@c9up/ream 0.1.32 → 0.1.33

package/dist/session/drivers/DatabaseDriver.d.ts

@@ -0,0 +1,66 @@
+import type { SessionDriverWithTagging, TaggedSession } from '../Session.js';
+/**
+ * The little a session store needs of a database connection.
+ *
+ * Structural on purpose: ream must not import atlas to store a session, so any
+ * connection exposing these two methods works — atlas, a test double, or an
+ * app's own wrapper.
+ */
+export interface SessionDbConnection {
+    query<T = Record<string, unknown>>(sql: string, params?: unknown[]): Promise<T[]>;
+    execute(sql: string, params?: unknown[]): Promise<{
+        rowsAffected: number;
+    }>;
+}
+export interface DatabaseDriverOptions {
+    connection: SessionDbConnection;
+    /** Table holding the sessions. Default `sessions`. */
+    tableName?: string;
+    /**
+     * Percent chance that a write also sweeps expired rows (AdonisJS
+     * `gcProbability`, default 2).
+     *
+     * Without it nothing collects them: `read()` only drops a row it happens to
+     * look at, so a session whose owner never comes back stays in the table
+     * forever. `0` turns the sweep off, for a deployment that prunes on a
+     * schedule instead — see {@link DatabaseDriver.prune}.
+     */
+    gcProbability?: number;
+}
+/**
+ * Database-backed sessions (AdonisJS `database` store).
+ *
+ * The fit is several app instances sharing one database and no Redis: every
+ * instance reads the same sessions, which neither the memory nor the file store
+ * can do.
+ *
+ * The table it expects:
+ *
+ *   id          varchar primary key
+ *   data        text
+ *   expires_at  bigint     -- epoch ms
+ *   user_id     varchar null  -- session tagging; nullable, only set at login
+ */
+export declare class DatabaseDriver implements SessionDriverWithTagging {
+    #private;
+    constructor(options: DatabaseDriverOptions);
+    read(sessionId: string): Promise<Record<string, unknown>>;
+    write(sessionId: string, data: Record<string, unknown>, ttl: number): Promise<void>;
+    destroy(sessionId: string): Promise<void>;
+    touch(sessionId: string, ttl: number): Promise<void>;
+    /**
+     * Associate the session with a user (AdonisJS's database store does the same:
+     * a nullable `user_id` column, set at login).
+     */
+    tag(sessionId: string, userId: string | number): Promise<void>;
+    /**
+     * Drop the association. Scoped to the user id as well as the session, so a
+     * logout cannot clear a tag another user's session happens to hold.
+     */
+    untag(sessionId: string, userId: string | number): Promise<void>;
+    /** Every non-expired session this user holds — their active devices. */
+    tagged(userId: string | number): Promise<TaggedSession[]>;
+    /** Delete every expired row — for a scheduled job, since nothing else does. */
+    prune(): Promise<void>;
+}
+//# sourceMappingURL=DatabaseDriver.d.ts.map

package/dist/session/drivers/DatabaseDriver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DatabaseDriver.d.ts","sourceRoot":"","sources":["../../../src/session/drivers/DatabaseDriver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAE5E;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA;IACjF,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC5E;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,mBAAmB,CAAA;IAC/B,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAKD;;;;;;;;;;;;;GAaG;AACH,qBAAa,cAAe,YAAW,wBAAwB;;gBAKjD,OAAO,EAAE,qBAAqB;IAoBpC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAczD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCnF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1D;;;OAGG;IACG,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOpE;;;OAGG;IACG,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOtE,wEAAwE;IAClE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAQ/D,+EAA+E;IACzE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B"}

package/dist/session/drivers/DatabaseDriver.js

@@ -0,0 +1,132 @@
+/** AdonisJS's default: two writes in a hundred pay for the cleanup. */
+const DEFAULT_GC_PROBABILITY = 2;
+/**
+ * Database-backed sessions (AdonisJS `database` store).
+ *
+ * The fit is several app instances sharing one database and no Redis: every
+ * instance reads the same sessions, which neither the memory nor the file store
+ * can do.
+ *
+ * The table it expects:
+ *
+ *   id          varchar primary key
+ *   data        text
+ *   expires_at  bigint     -- epoch ms
+ *   user_id     varchar null  -- session tagging; nullable, only set at login
+ */
+export class DatabaseDriver {
+    #db;
+    #table;
+    #gcProbability;
+    constructor(options) {
+        this.#db = options.connection;
+        const gc = options.gcProbability ?? DEFAULT_GC_PROBABILITY;
+        if (!Number.isFinite(gc) || gc < 0 || gc > 100) {
+            throw new Error(`Session gcProbability must be a percentage between 0 and 100, got ${String(options.gcProbability)}.`);
+        }
+        this.#gcProbability = gc;
+        const table = options.tableName ?? 'sessions';
+        // The table name is concatenated into the SQL (it cannot be a bind
+        // parameter), so it is restricted to an identifier rather than trusted.
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(table)) {
+            throw new Error(`Session table name "${table}" is not a plain identifier — letters, digits and underscores only.`);
+        }
+        this.#table = table;
+    }
+    async read(sessionId) {
+        const rows = await this.#db.query(`SELECT data, expires_at FROM ${this.#table} WHERE id = ?`, [sessionId]);
+        const row = rows[0];
+        if (!row)
+            return {};
+        if (Number(row.expires_at) < Date.now()) {
+            await this.destroy(sessionId);
+            return {};
+        }
+        return parseData(row.data);
+    }
+    async write(sessionId, data, ttl) {
+        const payload = JSON.stringify(data);
+        const expiresAt = Date.now() + ttl * 1000;
+        // UPDATE-then-INSERT rather than a dialect-specific upsert: `ON CONFLICT`
+        // and `ON DUPLICATE KEY` are spelled differently by each engine, and this
+        // store has to work on all of them.
+        const updated = await this.#db.execute(`UPDATE ${this.#table} SET data = ?, expires_at = ? WHERE id = ?`, [payload, expiresAt, sessionId]);
+        if (updated.rowsAffected > 0) {
+            await this.#collectGarbage();
+            return;
+        }
+        await this.#db.execute(`INSERT INTO ${this.#table} (id, data, expires_at) VALUES (?, ?, ?)`, [
+            sessionId,
+            payload,
+            expiresAt,
+        ]);
+        await this.#collectGarbage();
+    }
+    /**
+     * Sweep expired rows on a fraction of writes (AdonisJS `#collectGarbage`).
+     *
+     * Best-effort: a failed sweep must not fail the request that happened to draw
+     * the short straw. What it did not remove, the next write that does will.
+     */
+    async #collectGarbage() {
+        if (this.#gcProbability <= 0)
+            return;
+        if (Math.random() * 100 >= this.#gcProbability)
+            return;
+        try {
+            await this.prune();
+        }
+        catch {
+            // See above — the session was written, which is what the request needed.
+        }
+    }
+    async destroy(sessionId) {
+        await this.#db.execute(`DELETE FROM ${this.#table} WHERE id = ?`, [sessionId]);
+    }
+    async touch(sessionId, ttl) {
+        await this.#db.execute(`UPDATE ${this.#table} SET expires_at = ? WHERE id = ?`, [
+            Date.now() + ttl * 1000,
+            sessionId,
+        ]);
+    }
+    /**
+     * Associate the session with a user (AdonisJS's database store does the same:
+     * a nullable `user_id` column, set at login).
+     */
+    async tag(sessionId, userId) {
+        await this.#db.execute(`UPDATE ${this.#table} SET user_id = ? WHERE id = ?`, [
+            String(userId),
+            sessionId,
+        ]);
+    }
+    /**
+     * Drop the association. Scoped to the user id as well as the session, so a
+     * logout cannot clear a tag another user's session happens to hold.
+     */
+    async untag(sessionId, userId) {
+        await this.#db.execute(`UPDATE ${this.#table} SET user_id = NULL WHERE id = ? AND user_id = ?`, [sessionId, String(userId)]);
+    }
+    /** Every non-expired session this user holds — their active devices. */
+    async tagged(userId) {
+        const rows = await this.#db.query(`SELECT id, data FROM ${this.#table} WHERE user_id = ? AND expires_at >= ?`, [String(userId), Date.now()]);
+        return rows.map((row) => ({ id: row.id, data: parseData(row.data) }));
+    }
+    /** Delete every expired row — for a scheduled job, since nothing else does. */
+    async prune() {
+        await this.#db.execute(`DELETE FROM ${this.#table} WHERE expires_at < ?`, [Date.now()]);
+    }
+}
+/**
+ * A stored payload back into an object. An unreadable row is an absent session
+ * rather than a half-parsed object handed to the app.
+ */
+function parseData(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        return typeof parsed === 'object' && parsed !== null ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+//# sourceMappingURL=DatabaseDriver.js.map

package/dist/session/drivers/DatabaseDriver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DatabaseDriver.js","sourceRoot":"","sources":["../../../src/session/drivers/DatabaseDriver.ts"],"names":[],"mappings":"AA8BA,uEAAuE;AACvE,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAEhC;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,cAAc;IAChB,GAAG,CAAqB;IACxB,MAAM,CAAQ;IACd,cAAc,CAAQ;IAE/B,YAAY,OAA8B;QACxC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,UAAU,CAAA;QAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAA;QAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,qEAAqE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CACtG,CAAA;QACH,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,EAAE,CAAA;QACxB,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAA;QAC7C,mEAAmE;QACnE,wEAAwE;QACxE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,qEAAqE,CAClG,CAAA;QACH,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAC/B,gCAAgC,IAAI,CAAC,MAAM,eAAe,EAC1D,CAAC,SAAS,CAAC,CACZ,CAAA;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAA;QACnB,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC7B,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAA6B,EAAE,GAAW;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAA;QACzC,0EAA0E;QAC1E,0EAA0E;QAC1E,oCAAoC;QACpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CACpC,UAAU,IAAI,CAAC,MAAM,4CAA4C,EACjE,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAChC,CAAA;QACD,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;YAC5B,OAAM;QACR,CAAC;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,MAAM,0CAA0C,EAAE;YAC3F,SAAS;YACT,OAAO;YACP,SAAS;SACV,CAAC,CAAA;QACF,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;IAC9B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe;QACnB,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC;YAAE,OAAM;QACpC,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,cAAc;YAAE,OAAM;QACtD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,MAAM,eAAe,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IAChF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,GAAW;QACxC,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,kCAAkC,EAAE;YAC9E,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI;YACvB,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,MAAuB;QAClD,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,+BAA+B,EAAE;YAC3E,MAAM,CAAC,MAAM,CAAC;YACd,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,MAAuB;QACpD,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CACpB,UAAU,IAAI,CAAC,MAAM,kDAAkD,EACvE,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAC5B,CAAA;IACH,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,MAAM,CAAC,MAAuB;QAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAC/B,wBAAwB,IAAI,CAAC,MAAM,wCAAwC,EAC3E,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAC7B,CAAA;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IACvE,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,MAAM,uBAAuB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IACzF,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACvC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAA;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC"}

package/dist/session/drivers/FileDriver.d.ts

@@ -0,0 +1,22 @@
+import type { SessionDriver } from '../Session.js';
+/**
+ * File-backed sessions (AdonisJS `file` store) — one file per session id.
+ *
+ * The fit is a single machine that must survive a restart without running a
+ * Redis: the data outlives the process, which the memory store cannot offer.
+ * It does NOT fit several machines, where each one would hold a different half
+ * of the sessions.
+ */
+export interface FileDriverOptions {
+    /** Directory the session files live in. Created if missing. */
+    location: string;
+}
+export declare class FileDriver implements SessionDriver {
+    #private;
+    constructor(options: FileDriverOptions);
+    read(sessionId: string): Promise<Record<string, unknown>>;
+    write(sessionId: string, data: Record<string, unknown>, ttl: number): Promise<void>;
+    destroy(sessionId: string): Promise<void>;
+    touch(sessionId: string, ttl: number): Promise<void>;
+}
+//# sourceMappingURL=FileDriver.d.ts.map

package/dist/session/drivers/FileDriver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileDriver.d.ts","sourceRoot":"","sources":["../../../src/session/drivers/FileDriver.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElD;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,qBAAa,UAAW,YAAW,aAAa;;gBAGlC,OAAO,EAAE,iBAAiB;IAiBhC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAuBzD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWnF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAK3D"}

package/dist/session/drivers/FileDriver.js

@@ -0,0 +1,66 @@
+import { createHash } from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+export class FileDriver {
+    #location;
+    constructor(options) {
+        this.#location = path.resolve(options.location);
+        fs.mkdirSync(this.#location, { recursive: true });
+    }
+    /**
+     * The file backing a session id.
+     *
+     * The id is HASHED, never used as a filename: it arrives from a cookie, so a
+     * value like `../../etc/passwd` would otherwise choose the path. A hash also
+     * keeps the name a fixed, filesystem-safe length whatever the id looks like.
+     */
+    #pathFor(sessionId) {
+        const name = createHash('sha256').update(sessionId).digest('hex');
+        return path.join(this.#location, `${name}.json`);
+    }
+    async read(sessionId) {
+        let raw;
+        try {
+            raw = await fs.promises.readFile(this.#pathFor(sessionId), 'utf8');
+        }
+        catch {
+            return {};
+        }
+        try {
+            const parsed = JSON.parse(raw);
+            if (typeof parsed !== 'object' || parsed === null)
+                return {};
+            const entry = parsed;
+            if (typeof entry.expiresAt === 'number' && entry.expiresAt < Date.now()) {
+                await this.destroy(sessionId);
+                return {};
+            }
+            return entry.data ?? {};
+        }
+        catch {
+            // A truncated or hand-edited file is a session we cannot trust; treat it
+            // as absent rather than handing a half-parsed object to the app.
+            return {};
+        }
+    }
+    async write(sessionId, data, ttl) {
+        const file = this.#pathFor(sessionId);
+        const payload = JSON.stringify({ expiresAt: Date.now() + ttl * 1000, data });
+        // Written to a temporary neighbour then renamed: a crash mid-write would
+        // otherwise leave a truncated file, and the user would be silently logged
+        // out. `rename` within one directory is atomic.
+        const temp = `${file}.${process.pid}.tmp`;
+        await fs.promises.writeFile(temp, payload, { encoding: 'utf8', mode: 0o600 });
+        await fs.promises.rename(temp, file);
+    }
+    async destroy(sessionId) {
+        await fs.promises.rm(this.#pathFor(sessionId), { force: true });
+    }
+    async touch(sessionId, ttl) {
+        const data = await this.read(sessionId);
+        if (Object.keys(data).length === 0)
+            return;
+        await this.write(sessionId, data, ttl);
+    }
+}
+//# sourceMappingURL=FileDriver.js.map

package/dist/session/drivers/FileDriver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileDriver.js","sourceRoot":"","sources":["../../../src/session/drivers/FileDriver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAgBjC,MAAM,OAAO,UAAU;IACZ,SAAS,CAAQ;IAE1B,YAAY,OAA0B;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC/C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnD,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,SAAiB;QACxB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACjE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,OAAO,CAAC,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,IAAI,GAAW,CAAA;QACf,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAA;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACvC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAA;YAC5D,MAAM,KAAK,GAAG,MAAgE,CAAA;YAC9E,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACxE,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;gBAC7B,OAAO,EAAE,CAAA;YACX,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,iEAAiE;YACjE,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAA6B,EAAE,GAAW;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAA;QACzC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7E,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACjE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,GAAW;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAC1C,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;IACxC,CAAC;CACF"}

package/dist/session/drivers/MemoryDriver.d.ts

@@ -1,9 +1,17 @@
-import type { SessionDriver } from '../Session.js';
-export declare class MemoryDriver implements SessionDriver {
+import type { SessionDriverWithTagging, TaggedSession } from '../Session.js';
+export interface MemoryDriverOptions {
+    /** Maximum live sessions kept in memory. Default 10 000. */
+    maxEntries?: number;
+}
+export declare class MemoryDriver implements SessionDriverWithTagging {
     #private;
+    constructor(options?: MemoryDriverOptions);
     read(sessionId: string): Promise<Record<string, unknown>>;
     write(sessionId: string, data: Record<string, unknown>, ttl: number): Promise<void>;
     destroy(sessionId: string): Promise<void>;
     touch(sessionId: string, ttl: number): Promise<void>;
+    tag(sessionId: string, userId: string | number): Promise<void>;
+    untag(sessionId: string, userId: string | number): Promise<void>;
+    tagged(userId: string | number): Promise<TaggedSession[]>;
 }
 //# sourceMappingURL=MemoryDriver.d.ts.map

package/dist/session/drivers/MemoryDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MemoryDriver.d.ts","sourceRoot":"","sources":["../../../src/session/drivers/MemoryDriver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAIlD,qBAAa,YAAa,YAAW,aAAa;;IAG1C,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IASzD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAM3D"}
+{"version":3,"file":"MemoryDriver.d.ts","sourceRoot":"","sources":["../../../src/session/drivers/MemoryDriver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAgB5E,MAAM,WAAW,mBAAmB;IAClC,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,qBAAa,YAAa,YAAW,wBAAwB;;gBAM/C,OAAO,GAAE,mBAAwB;IAIvC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IASzD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBnF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUzC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOpD,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQhE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;CAkBhE"}

package/dist/session/drivers/MemoryDriver.js

@@ -1,6 +1,23 @@
+/** Sweep expired entries once the store reaches this size. */
 const SWEEP_THRESHOLD = 1000;
+/**
+ * Hard cap on live sessions.
+ *
+ * The sweep alone only removes EXPIRED entries, so within the TTL window
+ * nothing bounded growth: anyone able to request a page could mint sessions
+ * until the process ran out of memory, without ever logging in. Past the cap
+ * the oldest sessions are dropped — a bounded store that forgets is strictly
+ * better than an unbounded one that dies.
+ */
+const DEFAULT_MAX_ENTRIES = 10_000;
 export class MemoryDriver {
     #store = new Map();
+    /** user id → the sessions tagged with it. */
+    #tags = new Map();
+    #maxEntries;
+    constructor(options = {}) {
+        this.#maxEntries = Math.max(1, options.maxEntries ?? DEFAULT_MAX_ENTRIES);
+    }
     async read(sessionId) {
         const entry = this.#store.get(sessionId);
         if (!entry || entry.expiresAt < Date.now()) {
@@ -17,10 +34,28 @@ export class MemoryDriver {
                     this.#store.delete(id);
             }
         }
+        // Re-inserting moves the key to the end, so eviction order stays "oldest
+        // written first" rather than "oldest ever seen".
+        this.#store.delete(sessionId);
         this.#store.set(sessionId, { data, expiresAt: Date.now() + ttl * 1000 });
+        // Sweeping may have freed nothing — every session can be live and unexpired.
+        while (this.#store.size > this.#maxEntries) {
+            const oldest = this.#store.keys().next();
+            if (oldest.done)
+                break;
+            this.#store.delete(oldest.value);
+        }
     }
     async destroy(sessionId) {
         this.#store.delete(sessionId);
+        // Drop the tags too: a destroyed session left in the index would be
+        // reported as an active device forever.
+        for (const [userId, ids] of this.#tags) {
+            if (!ids.delete(sessionId))
+                continue;
+            if (ids.size === 0)
+                this.#tags.delete(userId);
+        }
     }
     async touch(sessionId, ttl) {
         const entry = this.#store.get(sessionId);
@@ -28,5 +63,40 @@ export class MemoryDriver {
             entry.expiresAt = Date.now() + ttl * 1000;
         }
     }
+    async tag(sessionId, userId) {
+        const key = String(userId);
+        const ids = this.#tags.get(key) ?? new Set();
+        ids.add(sessionId);
+        this.#tags.set(key, ids);
+    }
+    async untag(sessionId, userId) {
+        const key = String(userId);
+        const ids = this.#tags.get(key);
+        if (!ids)
+            return;
+        ids.delete(sessionId);
+        if (ids.size === 0)
+            this.#tags.delete(key);
+    }
+    async tagged(userId) {
+        const ids = this.#tags.get(String(userId));
+        if (!ids)
+            return [];
+        const now = Date.now();
+        const sessions = [];
+        for (const id of [...ids]) {
+            const entry = this.#store.get(id);
+            // An expired or evicted session is not an active device. Forget it here
+            // too, so the index does not grow with entries the store already lost.
+            if (!entry || entry.expiresAt < now) {
+                ids.delete(id);
+                continue;
+            }
+            sessions.push({ id, data: { ...entry.data } });
+        }
+        if (ids.size === 0)
+            this.#tags.delete(String(userId));
+        return sessions;
+    }
 }
 //# sourceMappingURL=MemoryDriver.js.map

package/dist/session/drivers/MemoryDriver.js.map

@@ -1 +1 @@
-{"version":3,"file":"MemoryDriver.js","sourceRoot":"","sources":["../../../src/session/drivers/MemoryDriver.ts"],"names":[],"mappings":"AAEA,MAAM,eAAe,GAAG,IAAI,CAAA;AAE5B,MAAM,OAAO,YAAY;IACvB,MAAM,GAAsE,IAAI,GAAG,EAAE,CAAA;IAErF,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAC7B,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAA6B,EAAE,GAAW;QACvE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACtC,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG;oBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACnD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC,CAAA;IAC1E,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,GAAW;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAA;QAC3C,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"MemoryDriver.js","sourceRoot":"","sources":["../../../src/session/drivers/MemoryDriver.ts"],"names":[],"mappings":"AAEA,8DAA8D;AAC9D,MAAM,eAAe,GAAG,IAAI,CAAA;AAE5B;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAOlC,MAAM,OAAO,YAAY;IACvB,MAAM,GAAsE,IAAI,GAAG,EAAE,CAAA;IACrF,6CAA6C;IAC7C,KAAK,GAA6B,IAAI,GAAG,EAAE,CAAA;IAClC,WAAW,CAAQ;IAE5B,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAA;IAC3E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAC7B,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAA6B,EAAE,GAAW;QACvE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACtC,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG;oBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACnD,CAAC;QACH,CAAC;QACD,yEAAyE;QACzE,iDAAiD;QACjD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC,CAAA;QACxE,6EAA6E;QAC7E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAA;YACxC,IAAI,MAAM,CAAC,IAAI;gBAAE,MAAK;YACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC7B,oEAAoE;QACpE,wCAAwC;QACxC,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;gBAAE,SAAQ;YACpC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,GAAW;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAA;QAC3C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,MAAuB;QAClD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAU,CAAA;QACpD,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAClB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,MAAuB;QACpD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACrB,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAuB;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAA;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,QAAQ,GAAoB,EAAE,CAAA;QACpC,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACjC,wEAAwE;YACxE,uEAAuE;YACvE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBACd,SAAQ;YACV,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAChD,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QACrD,OAAO,QAAQ,CAAA;IACjB,CAAC;CACF"}

package/dist/session/drivers/RedisDriver.d.ts

@@ -7,13 +7,18 @@
  * ioredis/node-redis client, or a `@c9up/quasar` connection, or anything that
  * carries these four commands.
  */
-import type { SessionDriver } from '../Session.js';
+import type { SessionDriverWithTagging, TaggedSession } from '../Session.js';
 /** The commands a session needs. Compatible with ioredis and node-redis. */
 export interface SessionRedisClient {
     get(key: string): Promise<string | null>;
     set(key: string, value: string, ...args: unknown[]): Promise<unknown>;
     del(key: string | string[]): Promise<number>;
     expire(key: string, seconds: number): Promise<number>;
+    /** Set commands, needed only for session tagging. Every real client has them. */
+    sadd?(key: string, ...members: string[]): Promise<number>;
+    srem?(key: string, ...members: string[]): Promise<number>;
+    smembers?(key: string): Promise<string[]>;
+    exists?(key: string): Promise<number>;
 }
 /** Where the client comes from — resolved once, on the first request that needs it. */
 export type SessionRedisClientSource = SessionRedisClient | (() => SessionRedisClient | Promise<SessionRedisClient>);
@@ -21,7 +26,7 @@ export interface RedisSessionOptions {
     /** Key prefix. Namespacing matters: a session store usually shares a database. */
     prefix?: string;
 }
-export declare class RedisDriver implements SessionDriver {
+export declare class RedisDriver implements SessionDriverWithTagging {
     #private;
     constructor(source: SessionRedisClientSource, options?: RedisSessionOptions);
     /**
@@ -34,5 +39,8 @@ export declare class RedisDriver implements SessionDriver {
     destroy(sessionId: string): Promise<void>;
     /** Slide the expiry — a session must not die while its owner is active. */
     touch(sessionId: string, ttl: number): Promise<void>;
+    tag(sessionId: string, userId: string | number): Promise<void>;
+    untag(sessionId: string, userId: string | number): Promise<void>;
+    tagged(userId: string | number): Promise<TaggedSession[]>;
 }
 //# sourceMappingURL=RedisDriver.d.ts.map

package/dist/session/drivers/RedisDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RedisDriver.d.ts","sourceRoot":"","sources":["../../../src/session/drivers/RedisDriver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElD,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC5C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACtD;AAED,uFAAuF;AACvF,MAAM,MAAM,wBAAwB,GAChC,kBAAkB,GAClB,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAA;AAE5D,MAAM,WAAW,mBAAmB;IAClC,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,qBAAa,WAAY,YAAW,aAAa;;gBAMnC,MAAM,EAAE,wBAAwB,EAAE,OAAO,GAAE,mBAAwB;IA8B/E;;;;OAIG;IACG,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAazD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/C,2EAA2E;IACrE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAI3D"}
+{"version":3,"file":"RedisDriver.d.ts","sourceRoot":"","sources":["../../../src/session/drivers/RedisDriver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAE5E,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC5C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACrD,iFAAiF;IACjF,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACzD,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACzD,QAAQ,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACzC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACtC;AAaD,uFAAuF;AACvF,MAAM,MAAM,wBAAwB,GAChC,kBAAkB,GAClB,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAA;AAE5D,MAAM,WAAW,mBAAmB;IAClC,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,qBAAa,WAAY,YAAW,wBAAwB;;gBAM9C,MAAM,EAAE,wBAAwB,EAAE,OAAO,GAAE,mBAAwB;IA2D/E;;;;OAIG;IACG,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAazD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/C,2EAA2E;IACrE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpD,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9D,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;CAmBhE"}

package/dist/session/drivers/RedisDriver.js

@@ -7,6 +7,11 @@
  * ioredis/node-redis client, or a `@c9up/quasar` connection, or anything that
  * carries these four commands.
  */
+/** The set commands session tagging needs, over and above the base four. */
+const SET_COMMANDS = ['sadd', 'srem', 'smembers', 'exists'];
+function hasSetCommands(client) {
+    return SET_COMMANDS.every((command) => typeof client[command] === 'function');
+}
 export class RedisDriver {
     #source;
     #resolved;
@@ -40,6 +45,31 @@ export class RedisDriver {
     #key(sessionId) {
         return `${this.#prefix}${sessionId}`;
     }
+    /** Where the set of a user's session ids lives. */
+    #tagKey(userId) {
+        return `${this.#prefix}tag:${userId}`;
+    }
+    /**
+     * The client, narrowed to one that carries the set commands.
+     *
+     * They are optional on {@link SessionRedisClient} so a four-command shim
+     * still satisfies the store contract. A real client has them; a shim that
+     * does not gets told which command is missing, rather than a tag that
+     * silently does nothing and a "log out everywhere" that logs nobody out.
+     */
+    async #taggingClient(method) {
+        const client = await this.#client();
+        const missing = SET_COMMANDS.find((command) => typeof client[command] !== 'function');
+        if (missing !== undefined) {
+            throw new Error(`session.${method}() needs the Redis \`${missing.toUpperCase()}\` command, which the configured client does not expose.`);
+        }
+        if (!hasSetCommands(client)) {
+            // Unreachable: `missing` already proved every command is there. The guard
+            // is what tells the type system so, without asserting it.
+            throw new Error(`session.${method}() could not narrow the Redis client.`);
+        }
+        return client;
+    }
     /**
      * Unreadable payloads are treated as an absent session rather than thrown.
      * A corrupt value would otherwise 500 every request carrying that cookie,
@@ -73,6 +103,34 @@ export class RedisDriver {
         const client = await this.#client();
         await client.expire(this.#key(sessionId), ttl);
     }
+    async tag(sessionId, userId) {
+        const client = await this.#taggingClient('tag');
+        await client.sadd(this.#tagKey(userId), sessionId);
+    }
+    async untag(sessionId, userId) {
+        const client = await this.#taggingClient('untag');
+        await client.srem(this.#tagKey(userId), sessionId);
+    }
+    async tagged(userId) {
+        const client = await this.#taggingClient('tagged');
+        const key = this.#tagKey(userId);
+        const ids = await client.smembers(key);
+        const sessions = [];
+        const stale = [];
+        for (const id of ids) {
+            // A member whose session key expired is not an active device. Redis
+            // cannot expire set members individually, so the set is pruned here —
+            // otherwise it grows with every session the user ever opened.
+            if ((await client.exists(this.#key(id))) === 0) {
+                stale.push(id);
+                continue;
+            }
+            sessions.push({ id, data: await this.read(id) });
+        }
+        if (stale.length > 0)
+            await client.srem(key, ...stale);
+        return sessions;
+    }
 }
 function isPlainRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);

package/dist/session/drivers/RedisDriver.js.map

@@ -1 +1 @@
-{"version":3,"file":"RedisDriver.js","sourceRoot":"","sources":["../../../src/session/drivers/RedisDriver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAsBH,MAAM,OAAO,WAAW;IACb,OAAO,CAA0B;IAC1C,SAAS,CAAgC;IACzC,QAAQ,CAAyC;IACxC,OAAO,CAAQ;IAExB,YAAY,MAAgC,EAAE,UAA+B,EAAE;QAC7E,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAA;IAClD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAA;QACzC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAA;YAC7B,OAAO,IAAI,CAAC,SAAS,CAAA;QACvB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAA;YAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC1D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAA;gBACvB,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;gBACzB,OAAO,MAAM,CAAA;YACf,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED,IAAI,CAAC,SAAiB;QACpB,OAAO,GAAG,IAAI,CAAC,OAAO,GAAG,SAAS,EAAE,CAAA;IACtC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACnC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;QAClD,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,CAAA;QAE3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACvC,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAA6B,EAAE,GAAW;QACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACnC,yEAAyE;QACzE,uCAAuC;QACvC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;IACzE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACnC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IACxC,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,GAAW;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACnC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAA;IAChD,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC"}
+{"version":3,"file":"RedisDriver.js","sourceRoot":"","sources":["../../../src/session/drivers/RedisDriver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAiBH,4EAA4E;AAC5E,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAA;AAMpE,SAAS,cAAc,CAAC,MAA0B;IAChD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,CAAA;AAC/E,CAAC;AAYD,MAAM,OAAO,WAAW;IACb,OAAO,CAA0B;IAC1C,SAAS,CAAgC;IACzC,QAAQ,CAAyC;IACxC,OAAO,CAAQ;IAExB,YAAY,MAAgC,EAAE,UAA+B,EAAE;QAC7E,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAA;IAClD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAA;QACzC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAA;YAC7B,OAAO,IAAI,CAAC,SAAS,CAAA;QACvB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAA;YAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC1D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAA;gBACvB,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;gBACzB,OAAO,MAAM,CAAA;YACf,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED,IAAI,CAAC,SAAiB;QACpB,OAAO,GAAG,IAAI,CAAC,OAAO,GAAG,SAAS,EAAE,CAAA;IACtC,CAAC;IAED,mDAAmD;IACnD,OAAO,CAAC,MAAuB;QAC7B,OAAO,GAAG,IAAI,CAAC,OAAO,OAAO,MAAM,EAAE,CAAA;IACvC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACnC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,CAAA;QACrF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,WAAW,MAAM,wBAAwB,OAAO,CAAC,WAAW,EAAE,0DAA0D,CACzH,CAAA;QACH,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,0EAA0E;YAC1E,0DAA0D;YAC1D,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,uCAAuC,CAAC,CAAA;QAC3E,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACnC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;QAClD,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,CAAA;QAE3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACvC,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAA6B,EAAE,GAAW;QACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACnC,yEAAyE;QACzE,uCAAuC;QACvC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;IACzE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACnC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IACxC,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,GAAW;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACnC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,MAAuB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;QAC/C,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,MAAuB;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QACjD,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAuB;QAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QACtC,MAAM,QAAQ,GAAoB,EAAE,CAAA;QACpC,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,oEAAoE;YACpE,sEAAsE;YACtE,8DAA8D;YAC9D,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACd,SAAQ;YACV,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAClD,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAA;QACtD,OAAO,QAAQ,CAAA;IACjB,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC"}

package/dist/session/templateTags.d.ts

@@ -0,0 +1,42 @@
+/**
+ * The flash-message tags AdonisJS's session publishes to templates.
+ *
+ * A migrated template keeps writing:
+ *
+ *   @error('email')<p>{{ $message }}</p>@enderror
+ *   @errors<ul>@each(m in $messages)<li>{{ m }}</li>@endeach</ul>@enderrors
+ *   @inputError('email')@each(m in $messages)<i>{{ m }}</i>@endeach@endinputError
+ *   @flashMessage('notice')<p>{{ $message }}</p>@endflashMessage
+ *
+ * Each renders its body only when the message exists, and binds it under the
+ * name upstream uses (`$message` / `$messages`) — bound into the BODY's scope,
+ * so it does not leak past the tag.
+ *
+ * The values come from the `flashMessages` store the session middleware shares
+ * into `ctx.view`; the tag reads it out of the render scope.
+ */
+/** The single surface these tags need of a template engine. */
+export interface TemplateTagEngine {
+    registerTag(tag: {
+        tagName: string;
+        block: boolean;
+        seekable: boolean;
+        compile(parser: unknown, buffer: {
+            writeRaw(text: string): void;
+        }, token: {
+            properties: {
+                jsArg: string;
+            };
+            renderBody(locals?: Readonly<Record<string, unknown>>): string | Promise<string>;
+            evaluate(expression: string): unknown;
+        }): void | Promise<void>;
+    }): void;
+}
+/**
+ * Register `@error`, `@errors`, `@inputError` and `@flashMessage` on `engine`.
+ *
+ * Safe to call when no session ran: a template rendered outside a request finds
+ * no store in scope and every tag renders nothing, rather than throwing.
+ */
+export declare function registerSessionTemplateTags(engine: TemplateTagEngine): void;
+//# sourceMappingURL=templateTags.d.ts.map

package/dist/session/templateTags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templateTags.d.ts","sourceRoot":"","sources":["../../src/session/templateTags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,+DAA+D;AAC/D,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,GAAG,EAAE;QACf,OAAO,EAAE,MAAM,CAAA;QACf,KAAK,EAAE,OAAO,CAAA;QACd,QAAQ,EAAE,OAAO,CAAA;QACjB,OAAO,CACL,MAAM,EAAE,OAAO,EACf,MAAM,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,EACxC,KAAK,EAAE;YACL,UAAU,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAA;aAAE,CAAA;YAC7B,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;YAChF,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAA;SACtC,GACA,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KACxB,GAAG,IAAI,CAAA;CACT;AAiBD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAkE3E"}