xypriss 2.3.7 → 3.0.0

package/dist/esm/src/server/const/default.js.map

@@ -1 +1 @@
-{"version":3,"file":"default.js","sources":["../../../../../src/server/const/default.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;;AAIG;AAOU,MAAA,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,YAAY;AACrD,MAAM,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAY;AAEjE;AACa,MAAA,eAAe,GAAkB;AAC1C,IAAA,WAAW,EAAE;AACT,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,SAAS,EAAE,GAAG;AACd,QAAA,iBAAiB,EAAE,IAAI;AACvB,QAAA,UAAU,EAAE,IAAI;AAChB,QAAA,QAAQ,EAAE,IAAI;;AAEd,QAAA,mBAAmB,EAAE,IAAI;AACzB,QAAA,qBAAqB,EAAE,IAAI;AAC3B,QAAA,oBAAoB,EAAE,IAAI;AAC1B,QAAA,iBAAiB,EAAE,IAAI;AACvB,QAAA,kBAAkB,EAAE,IAAI;;AAExB,QAAA,kBAAkB,EAAE,IAAI;QACxB,cAAc,EAAE,KAAK;QACrB,qBAAqB,EAAE,CAAC;QACxB,sBAAsB,EAAE,IAAI;AAC5B,QAAA,iBAAiB,EAAE,IAAI;;AAEvB,QAAA,qBAAqB,EAAE,IAAI;AAC3B,QAAA,uBAAuB,EAAE,IAAI;AAC7B,QAAA,yBAAyB,EAAE,IAAI;;AAE/B,QAAA,kBAAkB,EAAE,IAAI;AACxB,QAAA,eAAe,EAAE,IAAI;AACrB,QAAA,yBAAyB,EAAE,IAAI;AAClC,KAAA;AACD,IAAA,UAAU,EAAE;AACR,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,YAAY,EAAE,IAAI;AAClB,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,eAAe,EAAE;AACb,YAAA,WAAW,EAAE,EAAE;AACf,YAAA,OAAO,EAAE,GAAG;AACZ,YAAA,SAAS,EAAE,IAAI;AACf,YAAA,OAAO,EAAE,EAAE;AACd,SAAA;AACJ,KAAA;AACD,IAAA,MAAM,EAAE;AACJ,QAAA,gBAAgB,EAAE,IAAI;QACtB,IAAI,EAAE,YAAY;AAClB,QAAA,UAAU,EAAE,KAAK;AACjB,QAAA,SAAS,EAAE,MAAM;AACjB,QAAA,eAAe,EAAE,MAAM;AACvB,QAAA,IAAI,EAAE,YAAY;AAClB,QAAA,cAAc,EAAE;AACZ,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,WAAW,EAAE,EAAE;AACf,YAAA,QAAQ,EAAE,QAAQ;AACrB,SAAA;AACJ,KAAA;AACD,IAAA,WAAW,EAAE;AACT,QAAA,GAAG,iBAAiB;QACpB,OAAO,EAAE,KAAK;AACjB,KAAA;AACD,IAAA,OAAO,EAAE;AACL,QAAA,KAAK,EAAE,MAAM;AACb,QAAA,UAAU,EAAE;AACR,YAAA,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,KAAK;AACZ,YAAA,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,KAAK;AAClB,YAAA,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK;AACf,YAAA,UAAU,EAAE,KAAK;AACjB,YAAA,MAAM,EAAE,KAAK;AACb,YAAA,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,KAAK;AACjB,SAAA;AACD,QAAA,KAAK,EAAE;AACH,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,QAAQ,EAAE,IAAI;AACd,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,WAAW,EAAE,IAAI;AACjB,YAAA,KAAK,EAAE,IAAI;AACX,YAAA,SAAS,EAAE,IAAI;AACf,YAAA,aAAa,EAAE,IAAI;AACtB,SAAA;AACD,QAAA,MAAM,EAAE;AACJ,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,OAAO,EAAE,KAAK;AACd,YAAA,UAAU,EAAE,KAAK;AACpB,SAAA;;AAED,QAAA,mBAAmB,EAAE;AACjB,YAAA,GAAG,sBAAsB;YACzB,OAAO,EAAE,KAAK;AACd,YAAA,gBAAgB,EAAE,IAAI;AACzB,SAAA;AACJ,KAAA;AACD,IAAA,QAAQ,EAAE;AACN,QAAA,KAAK,EAAE,MAAM;AACb,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,cAAc,EAAE,KAAK;AACrB,QAAA,eAAe,EAAE,KAAK;AACzB,KAAA;AACD,IAAA,OAAO,EAAE;QACL,OAAO,EAAE,KAAK;AACd,QAAA,MAAM,EAAE,uBAAuB;AAClC,KAAA;AACD,IAAA,KAAK,EAAE;QACH,QAAQ,EAAE,QAAQ;AAClB,QAAA,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QAC1B,GAAG,EAAE,MAAM;AACX,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;YACJ,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,KAAK;AACnB,SAAA;AACJ,KAAA;AACD,IAAA,QAAQ,EAAE;AACN,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,KAAK,EAAE,SAAS;AAChB,QAAA,IAAI,EAAE,IAAI;AACV,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,YAAY,EAAE,IAAI;AAClB,QAAA,UAAU,EAAE,KAAK;AACjB,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,SAAS,EAAE;AACP,YAAA,GAAG,EAAE,GAAG;AACR,YAAA,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;AACxB,YAAA,OAAO,EACH,yHAAyH;AAChI,SAAA;AACD,QAAA,MAAM,EAAE,KAAK;AACb,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,aAAa,EAAE,IAAI;AACnB,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,UAAU,EAAE;AACR,YAAA,SAAS,EAAE,aAAa;AACxB,YAAA,OAAO,EAAE,EAAE;AACd,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,KAAK;AACd,QAAA,WAAW,EAAE,IAAI,GAAG,IAAI,GAAG,CAAC;AAC5B,QAAA,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ;AACjB,QAAA,gBAAgB,EAAE;YACd,YAAY;YACZ,WAAW;YACX,WAAW;YACX,YAAY;YACZ,iBAAiB;YACjB,YAAY;YACZ,UAAU;YACV,WAAW;AACd,SAAA;AACD,QAAA,iBAAiB,EAAE;YACf,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;AACT,SAAA;AACD,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,MAAM,EAAE;AACJ,YAAA,aAAa,EAAE,GAAG;AAClB,YAAA,SAAS,EAAE,IAAI,GAAG,IAAI;AACtB,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACJ,KAAA;;;;;"}
+{"version":3,"file":"default.js","sources":["../../../../../src/server/const/default.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;;AAIG;AAOU,MAAA,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,YAAY;AACrD,MAAM,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAY;AAEjE;AACa,MAAA,eAAe,GAAkB;AAC1C,IAAA,WAAW,EAAE;AACT,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,SAAS,EAAE,GAAG;AACd,QAAA,iBAAiB,EAAE,IAAI;AACvB,QAAA,UAAU,EAAE,IAAI;AAChB,QAAA,QAAQ,EAAE,IAAI;;AAEd,QAAA,mBAAmB,EAAE,IAAI;AACzB,QAAA,qBAAqB,EAAE,IAAI;AAC3B,QAAA,oBAAoB,EAAE,IAAI;AAC1B,QAAA,iBAAiB,EAAE,IAAI;AACvB,QAAA,kBAAkB,EAAE,IAAI;;AAExB,QAAA,kBAAkB,EAAE,IAAI;QACxB,cAAc,EAAE,KAAK;QACrB,qBAAqB,EAAE,CAAC;QACxB,sBAAsB,EAAE,IAAI;AAC5B,QAAA,iBAAiB,EAAE,IAAI;;AAEvB,QAAA,qBAAqB,EAAE,IAAI;AAC3B,QAAA,uBAAuB,EAAE,IAAI;AAC7B,QAAA,yBAAyB,EAAE,IAAI;;AAE/B,QAAA,kBAAkB,EAAE,IAAI;AACxB,QAAA,eAAe,EAAE,IAAI;AACrB,QAAA,yBAAyB,EAAE,IAAI;AAClC,KAAA;AACD,IAAA,UAAU,EAAE;AACR,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,YAAY,EAAE,IAAI;AAClB,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,eAAe,EAAE;AACb,YAAA,WAAW,EAAE,EAAE;AACf,YAAA,OAAO,EAAE,GAAG;AACZ,YAAA,SAAS,EAAE,IAAI;AACf,YAAA,OAAO,EAAE,EAAE;AACd,SAAA;AACJ,KAAA;AACD,IAAA,MAAM,EAAE;AACJ,QAAA,gBAAgB,EAAE,IAAI;QACtB,IAAI,EAAE,YAAY;AAClB,QAAA,UAAU,EAAE,KAAK;AACjB,QAAA,SAAS,EAAE,MAAM;AACjB,QAAA,eAAe,EAAE,MAAM;AACvB,QAAA,IAAI,EAAE,YAAY;AAClB,QAAA,cAAc,EAAE;AACZ,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,WAAW,EAAE,EAAE;AACf,YAAA,QAAQ,EAAE,QAAQ;AACrB,SAAA;AACJ,KAAA;AACD,IAAA,WAAW,EAAE;AACT,QAAA,GAAG,iBAAiB;QACpB,OAAO,EAAE,KAAK;AACjB,KAAA;AACD,IAAA,OAAO,EAAE;AACL,QAAA,KAAK,EAAE,MAAM;AACb,QAAA,UAAU,EAAE;AACR,YAAA,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,KAAK;AACZ,YAAA,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,KAAK;AAClB,YAAA,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK;AACf,YAAA,UAAU,EAAE,KAAK;AACjB,YAAA,MAAM,EAAE,KAAK;AACb,YAAA,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,KAAK;AACjB,SAAA;AACD,QAAA,KAAK,EAAE;AACH,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,QAAQ,EAAE,IAAI;AACd,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,WAAW,EAAE,IAAI;AACjB,YAAA,KAAK,EAAE,IAAI;AACX,YAAA,SAAS,EAAE,IAAI;AACf,YAAA,aAAa,EAAE,IAAI;AACtB,SAAA;AACD,QAAA,MAAM,EAAE;AACJ,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,OAAO,EAAE,KAAK;AACd,YAAA,UAAU,EAAE,KAAK;AACpB,SAAA;;AAED,QAAA,mBAAmB,EAAE;AACjB,YAAA,GAAG,sBAAsB;YACzB,OAAO,EAAE,KAAK;AACd,YAAA,gBAAgB,EAAE,IAAI;AACzB,SAAA;AACJ,KAAA;AACD,IAAA,QAAQ,EAAE;AACN,QAAA,KAAK,EAAE,MAAM;AACb,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,cAAc,EAAE,KAAK;AACrB,QAAA,eAAe,EAAE,KAAK;AACzB,KAAA;AACD,IAAA,OAAO,EAAE;QACL,OAAO,EAAE,KAAK;AACd,QAAA,MAAM,EAAE,uBAAuB;AAClC,KAAA;AACD,IAAA,KAAK,EAAE;QACH,QAAQ,EAAE,QAAQ;AAClB,QAAA,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QAC1B,GAAG,EAAE,MAAM;AACX,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;YACJ,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,KAAK;AACnB,SAAA;AACJ,KAAA;AACD,IAAA,QAAQ,EAAE;AACN,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,KAAK,EAAE,UAAU;AACjB,QAAA,IAAI,EAAE,IAAI;AACV,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,YAAY,EAAE,IAAI;AAClB,QAAA,UAAU,EAAE,KAAK;AACjB,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,SAAS,EAAE;AACP,YAAA,GAAG,EAAE,GAAG;AACR,YAAA,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;AACxB,YAAA,OAAO,EACH,yHAAyH;AAChI,SAAA;AACD,QAAA,MAAM,EAAE,KAAK;AACb,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,aAAa,EAAE,IAAI;AACnB,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,UAAU,EAAE;AACR,YAAA,SAAS,EAAE,aAAa;AACxB,YAAA,OAAO,EAAE,EAAE;AACd,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,KAAK;AACd,QAAA,WAAW,EAAE,IAAI,GAAG,IAAI,GAAG,CAAC;AAC5B,QAAA,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ;AACjB,QAAA,gBAAgB,EAAE;YACd,YAAY;YACZ,WAAW;YACX,WAAW;YACX,YAAY;YACZ,iBAAiB;YACjB,YAAY;YACZ,UAAU;YACV,WAAW;AACd,SAAA;AACD,QAAA,iBAAiB,EAAE;YACf,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;AACT,SAAA;AACD,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,MAAM,EAAE;AACJ,YAAA,aAAa,EAAE,GAAG;AAClB,YAAA,SAAS,EAAE,IAAI,GAAG,IAAI;AACtB,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACJ,KAAA;;;;;"}

package/dist/index.d.ts

@@ -1722,6 +1722,88 @@ interface CSRFConfig {
         secure?: boolean;
     };
 }
+/**
+ * Browser-Only Protection Configuration
+ *
+ * Blocks non-browser requests (cURL, Postman, scripts) while allowing legitimate browser access.
+ * Useful for APIs that should only be accessed through web browsers.
+ *
+ * @example Enable with defaults:
+ * ```typescript
+ * browserOnly: true
+ * ```
+ *
+ * @example Custom configuration:
+ * ```typescript
+ * browserOnly: {
+ *   requireSecFetch: true,
+ *   blockAutomationTools: true,
+ *   allowOriginRequests: true,
+ *   errorMessage: "Browser access required"
+ * }
+ * ```
+ */
+interface BrowserOnlyConfig {
+    /** Enable browser-only protection (default: true when config provided) */
+    enable?: boolean;
+    /** Block requests without Sec-Fetch headers */
+    requireSecFetch?: boolean;
+    /** Block requests with curl/wget user agents */
+    blockAutomationTools?: boolean;
+    /** Require complex Accept header */
+    requireComplexAccept?: boolean;
+    /** Allow requests with Origin header (CORS) */
+    allowOriginRequests?: boolean;
+    /** Custom error message */
+    errorMessage?: string;
+    /** HTTP status code for blocked requests */
+    statusCode?: number;
+    /** Custom validation function */
+    customValidator?: (req: any) => boolean;
+    /** Enable debug logging */
+    debug?: boolean;
+}
+/**
+ * Terminal-Only Protection Configuration
+ *
+ * Blocks browser requests while allowing terminal/API tools.
+ * Perfect for API-only endpoints or development tools.
+ *
+ * @example Enable with defaults:
+ * ```typescript
+ * terminalOnly: true
+ * ```
+ *
+ * @example Custom configuration:
+ * ```typescript
+ * terminalOnly: {
+ *   blockSecFetch: true,
+ *   allowedTools: ["curl", "wget"],
+ *   blockBrowserIndicators: true,
+ *   debug: true
+ * }
+ * ```
+ */
+interface TerminalOnlyConfig {
+    /** Enable terminal-only protection (default: true when config provided) */
+    enable?: boolean;
+    /** Block requests with Sec-Fetch headers (browsers) */
+    blockSecFetch?: boolean;
+    /** Allow specific automation tools (whitelist approach) */
+    allowedTools?: string[];
+    /** Block requests with complex browser headers */
+    blockBrowserIndicators?: boolean;
+    /** Require simple Accept header */
+    requireSimpleAccept?: boolean;
+    /** Custom error message */
+    errorMessage?: string;
+    /** HTTP status code for blocked requests */
+    statusCode?: number;
+    /** Custom validation function */
+    customValidator?: (req: any) => boolean;
+    /** Enable debug logging */
+    debug?: boolean;
+}
 /**
  * Helmet Security Headers Configuration
  *
@@ -1749,15 +1831,56 @@ interface CSRFConfig {
 interface HelmetConfig {
     /** Content Security Policy configuration */
     contentSecurityPolicy?: {
-        directives: {
-            defaultSrc?: string[];
-            scriptSrc?: string[];
-        };
-    };
+        /** CSP directives - flexible configuration allowing any CSP directive */
+        directives?: Record<string, string | string[]>;
+    } | boolean;
     /** HTTP Strict Transport Security configuration */
     hsts?: {
         maxAge: number;
+        includeSubDomains?: boolean;
+        preload?: boolean;
+    };
+    /** Cross-Origin Embedder Policy */
+    crossOriginEmbedderPolicy?: boolean | {
+        policy: "require-corp" | "credentialless";
+    };
+    /** Cross-Origin Opener Policy */
+    crossOriginOpenerPolicy?: boolean | {
+        policy: "same-origin" | "same-origin-allow-popups" | "unsafe-none";
     };
+    /** Cross-Origin Resource Policy */
+    crossOriginResourcePolicy?: boolean | {
+        policy: "same-origin" | "same-site" | "cross-origin";
+    };
+    /** DNS Prefetch Control */
+    dnsPrefetchControl?: boolean | {
+        allow: boolean;
+    };
+    /** Frameguard (X-Frame-Options) */
+    frameguard?: boolean | {
+        action: "deny" | "sameorigin" | "allow-from";
+        domain?: string;
+    };
+    /** Hide Powered By header */
+    hidePoweredBy?: boolean | {
+        setTo?: string;
+    };
+    /** IE No Open */
+    ieNoOpen?: boolean;
+    /** No Sniff */
+    noSniff?: boolean;
+    /** Origin Agent Cluster */
+    originAgentCluster?: boolean;
+    /** Permitted Cross Domain Policies */
+    permittedCrossDomainPolicies?: boolean | {
+        permittedPolicies: "none" | "master-only" | "by-content-type" | "all";
+    };
+    /** Referrer Policy */
+    referrerPolicy?: boolean | {
+        policy: string | string[];
+    };
+    /** XSS Filter */
+    xssFilter?: boolean;
 }
 /**
  * XSS Protection Configuration
@@ -2547,6 +2670,50 @@ interface SecurityConfig {
     encryption?: EncryptionConfig;
     /** Authentication configuration */
     authentication?: AuthenticationConfig;
+    /**
+     * Browser-Only Protection Configuration
+     *
+     * Blocks non-browser requests (cURL, Postman, scripts) while allowing legitimate browser access.
+     * Useful for APIs that should only be accessed through web browsers.
+     *
+     * @example Enable with defaults:
+     * ```typescript
+     * browserOnly: true
+     * ```
+     *
+     * @example Custom configuration:
+     * ```typescript
+     * browserOnly: {
+     *   requireSecFetch: true,
+     *   blockAutomationTools: true,
+     *   allowOriginRequests: true,
+     *   errorMessage: "Browser access required"
+     * }
+     * ```
+     */
+    browserOnly?: boolean | BrowserOnlyConfig;
+    /**
+     * Terminal-Only Protection Configuration
+     *
+     * Blocks browser requests while allowing terminal/API tools.
+     * Perfect for API-only endpoints or development tools.
+     *
+     * @example Enable with defaults:
+     * ```typescript
+     * terminalOnly: true
+     * ```
+     *
+     * @example Custom configuration:
+     * ```typescript
+     * terminalOnly: {
+     *   blockSecFetch: true,
+     *   allowedTools: ["curl", "wget"],
+     *   blockBrowserIndicators: true,
+     *   debug: true
+     * }
+     * ```
+     */
+    terminalOnly?: boolean | TerminalOnlyConfig;
 }
 /**
  * Encryption configuration interface.
@@ -4384,6 +4551,8 @@ declare class SecurityMiddleware {
     mongoSanitize: boolean | MongoSanitizeConfig;
     morgan: boolean | MorganConfig;
     slowDown: boolean | SlowDownConfig;
+    browserOnly: boolean | BrowserOnlyConfig;
+    terminalOnly: boolean | TerminalOnlyConfig;
     encryption: Required<SecurityConfig>["encryption"];
     authentication: Required<SecurityConfig>["authentication"];
     routeConfig?: SecurityConfig["routeConfig"];
@@ -4392,6 +4561,8 @@ declare class SecurityMiddleware {
     private rateLimitMiddleware;
     private bruteForceMiddleware;
     private csrfMiddleware;
+    private browserOnlyMiddleware;
+    private terminalOnlyMiddleware;
     private mongoSanitizeMiddleware;
     private hppMiddleware;
     private compressionMiddleware;
@@ -4402,6 +4573,8 @@ declare class SecurityMiddleware {
     private commandInjectionDetector;
     private xxeProtector;
     private ldapInjectionDetector;
+    private browserOnlyProtector?;
+    private terminalOnlyProtector?;
     private logger;
     constructor(config?: SecurityConfig, logger?: Logger);
     /**
@@ -4438,6 +4611,14 @@ declare class SecurityMiddleware {
      * Get CSRF token for client-side usage
      */
     generateCsrfToken(req: XyPrisRequest): string | null;
+    /**
+     * Check if browser-only protection is enabled
+     */
+    private isBrowserOnlyEnabled;
+    /**
+     * Check if terminal-only protection is enabled
+     */
+    private isTerminalOnlyEnabled;
     /**
      * Get security configuration
      */
@@ -7986,7 +8167,7 @@ interface SecureObjectOptions {
  ***************************************************************************** */
 /**
  * @license MIT
- * @see https://lab.nehonix.space
+ * @see https://lab.nehonix.com
  * @description SecureObject Core Module
  *
  * Main SecureObject class

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "xypriss",
-    "version": "2.3.7",
+    "version": "3.0.0",
     "description": "XyPriss is a lightweight, TypeScript-first, open-source Node.js web framework crafted for developers seeking a familiar Express-like API without Express dependencies. It features built-in security middleware, a robust routing system, and performance optimizations to build scalable, secure web applications effortlessly. Join our community and contribute on GitHub!",
     "main": "dist/cjs/index.js",
     "module": "dist/esm/index.js",
@@ -113,8 +113,8 @@
     ],
     "author": {
         "name": "Nehonix",
-        "whatsapp": "https://s.nehonix.space/QBo0KpCl",
-        "url": "https://nehonix.space"
+        "whatsapp": "https://s.nehonix.com/QBo0KpCl",
+        "url": "https://nehonix.com"
     },
     "contributors": [
         {
@@ -123,7 +123,7 @@
         },
         {
             "name": "Nehonix",
-            "url": "https://nehonix.space"
+            "url": "https://nehonix.com"
         }
     ],
     "license": "MIT",
@@ -131,7 +131,7 @@
         "type": "git",
         "url": "https://github.com/Nehonix-Team/XyPriss.git"
     },
-    "documentation": "https://lab.nehonix.space/nehonix_viewer/_doc/Nehonix%20xypriss/readme.md",
+    "documentation": "https://lab.nehonix.com/nehonix_viewer/_doc/Nehonix%20xypriss/readme.md",
     "changelog": "https://github.com/Nehonix-Team/XyPriss/blob/main/CHANGELOG.md",
     "support": "https://github.com/Nehonix-Team/XyPriss/issues",
     "bugs": {
@@ -270,3 +270,4 @@
         "xypriss-security": "^1.1.10"
     }
 }
+

package/scripts/install-memory-cli.js

@@ -14,7 +14,7 @@ import { fileURLToPath } from "url";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-const CDN_BASE_URL = "https://sdk.nehonix.space/dl/mds/xypriss/bin";
+const CDN_BASE_URL = "https://dll.nehonix.com/dl/mds/xypriss/bin";
 // Install binary in the package's own bin directory, not user's project
 const BIN_DIR = path.join(__dirname, "..", "bin");
 const TIMEOUT = 40000; // 40 seconds