@c9up/warden 0.1.17 → 0.1.19

package/dist/RememberMeToken.d.ts

@@ -0,0 +1,169 @@
+/**
+ * Remember-me tokens — "keep me signed in" that survives the session cookie.
+ *
+ * Modelled on `@adonisjs/auth`'s `RememberMeToken`
+ * (modules/session_guard/remember_me_token.ts), because an app moving over
+ * carries the same table and the same cookie:
+ *
+ *   value  = base64url(identifier) + "." + base64url(secret)
+ *   stored = sha256(secret), never the secret itself
+ *
+ * The three properties that make this safe, all taken from upstream:
+ *
+ *  1. **Only a hash is stored.** A dump of the tokens table does not let anyone
+ *     log in — the secret exists solely in the user's cookie.
+ *  2. **The comparison is constant-time.** Comparing hashes with `===` leaks
+ *     how many leading bytes matched, which is enough to forge one byte at a
+ *     time.
+ *  3. **A used token is recycled.** Authenticating rotates the secret and
+ *     invalidates the old one, so a stolen cookie stops working the moment the
+ *     legitimate user comes back.
+ */
+import { Secret } from "./Secret.js";
+/** Bytes of entropy in a token secret. Adonis defaults to 40. */
+export declare const DEFAULT_SECRET_LENGTH = 40;
+/** A token as persisted. The secret is NOT here — only its hash. */
+export interface StoredRememberMeToken {
+    /** Unique id of the row; the public half of the token value. */
+    identifier: string;
+    /** Whose token this is. */
+    tokenableId: string | number;
+    /** `sha256(secret)`, hex. */
+    hash: string;
+    createdAt: number;
+    updatedAt: number;
+    expiresAt: number;
+}
+/** What a store must implement. Structural: warden owns no database. */
+export interface RememberMeTokenDriver {
+    create(token: StoredRememberMeToken): Promise<void>;
+    find(identifier: string): Promise<StoredRememberMeToken | null>;
+    /** Replace the hash + expiry of an existing row (recycling). */
+    update(identifier: string, hash: string, expiresAt: number): Promise<void>;
+    delete(identifier: string): Promise<void>;
+    deleteAllForUser(userId: string | number): Promise<void>;
+}
+/** `sha256(secret)` as hex — what gets stored. */
+export declare function hashSecret(secret: string): string;
+/**
+ * Compare two hex hashes without leaking where they diverge. Length is checked
+ * first because `timingSafeEqual` throws on a mismatch — and the length of a
+ * sha256 hex digest is public anyway.
+ */
+export declare function safeCompareHashes(a: string, b: string): boolean;
+/** Split a cookie value into its identifier and secret, or `null` if malformed. */
+export declare function decodeTokenValue(value: unknown): {
+    identifier: string;
+    secret: string;
+} | null;
+/** Build the cookie value from its two halves. */
+export declare function encodeTokenValue(identifier: string, secret: string): string;
+/** A freshly minted token: what to store, and what to hand the browser. */
+export interface MintedRememberMeToken {
+    stored: StoredRememberMeToken;
+    /** Goes in the cookie. Never persisted. */
+    value: string;
+}
+/**
+ * Mint a token for `userId`, valid for `ageSeconds`.
+ *
+ * `identifier` is random too, not a counter: a guessable identifier would let
+ * an attacker enumerate rows and target a specific user's token.
+ */
+export declare function mintRememberMeToken(userId: string | number, ageSeconds: number, secretLength?: number): MintedRememberMeToken;
+/**
+ * Verify a cookie value against the store, and RECYCLE the token on success:
+ * the row keeps its identifier but gets a fresh secret and expiry, and the
+ * caller must send the returned value back as the new cookie.
+ *
+ * Recycling is what limits the damage of a stolen cookie — the thief's copy
+ * dies as soon as the real user authenticates again.
+ *
+ * Returns `null` for anything wrong: malformed value, unknown identifier,
+ * expired row, or a secret that does not match. The caller cannot tell these
+ * apart, which is deliberate — a distinguishable "unknown identifier" tells an
+ * attacker which identifiers exist.
+ */
+export declare function verifyAndRecycleRememberMeToken(driver: RememberMeTokenDriver, cookieValue: unknown, ageSeconds: number, secretLength?: number): Promise<{
+    userId: string | number;
+    value: string;
+} | null>;
+/** In-memory store — for tests and single-process apps. Not for a cluster. */
+export declare class MemoryRememberMeTokenDriver implements RememberMeTokenDriver {
+    #private;
+    create(token: StoredRememberMeToken): Promise<void>;
+    find(identifier: string): Promise<StoredRememberMeToken | null>;
+    update(identifier: string, hash: string, expiresAt: number): Promise<void>;
+    delete(identifier: string): Promise<void>;
+    deleteAllForUser(userId: string | number): Promise<void>;
+}
+/**
+ * A remember-me token as an object, matching `@adonisjs/auth`'s
+ * `RememberMeToken` (modules/session_guard/remember_me_token.ts).
+ *
+ * The functions above are what warden's own guard uses and stay the primary
+ * API. This class exists because an app moving over calls
+ * `RememberMeToken.decode(...)` / `token.verify(secret)` directly — upstream
+ * exports it — and finding nothing under that name is a migration stopping at
+ * an import line. Both sit on the same encoding and the same hashing, so they
+ * cannot disagree about what a token is.
+ *
+ * Secrets come back wrapped in {@link Secret} so one cannot end up in a log by
+ * being interpolated into a string, which is what upstream does too.
+ */
+export declare class RememberMeToken {
+    /**
+     * Split a public token value into its identifier and secret. Returns `null`
+     * for anything malformed rather than throwing — a bad cookie is an ordinary
+     * event, not an exception.
+     */
+    static decode(value: string): {
+        identifier: string;
+        secret: Secret<string>;
+    } | null;
+    /** A fresh secret and the hash to store for it. */
+    static seed(size?: number): {
+        secret: Secret<string>;
+        hash: string;
+    };
+    /**
+     * Everything the persistence layer needs for a new token, without deciding
+     * how it is stored (upstream `createTransientToken`).
+     *
+     * `expiresIn` is in SECONDS, as everywhere else in this module. AdonisJS
+     * also accepts a duration string there; warden takes the number, so the
+     * unit is never ambiguous at a call site.
+     */
+    static createTransientToken(userId: string | number, size: number, expiresIn: number): {
+        secret: Secret<string>;
+        hash: string;
+        userId: string | number;
+        expiresAt: Date;
+    };
+    identifier: string;
+    tokenableId: string | number;
+    hash: string;
+    createdAt: Date;
+    updatedAt: Date;
+    expiresAt: Date;
+    /** The public `identifier.secret` value — only on a token just minted. */
+    value?: Secret<string>;
+    constructor(attributes: {
+        identifier: string;
+        tokenableId: string | number;
+        hash: string;
+        createdAt: Date;
+        updatedAt: Date;
+        expiresAt: Date;
+        secret?: Secret<string>;
+    });
+    /** Build one from a stored row, whose timestamps are epoch milliseconds. */
+    static fromStored(stored: StoredRememberMeToken): RememberMeToken;
+    /** The row to persist, in the shape {@link RememberMeTokenDriver} takes. */
+    toStored(): StoredRememberMeToken;
+    /** Whether the token is past its expiry. */
+    isExpired(): boolean;
+    /** Constant-time check of a presented secret against the stored hash. */
+    verify(secret: Secret<string>): boolean;
+}
+//# sourceMappingURL=RememberMeToken.d.ts.map

package/dist/RememberMeToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RememberMeToken.d.ts","sourceRoot":"","sources":["../src/RememberMeToken.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,oEAAoE;AACpE,MAAM,WAAW,qBAAqB;IACrC,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,wEAAwE;AACxE,MAAM,WAAW,qBAAqB;IACrC,MAAM,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAChE,gEAAgE;IAChE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAoBD,kDAAkD;AAClD,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAK/D;AAED,mFAAmF;AACnF,wBAAgB,gBAAgB,CAC/B,KAAK,EAAE,OAAO,GACZ;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAS/C;AAED,kDAAkD;AAClD,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,2EAA2E;AAC3E,MAAM,WAAW,qBAAqB;IACrC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAClC,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,UAAU,EAAE,MAAM,EAClB,YAAY,SAAwB,GAClC,qBAAqB,CAevB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,+BAA+B,CACpD,MAAM,EAAE,qBAAqB,EAC7B,WAAW,EAAE,OAAO,EACpB,UAAU,EAAE,MAAM,EAClB,YAAY,SAAwB,GAClC,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAyB5D;AAED,8EAA8E;AAC9E,qBAAa,2BAA4B,YAAW,qBAAqB;;IAGlE,MAAM,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAInD,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAK/D,MAAM,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAWV,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAO9D;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,eAAe;IAC3B;;;;OAIG;IACH,MAAM,CAAC,MAAM,CACZ,KAAK,EAAE,MAAM,GACX;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;KAAE,GAAG,IAAI;IASxD,mDAAmD;IACnD,MAAM,CAAC,IAAI,CAAC,IAAI,GAAE,MAA8B,GAAG;QAClD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC;KACb;IAKD;;;;;;;OAOG;IACH,MAAM,CAAC,oBAAoB,CAC1B,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GACf;QACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;QACxB,SAAS,EAAE,IAAI,CAAC;KAChB;IAUD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBAEX,UAAU,EAAE;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,IAAI,CAAC;QAChB,SAAS,EAAE,IAAI,CAAC;QAChB,SAAS,EAAE,IAAI,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;KACxB;IAcD,4EAA4E;IAC5E,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe;IAWjE,4EAA4E;IAC5E,QAAQ,IAAI,qBAAqB;IAWjC,4CAA4C;IAC5C,SAAS,IAAI,OAAO;IAIpB,yEAAyE;IACzE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,OAAO;CAGvC"}

package/dist/RememberMeToken.js

@@ -0,0 +1,269 @@
+/**
+ * Remember-me tokens — "keep me signed in" that survives the session cookie.
+ *
+ * Modelled on `@adonisjs/auth`'s `RememberMeToken`
+ * (modules/session_guard/remember_me_token.ts), because an app moving over
+ * carries the same table and the same cookie:
+ *
+ *   value  = base64url(identifier) + "." + base64url(secret)
+ *   stored = sha256(secret), never the secret itself
+ *
+ * The three properties that make this safe, all taken from upstream:
+ *
+ *  1. **Only a hash is stored.** A dump of the tokens table does not let anyone
+ *     log in — the secret exists solely in the user's cookie.
+ *  2. **The comparison is constant-time.** Comparing hashes with `===` leaks
+ *     how many leading bytes matched, which is enough to forge one byte at a
+ *     time.
+ *  3. **A used token is recycled.** Authenticating rotates the secret and
+ *     invalidates the old one, so a stolen cookie stops working the moment the
+ *     legitimate user comes back.
+ */
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import { Secret } from "./Secret.js";
+/** Bytes of entropy in a token secret. Adonis defaults to 40. */
+export const DEFAULT_SECRET_LENGTH = 40;
+/** Base64url without padding — the encoding Adonis uses for the token halves. */
+function base64UrlEncode(value) {
+    return Buffer.from(value, "utf8").toString("base64url");
+}
+function base64UrlDecode(value) {
+    try {
+        const decoded = Buffer.from(value, "base64url").toString("utf8");
+        // A non-base64url character decodes to something that does not round-trip;
+        // reject rather than authenticate against a mangled identifier.
+        return Buffer.from(decoded, "utf8").toString("base64url") === value
+            ? decoded
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** `sha256(secret)` as hex — what gets stored. */
+export function hashSecret(secret) {
+    return createHash("sha256").update(secret).digest("hex");
+}
+/**
+ * Compare two hex hashes without leaking where they diverge. Length is checked
+ * first because `timingSafeEqual` throws on a mismatch — and the length of a
+ * sha256 hex digest is public anyway.
+ */
+export function safeCompareHashes(a, b) {
+    const left = Buffer.from(a, "utf8");
+    const right = Buffer.from(b, "utf8");
+    if (left.length !== right.length)
+        return false;
+    return timingSafeEqual(left, right);
+}
+/** Split a cookie value into its identifier and secret, or `null` if malformed. */
+export function decodeTokenValue(value) {
+    if (typeof value !== "string" || value.length === 0)
+        return null;
+    const [encodedIdentifier, ...rest] = value.split(".");
+    if (!encodedIdentifier || rest.length === 0)
+        return null;
+    const identifier = base64UrlDecode(encodedIdentifier);
+    const secret = base64UrlDecode(rest.join("."));
+    if (identifier === null || secret === null)
+        return null;
+    if (identifier === "" || secret === "")
+        return null;
+    return { identifier, secret };
+}
+/** Build the cookie value from its two halves. */
+export function encodeTokenValue(identifier, secret) {
+    return `${base64UrlEncode(identifier)}.${base64UrlEncode(secret)}`;
+}
+/**
+ * Mint a token for `userId`, valid for `ageSeconds`.
+ *
+ * `identifier` is random too, not a counter: a guessable identifier would let
+ * an attacker enumerate rows and target a specific user's token.
+ */
+export function mintRememberMeToken(userId, ageSeconds, secretLength = DEFAULT_SECRET_LENGTH) {
+    const identifier = randomBytes(16).toString("hex");
+    const secret = randomBytes(secretLength).toString("base64url");
+    const now = Date.now();
+    return {
+        stored: {
+            identifier,
+            tokenableId: userId,
+            hash: hashSecret(secret),
+            createdAt: now,
+            updatedAt: now,
+            expiresAt: now + ageSeconds * 1000,
+        },
+        value: encodeTokenValue(identifier, secret),
+    };
+}
+/**
+ * Verify a cookie value against the store, and RECYCLE the token on success:
+ * the row keeps its identifier but gets a fresh secret and expiry, and the
+ * caller must send the returned value back as the new cookie.
+ *
+ * Recycling is what limits the damage of a stolen cookie — the thief's copy
+ * dies as soon as the real user authenticates again.
+ *
+ * Returns `null` for anything wrong: malformed value, unknown identifier,
+ * expired row, or a secret that does not match. The caller cannot tell these
+ * apart, which is deliberate — a distinguishable "unknown identifier" tells an
+ * attacker which identifiers exist.
+ */
+export async function verifyAndRecycleRememberMeToken(driver, cookieValue, ageSeconds, secretLength = DEFAULT_SECRET_LENGTH) {
+    const decoded = decodeTokenValue(cookieValue);
+    if (!decoded)
+        return null;
+    const stored = await driver.find(decoded.identifier);
+    if (!stored)
+        return null;
+    if (stored.expiresAt <= Date.now()) {
+        // Expired rows are removed on sight rather than left to a cleanup job.
+        await driver.delete(stored.identifier);
+        return null;
+    }
+    if (!safeCompareHashes(stored.hash, hashSecret(decoded.secret))) {
+        return null;
+    }
+    const secret = randomBytes(secretLength).toString("base64url");
+    const expiresAt = Date.now() + ageSeconds * 1000;
+    await driver.update(stored.identifier, hashSecret(secret), expiresAt);
+    return {
+        userId: stored.tokenableId,
+        value: encodeTokenValue(stored.identifier, secret),
+    };
+}
+/** In-memory store — for tests and single-process apps. Not for a cluster. */
+export class MemoryRememberMeTokenDriver {
+    #rows = new Map();
+    async create(token) {
+        this.#rows.set(token.identifier, { ...token });
+    }
+    async find(identifier) {
+        const row = this.#rows.get(identifier);
+        return row ? { ...row } : null;
+    }
+    async update(identifier, hash, expiresAt) {
+        const row = this.#rows.get(identifier);
+        if (!row)
+            return;
+        this.#rows.set(identifier, {
+            ...row,
+            hash,
+            expiresAt,
+            updatedAt: Date.now(),
+        });
+    }
+    async delete(identifier) {
+        this.#rows.delete(identifier);
+    }
+    async deleteAllForUser(userId) {
+        for (const [identifier, row] of this.#rows) {
+            if (String(row.tokenableId) === String(userId)) {
+                this.#rows.delete(identifier);
+            }
+        }
+    }
+}
+/**
+ * A remember-me token as an object, matching `@adonisjs/auth`'s
+ * `RememberMeToken` (modules/session_guard/remember_me_token.ts).
+ *
+ * The functions above are what warden's own guard uses and stay the primary
+ * API. This class exists because an app moving over calls
+ * `RememberMeToken.decode(...)` / `token.verify(secret)` directly — upstream
+ * exports it — and finding nothing under that name is a migration stopping at
+ * an import line. Both sit on the same encoding and the same hashing, so they
+ * cannot disagree about what a token is.
+ *
+ * Secrets come back wrapped in {@link Secret} so one cannot end up in a log by
+ * being interpolated into a string, which is what upstream does too.
+ */
+export class RememberMeToken {
+    /**
+     * Split a public token value into its identifier and secret. Returns `null`
+     * for anything malformed rather than throwing — a bad cookie is an ordinary
+     * event, not an exception.
+     */
+    static decode(value) {
+        const decoded = decodeTokenValue(value);
+        if (!decoded)
+            return null;
+        return {
+            identifier: decoded.identifier,
+            secret: new Secret(decoded.secret),
+        };
+    }
+    /** A fresh secret and the hash to store for it. */
+    static seed(size = DEFAULT_SECRET_LENGTH) {
+        const secret = randomBytes(size).toString("base64url");
+        return { secret: new Secret(secret), hash: hashSecret(secret) };
+    }
+    /**
+     * Everything the persistence layer needs for a new token, without deciding
+     * how it is stored (upstream `createTransientToken`).
+     *
+     * `expiresIn` is in SECONDS, as everywhere else in this module. AdonisJS
+     * also accepts a duration string there; warden takes the number, so the
+     * unit is never ambiguous at a call site.
+     */
+    static createTransientToken(userId, size, expiresIn) {
+        const { secret, hash } = RememberMeToken.seed(size);
+        return {
+            secret,
+            hash,
+            userId,
+            expiresAt: new Date(Date.now() + expiresIn * 1000),
+        };
+    }
+    identifier;
+    tokenableId;
+    hash;
+    createdAt;
+    updatedAt;
+    expiresAt;
+    /** The public `identifier.secret` value — only on a token just minted. */
+    value;
+    constructor(attributes) {
+        this.identifier = attributes.identifier;
+        this.tokenableId = attributes.tokenableId;
+        this.hash = attributes.hash;
+        this.createdAt = attributes.createdAt;
+        this.updatedAt = attributes.updatedAt;
+        this.expiresAt = attributes.expiresAt;
+        if (attributes.secret) {
+            this.value = new Secret(encodeTokenValue(attributes.identifier, attributes.secret.release()));
+        }
+    }
+    /** Build one from a stored row, whose timestamps are epoch milliseconds. */
+    static fromStored(stored) {
+        return new RememberMeToken({
+            identifier: stored.identifier,
+            tokenableId: stored.tokenableId,
+            hash: stored.hash,
+            createdAt: new Date(stored.createdAt),
+            updatedAt: new Date(stored.updatedAt),
+            expiresAt: new Date(stored.expiresAt),
+        });
+    }
+    /** The row to persist, in the shape {@link RememberMeTokenDriver} takes. */
+    toStored() {
+        return {
+            identifier: this.identifier,
+            tokenableId: this.tokenableId,
+            hash: this.hash,
+            createdAt: this.createdAt.getTime(),
+            updatedAt: this.updatedAt.getTime(),
+            expiresAt: this.expiresAt.getTime(),
+        };
+    }
+    /** Whether the token is past its expiry. */
+    isExpired() {
+        return this.expiresAt.getTime() <= Date.now();
+    }
+    /** Constant-time check of a presented secret against the stored hash. */
+    verify(secret) {
+        return safeCompareHashes(this.hash, hashSecret(secret.release()));
+    }
+}
+//# sourceMappingURL=RememberMeToken.js.map

package/dist/RememberMeToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RememberMeToken.js","sourceRoot":"","sources":["../src/RememberMeToken.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,iEAAiE;AACjE,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAyBxC,iFAAiF;AACjF,SAAS,eAAe,CAAC,KAAa;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACrC,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjE,2EAA2E;QAC3E,gEAAgE;QAChE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK;YAClE,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,UAAU,CAAC,MAAc;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAS,EAAE,CAAS;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAC/B,KAAc;IAEd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,UAAU,GAAG,eAAe,CAAC,iBAAiB,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,IAAI,UAAU,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,UAAU,KAAK,EAAE,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,MAAc;IAClE,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;AACpE,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAClC,MAAuB,EACvB,UAAkB,EAClB,YAAY,GAAG,qBAAqB;IAEpC,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO;QACN,MAAM,EAAE;YACP,UAAU;YACV,WAAW,EAAE,MAAM;YACnB,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC;YACxB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG,GAAG,UAAU,GAAG,IAAI;SAClC;QACD,KAAK,EAAE,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC;KAC3C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,MAA6B,EAC7B,WAAoB,EACpB,UAAkB,EAClB,YAAY,GAAG,qBAAqB;IAEpC,MAAM,OAAO,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpC,uEAAuE;QACvE,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC;IACjD,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IAEtE,OAAO;QACN,MAAM,EAAE,MAAM,CAAC,WAAW;QAC1B,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC;KAClD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,OAAO,2BAA2B;IAC9B,KAAK,GAAG,IAAI,GAAG,EAAiC,CAAC;IAE1D,KAAK,CAAC,MAAM,CAAC,KAA4B;QACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAAkB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CACX,UAAkB,EAClB,IAAY,EACZ,SAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE;YAC1B,GAAG,GAAG;YACN,IAAI;YACJ,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAuB;QAC7C,KAAK,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC;IACF,CAAC;CACD;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,eAAe;IAC3B;;;;OAIG;IACH,MAAM,CAAC,MAAM,CACZ,KAAa;QAEb,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO;YACN,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,MAAM,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAClC,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,MAAM,CAAC,IAAI,CAAC,OAAe,qBAAqB;QAI/C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvD,OAAO,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;IACjE,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,oBAAoB,CAC1B,MAAuB,EACvB,IAAY,EACZ,SAAiB;QAOjB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO;YACN,MAAM;YACN,IAAI;YACJ,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;SAClD,CAAC;IACH,CAAC;IAED,UAAU,CAAS;IACnB,WAAW,CAAkB;IAC7B,IAAI,CAAS;IACb,SAAS,CAAO;IAChB,SAAS,CAAO;IAChB,SAAS,CAAO;IAChB,0EAA0E;IAC1E,KAAK,CAAkB;IAEvB,YAAY,UAQX;QACA,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,IAAI,MAAM,CACtB,gBAAgB,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CACpE,CAAC;QACH,CAAC;IACF,CAAC;IAED,4EAA4E;IAC5E,MAAM,CAAC,UAAU,CAAC,MAA6B;QAC9C,OAAO,IAAI,eAAe,CAAC;YAC1B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YACrC,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YACrC,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;SACrC,CAAC,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,QAAQ;QACP,OAAO;YACN,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;SACnC,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,SAAS;QACR,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/C,CAAC;IAED,yEAAyE;IACzE,MAAM,CAAC,MAAsB;QAC5B,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;CACD"}

package/dist/ResilientBlacklistDriver.d.ts

@@ -4,17 +4,23 @@
  * takes the whole app down.
  *
  * Policy (fail-open on reads):
- *   - `add()`  — if the primary throws, the revocation is recorded in the
- *                fallback so logout stays effective on this instance.
- *   - `has()`  — if the primary throws, consult the fallback: a token revoked
- *                during the outage is still caught here; anything else is
- *                allowed through (fail-open). Access tokens are short-lived, so
- *                the window a missed revocation survives is bounded by the token
- *                TTL — the blacklist is defense-in-depth above expiry, not the
+ *   - `add()`  — records the revocation in BOTH, always. The fallback is this
+ *                instance's own record of what it has revoked, not a log of its
+ *                outages: writing only on failure meant a token revoked while
+ *                the primary was HEALTHY was absent from the fallback, so the
+ *                first check during a later outage let that logged-out token
+ *                through. A primary failure still does not fail the logout.
+ *   - `has()`  — asks the fallback FIRST: what this instance revoked is known
+ *                locally and needs no round trip. Otherwise it asks the
+ *                primary, and if that throws, allows the token through
+ *                (fail-open). Access tokens are short-lived, so the window a
+ *                revocation missed by BOTH survives is bounded by the token TTL
+ *                — the blacklist is defense-in-depth above expiry, not the
  *                primary boundary.
  *
- * Every degradation invokes `onDegrade` (defaults to a stderr warning) so the
- * outage is observable.
+ * Every degradation invokes `onDegrade`. The default reports the first failure
+ * per operation and then a periodic count: an outage that logs on every request
+ * buries itself, and the reader stops seeing what the flood is about.
  */
 import { type BlacklistDriver } from "./TokenBlacklist.js";
 export interface BlacklistDegradeEvent {

package/dist/ResilientBlacklistDriver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResilientBlacklistDriver.d.ts","sourceRoot":"","sources":["../src/ResilientBlacklistDriver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EACN,KAAK,eAAe,EAEpB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,qBAAqB;IACrC,EAAE,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACxC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;CACnD;AASD,qBAAa,wBAAyB,YAAW,eAAe;;gBAM9D,OAAO,EAAE,eAAe,EACxB,QAAQ,GAAE,eAA6C,EACvD,MAAM,GAAE,wBAA6B;IAOhC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASlD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUlC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAQ9B"}
+{"version":3,"file":"ResilientBlacklistDriver.d.ts","sourceRoot":"","sources":["../src/ResilientBlacklistDriver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACN,KAAK,eAAe,EAEpB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,qBAAqB;IACrC,EAAE,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACxC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;CACnD;AAkCD,qBAAa,wBAAyB,YAAW,eAAe;;gBAM9D,OAAO,EAAE,eAAe,EACxB,QAAQ,GAAE,eAA6C,EACvD,MAAM,GAAE,wBAA6B;IAOhC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAelD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAalC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAQ9B"}

package/dist/ResilientBlacklistDriver.js

@@ -4,21 +4,49 @@
  * takes the whole app down.
  *
  * Policy (fail-open on reads):
- *   - `add()`  — if the primary throws, the revocation is recorded in the
- *                fallback so logout stays effective on this instance.
- *   - `has()`  — if the primary throws, consult the fallback: a token revoked
- *                during the outage is still caught here; anything else is
- *                allowed through (fail-open). Access tokens are short-lived, so
- *                the window a missed revocation survives is bounded by the token
- *                TTL — the blacklist is defense-in-depth above expiry, not the
+ *   - `add()`  — records the revocation in BOTH, always. The fallback is this
+ *                instance's own record of what it has revoked, not a log of its
+ *                outages: writing only on failure meant a token revoked while
+ *                the primary was HEALTHY was absent from the fallback, so the
+ *                first check during a later outage let that logged-out token
+ *                through. A primary failure still does not fail the logout.
+ *   - `has()`  — asks the fallback FIRST: what this instance revoked is known
+ *                locally and needs no round trip. Otherwise it asks the
+ *                primary, and if that throws, allows the token through
+ *                (fail-open). Access tokens are short-lived, so the window a
+ *                revocation missed by BOTH survives is bounded by the token TTL
+ *                — the blacklist is defense-in-depth above expiry, not the
  *                primary boundary.
  *
- * Every degradation invokes `onDegrade` (defaults to a stderr warning) so the
- * outage is observable.
+ * Every degradation invokes `onDegrade`. The default reports the first failure
+ * per operation and then a periodic count: an outage that logs on every request
+ * buries itself, and the reader stops seeing what the flood is about.
  */
 import { MemoryBlacklistDriver, } from "./TokenBlacklist.js";
-function defaultOnDegrade({ op, error }) {
-    console.warn(`[warden] blacklist primary failed on ${op}; using in-memory fallback:`, error);
+/** How long a repeat of the same failing operation stays folded into a count. */
+const DEGRADE_LOG_WINDOW_MS = 60_000;
+/**
+ * Report the first failure of each operation, then one line per window with
+ * how many were suppressed.
+ *
+ * Keyed by operation — a fixed, three-value set — never by the error text,
+ * which an attacker could influence and which would make the key set unbounded.
+ */
+function makeDefaultOnDegrade() {
+    const windows = new Map();
+    return ({ op, error }) => {
+        const now = Date.now();
+        const open = windows.get(op);
+        if (open === undefined || open.until <= now) {
+            if (open !== undefined && open.suppressed > 0) {
+                console.warn(`[warden] blacklist primary failed on ${op} ${open.suppressed} more time(s) in the last minute.`);
+            }
+            windows.set(op, { until: now + DEGRADE_LOG_WINDOW_MS, suppressed: 0 });
+            console.warn(`[warden] blacklist primary failed on ${op}; using in-memory fallback:`, error);
+            return;
+        }
+        open.suppressed++;
+    };
 }
 export class ResilientBlacklistDriver {
     #primary;
@@ -27,25 +55,35 @@ export class ResilientBlacklistDriver {
     constructor(primary, fallback = new MemoryBlacklistDriver(), config = {}) {
         this.#primary = primary;
         this.#fallback = fallback;
-        this.#onDegrade = config.onDegrade ?? defaultOnDegrade;
+        this.#onDegrade = config.onDegrade ?? makeDefaultOnDegrade();
     }
     async add(jti, expiresAt) {
+        // The fallback first, and unconditionally: it is what this instance
+        // knows it revoked. Recording only on failure left every revocation made
+        // while the primary was healthy invisible to the fallback — and those are
+        // most of them.
+        await this.#fallback.add(jti, expiresAt);
         try {
             await this.#primary.add(jti, expiresAt);
         }
         catch (error) {
+            // The revocation is already durable enough for this instance, so a
+            // primary failure must not fail the logout.
             this.#onDegrade({ op: "add", error });
-            await this.#fallback.add(jti, expiresAt);
         }
     }
     async has(jti) {
+        // What this instance revoked is known locally — no round trip needed, and
+        // it stays correct through an outage that starts a moment later.
+        if (await this.#fallback.has(jti))
+            return true;
         try {
             return await this.#primary.has(jti);
         }
         catch (error) {
             this.#onDegrade({ op: "has", error });
-            // Fail-open: honour in-outage revocations on this instance, allow rest.
-            return this.#fallback.has(jti);
+            // Fail-open on what neither knows: access tokens are short-lived.
+            return false;
         }
     }
     async cleanup() {

package/dist/ResilientBlacklistDriver.js.map

@@ -1 +1 @@
-{"version":3,"file":"ResilientBlacklistDriver.js","sourceRoot":"","sources":["../src/ResilientBlacklistDriver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAEN,qBAAqB,GACrB,MAAM,qBAAqB,CAAC;AAY7B,SAAS,gBAAgB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAyB;IAC7D,OAAO,CAAC,IAAI,CACX,wCAAwC,EAAE,6BAA6B,EACvE,KAAK,CACL,CAAC;AACH,CAAC;AAED,MAAM,OAAO,wBAAwB;IAC3B,QAAQ,CAAkB;IAC1B,SAAS,CAAkB;IAC3B,UAAU,CAAyC;IAE5D,YACC,OAAwB,EACxB,WAA4B,IAAI,qBAAqB,EAAE,EACvD,SAAmC,EAAE;QAErC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,SAAiB;QACvC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACtC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC;IACF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACpB,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACtC,wEAAwE;YACxE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;IAClC,CAAC;CACD"}
+{"version":3,"file":"ResilientBlacklistDriver.js","sourceRoot":"","sources":["../src/ResilientBlacklistDriver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAEN,qBAAqB,GACrB,MAAM,qBAAqB,CAAC;AAY7B,iFAAiF;AACjF,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;;;;;;GAMG;AACH,SAAS,oBAAoB;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiD,CAAC;IACzE,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAyB,EAAQ,EAAE;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC;YAC7C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBAC/C,OAAO,CAAC,IAAI,CACX,wCAAwC,EAAE,IAAI,IAAI,CAAC,UAAU,mCAAmC,CAChG,CAAC;YACH,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,GAAG,qBAAqB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;YACvE,OAAO,CAAC,IAAI,CACX,wCAAwC,EAAE,6BAA6B,EACvE,KAAK,CACL,CAAC;YACF,OAAO;QACR,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;IACnB,CAAC,CAAC;AACH,CAAC;AAED,MAAM,OAAO,wBAAwB;IAC3B,QAAQ,CAAkB;IAC1B,SAAS,CAAkB;IAC3B,UAAU,CAAyC;IAE5D,YACC,OAAwB,EACxB,WAA4B,IAAI,qBAAqB,EAAE,EACvD,SAAmC,EAAE;QAErC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,IAAI,oBAAoB,EAAE,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,SAAiB;QACvC,oEAAoE;QACpE,yEAAyE;QACzE,0EAA0E;QAC1E,gBAAgB;QAChB,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,mEAAmE;YACnE,4CAA4C;YAC5C,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACvC,CAAC;IACF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACpB,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACtC,kEAAkE;YAClE,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;IAClC,CAAC;CACD"}

package/dist/Secret.d.ts

@@ -0,0 +1,11 @@
+export declare class Secret<T> {
+    #private;
+    constructor(value: T, redactedKeyword?: string);
+    /** Redacted placeholder, so `JSON.stringify` never emits the secret. */
+    toJSON(): string;
+    /** Redacted placeholder for string coercion and template literals. */
+    toString(): string;
+    /** Release the underlying value — the one deliberate way to read it. */
+    release(): T;
+}
+//# sourceMappingURL=Secret.d.ts.map

package/dist/Secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Secret.d.ts","sourceRoot":"","sources":["../src/Secret.ts"],"names":[],"mappings":"AAYA,qBAAa,MAAM,CAAC,CAAC;;gBAIR,KAAK,EAAE,CAAC,EAAE,eAAe,GAAE,MAAiB;IAKxD,wEAAwE;IACxE,MAAM,IAAI,MAAM;IAIhB,sEAAsE;IACtE,QAAQ,IAAI,MAAM;IASlB,wEAAwE;IACxE,OAAO,IAAI,CAAC;CAGZ"}