payload-guard-filter 1.4.0 → 1.5.0

package/README.md

@@ -115,6 +115,16 @@ Creates a string builder with chained constraints:
 
 ---
 
+## 🛡️ "Never Crash" Policy
+
+Payload Guard is designed for mission-critical enterprise environments where uptime is non-negotiable.
+
+- **Circular Reference Safety**: Automatically detects and handles circular objects without infinite loops or stack overflows.
+- **Hook Isolation**: Custom `.transform()` and `.validate()` callbacks are wrapped in internal try/catch blocks. If your code fails, the library logs the error and safely continues using fallback values.
+- **Middleware Fail-Open**: If internal filtering logic hits an unexpected edge case, `failOpen: true` ensures the original request/response still reaches its destination.
+
+---
+
 ## ⚡ Performance
 
 | Benchmark | ops/sec | avg (ms) |

package/dist/core/clone.d.ts

@@ -2,7 +2,7 @@
  * Deep clone utility that avoids mutating original objects
  * Uses structuredClone when available, falls back to JSON
  */
-export declare function deepClone<T>(value: T): T;
+export declare function deepClone<T>(value: T, seen?: WeakSet<object>): T;
 /**
  * Shallow clone for performance when deep clone isn't needed
  */

package/dist/core/clone.js

@@ -6,33 +6,42 @@ exports.shallowClone = shallowClone;
  * Deep clone utility that avoids mutating original objects
  * Uses structuredClone when available, falls back to JSON
  */
-function deepClone(value) {
+function deepClone(value, seen = new WeakSet()) {
     if (value === null || value === undefined)
         return value;
     if (typeof value !== 'object')
         return value;
+    // Circular ref check
+    if (seen.has(value)) {
+        return value; // Return as-is if circular
+    }
     // Try structuredClone first (Node 17+, modern browsers)
     if (typeof structuredClone === 'function') {
         try {
             return structuredClone(value);
         }
         catch {
-            // Fall through to JSON method
+            // Fall through
         }
     }
-    // Fallback to JSON parse/stringify
+    // Handle Arrays
+    if (Array.isArray(value)) {
+        seen.add(value);
+        return value.map(item => deepClone(item, seen));
+    }
+    // Handle Objects
     try {
-        return JSON.parse(JSON.stringify(value));
+        seen.add(value);
+        const result = {};
+        for (const key in value) {
+            if (Object.prototype.hasOwnProperty.call(value, key)) {
+                result[key] = deepClone(value[key], seen);
+            }
+        }
+        return result;
     }
     catch {
-        // If deep clone fails (circular refs or other), return a shallow clone
-        // to avoid mutating the original object downstream.
-        try {
-            return shallowClone(value);
-        }
-        catch {
-            return value;
-        }
+        return value;
     }
 }
 /**

package/dist/core/compiler.js

@@ -62,7 +62,7 @@ function compile(shape, opts = {}) {
                     }
                     catch (e) {
                         if (opts.dev)
-                            (opts.logger ?? console.warn)('[payload-guard] transform error: ' + String(e));
+                            (opts.logger ?? console.warn)('[payload-guard] transform error: ' + String(e), 'warn');
                     }
                 }
             }
@@ -114,7 +114,7 @@ function compile(shape, opts = {}) {
                 }
                 catch (e) {
                     if (opts.dev) {
-                        (opts.logger ?? console.warn)('[payload-guard] array item filter error: ' + String(e));
+                        (opts.logger ?? console.warn)('[payload-guard] array item filter error: ' + String(e), 'warn');
                     }
                     return undefined;
                 }
@@ -158,7 +158,7 @@ function compile(shape, opts = {}) {
                     }
                     catch (e) {
                         if (opts.dev)
-                            (opts.logger ?? console.warn)('[payload-guard] redact hook error: ' + String(e));
+                            (opts.logger ?? console.warn)('[payload-guard] redact hook error: ' + String(e), 'warn');
                     }
                 }
                 result[key] = outVal;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "payload-guard-filter",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "Lightweight, zero-dependency shape-based payload filtering and sanitization for Node.js and browser",
   "main": "dist/index.js",
   "module": "dist/index.js",