xypriss 9.11.13 → 9.12.0

package/dist/src/index.js

@@ -0,0 +1,85 @@
+/***************************************************************************
+ * XyPrissJS - Fast And Secure
+ *
+ * @author Nehonix
+ * @license Nehonix OSL (NOSL)
+ *
+ * Copyright (c) 2025 Nehonix. All rights reserved.
+ *
+ * This License governs the use, modification, and distribution of software
+ * provided by NEHONIX under its open source projects.
+ * NEHONIX is committed to fostering collaborative innovation while strictly
+ * protecting its intellectual property rights.
+ * Violation of any term of this License will result in immediate termination of all granted rights
+ * and may subject the violator to legal action.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+ * INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE,
+ * AND NON-INFRINGEMENT.
+ * IN NO EVENT SHALL NEHONIX BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+ * OR CONSEQUENTIAL DAMAGES ARISING FROM THE USE OR INABILITY TO USE THE SOFTWARE,
+ * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+ *
+ ***************************************************************************** */
+// import { initializeNativeApiBlocker } from "./server/core/NativeApiBlocker";
+// Activate Zero-Trust API isolation immediately
+// initializeNativeApiBlocker();
+import { FileUploadAPI } from "./server/components/fastapi/upload/file-upload";
+import { XyPrissRouter } from "./server/routing";
+import { configLoader } from "./server/utils/ConfigLoader";
+// Initialize globals by importing them
+import { __sys__ } from "./xhsc";
+//tmp====
+export { XyPrissXHSC } from "./xhsc";
+import { __cfg__ } from "./ConfigurationManager";
+import { __const__ } from "./const";
+// Load and apply system configuration from xypriss.config.json
+if (typeof globalThis !== "undefined") {
+    configLoader.loadAndApplySysConfig();
+}
+// Re-export for convenience
+export { __sys__, __cfg__, __const__ };
+/**
+ * XyPriss Powerhouse
+ * High-performance engine with Redis caching, smart optimization, and military-grade security
+ *
+ * @author Nehonix team
+ */
+export * from "./server/ServerFactory";
+export { createOptimalCache } from "./cache/CacheFactory";
+export { SecurityMiddleware } from "./middleware/security-middleware";
+// File upload API
+export * from "./server/components/fastapi/upload/file-upload";
+// Configuration API
+export * from "./ConfigurationManager";
+// XJson Response Handler
+export { XJsonResponseHandler } from "./middleware/XJsonResponseHandler";
+export { Plugin } from "./plugins/api/PluginAPI";
+// Quick start exports for immediate use
+export * from "./quick-start";
+/**
+ * Default router instance for quick start
+ */
+export function Router() {
+    return new XyPrissRouter({
+        caseSensitive: false,
+        mergeParams: false,
+        strict: false,
+    });
+}
+export * from "./server/routing";
+export { FileUploadAPI as FLA };
+export { XyGuard } from "./server/routing/modules/XyGuard";
+export { PluginHookIds } from "./plugins/const/PluginHookIds";
+export { mergeWithDefaults } from "./utils/mergeWithDefaults";
+export { mergeWithDefaults as mwdef } from "./utils/mergeWithDefaults";
+export * from "./utils/getIp";
+export * from "./utils/Send";
+export { getCallerProjectRoot, identifyProjectRoot, } from "./utils/ProjectDiscovery";
+// XEMS — XyPriss Encrypted Memory Store
+// Exposes the singleton instance and the runner class for direct low-level access.
+export { xems } from "./plugins/builtin/xems/XemsPlugin"; // "XemsRunner" only for internal use
+export { getMime, getMimes } from "./utils/getMime";
+// Specialized components
+export { XStatic } from "./server/components/static/XStatic";
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;iFAsBiF;AACjF,+EAA+E;AAE/E,gDAAgD;AAChD,gCAAgC;AAEhC,OAAO,EAAE,aAAa,EAAE,MAAM,gDAAgD,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE3D,uCAAuC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,SAAS;AACT,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAUpC,+DAA+D;AAC/D,IAAI,OAAO,UAAU,KAAK,WAAW,EAAE,CAAC;IACpC,YAAY,CAAC,qBAAqB,EAAE,CAAC;AACzC,CAAC;AAED,4BAA4B;AAC5B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAEvC;;;;;GAKG;AAEH,cAAc,wBAAwB,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE,kBAAkB;AAClB,cAAc,gDAAgD,CAAC;AAE/D,oBAAoB;AACpB,cAAc,wBAAwB,CAAC;AAEvC,yBAAyB;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAGjD,wCAAwC;AACxC,cAAc,eAAe,CAAC;AAE9B;;GAEG;AACH,MAAM,UAAU,MAAM;IAClB,OAAO,IAAI,aAAa,CAAC;QACrB,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;AACP,CAAC;AACD,cAAc,kBAAkB,CAAC;AAEjC,OAAO,EAAE,aAAa,IAAI,GAAG,EAAE,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,IAAI,KAAK,EAAE,MAAM,2BAA2B,CAAC;AACvE,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,OAAO,EACH,oBAAoB,EACpB,mBAAmB,GACtB,MAAM,0BAA0B,CAAC;AAElC,wCAAwC;AACxC,mFAAmF;AACnF,OAAO,EAAE,IAAI,EAAE,MAAM,mCAAmC,CAAC,CAAC,qCAAqC;AAG/F,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAoBpD,yBAAyB;AACzB,OAAO,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC"}

package/dist/src/middleware/XJsonResponseHandler.d.ts

@@ -0,0 +1,69 @@
+/**
+ * XJsonResponseHandler - Advanced JSON Response Handler
+ * Handles large data serialization without limits
+ */
+import { XyPrisResponse } from "../types/httpServer.type";
+export interface XJsonOptions {
+    /**
+     * Maximum depth for object serialization
+     * @default 20
+     */
+    maxDepth?: number;
+    /**
+     * Maximum string length before truncation
+     * @default 10000
+     */
+    truncateStrings?: number;
+    /**
+     * Include non-enumerable properties
+     * @default false
+     */
+    includeNonEnumerable?: boolean;
+    /**
+     * Enable streaming for very large responses
+     * @default true
+     */
+    enableStreaming?: boolean;
+    /**
+     * Chunk size for streaming responses (in bytes)
+     * @default 1024 * 64 (64KB)
+     */
+    chunkSize?: number;
+}
+export declare class XJsonResponseHandler {
+    private options;
+    constructor(options?: XJsonOptions);
+    /**
+     * Main method to handle XJson responses
+     */
+    xJson(res: XyPrisResponse, data: any): void;
+    /**
+     * Serialize data using safe serialization
+     */
+    private serializeData;
+    /**
+     * Handle BigInt serialization by converting BigInt to string
+     */
+    private handleBigIntSerialization;
+    /**
+     * Stream large responses in chunks
+     */
+    private streamResponse;
+    /**
+     * Handle serialization errors
+     */
+    private handleSerializationError;
+    /**
+     * Create middleware to override res.xJson
+     */
+    static createMiddleware(options?: XJsonOptions): (req: any, res: XyPrisResponse, next: () => void) => void;
+    /**
+     * Utility method for direct XJson serialization
+     */
+    static stringify(data: any, options?: XJsonOptions): string;
+    /**
+     * Ultra-powerful and robust JSON parser with automatic error recovery
+     */
+    static parse(data: string): any;
+}
+//# sourceMappingURL=XJsonResponseHandler.d.ts.map

package/dist/src/middleware/XJsonResponseHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"XJsonResponseHandler.d.ts","sourceRoot":"","sources":["../../../src/middleware/XJsonResponseHandler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,WAAW,YAAY;IACzB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,oBAAoB;IAC7B,OAAO,CAAC,OAAO,CAAyB;gBAE5B,OAAO,GAAE,YAAiB;IAWtC;;OAEG;IACI,KAAK,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI;IAuBlD;;OAEG;IACH,OAAO,CAAC,aAAa;IAkBrB;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAgBjC;;OAEG;IACH,OAAO,CAAC,cAAc;IAkCtB;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAUhC;;OAEG;WACW,gBAAgB,CAC1B,OAAO,GAAE,YAAiB,GAC3B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK,IAAI;IA0B5D;;OAEG;WACW,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,GAAE,YAAiB,GAAG,MAAM;IAKtE;;OAEG;WACW,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG;CA0BzC"}

package/dist/src/middleware/XJsonResponseHandler.js

@@ -0,0 +1,175 @@
+/**
+ * XJsonResponseHandler - Advanced JSON Response Handler
+ * Handles large data serialization without limits
+ */
+import { XyPriStringify } from "xypriss-security";
+export class XJsonResponseHandler {
+    constructor(options = {}) {
+        this.options = {
+            maxDepth: 20,
+            truncateStrings: 10000,
+            includeNonEnumerable: false,
+            enableStreaming: true,
+            chunkSize: 1024 * 64, // 64KB chunks
+            ...options,
+        };
+    }
+    /**
+     * Main method to handle XJson responses
+     */
+    xJson(res, data) {
+        try {
+            // Set content type
+            res.setHeader("Content-Type", "application/json");
+            // Serialize the data
+            const serialized = this.serializeData(data);
+            // Check if we should use streaming
+            if (this.options.enableStreaming &&
+                serialized.length > this.options.chunkSize) {
+                this.streamResponse(res, serialized);
+            }
+            else {
+                // Regular response for smaller data
+                res.end(serialized);
+            }
+        }
+        catch (error) {
+            this.handleSerializationError(res, error);
+        }
+    }
+    /**
+     * Serialize data using safe serialization
+     */
+    serializeData(data) {
+        try {
+            // First try standard JSON serialization for performance
+            const standardResult = JSON.stringify(data);
+            return standardResult;
+        }
+        catch (error) {
+            // Handle BigInt serialization8
+            if ((error instanceof Error && error.message.includes("BigInt")) ||
+                error.message.includes("bigint")) {
+                return this.handleBigIntSerialization(data);
+            }
+            // Fall back to safe serialization for other errors
+            return XyPriStringify(data);
+        }
+    }
+    /**
+     * Handle BigInt serialization by converting BigInt to string
+     */
+    handleBigIntSerialization(data) {
+        const replacer = (key, value) => {
+            if (typeof value === "bigint") {
+                return value.toString();
+            }
+            return value;
+        };
+        try {
+            return JSON.stringify(data, replacer);
+        }
+        catch (error) {
+            // If still fails, fall back to safe serialization
+            return XyPriStringify(data);
+        }
+    }
+    /**
+     * Stream large responses in chunks
+     */
+    streamResponse(res, data) {
+        let position = 0;
+        const length = data.length;
+        // Set content length header
+        res.setHeader("Content-Length", length);
+        // Stream data in chunks
+        const streamChunk = () => {
+            while (position < length) {
+                const chunkSize = Math.min(this.options.chunkSize, length - position);
+                const chunk = data.substring(position, position + chunkSize);
+                position += chunkSize;
+                // Send chunk
+                const sent = res.write(chunk);
+                // If write returns false, wait for drain event
+                if (!sent) {
+                    res.once("drain", streamChunk);
+                    return;
+                }
+            }
+            // End response when done
+            res.end();
+        };
+        streamChunk();
+    }
+    /**
+     * Handle serialization errors
+     */
+    handleSerializationError(res, error) {
+        console.error("❌ XJson Serialization Error:", error);
+        res.status(500).json({
+            error: "Internal Server Error",
+            message: "Failed to serialize response",
+            details: error instanceof Error ? error.message : String(error),
+        });
+    }
+    /**
+     * Create middleware to override res.xJson
+     */
+    static createMiddleware(options = {}) {
+        const handler = new XJsonResponseHandler(options);
+        return (req, res, next) => {
+            // Override res.xJson method
+            res.xJson = (data) => {
+                handler.xJson(res, data);
+            };
+            // Also provide res.json as alias for backward compatibility
+            const originalJson = res.json;
+            res.json = (data) => {
+                if (req.path.endsWith(".xJson") ||
+                    req.headers["accept"]?.includes("application/x-json")) {
+                    handler.xJson(res, data);
+                }
+                else {
+                    originalJson.call(res, data);
+                }
+            };
+            next();
+        };
+    }
+    /**
+     * Utility method for direct XJson serialization
+     */
+    static stringify(data, options = {}) {
+        const handler = new XJsonResponseHandler(options);
+        return handler.serializeData(data);
+    }
+    /**
+     * Ultra-powerful and robust JSON parser with automatic error recovery
+     */
+    static parse(data) {
+        if (!data || typeof data !== "string")
+            return {};
+        try {
+            // 1. Try standard high-performance JSON parse
+            return JSON.parse(data);
+        }
+        catch (error) {
+            // 2. Fallback to resilient parsing for poorly formatted JSON
+            try {
+                const relaxedJSON = data
+                    // Fix unquoted keys (e.g., { businessName: "Val" } -> { "businessName": "Val" })
+                    .replace(/(['"])?([a-zA-Z0-9_\-]+)(['"])?\s*:/g, '"$2":')
+                    // Fix single-quoted strings (e.g., 'val' -> "val")
+                    .replace(/'/g, '"')
+                    // Remove trailing commas (e.g., [1, 2,] -> [1, 2])
+                    .replace(/,\s*([\]}])/g, "$1");
+                return JSON.parse(relaxedJSON);
+            }
+            catch (fallbackError) {
+                // Return descriptive syntax error
+                throw new Error(`Invalid JSON format: body could not be parsed`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=XJsonResponseHandler.js.map

package/dist/src/middleware/XJsonResponseHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"XJsonResponseHandler.js","sourceRoot":"","sources":["../../../src/middleware/XJsonResponseHandler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAmClD,MAAM,OAAO,oBAAoB;IAG7B,YAAY,UAAwB,EAAE;QAClC,IAAI,CAAC,OAAO,GAAG;YACX,QAAQ,EAAE,EAAE;YACZ,eAAe,EAAE,KAAK;YACtB,oBAAoB,EAAE,KAAK;YAC3B,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,cAAc;YACpC,GAAG,OAAO;SACb,CAAC;IACN,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,GAAmB,EAAE,IAAS;QACvC,IAAI,CAAC;YACD,mBAAmB;YACnB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAElD,qBAAqB;YACrB,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAE5C,mCAAmC;YACnC,IACI,IAAI,CAAC,OAAO,CAAC,eAAe;gBAC5B,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAC5C,CAAC;gBACC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACJ,oCAAoC;gBACpC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxB,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;IACL,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,IAAS;QAC3B,IAAI,CAAC;YACD,wDAAwD;YACxD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,cAAc,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,+BAA+B;YAC/B,IACI,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC5D,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAClC,CAAC;gBACC,OAAO,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;YAChD,CAAC;YACD,mDAAmD;YACnD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,IAAS;QACvC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,KAAU,EAAE,EAAE;YACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC;QAEF,IAAI,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,kDAAkD;YAClD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAAmB,EAAE,IAAY;QACpD,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE3B,4BAA4B;QAC5B,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAExC,wBAAwB;QACxB,MAAM,WAAW,GAAG,GAAG,EAAE;YACrB,OAAO,QAAQ,GAAG,MAAM,EAAE,CAAC;gBACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACtB,IAAI,CAAC,OAAO,CAAC,SAAS,EACtB,MAAM,GAAG,QAAQ,CACpB,CAAC;gBACF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC;gBAC7D,QAAQ,IAAI,SAAS,CAAC;gBAEtB,aAAa;gBACb,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAE9B,+CAA+C;gBAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;oBACR,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;oBAC/B,OAAO;gBACX,CAAC;YACL,CAAC;YAED,yBAAyB;YACzB,GAAG,CAAC,GAAG,EAAE,CAAC;QACd,CAAC,CAAC;QAEF,WAAW,EAAE,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,GAAmB,EAAE,KAAU;QAC5D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QAErD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACjB,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,8BAA8B;YACvC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAClE,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,gBAAgB,CAC1B,UAAwB,EAAE;QAE1B,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAElD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACtB,4BAA4B;YAC5B,GAAG,CAAC,KAAK,GAAG,CAAC,IAAS,EAAE,EAAE;gBACtB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC,CAAC;YAEF,4DAA4D;YAC5D,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;YAC9B,GAAG,CAAC,IAAI,GAAG,CAAC,IAAS,EAAE,EAAE;gBACrB,IACI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC3B,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EACvD,CAAC;oBACC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACJ,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACjC,CAAC;YACL,CAAC,CAAC;YAEF,IAAI,EAAE,CAAC;QACX,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,SAAS,CAAC,IAAS,EAAE,UAAwB,EAAE;QACzD,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,KAAK,CAAC,IAAY;QAC5B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEjD,IAAI,CAAC;YACD,8CAA8C;YAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,6DAA6D;YAC7D,IAAI,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI;oBACpB,iFAAiF;qBAChF,OAAO,CAAC,sCAAsC,EAAE,OAAO,CAAC;oBACzD,mDAAmD;qBAClD,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;oBACnB,mDAAmD;qBAClD,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;gBAEnC,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,aAAa,EAAE,CAAC;gBACrB,kCAAkC;gBAClC,MAAM,IAAI,KAAK,CACX,+CAA+C,CAClD,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;CACJ"}

package/dist/src/middleware/XemsSessionMiddleware.d.ts

@@ -0,0 +1,8 @@
+import { XyPrisRequest, XyPrisResponse, NextFunction } from "../types/httpServer.type";
+import { XemsTypes } from "../types/xems.type";
+/**
+ * XEMS Session Middleware
+ * Implements the "Moving Target Defense" for sessions by rotating tokens on every request.
+ */
+export declare function xemsSession(options: XemsTypes): (req: XyPrisRequest, res: XyPrisResponse, next: NextFunction) => Promise<void>;
+//# sourceMappingURL=XemsSessionMiddleware.d.ts.map

package/dist/src/middleware/XemsSessionMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"XemsSessionMiddleware.d.ts","sourceRoot":"","sources":["../../../src/middleware/XemsSessionMiddleware.ts"],"names":[],"mappings":"AACA,OAAO,EACH,aAAa,EACb,cAAc,EACd,YAAY,EACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,IAYtC,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,MAAM,YAAY,mBAkIzB"}

package/dist/src/middleware/XemsSessionMiddleware.js

@@ -0,0 +1,110 @@
+import { xems } from "../plugins/builtin/xems/XemsPlugin";
+/**
+ * XEMS Session Middleware
+ * Implements the "Moving Target Defense" for sessions by rotating tokens on every request.
+ */
+export function xemsSession(options) {
+    // const op;
+    const sandbox = options.sandbox || "auth-session";
+    const cookieName = options.cookieName || "xems_token";
+    const headerName = options.headerName || "x-xypriss-token";
+    const ttl = options.ttl || "15m";
+    const attachTo = options.attachTo || "session";
+    const autoRotation = options.autoRotation !== false;
+    const cookieOptions = options.cookieOptions;
+    return async (req, res, next) => {
+        // 0. Get the correct XEMS runner (handles persistence from app config)
+        const runner = xems.forApp(req.app);
+        // 1. Extract token from Cookie or Header
+        let token = req.cookies[cookieName] || req.headers[headerName];
+        // 2. Add a helper to initialize a session (xLink)
+        res.xLink = async (data, linkOptions) => {
+            let actualSandbox = sandbox;
+            let actualAttachTo = attachTo;
+            let actualTtl = ttl;
+            if (typeof linkOptions === "string") {
+                actualSandbox = linkOptions;
+            }
+            else if (linkOptions) {
+                if (linkOptions.sandbox)
+                    actualSandbox = linkOptions.sandbox;
+                if (linkOptions.attachTo)
+                    actualAttachTo = linkOptions.attachTo;
+                if (linkOptions.ttl)
+                    actualTtl = linkOptions.ttl;
+            }
+            const newToken = await runner.createSession(actualSandbox, data, {
+                ttl: actualTtl,
+            });
+            res._xemsNewToken = newToken;
+            // Apply immediately to current response
+            res.cookie(cookieName, newToken, cookieOptions);
+            res.setHeader(headerName, newToken);
+            req[actualAttachTo] = data;
+            return newToken;
+        };
+        // 2b. Add a helper to destroy a session (xUnlink)
+        res.xUnlink = async (unlinkOptions) => {
+            let actualSandbox = sandbox;
+            let actualAttachTo = attachTo;
+            if (typeof unlinkOptions === "string") {
+                actualSandbox = unlinkOptions;
+            }
+            else if (unlinkOptions) {
+                if (unlinkOptions.sandbox)
+                    actualSandbox = unlinkOptions.sandbox;
+                if (unlinkOptions.attachTo)
+                    actualAttachTo = unlinkOptions.attachTo;
+            }
+            const currentToken = req.cookies[cookieName] || req.headers[headerName];
+            if (currentToken) {
+                await runner.from(actualSandbox).del(currentToken);
+            }
+            res.clearCookie(cookieName);
+            res.removeHeader(headerName);
+            req[actualAttachTo] = null;
+        };
+        if (token) {
+            try {
+                // 3. Read session data and perform rotation
+                const session = await runner.resolveSession(token, {
+                    sandbox,
+                    rotate: autoRotation,
+                    ttl,
+                });
+                if (session) {
+                    // Attach data to request
+                    req[attachTo] = session.data;
+                    if (autoRotation && session.newToken) {
+                        // Store new token for response injection
+                        res._xemsNewToken = session.newToken;
+                        // Intercept response methods to inject the new token
+                        const originalSend = res.send;
+                        res.send = function (body) {
+                            if (res._xemsNewToken) {
+                                res.cookie(cookieName, res._xemsNewToken, cookieOptions);
+                                res.setHeader(headerName, res._xemsNewToken);
+                            }
+                            return originalSend.call(this, body);
+                        };
+                        // Also intercept json
+                        const originalJson = res.json;
+                        res.json = function (data) {
+                            if (res._xemsNewToken) {
+                                res.cookie(cookieName, res._xemsNewToken, cookieOptions);
+                                res.setHeader(headerName, res._xemsNewToken);
+                            }
+                            return originalJson.call(this, data);
+                        };
+                    }
+                }
+            }
+            catch (error) {
+                // Session might be expired or invalid, we just let it pass
+                // The dev can check if req.session exists in their handlers
+            }
+        }
+        next();
+    };
+}
+//# sourceMappingURL=XemsSessionMiddleware.js.map

package/dist/src/middleware/XemsSessionMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"XemsSessionMiddleware.js","sourceRoot":"","sources":["../../../src/middleware/XemsSessionMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAQ1D;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAAkB;IAC1C,YAAY;IACZ,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC;IAEpD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAE5C,OAAO,KAAK,EACR,GAAkB,EAClB,GAAmB,EACnB,IAAkB,EACpB,EAAE;QACA,uEAAuE;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAU,CAAC,CAAC;QAE3C,yCAAyC;QACzC,IAAI,KAAK,GACL,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAK,GAAG,CAAC,OAAO,CAAC,UAAU,CAAY,CAAC;QAEnE,kDAAkD;QAClD,GAAG,CAAC,KAAK,GAAG,KAAK,EACb,IAAS,EACT,WAEY,EACd,EAAE;YACA,IAAI,aAAa,GAAG,OAAO,CAAC;YAC5B,IAAI,cAAc,GAAG,QAAQ,CAAC;YAC9B,IAAI,SAAS,GAAG,GAAG,CAAC;YAEpB,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAClC,aAAa,GAAG,WAAW,CAAC;YAChC,CAAC;iBAAM,IAAI,WAAW,EAAE,CAAC;gBACrB,IAAI,WAAW,CAAC,OAAO;oBAAE,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC;gBAC7D,IAAI,WAAW,CAAC,QAAQ;oBAAE,cAAc,GAAG,WAAW,CAAC,QAAQ,CAAC;gBAChE,IAAI,WAAW,CAAC,GAAG;oBAAE,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC;YACrD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,EAAE;gBAC7D,GAAG,EAAE,SAAS;aACjB,CAAC,CAAC;YACF,GAAW,CAAC,aAAa,GAAG,QAAQ,CAAC;YAEtC,wCAAwC;YACxC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;YAChD,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAEnC,GAAW,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC;YAEpC,OAAO,QAAQ,CAAC;QACpB,CAAC,CAAC;QAEF,kDAAkD;QAClD,GAAG,CAAC,OAAO,GAAG,KAAK,EACf,aAAgE,EAClE,EAAE;YACA,IAAI,aAAa,GAAG,OAAO,CAAC;YAC5B,IAAI,cAAc,GAAG,QAAQ,CAAC;YAE9B,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACpC,aAAa,GAAG,aAAa,CAAC;YAClC,CAAC;iBAAM,IAAI,aAAa,EAAE,CAAC;gBACvB,IAAI,aAAa,CAAC,OAAO;oBACrB,aAAa,GAAG,aAAa,CAAC,OAAO,CAAC;gBAC1C,IAAI,aAAa,CAAC,QAAQ;oBACtB,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC;YAChD,CAAC;YAED,MAAM,YAAY,GACd,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAK,GAAG,CAAC,OAAO,CAAC,UAAU,CAAY,CAAC;YAEnE,IAAI,YAAY,EAAE,CAAC;gBACf,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACvD,CAAC;YAED,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAC5B,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YAC5B,GAAW,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC;QACxC,CAAC,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACR,IAAI,CAAC;gBACD,4CAA4C;gBAC5C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE;oBAC/C,OAAO;oBACP,MAAM,EAAE,YAAY;oBACpB,GAAG;iBACN,CAAC,CAAC;gBAEH,IAAI,OAAO,EAAE,CAAC;oBACV,yBAAyB;oBACxB,GAAW,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;oBAEtC,IAAI,YAAY,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACnC,yCAAyC;wBACxC,GAAW,CAAC,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC;wBAE9C,qDAAqD;wBACrD,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;wBAC9B,GAAG,CAAC,IAAI,GAAG,UAAU,IAAS;4BAC1B,IAAK,GAAW,CAAC,aAAa,EAAE,CAAC;gCAC7B,GAAG,CAAC,MAAM,CACN,UAAU,EACT,GAAW,CAAC,aAAa,EAC1B,aAAa,CAChB,CAAC;gCACF,GAAG,CAAC,SAAS,CACT,UAAU,EACT,GAAW,CAAC,aAAa,CAC7B,CAAC;4BACN,CAAC;4BACD,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;wBACzC,CAAC,CAAC;wBAEF,sBAAsB;wBACtB,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;wBAC9B,GAAG,CAAC,IAAI,GAAG,UAAU,IAAS;4BAC1B,IAAK,GAAW,CAAC,aAAa,EAAE,CAAC;gCAC7B,GAAG,CAAC,MAAM,CACN,UAAU,EACT,GAAW,CAAC,aAAa,EAC1B,aAAa,CAChB,CAAC;gCACF,GAAG,CAAC,SAAS,CACT,UAAU,EACT,GAAW,CAAC,aAAa,CAC7B,CAAC;4BACN,CAAC;4BACD,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;wBACzC,CAAC,CAAC;oBACN,CAAC;gBACL,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,2DAA2D;gBAC3D,4DAA4D;YAChE,CAAC;QACL,CAAC;QAED,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;AACN,CAAC"}

package/dist/src/middleware/XyPrissMiddlewareAPI.d.ts

@@ -0,0 +1,75 @@
+/**
+ * XyPriss Middleware API
+ * Clean, simple implementation for middleware management with built-in security middleware
+ */
+import { XyPrissMiddlewareAPI, MiddlewarePriority, SecurityMiddlewareConfig } from "../types/middleware-api.types";
+import { BuiltInMiddleware } from "./built-in/BuiltInMiddleware";
+export declare class XyPrissMiddleware implements XyPrissMiddlewareAPI {
+    private app;
+    private registeredMiddleware;
+    private middlewareCounter;
+    private logger;
+    private securityConfig;
+    constructor(app: any, securityConfig?: import("../types/mod/security").SecurityConfig);
+    /**
+     * Initialize default middleware with security configuration
+     */
+    initializeWithConfig(securityConfig?: import("../types/mod/security").SecurityConfig): void;
+    /**
+     * Enable default built-in middleware based on security configuration
+     */
+    private enableDefaultMiddleware;
+    register(middleware: any, // Accept any type for compatibility
+    options?: {
+        name?: string;
+        priority?: MiddlewarePriority;
+        routes?: string[];
+    }): XyPrissMiddlewareAPI;
+    security(config?: SecurityMiddlewareConfig): XyPrissMiddlewareAPI;
+    cors(config?: SecurityMiddlewareConfig["cors"]): XyPrissMiddlewareAPI;
+    rateLimit(config?: SecurityMiddlewareConfig["rateLimit"]): XyPrissMiddlewareAPI;
+    helmet(config?: SecurityMiddlewareConfig["helmet"]): XyPrissMiddlewareAPI;
+    csrf(config?: SecurityMiddlewareConfig["csrf"]): XyPrissMiddlewareAPI;
+    compression(config?: SecurityMiddlewareConfig["compression"]): XyPrissMiddlewareAPI;
+    /**
+     * Add HPP (HTTP Parameter Pollution) protection
+     */
+    hpp(config?: Parameters<typeof BuiltInMiddleware.hpp>[0]): XyPrissMiddlewareAPI;
+    /**
+     * Add XSS protection
+     */
+    xss(config?: Parameters<typeof BuiltInMiddleware.xss>[0]): XyPrissMiddlewareAPI;
+    stats(): {
+        total: number;
+        enabled: number;
+        disabled: number;
+        byType: {
+            custom: number;
+            builtin: number;
+        };
+        byPriority: {
+            critical: number;
+            high: number;
+            normal: number;
+            low: number;
+        };
+    };
+    list(): {
+        id: string;
+        name: string;
+        enabled: boolean;
+        priority: MiddlewarePriority;
+        type: "custom" | "builtin";
+    }[];
+    clear(): XyPrissMiddlewareAPI;
+    optimize(): XyPrissMiddlewareAPI;
+    unregister(id: string): XyPrissMiddlewareAPI;
+    enable(id: string): XyPrissMiddlewareAPI;
+    disable(id: string): XyPrissMiddlewareAPI;
+    getInfo(id?: string): any;
+    getStats(): any;
+    getConfig(): any;
+    private registerBuiltIn;
+    private applyMiddleware;
+}
+//# sourceMappingURL=XyPrissMiddlewareAPI.d.ts.map

package/dist/src/middleware/XyPrissMiddlewareAPI.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"XyPrissMiddlewareAPI.d.ts","sourceRoot":"","sources":["../../../src/middleware/XyPrissMiddlewareAPI.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACH,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,EAC3B,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAajE,qBAAa,iBAAkB,YAAW,oBAAoB;IAC1D,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,oBAAoB,CAA8B;IAC1D,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,cAAc,CAEJ;gBAGd,GAAG,EAAE,GAAG,EACR,cAAc,CAAC,EAAE,OAAO,uBAAuB,EAAE,cAAc;IAcnE;;OAEG;IACI,oBAAoB,CACvB,cAAc,CAAC,EAAE,OAAO,uBAAuB,EAAE,cAAc,GAChE,IAAI;IASP;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA0D/B,QAAQ,CACJ,UAAU,EAAE,GAAG,EAAE,oCAAoC;IACrD,OAAO,GAAE;QACL,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,kBAAkB,CAAC;QAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;KAChB,GACP,oBAAoB;IAyBvB,QAAQ,CAAC,MAAM,GAAE,wBAA6B,GAAG,oBAAoB;IAyBrE,IAAI,CAAC,MAAM,GAAE,wBAAwB,CAAC,MAAM,CAAM,GAAG,oBAAoB;IAOzE,SAAS,CACL,MAAM,GAAE,wBAAwB,CAAC,WAAW,CAAM,GACnD,oBAAoB;IAQvB,MAAM,CACF,MAAM,GAAE,wBAAwB,CAAC,QAAQ,CAAM,GAChD,oBAAoB;IAOvB,IAAI,CAAC,MAAM,GAAE,wBAAwB,CAAC,MAAM,CAAM,GAAG,oBAAoB;IAOzE,WAAW,CACP,MAAM,GAAE,wBAAwB,CAAC,aAAa,CAAM,GACrD,oBAAoB;IAYvB;;OAEG;IACH,GAAG,CACC,MAAM,GAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAM,GACzD,oBAAoB;IAOvB;;OAEG;IACH,GAAG,CACC,MAAM,GAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAM,GACzD,oBAAoB;IAOvB,KAAK;;;;;;;;;;;;;;;IAoCL,IAAI;;;;;;;IAUJ,KAAK,IAAI,oBAAoB;IAM7B,QAAQ,IAAI,oBAAoB;IA4BhC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,oBAAoB;IAY5C,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,oBAAoB;IAUxC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,oBAAoB;IASzC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,GAAG;IAmBzB,QAAQ,IAAI,GAAG;IAIf,SAAS,IAAI,GAAG;IAUhB,OAAO,CAAC,eAAe;IA0BvB,OAAO,CAAC,eAAe;CAK1B"}