@puzzle-ui/session 0.0.0-stage → 0.5.1

package/dist/session.storage.d.ts

@@ -0,0 +1,8 @@
+import { SessionDataRecord, SessionStorageRecord } from "./types/session.types.js";
+import "./types/session-lock.types.js";
+import { StorageAdapter, StorageCollection } from "@puzzle-ui/storage";
+export declare const SESSION_COLLECTION = "sessions";
+export declare const SESSION_DATA_COLLECTION = "session_data";
+export declare const sessionCollection: StorageCollection<SessionStorageRecord>;
+export declare const sessionDataCollection: StorageCollection<SessionDataRecord>;
+export declare const initializeSessionStorage: (storage: StorageAdapter) => Promise<void>;

package/dist/session.storage.js

@@ -0,0 +1,58 @@
+// src/session.storage.ts
+const SESSION_COLLECTION = "sessions";
+const SESSION_DATA_COLLECTION = "session_data";
+const SESSION_USER_LOCK_COLLECTION = "session_user_locks";
+const sessionCollection = {
+	name: SESSION_COLLECTION,
+	indexes: [
+		{
+			name: "token_hash_unique",
+			fields: ["tokenHash"],
+			unique: true
+		},
+		{
+			name: "user_id",
+			fields: ["userId"]
+		},
+		{
+			name: "expires_at",
+			fields: ["expiresAt"]
+		},
+		{
+			name: "revoked_at",
+			fields: ["revokedAt"]
+		}
+	]
+};
+const sessionDataCollection = {
+	name: SESSION_DATA_COLLECTION,
+	indexes: [{
+		name: "owner_namespace_key",
+		fields: [
+			"ownerId",
+			"namespace",
+			"key"
+		],
+		unique: true
+	}, {
+		name: "expires_at",
+		fields: ["expiresAt"]
+	}]
+};
+const sessionUserLockCollection = {
+	name: SESSION_USER_LOCK_COLLECTION,
+	indexes: [{
+		name: "user_id_unique",
+		fields: ["userId"],
+		unique: true
+	}]
+};
+const initializeSessionStorage = async (storage) => {
+	if (!storage.capabilities.uniqueConstraints || !storage.capabilities.conditionalWrites || !storage.capabilities.atomicBatch) throw new Error("Session storage requires unique constraints, conditional writes and atomic batches.");
+	await storage.registerCollection(sessionCollection);
+	await storage.registerCollection(sessionDataCollection);
+	await storage.registerCollection(sessionUserLockCollection);
+};
+export { SESSION_COLLECTION, SESSION_DATA_COLLECTION, SESSION_USER_LOCK_COLLECTION, initializeSessionStorage, sessionCollection, sessionDataCollection, sessionUserLockCollection };
+
+//# sourceMappingURL=session.storage.js.map

package/dist/session.storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.storage.js","names":[],"sources":["../src/session.storage.ts"],"sourcesContent":["import type { StorageAdapter, StorageCollection } from \"@puzzle-ui/storage\";\n\nimport type {\n  SessionDataRecord,\n  SessionStorageRecord,\n} from \"./types/session.types\";\n\nimport type { SessionUserLockRecord } from \"./types/session-lock.types\";\n\nexport const SESSION_COLLECTION = \"sessions\";\nexport const SESSION_DATA_COLLECTION = \"session_data\";\nexport const SESSION_USER_LOCK_COLLECTION = \"session_user_locks\";\n\nexport const sessionCollection: StorageCollection<SessionStorageRecord> = {\n  name: SESSION_COLLECTION,\n  indexes: [\n    {\n      name: \"token_hash_unique\",\n      fields: [\"tokenHash\"],\n      unique: true,\n    },\n    {\n      name: \"user_id\",\n      fields: [\"userId\"],\n    },\n    {\n      name: \"expires_at\",\n      fields: [\"expiresAt\"],\n    },\n    {\n      name: \"revoked_at\",\n      fields: [\"revokedAt\"],\n    },\n  ],\n};\n\nexport const sessionDataCollection: StorageCollection<SessionDataRecord> = {\n  name: SESSION_DATA_COLLECTION,\n  indexes: [\n    {\n      name: \"owner_namespace_key\",\n      fields: [\"ownerId\", \"namespace\", \"key\"],\n      unique: true,\n    },\n    {\n      name: \"expires_at\",\n      fields: [\"expiresAt\"],\n    },\n  ],\n};\n\nexport const sessionUserLockCollection: StorageCollection<SessionUserLockRecord> =\n  {\n    name: SESSION_USER_LOCK_COLLECTION,\n    indexes: [\n      {\n        name: \"user_id_unique\",\n        fields: [\"userId\"],\n        unique: true,\n      },\n    ],\n  };\n\nexport const initializeSessionStorage = async (\n  storage: StorageAdapter,\n): Promise<void> => {\n  if (\n    !storage.capabilities.uniqueConstraints ||\n    !storage.capabilities.conditionalWrites ||\n    !storage.capabilities.atomicBatch\n  ) {\n    throw new Error(\n      \"Session storage requires unique constraints, conditional writes and atomic batches.\",\n    );\n  }\n\n  await storage.registerCollection(sessionCollection);\n  await storage.registerCollection(sessionDataCollection);\n  await storage.registerCollection(sessionUserLockCollection);\n};\n"],"mappings":";AASA,MAAa,qBAAqB;AAClC,MAAa,0BAA0B;AACvC,MAAa,+BAA+B;AAE5C,MAAa,oBAA6D;CACxE,MAAM;CACN,SAAS;EACP;GACE,MAAM;GACN,QAAQ,CAAC,WAAW;GACpB,QAAQ;EACV;EACA;GACE,MAAM;GACN,QAAQ,CAAC,QAAQ;EACnB;EACA;GACE,MAAM;GACN,QAAQ,CAAC,WAAW;EACtB;EACA;GACE,MAAM;GACN,QAAQ,CAAC,WAAW;EACtB;CACF;AACF;AAEA,MAAa,wBAA8D;CACzE,MAAM;CACN,SAAS,CACP;EACE,MAAM;EACN,QAAQ;GAAC;GAAW;GAAa;EAAK;EACtC,QAAQ;CACV,GACA;EACE,MAAM;EACN,QAAQ,CAAC,WAAW;CACtB,CACF;AACF;AAEA,MAAa,4BACX;CACE,MAAM;CACN,SAAS,CACP;EACE,MAAM;EACN,QAAQ,CAAC,QAAQ;EACjB,QAAQ;CACV,CACF;AACF;AAEF,MAAa,2BAA2B,OACtC,YACkB;CAClB,IACE,CAAC,QAAQ,aAAa,qBACtB,CAAC,QAAQ,aAAa,qBACtB,CAAC,QAAQ,aAAa,aAEtB,MAAM,IAAI,MACR,qFACF;CAGF,MAAM,QAAQ,mBAAmB,iBAAiB;CAClD,MAAM,QAAQ,mBAAmB,qBAAqB;CACtD,MAAM,QAAQ,mBAAmB,yBAAyB;AAC5D"}

package/dist/types/session-lock.types.d.cts

@@ -0,0 +1,4 @@
+import { StorageRecord } from "@puzzle-ui/storage";
+export type SessionUserLockRecord = StorageRecord & {
+  readonly userId: string;
+};

package/dist/types/session-lock.types.d.ts

@@ -0,0 +1,4 @@
+import { StorageRecord } from "@puzzle-ui/storage";
+export type SessionUserLockRecord = StorageRecord & {
+  readonly userId: string;
+};

package/dist/types/session-manager.types.d.cts

@@ -0,0 +1,37 @@
+import { SessionDevice, SessionKind, SessionRecord } from "./session.types.cjs";
+export type CreateSessionInput = {
+  readonly userId: string | null;
+  readonly kind: SessionKind;
+  readonly expiresAt?: Date;
+  readonly metadata?: Readonly<Record<string, unknown>>;
+};
+export type RotateSessionInput = {
+  readonly sessionId: string;
+  readonly metadata?: Readonly<Record<string, unknown>>;
+};
+export type ValidateSessionOptions = {
+  readonly touch?: boolean;
+};
+export type SessionManagerOptions = {
+  readonly lifetime: {
+    readonly idleTimeoutSeconds: number;
+    readonly absoluteLifetimeSeconds: number;
+  };
+  readonly collectionName?: string;
+  readonly maximumSessionsPerUser?: number;
+  readonly touchIntervalSeconds?: number;
+  readonly clock?: () => Date;
+};
+export type CreatedSession = {
+  readonly session: SessionRecord;
+  readonly token: string;
+};
+export interface SessionManager {
+  create(input: CreateSessionInput): Promise<CreatedSession>;
+  validate(token: string, options?: ValidateSessionOptions): Promise<SessionRecord | null>;
+  rotate(input: RotateSessionInput): Promise<CreatedSession>;
+  revoke(sessionId: string): Promise<void>;
+  revokeAll(userId: string): Promise<void>;
+  list(userId: string, currentSessionId?: string): Promise<readonly SessionDevice[]>;
+  get(sessionId: string): Promise<SessionRecord | null>;
+}

package/dist/types/session-manager.types.d.ts

@@ -0,0 +1,37 @@
+import { SessionDevice, SessionKind, SessionRecord } from "./session.types.js";
+export type CreateSessionInput = {
+  readonly userId: string | null;
+  readonly kind: SessionKind;
+  readonly expiresAt?: Date;
+  readonly metadata?: Readonly<Record<string, unknown>>;
+};
+export type RotateSessionInput = {
+  readonly sessionId: string;
+  readonly metadata?: Readonly<Record<string, unknown>>;
+};
+export type ValidateSessionOptions = {
+  readonly touch?: boolean;
+};
+export type SessionManagerOptions = {
+  readonly lifetime: {
+    readonly idleTimeoutSeconds: number;
+    readonly absoluteLifetimeSeconds: number;
+  };
+  readonly collectionName?: string;
+  readonly maximumSessionsPerUser?: number;
+  readonly touchIntervalSeconds?: number;
+  readonly clock?: () => Date;
+};
+export type CreatedSession = {
+  readonly session: SessionRecord;
+  readonly token: string;
+};
+export interface SessionManager {
+  create(input: CreateSessionInput): Promise<CreatedSession>;
+  validate(token: string, options?: ValidateSessionOptions): Promise<SessionRecord | null>;
+  rotate(input: RotateSessionInput): Promise<CreatedSession>;
+  revoke(sessionId: string): Promise<void>;
+  revokeAll(userId: string): Promise<void>;
+  list(userId: string, currentSessionId?: string): Promise<readonly SessionDevice[]>;
+  get(sessionId: string): Promise<SessionRecord | null>;
+}

package/dist/types/session.types.d.cts

@@ -0,0 +1,51 @@
+export type SessionKind = "anonymous" | "authenticated";
+export type SessionRecord = {
+  readonly id: string;
+  readonly tokenHash: string;
+  readonly userId: string | null;
+  readonly kind: SessionKind;
+  readonly createdAt: Date;
+  readonly lastSeenAt: Date;
+  readonly expiresAt: Date;
+  readonly revokedAt: Date | null;
+  readonly metadata?: Readonly<Record<string, unknown>>;
+};
+export type SessionLifetime = {
+  readonly idleTimeoutSeconds: number;
+  readonly absoluteLifetimeSeconds: number;
+};
+export type SessionCookieOptions = {
+  readonly name?: string;
+  readonly path?: "/";
+  readonly httpOnly: true;
+  readonly secure: boolean;
+  readonly sameSite: "lax" | "strict" | "none";
+  readonly maxAge?: number;
+  readonly domain?: never;
+};
+export type SessionDevice = {
+  readonly sessionId: string;
+  readonly kind: SessionKind;
+  readonly createdAt: Date;
+  readonly lastSeenAt: Date;
+  readonly expiresAt: Date;
+  readonly current: boolean;
+  readonly metadata?: Readonly<Record<string, unknown>>;
+};
+export type SessionStorageRecord = SessionRecord & {
+  readonly createdAt: Date;
+  readonly updatedAt: Date;
+  readonly revision: number;
+};
+export type SessionDataRecord = {
+  readonly id: string;
+  readonly ownerId: string;
+  readonly namespace: string;
+  readonly key: string;
+  readonly value: unknown;
+  readonly expiresAt: Date | null;
+  readonly createdAt: Date;
+  readonly updatedAt: Date;
+  readonly revokedAt?: Date | null;
+  readonly revision: number;
+};

package/dist/types/session.types.d.ts

@@ -0,0 +1,51 @@
+export type SessionKind = "anonymous" | "authenticated";
+export type SessionRecord = {
+  readonly id: string;
+  readonly tokenHash: string;
+  readonly userId: string | null;
+  readonly kind: SessionKind;
+  readonly createdAt: Date;
+  readonly lastSeenAt: Date;
+  readonly expiresAt: Date;
+  readonly revokedAt: Date | null;
+  readonly metadata?: Readonly<Record<string, unknown>>;
+};
+export type SessionLifetime = {
+  readonly idleTimeoutSeconds: number;
+  readonly absoluteLifetimeSeconds: number;
+};
+export type SessionCookieOptions = {
+  readonly name?: string;
+  readonly path?: "/";
+  readonly httpOnly: true;
+  readonly secure: boolean;
+  readonly sameSite: "lax" | "strict" | "none";
+  readonly maxAge?: number;
+  readonly domain?: never;
+};
+export type SessionDevice = {
+  readonly sessionId: string;
+  readonly kind: SessionKind;
+  readonly createdAt: Date;
+  readonly lastSeenAt: Date;
+  readonly expiresAt: Date;
+  readonly current: boolean;
+  readonly metadata?: Readonly<Record<string, unknown>>;
+};
+export type SessionStorageRecord = SessionRecord & {
+  readonly createdAt: Date;
+  readonly updatedAt: Date;
+  readonly revision: number;
+};
+export type SessionDataRecord = {
+  readonly id: string;
+  readonly ownerId: string;
+  readonly namespace: string;
+  readonly key: string;
+  readonly value: unknown;
+  readonly expiresAt: Date | null;
+  readonly createdAt: Date;
+  readonly updatedAt: Date;
+  readonly revokedAt?: Date | null;
+  readonly revision: number;
+};

package/dist/utils/session-crypto.cjs

@@ -0,0 +1,29 @@
+const require_session_errors = require("../errors/session.errors.cjs");
+// src/utils/session-crypto.ts
+const TOKEN_BYTES = 32;
+const toBase64Url = (bytes) => {
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+};
+const generateSessionToken = (cryptoProvider = globalThis.crypto) => {
+	if (!cryptoProvider?.getRandomValues) throw new require_session_errors.SessionSecurityError("A cryptographically secure random generator is required.");
+	const bytes = new Uint8Array(TOKEN_BYTES);
+	cryptoProvider.getRandomValues(bytes);
+	return toBase64Url(bytes);
+};
+const hashSessionToken = async (token, cryptoProvider = globalThis.crypto) => {
+	if (!token || token.length < 32) throw new require_session_errors.SessionSecurityError("Invalid session token.");
+	if (!cryptoProvider?.subtle) throw new require_session_errors.SessionSecurityError("Web Crypto SubtleCrypto is required.");
+	const digest = await cryptoProvider.subtle.digest("SHA-256", new TextEncoder().encode(token));
+	return toBase64Url(new Uint8Array(digest));
+};
+const generateSessionId = (cryptoProvider = globalThis.crypto) => {
+	if (!cryptoProvider?.randomUUID) throw new require_session_errors.SessionSecurityError("A cryptographically secure UUID generator is required.");
+	return cryptoProvider.randomUUID();
+};
+exports.generateSessionId = generateSessionId;
+exports.generateSessionToken = generateSessionToken;
+exports.hashSessionToken = hashSessionToken;
+
+//# sourceMappingURL=session-crypto.cjs.map

package/dist/utils/session-crypto.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-crypto.cjs","names":["SessionSecurityError"],"sources":["../../src/utils/session-crypto.ts"],"sourcesContent":["import { SessionSecurityError } from \"../errors/session.errors\";\n\nconst TOKEN_BYTES = 32;\n\nconst toBase64Url = (bytes: Uint8Array): string => {\n  let binary = \"\";\n\n  for (const byte of bytes) {\n    binary += String.fromCharCode(byte);\n  }\n\n  return btoa(binary)\n    .replaceAll(\"+\", \"-\")\n    .replaceAll(\"/\", \"_\")\n    .replace(/=+$/, \"\");\n};\n\nexport const generateSessionToken = (\n  cryptoProvider: Crypto = globalThis.crypto,\n): string => {\n  if (!cryptoProvider?.getRandomValues) {\n    throw new SessionSecurityError(\n      \"A cryptographically secure random generator is required.\",\n    );\n  }\n\n  const bytes = new Uint8Array(TOKEN_BYTES);\n\n  cryptoProvider.getRandomValues(bytes);\n\n  return toBase64Url(bytes);\n};\n\nexport const hashSessionToken = async (\n  token: string,\n  cryptoProvider: Crypto = globalThis.crypto,\n): Promise<string> => {\n  if (!token || token.length < 32) {\n    throw new SessionSecurityError(\"Invalid session token.\");\n  }\n\n  if (!cryptoProvider?.subtle) {\n    throw new SessionSecurityError(\"Web Crypto SubtleCrypto is required.\");\n  }\n\n  const digest = await cryptoProvider.subtle.digest(\n    \"SHA-256\",\n    new TextEncoder().encode(token),\n  );\n\n  return toBase64Url(new Uint8Array(digest));\n};\n\nexport const generateSessionId = (\n  cryptoProvider: Crypto = globalThis.crypto,\n): string => {\n  if (!cryptoProvider?.randomUUID) {\n    throw new SessionSecurityError(\n      \"A cryptographically secure UUID generator is required.\",\n    );\n  }\n\n  return cryptoProvider.randomUUID();\n};\n"],"mappings":";;AAEA,MAAM,cAAc;AAEpB,MAAM,eAAe,UAA8B;CACjD,IAAI,SAAS;CAEb,KAAK,MAAM,QAAQ,OACjB,UAAU,OAAO,aAAa,IAAI;CAGpC,OAAO,KAAK,MAAM,CAAC,CAChB,WAAW,KAAK,GAAG,CAAC,CACpB,WAAW,KAAK,GAAG,CAAC,CACpB,QAAQ,OAAO,EAAE;AACtB;AAEA,MAAa,wBACX,iBAAyB,WAAW,WACzB;CACX,IAAI,CAAC,gBAAgB,iBACnB,MAAM,IAAIA,uBAAAA,qBACR,0DACF;CAGF,MAAM,QAAQ,IAAI,WAAW,WAAW;CAExC,eAAe,gBAAgB,KAAK;CAEpC,OAAO,YAAY,KAAK;AAC1B;AAEA,MAAa,mBAAmB,OAC9B,OACA,iBAAyB,WAAW,WAChB;CACpB,IAAI,CAAC,SAAS,MAAM,SAAS,IAC3B,MAAM,IAAIA,uBAAAA,qBAAqB,wBAAwB;CAGzD,IAAI,CAAC,gBAAgB,QACnB,MAAM,IAAIA,uBAAAA,qBAAqB,sCAAsC;CAGvE,MAAM,SAAS,MAAM,eAAe,OAAO,OACzC,WACA,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAChC;CAEA,OAAO,YAAY,IAAI,WAAW,MAAM,CAAC;AAC3C;AAEA,MAAa,qBACX,iBAAyB,WAAW,WACzB;CACX,IAAI,CAAC,gBAAgB,YACnB,MAAM,IAAIA,uBAAAA,qBACR,wDACF;CAGF,OAAO,eAAe,WAAW;AACnC"}

package/dist/utils/session-crypto.d.cts

@@ -0,0 +1,3 @@
+export declare const generateSessionToken: (cryptoProvider?: Crypto) => string;
+export declare const hashSessionToken: (token: string, cryptoProvider?: Crypto) => Promise<string>;
+export declare const generateSessionId: (cryptoProvider?: Crypto) => string;

package/dist/utils/session-crypto.d.ts

@@ -0,0 +1,3 @@
+export declare const generateSessionToken: (cryptoProvider?: Crypto) => string;
+export declare const hashSessionToken: (token: string, cryptoProvider?: Crypto) => Promise<string>;
+export declare const generateSessionId: (cryptoProvider?: Crypto) => string;

package/dist/utils/session-crypto.js

@@ -0,0 +1,27 @@
+import { SessionSecurityError } from "../errors/session.errors.js";
+// src/utils/session-crypto.ts
+const TOKEN_BYTES = 32;
+const toBase64Url = (bytes) => {
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+};
+const generateSessionToken = (cryptoProvider = globalThis.crypto) => {
+	if (!cryptoProvider?.getRandomValues) throw new SessionSecurityError("A cryptographically secure random generator is required.");
+	const bytes = new Uint8Array(TOKEN_BYTES);
+	cryptoProvider.getRandomValues(bytes);
+	return toBase64Url(bytes);
+};
+const hashSessionToken = async (token, cryptoProvider = globalThis.crypto) => {
+	if (!token || token.length < 32) throw new SessionSecurityError("Invalid session token.");
+	if (!cryptoProvider?.subtle) throw new SessionSecurityError("Web Crypto SubtleCrypto is required.");
+	const digest = await cryptoProvider.subtle.digest("SHA-256", new TextEncoder().encode(token));
+	return toBase64Url(new Uint8Array(digest));
+};
+const generateSessionId = (cryptoProvider = globalThis.crypto) => {
+	if (!cryptoProvider?.randomUUID) throw new SessionSecurityError("A cryptographically secure UUID generator is required.");
+	return cryptoProvider.randomUUID();
+};
+export { generateSessionId, generateSessionToken, hashSessionToken };
+
+//# sourceMappingURL=session-crypto.js.map

package/dist/utils/session-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-crypto.js","names":[],"sources":["../../src/utils/session-crypto.ts"],"sourcesContent":["import { SessionSecurityError } from \"../errors/session.errors\";\n\nconst TOKEN_BYTES = 32;\n\nconst toBase64Url = (bytes: Uint8Array): string => {\n  let binary = \"\";\n\n  for (const byte of bytes) {\n    binary += String.fromCharCode(byte);\n  }\n\n  return btoa(binary)\n    .replaceAll(\"+\", \"-\")\n    .replaceAll(\"/\", \"_\")\n    .replace(/=+$/, \"\");\n};\n\nexport const generateSessionToken = (\n  cryptoProvider: Crypto = globalThis.crypto,\n): string => {\n  if (!cryptoProvider?.getRandomValues) {\n    throw new SessionSecurityError(\n      \"A cryptographically secure random generator is required.\",\n    );\n  }\n\n  const bytes = new Uint8Array(TOKEN_BYTES);\n\n  cryptoProvider.getRandomValues(bytes);\n\n  return toBase64Url(bytes);\n};\n\nexport const hashSessionToken = async (\n  token: string,\n  cryptoProvider: Crypto = globalThis.crypto,\n): Promise<string> => {\n  if (!token || token.length < 32) {\n    throw new SessionSecurityError(\"Invalid session token.\");\n  }\n\n  if (!cryptoProvider?.subtle) {\n    throw new SessionSecurityError(\"Web Crypto SubtleCrypto is required.\");\n  }\n\n  const digest = await cryptoProvider.subtle.digest(\n    \"SHA-256\",\n    new TextEncoder().encode(token),\n  );\n\n  return toBase64Url(new Uint8Array(digest));\n};\n\nexport const generateSessionId = (\n  cryptoProvider: Crypto = globalThis.crypto,\n): string => {\n  if (!cryptoProvider?.randomUUID) {\n    throw new SessionSecurityError(\n      \"A cryptographically secure UUID generator is required.\",\n    );\n  }\n\n  return cryptoProvider.randomUUID();\n};\n"],"mappings":";;AAEA,MAAM,cAAc;AAEpB,MAAM,eAAe,UAA8B;CACjD,IAAI,SAAS;CAEb,KAAK,MAAM,QAAQ,OACjB,UAAU,OAAO,aAAa,IAAI;CAGpC,OAAO,KAAK,MAAM,CAAC,CAChB,WAAW,KAAK,GAAG,CAAC,CACpB,WAAW,KAAK,GAAG,CAAC,CACpB,QAAQ,OAAO,EAAE;AACtB;AAEA,MAAa,wBACX,iBAAyB,WAAW,WACzB;CACX,IAAI,CAAC,gBAAgB,iBACnB,MAAM,IAAI,qBACR,0DACF;CAGF,MAAM,QAAQ,IAAI,WAAW,WAAW;CAExC,eAAe,gBAAgB,KAAK;CAEpC,OAAO,YAAY,KAAK;AAC1B;AAEA,MAAa,mBAAmB,OAC9B,OACA,iBAAyB,WAAW,WAChB;CACpB,IAAI,CAAC,SAAS,MAAM,SAAS,IAC3B,MAAM,IAAI,qBAAqB,wBAAwB;CAGzD,IAAI,CAAC,gBAAgB,QACnB,MAAM,IAAI,qBAAqB,sCAAsC;CAGvE,MAAM,SAAS,MAAM,eAAe,OAAO,OACzC,WACA,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAChC;CAEA,OAAO,YAAY,IAAI,WAAW,MAAM,CAAC;AAC3C;AAEA,MAAa,qBACX,iBAAyB,WAAW,WACzB;CACX,IAAI,CAAC,gBAAgB,YACnB,MAAM,IAAI,qBACR,wDACF;CAGF,OAAO,eAAe,WAAW;AACnC"}

package/package.json

@@ -1,6 +1,50 @@
 {
   "name": "@puzzle-ui/session",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.5.1",
+  "description": "Secure, database-independent session management for Puzzle Auth.",
+  "homepage": "https://puzzle-ui.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/senorprogramador/puzzle.git"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsdown",
+    "typecheck": "tsc --noEmit -p .",
+    "vitest": "node --test",
+    "test": "node --test",
+    "clean": "rm -rf dist",
+    "prepack": "tsdown"
+  },
+  "devDependencies": {
+    "tsdown": "^0.23.1",
+    "typescript": "^7.0.2"
+  },
+  "dependencies": {
+    "@puzzle-ui/storage": "^0.5.1"
+  }
+}