xypriss 9.12.0 → 9.12.2

package/dist/esm/src/server/const/Defaulthelmetopts.js

@@ -0,0 +1,121 @@
+import { getSysApi } from '../../plugins/const/getSysApi.js';
+import { logger } from '../../shared/logger/Logger.js';
+
+/**
+ * Determines whether the relaxed (development) security profile should be applied.
+ *
+ * Dev mode is only enabled when BOTH conditions are true:
+ *   1. The runtime environment reports development mode (`NODE_ENV` / equivalent).
+ *   2. The `XSEC_TRUST` environment variable is not explicitly set to a value
+ *      other than `"true"` (it defaults to `"true"` when unset).
+ *
+ * This allows an operator to keep `NODE_ENV=development` while still forcing
+ * the strict, production-grade security headers by setting `XSEC_TRUST=false`
+ * in the `.env` file — useful for staging environments that mimic dev but
+ * must not relax CSP/HSTS/COEP.
+ */
+const isDev = getSysApi().__env__.isDevelopment() &&
+    getSysApi().__env__.get("XSEC_TRUST", "true") === "true";
+/**
+ * "Trusted" third-party origins, allowed in the CSP directives ONLY when
+ * running in dev mode. Never exposed in production builds.
+ */
+const TRUSTED_EXTERNAL = {
+    scripts: ["https://cdnjs.cloudflare.com", "https://cdn.jsdelivr.net"],
+    styles: ["https://fonts.googleapis.com", "https://cdnjs.cloudflare.com"],
+    fonts: ["https://fonts.gstatic.com"],
+    images: ["https://dll.nehonix.com"],
+    connect: ["https://dll.nehonix.com", "https://api.nehonix.com"],
+};
+/**
+ * Localhost origins, allowed in the CSP directives ONLY when running in dev
+ * mode (HTTP/WS, both `localhost` and `127.0.0.1`, any port).
+ */
+const LOCALHOST = [
+    "http://localhost:*",
+    "http://127.0.0.1:*",
+    "ws://localhost:*",
+    "ws://127.0.0.1:*",
+];
+/** Returns the given sources only when `isDev` is true, otherwise an empty array. */
+const devOnly = (...sources) => (isDev ? sources : []);
+/** Returns a copy of the given source list only when `isDev` is true, otherwise an empty array. */
+const devSources = (srcs) => isDev ? [...srcs] : [];
+/**
+ * Default Helmet configuration for the application.
+ *
+ * Security posture:
+ *   - Production: strict CSP (self-only), COEP/CORP enforced, HSTS enabled,
+ *     no DNS prefetch, `strict-origin-when-cross-origin` referrer policy.
+ *   - Development: CSP relaxed to allow trusted CDNs/fonts/APIs and
+ *     localhost, COEP/CORP relaxed, HSTS disabled, DNS prefetch allowed.
+ *
+ * See `isDev` above for how the active profile is determined.
+ */
+const defaultHelmetOpts = {
+    contentSecurityPolicy: {
+        directives: {
+            defaultSrc: ["'self'"],
+            scriptSrc: [
+                "'self'",
+                "'unsafe-inline'", // prod: self only
+                ...devSources(TRUSTED_EXTERNAL.scripts), // dev: cdnjs, jsdelivr...
+                ...devOnly(...LOCALHOST), // dev: localhost
+            ],
+            styleSrc: [
+                "'self'",
+                "'unsafe-inline'",
+                ...devSources(TRUSTED_EXTERNAL.styles), // dev: google fonts, cdnjs
+                ...devOnly(...LOCALHOST),
+            ],
+            fontSrc: [
+                "'self'",
+                ...devSources(TRUSTED_EXTERNAL.fonts), // dev: gstatic
+            ],
+            imgSrc: [
+                "'self'",
+                "data:",
+                ...devSources(TRUSTED_EXTERNAL.images), // dev: dll.nehonix.com
+                ...devOnly(...LOCALHOST),
+            ],
+            connectSrc: [
+                "'self'",
+                ...devSources(TRUSTED_EXTERNAL.connect), // dev: nehonix APIs
+                ...devOnly(...LOCALHOST),
+            ],
+            frameSrc: ["'none'"],
+            objectSrc: ["'none'"],
+            mediaSrc: ["'self'"],
+            workerSrc: ["'self'", "blob:"],
+        },
+    },
+    // Zero Trust: strict COEP/CORP in production, relaxed in dev
+    crossOriginEmbedderPolicy: isDev ? false : true,
+    crossOriginOpenerPolicy: true,
+    crossOriginResourcePolicy: {
+        policy: isDev ? "cross-origin" : "same-origin",
+    },
+    dnsPrefetchControl: { allow: isDev }, // no point exposing DNS prefetch in prod
+    frameguard: { action: "deny" },
+    hidePoweredBy: true,
+    hsts: {
+        maxAge: isDev ? 0 : 31536000, // no HSTS in dev
+        includeSubDomains: !isDev,
+        preload: false,
+    },
+    ieNoOpen: true,
+    noSniff: true,
+    originAgentCluster: true,
+    permittedCrossDomainPolicies: false,
+    referrerPolicy: {
+        policy: isDev ? "no-referrer" : "strict-origin-when-cross-origin",
+    },
+    xssFilter: true,
+};
+// Log a warning if the development profile is active
+if (isDev) {
+    logger.warn("security", "Development security profile active. CSP, COEP, and CORP headers are relaxed for local development. Learn more or customize: https://xypriss.nehonix.com/docs/security/enhanced-csp-configuration#development-security-profile-automatic");
+}
+
+export { defaultHelmetOpts };
+//# sourceMappingURL=Defaulthelmetopts.js.map

package/dist/esm/src/server/const/Defaulthelmetopts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Defaulthelmetopts.js","sources":["../../../../../src/server/const/Defaulthelmetopts.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAMA;;;;;;;;;;;;AAYG;AACH,MAAM,KAAK,GACP,SAAS,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE;AACnC,IAAA,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,MAAM;AAE5D;;;AAGG;AACH,MAAM,gBAAgB,GAAG;AACrB,IAAA,OAAO,EAAE,CAAC,8BAA8B,EAAE,0BAA0B,CAAC;AACrE,IAAA,MAAM,EAAE,CAAC,8BAA8B,EAAE,8BAA8B,CAAC;IACxE,KAAK,EAAE,CAAC,2BAA2B,CAAC;IACpC,MAAM,EAAE,CAAC,yBAAyB,CAAC;AACnC,IAAA,OAAO,EAAE,CAAC,yBAAyB,EAAE,yBAAyB,CAAC;CACzD;AAEV;;;AAGG;AACH,MAAM,SAAS,GAAG;IACd,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,kBAAkB;CACrB;AAED;AACA,MAAM,OAAO,GAAG,CAAI,GAAG,OAAY,MAAW,KAAK,GAAG,OAAO,GAAG,EAAE,CAAC;AAEnE;AACA,MAAM,UAAU,GAAG,CAAC,IAAuB,KACvC,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE;AAE1B;;;;;;;;;;AAUG;AACI,MAAM,iBAAiB,GAAS;AACnC,IAAA,qBAAqB,EAAE;AACnB,QAAA,UAAU,EAAE;YACR,UAAU,EAAE,CAAC,QAAQ,CAAC;AAEtB,YAAA,SAAS,EAAE;gBACP,QAAQ;AACR,gBAAA,iBAAiB;AACjB,gBAAA,GAAG,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC;AACvC,gBAAA,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC;AAC3B,aAAA;AAED,YAAA,QAAQ,EAAE;gBACN,QAAQ;gBACR,iBAAiB;AACjB,gBAAA,GAAG,UAAU,CAAC,gBAAgB,CAAC,MAAM,CAAC;AACtC,gBAAA,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC;AAC3B,aAAA;AAED,YAAA,OAAO,EAAE;gBACL,QAAQ;AACR,gBAAA,GAAG,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC;AACxC,aAAA;AAED,YAAA,MAAM,EAAE;gBACJ,QAAQ;gBACR,OAAO;AACP,gBAAA,GAAG,UAAU,CAAC,gBAAgB,CAAC,MAAM,CAAC;AACtC,gBAAA,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC;AAC3B,aAAA;AAED,YAAA,UAAU,EAAE;gBACR,QAAQ;AACR,gBAAA,GAAG,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC;AACvC,gBAAA,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC;AAC3B,aAAA;YAED,QAAQ,EAAE,CAAC,QAAQ,CAAC;YACpB,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,QAAQ,EAAE,CAAC,QAAQ,CAAC;AACpB,YAAA,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;AACjC,SAAA;AACJ,KAAA;;IAGD,yBAAyB,EAAE,KAAK,GAAG,KAAK,GAAG,IAAI;AAC/C,IAAA,uBAAuB,EAAE,IAAI;AAC7B,IAAA,yBAAyB,EAAE;QACvB,MAAM,EAAE,KAAK,GAAG,cAAc,GAAG,aAAa;AACjD,KAAA;AAED,IAAA,kBAAkB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;AACpC,IAAA,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;AAC9B,IAAA,aAAa,EAAE,IAAI;AAEnB,IAAA,IAAI,EAAE;QACF,MAAM,EAAE,KAAK,GAAG,CAAC,GAAG,QAAQ;QAC5B,iBAAiB,EAAE,CAAC,KAAK;AACzB,QAAA,OAAO,EAAE,KAAK;AACjB,KAAA;AAED,IAAA,QAAQ,EAAE,IAAI;AACd,IAAA,OAAO,EAAE,IAAI;AACb,IAAA,kBAAkB,EAAE,IAAI;AACxB,IAAA,4BAA4B,EAAE,KAAK;AACnC,IAAA,cAAc,EAAE;QACZ,MAAM,EAAE,KAAK,GAAG,aAAa,GAAG,iCAAiC;AACpE,KAAA;AACD,IAAA,SAAS,EAAE,IAAI;;AAGnB;AACA,IAAI,KAAK,EAAE;AACP,IAAA,MAAM,CAAC,IAAI,CACP,UAAU,EACV,0OAA0O,CAC7O;AACL;;;;"}

package/dist/esm/src/server/const/default.js

@@ -1,6 +1,7 @@
 import path__default from 'node:path';
 import { DEFAULT_LOGGER_CONFIG } from '../../shared/logger/DEFAULT_LOGGER_CONFIG.js';
 import { getRandomBytes } from 'xypriss-security';
+import { defaultHelmetOpts } from './Defaulthelmetopts.js';
 
 /**
  * Default configuration for XyPriss server.
@@ -104,7 +105,7 @@ const DEFAULT_OPTIONS = {
             mode: "block",
         },
         rmXBranding: false,
-        helmet: true,
+        helmet: defaultHelmetOpts,
         sqlInjection: true,
         commandInjection: true,
         pathTraversal: false,

package/dist/esm/src/server/const/default.js.map

@@ -1 +1 @@
-{"version":3,"file":"default.js","sources":["../../../../../src/server/const/default.ts"],"sourcesContent":[null],"names":["path"],"mappings":";;;;AAAA;;;;AAIG;AAOI,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI;AACjD,MAAM,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI;AAE7D;AACO,MAAM,eAAe,GAAkB;AAC1C,IAAA,WAAW,EAAE;AACT,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,SAAS,EAAE,GAAG;AACd,QAAA,iBAAiB,EAAE,IAAI;AACvB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,WAAW,EAAE,KAAK;AACrB,KAAA;AACD,IAAA,MAAM,EAAE;AACJ,QAAA,gBAAgB,EAAE,IAAI;QACtB,IAAI,EAAE,YAAY;AAClB,QAAA,SAAS,EAAE,MAAM;AACjB,QAAA,eAAe,EAAE,MAAM;AACvB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,IAAI,EAAE,YAAY;AAClB,QAAA,IAAI,EAAE,IAAI;;;;;AAKV,QAAA,UAAU,EAAE,EAAE;AACd,QAAA,cAAc,EAAE;AACZ,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,WAAW,EAAE,EAAE;AACf,YAAA,QAAQ,EAAE,QAAQ;AACrB,SAAA;AACD,QAAA,gBAAgB,EAAE,IAAI;AAEtB,QAAA,IAAI,EAAE;AACF,YAAA,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,KAAK;AACnB,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,QAAQ,EAAE,SAAS;AACnB,YAAA,OAAO,EAAE,uBAAuB;AAChC,YAAA,aAAa,EAAE;AACX,gBAAA,QAAQ,EAAE,IAAI;AACd,gBAAA,QAAQ,EAAE,QAAQ;AAClB,gBAAA,MAAM,EAAE,IAAI;AACf,aAAA;YACD,WAAW,EAAE,KAAK;AAClB,YAAA,WAAW,EAAE;AACT,gBAAA,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,IAAI,EAAEA,aAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC;AAClD,aAAA;AACJ,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE,qBAAqB;AAC9B,IAAA,QAAQ,EAAE;AACN,QAAA,IAAI,EAAE,QAAQ;AACd,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,UAAU,EAAE,GAAG;AAClB,KAAA;AAED,IAAA,eAAe,EAAE;AACb,QAAA,OAAO,EAAE,KAAK;AACjB,KAAA;AACD,IAAA,OAAO,EAAE;QACL,OAAO,EAAE,KAAK;AACd,QAAA,OAAO,EAAE,MAAM;AACf,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,SAAS,EAAE;AACP,YAAA,YAAY,EAAE;AACV,gBAAA,OAAO,EAAE,IAAI;AACb,gBAAA,WAAW,EAAE,IAAI;AACjB,gBAAA,UAAU,EAAE,IAAI;AACnB,aAAA;AACJ,SAAA;AACJ,KAAA;AACD,IAAA,KAAK,EAAE;QACH,QAAQ,EAAE,QAAQ;AAClB,QAAA,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QAC1B,GAAG,EAAE,MAAM;AACX,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;YACJ,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,KAAK;AACnB,SAAA;AACJ,KAAA;AACD,IAAA,QAAQ,EAAE;AACN,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,KAAK,EAAE,UAAU;AACjB,QAAA,IAAI,EAAE;AACF,YAAA,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;AAC1C,YAAA,UAAU,EAAE,UAAU;AACtB,YAAA,aAAa,EAAE;AACX,gBAAA,QAAQ,EAAE,IAAI;AACd,gBAAA,QAAQ,EAAE,QAAQ;AACrB,aAAA;AACJ,SAAA;AACD,QAAA,mBAAmB,EAAE;AACjB,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,IAAI,EAAE,OAAO;AAChB,SAAA;AACD,QAAA,WAAW,EAAE,KAAK;AAClB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,YAAY,EAAE,IAAI;AAClB,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,IAAI,EAAE;YACF,MAAM,EAAE,GAAG;AACX,YAAA,WAAW,EAAE,IAAI;AACjB,YAAA,OAAO,EAAE;gBACL,KAAK;gBACL,MAAM;gBACN,KAAK;gBACL,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,SAAS;AACZ,aAAA;AACD,YAAA,cAAc,EAAE;gBACZ,cAAc;gBACd,eAAe;gBACf,kBAAkB;gBAClB,QAAQ;gBACR,QAAQ;gBACR,+BAA+B;gBAC/B,gCAAgC;gBAChC,cAAc;gBACd,cAAc;gBACd,gBAAgB;gBAChB,cAAc;gBACd,sBAAsB;AACzB,aAAA;AACJ,SAAA;AACD,QAAA,SAAS,EAAE;AACP,YAAA,GAAG,EAAE,EAAE;AACP,YAAA,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;AACxB,YAAA,eAAe,EAAE,KAAK;AACtB,YAAA,OAAO,EACH,yHAAyH;YAC7H,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC;AAC7D,SAAA;AAED,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,QAAQ,EAAE;AACN,YAAA,OAAO,EAAE,KAAK;AACjB,SAAA;AACJ,KAAA;AACD,IAAA,iBAAiB,EAAE;AACf,QAAA,OAAO,EAAE;AACL,YAAA,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,KAAK;AACrB,YAAA,iBAAiB,EAAE,KAAK;AACxB,YAAA,YAAY,EACR,uHAAuH;AAC9H,SAAA;AACD,QAAA,OAAO,EAAE;YACL,WAAW,EAAE,QAAQ;AACxB,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,KAAK;AACd,QAAA,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;AAC7B,QAAA,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ;AACjB,QAAA,gBAAgB,EAAE;YACd,YAAY;YACZ,WAAW;YACX,WAAW;YACX,YAAY;YACZ,iBAAiB;YACjB,2BAA2B;YAC3B,yBAAyB;YACzB,WAAW;YACX,iBAAiB;YACjB,iBAAiB;YACjB,oBAAoB;YACpB,yEAAyE;YACzE,0BAA0B;YAC1B,mEAAmE;YACnE,iBAAiB;YACjB,8BAA8B;YAC9B,WAAW;YACX,2EAA2E;YAC3E,iCAAiC;AACpC,SAAA;AACD,QAAA,iBAAiB,EAAE;YACf,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,OAAO;YACP,MAAM;YACN,KAAK;YACL,MAAM;YACN,OAAO;YACP,OAAO;AACV,SAAA;AACD,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,MAAM,EAAE;AACJ,YAAA,aAAa,EAAE,GAAG;AAClB,YAAA,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;AAC3B,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;AACJ,YAAA,kBAAkB,EAAE,MAAM;AAC1B,YAAA,EAAE,EAAE;AACA,gBAAA,GAAG,EAAE,MAAM;AACX,gBAAA,GAAG,EAAE,MAAM;AACd,aAAA;AACD,YAAA,GAAG,EAAE;AACD,gBAAA,GAAG,EAAE,MAAM;AACX,gBAAA,GAAG,EAAE,MAAM;AACd,aAAA;AACJ,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE;;AAEL,QAAA,UAAU,EAAE;AACR,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,KAAK,EAAE;gBACH,OAAO,EAAE,KAAK;AACd,gBAAA,oBAAoB,EAAE,GAAG;AACzB,gBAAA,iBAAiB,EAAE,KAAK;AACxB,gBAAA,UAAU,EAAE,KAAK;AACpB,aAAA;AACD,YAAA,SAAS,EAAE;AACP,gBAAA,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,GAAG;AACnB,aAAA;AACD,YAAA,cAAc,EAAE;AACZ,gBAAA,cAAc,EAAE,IAAI;gBACpB,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,KAAK;AACrB,aAAA;AACJ,SAAA;;AAGD,QAAA,WAAW,EAAE;AACT,YAAA,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;YAC7C,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI;AACf,YAAA,YAAY,EAAE;gBACV,WAAW;gBACX,UAAU;gBACV,iBAAiB;gBACjB,wBAAwB;gBACxB,kBAAkB;gBAClB,iBAAiB;gBACjB,UAAU;gBACV,YAAY;gBACZ,eAAe;AAClB,aAAA;YACD,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,EAAE;AACjB,SAAA;;AAGD,QAAA,SAAS,EAAE;YACP,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,gBAAgB;AAC1B,YAAA,MAAM,EAAE;gBACJ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,IAAI;AACf,aAAA;AACD,YAAA,KAAK,EAAE;gBACH,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,IAAI;AACf,aAAA;AACD,YAAA,OAAO,EAAE;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,aAAa;AACxB,aAAA;AACJ,SAAA;;AAGD,QAAA,KAAK,EAAE;AACH,YAAA,OAAO,EAAE,KAAK;AACd,YAAA,SAAS,EAAE,EAAE;AACb,YAAA,aAAa,EAAE,aAAa;AAC5B,YAAA,WAAW,EAAE;AACT,gBAAA,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,IAAI;AACb,gBAAA,IAAI,EAAE,SAAS;gBACf,kBAAkB,EAAE,CAAC;gBACrB,gBAAgB,EAAE,CAAC;AACtB,aAAA;YACD,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;AACjB,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE;QACL,uBAAuB,EAAE,KAAK;AAC9B,QAAA,iBAAiB,EAAE;YACf,OAAO,EAAE,KAAK;YACd,gBAAgB,EAAE,MAAM;YACxB,qBAAqB,EAAE,GAAG;YAC1B,gBAAgB,EAAE,OAAO;AACzB,YAAA,gBAAgB,EAAE,IAAI;AACtB,YAAA,gBAAgB,EAAE,KAAK;AACvB,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACD,QAAA,iBAAiB,EAAE;AACf,YAAA,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,EAAE;YACnB,qBAAqB,EAAE,IAAI;AAC3B,YAAA,gBAAgB,EAAE,CAAC;YACnB,cAAc,EAAE,QAAQ;AACxB,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,WAAW,EAAE,KAAK;AACrB,SAAA;QACD,QAAQ,EAAE,EAAE;AACf,KAAA;;;;;"}
+{"version":3,"file":"default.js","sources":["../../../../../src/server/const/default.ts"],"sourcesContent":[null],"names":["path"],"mappings":";;;;;AAAA;;;;AAIG;AAQI,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI;AACjD,MAAM,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI;AAE7D;AACO,MAAM,eAAe,GAAkB;AAC1C,IAAA,WAAW,EAAE;AACT,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,SAAS,EAAE,GAAG;AACd,QAAA,iBAAiB,EAAE,IAAI;AACvB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,WAAW,EAAE,KAAK;AACrB,KAAA;AACD,IAAA,MAAM,EAAE;AACJ,QAAA,gBAAgB,EAAE,IAAI;QACtB,IAAI,EAAE,YAAY;AAClB,QAAA,SAAS,EAAE,MAAM;AACjB,QAAA,eAAe,EAAE,MAAM;AACvB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,IAAI,EAAE,YAAY;AAClB,QAAA,IAAI,EAAE,IAAI;;;;;AAKV,QAAA,UAAU,EAAE,EAAE;AACd,QAAA,cAAc,EAAE;AACZ,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,WAAW,EAAE,EAAE;AACf,YAAA,QAAQ,EAAE,QAAQ;AACrB,SAAA;AACD,QAAA,gBAAgB,EAAE,IAAI;AAEtB,QAAA,IAAI,EAAE;AACF,YAAA,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,KAAK;AACnB,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,QAAQ,EAAE,SAAS;AACnB,YAAA,OAAO,EAAE,uBAAuB;AAChC,YAAA,aAAa,EAAE;AACX,gBAAA,QAAQ,EAAE,IAAI;AACd,gBAAA,QAAQ,EAAE,QAAQ;AAClB,gBAAA,MAAM,EAAE,IAAI;AACf,aAAA;YACD,WAAW,EAAE,KAAK;AAClB,YAAA,WAAW,EAAE;AACT,gBAAA,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,IAAI,EAAEA,aAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC;AAClD,aAAA;AACJ,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE,qBAAqB;AAC9B,IAAA,QAAQ,EAAE;AACN,QAAA,IAAI,EAAE,QAAQ;AACd,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,UAAU,EAAE,GAAG;AAClB,KAAA;AAED,IAAA,eAAe,EAAE;AACb,QAAA,OAAO,EAAE,KAAK;AACjB,KAAA;AACD,IAAA,OAAO,EAAE;QACL,OAAO,EAAE,KAAK;AACd,QAAA,OAAO,EAAE,MAAM;AACf,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,SAAS,EAAE;AACP,YAAA,YAAY,EAAE;AACV,gBAAA,OAAO,EAAE,IAAI;AACb,gBAAA,WAAW,EAAE,IAAI;AACjB,gBAAA,UAAU,EAAE,IAAI;AACnB,aAAA;AACJ,SAAA;AACJ,KAAA;AACD,IAAA,KAAK,EAAE;QACH,QAAQ,EAAE,QAAQ;AAClB,QAAA,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;QAC1B,GAAG,EAAE,MAAM;AACX,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;YACJ,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,KAAK;AACnB,SAAA;AACJ,KAAA;AACD,IAAA,QAAQ,EAAE;AACN,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,KAAK,EAAE,UAAU;AACjB,QAAA,IAAI,EAAE;AACF,YAAA,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;AAC1C,YAAA,UAAU,EAAE,UAAU;AACtB,YAAA,aAAa,EAAE;AACX,gBAAA,QAAQ,EAAE,IAAI;AACd,gBAAA,QAAQ,EAAE,QAAQ;AACrB,aAAA;AACJ,SAAA;AACD,QAAA,mBAAmB,EAAE;AACjB,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,IAAI,EAAE,OAAO;AAChB,SAAA;AACD,QAAA,WAAW,EAAE,KAAK;AAClB,QAAA,MAAM,EAAE,iBAAiB;AACzB,QAAA,YAAY,EAAE,IAAI;AAClB,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,WAAW,EAAE,IAAI;AACjB,QAAA,aAAa,EAAE,KAAK;AACpB,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,IAAI,EAAE;YACF,MAAM,EAAE,GAAG;AACX,YAAA,WAAW,EAAE,IAAI;AACjB,YAAA,OAAO,EAAE;gBACL,KAAK;gBACL,MAAM;gBACN,KAAK;gBACL,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,SAAS;AACZ,aAAA;AACD,YAAA,cAAc,EAAE;gBACZ,cAAc;gBACd,eAAe;gBACf,kBAAkB;gBAClB,QAAQ;gBACR,QAAQ;gBACR,+BAA+B;gBAC/B,gCAAgC;gBAChC,cAAc;gBACd,cAAc;gBACd,gBAAgB;gBAChB,cAAc;gBACd,sBAAsB;AACzB,aAAA;AACJ,SAAA;AACD,QAAA,SAAS,EAAE;AACP,YAAA,GAAG,EAAE,EAAE;AACP,YAAA,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;AACxB,YAAA,eAAe,EAAE,KAAK;AACtB,YAAA,OAAO,EACH,yHAAyH;YAC7H,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC;AAC7D,SAAA;AAED,QAAA,GAAG,EAAE,IAAI;AACT,QAAA,QAAQ,EAAE;AACN,YAAA,OAAO,EAAE,KAAK;AACjB,SAAA;AACJ,KAAA;AACD,IAAA,iBAAiB,EAAE;AACf,QAAA,OAAO,EAAE;AACL,YAAA,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,KAAK;AACrB,YAAA,iBAAiB,EAAE,KAAK;AACxB,YAAA,YAAY,EACR,uHAAuH;AAC9H,SAAA;AACD,QAAA,OAAO,EAAE;YACL,WAAW,EAAE,QAAQ;AACxB,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,KAAK;AACd,QAAA,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;AAC7B,QAAA,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ;AACjB,QAAA,gBAAgB,EAAE;YACd,YAAY;YACZ,WAAW;YACX,WAAW;YACX,YAAY;YACZ,iBAAiB;YACjB,2BAA2B;YAC3B,yBAAyB;YACzB,WAAW;YACX,iBAAiB;YACjB,iBAAiB;YACjB,oBAAoB;YACpB,yEAAyE;YACzE,0BAA0B;YAC1B,mEAAmE;YACnE,iBAAiB;YACjB,8BAA8B;YAC9B,WAAW;YACX,2EAA2E;YAC3E,iCAAiC;AACpC,SAAA;AACD,QAAA,iBAAiB,EAAE;YACf,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,OAAO;YACP,MAAM;YACN,KAAK;YACL,MAAM;YACN,OAAO;YACP,OAAO;AACV,SAAA;AACD,QAAA,gBAAgB,EAAE,IAAI;AACtB,QAAA,YAAY,EAAE,KAAK;AACnB,QAAA,MAAM,EAAE;AACJ,YAAA,aAAa,EAAE,GAAG;AAClB,YAAA,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;AAC3B,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACJ,KAAA;AACD,IAAA,UAAU,EAAE;QACR,OAAO,EAAE,IAAI;AACb,QAAA,MAAM,EAAE;AACJ,YAAA,kBAAkB,EAAE,MAAM;AAC1B,YAAA,EAAE,EAAE;AACA,gBAAA,GAAG,EAAE,MAAM;AACX,gBAAA,GAAG,EAAE,MAAM;AACd,aAAA;AACD,YAAA,GAAG,EAAE;AACD,gBAAA,GAAG,EAAE,MAAM;AACX,gBAAA,GAAG,EAAE,MAAM;AACd,aAAA;AACJ,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE;;AAEL,QAAA,UAAU,EAAE;AACR,YAAA,OAAO,EAAE,IAAI;AACb,YAAA,KAAK,EAAE;gBACH,OAAO,EAAE,KAAK;AACd,gBAAA,oBAAoB,EAAE,GAAG;AACzB,gBAAA,iBAAiB,EAAE,KAAK;AACxB,gBAAA,UAAU,EAAE,KAAK;AACpB,aAAA;AACD,YAAA,SAAS,EAAE;AACP,gBAAA,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,GAAG;AACnB,aAAA;AACD,YAAA,cAAc,EAAE;AACZ,gBAAA,cAAc,EAAE,IAAI;gBACpB,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,KAAK;AACrB,aAAA;AACJ,SAAA;;AAGD,QAAA,WAAW,EAAE;AACT,YAAA,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;YAC7C,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI;AACf,YAAA,YAAY,EAAE;gBACV,WAAW;gBACX,UAAU;gBACV,iBAAiB;gBACjB,wBAAwB;gBACxB,kBAAkB;gBAClB,iBAAiB;gBACjB,UAAU;gBACV,YAAY;gBACZ,eAAe;AAClB,aAAA;YACD,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,EAAE;AACjB,SAAA;;AAGD,QAAA,SAAS,EAAE;YACP,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,gBAAgB;AAC1B,YAAA,MAAM,EAAE;gBACJ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,IAAI;AACf,aAAA;AACD,YAAA,KAAK,EAAE;gBACH,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,IAAI;AACf,aAAA;AACD,YAAA,OAAO,EAAE;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,aAAa;AACxB,aAAA;AACJ,SAAA;;AAGD,QAAA,KAAK,EAAE;AACH,YAAA,OAAO,EAAE,KAAK;AACd,YAAA,SAAS,EAAE,EAAE;AACb,YAAA,aAAa,EAAE,aAAa;AAC5B,YAAA,WAAW,EAAE;AACT,gBAAA,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,IAAI;AACb,gBAAA,IAAI,EAAE,SAAS;gBACf,kBAAkB,EAAE,CAAC;gBACrB,gBAAgB,EAAE,CAAC;AACtB,aAAA;YACD,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;AACjB,SAAA;AACJ,KAAA;AAED,IAAA,OAAO,EAAE;QACL,uBAAuB,EAAE,KAAK;AAC9B,QAAA,iBAAiB,EAAE;YACf,OAAO,EAAE,KAAK;YACd,gBAAgB,EAAE,MAAM;YACxB,qBAAqB,EAAE,GAAG;YAC1B,gBAAgB,EAAE,OAAO;AACzB,YAAA,gBAAgB,EAAE,IAAI;AACtB,YAAA,gBAAgB,EAAE,KAAK;AACvB,YAAA,WAAW,EAAE,EAAE;AAClB,SAAA;AACD,QAAA,iBAAiB,EAAE;AACf,YAAA,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,EAAE;YACnB,qBAAqB,EAAE,IAAI;AAC3B,YAAA,gBAAgB,EAAE,CAAC;YACnB,cAAc,EAAE,QAAQ;AACxB,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,WAAW,EAAE,KAAK;AACrB,SAAA;QACD,QAAQ,EAAE,EAAE;AACf,KAAA;;;;;"}

package/dist/esm/src/server/core/SendFileHandler.js

@@ -1,6 +1,7 @@
+import { getSysApi } from '../../plugins/const/getSysApi.js';
 import { MIME_MAP } from '../const/MIME_MAP.js';
-import { __sys__ } from '../../xhsc.js';
-import { stat } from 'node:fs/promises';
+import path__default from 'node:path';
+import fs__default from 'node:fs';
 
 // ─────────────────────────────────────────────────────────────────────────────
 // Resolve MIME type from file extension.
@@ -8,6 +9,7 @@ import { stat } from 'node:fs/promises';
 function resolveMime(ext) {
     return MIME_MAP[ext.toLowerCase()] ?? "application/octet-stream";
 }
+getSysApi();
 class SendFileHandler {
     constructor(res, logger) {
         this.res = res;
@@ -16,33 +18,69 @@ class SendFileHandler {
     async handle(filePath, options = {}) {
         try {
             const finalPath = options.root
-                ? __sys__.path.join(options.root, filePath)
+                ? path__default.join(options.root, filePath)
                 : filePath;
             // Resolve absolute path to ensure Go can access it
-            const absolutePath = __sys__.path.isAbsolute(finalPath)
+            const absolutePath = path__default.isAbsolute(finalPath)
                 ? finalPath
-                : __sys__.path.resolve(process.cwd(), finalPath);
-            try {
-                await stat(absolutePath);
-            }
-            catch (e) {
-                throw { code: "ENOENT", message: "File not found" };
-            }
+                : path__default.resolve(process.cwd(), finalPath);
             const req = this.res.req;
             const requestId = req?.id;
             const worker = req?.app?._xhscWorker;
-            if (requestId && worker && typeof worker.delegateStatic === "function") {
+            if (requestId && worker) {
                 if (this.logger) {
                     this.logger.debug("server", `[SendFileHandler] Delegating "${absolutePath}" to XHSC Core (Req: ${requestId})`);
                 }
-                // Delegate to Go. Go will handle ETags, Range, Mime, and Networking.
-                worker.delegateStatic(requestId, absolutePath, options);
+                /**
+                 * @performance XHSC Zero-Copy Static File Delegation
+                 *
+                 * By delegating immediately to the XHSC (Go) engine *before* performing
+                 * `fs.stat()` in Node.js, we eliminate a major performance bottleneck.
+                 * Node.js relies on a limited thread pool (default 4) for async file system
+                 * operations. Under heavy concurrent load, synchronous-like `stat` calls
+                 * exhaust this pool and queue up, causing multi-second latency spikes.
+                 *
+                 * Delegating to Go offloads file existence checking, MIME resolution,
+                 * ETags, Range headers, and the actual native `sendfile` zero-copy stream
+                 * completely to the core engine. If the file does not exist, Go will
+                 * natively return an HTTP 404 response.
+                 */
+                // Embed options natively into headers so they serialize via XBP
+                this.res.setHeader("x-xhsc-static-delegate", absolutePath);
+                if (options.headers) {
+                    for (const [k, v] of Object.entries(options.headers)) {
+                        this.res.setHeader(k, v);
+                    }
+                }
+                if (options.maxAge) {
+                    this.res.setHeader("Cache-Control", `public, max-age=${Math.floor(options.maxAge / 1000)}`);
+                }
+                if (options.disposition) {
+                    if (options.disposition === "inline") {
+                        this.res.setHeader("Content-Disposition", "inline");
+                    }
+                    else if (options.disposition === "attachment") {
+                        this.res.setHeader("Content-Disposition", `attachment; filename="${path__default.basename(absolutePath)}"`);
+                    }
+                    else {
+                        this.res.setHeader("Content-Disposition", `attachment; filename="${options.disposition}"`);
+                    }
+                }
+                if (options.mimeOverrides) {
+                    const ext = path__default.extname(absolutePath);
+                    if (options.mimeOverrides[ext]) {
+                        this.res.setHeader("Content-Type", options.mimeOverrides[ext]);
+                    }
+                }
                 // Mark as delegated by setting status 0. 
                 // XHSCBridge/index.ts and XHSCWorker.ts handle this state.
                 this.res.statusCode = 0;
                 this.res.end();
                 return;
             }
+            if (!fs__default.existsSync(absolutePath) || !fs__default.statSync(absolutePath).isFile()) {
+                throw { code: "ENOENT", message: "File not found" };
+            }
             // Fallback if not running under XHSC Bridge (should not happen in production)
             this.logger?.warn("server", "[SendFileHandler] XHSC Bridge not found, falling back to manual stream");
             this._streamFile(absolutePath);
@@ -64,7 +102,7 @@ class SendFileHandler {
         }
     }
     _streamFile(filePath, start, end) {
-        const stream = __sys__.fs.createReadStream(filePath, { start, end });
+        const stream = fs__default.createReadStream(filePath, { start, end });
         stream.pipe(this.res);
     }
     static registerMimeTypes(types) {

package/dist/esm/src/server/core/SendFileHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"SendFileHandler.js","sources":["../../../../../src/server/core/SendFileHandler.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAMA;AACA;AACA;AACA,SAAS,WAAW,CAAC,GAAW,EAAA;IAC5B,OAAO,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B;AACpE;MAIa,eAAe,CAAA;IAIxB,WAAA,CAAY,GAAmB,EAAE,MAAe,EAAA;AAC5C,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;AACd,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;IACxB;AAEO,IAAA,MAAM,MAAM,CACf,QAAgB,EAChB,UAA2B,EAAE,EAAA;AAE7B,QAAA,IAAI;AACA,YAAA,MAAM,SAAS,GAAG,OAAO,CAAC;AACtB,kBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ;kBACxC,QAAQ;;YAGd,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS;AAClD,kBAAE;AACF,kBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC;AAEpD,YAAA,IAAI;AACA,gBAAA,MAAM,IAAI,CAAC,YAAY,CAAC;YAC5B;YAAE,OAAO,CAAC,EAAE;gBACR,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE;YACvD;AAEA,YAAA,MAAM,GAAG,GAAI,IAAI,CAAC,GAAW,CAAC,GAAG;AACjC,YAAA,MAAM,SAAS,GAAG,GAAG,EAAE,EAAE;AACzB,YAAA,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,WAAW;YAEpC,IAAI,SAAS,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,UAAU,EAAE;AACpE,gBAAA,IAAI,IAAI,CAAC,MAAM,EAAE;AACb,oBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,QAAQ,EACR,CAAA,8BAAA,EAAiC,YAAY,CAAA,qBAAA,EAAwB,SAAS,CAAA,CAAA,CAAG,CACpF;gBACL;;gBAGA,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC;;;AAIvD,gBAAA,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC;AACvB,gBAAA,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;gBACd;YACJ;;YAGA,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,wEAAwE,CAAC;AACrG,YAAA,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;QAElC;QAAE,OAAO,GAAQ,EAAE;AACf,YAAA,MAAM,UAAU,GACZ,GAAG,CAAC,IAAI,KAAK,QAAQ;gBACrB,GAAG,CAAC,IAAI,KAAK,WAAW;AACxB,gBAAA,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC;AAClC,gBAAA,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC;AAC/B,gBAAA,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,2BAA2B,CAAC;AAEtD,YAAA,IAAI,IAAI,CAAC,MAAM,EAAE;AACb,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,QAAQ,EACR,CAAA,kCAAA,EAAqC,QAAQ,MAAM,GAAG,CAAC,OAAO,CAAA,CAAE,CACnE;YACL;AAEA,YAAA,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE;AACvB,gBAAA,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,UAAU,GAAG,GAAG,GAAG,GAAG;gBAC5C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC;AAC/D,gBAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CACR,UAAU,GAAG,gBAAgB,GAAG,uBAAuB,CAC1D;YACL;QACJ;IACJ;AAEQ,IAAA,WAAW,CAAC,QAAgB,EAAE,KAAc,EAAE,GAAY,EAAA;AAC9D,QAAA,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACpE,QAAA,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAU,CAAC;IAChC;IAEO,OAAO,iBAAiB,CAAC,KAA6B,EAAA;AACzD,QAAA,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC;IAClC;IAEO,OAAO,WAAW,CAAC,GAAW,EAAA;AACjC,QAAA,OAAO,WAAW,CAAC,GAAG,CAAC;IAC3B;AACH;;;;"}
+{"version":3,"file":"SendFileHandler.js","sources":["../../../../../src/server/core/SendFileHandler.ts"],"sourcesContent":[null],"names":["path","fs"],"mappings":";;;;;AASA;AACA;AACA;AACA,SAAS,WAAW,CAAC,GAAW,EAAA;IAC5B,OAAO,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B;AACpE;AAEgB,SAAS;MAGZ,eAAe,CAAA;IAIxB,WAAA,CAAY,GAAmB,EAAE,MAAe,EAAA;AAC5C,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG;AACd,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;IACxB;AAEO,IAAA,MAAM,MAAM,CACf,QAAgB,EAChB,UAA2B,EAAE,EAAA;AAE7B,QAAA,IAAI;AACA,YAAA,MAAM,SAAS,GAAG,OAAO,CAAC;kBACpBA,aAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ;kBAChC,QAAQ;;AAGd,YAAA,MAAM,YAAY,GAAGA,aAAI,CAAC,UAAU,CAAC,SAAS;AAC1C,kBAAE;AACF,kBAAEA,aAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC;AAE5C,YAAA,MAAM,GAAG,GAAI,IAAI,CAAC,GAAW,CAAC,GAAG;AACjC,YAAA,MAAM,SAAS,GAAG,GAAG,EAAE,EAAE;AACzB,YAAA,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,WAAW;AAEpC,YAAA,IAAI,SAAS,IAAI,MAAM,EAAE;AACrB,gBAAA,IAAI,IAAI,CAAC,MAAM,EAAE;AACb,oBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,QAAQ,EACR,CAAA,8BAAA,EAAiC,YAAY,CAAA,qBAAA,EAAwB,SAAS,CAAA,CAAA,CAAG,CACpF;gBACL;AAEA;;;;;;;;;;;;;AAaG;;gBAEH,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,YAAY,CAAC;AAE1D,gBAAA,IAAI,OAAO,CAAC,OAAO,EAAE;AACjB,oBAAA,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;wBAClD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAsB,CAAC;oBACjD;gBACJ;AAEA,gBAAA,IAAI,OAAO,CAAC,MAAM,EAAE;oBAChB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,mBAAmB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA,CAAE,CAAC;gBAC/F;AAEA,gBAAA,IAAI,OAAO,CAAC,WAAW,EAAE;AACrB,oBAAA,IAAI,OAAO,CAAC,WAAW,KAAK,QAAQ,EAAE;wBAClC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,QAAQ,CAAC;oBACvD;AAAO,yBAAA,IAAI,OAAO,CAAC,WAAW,KAAK,YAAY,EAAE;AAC7C,wBAAA,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,CAAA,sBAAA,EAAyBA,aAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA,CAAA,CAAG,CAAC;oBACtG;yBAAO;AACH,wBAAA,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,CAAA,sBAAA,EAAyB,OAAO,CAAC,WAAW,CAAA,CAAA,CAAG,CAAC;oBAC9F;gBACJ;AAEA,gBAAA,IAAI,OAAO,CAAC,aAAa,EAAE;oBACvB,MAAM,GAAG,GAAGA,aAAI,CAAC,OAAO,CAAC,YAAY,CAAC;AACtC,oBAAA,IAAI,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE;AAC5B,wBAAA,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;oBAClE;gBACJ;;;AAIA,gBAAA,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC;AACvB,gBAAA,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;gBACd;YACJ;AAEA,YAAA,IAAI,CAACC,WAAE,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAACA,WAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;gBACrE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE;YACvD;;YAGA,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,wEAAwE,CAAC;AACrG,YAAA,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;QAElC;QAAE,OAAO,GAAQ,EAAE;AACf,YAAA,MAAM,UAAU,GACZ,GAAG,CAAC,IAAI,KAAK,QAAQ;gBACrB,GAAG,CAAC,IAAI,KAAK,WAAW;AACxB,gBAAA,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC;AAClC,gBAAA,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC;AAC/B,gBAAA,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,2BAA2B,CAAC;AAEtD,YAAA,IAAI,IAAI,CAAC,MAAM,EAAE;AACb,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,QAAQ,EACR,CAAA,kCAAA,EAAqC,QAAQ,MAAM,GAAG,CAAC,OAAO,CAAA,CAAE,CACnE;YACL;AAEA,YAAA,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE;AACvB,gBAAA,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,UAAU,GAAG,GAAG,GAAG,GAAG;gBAC5C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC;AAC/D,gBAAA,IAAI,CAAC,GAAG,CAAC,GAAG,CACR,UAAU,GAAG,gBAAgB,GAAG,uBAAuB,CAC1D;YACL;QACJ;IACJ;AAEQ,IAAA,WAAW,CAAC,QAAgB,EAAE,KAAc,EAAE,GAAY,EAAA;AAC9D,QAAA,MAAM,MAAM,GAAGA,WAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC5D,QAAA,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAU,CAAC;IAChC;IAEO,OAAO,iBAAiB,CAAC,KAA6B,EAAA;AACzD,QAAA,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC;IAClC;IAEO,OAAO,WAAW,CAAC,GAAW,EAAA;AACjC,QAAA,OAAO,WAAW,CAAC,GAAG,CAAC;IAC3B;AACH;;;;"}