xypriss 9.10.19 → 9.10.21

package/dist/src/middleware/built-in/BuiltInMiddleware.js

@@ -1,404 +0,0 @@
-/**
- * XyPriss Built-in Middleware
- * Wrappers around popular middleware libraries
- */
-import helmet from "helmet";
-import { xyprissCors as cors } from "./security/XyPrissCors";
-import { xyprissHPP as hpp } from "./security/XyPrissHPP";
-import xss from "xss";
-import compression, { shouldCompress } from "xypriss-compression";
-import { doubleCsrf } from "csrf-csrf";
-import { mergeWithDefaults } from "../../utils/mergeWithDefaults";
-import { RequestSignatureProtector } from "./security/RequestSignatureProtector";
-import { BrowserOnlyProtector } from "./security/BrowserOnlyProtector";
-import { TerminalOnlyProtector } from "./security/TerminalOnlyProtector";
-import { MobileOnlyProtector } from "./security/MobileOnlyProtector";
-import { Logger } from "../../shared/logger/Logger";
-export class BuiltInMiddleware {
-    /**
-     * Get Helmet middleware for security headers
-     */
-    static helmet(options = {}) {
-        const defaultOptions = {
-            contentSecurityPolicy: {
-                directives: {
-                    defaultSrc: ["'self'"],
-                    scriptSrc: ["'self'"],
-                    styleSrc: ["'self'", "'unsafe-inline'"],
-                    imgSrc: ["'self'", "data:"],
-                    fontSrc: ["'self'"],
-                },
-            },
-            crossOriginEmbedderPolicy: true,
-            crossOriginOpenerPolicy: true,
-            crossOriginResourcePolicy: { policy: "same-origin" },
-            dnsPrefetchControl: { allow: false },
-            frameguard: { action: "deny" },
-            hidePoweredBy: true,
-            hsts: {
-                maxAge: 31536000,
-                includeSubDomains: true,
-                preload: false,
-            },
-            ieNoOpen: true,
-            noSniff: true,
-            originAgentCluster: true,
-            permittedCrossDomainPolicies: false,
-            referrerPolicy: { policy: "strict-origin-when-cross-origin" },
-            xssFilter: true,
-        };
-        // Handle CSP separately to avoid shallow merge issues
-        let finalOptions = { ...defaultOptions };
-        // If user provided CSP, handle it specially
-        if (options.contentSecurityPolicy !== undefined) {
-            if (options.contentSecurityPolicy === false) {
-                // User explicitly disabled CSP
-                finalOptions.contentSecurityPolicy = false;
-            }
-            else if (typeof options.contentSecurityPolicy === "object" &&
-                options.contentSecurityPolicy !== null) {
-                finalOptions.contentSecurityPolicy = {
-                    ...defaultOptions.contentSecurityPolicy,
-                    ...options.contentSecurityPolicy,
-                };
-                // Merge directives if provided
-                if (options.contentSecurityPolicy.directives) {
-                    // Normalize directive names to camelCase for Helmet compatibility
-                    const normalizedUserDirectives = {};
-                    for (const [key, value] of Object.entries(options.contentSecurityPolicy.directives)) {
-                        // Convert dash-case to camelCase (e.g., "script-src" -> "scriptSrc")
-                        const camelKey = key.replace(/-([a-z])/g, (_, letter) => letter.toUpperCase());
-                        normalizedUserDirectives[camelKey] = value;
-                    }
-                    finalOptions.contentSecurityPolicy.directives = {
-                        // Start with default directives
-                        ...defaultOptions.contentSecurityPolicy
-                            ?.directives,
-                        // Override with normalized user directives
-                        ...normalizedUserDirectives,
-                    };
-                }
-            }
-        }
-        // Merge other options (excluding contentSecurityPolicy which we handled above)
-        const { contentSecurityPolicy, ...otherOptions } = options;
-        finalOptions = { ...finalOptions, ...otherOptions };
-        return helmet(finalOptions);
-    }
-    /**
-     * Get CORS middleware
-     *
-     * By default, allows all headers to be developer-friendly.
-     * Developers can restrict headers via config if needed for production.
-     *
-     * Supports multiple origin matching patterns:
-     * - Strings with wildcards: "localhost:*", "*.example.com"
-     * - Regular expressions: /^localhost:\d+$/, /\.test\.com$/
-     * - Mixed arrays: ["localhost:*", /^api\..*\.com$/, "production.com"]
-     */
-    static cors(options = {}) {
-        const defaultOptions = {
-            origin: true,
-            methods: ["GET", "HEAD", "PUT", "PATCH", "POST", "DELETE"],
-            // Allow all headers by default - developers can restrict via config
-            // This prevents CORS issues during development
-            credentials: false,
-            maxAge: 86400, // 24 hours
-        };
-        // mergeWithDefaults ensures user-provided keys always win (even falsy
-        // values like `false` or `null`), and nested objects are deep-merged.
-        // This also handles the credentials:true + origin:* incompatibility:
-        // if the user sets credentials:true without an explicit origin, the
-        // default origin:true (wildcard) would cause a browser CORS error.
-        // mergeWithDefaults preserves the user's intent precisely.
-        const config = mergeWithDefaults(defaultOptions, options);
-        // ── Smart credentials/origin guard ────────────────────────────────────
-        // Even after a correct merge, if credentials:true ended up with the
-        // default origin:true (wildcard), switch to reflect-origin mode.
-        // This covers the case where the user sets credentials:true but does
-        // NOT provide an origin at all.
-        const userProvidedOrigin = options != null && "origin" in options;
-        if (config.credentials === true && !userProvidedOrigin) {
-            config.origin = (requestOrigin, callback) => {
-                callback(null, requestOrigin || false);
-            };
-        }
-        // FIX: Normalize array properties to handle cases where arrays were converted to objects
-        // This fixes the bug in multiServer mode where arrays become "[object Object]"
-        // Helper function to normalize array-like values to comma-separated strings
-        const normalizeToString = (value) => {
-            if (!value)
-                return undefined;
-            // If it's already a string, return it
-            if (typeof value === "string")
-                return value;
-            // If it's an array, join with comma
-            if (Array.isArray(value)) {
-                return value.join(", ");
-            }
-            // If it's an object (arrays converted to objects), convert back to array first
-            if (typeof value === "object") {
-                const arrayValues = Object.values(value);
-                return arrayValues.join(", ");
-            }
-            return undefined;
-        };
-        // Normalize methods
-        if (config.methods) {
-            const normalized = normalizeToString(config.methods);
-            if (normalized) {
-                config.methods = normalized;
-            }
-        }
-        // Normalize allowedHeaders
-        if (config.allowedHeaders) {
-            const normalized = normalizeToString(config.allowedHeaders);
-            if (normalized) {
-                config.allowedHeaders = normalized;
-            }
-        }
-        // Normalize exposedHeaders
-        if (config.exposedHeaders) {
-            const normalized = normalizeToString(config.exposedHeaders);
-            if (normalized) {
-                config.exposedHeaders = normalized;
-            }
-        }
-        // Create a custom origin function that handles strings, RegExp, and wildcards
-        if (Array.isArray(config.origin)) {
-            const validOrigins = config.origin.filter((origin) => typeof origin === "string" || origin instanceof RegExp);
-            if (validOrigins.length > 0) {
-                config.origin = this.createAdvancedOriginFunction(validOrigins);
-            }
-        }
-        return cors(config);
-    }
-    /**
-     * Create an advanced origin function that supports strings, RegExp, and wildcards
-     */
-    static createAdvancedOriginFunction(origins) {
-        return (origin, callback) => {
-            try {
-                // No Origin header (e.g. same-origin or curl without header) → allow
-                if (!origin) {
-                    return callback(null, false);
-                }
-                // Check each origin pattern
-                for (const pattern of origins) {
-                    if (typeof pattern === "string") {
-                        // Handle string patterns (including wildcards)
-                        if (this.matchesStringOrigin(origin, pattern)) {
-                            // ✅ Return the actual origin string
-                            return callback(null, origin);
-                        }
-                    }
-                    else if (pattern instanceof RegExp) {
-                        // Handle RegExp patterns
-                        if (pattern.test(origin)) {
-                            return callback(null, origin);
-                        }
-                    }
-                }
-                // No pattern matched → deny
-                return callback(null, false);
-            }
-            catch (error) {
-                // On error, deny access
-                return callback(error, false);
-            }
-        };
-    }
-    /**
-     * Check if an origin matches a string pattern (including wildcards)
-     */
-    static matchesStringOrigin(origin, pattern) {
-        // Exact match
-        if (pattern === origin) {
-            return true;
-        }
-        // Handle wildcards
-        if (pattern.includes("*")) {
-            // Convert wildcard pattern to RegExp
-            const regexPattern = pattern
-                .replace(/[.+?^${}()|[\]\\]/g, "\\$&") // Escape special regex chars
-                .replace(/\*/g, ".*"); // Convert * to .*
-            const regex = new RegExp(`^${regexPattern}$`);
-            return regex.test(origin);
-        }
-        return false;
-    }
-    /**
-     * Rate limiting is now handled natively or via XHSC.
-     * @deprecated Use XyPriss Native Rate Limiter instead.
-     */
-    /**
-     * Native XyPriss Rate Limiter
-     */
-    static rateLimit(options = {}) {
-        // Handled by XHSC Hyper-System Core natively for maximum performance.
-        // This middleware is kept as a placeholder to maintain API compatibility
-        // with existing code but delegates logic to the engine.
-        return (req, res, next) => {
-            // Note: XHSC Engine applies Rate Limiting at the entry point
-            // BEFORE reaching the worker, using tollbooth (Go).
-            next();
-        };
-    }
-    /**
-     * Get Compression middleware
-     */
-    static compression(options = {}) {
-        const defaultOptions = {
-            level: 6,
-            threshold: 1024, // Only compress responses >= 1KB
-            filter: options.filter ||
-                ((req, res) => {
-                    // Don't compress responses with this request header
-                    if (req.headers["x-no-compression"]) {
-                        return false;
-                    }
-                    // Import and use the library's filter function
-                    return shouldCompress(req, res);
-                }),
-        };
-        const config = mergeWithDefaults(defaultOptions, options);
-        // Robust check for ESM/CJS interop issues with the compression plugin
-        const compressionFn = typeof compression === "function"
-            ? compression
-            : compression.default;
-        if (typeof compressionFn !== "function") {
-            const logger = Logger.getInstance();
-            logger.error("middleware", "Compression plugin is not a function. Skipping compression.");
-            return (_req, _res, next) => next();
-        }
-        return compressionFn(config);
-    }
-    /**
-     * CSRF protection middleware using csrf-csrf library
-     */
-    static csrf(options = {
-        getSecret: () => "e6ac40fffc5e9399eab10f5b84fcba2c923e7f74a73b76b56c11b722671eea5e",
-        getSessionIdentifier: (req) => req.session.id,
-    }) {
-        const defaultOptions = {
-            cookieName: "__Host-psifi.x-csrf-token",
-            cookieOptions: {
-                httpOnly: true,
-                sameSite: "strict",
-                secure: process.env.NODE_ENV === "production",
-                maxAge: 3600000, // 1 hour
-            },
-            size: 64,
-            ignoredMethods: ["GET", "HEAD", "OPTIONS"],
-            getTokenFromRequest: (req) => {
-                return (req.headers["x-csrf-token"] ||
-                    req.body?._csrf ||
-                    req.query?._csrf);
-            },
-        };
-        const config = mergeWithDefaults(defaultOptions, options);
-        const { doubleCsrfProtection } = doubleCsrf(config);
-        // Return the protection middleware
-        return doubleCsrfProtection;
-    }
-    /**
-     * Get HPP (HTTP Parameter Pollution) protection middleware
-     */
-    static hpp(options = {}) {
-        const defaultOptions = {
-            whitelist: ["tags", "categories"], // Allow arrays for these parameters
-        };
-        const config = mergeWithDefaults(defaultOptions, options);
-        return hpp(config);
-    }
-    /**
-     * Get XSS protection middleware
-     */
-    static xss(options = {}) {
-        const defaultOptions = {
-            whiteList: {
-                a: ["href", "title"],
-                b: [],
-                i: [],
-                strong: [],
-                em: [],
-            },
-        };
-        const config = mergeWithDefaults(defaultOptions, options);
-        return (req, _res, next) => {
-            // Sanitize request body
-            if (req.body) {
-                req.body = this.sanitizeObject(req.body, config);
-            }
-            // Sanitize query parameters
-            if (req.query) {
-                req.query = this.sanitizeObject(req.query, config);
-            }
-            next();
-        };
-    }
-    // Morgan is not supported. This stub exists only to produce a clear runtime error.
-    static morgan(_options) {
-        throw new Error("[XyPriss] morgan is not supported. Use the Xyphra plugin for request logging: https://github.com/Nehonix-Team/xyphra");
-    }
-    /**
-     * Get Browser-Only middleware to block non-browser requests (like cURL)
-     */
-    static browserOnly(options = {}) {
-        // Import the BrowserOnlyProtector dynamically to keep BuiltInMiddleware clean
-        return new BrowserOnlyProtector(options).getMiddleware();
-    }
-    /**
-     * Get Terminal-Only middleware to block browser requests (allows cURL and API tools)
-     */
-    static terminalOnly(options = {}) {
-        // Import the TerminalOnlyProtector dynamically to keep BuiltInMiddleware clean
-        return new TerminalOnlyProtector(options).getMiddleware();
-    }
-    /**
-     * Get Mobile-Only middleware to block browser requests (allows mobile app access)
-     */
-    static mobileOnly(options = {}) {
-        // Import the MobileOnlyProtector dynamically to keep BuiltInMiddleware clean
-        return new MobileOnlyProtector(options).middleware();
-    }
-    /**
-     * Get Request Signature middleware for API authentication
-     */
-    static requestSignature(options) {
-        const protector = new RequestSignatureProtector(options);
-        return protector.getMiddleware();
-    }
-    /**
-     * Get all default security middleware
-     */
-    static security(options = {}) {
-        return {
-            helmet: this.helmet(options.helmet),
-            cors: this.cors(options.cors),
-            compression: this.compression(options.compression),
-            csrf: this.csrf(options.csrf),
-            requestSignature: this.requestSignature(options.requestSignature),
-        };
-    }
-    // Helper method for XSS sanitization
-    static sanitizeObject(obj, config) {
-        if (typeof obj === "string") {
-            return xss(obj, config);
-        }
-        else if (Array.isArray(obj)) {
-            return obj.map((item) => this.sanitizeObject(item, config));
-        }
-        else if (obj && typeof obj === "object") {
-            const sanitized = {};
-            for (const key in obj) {
-                if (obj.hasOwnProperty(key)) {
-                    sanitized[key] = this.sanitizeObject(obj[key], config);
-                }
-            }
-            return sanitized;
-        }
-        return obj;
-    }
-}
-//# sourceMappingURL=BuiltInMiddleware.js.map

package/dist/src/middleware/built-in/BuiltInMiddleware.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"BuiltInMiddleware.js","sourceRoot":"","sources":["../../../../src/middleware/built-in/BuiltInMiddleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,WAAW,IAAI,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,UAAU,IAAI,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,WAAW,EAAE,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAEjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAapD,MAAM,OAAO,iBAAiB;IAC1B;;OAEG;IACH,MAAM,CAAC,MAAM,CAAC,UAAwC,EAAE;QACpD,MAAM,cAAc,GAAiC;YACjD,qBAAqB,EAAE;gBACnB,UAAU,EAAE;oBACR,UAAU,EAAE,CAAC,QAAQ,CAAC;oBACtB,SAAS,EAAE,CAAC,QAAQ,CAAC;oBACrB,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC;oBACvC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;oBAC3B,OAAO,EAAE,CAAC,QAAQ,CAAC;iBACtB;aACJ;YACD,yBAAyB,EAAE,IAAI;YAC/B,uBAAuB,EAAE,IAAI;YAC7B,yBAAyB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;YACpD,kBAAkB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;YACpC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;YAC9B,aAAa,EAAE,IAAI;YACnB,IAAI,EAAE;gBACF,MAAM,EAAE,QAAQ;gBAChB,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE,KAAK;aACjB;YACD,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,IAAI;YACb,kBAAkB,EAAE,IAAI;YACxB,4BAA4B,EAAE,KAAK;YACnC,cAAc,EAAE,EAAE,MAAM,EAAE,iCAAiC,EAAE;YAC7D,SAAS,EAAE,IAAI;SAClB,CAAC;QAEF,sDAAsD;QACtD,IAAI,YAAY,GAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;QAE9C,4CAA4C;QAC5C,IAAI,OAAO,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC9C,IAAI,OAAO,CAAC,qBAAqB,KAAK,KAAK,EAAE,CAAC;gBAC1C,+BAA+B;gBAC/B,YAAY,CAAC,qBAAqB,GAAG,KAAK,CAAC;YAC/C,CAAC;iBAAM,IACH,OAAO,OAAO,CAAC,qBAAqB,KAAK,QAAQ;gBACjD,OAAO,CAAC,qBAAqB,KAAK,IAAI,EACxC,CAAC;gBACC,YAAY,CAAC,qBAAqB,GAAG;oBACjC,GAAI,cAAc,CAAC,qBAA6B;oBAChD,GAAG,OAAO,CAAC,qBAAqB;iBACnC,CAAC;gBAEF,+BAA+B;gBAC/B,IAAI,OAAO,CAAC,qBAAqB,CAAC,UAAU,EAAE,CAAC;oBAC3C,kEAAkE;oBAClE,MAAM,wBAAwB,GAAQ,EAAE,CAAC;oBACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACrC,OAAO,CAAC,qBAAqB,CAAC,UAAU,CAC3C,EAAE,CAAC;wBACA,qEAAqE;wBACrE,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CACpD,MAAM,CAAC,WAAW,EAAE,CACvB,CAAC;wBACF,wBAAwB,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;oBAC/C,CAAC;oBAED,YAAY,CAAC,qBAAqB,CAAC,UAAU,GAAG;wBAC5C,gCAAgC;wBAChC,GAAI,cAAc,CAAC,qBAA6B;4BAC5C,EAAE,UAAU;wBAChB,2CAA2C;wBAC3C,GAAG,wBAAwB;qBAC9B,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;QAED,+EAA+E;QAC/E,MAAM,EAAE,qBAAqB,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;QAC3D,YAAY,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC;QAEpD,OAAO,MAAM,CAAC,YAAmB,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,CAAC,UAAsC,EAAE;QAChD,MAAM,cAAc,GAAG;YACnB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;YAC1D,oEAAoE;YACpE,+CAA+C;YAC/C,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,KAAK,EAAE,WAAW;SAC7B,CAAC;QAEF,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,oEAAoE;QACpE,mEAAmE;QACnE,2DAA2D;QAC3D,MAAM,MAAM,GAAQ,iBAAiB,CAAC,cAAc,EAAE,OAAc,CAAC,CAAC;QAEtE,yEAAyE;QACzE,oEAAoE;QACpE,iEAAiE;QACjE,qEAAqE;QACrE,gCAAgC;QAChC,MAAM,kBAAkB,GACpB,OAAO,IAAI,IAAI,IAAI,QAAQ,IAAK,OAAkB,CAAC;QACvD,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACrD,MAAM,CAAC,MAAM,GAAG,CACZ,aAAiC,EACjC,QAA+D,EACjE,EAAE;gBACA,QAAQ,CAAC,IAAI,EAAE,aAAa,IAAI,KAAK,CAAC,CAAC;YAC3C,CAAC,CAAC;QACN,CAAC;QAED,yFAAyF;QACzF,+EAA+E;QAE/E,4EAA4E;QAC5E,MAAM,iBAAiB,GAAG,CAAC,KAAU,EAAsB,EAAE;YACzD,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAE7B,sCAAsC;YACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAE5C,oCAAoC;YACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAED,+EAA+E;YAC/E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;YAED,OAAO,SAAS,CAAC;QACrB,CAAC,CAAC;QAEF,oBAAoB;QACpB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,UAAU,EAAE,CAAC;gBACb,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC;YAChC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC5D,IAAI,UAAU,EAAE,CAAC;gBACb,MAAM,CAAC,cAAc,GAAG,UAAU,CAAC;YACvC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC5D,IAAI,UAAU,EAAE,CAAC;gBACb,MAAM,CAAC,cAAc,GAAG,UAAU,CAAC;YACvC,CAAC;QACL,CAAC;QAED,8EAA8E;QAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CACrC,CAAC,MAAW,EAA6B,EAAE,CACvC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,YAAY,MAAM,CAC7D,CAAC;YAEF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC;YACpE,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,4BAA4B,CAAC,OAA4B;QAOpE,OAAO,CACH,MAA0B,EAC1B,QAA+D,EACjE,EAAE;YACA,IAAI,CAAC;gBACD,qEAAqE;gBACrE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACV,OAAO,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACjC,CAAC;gBAED,4BAA4B;gBAC5B,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;wBAC9B,+CAA+C;wBAC/C,IAAI,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;4BAC5C,oCAAoC;4BACpC,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBAClC,CAAC;oBACL,CAAC;yBAAM,IAAI,OAAO,YAAY,MAAM,EAAE,CAAC;wBACnC,yBAAyB;wBACzB,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;4BACvB,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBAClC,CAAC;oBACL,CAAC;gBACL,CAAC;gBAED,4BAA4B;gBAC5B,OAAO,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,wBAAwB;gBACxB,OAAO,QAAQ,CAAC,KAAc,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;QACL,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,mBAAmB,CAC9B,MAAc,EACd,OAAe;QAEf,cAAc;QACd,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,mBAAmB;QACnB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,qCAAqC;YACrC,MAAM,YAAY,GAAG,OAAO;iBACvB,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,6BAA6B;iBACnE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB;YAE7C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH;;OAEG;IACH,MAAM,CAAC,SAAS,CAAC,UAAe,EAAE;QAC9B,sEAAsE;QACtE,yEAAyE;QACzE,wDAAwD;QACxD,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;YACrC,6DAA6D;YAC7D,oDAAoD;YACpD,IAAI,EAAE,CAAC;QACX,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,UAAe,EAAE;QAChC,MAAM,cAAc,GAAG;YACnB,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI,EAAE,iCAAiC;YAClD,MAAM,EACF,OAAO,CAAC,MAAM;gBACd,CAAC,CAAC,GAAQ,EAAE,GAAQ,EAAE,EAAE;oBACpB,oDAAoD;oBACpD,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;wBAClC,OAAO,KAAK,CAAC;oBACjB,CAAC;oBACD,+CAA+C;oBAC/C,OAAO,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACpC,CAAC,CAAC;SACT,CAAC;QAEF,MAAM,MAAM,GAAQ,iBAAiB,CAAC,cAAc,EAAE,OAAc,CAAC,CAAC;QAEtE,sEAAsE;QACtE,MAAM,aAAa,GACf,OAAO,WAAW,KAAK,UAAU;YAC7B,CAAC,CAAC,WAAW;YACb,CAAC,CAAE,WAAmB,CAAC,OAAO,CAAC;QAEvC,IAAI,OAAO,aAAa,KAAK,UAAU,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,CACR,YAAY,EACZ,6DAA6D,CAChE,CAAC;YACF,OAAO,CAAC,IAAS,EAAE,IAAS,EAAE,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QACvD,CAAC;QAED,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAI,CACP,UAA4C;QACxC,SAAS,EAAE,GAAG,EAAE,CACZ,kEAAkE;QACtE,oBAAoB,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;KACrD;QAED,MAAM,cAAc,GAAG;YACnB,UAAU,EAAE,2BAA2B;YACvC,aAAa,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBAC7C,MAAM,EAAE,OAAO,EAAE,SAAS;aAC7B;YACD,IAAI,EAAE,EAAE;YACR,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YAC1C,mBAAmB,EAAE,CAAC,GAAQ,EAAE,EAAE;gBAC9B,OAAO,CACH,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;oBAC3B,GAAG,CAAC,IAAI,EAAE,KAAK;oBACf,GAAG,CAAC,KAAK,EAAE,KAAK,CACnB,CAAC;YACN,CAAC;SACJ,CAAC;QAEF,MAAM,MAAM,GAAQ,iBAAiB,CAAC,cAAc,EAAE,OAAc,CAAC,CAAC;QAEtE,MAAM,EAAE,oBAAoB,EAAE,GAAG,UAAU,CAAC,MAAa,CAAC,CAAC;QAE3D,mCAAmC;QACnC,OAAO,oBAAoB,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,GAAG,CAAC,UAAqC,EAAE;QAC9C,MAAM,cAAc,GAAG;YACnB,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,oCAAoC;SAC1E,CAAC;QAEF,MAAM,MAAM,GAAQ,iBAAiB,CAAC,cAAc,EAAE,OAAc,CAAC,CAAC;QACtE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,GAAG,CAAC,UAAe,EAAE;QACxB,MAAM,cAAc,GAAG;YACnB,SAAS,EAAE;gBACP,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;gBACpB,CAAC,EAAE,EAAE;gBACL,CAAC,EAAE,EAAE;gBACL,MAAM,EAAE,EAAE;gBACV,EAAE,EAAE,EAAE;aACT;SACJ,CAAC;QAEF,MAAM,MAAM,GAAQ,iBAAiB,CAAC,cAAc,EAAE,OAAc,CAAC,CAAC;QAEtE,OAAO,CAAC,GAAQ,EAAE,IAAS,EAAE,IAAS,EAAE,EAAE;YACtC,wBAAwB;YACxB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACX,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YAED,4BAA4B;YAC5B,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACZ,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvD,CAAC;YAED,IAAI,EAAE,CAAC;QACX,CAAC,CAAC;IACN,CAAC;IAED,mFAAmF;IACnF,MAAM,CAAC,MAAM,CAAC,QAAc;QACxB,MAAM,IAAI,KAAK,CACX,sHAAsH,CACzH,CAAC;IACN,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,UAAe,EAAE;QAChC,8EAA8E;QAC9E,OAAO,IAAI,oBAAoB,CAAC,OAAc,CAAC,CAAC,aAAa,EAAE,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,UAAe,EAAE;QACjC,+EAA+E;QAC/E,OAAO,IAAI,qBAAqB,CAAC,OAAc,CAAC,CAAC,aAAa,EAAE,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,UAAe,EAAE;QAC/B,6EAA6E;QAC7E,OAAO,IAAI,mBAAmB,CAAC,OAAc,CAAC,CAAC,UAAU,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,OAA+B;QACnD,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC,OAAc,CAAC,CAAC;QAChE,OAAO,SAAS,CAAC,aAAa,EAAE,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,UAAmC,EAAE;QACjD,OAAO;YACH,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC;YAClD,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,CAAC;SACpE,CAAC;IACN,CAAC;IAED,qCAAqC;IAC7B,MAAM,CAAC,cAAc,CAAC,GAAQ,EAAE,MAAW;QAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,CAAC;aAAM,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,SAAS,GAAQ,EAAE,CAAC;YAC1B,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;gBACpB,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;gBAC3D,CAAC;YACL,CAAC;YACD,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;CACJ"}

package/dist/src/middleware/built-in/ResponseManipulationMiddleware.d.ts

@@ -1,11 +0,0 @@
-import { ResponseManipulationConfig } from "../../types/types";
-import { MiddlewareFunction } from "../../types/mod/core";
-/**
- * Creates a middleware that manipulates the response body before sending it to the client.
- * This is useful for masking sensitive data in deep objects.
- *
- * @param config Configuration for response manipulation
- * @returns Middleware function
- */
-export declare function createResponseManipulationMiddleware(config: ResponseManipulationConfig): MiddlewareFunction;
-//# sourceMappingURL=ResponseManipulationMiddleware.d.ts.map

package/dist/src/middleware/built-in/ResponseManipulationMiddleware.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ResponseManipulationMiddleware.d.ts","sourceRoot":"","sources":["../../../../src/middleware/built-in/ResponseManipulationMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,0BAA0B,EAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D;;;;;;GAMG;AACH,wBAAgB,oCAAoC,CAChD,MAAM,EAAE,0BAA0B,GACnC,kBAAkB,CAiFpB"}

package/dist/src/middleware/built-in/ResponseManipulationMiddleware.js

@@ -1,164 +0,0 @@
-import { XStringify } from "xypriss-security";
-/**
- * Creates a middleware that manipulates the response body before sending it to the client.
- * This is useful for masking sensitive data in deep objects.
- *
- * @param config Configuration for response manipulation
- * @returns Middleware function
- */
-export function createResponseManipulationMiddleware(config) {
-    return (req, res, next) => {
-        if (!config.enabled || !config.rules || config.rules.length === 0) {
-            return next();
-        }
-        const originalJson = res.json;
-        const originalSend = res.send;
-        const maxDepth = config.maxDepth || 10;
-        const manipulate = (data) => {
-            if (typeof data !== "object" || data === null) {
-                return data;
-            }
-            // We need a deep clone to avoid mutating the original data
-            // but we must be careful with very large objects.
-            let result;
-            try {
-                // For objects that might have circular refs or be too large,
-                // JSON stringify is a decent first-pass filter/clonner.
-                result = JSON.parse(XStringify(data, {
-                    pureRaw: true,
-                    maxDepth: 100,
-                    maxLength: 2000000, // 2MB limit
-                    truncateStrings: 1000000, // 1MB limit per string (pour le HTML)
-                    reportCircularPath: true,
-                }));
-            }
-            catch (e) {
-                // If it fails (circular refs), we can't easily manipulate safely
-                // without a proper deep clone.
-                return data;
-            }
-            for (const rule of config.rules) {
-                applyRule(result, rule.field, rule.replacement, rule.preserve, rule.valuePattern, 0, maxDepth);
-            }
-            return result;
-        };
-        // Override res.json
-        res.json = function (data) {
-            try {
-                const manipulatedData = manipulate(data);
-                return originalJson.call(this, manipulatedData);
-            }
-            catch (err) {
-                return originalJson.call(this, data);
-            }
-        };
-        // Override res.send
-        res.send = function (data) {
-            if (typeof data === "object" &&
-                data !== null &&
-                !Buffer.isBuffer(data)) {
-                try {
-                    const manipulatedData = manipulate(data);
-                    return originalSend.call(this, manipulatedData);
-                }
-                catch (err) {
-                    return originalSend.call(this, data);
-                }
-            }
-            return originalSend.call(this, data);
-        };
-        next();
-    };
-}
-/**
- * Recursively applies a manipulation rule to an object.
- */
-function applyRule(obj, field, replacement, preserve, valuePattern, depth = 0, maxDepth = 10) {
-    if (!obj || typeof obj !== "object" || depth > maxDepth)
-        return;
-    // 1. Global value matching if field is omitted
-    if (!field && valuePattern) {
-        for (const key in obj) {
-            if (Object.prototype.hasOwnProperty.call(obj, key)) {
-                maskValue(obj, key, replacement, preserve, valuePattern);
-                // Recurse deeper
-                if (obj[key] && typeof obj[key] === "object") {
-                    applyRule(obj[key], undefined, replacement, preserve, valuePattern, depth + 1, maxDepth);
-                }
-            }
-        }
-        return;
-    }
-    // 2. RegExp matching on keys
-    if (field instanceof RegExp) {
-        for (const key in obj) {
-            if (Object.prototype.hasOwnProperty.call(obj, key)) {
-                if (field.test(key)) {
-                    maskValue(obj, key, replacement, preserve, valuePattern);
-                }
-                // Recurse for nested objects even if key didn't match (to find matches deeper)
-                if (obj[key] && typeof obj[key] === "object") {
-                    applyRule(obj[key], field, replacement, preserve, valuePattern, depth + 1, maxDepth);
-                }
-            }
-        }
-        return;
-    }
-    // 3. Dot notation matching
-    const keys = field.split(".");
-    let current = obj;
-    for (let i = 0; i < keys.length - 1; i++) {
-        const key = keys[i];
-        if (current[key] && typeof current[key] === "object") {
-            current = current[key];
-        }
-        else {
-            return; // Path not found
-        }
-    }
-    const lastKey = keys[keys.length - 1];
-    if (current[lastKey] !== undefined) {
-        maskValue(current, lastKey, replacement, preserve, valuePattern);
-    }
-}
-/**
- * Masks or replaces a value at a specific key in an object.
- */
-function maskValue(obj, key, replacement, preserve, valuePattern) {
-    const value = obj[key];
-    // If valuePattern is specified, only mask if the value matches the pattern
-    if (valuePattern && typeof value === "string") {
-        if (!valuePattern.test(value)) {
-            return;
-        }
-    }
-    else if (valuePattern) {
-        // Skip non-string values if we're looking for a pattern match
-        // (Patterns typically only make sense for string/error messages)
-        return;
-    }
-    if (replacement !== undefined) {
-        obj[key] = replacement;
-    }
-    else if (typeof value === "string") {
-        const preserveLen = preserve || 0;
-        if (value.length > preserveLen) {
-            obj[key] =
-                value.substring(0, preserveLen) +
-                    "*".repeat(Math.min(value.length - preserveLen, 50)); // Limit mask length
-        }
-        else {
-            obj[key] = "*".repeat(Math.min(value.length, 50));
-        }
-    }
-    else if (typeof value === "number" || typeof value === "boolean") {
-        obj[key] = "[MASKED]";
-    }
-    else if (typeof value === "object") {
-        obj[key] = "[HIDDEN OBJECT]";
-    }
-    else {
-        obj[key] = "********";
-    }
-}
-//# sourceMappingURL=ResponseManipulationMiddleware.js.map

package/dist/src/middleware/built-in/ResponseManipulationMiddleware.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ResponseManipulationMiddleware.js","sourceRoot":"","sources":["../../../../src/middleware/built-in/ResponseManipulationMiddleware.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,UAAU,oCAAoC,CAChD,MAAkC;IAElC,OAAO,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAAS,EAAE,EAAE;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;QAC9B,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;QAE9B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QAEvC,MAAM,UAAU,GAAG,CAAC,IAAS,EAAE,EAAE;YAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,2DAA2D;YAC3D,kDAAkD;YAClD,IAAI,MAAW,CAAC;YAChB,IAAI,CAAC;gBACD,6DAA6D;gBAC7D,wDAAwD;gBACxD,MAAM,GAAG,IAAI,CAAC,KAAK,CACf,UAAU,CAAC,IAAI,EAAE;oBACb,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,GAAG;oBACb,SAAS,EAAE,OAAO,EAAE,YAAY;oBAChC,eAAe,EAAE,OAAO,EAAE,sCAAsC;oBAChE,kBAAkB,EAAE,IAAI;iBAC3B,CAAC,CACL,CAAC;YACN,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,iEAAiE;gBACjE,+BAA+B;gBAC/B,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAM,EAAE,CAAC;gBAC/B,SAAS,CACL,MAAM,EACN,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,YAAY,EACjB,CAAC,EACD,QAAQ,CACX,CAAC;YACN,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC,CAAC;QAEF,oBAAoB;QACpB,GAAG,CAAC,IAAI,GAAG,UAAU,IAAS;YAC1B,IAAI,CAAC;gBACD,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;gBACzC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACzC,CAAC;QACL,CAAC,CAAC;QAEF,oBAAoB;QACpB,GAAG,CAAC,IAAI,GAAG,UAAU,IAAS;YAC1B,IACI,OAAO,IAAI,KAAK,QAAQ;gBACxB,IAAI,KAAK,IAAI;gBACb,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EACxB,CAAC;gBACC,IAAI,CAAC;oBACD,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;oBACzC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;gBACpD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACX,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACzC,CAAC;YACL,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC,CAAC;QAEF,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CACd,GAAQ,EACR,KAAkC,EAClC,WAAgB,EAChB,QAAiB,EACjB,YAAqB,EACrB,QAAgB,CAAC,EACjB,WAAmB,EAAE;IAErB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,GAAG,QAAQ;QAAE,OAAO;IAEhE,+CAA+C;IAC/C,IAAI,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBACjD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;gBACzD,iBAAiB;gBACjB,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC3C,SAAS,CACL,GAAG,CAAC,GAAG,CAAC,EACR,SAAS,EACT,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,KAAK,GAAG,CAAC,EACT,QAAQ,CACX,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO;IACX,CAAC;IAED,6BAA6B;IAC7B,IAAI,KAAK,YAAY,MAAM,EAAE,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBACjD,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;gBAC7D,CAAC;gBACD,+EAA+E;gBAC/E,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC3C,SAAS,CACL,GAAG,CAAC,GAAG,CAAC,EACR,KAAK,EACL,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,KAAK,GAAG,CAAC,EACT,QAAQ,CACX,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO;IACX,CAAC;IAED,2BAA2B;IAC3B,MAAM,IAAI,GAAI,KAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,GAAG,CAAC;IAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,iBAAiB;QAC7B,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CACd,GAAQ,EACR,GAAW,EACX,WAAgB,EAChB,QAAiB,EACjB,YAAqB;IAErB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IAEvB,2EAA2E;IAC3E,IAAI,YAAY,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;QACX,CAAC;IACL,CAAC;SAAM,IAAI,YAAY,EAAE,CAAC;QACtB,8DAA8D;QAC9D,iEAAiE;QACjE,OAAO;IACX,CAAC;IAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;IAC3B,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,QAAQ,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC;gBACJ,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC;oBAC/B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,oBAAoB;QAClF,CAAC;aAAM,CAAC;YACJ,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QACjE,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;IAC1B,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC;IACjC,CAAC;SAAM,CAAC;QACJ,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;IAC1B,CAAC;AACL,CAAC"}