xypriss 9.11.13 → 9.12.0

package/dist/src/middleware/built-in/BuiltInMiddleware.js

@@ -0,0 +1,295 @@
+/**
+ * XyPriss Built-in Middleware
+ * Wrappers around popular middleware libraries
+ */
+import { xyprissCors as cors } from "./security/XyPrissCors";
+import { xyprissHPP as hpp } from "./security/XyPrissHPP";
+import compression, { shouldCompress } from "xypriss-compression";
+import { mergeWithDefaults } from "../../utils/mergeWithDefaults";
+import { RequestSignatureProtector } from "./security/RequestSignatureProtector";
+import { BrowserOnlyProtector } from "./security/BrowserOnlyProtector";
+import { TerminalOnlyProtector } from "./security/TerminalOnlyProtector";
+import { MobileOnlyProtector } from "./security/MobileOnlyProtector";
+import { MaliciousUrlScanner } from "./security/MaliciousUrlScanner";
+import { Logger } from "../../shared/logger/Logger";
+export class BuiltInMiddleware {
+    /**
+     * Get Helmet middleware for security headers
+     * @deprecated Handled natively by XHSC Engine
+     */
+    static helmet(options = {}) {
+        return (req, res, next) => {
+            // Note: XHSC Engine applies Helmet at the entry point
+            next();
+        };
+    }
+    /**
+     * Get CORS middleware
+     *
+     * By default, allows all headers to be developer-friendly.
+     * Developers can restrict headers via config if needed for production.
+     *
+     * Supports multiple origin matching patterns:
+     * - Strings with wildcards: "localhost:*", "*.example.com"
+     * - Regular expressions: /^localhost:\d+$/, /\.test\.com$/
+     * - Mixed arrays: ["localhost:*", /^api\..*\.com$/, "production.com"]
+     */
+    static cors(options = {}) {
+        const defaultOptions = {
+            origin: true,
+            methods: ["GET", "HEAD", "PUT", "PATCH", "POST", "DELETE"],
+            // Allow all headers by default - developers can restrict via config
+            // This prevents CORS issues during development
+            credentials: false,
+            maxAge: 86400, // 24 hours
+        };
+        // mergeWithDefaults ensures user-provided keys always win (even falsy
+        // values like `false` or `null`), and nested objects are deep-merged.
+        // This also handles the credentials:true + origin:* incompatibility:
+        // if the user sets credentials:true without an explicit origin, the
+        // default origin:true (wildcard) would cause a browser CORS error.
+        // mergeWithDefaults preserves the user's intent precisely.
+        const config = mergeWithDefaults(defaultOptions, options);
+        // ── Smart credentials/origin guard ────────────────────────────────────
+        // Even after a correct merge, if credentials:true ended up with the
+        // default origin:true (wildcard), switch to reflect-origin mode.
+        // This covers the case where the user sets credentials:true but does
+        // NOT provide an origin at all.
+        const userProvidedOrigin = options != null && "origin" in options;
+        if (config.credentials === true && !userProvidedOrigin) {
+            config.origin = (requestOrigin, callback) => {
+                callback(null, requestOrigin || false);
+            };
+        }
+        // FIX: Normalize array properties to handle cases where arrays were converted to objects
+        // This fixes the bug in multiServer mode where arrays become "[object Object]"
+        // Helper function to normalize array-like values to comma-separated strings
+        const normalizeToString = (value) => {
+            if (!value)
+                return undefined;
+            // If it's already a string, return it
+            if (typeof value === "string")
+                return value;
+            // If it's an array, join with comma
+            if (Array.isArray(value)) {
+                return value.join(", ");
+            }
+            // If it's an object (arrays converted to objects), convert back to array first
+            if (typeof value === "object") {
+                const arrayValues = Object.values(value);
+                return arrayValues.join(", ");
+            }
+            return undefined;
+        };
+        // Normalize methods
+        if (config.methods) {
+            const normalized = normalizeToString(config.methods);
+            if (normalized) {
+                config.methods = normalized;
+            }
+        }
+        // Normalize allowedHeaders
+        if (config.allowedHeaders) {
+            const normalized = normalizeToString(config.allowedHeaders);
+            if (normalized) {
+                config.allowedHeaders = normalized;
+            }
+        }
+        // Normalize exposedHeaders
+        if (config.exposedHeaders) {
+            const normalized = normalizeToString(config.exposedHeaders);
+            if (normalized) {
+                config.exposedHeaders = normalized;
+            }
+        }
+        // Create a custom origin function that handles strings, RegExp, and wildcards
+        if (Array.isArray(config.origin)) {
+            const validOrigins = config.origin.filter((origin) => typeof origin === "string" || origin instanceof RegExp);
+            if (validOrigins.length > 0) {
+                config.origin = this.createAdvancedOriginFunction(validOrigins);
+            }
+        }
+        return cors(config);
+    }
+    /**
+     * Create an advanced origin function that supports strings, RegExp, and wildcards
+     */
+    static createAdvancedOriginFunction(origins) {
+        return (origin, callback) => {
+            try {
+                // No Origin header (e.g. same-origin or curl without header) → allow
+                if (!origin) {
+                    return callback(null, false);
+                }
+                // Check each origin pattern
+                for (const pattern of origins) {
+                    if (typeof pattern === "string") {
+                        // Handle string patterns (including wildcards)
+                        if (this.matchesStringOrigin(origin, pattern)) {
+                            // ✅ Return the actual origin string
+                            return callback(null, origin);
+                        }
+                    }
+                    else if (pattern instanceof RegExp) {
+                        // Handle RegExp patterns
+                        if (pattern.test(origin)) {
+                            return callback(null, origin);
+                        }
+                    }
+                }
+                // No pattern matched → deny
+                return callback(null, false);
+            }
+            catch (error) {
+                // On error, deny access
+                return callback(error, false);
+            }
+        };
+    }
+    /**
+     * Check if an origin matches a string pattern (including wildcards)
+     */
+    static matchesStringOrigin(origin, pattern) {
+        // Exact match
+        if (pattern === origin) {
+            return true;
+        }
+        // Handle wildcards
+        if (pattern.includes("*")) {
+            // Convert wildcard pattern to RegExp
+            const regexPattern = pattern
+                .replace(/[.+?^${}()|[\]\\]/g, "\\$&") // Escape special regex chars
+                .replace(/\*/g, ".*"); // Convert * to .*
+            const regex = new RegExp(`^${regexPattern}$`);
+            return regex.test(origin);
+        }
+        return false;
+    }
+    /**
+     * Rate limiting is now handled natively or via XHSC.
+     * @deprecated Use XyPriss Native Rate Limiter instead.
+     */
+    /**
+     * Native XyPriss Rate Limiter
+     */
+    static rateLimit(options = {}) {
+        // Handled by XHSC Hyper-System Core natively for maximum performance.
+        // This middleware is kept as a placeholder to maintain API compatibility
+        // with existing code but delegates logic to the engine.
+        return (req, res, next) => {
+            // Note: XHSC Engine applies Rate Limiting at the entry point
+            // BEFORE reaching the worker, using tollbooth (Go).
+            next();
+        };
+    }
+    /**
+     * Get Compression middleware
+     */
+    static compression(options = {}) {
+        const defaultOptions = {
+            level: 6,
+            threshold: 1024, // Only compress responses >= 1KB
+            filter: options.filter ||
+                ((req, res) => {
+                    // Don't compress responses with this request header
+                    if (req.headers["x-no-compression"]) {
+                        return false;
+                    }
+                    // Import and use the library's filter function
+                    return shouldCompress(req, res);
+                }),
+        };
+        const config = mergeWithDefaults(defaultOptions, options);
+        // Robust check for ESM/CJS interop issues with the compression plugin
+        const compressionFn = typeof compression === "function"
+            ? compression
+            : compression.default;
+        if (typeof compressionFn !== "function") {
+            const logger = Logger.getInstance();
+            logger.error("middleware", "Compression plugin is not a function. Skipping compression.");
+            return (_req, _res, next) => next();
+        }
+        return compressionFn(config);
+    }
+    /**
+     * CSRF protection middleware
+     * @deprecated Handled natively by XHSC Engine
+     */
+    static csrf(options = {}) {
+        return (req, res, next) => {
+            // Note: XHSC Engine applies CSRF validation
+            next();
+        };
+    }
+    /**
+     * Get HPP (HTTP Parameter Pollution) protection middleware
+     */
+    static hpp(options = {}) {
+        const defaultOptions = {
+            whitelist: ["tags", "categories"], // Allow arrays for these parameters
+        };
+        const config = mergeWithDefaults(defaultOptions, options);
+        return hpp(config);
+    }
+    /**
+     * Get XSS protection middleware
+     * @deprecated Handled natively by XHSC Engine
+     */
+    static xss(options = {}) {
+        return (req, _res, next) => {
+            // Note: XHSC Engine applies XSS sanitization at the entry point
+            next();
+        };
+    }
+    // Morgan is not supported. This stub exists only to produce a clear runtime error.
+    static morgan(_options) {
+        throw new Error("[XyPriss] morgan is not supported. Use the Xyphra plugin for request logging: https://github.com/Nehonix-Team/xyphra");
+    }
+    /**
+     * Get Browser-Only middleware to block non-browser requests (like cURL)
+     */
+    static browserOnly(options = {}) {
+        // Import the BrowserOnlyProtector dynamically to keep BuiltInMiddleware clean
+        return new BrowserOnlyProtector(options).getMiddleware();
+    }
+    /**
+     * Get Terminal-Only middleware to block browser requests (allows cURL and API tools)
+     */
+    static terminalOnly(options = {}) {
+        // Import the TerminalOnlyProtector dynamically to keep BuiltInMiddleware clean
+        return new TerminalOnlyProtector(options).getMiddleware();
+    }
+    /**
+     * Get Mobile-Only middleware to block browser requests (allows mobile app access)
+     */
+    static mobileOnly(options = {}) {
+        // Import the MobileOnlyProtector dynamically to keep BuiltInMiddleware clean
+        return new MobileOnlyProtector(options).middleware();
+    }
+    /**
+     * Get Request Signature middleware for API authentication
+     */
+    static requestSignature(options) {
+        const protector = new RequestSignatureProtector(options);
+        return protector.getMiddleware();
+    }
+    /**
+     * Get all default security middleware
+     */
+    static security(options = {}) {
+        return {
+            helmet: this.helmet(options.helmet),
+            cors: this.cors(options.cors),
+            compression: this.compression(options.compression),
+            csrf: this.csrf(options.csrf),
+            requestSignature: this.requestSignature(options.requestSignature),
+        };
+    }
+    /**
+     * Get Malicious URL Scanner middleware
+     */
+    static maliciousUrlScanner(config, logger) {
+        return MaliciousUrlScanner.middleware(config, logger);
+    }
+}
+//# sourceMappingURL=BuiltInMiddleware.js.map

package/dist/src/middleware/built-in/BuiltInMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BuiltInMiddleware.js","sourceRoot":"","sources":["../../../../src/middleware/built-in/BuiltInMiddleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,IAAI,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,UAAU,IAAI,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,WAAW,EAAE,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAEjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAcpD,MAAM,OAAO,iBAAiB;IAC1B;;;OAGG;IACH,MAAM,CAAC,MAAM,CAAC,UAAe,EAAE;QAC3B,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;YACrC,sDAAsD;YACtD,IAAI,EAAE,CAAC;QACX,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,CAAC,UAAsC,EAAE;QAChD,MAAM,cAAc,GAAG;YACnB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;YAC1D,oEAAoE;YACpE,+CAA+C;YAC/C,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,KAAK,EAAE,WAAW;SAC7B,CAAC;QAEF,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,oEAAoE;QACpE,mEAAmE;QACnE,2DAA2D;QAC3D,MAAM,MAAM,GAAQ,iBAAiB,CAAC,cAAc,EAAE,OAAc,CAAC,CAAC;QAEtE,yEAAyE;QACzE,oEAAoE;QACpE,iEAAiE;QACjE,qEAAqE;QACrE,gCAAgC;QAChC,MAAM,kBAAkB,GACpB,OAAO,IAAI,IAAI,IAAI,QAAQ,IAAK,OAAkB,CAAC;QACvD,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACrD,MAAM,CAAC,MAAM,GAAG,CACZ,aAAiC,EACjC,QAA+D,EACjE,EAAE;gBACA,QAAQ,CAAC,IAAI,EAAE,aAAa,IAAI,KAAK,CAAC,CAAC;YAC3C,CAAC,CAAC;QACN,CAAC;QAED,yFAAyF;QACzF,+EAA+E;QAE/E,4EAA4E;QAC5E,MAAM,iBAAiB,GAAG,CAAC,KAAU,EAAsB,EAAE;YACzD,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAE7B,sCAAsC;YACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAE5C,oCAAoC;YACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAED,+EAA+E;YAC/E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;YAED,OAAO,SAAS,CAAC;QACrB,CAAC,CAAC;QAEF,oBAAoB;QACpB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,UAAU,EAAE,CAAC;gBACb,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC;YAChC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC5D,IAAI,UAAU,EAAE,CAAC;gBACb,MAAM,CAAC,cAAc,GAAG,UAAU,CAAC;YACvC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC5D,IAAI,UAAU,EAAE,CAAC;gBACb,MAAM,CAAC,cAAc,GAAG,UAAU,CAAC;YACvC,CAAC;QACL,CAAC;QAED,8EAA8E;QAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CACrC,CAAC,MAAW,EAA6B,EAAE,CACvC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,YAAY,MAAM,CAC7D,CAAC;YAEF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC;YACpE,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,4BAA4B,CAAC,OAA4B;QAOpE,OAAO,CACH,MAA0B,EAC1B,QAA+D,EACjE,EAAE;YACA,IAAI,CAAC;gBACD,qEAAqE;gBACrE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACV,OAAO,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACjC,CAAC;gBAED,4BAA4B;gBAC5B,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;wBAC9B,+CAA+C;wBAC/C,IAAI,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;4BAC5C,oCAAoC;4BACpC,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBAClC,CAAC;oBACL,CAAC;yBAAM,IAAI,OAAO,YAAY,MAAM,EAAE,CAAC;wBACnC,yBAAyB;wBACzB,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;4BACvB,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBAClC,CAAC;oBACL,CAAC;gBACL,CAAC;gBAED,4BAA4B;gBAC5B,OAAO,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,wBAAwB;gBACxB,OAAO,QAAQ,CAAC,KAAc,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;QACL,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,mBAAmB,CAC9B,MAAc,EACd,OAAe;QAEf,cAAc;QACd,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,mBAAmB;QACnB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,qCAAqC;YACrC,MAAM,YAAY,GAAG,OAAO;iBACvB,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,6BAA6B;iBACnE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB;YAE7C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH;;OAEG;IACH,MAAM,CAAC,SAAS,CAAC,UAAe,EAAE;QAC9B,sEAAsE;QACtE,yEAAyE;QACzE,wDAAwD;QACxD,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;YACrC,6DAA6D;YAC7D,oDAAoD;YACpD,IAAI,EAAE,CAAC;QACX,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,UAAe,EAAE;QAChC,MAAM,cAAc,GAAG;YACnB,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI,EAAE,iCAAiC;YAClD,MAAM,EACF,OAAO,CAAC,MAAM;gBACd,CAAC,CAAC,GAAQ,EAAE,GAAQ,EAAE,EAAE;oBACpB,oDAAoD;oBACpD,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;wBAClC,OAAO,KAAK,CAAC;oBACjB,CAAC;oBACD,+CAA+C;oBAC/C,OAAO,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACpC,CAAC,CAAC;SACT,CAAC;QAEF,MAAM,MAAM,GAAQ,iBAAiB,CAAC,cAAc,EAAE,OAAc,CAAC,CAAC;QAEtE,sEAAsE;QACtE,MAAM,aAAa,GACf,OAAO,WAAW,KAAK,UAAU;YAC7B,CAAC,CAAC,WAAW;YACb,CAAC,CAAE,WAAmB,CAAC,OAAO,CAAC;QAEvC,IAAI,OAAO,aAAa,KAAK,UAAU,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,CACR,YAAY,EACZ,6DAA6D,CAChE,CAAC;YACF,OAAO,CAAC,IAAS,EAAE,IAAS,EAAE,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QACvD,CAAC;QAED,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,IAAI,CAAC,UAAe,EAAE;QACzB,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;YACrC,4CAA4C;YAC5C,IAAI,EAAE,CAAC;QACX,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,GAAG,CAAC,UAAqC,EAAE;QAC9C,MAAM,cAAc,GAAG;YACnB,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,oCAAoC;SAC1E,CAAC;QAEF,MAAM,MAAM,GAAQ,iBAAiB,CAAC,cAAc,EAAE,OAAc,CAAC,CAAC;QACtE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,GAAG,CAAC,UAAe,EAAE;QACxB,OAAO,CAAC,GAAQ,EAAE,IAAS,EAAE,IAAS,EAAE,EAAE;YACtC,gEAAgE;YAChE,IAAI,EAAE,CAAC;QACX,CAAC,CAAC;IACN,CAAC;IAED,mFAAmF;IACnF,MAAM,CAAC,MAAM,CAAC,QAAc;QACxB,MAAM,IAAI,KAAK,CACX,sHAAsH,CACzH,CAAC;IACN,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,UAAe,EAAE;QAChC,8EAA8E;QAC9E,OAAO,IAAI,oBAAoB,CAAC,OAAc,CAAC,CAAC,aAAa,EAAE,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,UAAe,EAAE;QACjC,+EAA+E;QAC/E,OAAO,IAAI,qBAAqB,CAAC,OAAc,CAAC,CAAC,aAAa,EAAE,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,CAAC,UAAe,EAAE;QAC/B,6EAA6E;QAC7E,OAAO,IAAI,mBAAmB,CAAC,OAAc,CAAC,CAAC,UAAU,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,OAA+B;QACnD,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC,OAAc,CAAC,CAAC;QAChE,OAAO,SAAS,CAAC,aAAa,EAAE,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,UAAmC,EAAE;QACjD,OAAO;YACH,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC;YAClD,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,CAAC;SACpE,CAAC;IACN,CAAC;IAGD;;OAEG;IACH,MAAM,CAAC,mBAAmB,CAAC,MAAW,EAAE,MAAe;QACnD,OAAO,mBAAmB,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;CACJ"}

package/dist/src/middleware/built-in/ConversionProxyMiddleware.d.ts

@@ -0,0 +1,7 @@
+import { XyPrisRequest, XyPrisResponse, NextFunction } from "../../types/httpServer.type";
+/**
+ * ConversionProxyMiddleware - Provides a "Virtual Body" for converted XML requests.
+ * It allows developers to access attributes (e.g., "@id") via standard property access (e.g., "id").
+ */
+export declare const ConversionProxyMiddleware: (attributePrefix?: string, textContentKey?: string) => (req: XyPrisRequest, res: XyPrisResponse, next: NextFunction) => void;
+//# sourceMappingURL=ConversionProxyMiddleware.d.ts.map

package/dist/src/middleware/built-in/ConversionProxyMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConversionProxyMiddleware.d.ts","sourceRoot":"","sources":["../../../../src/middleware/built-in/ConversionProxyMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE1F;;;GAGG;AACH,eAAO,MAAM,yBAAyB,GAClC,kBAAiB,MAAY,EAC7B,iBAAgB,MAAgB,MAExB,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,SAOtE,CAAC"}

package/dist/src/middleware/built-in/ConversionProxyMiddleware.js

@@ -0,0 +1,48 @@
+/**
+ * ConversionProxyMiddleware - Provides a "Virtual Body" for converted XML requests.
+ * It allows developers to access attributes (e.g., "@id") via standard property access (e.g., "id").
+ */
+export const ConversionProxyMiddleware = (attributePrefix = "@", textContentKey = "#text") => {
+    return (req, res, next) => {
+        // Only apply if the request was converted from XML by XHSC
+        if (req.headers["x-xhsc-origin-format"] === "xml" && req.body && typeof req.body === "object") {
+            req.body = createProxy(req.body, attributePrefix, textContentKey);
+        }
+        next?.();
+    };
+};
+/**
+ * Recursive proxy creator for converted objects.
+ */
+function createProxy(target, prefix, textKey) {
+    if (target === null || typeof target !== "object") {
+        return target;
+    }
+    // If it's an array, wrap each element
+    if (Array.isArray(target)) {
+        return target.map(item => createProxy(item, prefix, textKey));
+    }
+    return new Proxy(target, {
+        get(obj, prop) {
+            if (typeof prop !== "string")
+                return obj[prop];
+            // 1. Direct access
+            if (prop in obj) {
+                const val = obj[prop];
+                // If the value is a text-only object, return the text directly
+                if (val && typeof val === "object" && textKey in val && Object.keys(val).length === 1) {
+                    return val[textKey];
+                }
+                return typeof val === "object" ? createProxy(val, prefix, textKey) : val;
+            }
+            // 2. Attribute access (e.g. body.id -> body["@id"])
+            const attrKey = `${prefix}${prop}`;
+            if (attrKey in obj) {
+                return obj[attrKey];
+            }
+            // 3. Smart unwrapping (e.g. body.user -> body.user["#text"] if it's the only meaningful value)
+            return undefined;
+        }
+    });
+}
+//# sourceMappingURL=ConversionProxyMiddleware.js.map

package/dist/src/middleware/built-in/ConversionProxyMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConversionProxyMiddleware.js","sourceRoot":"","sources":["../../../../src/middleware/built-in/ConversionProxyMiddleware.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACrC,kBAA0B,GAAG,EAC7B,iBAAyB,OAAO,EAClC,EAAE;IACA,OAAO,CAAC,GAAkB,EAAE,GAAmB,EAAE,IAAkB,EAAE,EAAE;QACnE,2DAA2D;QAC3D,IAAI,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5F,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,EAAE,EAAE,CAAC;IACb,CAAC,CAAC;AACN,CAAC,CAAC;AAEF;;GAEG;AACH,SAAS,WAAW,CAAC,MAAW,EAAE,MAAc,EAAE,OAAe;IAC7D,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,sCAAsC;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACrB,GAAG,CAAC,GAAG,EAAE,IAAI;YACT,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YAE/C,mBAAmB;YACnB,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;gBACtB,+DAA+D;gBAC/D,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACpF,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;gBACD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC7E,CAAC;YAED,oDAAoD;YACpD,MAAM,OAAO,GAAG,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;YACnC,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;gBACjB,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;YAED,+FAA+F;YAC/F,OAAO,SAAS,CAAC;QACrB,CAAC;KACJ,CAAC,CAAC;AACP,CAAC"}

package/dist/src/middleware/built-in/ResponseManipulationMiddleware.d.ts

@@ -0,0 +1,11 @@
+import { ResponseManipulationConfig } from "../../types/types";
+import { MiddlewareFunction } from "../../types/mod/core";
+/**
+ * Creates a middleware that manipulates the response body before sending it to the client.
+ * This is useful for masking sensitive data in deep objects.
+ *
+ * @param config Configuration for response manipulation
+ * @returns Middleware function
+ */
+export declare function createResponseManipulationMiddleware(config: ResponseManipulationConfig): MiddlewareFunction;
+//# sourceMappingURL=ResponseManipulationMiddleware.d.ts.map

package/dist/src/middleware/built-in/ResponseManipulationMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResponseManipulationMiddleware.d.ts","sourceRoot":"","sources":["../../../../src/middleware/built-in/ResponseManipulationMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,0BAA0B,EAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D;;;;;;GAMG;AACH,wBAAgB,oCAAoC,CAChD,MAAM,EAAE,0BAA0B,GACnC,kBAAkB,CAiFpB"}

package/dist/src/middleware/built-in/ResponseManipulationMiddleware.js

@@ -0,0 +1,164 @@
+import { XStringify } from "xypriss-security";
+/**
+ * Creates a middleware that manipulates the response body before sending it to the client.
+ * This is useful for masking sensitive data in deep objects.
+ *
+ * @param config Configuration for response manipulation
+ * @returns Middleware function
+ */
+export function createResponseManipulationMiddleware(config) {
+    return (req, res, next) => {
+        if (!config.enabled || !config.rules || config.rules.length === 0) {
+            return next();
+        }
+        const originalJson = res.json;
+        const originalSend = res.send;
+        const maxDepth = config.maxDepth || 10;
+        const manipulate = (data) => {
+            if (typeof data !== "object" || data === null) {
+                return data;
+            }
+            // We need a deep clone to avoid mutating the original data
+            // but we must be careful with very large objects.
+            let result;
+            try {
+                // For objects that might have circular refs or be too large,
+                // JSON stringify is a decent first-pass filter/clonner.
+                result = JSON.parse(XStringify(data, {
+                    pureRaw: true,
+                    maxDepth: 100,
+                    maxLength: 2000000, // 2MB limit
+                    truncateStrings: 1000000, // 1MB limit per string (pour le HTML)
+                    reportCircularPath: true,
+                }));
+            }
+            catch (e) {
+                // If it fails (circular refs), we can't easily manipulate safely
+                // without a proper deep clone.
+                return data;
+            }
+            for (const rule of config.rules) {
+                applyRule(result, rule.field, rule.replacement, rule.preserve, rule.valuePattern, 0, maxDepth);
+            }
+            return result;
+        };
+        // Override res.json
+        res.json = function (data) {
+            try {
+                const manipulatedData = manipulate(data);
+                return originalJson.call(this, manipulatedData);
+            }
+            catch (err) {
+                return originalJson.call(this, data);
+            }
+        };
+        // Override res.send
+        res.send = function (data) {
+            if (typeof data === "object" &&
+                data !== null &&
+                !Buffer.isBuffer(data)) {
+                try {
+                    const manipulatedData = manipulate(data);
+                    return originalSend.call(this, manipulatedData);
+                }
+                catch (err) {
+                    return originalSend.call(this, data);
+                }
+            }
+            return originalSend.call(this, data);
+        };
+        next();
+    };
+}
+/**
+ * Recursively applies a manipulation rule to an object.
+ */
+function applyRule(obj, field, replacement, preserve, valuePattern, depth = 0, maxDepth = 10) {
+    if (!obj || typeof obj !== "object" || depth > maxDepth)
+        return;
+    // 1. Global value matching if field is omitted
+    if (!field && valuePattern) {
+        for (const key in obj) {
+            if (Object.prototype.hasOwnProperty.call(obj, key)) {
+                maskValue(obj, key, replacement, preserve, valuePattern);
+                // Recurse deeper
+                if (obj[key] && typeof obj[key] === "object") {
+                    applyRule(obj[key], undefined, replacement, preserve, valuePattern, depth + 1, maxDepth);
+                }
+            }
+        }
+        return;
+    }
+    // 2. RegExp matching on keys
+    if (field instanceof RegExp) {
+        for (const key in obj) {
+            if (Object.prototype.hasOwnProperty.call(obj, key)) {
+                if (field.test(key)) {
+                    maskValue(obj, key, replacement, preserve, valuePattern);
+                }
+                // Recurse for nested objects even if key didn't match (to find matches deeper)
+                if (obj[key] && typeof obj[key] === "object") {
+                    applyRule(obj[key], field, replacement, preserve, valuePattern, depth + 1, maxDepth);
+                }
+            }
+        }
+        return;
+    }
+    // 3. Dot notation matching
+    const keys = field.split(".");
+    let current = obj;
+    for (let i = 0; i < keys.length - 1; i++) {
+        const key = keys[i];
+        if (current[key] && typeof current[key] === "object") {
+            current = current[key];
+        }
+        else {
+            return; // Path not found
+        }
+    }
+    const lastKey = keys[keys.length - 1];
+    if (current[lastKey] !== undefined) {
+        maskValue(current, lastKey, replacement, preserve, valuePattern);
+    }
+}
+/**
+ * Masks or replaces a value at a specific key in an object.
+ */
+function maskValue(obj, key, replacement, preserve, valuePattern) {
+    const value = obj[key];
+    // If valuePattern is specified, only mask if the value matches the pattern
+    if (valuePattern && typeof value === "string") {
+        if (!valuePattern.test(value)) {
+            return;
+        }
+    }
+    else if (valuePattern) {
+        // Skip non-string values if we're looking for a pattern match
+        // (Patterns typically only make sense for string/error messages)
+        return;
+    }
+    if (replacement !== undefined) {
+        obj[key] = replacement;
+    }
+    else if (typeof value === "string") {
+        const preserveLen = preserve || 0;
+        if (value.length > preserveLen) {
+            obj[key] =
+                value.substring(0, preserveLen) +
+                    "*".repeat(Math.min(value.length - preserveLen, 50)); // Limit mask length
+        }
+        else {
+            obj[key] = "*".repeat(Math.min(value.length, 50));
+        }
+    }
+    else if (typeof value === "number" || typeof value === "boolean") {
+        obj[key] = "[MASKED]";
+    }
+    else if (typeof value === "object") {
+        obj[key] = "[HIDDEN OBJECT]";
+    }
+    else {
+        obj[key] = "********";
+    }
+}
+//# sourceMappingURL=ResponseManipulationMiddleware.js.map

package/dist/src/middleware/built-in/ResponseManipulationMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResponseManipulationMiddleware.js","sourceRoot":"","sources":["../../../../src/middleware/built-in/ResponseManipulationMiddleware.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,UAAU,oCAAoC,CAChD,MAAkC;IAElC,OAAO,CAAC,GAAoB,EAAE,GAAqB,EAAE,IAAS,EAAE,EAAE;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;QAC9B,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;QAE9B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QAEvC,MAAM,UAAU,GAAG,CAAC,IAAS,EAAE,EAAE;YAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,2DAA2D;YAC3D,kDAAkD;YAClD,IAAI,MAAW,CAAC;YAChB,IAAI,CAAC;gBACD,6DAA6D;gBAC7D,wDAAwD;gBACxD,MAAM,GAAG,IAAI,CAAC,KAAK,CACf,UAAU,CAAC,IAAI,EAAE;oBACb,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,GAAG;oBACb,SAAS,EAAE,OAAO,EAAE,YAAY;oBAChC,eAAe,EAAE,OAAO,EAAE,sCAAsC;oBAChE,kBAAkB,EAAE,IAAI;iBAC3B,CAAC,CACL,CAAC;YACN,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,iEAAiE;gBACjE,+BAA+B;gBAC/B,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAM,EAAE,CAAC;gBAC/B,SAAS,CACL,MAAM,EACN,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,YAAY,EACjB,CAAC,EACD,QAAQ,CACX,CAAC;YACN,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC,CAAC;QAEF,oBAAoB;QACpB,GAAG,CAAC,IAAI,GAAG,UAAU,IAAS;YAC1B,IAAI,CAAC;gBACD,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;gBACzC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACzC,CAAC;QACL,CAAC,CAAC;QAEF,oBAAoB;QACpB,GAAG,CAAC,IAAI,GAAG,UAAU,IAAS;YAC1B,IACI,OAAO,IAAI,KAAK,QAAQ;gBACxB,IAAI,KAAK,IAAI;gBACb,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EACxB,CAAC;gBACC,IAAI,CAAC;oBACD,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;oBACzC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;gBACpD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACX,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACzC,CAAC;YACL,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC,CAAC;QAEF,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CACd,GAAQ,EACR,KAAkC,EAClC,WAAgB,EAChB,QAAiB,EACjB,YAAqB,EACrB,QAAgB,CAAC,EACjB,WAAmB,EAAE;IAErB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,GAAG,QAAQ;QAAE,OAAO;IAEhE,+CAA+C;IAC/C,IAAI,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBACjD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;gBACzD,iBAAiB;gBACjB,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC3C,SAAS,CACL,GAAG,CAAC,GAAG,CAAC,EACR,SAAS,EACT,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,KAAK,GAAG,CAAC,EACT,QAAQ,CACX,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO;IACX,CAAC;IAED,6BAA6B;IAC7B,IAAI,KAAK,YAAY,MAAM,EAAE,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBACjD,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;gBAC7D,CAAC;gBACD,+EAA+E;gBAC/E,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC3C,SAAS,CACL,GAAG,CAAC,GAAG,CAAC,EACR,KAAK,EACL,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,KAAK,GAAG,CAAC,EACT,QAAQ,CACX,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO;IACX,CAAC;IAED,2BAA2B;IAC3B,MAAM,IAAI,GAAI,KAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,GAAG,GAAG,CAAC;IAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,iBAAiB;QAC7B,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CACd,GAAQ,EACR,GAAW,EACX,WAAgB,EAChB,QAAiB,EACjB,YAAqB;IAErB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IAEvB,2EAA2E;IAC3E,IAAI,YAAY,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;QACX,CAAC;IACL,CAAC;SAAM,IAAI,YAAY,EAAE,CAAC;QACtB,8DAA8D;QAC9D,iEAAiE;QACjE,OAAO;IACX,CAAC;IAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;IAC3B,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,QAAQ,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC;gBACJ,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC;oBAC/B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,oBAAoB;QAClF,CAAC;aAAM,CAAC;YACJ,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QACjE,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;IAC1B,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC;IACjC,CAAC;SAAM,CAAC;QACJ,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;IAC1B,CAAC;AACL,CAAC"}