@lastshotlabs/bunshot 0.0.25 → 0.0.28

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (725) hide show
  1. package/.oclif.manifest.json +39 -0
  2. package/README.md +8282 -2147
  3. package/dist/cli/commands/init.js +690 -0
  4. package/dist/cli/index.js +6 -0
  5. package/dist/cli.js +4 -4
  6. package/dist/packages/bunshot-admin/src/index.d.ts +15 -0
  7. package/dist/packages/bunshot-admin/src/index.js +11 -0
  8. package/dist/packages/bunshot-admin/src/lib/resourceTypes.d.ts +8 -0
  9. package/dist/packages/bunshot-admin/src/lib/resourceTypes.js +33 -0
  10. package/dist/packages/bunshot-admin/src/lib/typedRoute.d.ts +14 -0
  11. package/dist/packages/bunshot-admin/src/lib/typedRoute.js +17 -0
  12. package/dist/packages/bunshot-admin/src/plugin.d.ts +4 -0
  13. package/dist/packages/bunshot-admin/src/plugin.js +46 -0
  14. package/dist/packages/bunshot-admin/src/providers/auth0Access.d.ts +6 -0
  15. package/dist/packages/bunshot-admin/src/providers/auth0Access.js +32 -0
  16. package/dist/packages/bunshot-admin/src/routes/admin.d.ts +10 -0
  17. package/dist/packages/bunshot-admin/src/routes/admin.js +923 -0
  18. package/dist/packages/bunshot-admin/src/routes/mail.d.ts +6 -0
  19. package/dist/packages/bunshot-admin/src/routes/mail.js +114 -0
  20. package/dist/packages/bunshot-admin/src/routes/permissions.d.ts +8 -0
  21. package/dist/packages/bunshot-admin/src/routes/permissions.js +315 -0
  22. package/dist/packages/bunshot-admin/src/types/config.d.ts +16 -0
  23. package/dist/packages/bunshot-admin/src/types/config.js +37 -0
  24. package/dist/packages/bunshot-admin/src/types/env.d.ts +14 -0
  25. package/dist/packages/bunshot-admin/src/types/provider.d.ts +1 -0
  26. package/dist/packages/bunshot-admin/src/types/provider.js +4 -0
  27. package/dist/packages/bunshot-auth/src/adapters/memoryAuth.d.ts +66 -0
  28. package/dist/packages/bunshot-auth/src/adapters/memoryAuth.js +1063 -0
  29. package/dist/packages/bunshot-auth/src/adapters/mongoAuth.d.ts +2 -0
  30. package/dist/packages/bunshot-auth/src/adapters/mongoAuth.js +536 -0
  31. package/dist/packages/bunshot-auth/src/adapters/sqliteAuth.d.ts +88 -0
  32. package/dist/packages/bunshot-auth/src/adapters/sqliteAuth.js +1366 -0
  33. package/dist/packages/bunshot-auth/src/admin/bunshotAccess.d.ts +2 -0
  34. package/dist/packages/bunshot-auth/src/admin/bunshotAccess.js +23 -0
  35. package/dist/packages/bunshot-auth/src/admin/bunshotUsers.d.ts +5 -0
  36. package/dist/packages/bunshot-auth/src/admin/bunshotUsers.js +131 -0
  37. package/dist/packages/bunshot-auth/src/bootstrap.d.ts +38 -0
  38. package/dist/packages/bunshot-auth/src/bootstrap.js +384 -0
  39. package/dist/packages/bunshot-auth/src/config/appConfig.d.ts +3 -0
  40. package/dist/packages/bunshot-auth/src/config/appConfig.js +4 -0
  41. package/dist/packages/bunshot-auth/src/config/authConfig.d.ts +478 -0
  42. package/dist/packages/bunshot-auth/src/config/authConfig.js +46 -0
  43. package/dist/packages/bunshot-auth/src/config/configLock.d.ts +2 -0
  44. package/dist/packages/bunshot-auth/src/config/configLock.js +10 -0
  45. package/dist/packages/bunshot-auth/src/index.d.ts +25 -0
  46. package/dist/packages/bunshot-auth/src/index.js +23 -0
  47. package/dist/packages/bunshot-auth/src/infra/mongo.d.ts +15 -0
  48. package/dist/packages/bunshot-auth/src/infra/mongo.js +44 -0
  49. package/dist/packages/bunshot-auth/src/infra/queue.d.ts +14 -0
  50. package/dist/packages/bunshot-auth/src/infra/queue.js +27 -0
  51. package/dist/packages/bunshot-auth/src/infra/redis.d.ts +5 -0
  52. package/dist/packages/bunshot-auth/src/infra/redis.js +15 -0
  53. package/dist/packages/bunshot-auth/src/infra/signing.d.ts +7 -0
  54. package/dist/packages/bunshot-auth/src/infra/signing.js +8 -0
  55. package/dist/packages/bunshot-auth/src/lib/accountLockout.d.ts +34 -0
  56. package/dist/packages/bunshot-auth/src/lib/accountLockout.js +244 -0
  57. package/dist/packages/bunshot-auth/src/lib/adapterTiers.d.ts +1 -0
  58. package/dist/packages/bunshot-auth/src/lib/adapterTiers.js +1 -0
  59. package/dist/packages/bunshot-auth/src/lib/authAdapter.d.ts +1 -0
  60. package/dist/packages/bunshot-auth/src/lib/authAdapter.js +1 -0
  61. package/dist/packages/bunshot-auth/src/lib/authContext.d.ts +15 -0
  62. package/dist/packages/bunshot-auth/src/lib/authContext.js +1 -0
  63. package/dist/packages/bunshot-auth/src/lib/authEventBus.d.ts +4 -0
  64. package/dist/packages/bunshot-auth/src/lib/authEventBus.js +15 -0
  65. package/dist/packages/bunshot-auth/src/lib/authRateLimit.d.ts +28 -0
  66. package/dist/packages/bunshot-auth/src/lib/authRateLimit.js +205 -0
  67. package/dist/packages/bunshot-auth/src/lib/breachedPassword.d.ts +19 -0
  68. package/dist/packages/bunshot-auth/src/lib/breachedPassword.js +61 -0
  69. package/dist/packages/bunshot-auth/src/lib/cache.d.ts +12 -0
  70. package/dist/packages/bunshot-auth/src/lib/cache.js +120 -0
  71. package/dist/packages/bunshot-auth/src/lib/clientIp.d.ts +4 -0
  72. package/dist/{lib → packages/bunshot-auth/src/lib}/clientIp.js +14 -7
  73. package/dist/packages/bunshot-auth/src/lib/cookieOptions.d.ts +27 -0
  74. package/dist/packages/bunshot-auth/src/lib/cookieOptions.js +33 -0
  75. package/dist/packages/bunshot-auth/src/lib/credentialStuffing.d.ts +40 -0
  76. package/dist/packages/bunshot-auth/src/lib/credentialStuffing.js +221 -0
  77. package/dist/packages/bunshot-auth/src/lib/deletionCancelToken.d.ts +19 -0
  78. package/dist/packages/bunshot-auth/src/lib/deletionCancelToken.js +148 -0
  79. package/dist/packages/bunshot-auth/src/lib/emailTemplates.d.ts +23 -0
  80. package/dist/packages/bunshot-auth/src/lib/emailTemplates.js +265 -0
  81. package/dist/packages/bunshot-auth/src/lib/emailVerification.d.ts +30 -0
  82. package/dist/packages/bunshot-auth/src/lib/emailVerification.js +200 -0
  83. package/dist/packages/bunshot-auth/src/lib/env.d.ts +1 -0
  84. package/dist/packages/bunshot-auth/src/lib/env.js +3 -0
  85. package/dist/packages/bunshot-auth/src/lib/fingerprint.js +36 -0
  86. package/dist/{lib → packages/bunshot-auth/src/lib}/groups.d.ts +15 -16
  87. package/dist/{lib → packages/bunshot-auth/src/lib}/groups.js +22 -34
  88. package/dist/packages/bunshot-auth/src/lib/jwks.d.ts +28 -0
  89. package/dist/packages/bunshot-auth/src/lib/jwks.js +79 -0
  90. package/dist/packages/bunshot-auth/src/lib/jwt.d.ts +12 -0
  91. package/dist/packages/bunshot-auth/src/lib/jwt.js +86 -0
  92. package/dist/packages/bunshot-auth/src/lib/logger.d.ts +3 -0
  93. package/dist/packages/bunshot-auth/src/lib/logger.js +13 -0
  94. package/dist/packages/bunshot-auth/src/lib/m2m.d.ts +30 -0
  95. package/dist/packages/bunshot-auth/src/lib/m2m.js +44 -0
  96. package/dist/packages/bunshot-auth/src/lib/magicLink.d.ts +13 -0
  97. package/dist/packages/bunshot-auth/src/lib/magicLink.js +145 -0
  98. package/dist/packages/bunshot-auth/src/lib/mfaChallenge.d.ts +60 -0
  99. package/dist/packages/bunshot-auth/src/lib/mfaChallenge.js +419 -0
  100. package/dist/packages/bunshot-auth/src/lib/oauth.d.ts +82 -0
  101. package/dist/packages/bunshot-auth/src/lib/oauth.js +177 -0
  102. package/dist/packages/bunshot-auth/src/lib/oauthCode.d.ts +19 -0
  103. package/dist/packages/bunshot-auth/src/lib/oauthCode.js +182 -0
  104. package/dist/packages/bunshot-auth/src/lib/oauthReauth.d.ts +19 -0
  105. package/dist/packages/bunshot-auth/src/lib/oauthReauth.js +255 -0
  106. package/dist/packages/bunshot-auth/src/lib/organization.d.ts +66 -0
  107. package/dist/packages/bunshot-auth/src/lib/organization.js +225 -0
  108. package/dist/packages/bunshot-auth/src/lib/passwordHistory.d.ts +12 -0
  109. package/dist/packages/bunshot-auth/src/lib/passwordHistory.js +31 -0
  110. package/dist/packages/bunshot-auth/src/lib/resetPassword.d.ts +20 -0
  111. package/dist/packages/bunshot-auth/src/lib/resetPassword.js +148 -0
  112. package/dist/packages/bunshot-auth/src/lib/roles.d.ts +9 -0
  113. package/dist/packages/bunshot-auth/src/lib/roles.js +93 -0
  114. package/dist/packages/bunshot-auth/src/lib/saml.d.ts +29 -0
  115. package/dist/packages/bunshot-auth/src/lib/saml.js +73 -0
  116. package/dist/packages/bunshot-auth/src/lib/samlRequestId.d.ts +13 -0
  117. package/dist/packages/bunshot-auth/src/lib/samlRequestId.js +129 -0
  118. package/dist/packages/bunshot-auth/src/lib/scim.d.ts +44 -0
  119. package/dist/packages/bunshot-auth/src/lib/scim.js +56 -0
  120. package/dist/packages/bunshot-auth/src/lib/securityEventWiring.d.ts +22 -0
  121. package/dist/packages/bunshot-auth/src/lib/securityEventWiring.js +65 -0
  122. package/dist/packages/bunshot-auth/src/lib/session.d.ts +45 -0
  123. package/dist/packages/bunshot-auth/src/lib/session.js +1211 -0
  124. package/dist/packages/bunshot-auth/src/lib/storeInfra.d.ts +26 -0
  125. package/dist/packages/bunshot-auth/src/lib/storeInfra.js +18 -0
  126. package/dist/packages/bunshot-auth/src/lib/suspension.d.ts +14 -0
  127. package/dist/packages/bunshot-auth/src/lib/suspension.js +20 -0
  128. package/dist/packages/bunshot-auth/src/lib/validateAdapter.d.ts +16 -0
  129. package/dist/packages/bunshot-auth/src/lib/validateAdapter.js +161 -0
  130. package/dist/packages/bunshot-auth/src/middleware/bearerAuth.d.ts +13 -0
  131. package/dist/packages/bunshot-auth/src/middleware/bearerAuth.js +58 -0
  132. package/dist/{middleware → packages/bunshot-auth/src/middleware}/csrf.d.ts +5 -4
  133. package/dist/packages/bunshot-auth/src/middleware/csrf.js +138 -0
  134. package/dist/packages/bunshot-auth/src/middleware/identify.d.ts +4 -0
  135. package/dist/packages/bunshot-auth/src/middleware/identify.js +124 -0
  136. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireMfaSetup.d.ts +2 -2
  137. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireMfaSetup.js +10 -7
  138. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireRole.d.ts +2 -2
  139. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireRole.js +20 -16
  140. package/dist/packages/bunshot-auth/src/middleware/requireScope.d.ts +10 -0
  141. package/dist/packages/bunshot-auth/src/middleware/requireScope.js +25 -0
  142. package/dist/packages/bunshot-auth/src/middleware/requireStepUp.d.ts +18 -0
  143. package/dist/packages/bunshot-auth/src/middleware/requireStepUp.js +30 -0
  144. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireVerifiedEmail.d.ts +2 -2
  145. package/dist/{middleware → packages/bunshot-auth/src/middleware}/requireVerifiedEmail.js +7 -6
  146. package/dist/packages/bunshot-auth/src/middleware/scimAuth.d.ts +8 -0
  147. package/dist/packages/bunshot-auth/src/middleware/scimAuth.js +29 -0
  148. package/dist/packages/bunshot-auth/src/middleware/userAuth.d.ts +3 -0
  149. package/dist/packages/bunshot-auth/src/middleware/userAuth.js +6 -0
  150. package/dist/{models → packages/bunshot-auth/src/models}/AuthUser.d.ts +19 -8
  151. package/dist/packages/bunshot-auth/src/models/AuthUser.js +53 -0
  152. package/dist/packages/bunshot-auth/src/models/Group.d.ts +19 -0
  153. package/dist/packages/bunshot-auth/src/models/Group.js +22 -0
  154. package/dist/{models → packages/bunshot-auth/src/models}/GroupMembership.d.ts +6 -8
  155. package/dist/packages/bunshot-auth/src/models/GroupMembership.js +19 -0
  156. package/dist/packages/bunshot-auth/src/models/M2MClient.d.ts +18 -0
  157. package/dist/packages/bunshot-auth/src/models/M2MClient.js +18 -0
  158. package/dist/packages/bunshot-auth/src/models/TenantRole.d.ts +13 -0
  159. package/dist/packages/bunshot-auth/src/models/TenantRole.js +17 -0
  160. package/dist/packages/bunshot-auth/src/plugin.d.ts +4 -0
  161. package/dist/packages/bunshot-auth/src/plugin.js +274 -0
  162. package/dist/packages/bunshot-auth/src/routes/auth.d.ts +15 -0
  163. package/dist/packages/bunshot-auth/src/routes/auth.js +1624 -0
  164. package/dist/packages/bunshot-auth/src/routes/groups.d.ts +4 -0
  165. package/dist/packages/bunshot-auth/src/routes/groups.js +481 -0
  166. package/dist/packages/bunshot-auth/src/routes/m2m.d.ts +2 -0
  167. package/dist/packages/bunshot-auth/src/routes/m2m.js +145 -0
  168. package/dist/packages/bunshot-auth/src/routes/mfa.d.ts +6 -0
  169. package/dist/packages/bunshot-auth/src/routes/mfa.js +991 -0
  170. package/dist/packages/bunshot-auth/src/routes/oauth.d.ts +3 -0
  171. package/dist/packages/bunshot-auth/src/routes/oauth.js +1727 -0
  172. package/dist/packages/bunshot-auth/src/routes/oidc.d.ts +2 -0
  173. package/dist/packages/bunshot-auth/src/routes/oidc.js +84 -0
  174. package/dist/packages/bunshot-auth/src/routes/organizations.d.ts +3 -0
  175. package/dist/packages/bunshot-auth/src/routes/organizations.js +741 -0
  176. package/dist/packages/bunshot-auth/src/routes/passkey.d.ts +2 -0
  177. package/dist/packages/bunshot-auth/src/routes/passkey.js +199 -0
  178. package/dist/packages/bunshot-auth/src/routes/saml.d.ts +2 -0
  179. package/dist/packages/bunshot-auth/src/routes/saml.js +226 -0
  180. package/dist/packages/bunshot-auth/src/routes/scim.d.ts +3 -0
  181. package/dist/packages/bunshot-auth/src/routes/scim.js +588 -0
  182. package/dist/packages/bunshot-auth/src/runtime.d.ts +52 -0
  183. package/dist/packages/bunshot-auth/src/runtime.js +11 -0
  184. package/dist/{schemas → packages/bunshot-auth/src/schemas}/auth.d.ts +4 -5
  185. package/dist/packages/bunshot-auth/src/schemas/auth.js +24 -0
  186. package/dist/packages/bunshot-auth/src/schemas/error.d.ts +10 -0
  187. package/dist/packages/bunshot-auth/src/schemas/error.js +10 -0
  188. package/dist/packages/bunshot-auth/src/schemas/success.d.ts +10 -0
  189. package/dist/packages/bunshot-auth/src/schemas/success.js +10 -0
  190. package/dist/packages/bunshot-auth/src/services/auth.d.ts +39 -0
  191. package/dist/packages/bunshot-auth/src/services/auth.js +378 -0
  192. package/dist/{services → packages/bunshot-auth/src/services}/mfa.d.ts +41 -17
  193. package/dist/{services → packages/bunshot-auth/src/services}/mfa.js +259 -183
  194. package/dist/packages/bunshot-auth/src/testing.d.ts +31 -0
  195. package/dist/packages/bunshot-auth/src/testing.js +23 -0
  196. package/dist/packages/bunshot-auth/src/types/adapter.d.ts +1 -0
  197. package/dist/packages/bunshot-auth/src/types/adapter.js +1 -0
  198. package/dist/packages/bunshot-auth/src/types/config.d.ts +152 -0
  199. package/dist/packages/bunshot-auth/src/types/config.js +179 -0
  200. package/dist/{routes → packages/bunshot-auth/src/types}/groups.d.ts +2 -3
  201. package/dist/packages/bunshot-auth/src/types/groups.js +1 -0
  202. package/dist/packages/bunshot-auth/src/types/oauthCode.d.ts +6 -0
  203. package/dist/packages/bunshot-auth/src/types/oauthCode.js +1 -0
  204. package/dist/packages/bunshot-auth/src/types/oauthReauth.d.ts +13 -0
  205. package/dist/packages/bunshot-auth/src/types/oauthReauth.js +1 -0
  206. package/dist/packages/bunshot-auth/src/types/redis.d.ts +1 -0
  207. package/dist/packages/bunshot-auth/src/types/redis.js +1 -0
  208. package/dist/packages/bunshot-auth/src/types/saml.d.ts +10 -0
  209. package/dist/packages/bunshot-auth/src/types/saml.js +1 -0
  210. package/dist/packages/bunshot-auth/src/types/session.d.ts +18 -0
  211. package/dist/packages/bunshot-auth/src/types/session.js +1 -0
  212. package/dist/packages/bunshot-auth/src/types/store.d.ts +1 -0
  213. package/dist/packages/bunshot-auth/src/types/store.js +1 -0
  214. package/dist/packages/bunshot-core/src/adminProvider.d.ts +95 -0
  215. package/dist/packages/bunshot-core/src/adminProvider.js +1 -0
  216. package/dist/packages/bunshot-core/src/auditLog.d.ts +34 -0
  217. package/dist/packages/bunshot-core/src/auditLog.js +1 -0
  218. package/dist/packages/bunshot-core/src/auth-adapter.d.ts +227 -0
  219. package/dist/packages/bunshot-core/src/auth-adapter.js +4 -0
  220. package/dist/packages/bunshot-core/src/authVariables.d.ts +14 -0
  221. package/dist/packages/bunshot-core/src/authVariables.js +4 -0
  222. package/dist/packages/bunshot-core/src/cache.d.ts +12 -0
  223. package/dist/packages/bunshot-core/src/cache.js +21 -0
  224. package/dist/packages/bunshot-core/src/captcha.d.ts +16 -0
  225. package/dist/packages/bunshot-core/src/captcha.js +1 -0
  226. package/dist/packages/bunshot-core/src/clearRegistry.d.ts +6 -0
  227. package/dist/packages/bunshot-core/src/clearRegistry.js +17 -0
  228. package/dist/packages/bunshot-core/src/clientIp.d.ts +3 -0
  229. package/dist/packages/bunshot-core/src/clientIp.js +45 -0
  230. package/dist/packages/bunshot-core/src/configLock.d.ts +4 -0
  231. package/dist/packages/bunshot-core/src/configLock.js +7 -0
  232. package/dist/packages/bunshot-core/src/configValidation.d.ts +22 -0
  233. package/dist/packages/bunshot-core/src/configValidation.js +39 -0
  234. package/dist/packages/bunshot-core/src/constants.js +10 -0
  235. package/dist/packages/bunshot-core/src/context/bunshotContext.d.ts +232 -0
  236. package/dist/packages/bunshot-core/src/context/bunshotContext.js +1 -0
  237. package/dist/packages/bunshot-core/src/context/contextAccess.d.ts +3 -0
  238. package/dist/packages/bunshot-core/src/context/contextAccess.js +16 -0
  239. package/dist/packages/bunshot-core/src/context/contextStore.d.ts +16 -0
  240. package/dist/packages/bunshot-core/src/context/contextStore.js +31 -0
  241. package/dist/packages/bunshot-core/src/context/frameworkConfig.d.ts +38 -0
  242. package/dist/packages/bunshot-core/src/context/frameworkConfig.js +1 -0
  243. package/dist/packages/bunshot-core/src/context/index.d.ts +4 -0
  244. package/dist/packages/bunshot-core/src/context/index.js +2 -0
  245. package/dist/packages/bunshot-core/src/context.d.ts +40 -0
  246. package/dist/packages/bunshot-core/src/context.js +35 -0
  247. package/dist/packages/bunshot-core/src/coreContracts.d.ts +47 -0
  248. package/dist/packages/bunshot-core/src/coreContracts.js +1 -0
  249. package/dist/packages/bunshot-core/src/coreRegistrar.d.ts +6 -0
  250. package/dist/packages/bunshot-core/src/coreRegistrar.js +42 -0
  251. package/dist/{lib → packages/bunshot-core/src}/createRoute.d.ts +4 -30
  252. package/dist/{lib → packages/bunshot-core/src}/createRoute.js +39 -88
  253. package/dist/packages/bunshot-core/src/cronRegistry.d.ts +11 -0
  254. package/dist/packages/bunshot-core/src/cronRegistry.js +1 -0
  255. package/dist/packages/bunshot-core/src/crypto.d.ts +43 -0
  256. package/dist/packages/bunshot-core/src/crypto.js +74 -0
  257. package/dist/packages/bunshot-core/src/csrf.d.ts +8 -0
  258. package/dist/packages/bunshot-core/src/csrf.js +1 -0
  259. package/dist/packages/bunshot-core/src/defaults/defaultFingerprint.d.ts +7 -0
  260. package/dist/packages/bunshot-core/src/defaults/defaultFingerprint.js +19 -0
  261. package/dist/packages/bunshot-core/src/defaults/memoryCacheAdapter.d.ts +6 -0
  262. package/dist/packages/bunshot-core/src/defaults/memoryCacheAdapter.js +40 -0
  263. package/dist/packages/bunshot-core/src/defaults/memoryRateLimit.d.ts +6 -0
  264. package/dist/packages/bunshot-core/src/defaults/memoryRateLimit.js +24 -0
  265. package/dist/packages/bunshot-core/src/emailTemplates.d.ts +5 -0
  266. package/dist/packages/bunshot-core/src/emailTemplates.js +10 -0
  267. package/dist/packages/bunshot-core/src/errors.d.ts +13 -0
  268. package/dist/packages/bunshot-core/src/errors.js +22 -0
  269. package/dist/packages/bunshot-core/src/eventBus.d.ts +270 -0
  270. package/dist/packages/bunshot-core/src/eventBus.js +143 -0
  271. package/dist/packages/bunshot-core/src/idempotency.d.ts +18 -0
  272. package/dist/packages/bunshot-core/src/idempotency.js +1 -0
  273. package/dist/packages/bunshot-core/src/index.d.ts +60 -0
  274. package/dist/packages/bunshot-core/src/index.js +34 -0
  275. package/dist/packages/bunshot-core/src/mail.d.ts +14 -0
  276. package/dist/packages/bunshot-core/src/mail.js +8 -0
  277. package/dist/packages/bunshot-core/src/memoryEviction.d.ts +24 -0
  278. package/dist/packages/bunshot-core/src/memoryEviction.js +52 -0
  279. package/dist/packages/bunshot-core/src/pagination.d.ts +45 -0
  280. package/dist/packages/bunshot-core/src/pagination.js +61 -0
  281. package/dist/packages/bunshot-core/src/permissions.d.ts +64 -0
  282. package/dist/packages/bunshot-core/src/permissions.js +27 -0
  283. package/dist/packages/bunshot-core/src/plugin.d.ts +44 -0
  284. package/dist/packages/bunshot-core/src/plugin.js +1 -0
  285. package/dist/packages/bunshot-core/src/rateLimit.d.ts +5 -0
  286. package/dist/packages/bunshot-core/src/rateLimit.js +18 -0
  287. package/dist/packages/bunshot-core/src/redis.d.ts +21 -0
  288. package/dist/packages/bunshot-core/src/redis.js +1 -0
  289. package/dist/packages/bunshot-core/src/routeAuth.d.ts +5 -0
  290. package/dist/packages/bunshot-core/src/routeAuth.js +11 -0
  291. package/dist/packages/bunshot-core/src/routeOverrides.d.ts +24 -0
  292. package/dist/packages/bunshot-core/src/routeOverrides.js +25 -0
  293. package/dist/packages/bunshot-core/src/routerAdapter.d.ts +6 -0
  294. package/dist/packages/bunshot-core/src/routerAdapter.js +56 -0
  295. package/dist/packages/bunshot-core/src/secrets.d.ts +48 -0
  296. package/dist/packages/bunshot-core/src/secrets.js +8 -0
  297. package/dist/packages/bunshot-core/src/signing.d.ts +41 -0
  298. package/dist/packages/bunshot-core/src/signing.js +1 -0
  299. package/dist/packages/bunshot-core/src/sse.d.ts +36 -0
  300. package/dist/packages/bunshot-core/src/sse.js +1 -0
  301. package/dist/packages/bunshot-core/src/storageAdapter.js +1 -0
  302. package/dist/packages/bunshot-core/src/storeInfra.d.ts +44 -0
  303. package/dist/packages/bunshot-core/src/storeInfra.js +18 -0
  304. package/dist/packages/bunshot-core/src/storeType.d.ts +7 -0
  305. package/dist/packages/bunshot-core/src/storeType.js +1 -0
  306. package/dist/packages/bunshot-core/src/testing.d.ts +1 -0
  307. package/dist/packages/bunshot-core/src/testing.js +1 -0
  308. package/dist/packages/bunshot-core/src/uploadRegistry.d.ts +23 -0
  309. package/dist/packages/bunshot-core/src/uploadRegistry.js +4 -0
  310. package/dist/packages/bunshot-core/src/userResolver.d.ts +5 -0
  311. package/dist/packages/bunshot-core/src/userResolver.js +14 -0
  312. package/dist/packages/bunshot-core/src/wsMessages.d.ts +42 -0
  313. package/dist/packages/bunshot-core/src/wsMessages.js +4 -0
  314. package/dist/packages/bunshot-permissions/src/adapters/memory.d.ts +7 -0
  315. package/dist/packages/bunshot-permissions/src/adapters/memory.js +73 -0
  316. package/dist/packages/bunshot-permissions/src/index.d.ts +10 -0
  317. package/dist/packages/bunshot-permissions/src/index.js +5 -0
  318. package/dist/packages/bunshot-permissions/src/lib/bootstrap.d.ts +7 -0
  319. package/dist/packages/bunshot-permissions/src/lib/bootstrap.js +12 -0
  320. package/dist/packages/bunshot-permissions/src/lib/evaluator.d.ts +10 -0
  321. package/dist/packages/bunshot-permissions/src/lib/evaluator.js +165 -0
  322. package/dist/packages/bunshot-permissions/src/lib/registry.d.ts +2 -0
  323. package/dist/packages/bunshot-permissions/src/lib/registry.js +31 -0
  324. package/dist/packages/bunshot-permissions/src/lib/validation.d.ts +1 -0
  325. package/dist/packages/bunshot-permissions/src/lib/validation.js +1 -0
  326. package/dist/packages/bunshot-permissions/src/types/adapter.d.ts +1 -0
  327. package/dist/packages/bunshot-permissions/src/types/adapter.js +1 -0
  328. package/dist/packages/bunshot-permissions/src/types/evaluator.d.ts +1 -0
  329. package/dist/packages/bunshot-permissions/src/types/evaluator.js +1 -0
  330. package/dist/packages/bunshot-permissions/src/types/models.d.ts +1 -0
  331. package/dist/packages/bunshot-permissions/src/types/models.js +1 -0
  332. package/dist/packages/bunshot-permissions/src/types/registry.d.ts +1 -0
  333. package/dist/packages/bunshot-permissions/src/types/registry.js +1 -0
  334. package/dist/packages/bunshot-postgres/src/adapter.d.ts +6 -0
  335. package/dist/packages/bunshot-postgres/src/adapter.js +794 -0
  336. package/dist/packages/bunshot-postgres/src/connection.d.ts +15 -0
  337. package/dist/packages/bunshot-postgres/src/connection.js +16 -0
  338. package/dist/packages/bunshot-postgres/src/index.d.ts +4 -0
  339. package/dist/packages/bunshot-postgres/src/index.js +2 -0
  340. package/dist/packages/bunshot-postgres/src/schema.d.ts +997 -0
  341. package/dist/packages/bunshot-postgres/src/schema.js +105 -0
  342. package/dist/src/app.d.ts +230 -0
  343. package/dist/src/app.js +182 -0
  344. package/dist/src/cli/commands/init.d.ts +10 -0
  345. package/dist/src/cli/commands/init.js +709 -0
  346. package/dist/src/cli/index.d.ts +1 -0
  347. package/dist/src/cli/index.js +3 -0
  348. package/dist/src/entrypoints/mongo.d.ts +6 -0
  349. package/dist/src/entrypoints/mongo.js +4 -0
  350. package/dist/src/entrypoints/queue.d.ts +2 -0
  351. package/dist/src/entrypoints/queue.js +1 -0
  352. package/dist/src/entrypoints/redis.d.ts +1 -0
  353. package/dist/src/entrypoints/redis.js +1 -0
  354. package/dist/{adapters → src/framework/adapters}/localStorage.d.ts +1 -1
  355. package/dist/{adapters → src/framework/adapters}/localStorage.js +23 -8
  356. package/dist/src/framework/adapters/memoryStorage.d.ts +2 -0
  357. package/dist/src/framework/adapters/memoryStorage.js +45 -0
  358. package/dist/{adapters → src/framework/adapters}/s3Storage.d.ts +1 -1
  359. package/dist/{adapters → src/framework/adapters}/s3Storage.js +12 -12
  360. package/dist/src/framework/admin/bunshotAccess.d.ts +2 -0
  361. package/dist/src/framework/admin/bunshotAccess.js +23 -0
  362. package/dist/src/framework/admin/bunshotUsers.d.ts +2 -0
  363. package/dist/src/framework/admin/bunshotUsers.js +103 -0
  364. package/dist/src/framework/admin/index.d.ts +7 -0
  365. package/dist/src/framework/admin/index.js +21 -0
  366. package/dist/src/framework/boundaryAdapters/cacheFactories.d.ts +13 -0
  367. package/dist/src/framework/boundaryAdapters/cacheFactories.js +86 -0
  368. package/dist/src/framework/boundaryAdapters/index.d.ts +2 -0
  369. package/dist/src/framework/boundaryAdapters/index.js +1 -0
  370. package/dist/src/framework/boundaryAdapters.d.ts +17 -0
  371. package/dist/src/framework/boundaryAdapters.js +62 -0
  372. package/dist/src/framework/buildContext.d.ts +33 -0
  373. package/dist/src/framework/buildContext.js +119 -0
  374. package/dist/src/framework/config/schema.d.ts +447 -0
  375. package/dist/src/framework/config/schema.js +528 -0
  376. package/dist/src/framework/createInfrastructure.d.ts +76 -0
  377. package/dist/src/framework/createInfrastructure.js +221 -0
  378. package/dist/src/framework/lib/auditLog.d.ts +23 -0
  379. package/dist/src/framework/lib/auditLog.js +416 -0
  380. package/dist/src/framework/lib/captcha.d.ts +11 -0
  381. package/dist/src/framework/lib/captcha.js +40 -0
  382. package/dist/{lib → src/framework/lib}/createDtoMapper.js +4 -4
  383. package/dist/src/framework/lib/createRoute.d.ts +1 -0
  384. package/dist/src/framework/lib/createRoute.js +2 -0
  385. package/dist/{lib → src/framework/lib}/idempotency.d.ts +2 -6
  386. package/dist/src/framework/lib/idempotency.js +74 -0
  387. package/dist/src/framework/lib/logger.d.ts +3 -0
  388. package/dist/src/framework/lib/logger.js +14 -0
  389. package/dist/src/framework/lib/metrics.d.ts +34 -0
  390. package/dist/{lib → src/framework/lib}/metrics.js +49 -57
  391. package/dist/src/framework/lib/pagination.d.ts +42 -0
  392. package/dist/src/framework/lib/pagination.js +51 -0
  393. package/dist/src/framework/lib/redisTransport.d.ts +38 -0
  394. package/dist/src/framework/lib/redisTransport.js +107 -0
  395. package/dist/src/framework/lib/resolveUserId.d.ts +2 -0
  396. package/dist/src/framework/lib/resolveUserId.js +5 -0
  397. package/dist/src/framework/lib/sseCollision.d.ts +6 -0
  398. package/dist/src/framework/lib/sseCollision.js +26 -0
  399. package/dist/src/framework/lib/storageAdapter.d.ts +1 -0
  400. package/dist/src/framework/lib/storageAdapter.js +1 -0
  401. package/dist/{lib → src/framework/lib}/stripUnreferencedSchemas.js +4 -4
  402. package/dist/src/framework/lib/tenant.d.ts +21 -0
  403. package/dist/src/framework/lib/tenant.js +70 -0
  404. package/dist/{lib → src/framework/lib}/upload.d.ts +14 -9
  405. package/dist/src/framework/lib/upload.js +132 -0
  406. package/dist/src/framework/lib/uploadRegistry.d.ts +23 -0
  407. package/dist/src/framework/lib/uploadRegistry.js +34 -0
  408. package/dist/{lib → src/framework/lib}/validate.d.ts +1 -1
  409. package/dist/{lib → src/framework/lib}/validate.js +2 -2
  410. package/dist/src/framework/lib/ws.d.ts +19 -0
  411. package/dist/src/framework/lib/ws.js +130 -0
  412. package/dist/src/framework/lib/wsHeartbeat.d.ts +12 -0
  413. package/dist/src/framework/lib/wsHeartbeat.js +53 -0
  414. package/dist/src/framework/lib/wsMessages.d.ts +25 -0
  415. package/dist/src/framework/lib/wsMessages.js +45 -0
  416. package/dist/src/framework/lib/wsNamespace.d.ts +17 -0
  417. package/dist/src/framework/lib/wsNamespace.js +19 -0
  418. package/dist/src/framework/lib/wsPresence.d.ts +17 -0
  419. package/dist/src/framework/lib/wsPresence.js +84 -0
  420. package/dist/src/framework/lib/wsTransport.d.ts +38 -0
  421. package/dist/src/framework/lib/wsTransport.js +9 -0
  422. package/dist/{lib → src/framework/lib}/zodToMongoose.d.ts +1 -1
  423. package/dist/{lib → src/framework/lib}/zodToMongoose.js +11 -11
  424. package/dist/{middleware → src/framework/middleware}/auditLog.d.ts +4 -3
  425. package/dist/src/framework/middleware/auditLog.js +42 -0
  426. package/dist/{middleware → src/framework/middleware}/botProtection.d.ts +2 -2
  427. package/dist/{middleware → src/framework/middleware}/botProtection.js +8 -9
  428. package/dist/src/framework/middleware/cacheResponse.d.ts +35 -0
  429. package/dist/src/framework/middleware/cacheResponse.js +126 -0
  430. package/dist/src/framework/middleware/captcha.d.ts +9 -0
  431. package/dist/src/framework/middleware/captcha.js +37 -0
  432. package/dist/{middleware → src/framework/middleware}/errorHandler.d.ts +1 -1
  433. package/dist/src/framework/middleware/errorHandler.js +16 -0
  434. package/dist/src/framework/middleware/index.js +1 -0
  435. package/dist/{middleware → src/framework/middleware}/logger.d.ts +1 -1
  436. package/dist/src/framework/middleware/metrics.d.ts +12 -0
  437. package/dist/src/framework/middleware/metrics.js +26 -0
  438. package/dist/{middleware → src/framework/middleware}/rateLimit.d.ts +2 -2
  439. package/dist/src/framework/middleware/rateLimit.js +22 -0
  440. package/dist/src/framework/middleware/requestId.d.ts +3 -0
  441. package/dist/{middleware → src/framework/middleware}/requestId.js +2 -2
  442. package/dist/{middleware → src/framework/middleware}/requestLogger.d.ts +3 -3
  443. package/dist/{middleware → src/framework/middleware}/requestLogger.js +17 -12
  444. package/dist/{middleware → src/framework/middleware}/requestSigning.d.ts +2 -2
  445. package/dist/{middleware → src/framework/middleware}/requestSigning.js +18 -19
  446. package/dist/src/framework/middleware/tenant.d.ts +14 -0
  447. package/dist/{middleware → src/framework/middleware}/tenant.js +31 -27
  448. package/dist/src/framework/middleware/upload.d.ts +5 -0
  449. package/dist/{middleware → src/framework/middleware}/upload.js +4 -4
  450. package/dist/{middleware → src/framework/middleware}/webhookAuth.d.ts +3 -3
  451. package/dist/{middleware → src/framework/middleware}/webhookAuth.js +11 -11
  452. package/dist/src/framework/models/AuditLog.d.ts +21 -0
  453. package/dist/src/framework/models/AuditLog.js +31 -0
  454. package/dist/src/framework/mountMiddleware.d.ts +91 -0
  455. package/dist/src/framework/mountMiddleware.js +128 -0
  456. package/dist/src/framework/mountOptionalEndpoints.d.ts +103 -0
  457. package/dist/src/framework/mountOptionalEndpoints.js +47 -0
  458. package/dist/src/framework/mountRoutes.d.ts +21 -0
  459. package/dist/src/framework/mountRoutes.js +144 -0
  460. package/dist/src/framework/persistence/cronRegistry.d.ts +28 -0
  461. package/dist/src/framework/persistence/cronRegistry.js +139 -0
  462. package/dist/src/framework/persistence/idempotency.d.ts +26 -0
  463. package/dist/src/framework/persistence/idempotency.js +178 -0
  464. package/dist/src/framework/persistence/index.d.ts +6 -0
  465. package/dist/src/framework/persistence/index.js +8 -0
  466. package/dist/src/framework/persistence/storeInfra.d.ts +9 -0
  467. package/dist/src/framework/persistence/storeInfra.js +1 -0
  468. package/dist/src/framework/persistence/uploadRegistry.d.ts +35 -0
  469. package/dist/src/framework/persistence/uploadRegistry.js +235 -0
  470. package/dist/src/framework/persistence/wsMessages.d.ts +22 -0
  471. package/dist/src/framework/persistence/wsMessages.js +296 -0
  472. package/dist/src/framework/preloadSchemas.d.ts +24 -0
  473. package/dist/src/framework/preloadSchemas.js +42 -0
  474. package/dist/src/framework/registerBoundaryAdapters.d.ts +23 -0
  475. package/dist/src/framework/registerBoundaryAdapters.js +46 -0
  476. package/dist/src/framework/routes/admin.d.ts +9 -0
  477. package/dist/src/framework/routes/admin.js +361 -0
  478. package/dist/src/framework/routes/health.d.ts +1 -0
  479. package/dist/src/framework/routes/health.js +21 -0
  480. package/dist/src/framework/routes/home.d.ts +1 -0
  481. package/dist/src/framework/routes/home.js +18 -0
  482. package/dist/src/framework/routes/jobs.d.ts +3 -0
  483. package/dist/src/framework/routes/jobs.js +315 -0
  484. package/dist/src/framework/routes/metrics.d.ts +10 -0
  485. package/dist/src/framework/routes/metrics.js +57 -0
  486. package/dist/src/framework/routes/uploads.d.ts +14 -0
  487. package/dist/src/framework/routes/uploads.js +262 -0
  488. package/dist/src/framework/runPluginLifecycle.d.ts +27 -0
  489. package/dist/src/framework/runPluginLifecycle.js +121 -0
  490. package/dist/src/framework/secrets/frameworkSecretSchema.d.ts +58 -0
  491. package/dist/src/framework/secrets/frameworkSecretSchema.js +20 -0
  492. package/dist/src/framework/secrets/index.d.ts +9 -0
  493. package/dist/src/framework/secrets/index.js +7 -0
  494. package/dist/src/framework/secrets/providers/envProvider.d.ts +15 -0
  495. package/dist/src/framework/secrets/providers/envProvider.js +18 -0
  496. package/dist/src/framework/secrets/providers/fileProvider.d.ts +8 -0
  497. package/dist/src/framework/secrets/providers/fileProvider.js +82 -0
  498. package/dist/src/framework/secrets/providers/ssmProvider.d.ts +20 -0
  499. package/dist/src/framework/secrets/providers/ssmProvider.js +127 -0
  500. package/dist/src/framework/secrets/resolveSecretBundle.d.ts +53 -0
  501. package/dist/src/framework/secrets/resolveSecretBundle.js +84 -0
  502. package/dist/src/framework/secrets/resolveSecrets.d.ts +18 -0
  503. package/dist/src/framework/secrets/resolveSecrets.js +34 -0
  504. package/dist/src/framework/sse/index.d.ts +21 -0
  505. package/dist/src/framework/sse/index.js +109 -0
  506. package/dist/src/framework/ws/index.d.ts +11 -0
  507. package/dist/src/framework/ws/index.js +8 -0
  508. package/dist/src/index.d.ts +87 -0
  509. package/dist/src/index.js +58 -0
  510. package/dist/src/lib/appConfig.d.ts +7 -0
  511. package/dist/src/lib/appConfig.js +27 -0
  512. package/dist/src/lib/appMeta.d.ts +7 -0
  513. package/dist/src/lib/appMeta.js +3 -0
  514. package/dist/src/lib/authConfig.d.ts +532 -0
  515. package/dist/src/lib/authConfig.js +179 -0
  516. package/dist/{lib → src/lib}/context.d.ts +6 -7
  517. package/dist/{lib → src/lib}/context.js +5 -5
  518. package/dist/src/lib/logger.d.ts +1 -0
  519. package/dist/src/lib/logger.js +1 -0
  520. package/dist/src/lib/mongo.d.ts +58 -0
  521. package/dist/src/lib/mongo.js +96 -0
  522. package/dist/src/lib/queue.d.ts +72 -0
  523. package/dist/src/lib/queue.js +152 -0
  524. package/dist/src/lib/redis.d.ts +28 -0
  525. package/dist/src/lib/redis.js +72 -0
  526. package/dist/{lib → src/lib}/signing.d.ts +2 -2
  527. package/dist/src/lib/signing.js +210 -0
  528. package/dist/src/lib/signingConfig.d.ts +40 -0
  529. package/dist/src/lib/signingConfig.js +28 -0
  530. package/dist/src/server.d.ts +146 -0
  531. package/dist/src/server.js +469 -0
  532. package/dist/src/shared/lib/HttpError.d.ts +1 -0
  533. package/dist/src/shared/lib/HttpError.js +2 -0
  534. package/dist/src/shared/lib/constants.d.ts +10 -0
  535. package/dist/src/shared/lib/crypto.d.ts +43 -0
  536. package/dist/src/shared/lib/crypto.js +74 -0
  537. package/dist/src/shared/lib/signing.d.ts +52 -0
  538. package/dist/{lib → src/shared/lib}/signing.js +40 -10
  539. package/dist/src/testing.d.ts +34 -0
  540. package/dist/src/testing.js +93 -0
  541. package/package.json +62 -25
  542. package/dist/adapters/memoryAuth.d.ts +0 -46
  543. package/dist/adapters/memoryAuth.js +0 -634
  544. package/dist/adapters/memoryStorage.d.ts +0 -3
  545. package/dist/adapters/memoryStorage.js +0 -44
  546. package/dist/adapters/mongoAuth.d.ts +0 -2
  547. package/dist/adapters/mongoAuth.js +0 -307
  548. package/dist/adapters/sqliteAuth.d.ts +0 -49
  549. package/dist/adapters/sqliteAuth.js +0 -707
  550. package/dist/app.d.ts +0 -456
  551. package/dist/app.js +0 -548
  552. package/dist/entrypoints/mongo.d.ts +0 -5
  553. package/dist/entrypoints/mongo.js +0 -4
  554. package/dist/entrypoints/queue.d.ts +0 -2
  555. package/dist/entrypoints/queue.js +0 -1
  556. package/dist/entrypoints/redis.d.ts +0 -1
  557. package/dist/entrypoints/redis.js +0 -1
  558. package/dist/index.d.ts +0 -98
  559. package/dist/index.js +0 -77
  560. package/dist/lib/HttpError.d.ts +0 -9
  561. package/dist/lib/HttpError.js +0 -14
  562. package/dist/lib/appConfig.d.ts +0 -162
  563. package/dist/lib/appConfig.js +0 -83
  564. package/dist/lib/auditLog.d.ts +0 -52
  565. package/dist/lib/auditLog.js +0 -201
  566. package/dist/lib/authAdapter.d.ts +0 -176
  567. package/dist/lib/authAdapter.js +0 -7
  568. package/dist/lib/authRateLimit.d.ts +0 -13
  569. package/dist/lib/authRateLimit.js +0 -81
  570. package/dist/lib/clientIp.d.ts +0 -14
  571. package/dist/lib/crypto.d.ts +0 -11
  572. package/dist/lib/crypto.js +0 -22
  573. package/dist/lib/deletionCancelToken.d.ts +0 -12
  574. package/dist/lib/deletionCancelToken.js +0 -88
  575. package/dist/lib/emailVerification.d.ts +0 -13
  576. package/dist/lib/emailVerification.js +0 -86
  577. package/dist/lib/fingerprint.js +0 -36
  578. package/dist/lib/idempotency.js +0 -182
  579. package/dist/lib/jwt.d.ts +0 -2
  580. package/dist/lib/jwt.js +0 -24
  581. package/dist/lib/logger.d.ts +0 -1
  582. package/dist/lib/logger.js +0 -7
  583. package/dist/lib/metrics.d.ts +0 -14
  584. package/dist/lib/mfaChallenge.d.ts +0 -42
  585. package/dist/lib/mfaChallenge.js +0 -293
  586. package/dist/lib/mongo.d.ts +0 -39
  587. package/dist/lib/mongo.js +0 -124
  588. package/dist/lib/oauth.d.ts +0 -40
  589. package/dist/lib/oauth.js +0 -101
  590. package/dist/lib/oauthCode.d.ts +0 -15
  591. package/dist/lib/oauthCode.js +0 -90
  592. package/dist/lib/pagination.d.ts +0 -119
  593. package/dist/lib/pagination.js +0 -166
  594. package/dist/lib/queue.d.ts +0 -37
  595. package/dist/lib/queue.js +0 -117
  596. package/dist/lib/redis.d.ts +0 -9
  597. package/dist/lib/redis.js +0 -61
  598. package/dist/lib/resetPassword.d.ts +0 -12
  599. package/dist/lib/resetPassword.js +0 -91
  600. package/dist/lib/roles.d.ts +0 -7
  601. package/dist/lib/roles.js +0 -49
  602. package/dist/lib/session.d.ts +0 -39
  603. package/dist/lib/session.js +0 -535
  604. package/dist/lib/tenant.d.ts +0 -15
  605. package/dist/lib/tenant.js +0 -65
  606. package/dist/lib/upload.js +0 -87
  607. package/dist/lib/ws.d.ts +0 -22
  608. package/dist/lib/ws.js +0 -89
  609. package/dist/lib/wsHeartbeat.d.ts +0 -12
  610. package/dist/lib/wsHeartbeat.js +0 -57
  611. package/dist/lib/wsMessages.d.ts +0 -40
  612. package/dist/lib/wsMessages.js +0 -330
  613. package/dist/lib/wsPresence.d.ts +0 -25
  614. package/dist/lib/wsPresence.js +0 -99
  615. package/dist/middleware/auditLog.js +0 -39
  616. package/dist/middleware/bearerAuth.d.ts +0 -2
  617. package/dist/middleware/bearerAuth.js +0 -11
  618. package/dist/middleware/cacheResponse.d.ts +0 -15
  619. package/dist/middleware/cacheResponse.js +0 -178
  620. package/dist/middleware/csrf.js +0 -125
  621. package/dist/middleware/errorHandler.js +0 -13
  622. package/dist/middleware/identify.d.ts +0 -3
  623. package/dist/middleware/identify.js +0 -95
  624. package/dist/middleware/index.js +0 -1
  625. package/dist/middleware/metrics.d.ts +0 -9
  626. package/dist/middleware/metrics.js +0 -26
  627. package/dist/middleware/rateLimit.js +0 -22
  628. package/dist/middleware/requestId.d.ts +0 -3
  629. package/dist/middleware/tenant.d.ts +0 -5
  630. package/dist/middleware/upload.d.ts +0 -5
  631. package/dist/middleware/userAuth.d.ts +0 -3
  632. package/dist/middleware/userAuth.js +0 -6
  633. package/dist/models/AuditLog.d.ts +0 -30
  634. package/dist/models/AuditLog.js +0 -39
  635. package/dist/models/AuthUser.js +0 -48
  636. package/dist/models/Group.d.ts +0 -21
  637. package/dist/models/Group.js +0 -28
  638. package/dist/models/GroupMembership.js +0 -25
  639. package/dist/models/TenantRole.d.ts +0 -15
  640. package/dist/models/TenantRole.js +0 -23
  641. package/dist/routes/auth.d.ts +0 -11
  642. package/dist/routes/auth.js +0 -605
  643. package/dist/routes/groups.js +0 -346
  644. package/dist/routes/health.d.ts +0 -1
  645. package/dist/routes/health.js +0 -22
  646. package/dist/routes/home.d.ts +0 -1
  647. package/dist/routes/home.js +0 -16
  648. package/dist/routes/jobs.d.ts +0 -2
  649. package/dist/routes/jobs.js +0 -272
  650. package/dist/routes/metrics.d.ts +0 -7
  651. package/dist/routes/metrics.js +0 -52
  652. package/dist/routes/mfa.d.ts +0 -5
  653. package/dist/routes/mfa.js +0 -620
  654. package/dist/routes/oauth.d.ts +0 -2
  655. package/dist/routes/oauth.js +0 -514
  656. package/dist/routes/uploads.d.ts +0 -2
  657. package/dist/routes/uploads.js +0 -135
  658. package/dist/schemas/auth.js +0 -30
  659. package/dist/server.d.ts +0 -57
  660. package/dist/server.js +0 -112
  661. package/dist/services/auth.d.ts +0 -27
  662. package/dist/services/auth.js +0 -159
  663. package/dist/ws/index.d.ts +0 -10
  664. package/dist/ws/index.js +0 -38
  665. package/docs/sections/adding-middleware/full.md +0 -35
  666. package/docs/sections/adding-models/full.md +0 -125
  667. package/docs/sections/adding-models/overview.md +0 -13
  668. package/docs/sections/adding-routes/full.md +0 -182
  669. package/docs/sections/adding-routes/overview.md +0 -23
  670. package/docs/sections/auth-flow/full.md +0 -779
  671. package/docs/sections/auth-flow/overview.md +0 -10
  672. package/docs/sections/auth-security-examples/full.md +0 -365
  673. package/docs/sections/authentication/full.md +0 -130
  674. package/docs/sections/authentication/overview.md +0 -5
  675. package/docs/sections/cli/full.md +0 -42
  676. package/docs/sections/configuration/full.md +0 -172
  677. package/docs/sections/configuration/overview.md +0 -18
  678. package/docs/sections/configuration-example/full.md +0 -117
  679. package/docs/sections/configuration-example/overview.md +0 -30
  680. package/docs/sections/documentation/full.md +0 -171
  681. package/docs/sections/environment-variables/full.md +0 -55
  682. package/docs/sections/exports/full.md +0 -123
  683. package/docs/sections/extending-context/full.md +0 -59
  684. package/docs/sections/header.md +0 -3
  685. package/docs/sections/installation/full.md +0 -6
  686. package/docs/sections/jobs/full.md +0 -140
  687. package/docs/sections/jobs/overview.md +0 -15
  688. package/docs/sections/logging/full.md +0 -83
  689. package/docs/sections/metrics/full.md +0 -127
  690. package/docs/sections/mongodb-connections/full.md +0 -45
  691. package/docs/sections/mongodb-connections/overview.md +0 -7
  692. package/docs/sections/multi-tenancy/full.md +0 -66
  693. package/docs/sections/multi-tenancy/overview.md +0 -15
  694. package/docs/sections/oauth/full.md +0 -189
  695. package/docs/sections/oauth/overview.md +0 -16
  696. package/docs/sections/package-development/full.md +0 -7
  697. package/docs/sections/pagination/full.md +0 -93
  698. package/docs/sections/peer-dependencies/full.md +0 -47
  699. package/docs/sections/quick-start/full.md +0 -43
  700. package/docs/sections/response-caching/full.md +0 -117
  701. package/docs/sections/response-caching/overview.md +0 -13
  702. package/docs/sections/roles/full.md +0 -225
  703. package/docs/sections/roles/overview.md +0 -14
  704. package/docs/sections/running-without-redis/full.md +0 -16
  705. package/docs/sections/running-without-redis-or-mongodb/full.md +0 -60
  706. package/docs/sections/signing/full.md +0 -203
  707. package/docs/sections/stack/full.md +0 -10
  708. package/docs/sections/uploads/full.md +0 -199
  709. package/docs/sections/versioning/full.md +0 -85
  710. package/docs/sections/webhook-auth/full.md +0 -100
  711. package/docs/sections/websocket/full.md +0 -184
  712. package/docs/sections/websocket/overview.md +0 -5
  713. package/docs/sections/websocket-rooms/full.md +0 -102
  714. package/docs/sections/websocket-rooms/overview.md +0 -5
  715. /package/dist/{lib/storageAdapter.js → packages/bunshot-admin/src/types/env.js} +0 -0
  716. /package/dist/{lib → packages/bunshot-auth/src/lib}/fingerprint.d.ts +0 -0
  717. /package/dist/{lib → packages/bunshot-core/src}/constants.d.ts +0 -0
  718. /package/dist/{lib → packages/bunshot-core/src}/storageAdapter.d.ts +0 -0
  719. /package/dist/{lib → src/framework/lib}/createDtoMapper.d.ts +0 -0
  720. /package/dist/{lib → src/framework/lib}/stripUnreferencedSchemas.d.ts +0 -0
  721. /package/dist/{middleware → src/framework/middleware}/cors.d.ts +0 -0
  722. /package/dist/{middleware → src/framework/middleware}/cors.js +0 -0
  723. /package/dist/{middleware → src/framework/middleware}/index.d.ts +0 -0
  724. /package/dist/{middleware → src/framework/middleware}/logger.js +0 -0
  725. /package/dist/{lib → src/shared/lib}/constants.js +0 -0
@@ -1,634 +0,0 @@
1
- import { HttpError } from "../lib/HttpError";
2
- import { getPersistSessionMetadata, getIncludeInactiveSessions } from "../lib/appConfig";
3
- import { clearMemoryRateLimitStore } from "../lib/authRateLimit";
4
- import { clearMemoryMfaChallenges } from "../lib/mfaChallenge";
5
- import { clearAuditLogMemoryStore } from "../lib/auditLog";
6
- import { clearPresenceStore } from "../lib/wsPresence";
7
- import { clearWsMessageMemoryStore } from "../lib/wsMessages";
8
- import { clearHeartbeatState } from "../lib/wsHeartbeat";
9
- import { clearMemoryUploadStore } from "./memoryStorage";
10
- const _users = new Map();
11
- const _byEmail = new Map();
12
- const _sessions = new Map(); // sessionId → session
13
- const _userSessionIds = new Map(); // userId → Set<sessionId>
14
- const _refreshTokenIndex = new Map(); // refreshToken → sessionId
15
- const _oauthStates = new Map();
16
- const _cache = new Map();
17
- const _verificationTokens = new Map();
18
- const _resetTokens = new Map();
19
- const _cancelTokens = new Map();
20
- const _oauthCodes = new Map();
21
- const _tenantRoles = new Map(); // "userId:tenantId" → roles
22
- const _groups = new Map(); // groupId → GroupRecord
23
- const _groupMemberships = new Map();
24
- /** Reset all in-memory state. Useful for test isolation. */
25
- export const clearMemoryStore = () => {
26
- _users.clear();
27
- _byEmail.clear();
28
- _sessions.clear();
29
- _userSessionIds.clear();
30
- _refreshTokenIndex.clear();
31
- _tenantRoles.clear();
32
- _groups.clear();
33
- _groupMemberships.clear();
34
- _oauthStates.clear();
35
- _oauthCodes.clear();
36
- _cache.clear();
37
- _verificationTokens.clear();
38
- _resetTokens.clear();
39
- _cancelTokens.clear();
40
- clearMemoryRateLimitStore();
41
- clearMemoryMfaChallenges();
42
- clearAuditLogMemoryStore();
43
- clearPresenceStore();
44
- clearWsMessageMemoryStore();
45
- clearHeartbeatState();
46
- clearMemoryUploadStore();
47
- };
48
- // ---------------------------------------------------------------------------
49
- // Auth adapter
50
- // ---------------------------------------------------------------------------
51
- export const memoryAuthAdapter = {
52
- async findByEmail(email) {
53
- const id = _byEmail.get(email.toLowerCase());
54
- if (!id)
55
- return null;
56
- const user = _users.get(id);
57
- if (!user || !user.passwordHash)
58
- return null;
59
- return { id: user.id, passwordHash: user.passwordHash };
60
- },
61
- async create(email, passwordHash) {
62
- const normalised = email.toLowerCase();
63
- if (_byEmail.has(normalised))
64
- throw new HttpError(409, "Email already registered");
65
- const id = crypto.randomUUID();
66
- const user = { id, email: normalised, passwordHash, providerIds: [], roles: [], emailVerified: false, mfaSecret: null, mfaEnabled: false, recoveryCodes: [], mfaMethods: [], webauthnCredentials: [] };
67
- _users.set(id, user);
68
- _byEmail.set(normalised, id);
69
- return { id };
70
- },
71
- async setPassword(userId, passwordHash) {
72
- const user = _users.get(userId);
73
- if (!user)
74
- return;
75
- user.passwordHash = passwordHash;
76
- },
77
- async findOrCreateByProvider(provider, providerId, profile) {
78
- const key = `${provider}:${providerId}`;
79
- // Find by provider key
80
- for (const user of _users.values()) {
81
- if (user.providerIds.includes(key))
82
- return { id: user.id, created: false };
83
- }
84
- // Reject if email belongs to a credential account
85
- if (profile.email) {
86
- const existingId = _byEmail.get(profile.email.toLowerCase());
87
- if (existingId)
88
- throw new HttpError(409, "An account with this email already exists. Sign in with your credentials, then link Google from your account settings.");
89
- }
90
- const id = crypto.randomUUID();
91
- const email = profile.email ? profile.email.toLowerCase() : null;
92
- const user = { id, email, passwordHash: null, providerIds: [key], roles: [], emailVerified: false, mfaSecret: null, mfaEnabled: false, recoveryCodes: [], mfaMethods: [], webauthnCredentials: [] };
93
- _users.set(id, user);
94
- if (email)
95
- _byEmail.set(email, id);
96
- return { id, created: true };
97
- },
98
- async linkProvider(userId, provider, providerId) {
99
- const user = _users.get(userId);
100
- if (!user)
101
- throw new HttpError(404, "User not found");
102
- const key = `${provider}:${providerId}`;
103
- if (!user.providerIds.includes(key))
104
- user.providerIds.push(key);
105
- },
106
- async getRoles(userId) {
107
- return _users.get(userId)?.roles ?? [];
108
- },
109
- async setRoles(userId, roles) {
110
- const user = _users.get(userId);
111
- if (!user)
112
- return;
113
- user.roles = [...roles];
114
- },
115
- async addRole(userId, role) {
116
- const user = _users.get(userId);
117
- if (!user)
118
- return;
119
- if (!user.roles.includes(role))
120
- user.roles.push(role);
121
- },
122
- async removeRole(userId, role) {
123
- const user = _users.get(userId);
124
- if (!user)
125
- return;
126
- user.roles = user.roles.filter((r) => r !== role);
127
- },
128
- async getUser(userId) {
129
- const user = _users.get(userId);
130
- if (!user)
131
- return null;
132
- return {
133
- email: user.email ?? undefined,
134
- providerIds: [...user.providerIds],
135
- emailVerified: user.emailVerified,
136
- };
137
- },
138
- async unlinkProvider(userId, provider) {
139
- const user = _users.get(userId);
140
- if (!user)
141
- throw new HttpError(404, "User not found");
142
- user.providerIds = user.providerIds.filter((id) => !id.startsWith(`${provider}:`));
143
- },
144
- async findByIdentifier(value) {
145
- const id = _byEmail.get(value.toLowerCase());
146
- if (!id)
147
- return null;
148
- const user = _users.get(id);
149
- if (!user || !user.passwordHash)
150
- return null;
151
- return { id: user.id, passwordHash: user.passwordHash };
152
- },
153
- async setEmailVerified(userId, verified) {
154
- const user = _users.get(userId);
155
- if (user)
156
- user.emailVerified = verified;
157
- },
158
- async getEmailVerified(userId) {
159
- return _users.get(userId)?.emailVerified ?? false;
160
- },
161
- async deleteUser(userId) {
162
- const user = _users.get(userId);
163
- if (user?.email)
164
- _byEmail.delete(user.email);
165
- _users.delete(userId);
166
- },
167
- async hasPassword(userId) {
168
- return !!_users.get(userId)?.passwordHash;
169
- },
170
- async setMfaSecret(userId, secret) {
171
- const user = _users.get(userId);
172
- if (user)
173
- user.mfaSecret = secret;
174
- },
175
- async getMfaSecret(userId) {
176
- return _users.get(userId)?.mfaSecret ?? null;
177
- },
178
- async isMfaEnabled(userId) {
179
- return _users.get(userId)?.mfaEnabled ?? false;
180
- },
181
- async setMfaEnabled(userId, enabled) {
182
- const user = _users.get(userId);
183
- if (user)
184
- user.mfaEnabled = enabled;
185
- },
186
- async setRecoveryCodes(userId, codes) {
187
- const user = _users.get(userId);
188
- if (user)
189
- user.recoveryCodes = [...codes];
190
- },
191
- async getRecoveryCodes(userId) {
192
- return _users.get(userId)?.recoveryCodes ?? [];
193
- },
194
- async removeRecoveryCode(userId, code) {
195
- const user = _users.get(userId);
196
- if (user)
197
- user.recoveryCodes = user.recoveryCodes.filter((c) => c !== code);
198
- },
199
- async getMfaMethods(userId) {
200
- const user = _users.get(userId);
201
- if (!user)
202
- return [];
203
- // Backward compat: if mfaEnabled but no methods recorded, assume TOTP
204
- if (user.mfaMethods.length === 0 && user.mfaEnabled)
205
- return ["totp"];
206
- return [...user.mfaMethods];
207
- },
208
- async setMfaMethods(userId, methods) {
209
- const user = _users.get(userId);
210
- if (user)
211
- user.mfaMethods = [...methods];
212
- },
213
- async getWebAuthnCredentials(userId) {
214
- return [...(_users.get(userId)?.webauthnCredentials ?? [])];
215
- },
216
- async addWebAuthnCredential(userId, credential) {
217
- const user = _users.get(userId);
218
- if (user)
219
- user.webauthnCredentials.push({ ...credential });
220
- },
221
- async removeWebAuthnCredential(userId, credentialId) {
222
- const user = _users.get(userId);
223
- if (user)
224
- user.webauthnCredentials = user.webauthnCredentials.filter((c) => c.credentialId !== credentialId);
225
- },
226
- async updateWebAuthnCredentialSignCount(userId, credentialId, signCount) {
227
- const user = _users.get(userId);
228
- if (!user)
229
- return;
230
- const cred = user.webauthnCredentials.find((c) => c.credentialId === credentialId);
231
- if (cred)
232
- cred.signCount = signCount;
233
- },
234
- async findUserByWebAuthnCredentialId(credentialId) {
235
- for (const user of _users.values()) {
236
- if (user.webauthnCredentials.some((c) => c.credentialId === credentialId))
237
- return user.id;
238
- }
239
- return null;
240
- },
241
- async getTenantRoles(userId, tenantId) {
242
- return _tenantRoles.get(`${userId}:${tenantId}`) ?? [];
243
- },
244
- async setTenantRoles(userId, tenantId, roles) {
245
- _tenantRoles.set(`${userId}:${tenantId}`, [...roles]);
246
- },
247
- async addTenantRole(userId, tenantId, role) {
248
- const key = `${userId}:${tenantId}`;
249
- const current = _tenantRoles.get(key) ?? [];
250
- if (!current.includes(role)) {
251
- _tenantRoles.set(key, [...current, role]);
252
- }
253
- },
254
- async removeTenantRole(userId, tenantId, role) {
255
- const key = `${userId}:${tenantId}`;
256
- const current = _tenantRoles.get(key);
257
- if (current) {
258
- _tenantRoles.set(key, current.filter((r) => r !== role));
259
- }
260
- },
261
- // ---------------------------------------------------------------------------
262
- // Groups
263
- // ---------------------------------------------------------------------------
264
- async createGroup(group) {
265
- // Enforce name uniqueness within scope (null = app-wide, string = tenant-scoped)
266
- for (const g of _groups.values()) {
267
- if (g.name === group.name && g.tenantId === group.tenantId) {
268
- throw new HttpError(409, "A group with this name already exists in this scope");
269
- }
270
- }
271
- const id = crypto.randomUUID();
272
- const now = Date.now();
273
- _groups.set(id, { ...group, id, createdAt: now, updatedAt: now });
274
- return { id };
275
- },
276
- async deleteGroup(groupId) {
277
- _groups.delete(groupId);
278
- // Cascade: remove all memberships for this group
279
- for (const [userId, memberships] of _groupMemberships) {
280
- const filtered = memberships.filter((m) => m.groupId !== groupId);
281
- if (filtered.length !== memberships.length) {
282
- _groupMemberships.set(userId, filtered);
283
- }
284
- }
285
- },
286
- async getGroup(groupId) {
287
- return _groups.get(groupId) ?? null;
288
- },
289
- async listGroups(tenantId, opts) {
290
- const limit = Math.min(opts?.limit ?? 50, 200);
291
- const offset = opts?.offset ?? 0;
292
- const all = [..._groups.values()].filter((g) => g.tenantId === tenantId);
293
- return { items: all.slice(offset, offset + limit), total: all.length, limit, offset };
294
- },
295
- async updateGroup(groupId, updates) {
296
- const group = _groups.get(groupId);
297
- if (!group)
298
- return;
299
- const now = Date.now();
300
- _groups.set(groupId, { ...group, ...updates, id: group.id, tenantId: group.tenantId, createdAt: group.createdAt, updatedAt: now });
301
- },
302
- async addGroupMember(groupId, userId, roles = []) {
303
- const group = _groups.get(groupId);
304
- if (!group)
305
- throw new HttpError(404, "Group not found");
306
- const existing = _groupMemberships.get(userId) ?? [];
307
- if (existing.some((m) => m.groupId === groupId)) {
308
- throw new HttpError(409, "User is already a member of this group");
309
- }
310
- _groupMemberships.set(userId, [...existing, {
311
- groupId, roles: [...roles], tenantId: group.tenantId, createdAt: Date.now(),
312
- }]);
313
- },
314
- async updateGroupMembership(groupId, userId, roles) {
315
- const memberships = _groupMemberships.get(userId);
316
- if (!memberships)
317
- return;
318
- const idx = memberships.findIndex((m) => m.groupId === groupId);
319
- if (idx === -1)
320
- return;
321
- memberships[idx] = { ...memberships[idx], roles: [...roles] };
322
- },
323
- async removeGroupMember(groupId, userId) {
324
- const memberships = _groupMemberships.get(userId);
325
- if (!memberships)
326
- return;
327
- _groupMemberships.set(userId, memberships.filter((m) => m.groupId !== groupId));
328
- },
329
- async getGroupMembers(groupId, opts) {
330
- const limit = Math.min(opts?.limit ?? 50, 200);
331
- const offset = opts?.offset ?? 0;
332
- const all = [];
333
- for (const [userId, memberships] of _groupMemberships) {
334
- const m = memberships.find((m) => m.groupId === groupId);
335
- if (m)
336
- all.push({ userId, roles: [...m.roles] });
337
- }
338
- return { items: all.slice(offset, offset + limit), total: all.length, limit, offset };
339
- },
340
- async getUserGroups(userId, tenantId) {
341
- const memberships = (_groupMemberships.get(userId) ?? []).filter((m) => m.tenantId === tenantId);
342
- const result = [];
343
- for (const m of memberships) {
344
- const group = _groups.get(m.groupId);
345
- if (group)
346
- result.push({ group: { ...group }, membershipRoles: [...m.roles] });
347
- }
348
- return result;
349
- },
350
- async getEffectiveRoles(userId, tenantId) {
351
- const direct = tenantId
352
- ? (_tenantRoles.get(`${userId}:${tenantId}`) ?? [])
353
- : (_users.get(userId)?.roles ?? []);
354
- const memberships = (_groupMemberships.get(userId) ?? []).filter((m) => m.tenantId === tenantId);
355
- const groupRoles = memberships.flatMap((m) => [
356
- ...(_groups.get(m.groupId)?.roles ?? []),
357
- ...m.roles,
358
- ]);
359
- return [...new Set([...direct, ...groupRoles])];
360
- },
361
- };
362
- // ---------------------------------------------------------------------------
363
- // Session helpers (used by src/lib/session.ts)
364
- // ---------------------------------------------------------------------------
365
- const SESSION_TTL_MS = 60 * 60 * 24 * 7 * 1000; // 7 days
366
- export const memoryCreateSession = (userId, token, sessionId, metadata) => {
367
- const now = Date.now();
368
- const session = {
369
- sessionId, userId, token,
370
- createdAt: now, lastActiveAt: now, expiresAt: now + SESSION_TTL_MS,
371
- ipAddress: metadata?.ipAddress,
372
- userAgent: metadata?.userAgent,
373
- };
374
- _sessions.set(sessionId, session);
375
- if (!_userSessionIds.has(userId))
376
- _userSessionIds.set(userId, new Set());
377
- _userSessionIds.get(userId).add(sessionId);
378
- };
379
- export const memoryGetSession = (sessionId) => {
380
- const entry = _sessions.get(sessionId);
381
- if (!entry || !entry.token || entry.expiresAt <= Date.now())
382
- return null;
383
- return entry.token;
384
- };
385
- export const memoryDeleteSession = (sessionId) => {
386
- const entry = _sessions.get(sessionId);
387
- if (!entry)
388
- return;
389
- // Clean up refresh token reverse-lookup keys
390
- if (entry.refreshToken)
391
- _refreshTokenIndex.delete(entry.refreshToken);
392
- if (entry.prevRefreshToken)
393
- _refreshTokenIndex.delete(entry.prevRefreshToken);
394
- if (getPersistSessionMetadata()) {
395
- entry.token = null;
396
- entry.refreshToken = null;
397
- entry.prevRefreshToken = null;
398
- entry.prevTokenExpiresAt = null;
399
- }
400
- else {
401
- _sessions.delete(sessionId);
402
- _userSessionIds.get(entry.userId)?.delete(sessionId);
403
- }
404
- };
405
- export const memoryGetUserSessions = (userId) => {
406
- const ids = _userSessionIds.get(userId);
407
- if (!ids)
408
- return [];
409
- const now = Date.now();
410
- const includeInactive = getIncludeInactiveSessions();
411
- const persist = getPersistSessionMetadata();
412
- const results = [];
413
- for (const sessionId of ids) {
414
- const s = _sessions.get(sessionId);
415
- if (!s)
416
- continue;
417
- const isActive = !!s.token && s.expiresAt > now;
418
- if (!isActive && !persist)
419
- continue;
420
- if (!isActive && !includeInactive)
421
- continue;
422
- results.push({
423
- sessionId: s.sessionId,
424
- createdAt: s.createdAt,
425
- lastActiveAt: s.lastActiveAt,
426
- expiresAt: s.expiresAt,
427
- ipAddress: s.ipAddress,
428
- userAgent: s.userAgent,
429
- isActive,
430
- });
431
- }
432
- return results;
433
- };
434
- export const memoryGetActiveSessionCount = (userId) => {
435
- const ids = _userSessionIds.get(userId);
436
- if (!ids)
437
- return 0;
438
- const now = Date.now();
439
- let count = 0;
440
- for (const sessionId of ids) {
441
- const s = _sessions.get(sessionId);
442
- if (s && s.token && s.expiresAt > now)
443
- count++;
444
- }
445
- return count;
446
- };
447
- export const memoryEvictOldestSession = (userId) => {
448
- const ids = _userSessionIds.get(userId);
449
- if (!ids)
450
- return;
451
- const now = Date.now();
452
- let oldest = null;
453
- for (const sessionId of ids) {
454
- const s = _sessions.get(sessionId);
455
- if (!s || !s.token || s.expiresAt <= now)
456
- continue;
457
- if (!oldest || s.createdAt < oldest.createdAt)
458
- oldest = s;
459
- }
460
- if (oldest)
461
- memoryDeleteSession(oldest.sessionId);
462
- };
463
- export const memoryUpdateSessionLastActive = (sessionId) => {
464
- const entry = _sessions.get(sessionId);
465
- if (entry)
466
- entry.lastActiveAt = Date.now();
467
- };
468
- export const memoryGetSessionFingerprint = (sessionId) => {
469
- return _sessions.get(sessionId)?.fingerprint ?? null;
470
- };
471
- export const memorySetSessionFingerprint = (sessionId, fingerprint) => {
472
- const entry = _sessions.get(sessionId);
473
- if (entry)
474
- entry.fingerprint = fingerprint;
475
- };
476
- export const memorySetRefreshToken = (sessionId, refreshToken) => {
477
- const entry = _sessions.get(sessionId);
478
- if (!entry)
479
- return;
480
- entry.refreshToken = refreshToken;
481
- _refreshTokenIndex.set(refreshToken, sessionId);
482
- };
483
- import { getRotationGraceSeconds } from "../lib/appConfig";
484
- export const memoryGetSessionByRefreshToken = (refreshToken) => {
485
- const sessionId = _refreshTokenIndex.get(refreshToken);
486
- if (!sessionId)
487
- return null;
488
- const entry = _sessions.get(sessionId);
489
- if (!entry)
490
- return null;
491
- // Current refresh token matches
492
- if (entry.refreshToken === refreshToken) {
493
- return { sessionId: entry.sessionId, userId: entry.userId, newRefreshToken: refreshToken };
494
- }
495
- // Check grace window
496
- if (entry.prevRefreshToken === refreshToken && entry.prevTokenExpiresAt && entry.prevTokenExpiresAt > Date.now()) {
497
- return { sessionId: entry.sessionId, userId: entry.userId, newRefreshToken: entry.refreshToken };
498
- }
499
- // Grace window expired — theft detected, invalidate session
500
- if (entry.prevRefreshToken === refreshToken) {
501
- memoryDeleteSession(sessionId);
502
- return null;
503
- }
504
- return null;
505
- };
506
- export const memoryRotateRefreshToken = (sessionId, newRefreshToken, newAccessToken) => {
507
- const entry = _sessions.get(sessionId);
508
- if (!entry)
509
- return;
510
- const graceSeconds = getRotationGraceSeconds();
511
- // Move current to prev
512
- const oldRefreshToken = entry.refreshToken;
513
- entry.prevRefreshToken = oldRefreshToken;
514
- entry.prevTokenExpiresAt = Date.now() + graceSeconds * 1000;
515
- entry.refreshToken = newRefreshToken;
516
- entry.token = newAccessToken;
517
- // Update reverse-lookup index
518
- _refreshTokenIndex.set(newRefreshToken, sessionId);
519
- // Old token stays in index during grace window — cleaned up on next lookup or session delete
520
- };
521
- // ---------------------------------------------------------------------------
522
- // OAuth state helpers (used by src/lib/oauth.ts)
523
- // ---------------------------------------------------------------------------
524
- const OAUTH_STATE_TTL_MS = 5 * 60 * 1000; // 5 minutes
525
- export const memoryStoreOAuthState = (state, codeVerifier, linkUserId) => {
526
- _oauthStates.set(state, { codeVerifier, linkUserId, expiresAt: Date.now() + OAUTH_STATE_TTL_MS });
527
- };
528
- export const memoryConsumeOAuthState = (state) => {
529
- const entry = _oauthStates.get(state);
530
- if (!entry || entry.expiresAt <= Date.now()) {
531
- _oauthStates.delete(state);
532
- return null;
533
- }
534
- _oauthStates.delete(state);
535
- return { codeVerifier: entry.codeVerifier, linkUserId: entry.linkUserId };
536
- };
537
- // ---------------------------------------------------------------------------
538
- // Cache helpers (used by src/middleware/cacheResponse.ts)
539
- // ---------------------------------------------------------------------------
540
- export const memoryGetCache = (key) => {
541
- const entry = _cache.get(key);
542
- if (!entry)
543
- return null;
544
- if (entry.expiresAt !== undefined && entry.expiresAt <= Date.now()) {
545
- _cache.delete(key);
546
- return null;
547
- }
548
- return entry.value;
549
- };
550
- export const memorySetCache = (key, value, ttlSeconds) => {
551
- const expiresAt = ttlSeconds ? Date.now() + ttlSeconds * 1000 : undefined;
552
- _cache.set(key, { value, expiresAt });
553
- };
554
- export const memoryDelCache = (key) => {
555
- _cache.delete(key);
556
- };
557
- export const memoryDelCachePattern = (pattern) => {
558
- // Convert glob * to a regex
559
- const regex = new RegExp("^" + pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*") + "$");
560
- for (const key of _cache.keys()) {
561
- if (regex.test(key))
562
- _cache.delete(key);
563
- }
564
- };
565
- // ---------------------------------------------------------------------------
566
- // Email verification token helpers (used by src/lib/emailVerification.ts)
567
- // ---------------------------------------------------------------------------
568
- export const memoryCreateVerificationToken = (token, userId, email, ttlSeconds) => {
569
- _verificationTokens.set(token, { userId, email, expiresAt: Date.now() + ttlSeconds * 1000 });
570
- };
571
- export const memoryGetVerificationToken = (token) => {
572
- const entry = _verificationTokens.get(token);
573
- if (!entry || entry.expiresAt <= Date.now()) {
574
- _verificationTokens.delete(token);
575
- return null;
576
- }
577
- return { userId: entry.userId, email: entry.email };
578
- };
579
- export const memoryDeleteVerificationToken = (token) => {
580
- _verificationTokens.delete(token);
581
- };
582
- // ---------------------------------------------------------------------------
583
- // Password reset token helpers (used by src/lib/resetPassword.ts)
584
- // ---------------------------------------------------------------------------
585
- export const memoryCreateResetToken = (token, userId, email, ttlSeconds) => {
586
- const now = Date.now();
587
- // Opportunistically purge expired entries to prevent unbounded memory growth
588
- for (const [k, v] of _resetTokens) {
589
- if (v.expiresAt <= now)
590
- _resetTokens.delete(k);
591
- }
592
- _resetTokens.set(token, { userId, email, expiresAt: now + ttlSeconds * 1000 });
593
- };
594
- export const memoryConsumeResetToken = (hash) => {
595
- const entry = _resetTokens.get(hash);
596
- if (!entry || entry.expiresAt <= Date.now()) {
597
- _resetTokens.delete(hash);
598
- return null;
599
- }
600
- _resetTokens.delete(hash);
601
- return { userId: entry.userId, email: entry.email };
602
- };
603
- export const memoryStoreOAuthCode = (hash, payload, ttlSeconds) => {
604
- _oauthCodes.set(hash, { ...payload, expiresAt: Date.now() + ttlSeconds * 1000 });
605
- };
606
- export const memoryConsumeOAuthCode = (hash) => {
607
- const entry = _oauthCodes.get(hash);
608
- if (!entry || entry.expiresAt <= Date.now()) {
609
- _oauthCodes.delete(hash);
610
- return null;
611
- }
612
- _oauthCodes.delete(hash);
613
- return { token: entry.token, userId: entry.userId, email: entry.email, refreshToken: entry.refreshToken };
614
- };
615
- // ---------------------------------------------------------------------------
616
- // Account deletion cancel token helpers (used by src/lib/deletionCancelToken.ts)
617
- // ---------------------------------------------------------------------------
618
- export const memoryCreateDeletionCancelToken = (token, userId, jobId, ttlSeconds) => {
619
- const now = Date.now();
620
- for (const [k, v] of _cancelTokens) {
621
- if (v.expiresAt <= now)
622
- _cancelTokens.delete(k);
623
- }
624
- _cancelTokens.set(token, { userId, jobId, expiresAt: now + ttlSeconds * 1000 });
625
- };
626
- export const memoryConsumeDeletionCancelToken = (hash) => {
627
- const entry = _cancelTokens.get(hash);
628
- if (!entry || entry.expiresAt <= Date.now()) {
629
- _cancelTokens.delete(hash);
630
- return null;
631
- }
632
- _cancelTokens.delete(hash);
633
- return { userId: entry.userId, jobId: entry.jobId };
634
- };
@@ -1,3 +0,0 @@
1
- import type { StorageAdapter } from "../lib/storageAdapter";
2
- export declare const clearMemoryUploadStore: () => void;
3
- export declare const memoryStorage: () => StorageAdapter;
@@ -1,44 +0,0 @@
1
- const _store = new Map();
2
- export const clearMemoryUploadStore = () => {
3
- _store.clear();
4
- };
5
- export const memoryStorage = () => ({
6
- async put(key, data, meta) {
7
- let buf;
8
- if (data instanceof Blob) {
9
- buf = Buffer.from(await data.arrayBuffer());
10
- }
11
- else if (data instanceof ReadableStream) {
12
- const chunks = [];
13
- const reader = data.getReader();
14
- while (true) {
15
- const { done, value } = await reader.read();
16
- if (done)
17
- break;
18
- if (value)
19
- chunks.push(value);
20
- }
21
- buf = Buffer.concat(chunks);
22
- }
23
- else {
24
- buf = data;
25
- }
26
- _store.set(key, { data: buf, mimeType: meta.mimeType, size: meta.size });
27
- return {};
28
- },
29
- async get(key) {
30
- const entry = _store.get(key);
31
- if (!entry)
32
- return null;
33
- const stream = new ReadableStream({
34
- start(controller) {
35
- controller.enqueue(entry.data);
36
- controller.close();
37
- },
38
- });
39
- return { stream, mimeType: entry.mimeType, size: entry.size };
40
- },
41
- async delete(key) {
42
- _store.delete(key);
43
- },
44
- });
@@ -1,2 +0,0 @@
1
- import type { AuthAdapter } from "../lib/authAdapter";
2
- export declare const mongoAuthAdapter: AuthAdapter;