js\";\r\n\r\n/**\r\n * @deprecated Use HiSecure.middleware() or fluent API instead\r\n */\r\nexport function useSecure(options?: SecureOptions | \"api\" | \"strict\" | \"public\") {\r\n    console.warn(\"⚠ useSecure() is deprecated. Use HiSecure.middleware() or fluent API methods.\");\r\n    return HiSecure.middleware(options);\r\n}\r\n\r\n/**\r\n * Legacy support - route-level security\r\n */\r\nexport function secureRoute(options?: SecureOptions) {\r\n    const chain: any[] = [];\r\n    \r\n    if (options?.cors) {\r\n        chain.push(HiSecure.cors(\r\n            typeof options.cors === 'object' ? options.cors : undefined\r\n        ));\r\n    }\r\n    \r\n    if (options?.rateLimit) {\r\n        chain.push(HiSecure.rateLimit(\r\n            typeof options.rateLimit === 'object' ? options.rateLimit : \r\n            options.rateLimit === \"strict\" ? \"strict\" : \"relaxed\"\r\n        ));\r\n    }\r\n    \r\n    if (options?.sanitize) {\r\n        chain.push(HiSecure.sanitize(\r\n            typeof options.sanitize === 'object' ? options.sanitize : undefined\r\n        ));\r\n    }\r\n    \r\n    if (options?.validate) {\r\n        chain.push(HiSecure.validate(options.validate));\r\n    }\r\n    \r\n    if (options?.auth) {\r\n        chain.push(HiSecure.auth(\r\n            typeof options.auth === 'object' ? options.auth : undefined\r\n        ));\r\n    }\r\n    \r\n    return chain;\r\n}\r\n\r\n\r\n"]}
+{"version":3,"file":"useSecure.js","sourceRoot":"","sources":["../../src/core/useSecure.ts"],"names":[],"mappings":";;AAOA,8BAGC;AAMD,kCAiCC;AAjDD,+CAAyC;AAGzC;;GAEG;AAEH,SAAgB,SAAS,CAAC,OAAqD;IAC3E,OAAO,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IAC9F,OAAO,sBAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAGD,yCAAyC;AAGzC,SAAgB,WAAW,CAAC,OAAuB;IAC/C,MAAM,KAAK,GAAU,EAAE,CAAC;IAExB,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,IAAI,CACpB,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC,CAAC;IACP,CAAC;IAED,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,SAAS,CACzB,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3D,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC,CAAC;IACP,CAAC;IAED,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,QAAQ,CACxB,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CACtE,CAAC,CAAC;IACP,CAAC;IAED,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,sBAAQ,CAAC,IAAI,CACpB,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC,CAAC;IACP,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC","sourcesContent":["import { HiSecure } from \"./HiSecure.js\";\r\nimport { SecureOptions } from \"./types/SecureOptions.js\";\r\n\r\n/**\r\n * @deprecated Use HiSecure.middleware() or fluent API instead\r\n */\r\n\r\nexport function useSecure(options?: SecureOptions | \"api\" | \"strict\" | \"public\") {\r\n    console.warn(\"⚠ useSecure() is deprecated. Use HiSecure.middleware() or fluent API methods.\");\r\n    return HiSecure.middleware(options);\r\n}\r\n\r\n\r\n//  Legacy support - route-level security\r\n\r\n\r\nexport function secureRoute(options?: SecureOptions) {\r\n    const chain: any[] = [];\r\n    \r\n    if (options?.cors) {\r\n        chain.push(HiSecure.cors(\r\n            typeof options.cors === 'object' ? options.cors : undefined\r\n        ));\r\n    }\r\n    \r\n    if (options?.rateLimit) {\r\n        chain.push(HiSecure.rateLimit(\r\n            typeof options.rateLimit === 'object' ? options.rateLimit : \r\n            options.rateLimit === \"strict\" ? \"strict\" : \"relaxed\"\r\n        ));\r\n    }\r\n    \r\n    if (options?.sanitize) {\r\n        chain.push(HiSecure.sanitize(\r\n            typeof options.sanitize === 'object' ? options.sanitize : undefined\r\n        ));\r\n    }\r\n    \r\n    if (options?.validate) {\r\n        chain.push(HiSecure.validate(options.validate));\r\n    }\r\n    \r\n    if (options?.auth) {\r\n        chain.push(HiSecure.auth(\r\n            typeof options.auth === 'object' ? options.auth : undefined\r\n        ));\r\n    }\r\n    \r\n    return chain;\r\n}\r\n\r\n\r\n"]}

package/dist/index.d.ts

@@ -1,9 +1,6 @@
 import { HiSecure } from "./core/HiSecure.js";
 import { useSecure, secureRoute } from "./core/useSecure.js";
 declare const hiSecure: HiSecure;
-export { HiSecure, // Class for advanced usage
-hiSecure, // Singleton instance
-useSecure, // Legacy function (deprecated)
-secureRoute };
+export { HiSecure, hiSecure, useSecure, secureRoute };
 export default hiSecure;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE7D,QAAA,MAAM,QAAQ,UAAyB,CAAC;AAExC,OAAO,EACH,QAAQ,EAAS,2BAA2B;AAC5C,QAAQ,EAAS,qBAAqB;AACtC,SAAS,EAAQ,+BAA+B;AAChD,WAAW,EACd,CAAC;AAEF,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE7D,QAAA,MAAM,QAAQ,UAAyB,CAAC;AAExC,OAAO,EACH,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,WAAW,EACd,CAAC;AAEF,eAAe,QAAQ,CAAC"}

package/dist/index.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.secureRoute = exports.useSecure = exports.hiSecure = exports.HiSecure = void 0;
-// src/index.ts - MAIN ENTRY POINT
 const HiSecure_js_1 = require("./core/HiSecure.js");
 Object.defineProperty(exports, "HiSecure", { enumerable: true, get: function () { return HiSecure_js_1.HiSecure; } });
 const useSecure_js_1 = require("./core/useSecure.js");

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,kCAAkC;AAClC,oDAA8C;AAM1C,yFANK,sBAAQ,OAML;AALZ,sDAA6D;AAOzD,0FAPK,wBAAS,OAOL;AACT,4FARgB,0BAAW,OAQhB;AANf,MAAM,QAAQ,GAAG,sBAAQ,CAAC,WAAW,EAAE,CAAC;AAIpC,4BAAQ;AAKZ,kBAAe,QAAQ,CAAC","sourcesContent":["// src/index.ts - MAIN ENTRY POINT\r\nimport { HiSecure } from \"./core/HiSecure.js\";\r\nimport { useSecure, secureRoute } from \"./core/useSecure.js\";\r\n\r\nconst hiSecure = HiSecure.getInstance();\r\n\r\nexport { \r\n    HiSecure,        // Class for advanced usage\r\n    hiSecure,        // Singleton instance\r\n    useSecure,       // Legacy function (deprecated)\r\n    secureRoute      // Route-level security helper\r\n};\r\n\r\nexport default hiSecure;\r\n\r\n\r\n\r\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,oDAA8C;AAM1C,yFANK,sBAAQ,OAML;AALZ,sDAA6D;AAOzD,0FAPK,wBAAS,OAOL;AACT,4FARgB,0BAAW,OAQhB;AANf,MAAM,QAAQ,GAAG,sBAAQ,CAAC,WAAW,EAAE,CAAC;AAIpC,4BAAQ;AAKZ,kBAAe,QAAQ,CAAC","sourcesContent":["import { HiSecure } from \"./core/HiSecure.js\";\r\nimport { useSecure, secureRoute } from \"./core/useSecure.js\";\r\n\r\nconst hiSecure = HiSecure.getInstance();\r\n\r\nexport { \r\n    HiSecure,        \r\n    hiSecure,        \r\n    useSecure,       \r\n    secureRoute      \r\n};\r\n\r\nexport default hiSecure;\r\n\r\n\r\n\r\n"]}

package/dist/managers/AuthManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthManager.d.ts","sourceRoot":"","sources":["../../src/managers/AuthManager.ts"],"names":[],"mappings":"AA4GA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAK1D,MAAM,WAAW,WAAW;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,qBAAa,WAAW;IACpB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,aAAa,CAAC,CAAgB;gBAE1B,IAAI,EAAE,WAAW;IAsB7B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE;IAK7E,MAAM,CAAC,KAAK,EAAE,MAAM;IAKd,mBAAmB,CAAC,OAAO,EAAE,MAAM;IAezC,OAAO,CAAC,OAAO,CAAC,EAAE,cAAc,IAIpB,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY;CA2D9D"}
+{"version":3,"file":"AuthManager.d.ts","sourceRoot":"","sources":["../../src/managers/AuthManager.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAI1D,MAAM,WAAW,WAAW;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,qBAAa,WAAW;IACpB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,aAAa,CAAC,CAAgB;gBAE1B,IAAI,EAAE,WAAW;IAsB7B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE;IAK7E,MAAM,CAAC,KAAK,EAAE,MAAM;IAKd,mBAAmB,CAAC,OAAO,EAAE,MAAM;IAezC,OAAO,CAAC,OAAO,CAAC,EAAE,cAAc,IAIpB,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY;CA4D9D"}

package/dist/managers/AuthManager.js

@@ -1,95 +1,10 @@
 "use strict";
-// import { JWTAdapter } from "../adapters/JWTAdapter.js";
-// import { GoogleAdapter } from "../adapters/GoggleAdapter.js";
-// import { AdapterError } from "../core/errors/AdapterError.js";
-// import { HttpError } from "../core/errors/HttpErrror.js";
-// import { Request, Response, NextFunction } from "express";
-// import { logError, logWarn, logInfo } from "../logging";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthManager = void 0;
-// export interface AuthOptions {
-//     jwtSecret: string;
-//     jwtExpiresIn?: string | number | undefined;
-//     googleClientId?: string | undefined;
-// }
-// export class AuthManager {
-//     private jwtAdapter: JWTAdapter;
-//     private googleAdapter?: GoogleAdapter;
-//     constructor(opts: AuthOptions) {
-//         if (!opts.jwtSecret)
-//             throw new AdapterError("jwtSecret required in AuthOptions");
-//         logInfo("AuthManager initialized");
-//         this.jwtAdapter = new JWTAdapter({
-//             secret: opts.jwtSecret,
-//             expiresIn: opts.jwtExpiresIn ?? undefined,
-//         });
-//         if (opts.googleClientId) {
-//             this.googleAdapter = new GoogleAdapter(opts.googleClientId);
-//             logInfo("GoogleAdapter enabled");
-//         }
-//     }
-//     sign(payload: object, options?: { expiresIn?: string | number }) {
-//         logInfo("JWT Sign called");
-//         return this.jwtAdapter.sign(payload, options);
-//     }
-//     verify(token: string) {
-//         logInfo("JWT Verify called");
-//         return this.jwtAdapter.verify(token);
-//     }
-//     async verifyGoogleIdToken(idToken: string) {
-//         if (!this.googleAdapter)
-//             throw new AdapterError("GoogleAdapter not configured.");
-//         logInfo("Google ID Token verify called");
-//         try {
-//             return await this.googleAdapter.verifyIdToken(idToken);
-//         } catch (err: any) {
-//             logError("Google ID Token verification failed", { error: err?.message });
-//             throw HttpError.Unauthorized("Invalid Google ID token");
-//         }
-//     }
-//     protect(options?: { required?: boolean }) {
-//         const required = options?.required ?? true;
-//         return (req: Request, res: Response, next: NextFunction) => {
-//             const header = req.headers["authorization"] || req.headers["Authorization"];
-//             if (!header) {
-//                 if (required) {
-//                     logWarn("Missing Authorization header", {
-//                         path: req.path,
-//                         method: req.method
-//                     });
-//                     return next(HttpError.Unauthorized("Missing Authorization header"));
-//                 }
-//                 return next();
-//             }
-//             const [type, token] = String(header).split(" ");
-//             if (type !== "Bearer" || !token) {
-//                 logWarn("Invalid Authorization header", {
-//                     path: req.path,
-//                     method: req.method
-//                 });
-//                 return next(HttpError.Unauthorized("Invalid Authorization header"));
-//             }
-//             try {
-//                 const decoded = this.verify(token);
-//                 (req as any).auth = decoded;
-//                 return next();
-//             } catch (err: any) {
-//                 logError("JWT verify failed", {
-//                     error: err?.message,
-//                     path: req.path,
-//                     method: req.method
-//                 });
-//                 return next(HttpError.Unauthorized("Invalid or expired token"));
-//             }
-//         };
-//     }
-// }
-// src/managers/AuthManager.ts - FIXED
 const JWTAdapter_js_1 = require("../adapters/JWTAdapter.js");
 const GoogleAdapter_js_1 = require("../adapters/GoogleAdapter.js");
 const AdapterError_js_1 = require("../core/errors/AdapterError.js");
 const HttpError_js_1 = require("../core/errors/HttpError.js");
-// import { logError, logWarn, logInfo } from "../logging";
 const logging_1 = require("../logging");
 class AuthManager {
     constructor(opts) {
@@ -135,11 +50,9 @@ class AuthManager {
         const roles = options?.roles;
         return (req, res, next) => {
             const header = req.headers["authorization"];
-            // If auth is not required, skip authentication
             if (!required && !header) {
                 return next();
             }
-            // If auth is required but no header
             if (!header) {
                 logging_1.logger.warn("Missing Authorization header", {
                     path: req.path,
@@ -147,7 +60,6 @@ class AuthManager {
                 });
                 return next(HttpError_js_1.HttpError.Unauthorized("Missing Authorization header"));
             }
-            // Parse Bearer token
             const [type, token] = String(header).split(" ");
             if (type !== "Bearer" || !token) {
                 logging_1.logger.warn("Invalid Authorization header", {
@@ -161,7 +73,7 @@ class AuthManager {
                 const decoded = this.verify(token);
                 // Attach to request
                 req.auth = decoded;
-                req.user = decoded; // Common pattern
+                req.user = decoded;
                 // Role-based authorization
                 if (roles && roles.length > 0) {
                     const userRole = decoded.role || decoded.roles?.[0];

package/dist/managers/AuthManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthManager.js","sourceRoot":"","sources":["../../src/managers/AuthManager.ts"],"names":[],"mappings":";AAAA,0DAA0D;AAC1D,gEAAgE;AAChE,iEAAiE;AACjE,4DAA4D;AAC5D,6DAA6D;AAC7D,2DAA2D;;;AAE3D,iCAAiC;AACjC,yBAAyB;AACzB,kDAAkD;AAClD,2CAA2C;AAC3C,IAAI;AAEJ,6BAA6B;AAC7B,sCAAsC;AACtC,6CAA6C;AAE7C,uCAAuC;AACvC,+BAA+B;AAC/B,2EAA2E;AAE3E,8CAA8C;AAE9C,6CAA6C;AAC7C,sCAAsC;AACtC,yDAAyD;AACzD,cAAc;AAEd,qCAAqC;AACrC,2EAA2E;AAC3E,gDAAgD;AAChD,YAAY;AACZ,QAAQ;AAER,yEAAyE;AACzE,sCAAsC;AACtC,yDAAyD;AACzD,QAAQ;AAER,8BAA8B;AAC9B,wCAAwC;AACxC,gDAAgD;AAChD,QAAQ;AAER,mDAAmD;AACnD,mCAAmC;AACnC,uEAAuE;AAEvE,oDAAoD;AAEpD,gBAAgB;AAChB,sEAAsE;AACtE,+BAA+B;AAC/B,wFAAwF;AACxF,uEAAuE;AACvE,YAAY;AACZ,QAAQ;AAER,kDAAkD;AAClD,sDAAsD;AAEtD,wEAAwE;AACxE,2FAA2F;AAE3F,6BAA6B;AAC7B,kCAAkC;AAClC,gEAAgE;AAChE,0CAA0C;AAC1C,6CAA6C;AAC7C,0BAA0B;AAC1B,2FAA2F;AAC3F,oBAAoB;AACpB,iCAAiC;AACjC,gBAAgB;AAEhB,+DAA+D;AAE/D,iDAAiD;AACjD,4DAA4D;AAC5D,sCAAsC;AACtC,yCAAyC;AACzC,sBAAsB;AACtB,uFAAuF;AACvF,gBAAgB;AAEhB,oBAAoB;AACpB,sDAAsD;AACtD,+CAA+C;AAC/C,iCAAiC;AACjC,mCAAmC;AACnC,kDAAkD;AAClD,2CAA2C;AAC3C,sCAAsC;AACtC,yCAAyC;AACzC,sBAAsB;AACtB,mFAAmF;AACnF,gBAAgB;AAChB,aAAa;AACb,QAAQ;AACR,IAAI;AAIJ,sCAAsC;AACtC,6DAAuD;AACvD,mEAA6D;AAC7D,oEAA8D;AAC9D,8DAAwD;AAExD,2DAA2D;AAC3D,wCAAoC;AAcpC,MAAa,WAAW;IAIpB,YAAY,IAAiB;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAY,CAAC,mCAAmC,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,gBAAM,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;QAC9F,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAEvC,IAAI,CAAC,UAAU,GAAG,IAAI,0BAAU,CAAC;YAC7B,MAAM,EAAE,IAAI,CAAC,SAAS;YACtB,SAAS,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;SACvC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,GAAG,IAAI,gCAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5D,gBAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAuD;QACzE,gBAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,KAAa;QAChB,gBAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACrC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,8BAAY,CAAC,+BAA+B,CAAC,CAAC;QAC5D,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAE7C,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7E,MAAM,wBAAS,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;IAED,OAAO,CAAC,OAAwB;QAC5B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAE7B,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACvD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAE5C,+CAA+C;YAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvB,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAED,oCAAoC;YACpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,gBAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACxC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAED,qBAAqB;YACrB,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,gBAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACxC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,CAAC;gBACD,aAAa;gBACb,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAEnC,oBAAoB;gBACnB,GAAW,CAAC,IAAI,GAAG,OAAO,CAAC;gBAC3B,GAAW,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,iBAAiB;gBAE9C,2BAA2B;gBAC3B,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAI,OAAe,CAAC,IAAI,IAAK,OAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;oBACtE,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACzC,gBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;4BACpC,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,aAAa,EAAE,KAAK;4BACpB,QAAQ;yBACX,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAC;oBACjE,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,gBAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;oBAC9B,KAAK,EAAE,GAAG,EAAE,OAAO;oBACnB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC,CAAC;IACN,CAAC;CACJ;AAlHD,kCAkHC","sourcesContent":["// import { JWTAdapter } from \"../adapters/JWTAdapter.js\";\r\n// import { GoogleAdapter } from \"../adapters/GoggleAdapter.js\";\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n// import { HttpError } from \"../core/errors/HttpErrror.js\";\r\n// import { Request, Response, NextFunction } from \"express\";\r\n// import { logError, logWarn, logInfo } from \"../logging\";\r\n\r\n// export interface AuthOptions {\r\n//     jwtSecret: string;\r\n//     jwtExpiresIn?: string | number | undefined;\r\n//     googleClientId?: string | undefined;\r\n// }\r\n\r\n// export class AuthManager {\r\n//     private jwtAdapter: JWTAdapter;\r\n//     private googleAdapter?: GoogleAdapter;\r\n\r\n//     constructor(opts: AuthOptions) {\r\n//         if (!opts.jwtSecret)\r\n//             throw new AdapterError(\"jwtSecret required in AuthOptions\");\r\n\r\n//         logInfo(\"AuthManager initialized\");\r\n\r\n//         this.jwtAdapter = new JWTAdapter({\r\n//             secret: opts.jwtSecret,\r\n//             expiresIn: opts.jwtExpiresIn ?? undefined,\r\n//         });\r\n\r\n//         if (opts.googleClientId) {\r\n//             this.googleAdapter = new GoogleAdapter(opts.googleClientId);\r\n//             logInfo(\"GoogleAdapter enabled\");\r\n//         }\r\n//     }\r\n\r\n//     sign(payload: object, options?: { expiresIn?: string | number }) {\r\n//         logInfo(\"JWT Sign called\");\r\n//         return this.jwtAdapter.sign(payload, options);\r\n//     }\r\n\r\n//     verify(token: string) {\r\n//         logInfo(\"JWT Verify called\");\r\n//         return this.jwtAdapter.verify(token);\r\n//     }\r\n\r\n//     async verifyGoogleIdToken(idToken: string) {\r\n//         if (!this.googleAdapter)\r\n//             throw new AdapterError(\"GoogleAdapter not configured.\");\r\n\r\n//         logInfo(\"Google ID Token verify called\");\r\n\r\n//         try {\r\n//             return await this.googleAdapter.verifyIdToken(idToken);\r\n//         } catch (err: any) {\r\n//             logError(\"Google ID Token verification failed\", { error: err?.message });\r\n//             throw HttpError.Unauthorized(\"Invalid Google ID token\");\r\n//         }\r\n//     }\r\n\r\n//     protect(options?: { required?: boolean }) {\r\n//         const required = options?.required ?? true;\r\n\r\n//         return (req: Request, res: Response, next: NextFunction) => {\r\n//             const header = req.headers[\"authorization\"] || req.headers[\"Authorization\"];\r\n\r\n//             if (!header) {\r\n//                 if (required) {\r\n//                     logWarn(\"Missing Authorization header\", {\r\n//                         path: req.path,\r\n//                         method: req.method\r\n//                     });\r\n//                     return next(HttpError.Unauthorized(\"Missing Authorization header\"));\r\n//                 }\r\n//                 return next();\r\n//             }\r\n\r\n//             const [type, token] = String(header).split(\" \");\r\n\r\n//             if (type !== \"Bearer\" || !token) {\r\n//                 logWarn(\"Invalid Authorization header\", {\r\n//                     path: req.path,\r\n//                     method: req.method\r\n//                 });\r\n//                 return next(HttpError.Unauthorized(\"Invalid Authorization header\"));\r\n//             }\r\n\r\n//             try {\r\n//                 const decoded = this.verify(token);\r\n//                 (req as any).auth = decoded;\r\n//                 return next();\r\n//             } catch (err: any) {\r\n//                 logError(\"JWT verify failed\", {\r\n//                     error: err?.message,\r\n//                     path: req.path,\r\n//                     method: req.method\r\n//                 });\r\n//                 return next(HttpError.Unauthorized(\"Invalid or expired token\"));\r\n//             }\r\n//         };\r\n//     }\r\n// }\r\n\r\n\r\n\r\n// src/managers/AuthManager.ts - FIXED\r\nimport { JWTAdapter } from \"../adapters/JWTAdapter.js\";\r\nimport { GoogleAdapter } from \"../adapters/GoogleAdapter.js\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { HttpError } from \"../core/errors/HttpError.js\";\r\nimport { Request, Response, NextFunction } from \"express\";\r\n// import { logError, logWarn, logInfo } from \"../logging\";\r\nimport { logger } from \"../logging\";\r\n\r\n\r\nexport interface AuthOptions {\r\n    jwtSecret: string;\r\n    jwtExpiresIn?: string | number;\r\n    googleClientId?: string;\r\n}\r\n\r\nexport interface ProtectOptions {\r\n    required?: boolean;\r\n    roles?: string[];\r\n}\r\n\r\nexport class AuthManager {\r\n    private jwtAdapter: JWTAdapter;\r\n    private googleAdapter?: GoogleAdapter;\r\n\r\n    constructor(opts: AuthOptions) {\r\n        if (!opts.jwtSecret) {\r\n            throw new AdapterError(\"jwtSecret required in AuthOptions\");\r\n        }\r\n\r\n        if (opts.jwtSecret.length < 32) {\r\n            logger.warn(\"⚠ JWT secret is less than 32 characters - consider using a stronger secret\");\r\n        }\r\n\r\n        logger.info(\"AuthManager initialized\");\r\n\r\n        this.jwtAdapter = new JWTAdapter({\r\n            secret: opts.jwtSecret,\r\n            expiresIn: opts.jwtExpiresIn ?? \"1d\",\r\n        });\r\n\r\n        if (opts.googleClientId) {\r\n            this.googleAdapter = new GoogleAdapter(opts.googleClientId);\r\n            logger.info(\"GoogleAdapter enabled\");\r\n        }\r\n    }\r\n\r\n    sign(payload: object, options?: { expiresIn?: string | number, jti?: string }) {\r\n        logger.info(\"JWT Sign called\");\r\n        return this.jwtAdapter.sign(payload, options);\r\n    }\r\n\r\n    verify(token: string) {\r\n        logger.info(\"JWT Verify called\");\r\n        return this.jwtAdapter.verify(token);\r\n    }\r\n\r\n    async verifyGoogleIdToken(idToken: string) {\r\n        if (!this.googleAdapter) {\r\n            throw new AdapterError(\"GoogleAdapter not configured.\");\r\n        }\r\n\r\n        logger.info(\"Google ID Token verify called\");\r\n\r\n        try {\r\n            return await this.googleAdapter.verifyIdToken(idToken);\r\n        } catch (err: any) {\r\n            logger.error(\"Google ID Token verification failed\", { error: err?.message });\r\n            throw HttpError.Unauthorized(\"Invalid Google ID token\");\r\n        }\r\n    }\r\n\r\n    protect(options?: ProtectOptions) {\r\n        const required = options?.required ?? true;\r\n        const roles = options?.roles;\r\n\r\n        return (req: Request, res: Response, next: NextFunction) => {\r\n            const header = req.headers[\"authorization\"];\r\n\r\n            // If auth is not required, skip authentication\r\n            if (!required && !header) {\r\n                return next();\r\n            }\r\n\r\n            // If auth is required but no header\r\n            if (!header) {\r\n                logger.warn(\"Missing Authorization header\", {\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Missing Authorization header\"));\r\n            }\r\n\r\n            // Parse Bearer token\r\n            const [type, token] = String(header).split(\" \");\r\n            if (type !== \"Bearer\" || !token) {\r\n                logger.warn(\"Invalid Authorization header\", {\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Invalid Authorization header\"));\r\n            }\r\n\r\n            try {\r\n                // Verify JWT\r\n                const decoded = this.verify(token);\r\n                \r\n                // Attach to request\r\n                (req as any).auth = decoded;\r\n                (req as any).user = decoded; // Common pattern\r\n                \r\n                // Role-based authorization\r\n                if (roles && roles.length > 0) {\r\n                    const userRole = (decoded as any).role || (decoded as any).roles?.[0];\r\n                    if (!userRole || !roles.includes(userRole)) {\r\n                        logger.warn(\"Insufficient permissions\", {\r\n                            path: req.path,\r\n                            requiredRoles: roles,\r\n                            userRole\r\n                        });\r\n                        return next(HttpError.Forbidden(\"Insufficient permissions\"));\r\n                    }\r\n                }\r\n                \r\n                return next();\r\n            } catch (err: any) {\r\n                logger.error(\"JWT verify failed\", {\r\n                    error: err?.message,\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Invalid or expired token\"));\r\n            }\r\n        };\r\n    }\r\n}"]}
+{"version":3,"file":"AuthManager.js","sourceRoot":"","sources":["../../src/managers/AuthManager.ts"],"names":[],"mappings":";;;AAAA,6DAAuD;AACvD,mEAA6D;AAC7D,oEAA8D;AAC9D,8DAAwD;AAExD,wCAAoC;AAcpC,MAAa,WAAW;IAIpB,YAAY,IAAiB;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAY,CAAC,mCAAmC,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,gBAAM,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;QAC9F,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAEvC,IAAI,CAAC,UAAU,GAAG,IAAI,0BAAU,CAAC;YAC7B,MAAM,EAAE,IAAI,CAAC,SAAS;YACtB,SAAS,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;SACvC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,GAAG,IAAI,gCAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5D,gBAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAuD;QACzE,gBAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,KAAa;QAChB,gBAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACrC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,8BAAY,CAAC,+BAA+B,CAAC,CAAC;QAC5D,CAAC;QAED,gBAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAE7C,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7E,MAAM,wBAAS,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;IAED,OAAO,CAAC,OAAwB;QAC5B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAE7B,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACvD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAG5C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvB,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAGD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,gBAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACxC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAGD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,gBAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACxC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,CAAC;gBAED,aAAa;gBACb,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAEnC,oBAAoB;gBACnB,GAAW,CAAC,IAAI,GAAG,OAAO,CAAC;gBAC3B,GAAW,CAAC,IAAI,GAAG,OAAO,CAAC;gBAE5B,2BAA2B;gBAC3B,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAI,OAAe,CAAC,IAAI,IAAK,OAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;oBACtE,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACzC,gBAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;4BACpC,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,aAAa,EAAE,KAAK;4BACpB,QAAQ;yBACX,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAC;oBACjE,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,gBAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;oBAC9B,KAAK,EAAE,GAAG,EAAE,OAAO;oBACnB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,wBAAS,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC,CAAC;IACN,CAAC;CACJ;AAnHD,kCAmHC","sourcesContent":["import { JWTAdapter } from \"../adapters/JWTAdapter.js\";\r\nimport { GoogleAdapter } from \"../adapters/GoogleAdapter.js\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\nimport { HttpError } from \"../core/errors/HttpError.js\";\r\nimport { Request, Response, NextFunction } from \"express\";\r\nimport { logger } from \"../logging\";\r\n\r\n\r\nexport interface AuthOptions {\r\n    jwtSecret: string;\r\n    jwtExpiresIn?: string | number;\r\n    googleClientId?: string;\r\n}\r\n\r\nexport interface ProtectOptions {\r\n    required?: boolean;\r\n    roles?: string[];\r\n}\r\n\r\nexport class AuthManager {\r\n    private jwtAdapter: JWTAdapter;\r\n    private googleAdapter?: GoogleAdapter;\r\n\r\n    constructor(opts: AuthOptions) {\r\n        if (!opts.jwtSecret) {\r\n            throw new AdapterError(\"jwtSecret required in AuthOptions\");\r\n        }\r\n\r\n        if (opts.jwtSecret.length < 32) {\r\n            logger.warn(\"⚠ JWT secret is less than 32 characters - consider using a stronger secret\");\r\n        }\r\n\r\n        logger.info(\"AuthManager initialized\");\r\n\r\n        this.jwtAdapter = new JWTAdapter({\r\n            secret: opts.jwtSecret,\r\n            expiresIn: opts.jwtExpiresIn ?? \"1d\",\r\n        });\r\n\r\n        if (opts.googleClientId) {\r\n            this.googleAdapter = new GoogleAdapter(opts.googleClientId);\r\n            logger.info(\"GoogleAdapter enabled\");\r\n        }\r\n    }\r\n\r\n    sign(payload: object, options?: { expiresIn?: string | number, jti?: string }) {\r\n        logger.info(\"JWT Sign called\");\r\n        return this.jwtAdapter.sign(payload, options);\r\n    }\r\n\r\n    verify(token: string) {\r\n        logger.info(\"JWT Verify called\");\r\n        return this.jwtAdapter.verify(token);\r\n    }\r\n\r\n    async verifyGoogleIdToken(idToken: string) {\r\n        if (!this.googleAdapter) {\r\n            throw new AdapterError(\"GoogleAdapter not configured.\");\r\n        }\r\n\r\n        logger.info(\"Google ID Token verify called\");\r\n\r\n        try {\r\n            return await this.googleAdapter.verifyIdToken(idToken);\r\n        } catch (err: any) {\r\n            logger.error(\"Google ID Token verification failed\", { error: err?.message });\r\n            throw HttpError.Unauthorized(\"Invalid Google ID token\");\r\n        }\r\n    }\r\n\r\n    protect(options?: ProtectOptions) {\r\n        const required = options?.required ?? true;\r\n        const roles = options?.roles;\r\n\r\n        return (req: Request, res: Response, next: NextFunction) => {\r\n            const header = req.headers[\"authorization\"];\r\n\r\n            \r\n            if (!required && !header) {\r\n                return next();\r\n            }\r\n\r\n           \r\n            if (!header) {\r\n                logger.warn(\"Missing Authorization header\", {\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Missing Authorization header\"));\r\n            }\r\n\r\n          \r\n            const [type, token] = String(header).split(\" \");\r\n            if (type !== \"Bearer\" || !token) {\r\n                logger.warn(\"Invalid Authorization header\", {\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Invalid Authorization header\"));\r\n            }\r\n\r\n            try {\r\n\r\n                // Verify JWT\r\n                const decoded = this.verify(token);\r\n                \r\n                // Attach to request\r\n                (req as any).auth = decoded;\r\n                (req as any).user = decoded; \r\n                \r\n                // Role-based authorization\r\n                if (roles && roles.length > 0) {\r\n                    const userRole = (decoded as any).role || (decoded as any).roles?.[0];\r\n                    if (!userRole || !roles.includes(userRole)) {\r\n                        logger.warn(\"Insufficient permissions\", {\r\n                            path: req.path,\r\n                            requiredRoles: roles,\r\n                            userRole\r\n                        });\r\n                        return next(HttpError.Forbidden(\"Insufficient permissions\"));\r\n                    }\r\n                }\r\n                \r\n                return next();\r\n            } catch (err: any) {\r\n                logger.error(\"JWT verify failed\", {\r\n                    error: err?.message,\r\n                    path: req.path,\r\n                    method: req.method\r\n                });\r\n                return next(HttpError.Unauthorized(\"Invalid or expired token\"));\r\n            }\r\n        };\r\n    }\r\n}"]}

package/dist/managers/CorsManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CorsManager.d.ts","sourceRoot":"","sources":["../../src/managers/CorsManager.ts"],"names":[],"mappings":"AAwBA,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB,qBAAa,WAAW;IAEpB,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG;kBAaZ,CAAN;;;iBAIE,CAAV;CAUD"}
+{"version":3,"file":"CorsManager.d.ts","sourceRoot":"","sources":["../../src/managers/CorsManager.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB,qBAAa,WAAW;IAEpB,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG;kBA2B6O,CAAC;;;iBAAmH,CAAC;CAA7X"}

package/dist/managers/CorsManager.js

@@ -1,27 +1,9 @@
 "use strict";
-// import cors from "cors";
-// import { logger } from "../logging";
-// import { AdapterError } from "../core/errors/AdapterError.js";
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CorsManager = void 0;
-// export class CorsManager {
-//     middleware(options?: any) {
-//         try {
-//             // options = undefined → use default CORS
-//             return options ? cors(options) : cors();
-//         } catch (err: any) {
-//             logger.error("❌ CORS Manager: failed to create CORS middleware", {
-//                 error: err?.message || err,
-//                 options
-//             });
-//             throw new AdapterError("CORS middleware initialization failed.");
-//         }
-//     }
-// }
-// src/managers/CorsManager.ts - IMPROVED
 const cors_1 = __importDefault(require("cors"));
 const logging_1 = require("../logging");
 const AdapterError_js_1 = require("../core/errors/AdapterError.js");
@@ -33,7 +15,7 @@ class CorsManager {
                 methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
                 allowedHeaders: ['Content-Type', 'Authorization'],
                 credentials: false,
-                maxAge: 86400 // 24 hours
+                maxAge: 86400
             };
             const finalOptions = options ? { ...defaultOptions, ...options } : defaultOptions;
             logging_1.logger.debug("🔧 CORS configured", {

package/dist/managers/CorsManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"CorsManager.js","sourceRoot":"","sources":["../../src/managers/CorsManager.ts"],"names":[],"mappings":";AAAA,2BAA2B;AAC3B,uCAAuC;AACvC,iEAAiE;;;;;;AAEjE,6BAA6B;AAE7B,kCAAkC;AAClC,gBAAgB;AAChB,wDAAwD;AACxD,uDAAuD;AAEvD,+BAA+B;AAC/B,iFAAiF;AACjF,8CAA8C;AAC9C,0BAA0B;AAC1B,kBAAkB;AAClB,gFAAgF;AAChF,YAAY;AACZ,QAAQ;AACR,IAAI;AAIJ,yCAAyC;AACzC,gDAAwB;AACxB,wCAAoC;AACpC,oEAA8D;AAE9D,MAAa,WAAW;IAEpB,UAAU,CAAC,OAAa;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;gBAC7D,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;gBACjD,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,WAAW;aAC5B,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;YAElF,gBAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,YAAY,CAAC,OAAO;aAChC,CAAC,CAAC;YAEH,OAAO,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC;QAE9B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;gBAC7D,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;gBAC1B,OAAO;aACV,CAAC,CAAC;YACH,MAAM,IAAI,8BAAY,CAAC,wCAAwC,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;CACJ;AA7BD,kCA6BC","sourcesContent":["// import cors from \"cors\";\r\n// import { logger } from \"../logging\";\r\n// import { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\n// export class CorsManager {\r\n\r\n//     middleware(options?: any) {\r\n//         try {\r\n//             // options = undefined → use default CORS\r\n//             return options ? cors(options) : cors();\r\n\r\n//         } catch (err: any) {\r\n//             logger.error(\"❌ CORS Manager: failed to create CORS middleware\", {\r\n//                 error: err?.message || err,\r\n//                 options\r\n//             });\r\n//             throw new AdapterError(\"CORS middleware initialization failed.\");\r\n//         }\r\n//     }\r\n// }\r\n\r\n\r\n\r\n// src/managers/CorsManager.ts - IMPROVED\r\nimport cors from \"cors\";\r\nimport { logger } from \"../logging\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\nexport class CorsManager {\r\n    \r\n    middleware(options?: any) {\r\n        try {\r\n            const defaultOptions = {\r\n                origin: '*',\r\n                methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\r\n                allowedHeaders: ['Content-Type', 'Authorization'],\r\n                credentials: false,\r\n                maxAge: 86400 // 24 hours\r\n            };\r\n            \r\n            const finalOptions = options ? { ...defaultOptions, ...options } : defaultOptions;\r\n            \r\n            logger.debug(\"🔧 CORS configured\", {\r\n                origin: finalOptions.origin,\r\n                methods: finalOptions.methods\r\n            });\r\n            \r\n            return cors(finalOptions);\r\n            \r\n        } catch (err: any) {\r\n            logger.error(\"❌ CORS Manager: failed to create CORS middleware\", {\r\n                error: err?.message || err,\r\n                options\r\n            });\r\n            throw new AdapterError(\"CORS middleware initialization failed.\");\r\n        }\r\n    }\r\n}"]}
+{"version":3,"file":"CorsManager.js","sourceRoot":"","sources":["../../src/managers/CorsManager.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AACxB,wCAAoC;AACpC,oEAA8D;AAE9D,MAAa,WAAW;IAEpB,UAAU,CAAC,OAAa;QACpB,IAAI,CAAC;YACD,MAAM,cAAc,GAAG;gBACnB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;gBAC7D,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;gBACjD,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,KAAK;aAChB,CAAC;YAEF,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;YAElF,gBAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,YAAY,CAAC,OAAO;aAChC,CAAC,CAAC;YAEH,OAAO,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC;QAE9B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,gBAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;gBAC7D,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG;gBAC1B,OAAO;aACV,CAAC,CAAC;YACH,MAAM,IAAI,8BAAY,CAAC,wCAAwC,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;CACJ;AA7BD,kCA6BC","sourcesContent":["import cors from \"cors\";\r\nimport { logger } from \"../logging\";\r\nimport { AdapterError } from \"../core/errors/AdapterError.js\";\r\n\r\nexport class CorsManager {\r\n    \r\n    middleware(options?: any) {\r\n        try {\r\n            const defaultOptions = {\r\n                origin: '*',\r\n                methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\r\n                allowedHeaders: ['Content-Type', 'Authorization'],\r\n                credentials: false,\r\n                maxAge: 86400\r\n            };\r\n            \r\n            const finalOptions = options ? { ...defaultOptions, ...options } : defaultOptions;\r\n            \r\n            logger.debug(\"🔧 CORS configured\", {\r\n                origin: finalOptions.origin,\r\n                methods: finalOptions.methods\r\n            });\r\n            \r\n            return cors(finalOptions);\r\n            \r\n        } catch (err: any) {\r\n            logger.error(\"❌ CORS Manager: failed to create CORS middleware\", {\r\n                error: err?.message || err,\r\n                options\r\n            });\r\n            throw new AdapterError(\"CORS middleware initialization failed.\");\r\n        }\r\n    }\r\n}"]}

package/dist/managers/HashManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"HashManager.d.ts","sourceRoot":"","sources":["../../src/managers/HashManager.ts"],"names":[],"mappings":"AA8RA,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAGjE,UAAU,WAAW;IACjB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAE3D;AAED,MAAM,WAAW,UAAU;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;CACzB;AAED,qBAAa,WAAW;IACpB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,cAAc,CAAc;IACpC,OAAO,CAAC,eAAe,CAAqB;gBAGxC,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,EACjC,cAAc,EAAE,WAAW,EAC3B,eAAe,EAAE,WAAW,GAAG,IAAI;IAOjC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IA6C/E,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CA4BhE"}
+{"version":3,"file":"HashManager.d.ts","sourceRoot":"","sources":["../../src/managers/HashManager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAGjE,UAAU,WAAW;IACjB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,UAAU;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;CACzB;AAED,qBAAa,WAAW;IACpB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,cAAc,CAAc;IACpC,OAAO,CAAC,eAAe,CAAqB;gBAGxC,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,EACjC,cAAc,EAAE,WAAW,EAC3B,eAAe,EAAE,WAAW,GAAG,IAAI;IAOjC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IA6C/E,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CA4BhE"}