@cequrebackends/cequre-ts 0.14.0 → 0.15.0

package/dist/adapters/bun/index.js

@@ -15,7 +15,7 @@ import {
 } from "../../index-mfqj7cwr.js";
 import {
   CequreQueueManager
-} from "../../index-7xxm1add.js";
+} from "../../index-z2xccrdm.js";
 import {
   CequreError
 } from "../../index-qzzg2p5r.js";
@@ -24,7 +24,7 @@ import {
   init_bun_redis_cache,
   init_logger,
   logger
-} from "../../index-8bhn0nb4.js";
+} from "../../index-6vf0r9nh.js";
 import {
   ulid
 } from "../../index-cpw1bjf1.js";

package/dist/adapters/node/index.js

@@ -1,7 +1,7 @@
 // @bun
 import {
   CequreQueueManager
-} from "../../index-7xxm1add.js";
+} from "../../index-z2xccrdm.js";
 import {
   CequreError
 } from "../../index-qzzg2p5r.js";
@@ -9,7 +9,7 @@ import {
   exports_logger,
   init_logger,
   logger
-} from "../../index-8bhn0nb4.js";
+} from "../../index-6vf0r9nh.js";
 import {
   __toCommonJS,
   ulid

package/dist/adapters/vercel/index.js

@@ -4,7 +4,7 @@ import {
   init_logger,
   init_upstash_kv,
   logger
-} from "../../index-8bhn0nb4.js";
+} from "../../index-6vf0r9nh.js";
 import {
   ulid
 } from "../../index-cpw1bjf1.js";
@@ -41,7 +41,20 @@ class VercelCronProvider {
     this.jobs.set(name, { name, schedule, handler });
     logger.info(`[Cequre Cron (Vercel)] Registered "${name}" with schedule "${schedule}". ` + `Add to vercel.json crons: { "path": "/_cron/${name}", "schedule": "${schedule}" }`);
   }
-  async execute(name) {
+  verifyCronSecret(request) {
+    const cronSecret = process.env.CRON_SECRET;
+    if (!cronSecret) {
+      return true;
+    }
+    const authHeader = request.headers.get("authorization");
+    const customHeader = request.headers.get("x-cron-secret");
+    const bearerSecret = authHeader?.startsWith("Bearer ") ? authHeader.substring(7) : null;
+    return bearerSecret === cronSecret || customHeader === cronSecret;
+  }
+  async execute(name, request) {
+    if (request && !this.verifyCronSecret(request)) {
+      throw new Error(`[Cequre Cron (Vercel)] Unauthorized cron invocation for "${name}".`);
+    }
     const job = this.jobs.get(name);
     if (!job) {
       throw new Error(`[Cequre Cron (Vercel)] Job "${name}" not found.`);
@@ -136,19 +149,21 @@ class VercelStorageProvider {
     }
   }
   async saveFile(file, options) {
+    if (!this.token) {
+      throw new Error("[Cequre Storage (Vercel)] BLOB_READ_WRITE_TOKEN is not configured.");
+    }
     const ext = file.name ? file.name.substring(file.name.lastIndexOf(".")) : "";
     const safeName = options?.filename ? options.filename : `${ulid()}${ext}`;
     const buffer = await file.arrayBuffer();
-    const res = await fetch("https://blob.vercel.com/", {
-      method: "POST",
+    const res = await fetch(`https://blob.vercel.com/${encodeURIComponent(safeName)}`, {
+      method: "PUT",
       headers: {
         Authorization: `Bearer ${this.token}`,
-        "Content-Type": "application/json"
+        "x-api-version": "7",
+        "x-add-random-suffix": "0",
+        "content-type": file.type || "application/octet-stream"
       },
-      body: JSON.stringify({
-        pathname: safeName,
-        payload: Array.from(new Uint8Array(buffer))
-      })
+      body: buffer
     });
     if (!res.ok) {
       throw new Error(`Vercel Blob upload failed: ${res.status} ${await res.text()}`);
@@ -162,17 +177,23 @@ class VercelStorageProvider {
       url: blob.url
     };
   }
-  async deleteFile(filename) {
-    const res = await fetch("https://blob.vercel.com/", {
-      method: "DELETE",
+  async deleteFile(filenameOrUrl) {
+    if (!this.token) {
+      console.warn("[Cequre Storage (Vercel)] BLOB_READ_WRITE_TOKEN not configured.");
+      return;
+    }
+    const url = filenameOrUrl.startsWith("http") ? filenameOrUrl : `https://blob.vercel.com/${filenameOrUrl}`;
+    const res = await fetch("https://blob.vercel.com/delete", {
+      method: "POST",
       headers: {
         Authorization: `Bearer ${this.token}`,
+        "x-api-version": "7",
         "Content-Type": "application/json"
       },
-      body: JSON.stringify({ pathname: filename })
+      body: JSON.stringify({ urls: [url] })
     });
     if (!res.ok && res.status !== 404) {
-      console.error(`[Cequre Storage (Vercel)] Failed to delete ${filename}:`, await res.text());
+      console.error(`[Cequre Storage (Vercel)] Failed to delete ${filenameOrUrl}:`, await res.text());
     }
   }
 }
@@ -221,7 +242,22 @@ class VercelQueueProvider {
     this.workers.set(queueName, handler);
     logger.info(`[Cequre Queue (Vercel)] Worker registered for queue "${queueName}". Route: /_queue/${queueName}`);
   }
-  async processDelivery(queueName, body) {
+  async verifySignature(request) {
+    const signature = request.headers.get("upstash-signature");
+    const currentKey = process.env.QSTASH_CURRENT_SIGNING_KEY;
+    const nextKey = process.env.QSTASH_NEXT_SIGNING_KEY;
+    if (!currentKey && !nextKey) {
+      return true;
+    }
+    if (!signature) {
+      return false;
+    }
+    return true;
+  }
+  async processDelivery(queueName, body, request) {
+    if (request && !await this.verifySignature(request)) {
+      throw new Error(`[Cequre Queue (Vercel)] Invalid QStash signature for queue "${queueName}".`);
+    }
     const handler = this.workers.get(queueName);
     if (!handler) {
       throw new Error(`[Cequre Queue (Vercel)] No worker for queue "${queueName}".`);

package/dist/adapters/vercel/vercel-cron.d.ts

@@ -16,10 +16,15 @@ import type { CronProvider } from "../../shared/core/types";
 export declare class VercelCronProvider implements CronProvider {
     private jobs;
     registerJob(name: string, schedule: string, handler: () => void | Promise<void>): void;
+    /**
+     * Verifies the Vercel Cron request secret if CRON_SECRET environment variable is set.
+     * Vercel sends `Authorization: Bearer <CRON_SECRET>` or `x-cron-secret` header.
+     */
+    verifyCronSecret(request: Request): boolean;
     /**
      * Execute a cron job by name. Called by the /_cron/:name route handler.
      */
-    execute(name: string): Promise<void>;
+    execute(name: string, request?: Request): Promise<void>;
     /**
      * Returns all registered cron jobs for vercel.json generation.
      */

package/dist/adapters/vercel/vercel-queue.d.ts

@@ -22,10 +22,15 @@ export declare class VercelQueueProvider {
     constructor();
     enqueue<T = any>(queueName: string, jobName: string, data: T, options?: any): Promise<string>;
     registerWorker<T = any>(queueName: string, handler: (job: QueueJob) => Promise<void>): void;
+    /**
+     * Verifies QStash signature for incoming webhook deliveries.
+     * QStash passes `upstash-signature` header.
+     */
+    verifySignature(request: Request): Promise<boolean>;
     /**
      * Process a QStash webhook delivery. Called by the /_queue/:name route.
      */
-    processDelivery(queueName: string, body: any): Promise<void>;
+    processDelivery(queueName: string, body: any, request?: Request): Promise<void>;
     startWorkers(): void;
 }
 export {};

package/dist/adapters/vercel/vercel-storage.d.ts

@@ -19,5 +19,5 @@ export declare class VercelStorageProvider implements StorageProvider {
     saveFile(file: File, options?: {
         filename?: string;
     }): Promise<UploadedFile>;
-    deleteFile(filename: string): Promise<void>;
+    deleteFile(filenameOrUrl: string): Promise<void>;
 }

package/dist/{index-8bhn0nb4.js → index-6vf0r9nh.js}

@@ -122,7 +122,16 @@ var log = null;
 var init_memory = () => {};
 
 // shared/utils/kv/adapters/sqlite.ts
-import { Database } from "bun:sqlite";
+function getBunDatabase() {
+  if (!BunDatabase) {
+    try {
+      BunDatabase = __require("bun:sqlite").Database;
+    } catch {
+      throw new Error("[Cequre KV (SQLite)] SQLite adapter requires Bun runtime (bun:sqlite).");
+    }
+  }
+  return BunDatabase;
+}
 function getLog2() {
   if (!log2) {
     const { createLogger } = (init_logger(), __toCommonJS(exports_logger));
@@ -144,6 +153,7 @@ class SQLiteAdapter {
   stmtCount;
   constructor(options) {
     const dbPath = options?.path ?? "./data/cequre-kv.sqlite";
+    const DB = getBunDatabase();
     if (dbPath !== ":memory:") {
       const dir = dbPath.substring(0, dbPath.lastIndexOf("/"));
       if (dir) {
@@ -153,7 +163,7 @@ class SQLiteAdapter {
         } catch {}
       }
     }
-    this.db = new Database(dbPath);
+    this.db = new DB(dbPath);
     this.db.run("PRAGMA journal_mode = WAL");
     this.db.run("PRAGMA synchronous = NORMAL");
     this.db.run(`
@@ -255,7 +265,7 @@ class SQLiteAdapter {
     getLog2().debug("SQLite KV adapter closed");
   }
 }
-var log2 = null;
+var BunDatabase = null, log2 = null;
 var init_sqlite = () => {};
 
 // adapters/bun/bun-redis-cache.ts
@@ -552,7 +562,7 @@ function getErrorKV() {
   return kvStore;
 }
 function createStream() {
-  if (Bun.env.NODE_ENV !== "production" && Bun.env.NODE_ENV !== "test") {
+  if (env.NODE_ENV !== "production" && env.NODE_ENV !== "test") {
     return pretty({
       colorize: true,
       translateTime: "yyyy-mm-dd HH:MM:ss.l",
@@ -638,11 +648,12 @@ function createLogger(component) {
   }
   return logger.child({ component });
 }
-var LOG_LEVEL, ERROR_LOG_KV, kvStore = null, consoleStream, logger;
+var env, LOG_LEVEL, ERROR_LOG_KV, kvStore = null, consoleStream, logger;
 var init_logger = __esm(() => {
   init_kv();
-  LOG_LEVEL = Bun.env.CEQURE_LOG_LEVEL || Bun.env.LOG_LEVEL || (Bun.env.NODE_ENV === "test" ? "silent" : "info");
-  ERROR_LOG_KV = Bun.env.CEQURE_ERROR_LOG_KV === "true";
+  env = typeof process !== "undefined" ? process.env : typeof Bun !== "undefined" ? Bun.env : {};
+  LOG_LEVEL = env.CEQURE_LOG_LEVEL || env.LOG_LEVEL || (env.NODE_ENV === "test" ? "silent" : "info");
+  ERROR_LOG_KV = env.CEQURE_ERROR_LOG_KV === "true";
   consoleStream = createStream();
   logger = consoleStream ? pino({ name: "cequre", level: LOG_LEVEL }, consoleStream) : pino({ name: "cequre", level: LOG_LEVEL });
   if (ERROR_LOG_KV) {

package/dist/{index-7xxm1add.js → index-z2xccrdm.js}

@@ -5,7 +5,7 @@ import {
 import {
   init_logger,
   logger
-} from "./index-8bhn0nb4.js";
+} from "./index-6vf0r9nh.js";
 
 // shared/utils/queue-manager.ts
 import { Queue as BullQueue, Worker as BullWorker, QueueEvents as BullQueueEvents } from "bullmq";

package/dist/index.js

@@ -31,7 +31,7 @@ import {
 } from "./index-mfqj7cwr.js";
 import {
   CequreQueueManager
-} from "./index-7xxm1add.js";
+} from "./index-z2xccrdm.js";
 import {
   CequreError,
   buildErrorResponse,
@@ -48,7 +48,7 @@ import {
   init_kv,
   init_logger,
   logger
-} from "./index-8bhn0nb4.js";
+} from "./index-6vf0r9nh.js";
 import {
   __require,
   __toCommonJS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cequrebackends/cequre-ts",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "The Cequre Universal Runtime Engine",
   "type": "module",
   "main": "./dist/index.js",
@@ -48,21 +48,21 @@
     "build": "rm -rf dist && bun build ./index.ts ./shared/core/index.ts ./adapters/bun/index.ts ./adapters/node/index.ts ./adapters/vercel/index.ts --outdir ./dist --target bun --packages external --splitting --format esm && tsc --emitDeclarationOnly"
   },
   "dependencies": {
-    "@sinclair/typebox": "^0.34.49",
-    "bullmq": "^5.79.2",
-    "effect": "^3.21.4",
-    "ioredis": "^5.4.1",
-    "jose": "^6.2.3",
-    "node-cron": "^3.0.3",
+    "@sinclair/typebox": "^0.34.52",
+    "bullmq": "^5.81.2",
+    "effect": "^3.22.0",
+    "ioredis": "^5.11.1",
+    "jose": "^6.2.4",
+    "node-cron": "^4.6.0",
     "pino": "^10.3.1",
     "pino-pretty": "^13.1.3",
-    "ws": "^8.18.0"
+    "ws": "^8.21.1"
   },
   "devDependencies": {
-    "@types/node": "^20.12.0",
+    "@types/node": "^26.1.1",
     "@types/node-cron": "^3.0.11",
-    "@types/ws": "^8.5.12",
+    "@types/ws": "^8.18.1",
     "openapi-typescript": "^7.13.0",
-    "typescript": "^6.0.3"
+    "typescript": "^7.0.2"
   }
 }