@kabyeon/nexusjs 0.6.5

package/dist/session/backends/memory.d.ts

@@ -0,0 +1,32 @@
+/**
+ * In-memory session storage.
+ *
+ * LRU-evicting map for tests and single-instance dev. The same map is
+ * also useful for mocking in unit tests — `create()` / `read()` /
+ * `update()` / `destroy()` round-trip without any I/O.
+ */
+import type { SessionStorage, SessionRecord, SessionData, CreateSessionOptions, UpdateSessionOptions, SessionQuery } from "../types.js";
+export interface MemoryStorageOptions {
+    /** GC interval in ms. Default: 60_000. */
+    gcIntervalMs?: number;
+    /** Max sessions in memory before evicting LRU. Default: 100_000. */
+    maxSessions?: number;
+}
+export declare class MemorySessionStorage implements SessionStorage {
+    #private;
+    readonly name: "memory";
+    constructor(options?: MemoryStorageOptions);
+    /** Start the GC interval. Idempotent. */
+    start(): void;
+    stop(): Promise<void>;
+    create<T = SessionData>(opts: CreateSessionOptions<T>): Promise<SessionRecord<T>>;
+    read(id: string): Promise<SessionRecord | null>;
+    readMany(query?: SessionQuery): Promise<SessionRecord[]>;
+    update<T = SessionData>(id: string, opts: UpdateSessionOptions<T>): Promise<SessionRecord<T> | null>;
+    destroy(id: string): Promise<boolean>;
+    destroyMany(query: SessionQuery): Promise<number>;
+    touch(id: string): Promise<SessionRecord | null>;
+    gc(): Promise<number>;
+    clear(): Promise<void>;
+}
+//# sourceMappingURL=memory.d.ts.map

package/dist/session/backends/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/session/backends/memory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACX,cAAc,EACd,aAAa,EACb,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,oBAAoB;IACpC,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAQD,qBAAa,oBAAqB,YAAW,cAAc;;IAC1D,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAU;gBAMtB,OAAO,GAAE,oBAAyB;IAK9C,yCAAyC;IACzC,KAAK,IAAI,IAAI;IAOP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IASrB,MAAM,CAAC,CAAC,GAAG,WAAW,EAC3B,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAsBtB,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAkB/C,QAAQ,CAAC,KAAK,GAAE,YAAiB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IA2B5D,MAAM,CAAC,CAAC,GAAG,WAAW,EAC3B,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAqB7B,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrC,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAUjD,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAIhD,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC;IAYrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAsB5B"}

package/dist/session/backends/redis.d.ts

@@ -0,0 +1,53 @@
+/**
+ * `RedisSessionStorage` — session storage backed by `nexusjs/redis`.
+ *
+ * Works on **Bun** (`Bun.redis`), **Node** (`ioredis`), and any
+ * other runtime via the runtime-aware `nexusjs/redis` package. For
+ * Cloudflare Workers / Pages KV storage, use
+ * `CloudflareKVSessionStorage` instead — same API, different
+ * adapter.
+ *
+ * Each session is stored as a JSON-serialized `SessionRecord`
+ * under `<prefix><id>`. Expiry is enforced via the KV store's
+ * own TTL (Redis `EX`, KV `expirationTtl`).
+ *
+ *   import { SessionService } from 'nexusjs/session';
+ *   import { RedisSessionStorage, createRedisClient } from 'nexusjs/redis';
+ *
+ *   const redis = createRedisClient({ url: 'redis://localhost:6379' });
+ *   const storage = new RedisSessionStorage(redis, { keyPrefix: 'sess:' });
+ *
+ * Per-user lookups: a per-user index key
+ * `<prefix>user:<crc32(userId)>` stores the list of session ids
+ * for that user. The index is updated on `create` / `update`
+ * and pruned by `gc()`.
+ */
+import type { RedisClient } from "../../redis/types.js";
+import type { SessionStorage, SessionRecord, SessionData, CreateSessionOptions, UpdateSessionOptions, SessionQuery } from "../types.js";
+export declare class RedisSessionStorage implements SessionStorage {
+    #private;
+    readonly name: "redis" | "cloudflare-kv";
+    constructor(client: RedisClient, options?: {
+        keyPrefix?: string;
+    });
+    create<T = SessionData>(opts: CreateSessionOptions<T>): Promise<SessionRecord<T>>;
+    read(id: string): Promise<SessionRecord | null>;
+    readMany(query?: SessionQuery): Promise<SessionRecord[]>;
+    update<T = SessionData>(id: string, opts: UpdateSessionOptions<T>): Promise<SessionRecord<T> | null>;
+    destroy(id: string): Promise<boolean>;
+    destroyMany(query: SessionQuery): Promise<number>;
+    touch(id: string): Promise<SessionRecord | null>;
+    gc(): Promise<number>;
+    clear(): Promise<void>;
+    stop(): Promise<void>;
+}
+/**
+ * `CloudflareKVSessionStorage` — Cloudflare Workers KV backed
+ * session storage. Same interface as `RedisSessionStorage`; the
+ * underlying `RedisClient` is a `CloudflareKVAdapter` from
+ * `nexusjs/redis`.
+ */
+export declare class CloudflareKVSessionStorage extends RedisSessionStorage {
+    readonly name: "cloudflare-kv";
+}
+//# sourceMappingURL=redis.d.ts.map

package/dist/session/backends/redis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.d.ts","sourceRoot":"","sources":["../../../src/session/backends/redis.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EACX,cAAc,EACd,aAAa,EACb,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,MAAM,aAAa,CAAC;AAIrB,qBAAa,mBAAoB,YAAW,cAAc;;IACzD,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,eAAe,CAAoB;gBAIhD,MAAM,EAAE,WAAW,EAAE,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;IAyD/D,MAAM,CAAC,CAAC,GAAG,WAAW,EAC3B,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IA6BtB,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAgB/C,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAsCxD,MAAM,CAAC,CAAC,GAAG,WAAW,EAC3B,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IA+B7B,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQrC,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAMjD,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAgBhD,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC;IAgCrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAetB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAgC3B;AAED;;;;;GAKG;AACH,qBAAa,0BAA2B,SAAQ,mBAAmB;IAClE,SAAkB,IAAI,EAAE,eAAe,CAA4B;CACnE"}

package/dist/session/decorators/current-session.d.ts

@@ -0,0 +1,56 @@
+/**
+ * `@Session()` — controller parameter decorator that injects the
+ * current session record (or null when unauthenticated).
+ *
+ * Mirrors `@CurrentUser()` from `nexusjs/auth` (shorter name follows
+ * the same convention as `@Req()` / `@Body()` / `@Ctx()` — the most
+ * common request decorator).
+ *
+ * Usage:
+ *   @Get('/profile')
+ *   me(@Session() session: SessionRecord) {
+ *     return session;
+ *   }
+ *
+ *   @Get('/admin')
+ *   admin(@Session({ required: true, role: 'admin' }) s: SessionRecord) {
+ *     return this.adminService.runFor(s.userId!);
+ *   }
+ */
+import "reflect-metadata";
+import type { SessionRecord, SessionData } from "../types.js";
+export interface SessionOptions<T = SessionData> {
+    /**
+     * Throw a synthetic 401 when no session is present. Default: false.
+     * When true, the framework returns 401 without invoking the handler.
+     */
+    required?: boolean;
+    /**
+     * Throw 403 when `assert(session)` returns false.
+     */
+    assert?: (session: SessionRecord<T>) => boolean | Promise<boolean>;
+    /**
+     * Patch the session's data on each access (e.g. mark "last seen at").
+     * Off by default to keep read paths side-effect-free.
+     */
+    touch?: boolean;
+}
+/**
+ * Inject the current session record (or null if unauthenticated).
+ */
+export declare function Session<T = SessionData>(options?: SessionOptions<T>): ParameterDecorator;
+/**
+ * Convenience: throw 401 when no session is present.
+ */
+export declare class UnauthenticatedError extends Error {
+    readonly status = 401;
+    constructor(message?: string);
+}
+/**
+ * Convenience: throw 403 when a session-level check fails.
+ */
+export declare class SessionForbiddenError extends Error {
+    readonly status = 403;
+    constructor(message?: string);
+}
+//# sourceMappingURL=current-session.d.ts.map

package/dist/session/decorators/current-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-session.d.ts","sourceRoot":"","sources":["../../../src/session/decorators/current-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE9D,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,WAAW;IAC9C;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnE;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,CAAC,GAAG,WAAW,EACtC,OAAO,GAAE,cAAc,CAAC,CAAC,CAAM,GAC7B,kBAAkB,CAEpB;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,MAAM,OAAO;gBACV,OAAO,SAA6B;CAIhD;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,MAAM,OAAO;gBACV,OAAO,SAA8B;CAIjD"}

package/dist/session/index.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Public API for the NexusJS session module.
+ *
+ * Two backends out of the box:
+ *   - cookie   — HMAC-signed, stateless, edge-friendly
+ *   - memory   — in-process, for tests and single-instance dev
+ *   - redis    — multi-pod via `nexusjs/redis` (Bun/Node/Workers KV)
+ *   - cloudflare-kv — Workers KV (via `nexusjs/redis` cloudflare adapter)
+ *
+ * Quick start:
+ *
+ *   // src/app/app.module.ts
+ *   import { Module } from 'nexusjs';
+ *   import { SessionModule } from 'nexusjs/session';
+ *
+ *   @Module({
+ *     imports: [
+ *       SessionModule.forRoot({
+ *         backend: 'cookie',
+ *         cookie: { secret: process.env.SESSION_SECRET! },
+ *       }),
+ *     ],
+ *   })
+ *   export class AppModule {}
+ *
+ *   // any controller
+ *   import { SessionService, Session } from 'nexusjs/session';
+ *
+ *   class CartController {
+ *     @Post('/')
+ *     add(@Session() session, @Inject(SessionService.TOKEN) svc: SessionService) {
+ *       return svc.update(session.id, { dataPatch: { cart: [...] } });
+ *     }
+ *   }
+ */
+export * from "./types.js";
+export { MemorySessionStorage, CookieSessionStorage, RedisSessionStorage, CloudflareKVSessionStorage, encodeSessionCookie, decodeSessionCookie, type MemoryStorageOptions, type RedisSessionStorageConfig, } from "./backends/index.js";
+export { SessionService } from "./session.service.js";
+export { SessionModule } from "./session.module.js";
+export { Session, UnauthenticatedError, SessionForbiddenError, type SessionOptions, } from "./decorators/current-session.js";
+export { sessionMiddleware, type SessionMiddlewareOptions } from "./session-middleware.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EACN,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACN,OAAO,EACP,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,cAAc,GACnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAC"}