@holo-js/session 0.1.4 → 0.1.6

package/dist/drivers/redis-adapter.mjs

@@ -54,7 +54,8 @@ function parseClusterNodeUrl(node, label) {
       ...parsed.protocol === "rediss:" ? { tls: {} } : {}
     };
   } catch (error) {
-    throw new Error(`[@holo-js/session] ${label} is invalid: ${error instanceof Error ? error.message : String(error)}`);
+    const message = String(error).replace(/^[A-Z][A-Za-z]*Error: /, "");
+    throw new Error(`[@holo-js/session] ${label} is invalid: ${message}`);
   }
 }
 function resolveClusterStartupNodes(config) {

package/dist/index.mjs

@@ -78,6 +78,13 @@ function parseRememberMeToken(token) {
     issuedAt
   };
 }
+function decodeCookiePart(value) {
+  try {
+    return decodeURIComponent(value);
+  } catch {
+    return null;
+  }
+}
 function normalizeCookieOptions(options = {}) {
   const config = getSessionRuntimeState().bindings?.config.cookie;
   return {
@@ -103,7 +110,7 @@ function serializeCookie(name, value, options = {}) {
   if (normalized.domain) {
     attributes.push(`Domain=${normalized.domain}`);
   }
-  if (normalized.maxAge > 0) {
+  if (normalized.maxAge > 0 || options.maxAge === 0) {
     attributes.push(`Max-Age=${normalized.maxAge}`);
   }
   if (normalized.expires) {
@@ -130,8 +137,11 @@ function parseCookieHeader(header) {
     if (separator <= 0) {
       return void 0;
     }
-    const key = decodeURIComponent(segment.slice(0, separator));
-    const value = decodeURIComponent(segment.slice(separator + 1));
+    const key = decodeCookiePart(segment.slice(0, separator));
+    const value = decodeCookiePart(segment.slice(separator + 1));
+    if (key === null || value === null) {
+      return void 0;
+    }
     return [key, value];
   }).filter((entry) => !!entry);
   return Object.freeze(Object.fromEntries(entries));
@@ -189,7 +199,7 @@ async function writeSession(record) {
   const nextRecord = Object.freeze({
     ...record,
     store: name,
-    data: Object.freeze({ ...record.data ?? {} }),
+    data: Object.freeze({ ...record.data }),
     createdAt: ensureDate(record.createdAt),
     lastActivityAt: ensureDate(record.lastActivityAt),
     expiresAt: ensureDate(record.expiresAt)
@@ -259,23 +269,20 @@ async function consumeRememberMeToken(token, options) {
   }
   const bindings = getSessionRuntimeBindings();
   const stores = options?.store ? [getStore(options.store).store] : Object.values(bindings.stores);
-  let record = null;
-  for (const store of stores) {
-    record = await store.read(parsed.sessionId);
-    if (record) {
-      break;
-    }
-  }
-  if (!record?.rememberTokenHash) {
-    return null;
-  }
   if (parsed.issuedAt) {
     const rememberExpiry = parsed.issuedAt + getSessionRuntimeBindings().config.rememberMeLifetime * 6e4;
     if (rememberExpiry <= Date.now()) {
       return null;
     }
   }
-  return record.rememberTokenHash === hashRememberToken(parsed.secretPayload) ? record : null;
+  const tokenHash = hashRememberToken(parsed.secretPayload);
+  for (const store of stores) {
+    const record = await readRecordFromStore(parsed.sessionId, store);
+    if (record?.rememberTokenHash === tokenHash) {
+      return record;
+    }
+  }
+  return null;
 }
 var cookies = Object.freeze({
   make(name, value, options) {
@@ -376,11 +383,20 @@ function deserializeRecord(raw) {
 function getRecordPath(root, sessionId) {
   return join(root, `${encodeURIComponent(sessionId)}.json`);
 }
+function isMissingFileError(error) {
+  return error instanceof Error && error.code === "ENOENT";
+}
 function createFileSessionStore(root) {
   return {
     async read(sessionId) {
-      const contents = await readFile(getRecordPath(root, sessionId), "utf8").catch(() => void 0);
-      return contents ? deserializeRecord(contents) : null;
+      try {
+        return deserializeRecord(await readFile(getRecordPath(root, sessionId), "utf8"));
+      } catch (error) {
+        if (isMissingFileError(error)) {
+          return null;
+        }
+        throw error;
+      }
     },
     async write(record) {
       await mkdir(root, { recursive: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@holo-js/session",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Holo-JS Framework - session contracts, cookie helpers, and session config helpers",
   "type": "module",
   "license": "MIT",
@@ -28,10 +28,10 @@
     "test": "vitest --run"
   },
   "dependencies": {
-    "@holo-js/config": "^0.1.4"
+    "@holo-js/config": "^0.1.6"
   },
   "peerDependencies": {
-    "ioredis": "catalog:"
+    "ioredis": "^5.4.2"
   },
   "peerDependenciesMeta": {
     "ioredis": {
@@ -40,9 +40,9 @@
   },
   "devDependencies": {
     "@types/node": "^22.10.2",
-    "ioredis": "catalog:",
+    "ioredis": "^5.4.2",
     "tsup": "^8.3.5",
     "typescript": "^5.7.2",
-    "vitest": "^2.1.8"
+    "vitest": "^4.1.5"
   }
 }