raffel 0.1.2

package/dist/middleware/http/compression.js

@@ -0,0 +1,264 @@
+/**
+ * Compression Middleware
+ *
+ * HTTP-specific middleware for response compression.
+ * Supports gzip, deflate, and brotli encodings.
+ */
+import { gzipSync, deflateSync, brotliCompressSync, constants } from 'node:zlib';
+/**
+ * Default compression configuration
+ */
+export const defaultCompressionConfig = {
+    threshold: 1024, // 1KB minimum
+    encodings: ['br', 'gzip', 'deflate'],
+    contentTypes: [
+        'text/plain',
+        'text/html',
+        'text/css',
+        'text/javascript',
+        'application/json',
+        'application/javascript',
+        'application/xml',
+        'application/xhtml+xml',
+        'image/svg+xml',
+    ],
+    level: 6,
+};
+/**
+ * Content types that should never be compressed
+ */
+const SKIP_CONTENT_TYPES = [
+    'image/jpeg',
+    'image/png',
+    'image/gif',
+    'image/webp',
+    'video/',
+    'audio/',
+    'application/zip',
+    'application/gzip',
+    'application/x-gzip',
+    'application/x-bzip2',
+    'application/x-7z-compressed',
+    'application/x-rar-compressed',
+];
+/**
+ * Check if content type should be compressed
+ */
+function shouldCompress(contentType, allowedTypes) {
+    if (!contentType)
+        return false;
+    // Check skip list first
+    for (const skip of SKIP_CONTENT_TYPES) {
+        if (contentType.startsWith(skip)) {
+            return false;
+        }
+    }
+    // Check allowed types
+    for (const allowed of allowedTypes) {
+        if (contentType.startsWith(allowed)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Get the best encoding based on Accept-Encoding header and config
+ */
+function getBestEncoding(acceptEncoding, preferredEncodings) {
+    if (!acceptEncoding)
+        return null;
+    const accepted = acceptEncoding.toLowerCase();
+    for (const encoding of preferredEncodings) {
+        if (accepted.includes(encoding)) {
+            return encoding;
+        }
+    }
+    return null;
+}
+/**
+ * Compress data with the specified encoding
+ */
+function compress(data, encoding, level) {
+    switch (encoding) {
+        case 'gzip':
+            return gzipSync(data, { level });
+        case 'deflate':
+            return deflateSync(data, { level });
+        case 'br':
+            return brotliCompressSync(data, {
+                params: {
+                    [constants.BROTLI_PARAM_QUALITY]: level,
+                },
+            });
+        default:
+            return data;
+    }
+}
+/**
+ * Compress a buffer if it meets the criteria
+ *
+ * @example
+ * ```typescript
+ * const body = Buffer.from(JSON.stringify(largeObject))
+ * const result = compressBuffer(body, 'application/json', 'gzip, deflate', {
+ *   threshold: 1024,
+ *   level: 6,
+ * })
+ *
+ * if (result) {
+ *   res.setHeader('Content-Encoding', result.encoding)
+ *   res.setHeader('Content-Length', result.compressedSize)
+ *   res.end(result.data)
+ * } else {
+ *   res.end(body)
+ * }
+ * ```
+ */
+export function compressBuffer(data, contentType, acceptEncoding, config = defaultCompressionConfig) {
+    const { threshold = 1024, encodings = ['br', 'gzip', 'deflate'], contentTypes = defaultCompressionConfig.contentTypes, level = 6, } = config;
+    // Check if size meets threshold
+    if (data.length < threshold) {
+        return null;
+    }
+    // Check if content type should be compressed
+    if (!shouldCompress(contentType, contentTypes)) {
+        return null;
+    }
+    // Get best encoding
+    const encoding = getBestEncoding(acceptEncoding, encodings);
+    if (!encoding) {
+        return null;
+    }
+    // Compress
+    const compressed = compress(data, encoding, level);
+    // Only use compression if it actually reduces size
+    if (compressed.length >= data.length) {
+        return null;
+    }
+    return {
+        data: compressed,
+        encoding,
+        originalSize: data.length,
+        compressedSize: compressed.length,
+        ratio: compressed.length / data.length,
+    };
+}
+/**
+ * Create a compression middleware that wraps response.end()
+ *
+ * This is a more invasive approach that intercepts the response.
+ * Use with caution and only when you control the full request lifecycle.
+ *
+ * @example
+ * ```typescript
+ * const compress = createCompressionMiddleware()
+ *
+ * function handleRequest(req, res) {
+ *   compress(req, res)
+ *
+ *   // Your normal response handling
+ *   res.setHeader('Content-Type', 'application/json')
+ *   res.end(JSON.stringify(data)) // Will be compressed automatically
+ * }
+ * ```
+ */
+export function createCompressionMiddleware(config = defaultCompressionConfig) {
+    return (req, res) => {
+        // Set Vary header to indicate content may vary by encoding
+        const existingVary = res.getHeader('Vary');
+        if (existingVary) {
+            if (typeof existingVary === 'string' && !existingVary.includes('Accept-Encoding')) {
+                res.setHeader('Vary', `${existingVary}, Accept-Encoding`);
+            }
+        }
+        else {
+            res.setHeader('Vary', 'Accept-Encoding');
+        }
+        // Store original end method
+        const originalEnd = res.end.bind(res);
+        const acceptEncoding = req.headers['accept-encoding'];
+        // Override end method
+        res.end = function (chunk, encodingOrCallback, callback) {
+            // Handle different overload signatures
+            let data;
+            let cb;
+            if (typeof encodingOrCallback === 'function') {
+                cb = encodingOrCallback;
+            }
+            else {
+                cb = callback;
+            }
+            // Convert chunk to buffer
+            if (chunk) {
+                if (Buffer.isBuffer(chunk)) {
+                    data = chunk;
+                }
+                else if (typeof chunk === 'string') {
+                    data = Buffer.from(chunk, typeof encodingOrCallback === 'string' ? encodingOrCallback : 'utf-8');
+                }
+            }
+            // Check if we should compress
+            if (!data || data.length === 0) {
+                return originalEnd(chunk, encodingOrCallback, callback);
+            }
+            // Check cache-control no-transform
+            const cacheControl = res.getHeader('Cache-Control');
+            if (cacheControl && String(cacheControl).includes('no-transform')) {
+                return originalEnd(chunk, encodingOrCallback, callback);
+            }
+            // Check if already encoded
+            if (res.getHeader('Content-Encoding')) {
+                return originalEnd(chunk, encodingOrCallback, callback);
+            }
+            // Get content type
+            const contentType = res.getHeader('Content-Type');
+            // Try to compress
+            const result = compressBuffer(data, contentType, acceptEncoding, config);
+            if (result) {
+                res.setHeader('Content-Encoding', result.encoding);
+                res.setHeader('Content-Length', result.compressedSize);
+                // Remove Content-Length if it was set (we're changing the body)
+                // res.removeHeader('Content-Length')
+                return originalEnd(result.data, cb);
+            }
+            return originalEnd(chunk, encodingOrCallback, callback);
+        };
+        return;
+    };
+}
+/**
+ * Compress a response body manually
+ *
+ * Use this for more control over when and how compression happens.
+ *
+ * @example
+ * ```typescript
+ * const body = JSON.stringify(largeData)
+ * const result = compressResponse(req, res, body, 'application/json')
+ *
+ * if (result.compressed) {
+ *   // Headers already set, just end
+ *   res.end(result.body)
+ * } else {
+ *   res.setHeader('Content-Type', 'application/json')
+ *   res.end(body)
+ * }
+ * ```
+ */
+export function compressResponse(req, res, body, contentType, config = defaultCompressionConfig) {
+    const data = Buffer.isBuffer(body) ? body : Buffer.from(body);
+    const acceptEncoding = req.headers['accept-encoding'];
+    // Set Vary header
+    res.setHeader('Vary', 'Accept-Encoding');
+    const result = compressBuffer(data, contentType, acceptEncoding, config);
+    if (result) {
+        res.setHeader('Content-Encoding', result.encoding);
+        res.setHeader('Content-Length', result.compressedSize);
+        res.setHeader('Content-Type', contentType);
+        return { body: result.data, compressed: true };
+    }
+    res.setHeader('Content-Type', contentType);
+    res.setHeader('Content-Length', data.length);
+    return { body: data, compressed: false };
+}
+//# sourceMappingURL=compression.js.map

package/dist/middleware/http/compression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.js","sourceRoot":"","sources":["../../../src/middleware/http/compression.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAIhF;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IACzD,SAAS,EAAE,IAAI,EAAE,cAAc;IAC/B,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC;IACpC,YAAY,EAAE;QACZ,YAAY;QACZ,WAAW;QACX,UAAU;QACV,iBAAiB;QACjB,kBAAkB;QAClB,wBAAwB;QACxB,iBAAiB;QACjB,uBAAuB;QACvB,eAAe;KAChB;IACD,KAAK,EAAE,CAAC;CACT,CAAA;AAED;;GAEG;AACH,MAAM,kBAAkB,GAAG;IACzB,YAAY;IACZ,WAAW;IACX,WAAW;IACX,YAAY;IACZ,QAAQ;IACR,QAAQ;IACR,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IACrB,6BAA6B;IAC7B,8BAA8B;CAC/B,CAAA;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,WAA+B,EAC/B,YAAsB;IAEtB,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IAE9B,wBAAwB;IACxB,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CACtB,cAAkC,EAClC,kBAAyC;IAEzC,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAA;IAEhC,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,EAAE,CAAA;IAE7C,KAAK,MAAM,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QAC1C,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO,QAAQ,CAAA;QACjB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CACf,IAAY,EACZ,QAA6B,EAC7B,KAAa;IAEb,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAClC,KAAK,SAAS;YACZ,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACrC,KAAK,IAAI;YACP,OAAO,kBAAkB,CAAC,IAAI,EAAE;gBAC9B,MAAM,EAAE;oBACN,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,KAAK;iBACxC;aACF,CAAC,CAAA;QACJ;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC;AAkBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,WAA+B,EAC/B,cAAkC,EAClC,SAA4B,wBAAwB;IAEpD,MAAM,EACJ,SAAS,GAAG,IAAI,EAChB,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EACrC,YAAY,GAAG,wBAAwB,CAAC,YAAa,EACrD,KAAK,GAAG,CAAC,GACV,GAAG,MAAM,CAAA;IAEV,gCAAgC;IAChC,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,6CAA6C;IAC7C,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAA;IACb,CAAC;IAED,oBAAoB;IACpB,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;IAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAED,WAAW;IACX,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;IAElD,mDAAmD;IACnD,IAAI,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ;QACR,YAAY,EAAE,IAAI,CAAC,MAAM;QACzB,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,KAAK,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;KACvC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,2BAA2B,CACzC,SAA4B,wBAAwB;IAEpD,OAAO,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACnD,2DAA2D;QAC3D,MAAM,YAAY,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAClF,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,YAAY,mBAAmB,CAAC,CAAA;YAC3D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;QAC1C,CAAC;QAED,4BAA4B;QAC5B,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAuB,CAAA;QAE3E,sBAAsB;QACtB,GAAG,CAAC,GAAG,GAAG,UACR,KAAe,EACf,kBAAkD,EAClD,QAAqB;YAErB,uCAAuC;YACvC,IAAI,IAAwB,CAAA;YAC5B,IAAI,EAA4B,CAAA;YAEhC,IAAI,OAAO,kBAAkB,KAAK,UAAU,EAAE,CAAC;gBAC7C,EAAE,GAAG,kBAAkB,CAAA;YACzB,CAAC;iBAAM,CAAC;gBACN,EAAE,GAAG,QAAQ,CAAA;YACf,CAAC;YAED,0BAA0B;YAC1B,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC3B,IAAI,GAAG,KAAK,CAAA;gBACd,CAAC;qBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACrC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;gBAClG,CAAC;YACH,CAAC;YAED,8BAA8B;YAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,WAAW,CAAC,KAAK,EAAE,kBAAyB,EAAE,QAAQ,CAAC,CAAA;YAChE,CAAC;YAED,mCAAmC;YACnC,MAAM,YAAY,GAAG,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;YACnD,IAAI,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClE,OAAO,WAAW,CAAC,KAAK,EAAE,kBAAyB,EAAE,QAAQ,CAAC,CAAA;YAChE,CAAC;YAED,2BAA2B;YAC3B,IAAI,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACtC,OAAO,WAAW,CAAC,KAAK,EAAE,kBAAyB,EAAE,QAAQ,CAAC,CAAA;YAChE,CAAC;YAED,mBAAmB;YACnB,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,cAAc,CAAuB,CAAA;YAEvE,kBAAkB;YAClB,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAA;YAExE,IAAI,MAAM,EAAE,CAAC;gBACX,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;gBAClD,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,cAAc,CAAC,CAAA;gBAEtD,gEAAgE;gBAChE,qCAAqC;gBAErC,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YACrC,CAAC;YAED,OAAO,WAAW,CAAC,KAAK,EAAE,kBAAyB,EAAE,QAAQ,CAAC,CAAA;QAChE,CAAQ,CAAA;QAER,OAAM;IACR,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAoB,EACpB,GAAmB,EACnB,IAAqB,EACrB,WAAmB,EACnB,SAA4B,wBAAwB;IAEpD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7D,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAuB,CAAA;IAE3E,kBAAkB;IAClB,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IAExC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAA;IAExE,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;QAClD,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,cAAc,CAAC,CAAA;QACtD,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,CAAC,CAAA;QAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;IAChD,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,CAAC,CAAA;IAC1C,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IAC5C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;AAC1C,CAAC"}

package/dist/middleware/http/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * HTTP-Specific Middleware
+ *
+ * These middleware functions work only with HTTP transport.
+ * They operate at the request/response level, not the envelope level.
+ */
+export { applySecurityHeaders, createSecurityMiddleware, getSecurityPreset, mergeSecurityConfig, defaultSecurityConfig, strictSecurityConfig, relaxedSecurityConfig, } from './security.js';
+export { compressBuffer, compressResponse, createCompressionMiddleware, defaultCompressionConfig, } from './compression.js';
+export type { CompressionResult } from './compression.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/middleware/http/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/middleware/http/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,eAAe,CAAA;AAGtB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/middleware/http/index.js

@@ -0,0 +1,11 @@
+/**
+ * HTTP-Specific Middleware
+ *
+ * These middleware functions work only with HTTP transport.
+ * They operate at the request/response level, not the envelope level.
+ */
+// Security Headers
+export { applySecurityHeaders, createSecurityMiddleware, getSecurityPreset, mergeSecurityConfig, defaultSecurityConfig, strictSecurityConfig, relaxedSecurityConfig, } from './security.js';
+// Compression
+export { compressBuffer, compressResponse, createCompressionMiddleware, defaultCompressionConfig, } from './compression.js';
+//# sourceMappingURL=index.js.map

package/dist/middleware/http/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/middleware/http/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,mBAAmB;AACnB,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,eAAe,CAAA;AAEtB,cAAc;AACd,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,kBAAkB,CAAA"}

package/dist/middleware/http/security.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Security Headers Middleware
+ *
+ * HTTP-specific middleware for setting security headers.
+ * Implements best practices for protecting against common web vulnerabilities.
+ */
+import type { ServerResponse } from 'node:http';
+import type { SecurityConfig } from '../types.js';
+/**
+ * Default security configuration (recommended)
+ */
+export declare const defaultSecurityConfig: SecurityConfig;
+/**
+ * Strict security configuration (for high-security applications)
+ */
+export declare const strictSecurityConfig: SecurityConfig;
+/**
+ * Relaxed security configuration (for development or internal tools)
+ */
+export declare const relaxedSecurityConfig: SecurityConfig;
+/**
+ * Apply security headers to a response
+ *
+ * @example
+ * ```typescript
+ * import { applySecurityHeaders, defaultSecurityConfig } from 'raffel/middleware/http'
+ *
+ * // In your HTTP handler
+ * applySecurityHeaders(res, defaultSecurityConfig)
+ *
+ * // Or with custom config
+ * applySecurityHeaders(res, {
+ *   noSniff: true,
+ *   frameOptions: 'SAMEORIGIN',
+ *   csp: {
+ *     enabled: true,
+ *     directives: {
+ *       'default-src': ["'self'"],
+ *       'script-src': ["'self'", "'unsafe-inline'"],
+ *     }
+ *   }
+ * })
+ * ```
+ */
+export declare function applySecurityHeaders(res: ServerResponse, config?: SecurityConfig): void;
+/**
+ * Create a security headers middleware function
+ *
+ * Returns a function that can be used as middleware in HTTP handlers.
+ *
+ * @example
+ * ```typescript
+ * const securityMiddleware = createSecurityMiddleware(strictSecurityConfig)
+ *
+ * // Apply to each response
+ * function handleRequest(req, res) {
+ *   securityMiddleware(res)
+ *   // ... rest of handler
+ * }
+ * ```
+ */
+export declare function createSecurityMiddleware(config?: SecurityConfig): (res: ServerResponse) => void;
+/**
+ * Get security config for a preset level
+ */
+export declare function getSecurityPreset(level: 'strict' | 'recommended' | 'relaxed'): SecurityConfig;
+/**
+ * Merge custom config with a base config
+ */
+export declare function mergeSecurityConfig(base: SecurityConfig, custom: Partial<SecurityConfig>): SecurityConfig;
+//# sourceMappingURL=security.d.ts.map

package/dist/middleware/http/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/middleware/http/security.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,KAAK,EACV,cAAc,EAIf,MAAM,aAAa,CAAA;AAEpB;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,cAYnC,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,cA+BlC,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,cAInC,CAAA;AAwED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,cAAc,EACnB,MAAM,GAAE,cAAsC,GAC7C,IAAI,CAuDN;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,GAAE,cAAsC,GAC7C,CAAC,GAAG,EAAE,cAAc,KAAK,IAAI,CAI/B;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,QAAQ,GAAG,aAAa,GAAG,SAAS,GAC1C,cAAc,CAWhB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,GAC9B,cAAc,CAyBhB"}

package/dist/middleware/http/security.js

@@ -0,0 +1,263 @@
+/**
+ * Security Headers Middleware
+ *
+ * HTTP-specific middleware for setting security headers.
+ * Implements best practices for protecting against common web vulnerabilities.
+ */
+/**
+ * Default security configuration (recommended)
+ */
+export const defaultSecurityConfig = {
+    noSniff: true,
+    frameOptions: 'DENY',
+    hsts: {
+        maxAge: 31536000, // 1 year
+        includeSubDomains: true,
+        preload: false,
+    },
+    referrerPolicy: 'strict-origin-when-cross-origin',
+    dnsPrefetchControl: false,
+    xssProtection: true,
+    crossDomainPolicy: 'none',
+};
+/**
+ * Strict security configuration (for high-security applications)
+ */
+export const strictSecurityConfig = {
+    ...defaultSecurityConfig,
+    hsts: {
+        maxAge: 63072000, // 2 years
+        includeSubDomains: true,
+        preload: true,
+    },
+    csp: {
+        enabled: true,
+        directives: {
+            'default-src': ["'self'"],
+            'script-src': ["'self'"],
+            'style-src': ["'self'"],
+            'img-src': ["'self'", 'data:', 'https:'],
+            'font-src': ["'self'"],
+            'connect-src': ["'self'"],
+            'frame-ancestors': ["'none'"],
+            'form-action': ["'self'"],
+            'base-uri': ["'self'"],
+            'upgrade-insecure-requests': [],
+        },
+    },
+    permissionsPolicy: {
+        features: {
+            'geolocation': [],
+            'microphone': [],
+            'camera': [],
+            'payment': [],
+            'usb': [],
+        },
+    },
+};
+/**
+ * Relaxed security configuration (for development or internal tools)
+ */
+export const relaxedSecurityConfig = {
+    noSniff: true,
+    frameOptions: 'SAMEORIGIN',
+    referrerPolicy: 'no-referrer-when-downgrade',
+};
+/**
+ * Build HSTS header value
+ */
+function buildHstsHeader(hsts) {
+    const parts = [`max-age=${hsts.maxAge ?? 31536000}`];
+    if (hsts.includeSubDomains !== false) {
+        parts.push('includeSubDomains');
+    }
+    if (hsts.preload) {
+        parts.push('preload');
+    }
+    return parts.join('; ');
+}
+/**
+ * Build CSP header value
+ */
+function buildCspHeader(csp) {
+    if (!csp.enabled || !csp.directives) {
+        return null;
+    }
+    const parts = [];
+    for (const [directive, values] of Object.entries(csp.directives)) {
+        if (Array.isArray(values)) {
+            if (values.length === 0) {
+                // Directives like 'upgrade-insecure-requests' have no values
+                parts.push(directive);
+            }
+            else {
+                parts.push(`${directive} ${values.join(' ')}`);
+            }
+        }
+        else if (typeof values === 'string') {
+            parts.push(`${directive} ${values}`);
+        }
+    }
+    if (csp.reportUri) {
+        parts.push(`report-uri ${csp.reportUri}`);
+    }
+    return parts.length > 0 ? parts.join('; ') : null;
+}
+/**
+ * Build Permissions-Policy header value
+ */
+function buildPermissionsPolicyHeader(config) {
+    if (!config.features) {
+        return null;
+    }
+    const parts = [];
+    for (const [feature, allowList] of Object.entries(config.features)) {
+        if (Array.isArray(allowList)) {
+            if (allowList.length === 0) {
+                parts.push(`${feature}=()`);
+            }
+            else {
+                parts.push(`${feature}=(${allowList.join(' ')})`);
+            }
+        }
+    }
+    return parts.length > 0 ? parts.join(', ') : null;
+}
+/**
+ * Apply security headers to a response
+ *
+ * @example
+ * ```typescript
+ * import { applySecurityHeaders, defaultSecurityConfig } from 'raffel/middleware/http'
+ *
+ * // In your HTTP handler
+ * applySecurityHeaders(res, defaultSecurityConfig)
+ *
+ * // Or with custom config
+ * applySecurityHeaders(res, {
+ *   noSniff: true,
+ *   frameOptions: 'SAMEORIGIN',
+ *   csp: {
+ *     enabled: true,
+ *     directives: {
+ *       'default-src': ["'self'"],
+ *       'script-src': ["'self'", "'unsafe-inline'"],
+ *     }
+ *   }
+ * })
+ * ```
+ */
+export function applySecurityHeaders(res, config = defaultSecurityConfig) {
+    // X-Content-Type-Options
+    if (config.noSniff !== false) {
+        res.setHeader('X-Content-Type-Options', 'nosniff');
+    }
+    // X-Frame-Options
+    if (config.frameOptions !== false) {
+        res.setHeader('X-Frame-Options', config.frameOptions ?? 'DENY');
+    }
+    // Strict-Transport-Security (HSTS)
+    if (config.hsts !== false) {
+        const hstsValue = buildHstsHeader(config.hsts ?? { maxAge: 31536000 });
+        res.setHeader('Strict-Transport-Security', hstsValue);
+    }
+    // Referrer-Policy
+    if (config.referrerPolicy !== false) {
+        res.setHeader('Referrer-Policy', config.referrerPolicy ?? 'strict-origin-when-cross-origin');
+    }
+    // X-DNS-Prefetch-Control
+    if (config.dnsPrefetchControl !== undefined) {
+        res.setHeader('X-DNS-Prefetch-Control', config.dnsPrefetchControl ? 'on' : 'off');
+    }
+    // X-XSS-Protection
+    if (config.xssProtection !== false) {
+        res.setHeader('X-XSS-Protection', '1; mode=block');
+    }
+    // X-Permitted-Cross-Domain-Policies
+    if (config.crossDomainPolicy !== false) {
+        res.setHeader('X-Permitted-Cross-Domain-Policies', config.crossDomainPolicy ?? 'none');
+    }
+    // Content-Security-Policy
+    if (config.csp) {
+        const cspValue = buildCspHeader(config.csp);
+        if (cspValue) {
+            const headerName = config.csp.reportOnly
+                ? 'Content-Security-Policy-Report-Only'
+                : 'Content-Security-Policy';
+            res.setHeader(headerName, cspValue);
+        }
+    }
+    // Permissions-Policy
+    if (config.permissionsPolicy) {
+        const ppValue = buildPermissionsPolicyHeader(config.permissionsPolicy);
+        if (ppValue) {
+            res.setHeader('Permissions-Policy', ppValue);
+        }
+    }
+}
+/**
+ * Create a security headers middleware function
+ *
+ * Returns a function that can be used as middleware in HTTP handlers.
+ *
+ * @example
+ * ```typescript
+ * const securityMiddleware = createSecurityMiddleware(strictSecurityConfig)
+ *
+ * // Apply to each response
+ * function handleRequest(req, res) {
+ *   securityMiddleware(res)
+ *   // ... rest of handler
+ * }
+ * ```
+ */
+export function createSecurityMiddleware(config = defaultSecurityConfig) {
+    return (res) => {
+        applySecurityHeaders(res, config);
+    };
+}
+/**
+ * Get security config for a preset level
+ */
+export function getSecurityPreset(level) {
+    switch (level) {
+        case 'strict':
+            return strictSecurityConfig;
+        case 'recommended':
+            return defaultSecurityConfig;
+        case 'relaxed':
+            return relaxedSecurityConfig;
+        default:
+            return defaultSecurityConfig;
+    }
+}
+/**
+ * Merge custom config with a base config
+ */
+export function mergeSecurityConfig(base, custom) {
+    return {
+        ...base,
+        ...custom,
+        hsts: custom.hsts === false ? false : {
+            ...(typeof base.hsts === 'object' ? base.hsts : {}),
+            ...(typeof custom.hsts === 'object' ? custom.hsts : {}),
+        },
+        csp: custom.csp === false ? false : {
+            ...(typeof base.csp === 'object' ? base.csp : {}),
+            ...(typeof custom.csp === 'object' ? custom.csp : {}),
+            directives: {
+                ...(typeof base.csp === 'object' ? base.csp.directives : {}),
+                ...(typeof custom.csp === 'object' ? custom.csp.directives : {}),
+            },
+        },
+        permissionsPolicy: custom.permissionsPolicy === false ? false : {
+            ...(typeof base.permissionsPolicy === 'object' ? base.permissionsPolicy : {}),
+            ...(typeof custom.permissionsPolicy === 'object' ? custom.permissionsPolicy : {}),
+            features: {
+                ...(typeof base.permissionsPolicy === 'object' ? base.permissionsPolicy.features : {}),
+                ...(typeof custom.permissionsPolicy === 'object' ? custom.permissionsPolicy.features : {}),
+            },
+        },
+    };
+}
+//# sourceMappingURL=security.js.map

package/dist/middleware/http/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/middleware/http/security.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,MAAM;IACpB,IAAI,EAAE;QACJ,MAAM,EAAE,QAAQ,EAAE,SAAS;QAC3B,iBAAiB,EAAE,IAAI;QACvB,OAAO,EAAE,KAAK;KACf;IACD,cAAc,EAAE,iCAAiC;IACjD,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,IAAI;IACnB,iBAAiB,EAAE,MAAM;CAC1B,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,GAAG,qBAAqB;IACxB,IAAI,EAAE;QACJ,MAAM,EAAE,QAAQ,EAAE,UAAU;QAC5B,iBAAiB,EAAE,IAAI;QACvB,OAAO,EAAE,IAAI;KACd;IACD,GAAG,EAAE;QACH,OAAO,EAAE,IAAI;QACb,UAAU,EAAE;YACV,aAAa,EAAE,CAAC,QAAQ,CAAC;YACzB,YAAY,EAAE,CAAC,QAAQ,CAAC;YACxB,WAAW,EAAE,CAAC,QAAQ,CAAC;YACvB,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;YACxC,UAAU,EAAE,CAAC,QAAQ,CAAC;YACtB,aAAa,EAAE,CAAC,QAAQ,CAAC;YACzB,iBAAiB,EAAE,CAAC,QAAQ,CAAC;YAC7B,aAAa,EAAE,CAAC,QAAQ,CAAC;YACzB,UAAU,EAAE,CAAC,QAAQ,CAAC;YACtB,2BAA2B,EAAE,EAAE;SAChC;KACF;IACD,iBAAiB,EAAE;QACjB,QAAQ,EAAE;YACR,aAAa,EAAE,EAAE;YACjB,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,EAAE;YACb,KAAK,EAAE,EAAE;SACV;KACF;CACF,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,YAAY;IAC1B,cAAc,EAAE,4BAA4B;CAC7C,CAAA;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,IAAgB;IACvC,MAAM,KAAK,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAA;IAEpD,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IACjC,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,GAAc;IACpC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACjE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,6DAA6D;gBAC7D,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACvB,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAChD,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC,CAAA;QACtC,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,SAAS,EAAE,CAAC,CAAA;IAC3C,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACnD,CAAC;AAED;;GAEG;AACH,SAAS,4BAA4B,CAAC,MAA+B;IACnE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,KAAK,CAAC,CAAA;YAC7B,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACnD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAmB,EACnB,SAAyB,qBAAqB;IAE9C,yBAAyB;IACzB,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC7B,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;IACpD,CAAC;IAED,kBAAkB;IAClB,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QAClC,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,CAAA;IACjE,CAAC;IAED,mCAAmC;IACnC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QACtE,GAAG,CAAC,SAAS,CAAC,2BAA2B,EAAE,SAAS,CAAC,CAAA;IACvD,CAAC;IAED,kBAAkB;IAClB,IAAI,MAAM,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;QACpC,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,cAAc,IAAI,iCAAiC,CAAC,CAAA;IAC9F,CAAC;IAED,yBAAyB;IACzB,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC5C,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACnF,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QACnC,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAA;IACpD,CAAC;IAED,oCAAoC;IACpC,IAAI,MAAM,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACvC,GAAG,CAAC,SAAS,CAAC,mCAAmC,EAAE,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,CAAA;IACxF,CAAC;IAED,0BAA0B;IAC1B,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU;gBACtC,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,yBAAyB,CAAA;YAC7B,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;QACtE,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAyB,qBAAqB;IAE9C,OAAO,CAAC,GAAmB,EAAE,EAAE;QAC7B,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACnC,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA2C;IAE3C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,oBAAoB,CAAA;QAC7B,KAAK,aAAa;YAChB,OAAO,qBAAqB,CAAA;QAC9B,KAAK,SAAS;YACZ,OAAO,qBAAqB,CAAA;QAC9B;YACE,OAAO,qBAAqB,CAAA;IAChC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAoB,EACpB,MAA+B;IAE/B,OAAO;QACL,GAAG,IAAI;QACP,GAAG,MAAM;QACT,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD;QACD,GAAG,EAAE,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAClC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,UAAU,EAAE;gBACV,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;aACjE;SACF;QACD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9D,GAAG,CAAC,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,QAAQ,EAAE;gBACR,GAAG,CAAC,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,GAAG,CAAC,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3F;SACF;KACF,CAAA;AACH,CAAC"}