@bymax-one/nest-cache 1.0.6 → 1.2.0

package/dist/server/index.cjs

@@ -35,6 +35,7 @@ var { ConfigurableModuleClass, MODULE_OPTIONS_TOKEN, OPTIONS_TYPE, ASYNC_OPTIONS
 // src/server/constants/default-namespace.ts
 var DEFAULT_NAMESPACE = "app";
 var DEFAULT_KEY_SEPARATOR = ":";
+var DEFAULT_REDIS_PORT = 6379;
 
 // src/server/constants/default-timeouts.ts
 var DEFAULT_CONNECT_TIMEOUT_MS = 1e4;
@@ -62,7 +63,11 @@ var CACHE_ERROR_CODES = {
   CLUSTER_MISCONFIGURED: "cache.cluster_misconfigured",
   SENTINEL_MISCONFIGURED: "cache.sentinel_misconfigured",
   SHUTDOWN_TIMEOUT: "cache.shutdown_timeout",
-  UNSUPPORTED_IN_CLUSTER: "cache.unsupported_in_cluster"
+  UNSUPPORTED_IN_CLUSTER: "cache.unsupported_in_cluster",
+  INVALID_SCOPE: "cache.invalid_scope",
+  SCOPE_NOT_FOUND: "cache.scope_not_found",
+  SCOPE_NOT_READABLE: "cache.scope_not_readable",
+  KEY_NOT_IN_SCOPE: "cache.key_not_in_scope"
 };
 
 // src/server/errors/cache-error-codes.ts
@@ -72,7 +77,10 @@ var CACHE_ERROR_MESSAGES = /* @__PURE__ */ new Map([
   [CACHE_ERROR_CODES.CONNECTION_LOST, "Redis connection was lost during the operation."],
   [CACHE_ERROR_CODES.SERIALIZATION_FAILED, "Failed to serialize the value."],
   [CACHE_ERROR_CODES.DESERIALIZATION_FAILED, "Failed to deserialize the cached value."],
-  [CACHE_ERROR_CODES.INVALID_NAMESPACE, "Namespace is empty or contains the reserved separator."],
+  [
+    CACHE_ERROR_CODES.INVALID_NAMESPACE,
+    "Namespace or key separator is invalid: the namespace is empty, contains the separator, or contains a Redis glob metacharacter."
+  ],
   [CACHE_ERROR_CODES.INVALID_KEY, "Cache key prefix or id is empty."],
   [CACHE_ERROR_CODES.SCRIPT_NOT_REGISTERED, "Tried to execute an unregistered Lua script."],
   [CACHE_ERROR_CODES.SCRIPT_EXECUTION_FAILED, "Lua script returned a Redis error."],
@@ -87,6 +95,19 @@ var CACHE_ERROR_MESSAGES = /* @__PURE__ */ new Map([
   [
     CACHE_ERROR_CODES.UNSUPPORTED_IN_CLUSTER,
     "This operation requires standalone or sentinel mode; it is not supported in cluster mode."
+  ],
+  [
+    CACHE_ERROR_CODES.INVALID_SCOPE,
+    "An administration scope is malformed: empty field, duplicate id, or a match pattern with no literal prefix."
+  ],
+  [CACHE_ERROR_CODES.SCOPE_NOT_FOUND, "No administration scope is declared under that id."],
+  [
+    CACHE_ERROR_CODES.SCOPE_NOT_READABLE,
+    "This administration scope withholds values; listing, types, TTLs and sizes remain available."
+  ],
+  [
+    CACHE_ERROR_CODES.KEY_NOT_IN_SCOPE,
+    "That key does not belong to the named administration scope."
   ]
 ]);
 var CACHE_ERROR_STATUS = /* @__PURE__ */ new Map([
@@ -130,7 +151,7 @@ function parseRedisUrl(url) {
   }
   const result = {
     host: parsed.hostname,
-    port: parsed.port ? Number.parseInt(parsed.port, 10) : 6379
+    port: parsed.port ? Number.parseInt(parsed.port, 10) : DEFAULT_REDIS_PORT
   };
   if (parsed.username) {
     result.username = decodeURIComponent(parsed.username);
@@ -149,40 +170,50 @@ function parseRedisUrl(url) {
 }
 
 // src/server/config/default-options.ts
-function validateOptions(options) {
-  const mode = options.mode ?? "standalone";
-  if (mode === "sentinel") {
-    if (!options.sentinel || !options.sentinel.sentinels?.length || !options.sentinel.name) {
-      throw new CacheException(CACHE_ERROR_CODES.SENTINEL_MISCONFIGURED, { mode });
+var GLOB_METACHARACTERS = /* @__PURE__ */ new Set(["*", "?", "[", "\\"]);
+function findGlobMetacharacter(namespace) {
+  for (const character of namespace) {
+    if (GLOB_METACHARACTERS.has(character)) {
+      return character;
     }
   }
-  if (mode === "cluster") {
-    if (!options.cluster || !options.cluster.nodes?.length) {
-      throw new CacheException(CACHE_ERROR_CODES.CLUSTER_MISCONFIGURED, { mode });
-    }
+  return null;
+}
+function validateStandaloneConnection(options) {
+  const connection = options.connection;
+  if (!connection || !connection.url && !connection.host) {
+    throw new CacheException(CACHE_ERROR_CODES.CONNECTION_FAILED, {
+      reason: "missing connection.url or connection.host"
+    });
   }
-  if (mode === "standalone") {
-    const connection = options.connection;
-    if (!connection || !connection.url && !connection.host) {
+  if (connection.url) {
+    try {
+      parseRedisUrl(connection.url);
+    } catch {
       throw new CacheException(CACHE_ERROR_CODES.CONNECTION_FAILED, {
-        reason: "missing connection.url or connection.host"
+        reason: "invalid connection.url"
       });
     }
-    if (connection.url) {
-      try {
-        parseRedisUrl(connection.url);
-      } catch {
-        throw new CacheException(CACHE_ERROR_CODES.CONNECTION_FAILED, {
-          reason: "invalid connection.url"
-        });
-      }
-    }
   }
-  const namespace = options.namespace ?? DEFAULT_NAMESPACE;
-  const separator = options.keySeparator ?? DEFAULT_KEY_SEPARATOR;
+}
+function validateNamespace(namespace, separator) {
   if (!namespace || namespace.trim() === "") {
     throw new CacheException(CACHE_ERROR_CODES.INVALID_NAMESPACE, { namespace });
   }
+  if (separator === "") {
+    throw new CacheException(CACHE_ERROR_CODES.INVALID_NAMESPACE, {
+      reason: "empty key separator",
+      separator
+    });
+  }
+  const metacharacter = findGlobMetacharacter(namespace);
+  if (metacharacter !== null) {
+    throw new CacheException(CACHE_ERROR_CODES.INVALID_NAMESPACE, {
+      reason: "namespace contains glob metacharacter",
+      namespace,
+      metacharacter
+    });
+  }
   if (namespace.includes(separator)) {
     throw new CacheException(CACHE_ERROR_CODES.INVALID_NAMESPACE, {
       reason: "namespace contains key separator",
@@ -190,6 +221,26 @@ function validateOptions(options) {
       separator
     });
   }
+}
+function validateOptions(options) {
+  const mode = options.mode ?? "standalone";
+  if (mode === "sentinel") {
+    if (!options.sentinel || !options.sentinel.sentinels?.length || !options.sentinel.name) {
+      throw new CacheException(CACHE_ERROR_CODES.SENTINEL_MISCONFIGURED, { mode });
+    }
+  }
+  if (mode === "cluster") {
+    if (!options.cluster || !options.cluster.nodes?.length) {
+      throw new CacheException(CACHE_ERROR_CODES.CLUSTER_MISCONFIGURED, { mode });
+    }
+  }
+  if (mode === "standalone") {
+    validateStandaloneConnection(options);
+  }
+  validateNamespace(
+    options.namespace ?? DEFAULT_NAMESPACE,
+    options.keySeparator ?? DEFAULT_KEY_SEPARATOR
+  );
   const shutdown = options.shutdownTimeoutMs ?? DEFAULT_SHUTDOWN_TIMEOUT_MS;
   if (shutdown < MIN_SHUTDOWN_TIMEOUT_MS) {
     throw new CacheException(CACHE_ERROR_CODES.CONNECTION_FAILED, {
@@ -376,7 +427,7 @@ exports.ConnectionManager = class ConnectionManager {
           sentinelPassword: sentinel.sentinelPassword
         },
         ...sentinel.password !== void 0 && { password: sentinel.password },
-        // Normalize 'replica' → 'slave' — ioredis 5 only accepts 'slave' at the
+        // Normalize 'replica' → 'slave' — ioredis only accepts 'slave' at the
         // wire level; our public interface accepts 'replica' per Redis 7 naming.
         ...sentinel.role !== void 0 && {
           role: sentinel.role === "replica" ? "slave" : sentinel.role
@@ -1705,3 +1756,6 @@ exports.CACHE_ERROR_CODES = CACHE_ERROR_CODES;
 exports.CACHE_ERROR_MESSAGES = CACHE_ERROR_MESSAGES;
 exports.CACHE_EVENT_NAMES = CACHE_EVENT_NAMES;
 exports.CacheException = CacheException;
+exports.DEFAULT_KEY_SEPARATOR = DEFAULT_KEY_SEPARATOR;
+exports.DEFAULT_NAMESPACE = DEFAULT_NAMESPACE;
+exports.DEFAULT_REDIS_PORT = DEFAULT_REDIS_PORT;

package/dist/server/index.d.cts

@@ -1146,6 +1146,26 @@ declare const BYMAX_CACHE_SERIALIZER: unique symbol;
 /** The key builder that composes `{namespace}{sep}{prefix}{sep}{id}`. */
 declare const BYMAX_CACHE_KEY_BUILDER: unique symbol;
 
+/**
+ * Default namespace and key-separator values.
+ *
+ * Layer: server. Applied by `applyDefaults` when the consumer omits the
+ * corresponding option. Kept separate from timeout defaults so each concern has
+ * a single, greppable home.
+ */
+/** Default global namespace when the consumer does not override it. */
+declare const DEFAULT_NAMESPACE: "app";
+/** Default separator between namespace/prefix/id segments. */
+declare const DEFAULT_KEY_SEPARATOR: ":";
+/**
+ * The port Redis listens on when a connection URL does not name one.
+ *
+ * Shared by the URL parser that builds connect options and by the admin surface
+ * that reports the effective endpoint, so the two cannot drift into disagreeing
+ * about where this deployment actually connects.
+ */
+declare const DEFAULT_REDIS_PORT = 6379;
+
 /**
  * Canonical cache error codes for `@bymax-one/nest-cache`.
  *
@@ -1175,6 +1195,10 @@ declare const CACHE_ERROR_CODES: {
     readonly SENTINEL_MISCONFIGURED: "cache.sentinel_misconfigured";
     readonly SHUTDOWN_TIMEOUT: "cache.shutdown_timeout";
     readonly UNSUPPORTED_IN_CLUSTER: "cache.unsupported_in_cluster";
+    readonly INVALID_SCOPE: "cache.invalid_scope";
+    readonly SCOPE_NOT_FOUND: "cache.scope_not_found";
+    readonly SCOPE_NOT_READABLE: "cache.scope_not_readable";
+    readonly KEY_NOT_IN_SCOPE: "cache.key_not_in_scope";
 };
 /** Union of every cache error code string value. */
 type CacheErrorCode = (typeof CACHE_ERROR_CODES)[keyof typeof CACHE_ERROR_CODES];
@@ -1307,4 +1331,4 @@ declare const CACHE_EVENT_NAMES: {
     readonly END: "end";
 };
 
-export { BYMAX_CACHE_CONNECTION, BYMAX_CACHE_EVENTS, BYMAX_CACHE_KEY_BUILDER, BYMAX_CACHE_OPTIONS, BYMAX_CACHE_SCRIPT_REGISTRY, BYMAX_CACHE_SERIALIZER, type BymaxCacheClusterConnection, BymaxCacheModule, type BymaxCacheModuleAsyncOptions, type BymaxCacheModuleOptions, type BymaxCacheSentinelConnection, type BymaxCacheStandaloneConnection, CACHE_ERROR_CODES, CACHE_ERROR_MESSAGES, CACHE_EVENT_NAMES, type CacheConnectionStatus, type CacheErrorCode, type CacheEventName, CacheException, type CacheKeyPrefix, type CacheNamespace, CacheService, ConnectionManager, type ICacheEvents, type IPubSubHandler, type IPubSubPatternHandler, type IScriptDefinition, type ISerializer, JsonSerializer, KeyBuilder, PubSubService, ScriptManagerService, type SerializableValue, type Unsubscribe };
+export { BYMAX_CACHE_CONNECTION, BYMAX_CACHE_EVENTS, BYMAX_CACHE_KEY_BUILDER, BYMAX_CACHE_OPTIONS, BYMAX_CACHE_SCRIPT_REGISTRY, BYMAX_CACHE_SERIALIZER, type BymaxCacheClusterConnection, BymaxCacheModule, type BymaxCacheModuleAsyncOptions, type BymaxCacheModuleOptions, type BymaxCacheSentinelConnection, type BymaxCacheStandaloneConnection, CACHE_ERROR_CODES, CACHE_ERROR_MESSAGES, CACHE_EVENT_NAMES, type CacheConnectionStatus, type CacheErrorCode, type CacheEventName, CacheException, type CacheKeyPrefix, type CacheNamespace, CacheService, ConnectionManager, DEFAULT_KEY_SEPARATOR, DEFAULT_NAMESPACE, DEFAULT_REDIS_PORT, type ICacheEvents, type IPubSubHandler, type IPubSubPatternHandler, type IScriptDefinition, type ISerializer, JsonSerializer, KeyBuilder, PubSubService, type ResolvedOptions, ScriptManagerService, type SerializableValue, type Unsubscribe };

package/dist/server/index.d.ts

@@ -1146,6 +1146,26 @@ declare const BYMAX_CACHE_SERIALIZER: unique symbol;
 /** The key builder that composes `{namespace}{sep}{prefix}{sep}{id}`. */
 declare const BYMAX_CACHE_KEY_BUILDER: unique symbol;
 
+/**
+ * Default namespace and key-separator values.
+ *
+ * Layer: server. Applied by `applyDefaults` when the consumer omits the
+ * corresponding option. Kept separate from timeout defaults so each concern has
+ * a single, greppable home.
+ */
+/** Default global namespace when the consumer does not override it. */
+declare const DEFAULT_NAMESPACE: "app";
+/** Default separator between namespace/prefix/id segments. */
+declare const DEFAULT_KEY_SEPARATOR: ":";
+/**
+ * The port Redis listens on when a connection URL does not name one.
+ *
+ * Shared by the URL parser that builds connect options and by the admin surface
+ * that reports the effective endpoint, so the two cannot drift into disagreeing
+ * about where this deployment actually connects.
+ */
+declare const DEFAULT_REDIS_PORT = 6379;
+
 /**
  * Canonical cache error codes for `@bymax-one/nest-cache`.
  *
@@ -1175,6 +1195,10 @@ declare const CACHE_ERROR_CODES: {
     readonly SENTINEL_MISCONFIGURED: "cache.sentinel_misconfigured";
     readonly SHUTDOWN_TIMEOUT: "cache.shutdown_timeout";
     readonly UNSUPPORTED_IN_CLUSTER: "cache.unsupported_in_cluster";
+    readonly INVALID_SCOPE: "cache.invalid_scope";
+    readonly SCOPE_NOT_FOUND: "cache.scope_not_found";
+    readonly SCOPE_NOT_READABLE: "cache.scope_not_readable";
+    readonly KEY_NOT_IN_SCOPE: "cache.key_not_in_scope";
 };
 /** Union of every cache error code string value. */
 type CacheErrorCode = (typeof CACHE_ERROR_CODES)[keyof typeof CACHE_ERROR_CODES];
@@ -1307,4 +1331,4 @@ declare const CACHE_EVENT_NAMES: {
     readonly END: "end";
 };
 
-export { BYMAX_CACHE_CONNECTION, BYMAX_CACHE_EVENTS, BYMAX_CACHE_KEY_BUILDER, BYMAX_CACHE_OPTIONS, BYMAX_CACHE_SCRIPT_REGISTRY, BYMAX_CACHE_SERIALIZER, type BymaxCacheClusterConnection, BymaxCacheModule, type BymaxCacheModuleAsyncOptions, type BymaxCacheModuleOptions, type BymaxCacheSentinelConnection, type BymaxCacheStandaloneConnection, CACHE_ERROR_CODES, CACHE_ERROR_MESSAGES, CACHE_EVENT_NAMES, type CacheConnectionStatus, type CacheErrorCode, type CacheEventName, CacheException, type CacheKeyPrefix, type CacheNamespace, CacheService, ConnectionManager, type ICacheEvents, type IPubSubHandler, type IPubSubPatternHandler, type IScriptDefinition, type ISerializer, JsonSerializer, KeyBuilder, PubSubService, ScriptManagerService, type SerializableValue, type Unsubscribe };
+export { BYMAX_CACHE_CONNECTION, BYMAX_CACHE_EVENTS, BYMAX_CACHE_KEY_BUILDER, BYMAX_CACHE_OPTIONS, BYMAX_CACHE_SCRIPT_REGISTRY, BYMAX_CACHE_SERIALIZER, type BymaxCacheClusterConnection, BymaxCacheModule, type BymaxCacheModuleAsyncOptions, type BymaxCacheModuleOptions, type BymaxCacheSentinelConnection, type BymaxCacheStandaloneConnection, CACHE_ERROR_CODES, CACHE_ERROR_MESSAGES, CACHE_EVENT_NAMES, type CacheConnectionStatus, type CacheErrorCode, type CacheEventName, CacheException, type CacheKeyPrefix, type CacheNamespace, CacheService, ConnectionManager, DEFAULT_KEY_SEPARATOR, DEFAULT_NAMESPACE, DEFAULT_REDIS_PORT, type ICacheEvents, type IPubSubHandler, type IPubSubPatternHandler, type IScriptDefinition, type ISerializer, JsonSerializer, KeyBuilder, PubSubService, type ResolvedOptions, ScriptManagerService, type SerializableValue, type Unsubscribe };

package/dist/server/index.mjs

@@ -33,6 +33,7 @@ var { ConfigurableModuleClass, MODULE_OPTIONS_TOKEN, OPTIONS_TYPE, ASYNC_OPTIONS
 // src/server/constants/default-namespace.ts
 var DEFAULT_NAMESPACE = "app";
 var DEFAULT_KEY_SEPARATOR = ":";
+var DEFAULT_REDIS_PORT = 6379;
 
 // src/server/constants/default-timeouts.ts
 var DEFAULT_CONNECT_TIMEOUT_MS = 1e4;
@@ -60,7 +61,11 @@ var CACHE_ERROR_CODES = {
   CLUSTER_MISCONFIGURED: "cache.cluster_misconfigured",
   SENTINEL_MISCONFIGURED: "cache.sentinel_misconfigured",
   SHUTDOWN_TIMEOUT: "cache.shutdown_timeout",
-  UNSUPPORTED_IN_CLUSTER: "cache.unsupported_in_cluster"
+  UNSUPPORTED_IN_CLUSTER: "cache.unsupported_in_cluster",
+  INVALID_SCOPE: "cache.invalid_scope",
+  SCOPE_NOT_FOUND: "cache.scope_not_found",
+  SCOPE_NOT_READABLE: "cache.scope_not_readable",
+  KEY_NOT_IN_SCOPE: "cache.key_not_in_scope"
 };
 
 // src/server/errors/cache-error-codes.ts
@@ -70,7 +75,10 @@ var CACHE_ERROR_MESSAGES = /* @__PURE__ */ new Map([
   [CACHE_ERROR_CODES.CONNECTION_LOST, "Redis connection was lost during the operation."],
   [CACHE_ERROR_CODES.SERIALIZATION_FAILED, "Failed to serialize the value."],
   [CACHE_ERROR_CODES.DESERIALIZATION_FAILED, "Failed to deserialize the cached value."],
-  [CACHE_ERROR_CODES.INVALID_NAMESPACE, "Namespace is empty or contains the reserved separator."],
+  [
+    CACHE_ERROR_CODES.INVALID_NAMESPACE,
+    "Namespace or key separator is invalid: the namespace is empty, contains the separator, or contains a Redis glob metacharacter."
+  ],
   [CACHE_ERROR_CODES.INVALID_KEY, "Cache key prefix or id is empty."],
   [CACHE_ERROR_CODES.SCRIPT_NOT_REGISTERED, "Tried to execute an unregistered Lua script."],
   [CACHE_ERROR_CODES.SCRIPT_EXECUTION_FAILED, "Lua script returned a Redis error."],
@@ -85,6 +93,19 @@ var CACHE_ERROR_MESSAGES = /* @__PURE__ */ new Map([
   [
     CACHE_ERROR_CODES.UNSUPPORTED_IN_CLUSTER,
     "This operation requires standalone or sentinel mode; it is not supported in cluster mode."
+  ],
+  [
+    CACHE_ERROR_CODES.INVALID_SCOPE,
+    "An administration scope is malformed: empty field, duplicate id, or a match pattern with no literal prefix."
+  ],
+  [CACHE_ERROR_CODES.SCOPE_NOT_FOUND, "No administration scope is declared under that id."],
+  [
+    CACHE_ERROR_CODES.SCOPE_NOT_READABLE,
+    "This administration scope withholds values; listing, types, TTLs and sizes remain available."
+  ],
+  [
+    CACHE_ERROR_CODES.KEY_NOT_IN_SCOPE,
+    "That key does not belong to the named administration scope."
   ]
 ]);
 var CACHE_ERROR_STATUS = /* @__PURE__ */ new Map([
@@ -128,7 +149,7 @@ function parseRedisUrl(url) {
   }
   const result = {
     host: parsed.hostname,
-    port: parsed.port ? Number.parseInt(parsed.port, 10) : 6379
+    port: parsed.port ? Number.parseInt(parsed.port, 10) : DEFAULT_REDIS_PORT
   };
   if (parsed.username) {
     result.username = decodeURIComponent(parsed.username);
@@ -147,40 +168,50 @@ function parseRedisUrl(url) {
 }
 
 // src/server/config/default-options.ts
-function validateOptions(options) {
-  const mode = options.mode ?? "standalone";
-  if (mode === "sentinel") {
-    if (!options.sentinel || !options.sentinel.sentinels?.length || !options.sentinel.name) {
-      throw new CacheException(CACHE_ERROR_CODES.SENTINEL_MISCONFIGURED, { mode });
+var GLOB_METACHARACTERS = /* @__PURE__ */ new Set(["*", "?", "[", "\\"]);
+function findGlobMetacharacter(namespace) {
+  for (const character of namespace) {
+    if (GLOB_METACHARACTERS.has(character)) {
+      return character;
     }
   }
-  if (mode === "cluster") {
-    if (!options.cluster || !options.cluster.nodes?.length) {
-      throw new CacheException(CACHE_ERROR_CODES.CLUSTER_MISCONFIGURED, { mode });
-    }
+  return null;
+}
+function validateStandaloneConnection(options) {
+  const connection = options.connection;
+  if (!connection || !connection.url && !connection.host) {
+    throw new CacheException(CACHE_ERROR_CODES.CONNECTION_FAILED, {
+      reason: "missing connection.url or connection.host"
+    });
   }
-  if (mode === "standalone") {
-    const connection = options.connection;
-    if (!connection || !connection.url && !connection.host) {
+  if (connection.url) {
+    try {
+      parseRedisUrl(connection.url);
+    } catch {
       throw new CacheException(CACHE_ERROR_CODES.CONNECTION_FAILED, {
-        reason: "missing connection.url or connection.host"
+        reason: "invalid connection.url"
       });
     }
-    if (connection.url) {
-      try {
-        parseRedisUrl(connection.url);
-      } catch {
-        throw new CacheException(CACHE_ERROR_CODES.CONNECTION_FAILED, {
-          reason: "invalid connection.url"
-        });
-      }
-    }
   }
-  const namespace = options.namespace ?? DEFAULT_NAMESPACE;
-  const separator = options.keySeparator ?? DEFAULT_KEY_SEPARATOR;
+}
+function validateNamespace(namespace, separator) {
   if (!namespace || namespace.trim() === "") {
     throw new CacheException(CACHE_ERROR_CODES.INVALID_NAMESPACE, { namespace });
   }
+  if (separator === "") {
+    throw new CacheException(CACHE_ERROR_CODES.INVALID_NAMESPACE, {
+      reason: "empty key separator",
+      separator
+    });
+  }
+  const metacharacter = findGlobMetacharacter(namespace);
+  if (metacharacter !== null) {
+    throw new CacheException(CACHE_ERROR_CODES.INVALID_NAMESPACE, {
+      reason: "namespace contains glob metacharacter",
+      namespace,
+      metacharacter
+    });
+  }
   if (namespace.includes(separator)) {
     throw new CacheException(CACHE_ERROR_CODES.INVALID_NAMESPACE, {
       reason: "namespace contains key separator",
@@ -188,6 +219,26 @@ function validateOptions(options) {
       separator
     });
   }
+}
+function validateOptions(options) {
+  const mode = options.mode ?? "standalone";
+  if (mode === "sentinel") {
+    if (!options.sentinel || !options.sentinel.sentinels?.length || !options.sentinel.name) {
+      throw new CacheException(CACHE_ERROR_CODES.SENTINEL_MISCONFIGURED, { mode });
+    }
+  }
+  if (mode === "cluster") {
+    if (!options.cluster || !options.cluster.nodes?.length) {
+      throw new CacheException(CACHE_ERROR_CODES.CLUSTER_MISCONFIGURED, { mode });
+    }
+  }
+  if (mode === "standalone") {
+    validateStandaloneConnection(options);
+  }
+  validateNamespace(
+    options.namespace ?? DEFAULT_NAMESPACE,
+    options.keySeparator ?? DEFAULT_KEY_SEPARATOR
+  );
   const shutdown = options.shutdownTimeoutMs ?? DEFAULT_SHUTDOWN_TIMEOUT_MS;
   if (shutdown < MIN_SHUTDOWN_TIMEOUT_MS) {
     throw new CacheException(CACHE_ERROR_CODES.CONNECTION_FAILED, {
@@ -374,7 +425,7 @@ var ConnectionManager = class {
           sentinelPassword: sentinel.sentinelPassword
         },
         ...sentinel.password !== void 0 && { password: sentinel.password },
-        // Normalize 'replica' → 'slave' — ioredis 5 only accepts 'slave' at the
+        // Normalize 'replica' → 'slave' — ioredis only accepts 'slave' at the
         // wire level; our public interface accepts 'replica' per Redis 7 naming.
         ...sentinel.role !== void 0 && {
           role: sentinel.role === "replica" ? "slave" : sentinel.role
@@ -1693,4 +1744,4 @@ var CACHE_EVENT_NAMES = {
   END: "end"
 };
 
-export { BYMAX_CACHE_CONNECTION, BYMAX_CACHE_EVENTS, BYMAX_CACHE_KEY_BUILDER, BYMAX_CACHE_OPTIONS, BYMAX_CACHE_SCRIPT_REGISTRY, BYMAX_CACHE_SERIALIZER, BymaxCacheModule, CACHE_ERROR_CODES, CACHE_ERROR_MESSAGES, CACHE_EVENT_NAMES, CacheException, CacheService, ConnectionManager, JsonSerializer, KeyBuilder, PubSubService, ScriptManagerService };
+export { BYMAX_CACHE_CONNECTION, BYMAX_CACHE_EVENTS, BYMAX_CACHE_KEY_BUILDER, BYMAX_CACHE_OPTIONS, BYMAX_CACHE_SCRIPT_REGISTRY, BYMAX_CACHE_SERIALIZER, BymaxCacheModule, CACHE_ERROR_CODES, CACHE_ERROR_MESSAGES, CACHE_EVENT_NAMES, CacheException, CacheService, ConnectionManager, DEFAULT_KEY_SEPARATOR, DEFAULT_NAMESPACE, DEFAULT_REDIS_PORT, JsonSerializer, KeyBuilder, PubSubService, ScriptManagerService };

package/dist/shared/index.cjs

@@ -16,7 +16,11 @@ var CACHE_ERROR_CODES = {
   CLUSTER_MISCONFIGURED: "cache.cluster_misconfigured",
   SENTINEL_MISCONFIGURED: "cache.sentinel_misconfigured",
   SHUTDOWN_TIMEOUT: "cache.shutdown_timeout",
-  UNSUPPORTED_IN_CLUSTER: "cache.unsupported_in_cluster"
+  UNSUPPORTED_IN_CLUSTER: "cache.unsupported_in_cluster",
+  INVALID_SCOPE: "cache.invalid_scope",
+  SCOPE_NOT_FOUND: "cache.scope_not_found",
+  SCOPE_NOT_READABLE: "cache.scope_not_readable",
+  KEY_NOT_IN_SCOPE: "cache.key_not_in_scope"
 };
 
 // src/shared/constants/event-names.ts

package/dist/shared/index.d.cts

@@ -93,6 +93,10 @@ declare const CACHE_ERROR_CODES: {
     readonly SENTINEL_MISCONFIGURED: "cache.sentinel_misconfigured";
     readonly SHUTDOWN_TIMEOUT: "cache.shutdown_timeout";
     readonly UNSUPPORTED_IN_CLUSTER: "cache.unsupported_in_cluster";
+    readonly INVALID_SCOPE: "cache.invalid_scope";
+    readonly SCOPE_NOT_FOUND: "cache.scope_not_found";
+    readonly SCOPE_NOT_READABLE: "cache.scope_not_readable";
+    readonly KEY_NOT_IN_SCOPE: "cache.key_not_in_scope";
 };
 /** Union of every cache error code string value. */
 type CacheErrorCode = (typeof CACHE_ERROR_CODES)[keyof typeof CACHE_ERROR_CODES];

package/dist/shared/index.d.ts

@@ -93,6 +93,10 @@ declare const CACHE_ERROR_CODES: {
     readonly SENTINEL_MISCONFIGURED: "cache.sentinel_misconfigured";
     readonly SHUTDOWN_TIMEOUT: "cache.shutdown_timeout";
     readonly UNSUPPORTED_IN_CLUSTER: "cache.unsupported_in_cluster";
+    readonly INVALID_SCOPE: "cache.invalid_scope";
+    readonly SCOPE_NOT_FOUND: "cache.scope_not_found";
+    readonly SCOPE_NOT_READABLE: "cache.scope_not_readable";
+    readonly KEY_NOT_IN_SCOPE: "cache.key_not_in_scope";
 };
 /** Union of every cache error code string value. */
 type CacheErrorCode = (typeof CACHE_ERROR_CODES)[keyof typeof CACHE_ERROR_CODES];

package/dist/shared/index.mjs

@@ -14,7 +14,11 @@ var CACHE_ERROR_CODES = {
   CLUSTER_MISCONFIGURED: "cache.cluster_misconfigured",
   SENTINEL_MISCONFIGURED: "cache.sentinel_misconfigured",
   SHUTDOWN_TIMEOUT: "cache.shutdown_timeout",
-  UNSUPPORTED_IN_CLUSTER: "cache.unsupported_in_cluster"
+  UNSUPPORTED_IN_CLUSTER: "cache.unsupported_in_cluster",
+  INVALID_SCOPE: "cache.invalid_scope",
+  SCOPE_NOT_FOUND: "cache.scope_not_found",
+  SCOPE_NOT_READABLE: "cache.scope_not_readable",
+  KEY_NOT_IN_SCOPE: "cache.key_not_in_scope"
 };
 
 // src/shared/constants/event-names.ts

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bymax-one/nest-cache",
-  "version": "1.0.6",
-  "description": "Typed Redis cache for NestJS based on ioredis 5, with namespace strategy, Pub/Sub and Lua script management.",
+  "version": "1.2.0",
+  "description": "Typed Redis cache for NestJS based on ioredis 6, with namespace strategy, Pub/Sub and Lua script management.",
   "author": "Bymax One <support@bymax.one>",
   "license": "MIT",
   "homepage": "https://github.com/bymaxone/nest-cache#readme",
@@ -31,6 +31,16 @@
         "default": "./dist/server/index.cjs"
       }
     },
+    "./admin": {
+      "import": {
+        "types": "./dist/admin/index.d.ts",
+        "default": "./dist/admin/index.mjs"
+      },
+      "require": {
+        "types": "./dist/admin/index.d.cts",
+        "default": "./dist/admin/index.cjs"
+      }
+    },
     "./shared": {
       "import": {
         "types": "./dist/shared/index.d.ts",
@@ -50,6 +60,9 @@
     "*": {
       "shared": [
         "./dist/shared/index.d.cts"
+      ],
+      "admin": [
+        "./dist/admin/index.d.cts"
       ]
     }
   },
@@ -57,15 +70,16 @@
     "build": "pnpm clean && tsup",
     "check:exports": "attw --pack .",
     "check:mutants": "node scripts/check-mutation-directives.mjs",
+    "check:admin-readonly": "node scripts/check-admin-readonly.mjs",
     "check:published": "node scripts/check-published-surface.mjs",
     "clean": "rm -rf dist coverage",
     "lint": "eslint src scripts",
     "lint:fix": "eslint src scripts --fix",
     "mutation": "stryker run",
+    "mutation:full": "node -e \"require('node:fs').rmSync('reports/stryker-incremental.json',{force:true,recursive:true})\" && stryker run",
     "mutation:dry-run": "stryker run --dryRunOnly",
-    "mutation:incremental": "stryker run --incremental",
     "prepare": "husky",
-    "prepublishOnly": "pnpm clean && pnpm typecheck && pnpm test:types && pnpm lint && pnpm check:mutants && pnpm test:cov:all && pnpm build && pnpm check:published",
+    "prepublishOnly": "pnpm clean && pnpm typecheck && pnpm test:types && pnpm lint && pnpm check:mutants && pnpm check:admin-readonly && pnpm test:cov:all && pnpm build && pnpm check:published",
     "release": "npm publish --provenance --access public",
     "size": "node scripts/check-size.mjs",
     "test": "jest",
@@ -90,7 +104,7 @@
   "peerDependencies": {
     "@nestjs/common": "^11.0.16",
     "@nestjs/core": "^11.1.18",
-    "ioredis": "^5.0.0",
+    "ioredis": "^6.0.0",
     "reflect-metadata": "^0.2.0"
   },
   "devDependencies": {
@@ -116,7 +130,7 @@
     "eslint-plugin-security": "^4.0.0",
     "globals": "^17.6.0",
     "husky": "^9.1.7",
-    "ioredis": "^5.10.1",
+    "ioredis": "^6.0.0",
     "ioredis-mock": "^8.13.1",
     "jest": "^30.4.2",
     "lint-staged": "^17.2.0",