xypriss 9.11.13 → 9.12.0

package/dist/src/server/utils/internalFlagsFunctions.js

@@ -0,0 +1,150 @@
+/***************************************************************************
+ * XyPrissJS - Fast And Secure
+ *
+ * @author Nehonix
+ * @license Nehonix OSL (NOSL)
+ *
+ * Copyright (c) 2025 Nehonix. All rights reserved.
+ *
+ * This License governs the use, modification, and distribution of software
+ * provided by NEHONIX under its open source projects.
+ * NEHONIX is committed to fostering collaborative innovation while strictly
+ * protecting its intellectual property rights.
+ * Violation of any term of this License will result in immediate termination of all granted rights
+ * and may subject the violator to legal action.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+ * INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE,
+ * AND NON-INFRINGEMENT.
+ * IN NO EVENT SHALL NEHONIX BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+ * OR CONSEQUENTIAL DAMAGES ARISING FROM THE USE OR INABILITY TO USE THE SOFTWARE,
+ * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+ *
+ ***************************************************************************** */
+import crypto from "crypto";
+import { internalFlags } from "../const/internalFlags.js";
+/**
+ * A cryptographically random token generated once per process lifetime.
+ *
+ * This token is used to sign internal flag injections, ensuring that only
+ * framework-level code (which has access to this module's closure) can
+ * legitimately pass internal flags through `createServer`.
+ *
+ * The token is:
+ * - Never exported or logged
+ * - Regenerated on every process start (not predictable across restarts)
+ * - Sealed via Object.defineProperty to prevent runtime tampering
+ */
+const _TOKEN_KEY = "__xy_internal_token__";
+let _token;
+// Seal the token against any external mutation attempt.
+// In complex scenarios (e.g. plugins with their own node_modules), multiple copies
+// of this module may be loaded. We use the global object to share the token
+// but we must be careful not to redefine a non-configurable property.
+const globalObj = globalThis;
+const existingDescriptor = Object.getOwnPropertyDescriptor(globalObj, "__xy_token_seal__");
+if (!existingDescriptor) {
+    try {
+        Object.defineProperty(globalObj, "__xy_token_seal__", {
+            get: () => _token,
+            set: () => {
+                // Silently reject any external write attempt
+            },
+            configurable: false,
+            enumerable: false,
+        });
+        _token = crypto.randomBytes(32).toString("hex");
+    }
+    catch {
+        // Someone else defined it between the check and defineProperty (rare race condition)
+        _token = globalObj.__xy_token_seal__;
+    }
+}
+else {
+    _token = globalObj.__xy_token_seal__;
+}
+/**
+ * Attaches an internal framework flag to a server options object,
+ * along with a signed token that authorizes its use.
+ *
+ * This function is **strictly reserved for XyPriss framework internals**.
+ * It must never be called or re-exported by plugin authors or end users.
+ *
+ * The signed token is automatically stripped by `rejectInternalFlag` before
+ * any user-visible processing occurs, so it never leaks into the options
+ * that reach `XyServerCreator.create()`.
+ *
+ * @param options - The base server options to extend
+ * @param flag - The internal flag name to inject (must be in `internalFlags`)
+ * @returns A new options object with the flag and authorization token attached
+ *
+ * @internal
+ * @example
+ * // Used internally in PluginLoader when spawning auxiliary servers:
+ * createServer(withInternalFlag({ server: { port: 5628 } }, "isAuxiliary"));
+ */
+export function withInternalFlag(options, flag) {
+    const signed = {
+        ...options,
+        [flag]: true,
+        [_TOKEN_KEY]: _token,
+    };
+    // Seal the token field on this specific object to prevent proxy-based
+    // interception or post-injection replacement
+    Object.defineProperty(signed, _TOKEN_KEY, {
+        value: _token,
+        writable: false,
+        configurable: false,
+        enumerable: false, // Hidden from JSON.stringify, console.log, etc.
+    });
+    return signed;
+}
+/**
+ * Validates that no internal-only flags are present in user-supplied options.
+ *
+ * This function acts as a **security gate** at the entry point of `createServer`.
+ * It inspects the incoming options for any flag listed in `internalFlags` and
+ * verifies that a valid framework-issued token accompanies it.
+ *
+ * Behavior:
+ * - If an internal flag is found **with** a valid token → allowed (framework call),
+ *   the token is stripped before further processing.
+ * - If an internal flag is found **without** a valid token → the flag is deleted
+ *   and a fatal `Error` is thrown, terminating server creation.
+ * - If no internal flags are present → no-op, options pass through unchanged.
+ *
+ * After this function runs, the options object is guaranteed to contain no
+ * authorization token, regardless of outcome.
+ *
+ * @param options - The raw server options passed to `createServer`
+ * @throws {Error} If an internal flag is detected without a valid authorization token
+ *
+ * @example
+ * // Called automatically at the top of createServer():
+ * rejectInternalFlag(options); // throws if user injected isAuxiliary
+ */
+export function rejectInternalFlag(options) {
+    // Check token before stripping — order matters
+    const hasValidToken = options[_TOKEN_KEY] === _token;
+    // Always strip the token immediately, whether valid or not.
+    // This ensures it never propagates further into the server bootstrap.
+    try {
+        delete options[_TOKEN_KEY];
+    }
+    catch {
+        // Field may be non-configurable if someone attempted to freeze/proxy
+        // the options object — safe to ignore, validation already happened above.
+    }
+    for (const flag of internalFlags) {
+        if (options[flag] !== undefined && options[flag] !== false) {
+            if (!hasValidToken) {
+                // Unauthorized use: strip the flag and halt server creation
+                delete options[flag];
+                throw new Error(`[XyPriss Security] Unauthorized use of internal flag '${flag}'. ` +
+                    `This property is reserved for framework-internal use only and cannot be set by user code.`);
+            }
+            // Authorized internal call: flag is retained for use in XyServerCreator
+        }
+    }
+}
+//# sourceMappingURL=internalFlagsFunctions.js.map

package/dist/src/server/utils/internalFlagsFunctions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internalFlagsFunctions.js","sourceRoot":"","sources":["../../../../src/server/utils/internalFlagsFunctions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;iFAsBiF;AAEjF,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAC3C,IAAI,MAAc,CAAC;AAEnB,wDAAwD;AACxD,mFAAmF;AACnF,4EAA4E;AAC5E,sEAAsE;AACtE,MAAM,SAAS,GAAG,UAAiB,CAAC;AACpC,MAAM,kBAAkB,GAAG,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAE3F,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACtB,IAAI,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,mBAAmB,EAAE;YAClD,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM;YACjB,GAAG,EAAE,GAAG,EAAE;gBACN,6CAA6C;YACjD,CAAC;YACD,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACL,qFAAqF;QACrF,MAAM,GAAG,SAAS,CAAC,iBAAiB,CAAC;IACzC,CAAC;AACL,CAAC;KAAM,CAAC;IACJ,MAAM,GAAG,SAAS,CAAC,iBAAiB,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gBAAgB,CAC5B,OAA4B,EAC5B,IAAoC;IAEpC,MAAM,MAAM,GAAG;QACX,GAAG,OAAO;QACV,CAAC,IAAI,CAAC,EAAE,IAAI;QACZ,CAAC,UAAU,CAAC,EAAE,MAAM;KACvB,CAAC;IAEF,sEAAsE;IACtE,6CAA6C;IAC7C,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE;QACtC,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,KAAK,EAAE,gDAAgD;KACtE,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC3D,+CAA+C;IAC/C,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC;IAErD,4DAA4D;IAC5D,sEAAsE;IACtE,IAAI,CAAC;QACD,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACL,qEAAqE;QACrE,0EAA0E;IAC9E,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;YACzD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACjB,4DAA4D;gBAC5D,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;gBACrB,MAAM,IAAI,KAAK,CACX,yDAAyD,IAAI,KAAK;oBAC9D,2FAA2F,CAClG,CAAC;YACN,CAAC;YACD,wEAAwE;QAC5E,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/src/server/utils/shouldRegisterRouteOnServer.d.ts

@@ -0,0 +1,6 @@
+import { MultiServerConfig } from "../ServerFactory";
+/**
+ * Check if a route should be registered on a specific server
+ */
+export declare function shouldRegisterRouteOnServer(routePath: string, serverConfig: MultiServerConfig): boolean;
+//# sourceMappingURL=shouldRegisterRouteOnServer.d.ts.map

package/dist/src/server/utils/shouldRegisterRouteOnServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shouldRegisterRouteOnServer.d.ts","sourceRoot":"","sources":["../../../../src/server/utils/shouldRegisterRouteOnServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD;;GAEG;AACH,wBAAgB,2BAA2B,CACvC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,iBAAiB,GAChC,OAAO,CA6BT"}

package/dist/src/server/utils/shouldRegisterRouteOnServer.js

@@ -0,0 +1,30 @@
+/**
+ * Check if a route should be registered on a specific server
+ */
+export function shouldRegisterRouteOnServer(routePath, serverConfig) {
+    // If no route filtering is configured, allow all routes
+    if (!serverConfig.allowedRoutes && !serverConfig.routePrefix) {
+        return true;
+    }
+    // Check route prefix
+    if (serverConfig.routePrefix &&
+        routePath.startsWith(serverConfig.routePrefix)) {
+        return true;
+    }
+    // Check allowed routes patterns
+    if (serverConfig.allowedRoutes) {
+        return serverConfig.allowedRoutes.some((pattern) => {
+            if (pattern.endsWith("/*")) {
+                // Wildcard pattern
+                const prefix = pattern.slice(0, -2);
+                return routePath.startsWith(prefix);
+            }
+            else {
+                // Exact match
+                return routePath === pattern;
+            }
+        });
+    }
+    return false;
+}
+//# sourceMappingURL=shouldRegisterRouteOnServer.js.map

package/dist/src/server/utils/shouldRegisterRouteOnServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shouldRegisterRouteOnServer.js","sourceRoot":"","sources":["../../../../src/server/utils/shouldRegisterRouteOnServer.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACvC,SAAiB,EACjB,YAA+B;IAE/B,wDAAwD;IACxD,IAAI,CAAC,YAAY,CAAC,aAAa,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,qBAAqB;IACrB,IACI,YAAY,CAAC,WAAW;QACxB,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,EAChD,CAAC;QACC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,gCAAgC;IAChC,IAAI,YAAY,CAAC,aAAa,EAAE,CAAC;QAC7B,OAAO,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAC/C,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,mBAAmB;gBACnB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACpC,OAAO,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACJ,cAAc;gBACd,OAAO,SAAS,KAAK,OAAO,CAAC;YACjC,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/src/server/utils/wildcardMatcher.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Wildcard pattern matching utility for CORS origins
+ *
+ * Supports patterns like:
+ * - "localhost:*" matches "localhost:3000", "localhost:8080", etc.
+ * - "*.example.com" matches "api.example.com", "app.example.com", etc.
+ * - "127.0.0.1:*" matches "127.0.0.1:3000", "127.0.0.1:8080", etc.
+ * - "::1:*" matches "::1:3000", "::1:8080", etc.
+ */
+/**
+ * Checks if an origin matches a wildcard pattern
+ * @param origin - The origin to check (e.g., "http://localhost:3000")
+ * @param pattern - The wildcard pattern (e.g., "localhost:*")
+ * @returns true if the origin matches the pattern
+ */
+export declare function matchesWildcardPattern(origin: string, pattern: string): boolean;
+/**
+ * Checks if an origin is allowed based on an array of patterns
+ * @param origin - The origin to check
+ * @param allowedOrigins - Array of allowed origins (can include wildcards)
+ * @returns true if the origin is allowed
+ */
+export declare function isOriginAllowed(origin: string, allowedOrigins: string[]): boolean;
+/**
+ * Creates a CORS origin function that supports wildcard patterns
+ * @param allowedOrigins - Array of allowed origins (can include wildcards)
+ * @returns Function compatible with cors middleware
+ */
+export declare function createWildcardOriginFunction(allowedOrigins: string[]): (origin: string | undefined, callback: (err: Error | null, allow?: boolean) => void) => void;
+//# sourceMappingURL=wildcardMatcher.d.ts.map

package/dist/src/server/utils/wildcardMatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wildcardMatcher.d.ts","sourceRoot":"","sources":["../../../../src/server/utils/wildcardMatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAuHH;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GAChB,OAAO,CA0DT;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC3B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EAAE,GACzB,OAAO,CA+BT;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,cAAc,EAAE,MAAM,EAAE,IAe7D,QAAQ,MAAM,GAAG,SAAS,EAC1B,UAAU,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,UAoB7D"}

package/dist/src/server/utils/wildcardMatcher.js

@@ -0,0 +1,220 @@
+/**
+ * Wildcard pattern matching utility for CORS origins
+ *
+ * Supports patterns like:
+ * - "localhost:*" matches "localhost:3000", "localhost:8080", etc.
+ * - "*.example.com" matches "api.example.com", "app.example.com", etc.
+ * - "127.0.0.1:*" matches "127.0.0.1:3000", "127.0.0.1:8080", etc.
+ * - "::1:*" matches "::1:3000", "::1:8080", etc.
+ */
+/**
+ * Validates if a string is a valid pattern
+ */
+function isValidPattern(pattern) {
+    if (typeof pattern !== "string" || pattern.trim().length === 0) {
+        return false;
+    }
+    // Check for invalid wildcard usage (e.g., multiple consecutive wildcards)
+    if (pattern.includes("**")) {
+        return false;
+    }
+    return true;
+}
+/**
+ * Normalizes a host string by trimming and converting to lowercase
+ */
+function normalizeHost(host) {
+    return host.trim().toLowerCase();
+}
+/**
+ * Extracts the default port for a given protocol
+ */
+function getDefaultPort(protocol) {
+    const protocolMap = {
+        "http:": "80",
+        "https:": "443",
+        "ws:": "80",
+        "wss:": "443",
+    };
+    return protocolMap[protocol] || null;
+}
+/**
+ * Checks if a string is a valid IPv6 address
+ */
+function isIPv6(hostname) {
+    // Basic IPv6 validation - contains colons and valid hex characters
+    return hostname.includes(":") && /^[0-9a-f:]+$/i.test(hostname);
+}
+/**
+ * Extracts host:port from an IPv6 URL
+ */
+function extractIPv6Host(url) {
+    let hostname = url.hostname;
+    // Remove brackets if present
+    if (hostname.startsWith("[") && hostname.endsWith("]")) {
+        hostname = hostname.slice(1, -1);
+    }
+    return url.port ? `${hostname}:${url.port}` : hostname;
+}
+/**
+ * Extracts host from a URL with special handling for default ports
+ */
+function extractHostFromURL(urlString) {
+    try {
+        const url = new URL(urlString);
+        // Handle IPv6 addresses
+        if (url.hostname.startsWith("[") || isIPv6(url.hostname)) {
+            return extractIPv6Host(url);
+        }
+        // Use url.host which includes port, or add default port if missing
+        if (url.port) {
+            return normalizeHost(url.host);
+        }
+        // Add default port for localhost when port is implicit
+        const defaultPort = getDefaultPort(url.protocol);
+        if (defaultPort && url.hostname === "localhost") {
+            return normalizeHost(`${url.hostname}:${defaultPort}`);
+        }
+        return normalizeHost(url.host);
+    }
+    catch (error) {
+        return null;
+    }
+}
+/**
+ * Sanitizes a pattern by escaping special regex characters
+ */
+function escapeRegexSpecialChars(str) {
+    return str.replace(/[.+?^${}()|[\]\\]/g, "\\$&");
+}
+/**
+ * Converts a wildcard pattern to a regular expression
+ * @param pattern - The wildcard pattern (e.g., "localhost:*", "*.example.com")
+ * @returns RegExp object for matching
+ */
+function patternToRegex(pattern) {
+    if (!isValidPattern(pattern)) {
+        throw new Error(`Invalid pattern: ${pattern}`);
+    }
+    const normalizedPattern = normalizeHost(pattern);
+    // Escape special regex characters except for *
+    const escaped = escapeRegexSpecialChars(normalizedPattern).replace(/\\\*/g, ".*"); // Replace escaped \* with .*
+    // Ensure exact match with ^ and $
+    return new RegExp(`^${escaped}$`, "i");
+}
+/**
+ * Checks if an origin matches a wildcard pattern
+ * @param origin - The origin to check (e.g., "http://localhost:3000")
+ * @param pattern - The wildcard pattern (e.g., "localhost:*")
+ * @returns true if the origin matches the pattern
+ */
+export function matchesWildcardPattern(origin, pattern) {
+    // Validate inputs
+    if (!origin || typeof origin !== "string" || origin.trim().length === 0) {
+        return false;
+    }
+    if (!pattern ||
+        typeof pattern !== "string" ||
+        pattern.trim().length === 0) {
+        return false;
+    }
+    const normalizedOrigin = origin.trim();
+    const normalizedPattern = pattern.trim();
+    // Handle exact matches first (no wildcards)
+    if (!normalizedPattern.includes("*")) {
+        // Try exact match
+        if (normalizedOrigin === normalizedPattern) {
+            return true;
+        }
+        // Try case-insensitive match
+        if (normalizedOrigin.toLowerCase() === normalizedPattern.toLowerCase()) {
+            return true;
+        }
+        // Try matching if origin contains the pattern (for backwards compatibility)
+        if (normalizedOrigin
+            .toLowerCase()
+            .includes(normalizedPattern.toLowerCase())) {
+            return true;
+        }
+        return false;
+    }
+    // Extract the host:port part from the origin URL
+    let originHost = extractHostFromURL(normalizedOrigin);
+    // If URL parsing failed, treat it as a host:port string directly
+    if (originHost === null) {
+        originHost = normalizeHost(normalizedOrigin);
+    }
+    try {
+        const regex = patternToRegex(normalizedPattern);
+        return regex.test(originHost);
+    }
+    catch (error) {
+        // If pattern is invalid, return false
+        return false;
+    }
+}
+/**
+ * Checks if an origin is allowed based on an array of patterns
+ * @param origin - The origin to check
+ * @param allowedOrigins - Array of allowed origins (can include wildcards)
+ * @returns true if the origin is allowed
+ */
+export function isOriginAllowed(origin, allowedOrigins) {
+    // Validate inputs
+    if (!origin || typeof origin !== "string" || origin.trim().length === 0) {
+        return false;
+    }
+    if (!allowedOrigins ||
+        !Array.isArray(allowedOrigins) ||
+        allowedOrigins.length === 0) {
+        return false;
+    }
+    // Filter out invalid patterns and check each one
+    const validPatterns = allowedOrigins.filter((p) => p && typeof p === "string" && p.trim().length > 0);
+    if (validPatterns.length === 0) {
+        return false;
+    }
+    return validPatterns.some((pattern) => {
+        try {
+            return matchesWildcardPattern(origin, pattern);
+        }
+        catch (error) {
+            // Skip invalid patterns
+            return false;
+        }
+    });
+}
+/**
+ * Creates a CORS origin function that supports wildcard patterns
+ * @param allowedOrigins - Array of allowed origins (can include wildcards)
+ * @returns Function compatible with cors middleware
+ */
+export function createWildcardOriginFunction(allowedOrigins) {
+    // Validate and cache the allowed origins array
+    if (!allowedOrigins || !Array.isArray(allowedOrigins)) {
+        throw new Error("allowedOrigins must be an array");
+    }
+    const validOrigins = allowedOrigins.filter((p) => p && typeof p === "string" && p.trim().length > 0);
+    if (validOrigins.length === 0) {
+        console.warn("createWildcardOriginFunction: No valid origins provided");
+    }
+    return (origin, callback) => {
+        // Validate callback
+        if (typeof callback !== "function") {
+            throw new Error("Callback must be a function");
+        }
+        // Allow requests with no origin (like mobile apps or curl requests)
+        if (!origin) {
+            return callback(null, true);
+        }
+        try {
+            const allowed = isOriginAllowed(origin, validOrigins);
+            callback(null, allowed);
+        }
+        catch (error) {
+            // In case of any error, deny access for security
+            callback(null, false);
+        }
+    };
+}
+//# sourceMappingURL=wildcardMatcher.js.map

package/dist/src/server/utils/wildcardMatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wildcardMatcher.js","sourceRoot":"","sources":["../../../../src/server/utils/wildcardMatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;GAEG;AACH,SAAS,cAAc,CAAC,OAAe;IACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,0EAA0E;IAC1E,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,QAAgB;IACpC,MAAM,WAAW,GAA2B;QACxC,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,KAAK;KAChB,CAAC;IAEF,OAAO,WAAW,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,SAAS,MAAM,CAAC,QAAgB;IAC5B,mEAAmE;IACnE,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,GAAQ;IAC7B,IAAI,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAE5B,6BAA6B;IAC7B,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,SAAiB;IACzC,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAE/B,wBAAwB;QACxB,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAED,mEAAmE;QACnE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACX,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,uDAAuD;QACvD,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC9C,OAAO,aAAa,CAAC,GAAG,GAAG,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,GAAW;IACxC,OAAO,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,OAAe;IACnC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAEjD,+CAA+C;IAC/C,MAAM,OAAO,GAAG,uBAAuB,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAC9D,OAAO,EACP,IAAI,CACP,CAAC,CAAC,6BAA6B;IAEhC,kCAAkC;IAClC,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAClC,MAAc,EACd,OAAe;IAEf,kBAAkB;IAClB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IACI,CAAC,OAAO;QACR,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAC7B,CAAC;QACC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAEzC,4CAA4C;IAC5C,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,kBAAkB;QAClB,IAAI,gBAAgB,KAAK,iBAAiB,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,6BAA6B;QAC7B,IACI,gBAAgB,CAAC,WAAW,EAAE,KAAK,iBAAiB,CAAC,WAAW,EAAE,EACpE,CAAC;YACC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,4EAA4E;QAC5E,IACI,gBAAgB;aACX,WAAW,EAAE;aACb,QAAQ,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC,EAChD,CAAC;YACC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,iDAAiD;IACjD,IAAI,UAAU,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAEtD,iEAAiE;IACjE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACtB,UAAU,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,CAAC;QACD,MAAM,KAAK,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,sCAAsC;QACtC,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC3B,MAAc,EACd,cAAwB;IAExB,kBAAkB;IAClB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IACI,CAAC,cAAc;QACf,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9B,cAAc,CAAC,MAAM,KAAK,CAAC,EAC7B,CAAC;QACC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,iDAAiD;IACjD,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC3D,CAAC;IAEF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC;YACD,OAAO,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,wBAAwB;YACxB,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,cAAwB;IACjE,+CAA+C;IAC/C,IAAI,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC3D,CAAC;IAEF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,CACH,MAA0B,EAC1B,QAAsD,EACxD,EAAE;QACA,oBAAoB;QACpB,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC;QAED,oEAAoE;QACpE,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,iDAAiD;YACjD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;IACL,CAAC,CAAC;AACN,CAAC"}

package/dist/src/shared/logger/DEFAULT_LOGGER_CONFIG.d.ts

@@ -0,0 +1,3 @@
+export type LoggerConfig = NonNullable<ServerOptions["logging"]>;
+export declare const DEFAULT_LOGGER_CONFIG: LoggerConfig;
+//# sourceMappingURL=DEFAULT_LOGGER_CONFIG.d.ts.map

package/dist/src/shared/logger/DEFAULT_LOGGER_CONFIG.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DEFAULT_LOGGER_CONFIG.d.ts","sourceRoot":"","sources":["../../../../src/shared/logger/DEFAULT_LOGGER_CONFIG.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;AAEjE,eAAO,MAAM,qBAAqB,EAAE,YA8DnC,CAAC"}

package/dist/src/shared/logger/DEFAULT_LOGGER_CONFIG.js

@@ -0,0 +1,63 @@
+import { DEFAULT_CONSOLE_CONFIG } from "../../server/components/fastapi/console/types";
+export const DEFAULT_LOGGER_CONFIG = {
+    enabled: true,
+    level: "info",
+    components: {
+        server: true,
+        cache: true,
+        cluster: true,
+        performance: true,
+        plugins: true,
+        security: true,
+        routes: true,
+        userApp: true,
+        middleware: true,
+        router: true,
+        typescript: true,
+        acpes: true,
+        other: true,
+        ipc: true,
+        memory: true,
+        lifecycle: true,
+        routing: true,
+        xems: true,
+        console: false, // noisy by default
+    },
+    types: {
+        startup: true,
+        warnings: true,
+        errors: true,
+        performance: true,
+        debug: false,
+        hotReload: true,
+        portSwitching: true,
+        lifecycle: true,
+    },
+    format: {
+        timestamps: true,
+        colors: true,
+        prefix: true,
+        compact: false,
+        includeMemory: false,
+        includeProcessId: false,
+        maxLineLength: 0,
+    },
+    buffer: {
+        enabled: false,
+        maxSize: 1000,
+        flushInterval: 5000,
+        autoFlush: true,
+    },
+    errorHandling: {
+        maxErrorsPerMinute: 100,
+        suppressRepeatedErrors: true,
+        suppressAfterCount: 5,
+        resetSuppressionAfter: 300000,
+    },
+    // Console Interception with Encryption Support
+    consoleInterception: {
+        ...DEFAULT_CONSOLE_CONFIG,
+        enabled: false,
+    },
+};
+//# sourceMappingURL=DEFAULT_LOGGER_CONFIG.js.map

package/dist/src/shared/logger/DEFAULT_LOGGER_CONFIG.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DEFAULT_LOGGER_CONFIG.js","sourceRoot":"","sources":["../../../../src/shared/logger/DEFAULT_LOGGER_CONFIG.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAIvF,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IAC/C,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,MAAM;IACb,UAAU,EAAE;QACR,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,IAAI;QAEjB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;QAEd,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,IAAI;QACT,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,KAAK,EAAE,mBAAmB;KACtC;IACD,KAAK,EAAE;QACH,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,IAAI;KAClB;IACD,MAAM,EAAE;QACJ,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,KAAK;QACd,aAAa,EAAE,KAAK;QACpB,gBAAgB,EAAE,KAAK;QACvB,aAAa,EAAE,CAAC;KACnB;IACD,MAAM,EAAE;QACJ,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,IAAI;KAClB;IACD,aAAa,EAAE;QACX,kBAAkB,EAAE,GAAG;QACvB,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,CAAC;QACrB,qBAAqB,EAAE,MAAO;KACjC;IACD,+CAA+C;IAC/C,mBAAmB,EAAE;QACjB,GAAG,sBAAsB;QACzB,OAAO,EAAE,KAAK;KACjB;CACJ,CAAC"}

package/dist/src/shared/logger/DEFAULT_PALETTE.d.ts

@@ -0,0 +1,16 @@
+export declare const DEFAULT_PALETTE: {
+    reset: string;
+    bold: string;
+    dim: string;
+    gray: string;
+    white: string;
+    red: string;
+    brightRed: string;
+    yellow: string;
+    green: string;
+    brightGreen: string;
+    cyan: string;
+    blue: string;
+    magenta: string;
+};
+//# sourceMappingURL=DEFAULT_PALETTE.d.ts.map

package/dist/src/shared/logger/DEFAULT_PALETTE.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DEFAULT_PALETTE.d.ts","sourceRoot":"","sources":["../../../../src/shared/logger/DEFAULT_PALETTE.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,eAAe;;;;;;;;;;;;;;CAc3B,CAAC"}

package/dist/src/shared/logger/DEFAULT_PALETTE.js

@@ -0,0 +1,16 @@
+export const DEFAULT_PALETTE = {
+    reset: "\x1b[0m",
+    bold: "\x1b[1m",
+    dim: "\x1b[2m",
+    gray: "\x1b[90m",
+    white: "\x1b[37m",
+    red: "\x1b[31m",
+    brightRed: "\x1b[91m",
+    yellow: "\x1b[33m",
+    green: "\x1b[32m",
+    brightGreen: "\x1b[92m",
+    cyan: "\x1b[36m",
+    blue: "\x1b[34m",
+    magenta: "\x1b[35m",
+};
+//# sourceMappingURL=DEFAULT_PALETTE.js.map

package/dist/src/shared/logger/DEFAULT_PALETTE.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DEFAULT_PALETTE.js","sourceRoot":"","sources":["../../../../src/shared/logger/DEFAULT_PALETTE.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,UAAU;IACjB,GAAG,EAAE,UAAU;IACf,SAAS,EAAE,UAAU;IACrB,MAAM,EAAE,UAAU;IAClB,KAAK,EAAE,UAAU;IACjB,WAAW,EAAE,UAAU;IACvB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,UAAU;CACtB,CAAC"}