xypriss 9.11.13 → 9.12.0

package/dist/src/utils/getIp.d.ts

@@ -0,0 +1,53 @@
+/***************************************************************************
+ * XyPrissJS - Fast And Secure
+ *
+ * @author Nehonix
+ * @license Nehonix OSL (NOSL)
+ *
+ * Copyright (c) 2025 Nehonix. All rights reserved.
+ *
+ * This License governs the use, modification, and distribution of software
+ * provided by NEHONIX under its open source projects.
+ * NEHONIX is committed to fostering collaborative innovation while strictly
+ * protecting its intellectual property rights.
+ * Violation of any term of this License will result in immediate termination of all granted rights
+ * and may subject the violator to legal action.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+ * INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE,
+ * AND NON-INFRINGEMENT.
+ * IN NO EVENT SHALL NEHONIX BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+ * OR CONSEQUENTIAL DAMAGES ARISING FROM THE USE OR INABILITY TO USE THE SOFTWARE,
+ * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+ *
+ ***************************************************************************** */
+import { XyPrisRequest } from "../types/httpServer.type";
+/** Result enriched with metadata for observability / debugging. */
+export interface GetIpResult {
+    /** Resolved IP address (IPv4 or IPv6, normalised). */
+    ip: string;
+    /** Header / source that provided the IP. */
+    source: IpSource;
+}
+export type IpSource = "cf-connecting-ip" | "true-client-ip" | "x-real-ip" | "x-forwarded-for" | "forwarded" | "x-client-ip" | "x-cluster-client-ip" | "req.ip" | "socket" | "fallback";
+/**
+ * Robustly extracts the **real** client IP from a request.
+ *
+ * Resolution order (most-specific / trustworthy first):
+ *  1. `CF-Connecting-IP`     – Cloudflare; single, authoritative value
+ *  2. `True-Client-IP`       – Akamai / Cloudflare enterprise
+ *  3. `X-Real-IP`            – Nginx single-proxy setups
+ *  4. `X-Client-IP`          – Some load balancers / Apache mod_remoteip
+ *  5. `X-Cluster-Client-IP`  – Rackspace, some Nginx configs
+ *  6. `Forwarded`            – RFC 7239 standard header
+ *  7. `X-Forwarded-For`      – De-facto standard (picks first public IP)
+ *  8. `req.ip`               – XyPrisRequest parsed value
+ *  9. `socket.remoteAddress` – Raw TCP socket
+ * 10. `"127.0.0.1"`          – Ultimate fallback (never throws)
+ *
+ * @param req       - The request object (XyPrisRequest-compatible).
+ * @param enriched  - When `true`, returns `{ ip, source }` for observability.
+ */
+export declare function getIp(req: XyPrisRequest): string;
+export declare function getIp(req: XyPrisRequest, enriched: true): GetIpResult;
+//# sourceMappingURL=getIp.d.ts.map

package/dist/src/utils/getIp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIp.d.ts","sourceRoot":"","sources":["../../../src/utils/getIp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;iFAsBiF;AAIjF,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAIzD,mEAAmE;AACnE,MAAM,WAAW,WAAW;IACxB,sDAAsD;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,4CAA4C;IAC5C,MAAM,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,MAAM,QAAQ,GACd,kBAAkB,GAClB,gBAAgB,GAChB,WAAW,GACX,iBAAiB,GACjB,WAAW,GACX,aAAa,GACb,qBAAqB,GACrB,QAAQ,GACR,QAAQ,GACR,UAAU,CAAC;AAuGjB;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAAC;AAClD,wBAAgB,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,GAAG,WAAW,CAAC"}

package/dist/src/utils/getIp.js

@@ -0,0 +1,160 @@
+/***************************************************************************
+ * XyPrissJS - Fast And Secure
+ *
+ * @author Nehonix
+ * @license Nehonix OSL (NOSL)
+ *
+ * Copyright (c) 2025 Nehonix. All rights reserved.
+ *
+ * This License governs the use, modification, and distribution of software
+ * provided by NEHONIX under its open source projects.
+ * NEHONIX is committed to fostering collaborative innovation while strictly
+ * protecting its intellectual property rights.
+ * Violation of any term of this License will result in immediate termination of all granted rights
+ * and may subject the violator to legal action.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+ * INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE,
+ * AND NON-INFRINGEMENT.
+ * IN NO EVENT SHALL NEHONIX BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+ * OR CONSEQUENTIAL DAMAGES ARISING FROM THE USE OR INABILITY TO USE THE SOFTWARE,
+ * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+ *
+ ***************************************************************************** */
+// ─── Constants ────────────────────────────────────────────────────────────────
+/** Regex that validates a raw IPv4 or IPv6 string (no port, no brackets). */
+const IPV4_RE = /^(25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.(25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.(25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.(25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/;
+const IPV6_RE = /^[\da-f:]+$/i;
+/** Private / loopback ranges we never want to return as the *real* client IP. */
+const PRIVATE_RANGES = [
+    /^127\./, // 127.0.0.0/8  – loopback
+    /^10\./, // 10.0.0.0/8   – RFC 1918
+    /^172\.(1[6-9]|2\d|3[01])\./, // 172.16.0.0/12 – RFC 1918
+    /^192\.168\./, // 192.168.0.0/16 – RFC 1918
+    /^169\.254\./, // 169.254.0.0/16 – link-local
+    /^::1$/, // IPv6 loopback
+    /^fe80:/i, // IPv6 link-local
+    /^fc|^fd/i, // IPv6 unique local
+];
+const FALLBACK_IP = "127.0.0.1";
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+/**
+ * Strips an IPv6-mapped IPv4 prefix ("::ffff:") and surrounding brackets.
+ * "::ffff:1.2.3.4" → "1.2.3.4"
+ * "[::1]"          → "::1"
+ */
+function normaliseIp(raw) {
+    let ip = raw.trim();
+    // Strip brackets used in URLs: [::1]:3000 → ::1
+    if (ip.startsWith("[")) {
+        ip = ip.replace(/^\[([^\]]+)\].*$/, "$1");
+    }
+    // Strip port from IPv4: 1.2.3.4:3000 → 1.2.3.4
+    const v4WithPort = ip.match(/^(\d{1,3}(?:\.\d{1,3}){3}):\d+$/);
+    if (v4WithPort)
+        ip = v4WithPort[1];
+    // Strip IPv6-mapped IPv4 prefix
+    if (/^::ffff:/i.test(ip))
+        ip = ip.slice(7);
+    return ip;
+}
+/** Returns true only for syntactically valid, non-private IPv4 / IPv6. */
+function isValidPublicIp(raw) {
+    const ip = normaliseIp(raw);
+    if (!ip)
+        return false;
+    const isIpv4 = IPV4_RE.test(ip);
+    const isIpv6 = !isIpv4 && IPV6_RE.test(ip);
+    if (!isIpv4 && !isIpv6)
+        return false;
+    return !PRIVATE_RANGES.some((re) => re.test(ip));
+}
+/** Safely reads a header value – returns undefined for missing / empty. */
+function header(headers, name) {
+    const val = headers[name.toLowerCase()];
+    if (!val)
+        return undefined;
+    const str = Array.isArray(val) ? val[0] : val;
+    return str?.trim() || undefined;
+}
+/**
+ * Parses the RFC 7239 `Forwarded` header.
+ * `Forwarded: for=1.2.3.4;proto=https, for=5.6.7.8`
+ * → ["1.2.3.4", "5.6.7.8"]
+ */
+function parseForwardedHeader(value) {
+    return value
+        .split(",")
+        .map((part) => {
+        const match = part.match(/for=["[]?([^\]",;]+)/i);
+        return match ? normaliseIp(match[1]) : "";
+    })
+        .filter(Boolean);
+}
+/**
+ * Given a comma-separated (or array) `X-Forwarded-For` header,
+ * returns the first *valid public* IP, or the first entry as fallback.
+ */
+function pickFromXff(raw) {
+    const entries = (Array.isArray(raw) ? raw.flatMap((v) => v.split(",")) : raw.split(",")).map((s) => normaliseIp(s));
+    // Prefer first valid public IP (leftmost = original client in standard chains)
+    const pub = entries.find(isValidPublicIp);
+    if (pub)
+        return pub;
+    // Accept first private IP rather than nothing (intranet / dev env)
+    const first = entries[0];
+    return first && (IPV4_RE.test(first) || IPV6_RE.test(first))
+        ? first
+        : undefined;
+}
+export function getIp(req, enriched) {
+    const headers = (req.headers ?? {});
+    const resolve = (ip, source) => {
+        const normalised = normaliseIp(ip);
+        return enriched ? { ip: normalised, source } : normalised;
+    };
+    // 1. CF-Connecting-IP
+    const cfIp = header(headers, "cf-connecting-ip");
+    if (cfIp)
+        return resolve(cfIp, "cf-connecting-ip");
+    // 2. True-Client-IP
+    const trueClientIp = header(headers, "true-client-ip");
+    if (trueClientIp)
+        return resolve(trueClientIp, "true-client-ip");
+    // 3. X-Real-IP
+    const xRealIp = header(headers, "x-real-ip");
+    if (xRealIp)
+        return resolve(xRealIp, "x-real-ip");
+    // 4. X-Client-IP
+    const xClientIp = header(headers, "x-client-ip");
+    if (xClientIp)
+        return resolve(xClientIp, "x-client-ip");
+    // 5. X-Cluster-Client-IP
+    const xClusterIp = header(headers, "x-cluster-client-ip");
+    if (xClusterIp)
+        return resolve(xClusterIp, "x-cluster-client-ip");
+    // 6. Forwarded (RFC 7239)
+    const forwarded = header(headers, "forwarded");
+    if (forwarded) {
+        const [first] = parseForwardedHeader(forwarded);
+        if (first)
+            return resolve(first, "forwarded");
+    }
+    // 7. X-Forwarded-For
+    const xForwardedFor = headers["x-forwarded-for"];
+    if (xForwardedFor) {
+        const picked = pickFromXff(xForwardedFor);
+        if (picked)
+            return resolve(picked, "x-forwarded-for");
+    }
+    // 8. req.ip (framework-level, e.g. XyPrisRequest with trust proxy)
+    if (req.ip)
+        return resolve(req.ip, "req.ip");
+    // 9. Raw socket
+    const socketAddr = req.socket?.remoteAddress;
+    if (socketAddr)
+        return resolve(socketAddr, "socket");
+    // 10. Last-resort fallback
+    return resolve(FALLBACK_IP, "fallback");
+}
+//# sourceMappingURL=getIp.js.map

package/dist/src/utils/getIp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIp.js","sourceRoot":"","sources":["../../../src/utils/getIp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;iFAsBiF;AA4BjF,iFAAiF;AAEjF,6EAA6E;AAC7E,MAAM,OAAO,GACT,0JAA0J,CAAC;AAE/J,MAAM,OAAO,GAAG,cAAc,CAAC;AAE/B,iFAAiF;AACjF,MAAM,cAAc,GAAa;IAC7B,QAAQ,EAAE,0BAA0B;IACpC,OAAO,EAAE,0BAA0B;IACnC,4BAA4B,EAAE,2BAA2B;IACzD,aAAa,EAAE,4BAA4B;IAC3C,aAAa,EAAE,8BAA8B;IAC7C,OAAO,EAAE,gBAAgB;IACzB,SAAS,EAAE,kBAAkB;IAC7B,UAAU,EAAE,oBAAoB;CACnC,CAAC;AAEF,MAAM,WAAW,GAAG,WAAW,CAAC;AAEhC,iFAAiF;AAEjF;;;;GAIG;AACH,SAAS,WAAW,CAAC,GAAW;IAC5B,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,gDAAgD;IAChD,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,+CAA+C;IAC/C,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/D,IAAI,UAAU;QAAE,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACnC,gCAAgC;IAChC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,EAAE,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,SAAS,eAAe,CAAC,GAAW;IAChC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,2EAA2E;AAC3E,SAAS,MAAM,CACX,OAAsD,EACtD,IAAY;IAEZ,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9C,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,KAAa;IACvC,OAAO,KAAK;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAsB;IACvC,MAAM,OAAO,GAAa,CACtB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CACzE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7B,+EAA+E;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1C,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAEpB,mEAAmE;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC;AAwBD,MAAM,UAAU,KAAK,CACjB,GAAkB,EAClB,QAAe;IAEf,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAGjC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,MAAgB,EAAwB,EAAE;QACnE,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QACnC,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IAC9D,CAAC,CAAC;IAEF,sBAAsB;IACtB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACjD,IAAI,IAAI;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAEnD,oBAAoB;IACpB,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACvD,IAAI,YAAY;QAAE,OAAO,OAAO,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAEjE,eAAe;IACf,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAElD,iBAAiB;IACjB,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACjD,IAAI,SAAS;QAAE,OAAO,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAExD,yBAAyB;IACzB,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC1D,IAAI,UAAU;QAAE,OAAO,OAAO,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAElE,0BAA0B;IAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/C,IAAI,SAAS,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,KAAK;YAAE,OAAO,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IAED,qBAAqB;IACrB,MAAM,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjD,IAAI,aAAa,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QAC1C,IAAI,MAAM;YAAE,OAAO,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC1D,CAAC;IAED,mEAAmE;IACnE,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAE7C,gBAAgB;IAChB,MAAM,UAAU,GAAI,GAAG,CAAC,MAAc,EAAE,aAAa,CAAC;IACtD,IAAI,UAAU;QAAE,OAAO,OAAO,CAAC,UAAoB,EAAE,QAAQ,CAAC,CAAC;IAE/D,2BAA2B;IAC3B,OAAO,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AAC5C,CAAC"}

package/dist/src/utils/getMime.d.ts

@@ -0,0 +1,52 @@
+/***************************************************************************
+ * XyPriss - Fast And Secure
+ *
+ * @author Nehonix
+ * @license Nehonix OSL (NOSL)
+ *
+ * Copyright (c) 2025 Nehonix. All rights reserved.
+ ****************************************************************************/
+/**
+ * Resolves a single MIME type from a file extension.
+ *
+ * @param ext - The file extension (e.g., '.png' or 'jpg').
+ * @returns The corresponding MIME type or 'application/octet-stream' if unknown.
+ */
+export declare const getMime: (ext: string) => string;
+/**
+ * Advanced utility to resolve multiple MIME types from file extensions.
+ *
+ * This helper is designed to simplify server configurations, particularly for
+ * 'fileUpload' and security policies, by allowing developers to specify
+ * human-readable extensions instead of complex MIME strings.
+ *
+ * FEATURES:
+ * - Supports single extensions or arrays.
+ * - Automatically normalizes extensions (handles missing dots).
+ * - Deduplicates results to ensure a clean MIME array.
+ * - Can fall back to global 'fileUpload.allowedExtensions' if no argument is provided.
+ *
+ * @param extensions - A single extension (e.g., '.png') or an array (e.g., ['.jpg', '.pdf']).
+ *                     If omitted, the function attempts to read from global configuration.
+ * @returns A unique array of resolved MIME types.
+ *
+ * @example
+ * // 1. Map an array of extensions for file upload configuration
+ * const uploadConfig = {
+ *   allowedMimeTypes: getMimes(['.png', '.jpg', '.jpeg', '.webp'])
+ * };
+ * // Result: ['image/png', 'image/jpeg', 'image/webp']
+ *
+ * @example
+ * // 2. Map a single extension
+ * const mimes = getMimes('.pdf');
+ * // Result: ['application/pdf']
+ *
+ * @example
+ * // 3. Automatic detection from xypriss.config.json
+ * // If config has: { "fileUpload": { "allowedExtensions": [".zip", ".rar"] } }
+ * const mimes = getMimes();
+ * // Result: ['application/zip', 'application/vnd.rar']
+ */
+export declare const getMimes: (extensions?: string | string[]) => string[];
+//# sourceMappingURL=getMime.d.ts.map

package/dist/src/utils/getMime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getMime.d.ts","sourceRoot":"","sources":["../../../src/utils/getMime.ts"],"names":[],"mappings":"AAAA;;;;;;;8EAO8E;AAK9E;;;;;GAKG;AACH,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,KAAG,MAMrC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,eAAO,MAAM,QAAQ,GAAI,aAAa,MAAM,GAAG,MAAM,EAAE,KAAG,MAAM,EA4B/D,CAAC"}

package/dist/src/utils/getMime.js

@@ -0,0 +1,90 @@
+/***************************************************************************
+ * XyPriss - Fast And Secure
+ *
+ * @author Nehonix
+ * @license Nehonix OSL (NOSL)
+ *
+ * Copyright (c) 2025 Nehonix. All rights reserved.
+ ****************************************************************************/
+import { MIME_MAP } from "../server/const/MIME_MAP";
+import { __cfg__ } from "../ConfigurationManager";
+/**
+ * Resolves a single MIME type from a file extension.
+ *
+ * @param ext - The file extension (e.g., '.png' or 'jpg').
+ * @returns The corresponding MIME type or 'application/octet-stream' if unknown.
+ */
+export const getMime = (ext) => {
+    if (!ext)
+        return "application/octet-stream";
+    const normalized = ext.startsWith(".")
+        ? ext.toLowerCase()
+        : `.${ext.toLowerCase()}`;
+    return MIME_MAP?.[normalized] || "application/octet-stream";
+};
+/**
+ * Advanced utility to resolve multiple MIME types from file extensions.
+ *
+ * This helper is designed to simplify server configurations, particularly for
+ * 'fileUpload' and security policies, by allowing developers to specify
+ * human-readable extensions instead of complex MIME strings.
+ *
+ * FEATURES:
+ * - Supports single extensions or arrays.
+ * - Automatically normalizes extensions (handles missing dots).
+ * - Deduplicates results to ensure a clean MIME array.
+ * - Can fall back to global 'fileUpload.allowedExtensions' if no argument is provided.
+ *
+ * @param extensions - A single extension (e.g., '.png') or an array (e.g., ['.jpg', '.pdf']).
+ *                     If omitted, the function attempts to read from global configuration.
+ * @returns A unique array of resolved MIME types.
+ *
+ * @example
+ * // 1. Map an array of extensions for file upload configuration
+ * const uploadConfig = {
+ *   allowedMimeTypes: getMimes(['.png', '.jpg', '.jpeg', '.webp'])
+ * };
+ * // Result: ['image/png', 'image/jpeg', 'image/webp']
+ *
+ * @example
+ * // 2. Map a single extension
+ * const mimes = getMimes('.pdf');
+ * // Result: ['application/pdf']
+ *
+ * @example
+ * // 3. Automatic detection from xypriss.config.json
+ * // If config has: { "fileUpload": { "allowedExtensions": [".zip", ".rar"] } }
+ * const mimes = getMimes();
+ * // Result: ['application/zip', 'application/vnd.rar']
+ */
+export const getMimes = (extensions) => {
+    let targetExts = [];
+    if (extensions) {
+        targetExts = Array.isArray(extensions) ? extensions : [extensions];
+    }
+    else {
+        // Fallback to global framework configuration if available
+        try {
+            const uMimeConfig = __cfg__.get("fileUpload")?.allowedExtensions;
+            if (Array.isArray(uMimeConfig)) {
+                targetExts = uMimeConfig;
+            }
+        }
+        catch (e) {
+            // Config might not be initialized yet in early-loading contexts
+            return [];
+        }
+    }
+    if (targetExts.length === 0)
+        return [];
+    const mimeSet = new Set();
+    for (const ext of targetExts) {
+        if (!ext)
+            continue;
+        const mime = getMime(ext);
+        if (mime)
+            mimeSet.add(mime);
+    }
+    return Array.from(mimeSet);
+};
+//# sourceMappingURL=getMime.js.map

package/dist/src/utils/getMime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getMime.js","sourceRoot":"","sources":["../../../src/utils/getMime.ts"],"names":[],"mappings":"AAAA;;;;;;;8EAO8E;AAE9E,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAW,EAAU,EAAE;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,0BAA0B,CAAC;IAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAClC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE;QACnB,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;IAC9B,OAAO,QAAQ,EAAE,CAAC,UAAU,CAAC,IAAI,0BAA0B,CAAC;AAChE,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,UAA8B,EAAY,EAAE;IACjE,IAAI,UAAU,GAAa,EAAE,CAAC;IAE9B,IAAI,UAAU,EAAE,CAAC;QACb,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACJ,0DAA0D;QAC1D,IAAI,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,iBAAiB,CAAC;YACjE,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7B,UAAU,GAAG,WAAW,CAAC;YAC7B,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,gEAAgE;YAChE,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC,CAAC"}

package/dist/src/utils/mergeWithDefaults.d.ts

@@ -0,0 +1,92 @@
+/***************************************************************************
+ * XyPrissJS - Fast And Secure
+ *
+ * @author Nehonix
+ * @license Nehonix OSL (NOSL)
+ *
+ * Copyright (c) 2025 Nehonix. All rights reserved.
+ *
+ * This License governs the use, modification, and distribution of software
+ * provided by NEHONIX under its open source projects.
+ * NEHONIX is committed to fostering collaborative innovation while strictly
+ * protecting its intellectual property rights.
+ * Violation of any term of this License will result in immediate termination of all granted rights
+ * and may subject the violator to legal action.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+ * INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE,
+ * AND NON-INFRINGEMENT.
+ * IN NO EVENT SHALL NEHONIX BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+ * OR CONSEQUENTIAL DAMAGES ARISING FROM THE USE OR INABILITY TO USE THE SOFTWARE,
+ * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+ *
+ ***************************************************************************** */
+export type ArrayStrategy = "replace" | "concat" | "merge";
+export interface MergeOptions {
+    /**
+     * How to handle arrays when both `defaults` and `userOptions` have an
+     * array at tme key.
+     * - `"replace"` (default) — user array wins entirely.
+     * - `"concat"`            — `[...defaultArray, ...userArray]`.
+     * - `"merge"`             — element-wise: recurse for plain-object items,
+     *                           otherwise use the user element (or the default
+     *                           element when the user array is shorter).
+     */
+    arrayStrategy?: ArrayStrategy;
+}
+/**
+ * mergeWithDefaults — Smart config merge utility
+ *
+ * Unlike `{ ...defaults, ...userOptions }` (shallow spread), this utility:
+ *
+ * 1. **User-provided keys always win** — a key present in `userOptions` (even
+ *    if its value is `false`, `null`, `0`, or `""`) is NEVER overridden by a
+ *    default. Only truly absent keys fall back to the default.
+ *
+ * 2. **Deep merge for plain objects** — nested objects are merged recursively
+ *    at any depth, so that `userOptions.rateLimit.max` doesn't wipe out
+ *    `defaults.rateLimit.windowMs`.
+ *
+ * 3. **No mutation** — returns a new object; inputs are untouched.
+ *
+ * 4. **Circular reference protection** — cycles are detected and broken
+ *    (the circular reference is replaced by `undefined`).
+ *
+ * 5. **Prototype pollution protection** — dangerous keys (`__proto__`,
+ *    `constructor`, `prototype`) are silently ignored.
+ *
+ * 6. **Array strategy** — configurable via `options.arrayStrategy`:
+ *    - `"replace"` (default) — user array fully replaces the default array.
+ *    - `"concat"`            — arrays are concatenated (defaults first).
+ *    - `"merge"`             — elements are merged index-by-index (plain
+ *                              objects recurse, primitives use user value).
+ *
+ * 7. **Symbol keys** — included in the merge alongside string keys.
+ *
+ * ### Example
+ * ```ts
+ * const defaults = {
+ *   origin: true,
+ *   credentials: false,
+ *   maxAge: 86400,
+ *   rateLimit: { max: 100, windowMs: 60_000 },
+ * };
+ * const user = {
+ *   credentials: true,
+ *   origin: ["http://localhost:5173"],
+ *   rateLimit: { max: 50 },          // windowMs falls back to default
+ * };
+ *
+ * mergeWithDefaults(defaults, user);
+ * // → {
+ * //     origin: ["http://localhost:5173"],
+ * //     credentials: true,
+ * //     maxAge: 86400,
+ * //     rateLimit: { max: 50, windowMs: 60_000 },
+ * //   }
+ * ```
+ */
+export declare function mergeWithDefaults<T extends Record<string | symbol, any>>(defaults: T, userOptions: Partial<T> | undefined | null, options?: MergeOptions, 
+/** @internal — tracks visited objects to break circular refs */
+_seen?: WeakSet<object>): T;
+//# sourceMappingURL=mergeWithDefaults.d.ts.map

package/dist/src/utils/mergeWithDefaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mergeWithDefaults.d.ts","sourceRoot":"","sources":["../../../src/utils/mergeWithDefaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;iFAsBiF;AAMjF,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,YAAY;IACzB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CACjC;AASD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,GAAG,CAAC,EACpE,QAAQ,EAAE,CAAC,EACX,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,GAAG,IAAI,EAC1C,OAAO,GAAE,YAAiB;AAC1B,gEAAgE;AAChE,KAAK,GAAE,OAAO,CAAC,MAAM,CAAiB,GACvC,CAAC,CAqDH"}

package/dist/src/utils/mergeWithDefaults.js

@@ -0,0 +1,172 @@
+/***************************************************************************
+ * XyPrissJS - Fast And Secure
+ *
+ * @author Nehonix
+ * @license Nehonix OSL (NOSL)
+ *
+ * Copyright (c) 2025 Nehonix. All rights reserved.
+ *
+ * This License governs the use, modification, and distribution of software
+ * provided by NEHONIX under its open source projects.
+ * NEHONIX is committed to fostering collaborative innovation while strictly
+ * protecting its intellectual property rights.
+ * Violation of any term of this License will result in immediate termination of all granted rights
+ * and may subject the violator to legal action.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+ * INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE,
+ * AND NON-INFRINGEMENT.
+ * IN NO EVENT SHALL NEHONIX BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+ * OR CONSEQUENTIAL DAMAGES ARISING FROM THE USE OR INABILITY TO USE THE SOFTWARE,
+ * EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+ *
+ ***************************************************************************** */
+// ---------------------------------------------------------------------------
+// Implementation
+// ---------------------------------------------------------------------------
+/** Keys that must never be written to avoid prototype pollution. */
+const BLOCKED_KEYS = new Set(["__proto__", "constructor", "prototype"]);
+/**
+ * mergeWithDefaults — Smart config merge utility
+ *
+ * Unlike `{ ...defaults, ...userOptions }` (shallow spread), this utility:
+ *
+ * 1. **User-provided keys always win** — a key present in `userOptions` (even
+ *    if its value is `false`, `null`, `0`, or `""`) is NEVER overridden by a
+ *    default. Only truly absent keys fall back to the default.
+ *
+ * 2. **Deep merge for plain objects** — nested objects are merged recursively
+ *    at any depth, so that `userOptions.rateLimit.max` doesn't wipe out
+ *    `defaults.rateLimit.windowMs`.
+ *
+ * 3. **No mutation** — returns a new object; inputs are untouched.
+ *
+ * 4. **Circular reference protection** — cycles are detected and broken
+ *    (the circular reference is replaced by `undefined`).
+ *
+ * 5. **Prototype pollution protection** — dangerous keys (`__proto__`,
+ *    `constructor`, `prototype`) are silently ignored.
+ *
+ * 6. **Array strategy** — configurable via `options.arrayStrategy`:
+ *    - `"replace"` (default) — user array fully replaces the default array.
+ *    - `"concat"`            — arrays are concatenated (defaults first).
+ *    - `"merge"`             — elements are merged index-by-index (plain
+ *                              objects recurse, primitives use user value).
+ *
+ * 7. **Symbol keys** — included in the merge alongside string keys.
+ *
+ * ### Example
+ * ```ts
+ * const defaults = {
+ *   origin: true,
+ *   credentials: false,
+ *   maxAge: 86400,
+ *   rateLimit: { max: 100, windowMs: 60_000 },
+ * };
+ * const user = {
+ *   credentials: true,
+ *   origin: ["http://localhost:5173"],
+ *   rateLimit: { max: 50 },          // windowMs falls back to default
+ * };
+ *
+ * mergeWithDefaults(defaults, user);
+ * // → {
+ * //     origin: ["http://localhost:5173"],
+ * //     credentials: true,
+ * //     maxAge: 86400,
+ * //     rateLimit: { max: 50, windowMs: 60_000 },
+ * //   }
+ * ```
+ */
+export function mergeWithDefaults(defaults, userOptions, options = {}, 
+/** @internal — tracks visited objects to break circular refs */
+_seen = new WeakSet()) {
+    if (!userOptions)
+        return shallowClone(defaults);
+    // Guard against circular structures
+    if (_seen.has(userOptions))
+        return shallowClone(defaults);
+    _seen.add(userOptions);
+    const result = shallowClone(defaults);
+    const arrayStrategy = options.arrayStrategy ?? "replace";
+    // Merge both string and symbol keys from userOptions
+    const keys = [
+        ...Object.keys(userOptions),
+        ...Object.getOwnPropertySymbols(userOptions),
+    ];
+    for (const key of keys) {
+        // Prototype pollution guard (only relevant for string keys)
+        if (typeof key === "string" && BLOCKED_KEYS.has(key))
+            continue;
+        const userVal = userOptions[key];
+        const defaultVal = defaults[key];
+        // Honour `undefined` as "not provided" — let default win
+        if (userVal === undefined)
+            continue;
+        if (isPlainObject(userVal) && isPlainObject(defaultVal)) {
+            // Both sides are plain objects → recurse
+            result[key] = mergeWithDefaults(defaultVal, userVal, options, _seen);
+        }
+        else if (Array.isArray(userVal) &&
+            Array.isArray(defaultVal) &&
+            arrayStrategy !== "replace") {
+            result[key] = mergeArrays(defaultVal, userVal, arrayStrategy, options, _seen);
+        }
+        else {
+            // Primitive, array (replace strategy), class instance, null, etc.
+            result[key] = userVal;
+        }
+    }
+    return result;
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/** Merges two arrays according to the chosen strategy. */
+function mergeArrays(defaultArr, userArr, strategy, options, seen) {
+    if (strategy === "concat") {
+        return [...defaultArr, ...userArr];
+    }
+    // "merge" — element-wise
+    const length = Math.max(defaultArr.length, userArr.length);
+    const merged = [];
+    for (let i = 0; i < length; i++) {
+        const dItem = defaultArr[i];
+        const uItem = userArr[i];
+        if (i >= userArr.length) {
+            // User array is shorter — keep default element
+            merged.push(dItem);
+        }
+        else if (i >= defaultArr.length) {
+            // Default array is shorter — take user element as-is
+            merged.push(uItem);
+        }
+        else if (isPlainObject(uItem) && isPlainObject(dItem)) {
+            merged.push(mergeWithDefaults(dItem, uItem, options, seen));
+        }
+        else {
+            // Primitive or non-plain-object — user wins
+            merged.push(uItem !== undefined ? uItem : dItem);
+        }
+    }
+    return merged;
+}
+/** Shallow-clones an object preserving both string and symbol own keys. */
+function shallowClone(obj) {
+    const clone = Object.create(Object.getPrototypeOf(obj));
+    for (const key of Object.getOwnPropertyNames(obj)) {
+        clone[key] = obj[key];
+    }
+    for (const sym of Object.getOwnPropertySymbols(obj)) {
+        clone[sym] = obj[sym];
+    }
+    return clone;
+}
+/** Returns `true` for plain `{}` objects (not arrays, not class instances). */
+function isPlainObject(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
+}
+//# sourceMappingURL=mergeWithDefaults.js.map

package/dist/src/utils/mergeWithDefaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mergeWithDefaults.js","sourceRoot":"","sources":["../../../src/utils/mergeWithDefaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;iFAsBiF;AAqBjF,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,oEAAoE;AACpE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,MAAM,UAAU,iBAAiB,CAC7B,QAAW,EACX,WAA0C,EAC1C,UAAwB,EAAE;AAC1B,gEAAgE;AAChE,QAAyB,IAAI,OAAO,EAAE;IAEtC,IAAI,CAAC,WAAW;QAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAEhD,oCAAoC;IACpC,IAAI,KAAK,CAAC,GAAG,CAAC,WAAqB,CAAC;QAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpE,KAAK,CAAC,GAAG,CAAC,WAAqB,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAiC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,SAAS,CAAC;IAEzD,qDAAqD;IACrD,MAAM,IAAI,GAAwB;QAC9B,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;QAC3B,GAAG,MAAM,CAAC,qBAAqB,CAAC,WAAW,CAAC;KAC/C,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,4DAA4D;QAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAE/D,MAAM,OAAO,GAAI,WAAmB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAI,QAAgB,CAAC,GAAG,CAAC,CAAC;QAE1C,yDAAyD;QACzD,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QAEpC,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,yCAAyC;YACzC,MAAM,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAC3B,UAAU,EACV,OAAO,EACP,OAAO,EACP,KAAK,CACR,CAAC;QACN,CAAC;aAAM,IACH,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACtB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YACzB,aAAa,KAAK,SAAS,EAC7B,CAAC;YACC,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CACrB,UAAU,EACV,OAAO,EACP,aAAa,EACb,OAAO,EACP,KAAK,CACR,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,kEAAkE;YAClE,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;QAC1B,CAAC;IACL,CAAC;IAED,OAAO,MAAW,CAAC;AACvB,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,0DAA0D;AAC1D,SAAS,WAAW,CAChB,UAAiB,EACjB,OAAc,EACd,QAA4B,EAC5B,OAAqB,EACrB,IAAqB;IAErB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,yBAAyB;IACzB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAU,EAAE,CAAC;IAEzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAEzB,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACtB,+CAA+C;YAC/C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YAChC,qDAAqD;YACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACJ,4CAA4C;YAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAmB,GAAM;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAM,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,KAAa,CAAC,GAAG,CAAC,GAAI,GAAW,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,KAAa,CAAC,GAAG,CAAC,GAAI,GAAW,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,+EAA+E;AAC/E,SAAS,aAAa,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACxD,CAAC"}