@rapidmx/mapi-plugin 1.0.0-beta.3 → 1.0.0-beta.5

package/dist/lib/MapiSessionManager.js

@@ -11,30 +11,43 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 // Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
+import * as crypto from "crypto";
 import { ObjectDecorators } from "@rapidrest/core";
-import { RedisCache, SimpleEntity } from "@rapidrest/service-core";
+import { DatabaseDecorators, SimpleEntity } from "@rapidrest/service-core";
+import { handleDataCache, handleDataKey, MemoryHandleDataStore, RedisHandleDataStore, sessionHandleDataIndex, writeStreamKey, } from "./rop/HandleDataCache.js";
 const { Init } = ObjectDecorators;
+const { Redis } = DatabaseDecorators;
 /** A pragmatic idle-session lifetime. The spec leaves session lifetime to server policy, not a fixed wire
  * value - a real client re-establishes (`Connect`) transparently whenever its session context has expired. */
-const SESSION_TTL_SECONDS = 15 * 60;
+export const SESSION_TTL_SECONDS = 15 * 60;
+/** The longest a session may live, however active it stays. A client simply `Connect`s again afterwards. */
+export const MAX_SESSION_LIFETIME_MS = 24 * 60 * 60 * 1000;
+/** The most sessions one user may hold at once. `Connect` past this ends that user's least recently used session (each
+ * `Execute` refreshes its session's place - see `MapiSessionManager.touch`). */
+export const MAX_SESSIONS_PER_USER = 20;
+/** The largest a serialized session may grow. Everything that grows with use is capped on its own (handles by their
+ * one-byte index, named properties, MIDs; write streams live outside the session); this is the backstop, and a save
+ * past it fails with `MAPI_E_TOO_BIG` rather than storing megabytes every later request has to load. */
+export const MAX_SESSION_BYTES = 4 * 1024 * 1024;
+/** How long an `Execute`'s session lock lives without being renewed. A running `Execute` renews it every
+ * `SESSION_LOCK_RENEW_MS`, so only a crashed pod's lock expires. The session save is still compare-and-set, so an
+ * expired lock can't corrupt state. */
+export const SESSION_LOCK_TTL_MS = 120 * 1000;
+/** How often a running `Execute` renews its session lock and in-progress marker. */
+export const SESSION_LOCK_RENEW_MS = SESSION_LOCK_TTL_MS / 3;
 /**
  * The MAPI/HTTP `Session Context` (`[MS-OXCMAPIHTTP]` §3.1.1.1): everything a `Connect`-established session
  * needs across subsequent `Execute` requests. Never persisted to a real database - purely an ephemeral,
- * TTL-bound cache entry (see `MapiSessionManager` below), so this deliberately extends `SimpleEntity` (just a
- * `uid`) rather than this library's own `BaseEntity`, which would add ACL/soft-delete/optimistic-locking
- * machinery this object has no use for.
+ * TTL-bound store entry (see `MapiSessionManager` below), so this deliberately extends `SimpleEntity` (just a
+ * `uid`) rather than this library's own `BaseEntity`.
  *
- * `createdAt` is a plain ISO-8601 string, not a `Date` - `RedisCache`'s Redis-backed path round-trips values
- * through `JSON.stringify`/`JSON.parse`, which silently turns a `Date` into a string on the way out without
- * reviving it back to a `Date` on the way in; storing it as a string from the start keeps the shape identical
- * whether a session happens to be served from the in-memory or the Redis-backed path.
+ * `createdAt` is a plain ISO-8601 string, not a `Date`, since sessions round-trip through JSON. `version` is
+ * bumped on every successful save and compared on the next one - see `MapiSessionManager.save()`.
  */
 export class MapiSessionContext extends SimpleEntity {
-    /** `mailboxUid`/`userUid` are always known at construction time (the only call site is
-     * `MapiSessionManager.create()`, which resolves both up front) - required here rather than optional with
-     * a same-value fallback, which would just be dead code no real caller ever takes the other branch of. */
     constructor(other) {
         super(other);
+        this.version = 0;
         this.handles = {};
         this.nextHandleIndex = 1;
         this.createdAt = new Date().toISOString();
@@ -44,32 +57,25 @@ export class MapiSessionContext extends SimpleEntity {
         this.folderIds = {};
         /** The reverse of `folderIds` (target -> FID) plus a monotonic counter, maintained alongside it by
          * `FolderTarget.assignOrGetFid`/`RopLogonHandler` so "does this target already have a FID" is an O(1)
-         * lookup instead of a linear scan of `folderIds` repeated once per table row - see `assignOrGetFid`'s own
-         * doc comment for why the scan this replaces was a genuine (not just theoretical) quadratic cost across a
-         * session's lifetime. Small and purely additive to session state (one more string-keyed map of numbers,
-         * the same order of magnitude as `folderIds` itself), unlike caching whole resolved rows would be. */
+         * lookup instead of a linear scan of `folderIds` repeated once per table row. */
         this.folderTargetIds = {};
         this.nextFolderId = 1;
         /** This session's MID assignments, keyed by MID (decimal string), valued `"message:<uid>"` - the message
-         * analog of `folderIds` above. Unlike `folderIds` (pre-populated by `RopLogon`), a MID only ever comes into
-         * existence lazily, the first time a `RopQueryRows` row exposes a message's `PidTagMid` column (see
-         * `MessageTarget.assignOrGetMid`), read back by a later `RopOpenMessage`. */
+         * analog of `folderIds` above. A MID only ever comes into existence lazily, the first time a `RopQueryRows`
+         * row exposes a message's `PidTagMid` column (see `MessageTarget.assignOrGetMid`), read back by a later
+         * `RopOpenMessage`. */
         this.messageIds = {};
-        /** The reverse of `messageIds` (target -> MID) plus a monotonic counter - the message analog of
-         * `folderTargetIds`/`nextFolderId` above, for the identical O(1)-lookup reason. */
+        /** The reverse of `messageIds` (target -> MID) plus a monotonic counter. */
         this.messageTargetIds = {};
         this.nextMessageId = 1;
+        /** The oldest MID still mapped. Past `MAX_MESSAGE_IDS` mapped MIDs the oldest are dropped - see
+         * `MessageTarget.assignOrGetMid`. */
+        this.firstMessageId = 1;
         /** This session's `RopGetPropertyIdsFromNames` mapping table (`[MS-OXCPRPT]` §2.2.12), keyed by a JSON
          * string encoding of the `{guid, kind, lid|name}` `PropertyName` the numeric ID was assigned to - see
-         * `NamedPropertyRegistry.ts`'s own doc comment for why a JSON string (rather than a delimiter-joined one)
-         * is the safest key shape here. A real client resolves every named property (almost every Calendar-specific
-         * one - `PidLidAppointmentStartWhole`, `PidLidBusyStatus`, `PidLidAppointmentRecur`, ...) through this table
-         * once per session before ever setting/reading it via `RopSetProperties`/`RopGetPropertiesSpecific`. */
+         * `NamedPropertyRegistry.ts`. */
         this.namedProperties = {};
-        /** The reverse of `namedProperties` (numeric ID -> `PropertyName` JSON key) plus a monotonic counter -
-         * `NamedPropertyRegistry.ts`'s own doc comment covers why both the O(n) forward scan this replaces and the
-         * `Math.max(...spread)` id-allocation it used are real problems, not just theoretical ones, at real
-         * mailbox/session scale. */
+        /** The reverse of `namedProperties` (numeric ID -> `PropertyName` JSON key) plus a monotonic counter. */
         this.namedPropertyIds = {};
         this.nextNamedPropertyId = 0x8000;
         this.mailboxUid = other.mailboxUid;
@@ -77,43 +83,393 @@ export class MapiSessionContext extends SimpleEntity {
     }
 }
 /**
- * Stores/loads `MapiSessionContext`s, keyed by the opaque session id that also becomes the `MapiContext`
- * cookie value. Reuses `@rapidrest/service-core`'s existing generic `RedisCache<T>` (Redis-backed when a
- * `cache` datastore is configured, transparent in-memory fallback otherwise) rather than either a bespoke
- * Redis client (unlike `PingCommand`'s own throwaway pub/sub client - fine for ephemeral fan-out, not a good
- * fit for stateful session data) or the framework's generic cookie/session middleware (built for a whole-app
- * `req.session` object, not this protocol's specific handle-table shape). `RedisCache` needs no real
- * persisted entity - only a class with a `.name` for its Redis key prefix - so a purely ephemeral,
- * never-persisted class like `MapiSessionContext` is a perfectly valid `type` for it.
+ * Stores `handle` at `index` with a fresh generation. Whatever previously held that index is released first
+ * (see `releaseHandle`), so a stream or cached data belonging to the old handle never attaches to the new one.
+ */
+export function assignHandle(session, index, handle) {
+    releaseHandle(session, index);
+    handle.generation = crypto.randomUUID();
+    session.handles[index] = handle;
+    return handle;
+}
+/**
+ * Releases the handle at `index`: drops its cached data, and releases every write stream opened against it
+ * (a stream is meaningless once its draft message is gone, and would otherwise attach to whatever reuses the
+ * index next).
+ */
+export function releaseHandle(session, index) {
+    const handle = session.handles[index];
+    if (!handle) {
+        return;
+    }
+    delete session.handles[index];
+    handleDataCache.delete(handleDataKey(session.uid, index, handle.generation));
+    if (handle.type === "fastTransfer" || handle.type === "stream") {
+        const released = releasedHandleData.get(session) ?? [];
+        released.push(handle.type === "fastTransfer" ? handleDataKey(session.uid, index, handle.generation) : writeStreamKey(session.uid, index, handle.generation));
+        releasedHandleData.set(session, released);
+    }
+    for (const [key, candidate] of Object.entries(session.handles)) {
+        if (candidate.writeTargetHandleIndex === index && candidate.writeTargetGeneration === handle.generation) {
+            releaseHandle(session, Number(key));
+        }
+    }
+}
+/** Session object -> the `HandleDataStore` keys of the handles released on it since the last `takeReleasedHandleData`.
+ * Kept beside the session, never in it, so it isn't saved. */
+const releasedHandleData = new WeakMap();
+/** The shared-store keys (FastTransfer streams, write-stream chunks) of every handle released on `session` since the
+ * last call, for the route to delete once the session's changes are saved. */
+export function takeReleasedHandleData(session) {
+    const released = releasedHandleData.get(session) ?? [];
+    releasedHandleData.delete(session);
+    return released;
+}
+/** Creates a session at version 0. KEYS: session, version. ARGV: json, ttl. */
+export const CREATE_SCRIPT = `
+redis.call('SETEX', KEYS[1], ARGV[2], ARGV[1])
+redis.call('SETEX', KEYS[2], ARGV[2], '0')
+return 1
+`;
+/** Replaces the session only when its version entry still equals the expected one, without decoding the session.
+ * KEYS: session, version. ARGV: expected version, json, ttl. Returns 1 saved, 0 on a version mismatch, -1 when gone. */
+export const COMPARE_AND_SET_SCRIPT = `
+local current = redis.call('GET', KEYS[2])
+if not current or redis.call('EXISTS', KEYS[1]) == 0 then return -1 end
+if tonumber(current) ~= tonumber(ARGV[1]) then return 0 end
+redis.call('SETEX', KEYS[1], ARGV[3], ARGV[2])
+redis.call('SETEX', KEYS[2], ARGV[3], tostring(tonumber(ARGV[1]) + 1))
+return 1
+`;
+/** Adds a session to its user's sorted-set index in one step, so concurrent Connects can't each see room under the
+ * cap. KEYS: index. ARGV: session id, created-at score, max, index ttl, session key prefix, session key suffix. The
+ * session keys it checks and deletes are built from the ids, so they aren't declared in KEYS (fine on one Redis node,
+ * not on a cluster). Returns the ids it ended. */
+export const ADD_TO_USER_INDEX_SCRIPT = `
+local function sessionKey(id) return ARGV[5] .. id .. ARGV[6] end
+for _, id in ipairs(redis.call('ZRANGE', KEYS[1], 0, -1)) do
+  if redis.call('EXISTS', sessionKey(id)) == 0 then redis.call('ZREM', KEYS[1], id) end
+end
+local ended = {}
+while redis.call('ZCARD', KEYS[1]) >= tonumber(ARGV[3]) do
+  local oldest = redis.call('ZRANGE', KEYS[1], 0, 0)[1]
+  redis.call('ZREM', KEYS[1], oldest)
+  redis.call('DEL', sessionKey(oldest), sessionKey(oldest) .. '.version')
+  table.insert(ended, oldest)
+end
+redis.call('ZADD', KEYS[1], ARGV[2], ARGV[1])
+redis.call('EXPIRE', KEYS[1], ARGV[4])
+return ended
+`;
+/** KEYS: lock. ARGV: token, ttl ms. Returns 1 when acquired. */
+export const ACQUIRE_LOCK_SCRIPT = `
+if redis.call('SET', KEYS[1], ARGV[1], 'NX', 'PX', ARGV[2]) then return 1 end
+return 0
+`;
+/** KEYS: lock. ARGV: token. Deletes the lock only while this token still holds it. */
+export const RELEASE_LOCK_SCRIPT = `
+if redis.call('GET', KEYS[1]) == ARGV[1] then redis.call('DEL', KEYS[1]) end
+return 1
+`;
+/** KEYS: lock. ARGV: token, ttl ms. Returns 1 when the token still held the lock and it was extended. */
+export const RENEW_LOCK_SCRIPT = `
+if redis.call('GET', KEYS[1]) == ARGV[1] then redis.call('PEXPIRE', KEYS[1], ARGV[2]) return 1 end
+return 0
+`;
+/** KEYS: user index. ARGV: score, session id. Updates the score of a member that is still present. */
+export const TOUCH_USER_INDEX_SCRIPT = `
+redis.call('ZADD', KEYS[1], 'XX', ARGV[1], ARGV[2])
+return 1
+`;
+/** A `MapiSessionStore` on a node-redis client. Every read goes to Redis, never a per-process copy, so each
+ * replica sees the same session. */
+export class RedisMapiSessionStore {
+    constructor(client) {
+        this.client = client;
+    }
+    async get(key) {
+        return (await this.client.get(key)) ?? undefined;
+    }
+    async create(key, value, ttlSeconds) {
+        await this.client.eval(CREATE_SCRIPT, { keys: [key, versionKey(key)], arguments: [value, String(ttlSeconds)] });
+    }
+    async compareAndSet(key, expectedVersion, value, ttlSeconds) {
+        const result = Number(await this.client.eval(COMPARE_AND_SET_SCRIPT, {
+            keys: [key, versionKey(key)],
+            arguments: [String(expectedVersion), value, String(ttlSeconds)],
+        }));
+        return result === 1 ? "saved" : result === 0 ? "conflict" : "missing";
+    }
+    async delete(key) {
+        await this.client.del([key, versionKey(key)]);
+    }
+    async addToUserIndex(indexKey, sessionId, createdAtMs, max, ttlSeconds) {
+        const ended = await this.client.eval(ADD_TO_USER_INDEX_SCRIPT, {
+            keys: [indexKey],
+            arguments: [sessionId, String(createdAtMs), String(max), String(ttlSeconds), SESSION_KEY_PREFIX, SESSION_KEY_SUFFIX],
+        });
+        return ended.map(String);
+    }
+    async acquireLock(key, token, ttlMs) {
+        return Number(await this.client.eval(ACQUIRE_LOCK_SCRIPT, { keys: [key], arguments: [token, String(ttlMs)] })) === 1;
+    }
+    async releaseLock(key, token) {
+        await this.client.eval(RELEASE_LOCK_SCRIPT, { keys: [key], arguments: [token] });
+    }
+    async renewLock(key, token, ttlMs) {
+        return Number(await this.client.eval(RENEW_LOCK_SCRIPT, { keys: [key], arguments: [token, String(ttlMs)] })) === 1;
+    }
+    async touchUserIndex(indexKey, sessionId, score) {
+        await this.client.eval(TOUCH_USER_INDEX_SCRIPT, { keys: [indexKey], arguments: [String(score), sessionId] });
+    }
+    async getValue(key) {
+        return (await this.client.get(key)) ?? undefined;
+    }
+    async putValue(key, value, ttlSeconds) {
+        await this.client.setEx(key, ttlSeconds, value);
+    }
+}
+/** A single-process `MapiSessionStore`. Values are stored as strings so every load hands out an independent copy,
+ * exactly like the Redis store. No method awaits between reading and writing, so each one is atomic. */
+export class MemoryMapiSessionStore {
+    constructor() {
+        this.entries = new Map();
+        this.indexes = new Map();
+    }
+    async get(key) {
+        return this.read(key);
+    }
+    async create(key, value, ttlSeconds) {
+        this.sweep();
+        this.write(key, value, ttlSeconds);
+        this.write(versionKey(key), "0", ttlSeconds);
+    }
+    async compareAndSet(key, expectedVersion, value, ttlSeconds) {
+        const version = this.read(versionKey(key));
+        if (version === undefined || this.read(key) === undefined) {
+            return "missing";
+        }
+        if (Number(version) !== expectedVersion) {
+            return "conflict";
+        }
+        this.write(key, value, ttlSeconds);
+        this.write(versionKey(key), String(expectedVersion + 1), ttlSeconds);
+        return "saved";
+    }
+    async delete(key) {
+        this.entries.delete(key);
+        this.entries.delete(versionKey(key));
+    }
+    async addToUserIndex(indexKey, sessionId, createdAtMs, max) {
+        const members = this.indexes.get(indexKey) ?? new Map();
+        this.indexes.set(indexKey, members);
+        for (const id of [...members.keys()]) {
+            if (this.read(SESSION_KEY_PREFIX + id + SESSION_KEY_SUFFIX) === undefined) {
+                members.delete(id);
+            }
+        }
+        const oldestFirst = [...members.entries()].sort((a, b) => a[1] - b[1]).map(([id]) => id);
+        const ended = [];
+        while (members.size >= max) {
+            const oldest = oldestFirst.shift();
+            members.delete(oldest);
+            this.entries.delete(SESSION_KEY_PREFIX + oldest + SESSION_KEY_SUFFIX);
+            this.entries.delete(versionKey(SESSION_KEY_PREFIX + oldest + SESSION_KEY_SUFFIX));
+            ended.push(oldest);
+        }
+        members.set(sessionId, createdAtMs);
+        return ended;
+    }
+    async acquireLock(key, token, ttlMs) {
+        if (this.read(key) !== undefined) {
+            return false;
+        }
+        this.entries.set(key, { value: token, expiresAt: Date.now() + ttlMs });
+        return true;
+    }
+    async releaseLock(key, token) {
+        if (this.read(key) === token) {
+            this.entries.delete(key);
+        }
+    }
+    async renewLock(key, token, ttlMs) {
+        if (this.read(key) !== token) {
+            return false;
+        }
+        this.entries.set(key, { value: token, expiresAt: Date.now() + ttlMs });
+        return true;
+    }
+    async touchUserIndex(indexKey, sessionId, score) {
+        const members = this.indexes.get(indexKey);
+        if (members?.has(sessionId)) {
+            members.set(sessionId, score);
+        }
+    }
+    async getValue(key) {
+        return this.read(key);
+    }
+    async putValue(key, value, ttlSeconds) {
+        this.write(key, value, ttlSeconds);
+    }
+    read(key) {
+        const entry = this.entries.get(key);
+        if (entry && entry.expiresAt <= Date.now()) {
+            this.entries.delete(key);
+            return undefined;
+        }
+        return entry?.value;
+    }
+    write(key, value, ttlSeconds) {
+        this.entries.set(key, { value, expiresAt: Date.now() + ttlSeconds * 1000 });
+    }
+    sweep() {
+        const now = Date.now();
+        for (const [key, entry] of this.entries) {
+            if (entry.expiresAt <= now) {
+                this.entries.delete(key);
+            }
+        }
+    }
+}
+// A session's keys put its id in a hash tag, so its JSON, version, lock and last response share one cluster slot.
+const SESSION_KEY_PREFIX = "mapi.session.{";
+const SESSION_KEY_SUFFIX = "}";
+/** The store key of a session's JSON. */
+export function sessionKey(sessionId) {
+    return SESSION_KEY_PREFIX + encodeURIComponent(sessionId) + SESSION_KEY_SUFFIX;
+}
+/** The `.last` value marking `requestId` as running. Always serialized the same way, so it can be compared as a string. */
+function inProgressMarker(requestId) {
+    return JSON.stringify({ requestId });
+}
+function versionKey(key) {
+    return `${key}.version`;
+}
+function userIndexKey(userUid) {
+    return `mapi.session.user.${encodeURIComponent(userUid)}`;
+}
+/**
+ * Stores/loads `MapiSessionContext`s, keyed by the opaque session id that also becomes the `MapiContext` cookie
+ * value.
  *
- * @author Jean-Philippe Steinmetz
+ * Every load reads the shared store (Redis when a `cache` datastore is configured). An earlier version used
+ * `RedisCache`, whose per-process copy served a session without checking Redis, so with several replicas one pod
+ * could run ROPs against handles another pod had already changed. Saves are compare-and-set on `version`: when
+ * two requests on the same session overlap, the second save reports `"conflict"` instead of overwriting the
+ * first request's handles. `Execute` also holds the session's lock (`acquireLock`) while it runs, so an overlapping
+ * request is turned away before it has any side effects, and keeps its last response (`storeResponse`) so a retry of
+ * the same request is answered again instead of being run twice.
  */
 export class MapiSessionManager {
-    async init() {
-        this.cache = await this._objectFactory.newInstance(RedisCache, {
-            name: MapiSessionContext.name,
-            args: [MapiSessionContext],
-        });
+    init() {
+        this.store = this.redisClient ? new RedisMapiSessionStore(this.redisClient) : new MemoryMapiSessionStore();
+        this.handleDataStore = this.redisClient ? new RedisHandleDataStore(this.redisClient) : new MemoryHandleDataStore();
     }
+    /** Creates a session for `userUid`, ending that user's least recently used sessions (and their stored handle data)
+     * if they already hold `MAX_SESSIONS_PER_USER`. */
     async create(mailboxUid, userUid) {
         const context = new MapiSessionContext({ mailboxUid, userUid });
-        await this.cache.save(context.uid, context, SESSION_TTL_SECONDS);
+        await this.store.create(sessionKey(context.uid), JSON.stringify(context), SESSION_TTL_SECONDS);
+        const ended = await this.store.addToUserIndex(userIndexKey(userUid), encodeURIComponent(context.uid), Date.now(), MAX_SESSIONS_PER_USER, MAX_SESSION_LIFETIME_MS / 1000);
+        for (const id of ended) {
+            await this.deleteHandleData(decodeURIComponent(id));
+        }
         return context;
     }
+    /** Records that `session` was just used, so the per-user cap ends the least recently used session rather than the
+     * oldest one. */
+    async touch(session) {
+        await this.store.touchUserIndex(userIndexKey(session.userUid), encodeURIComponent(session.uid), Date.now());
+    }
+    /** Loads a session straight from the store. A session past `MAX_SESSION_LIFETIME_MS` is ended and treated as
+     * missing. */
     async load(sessionId) {
-        return this.cache.load(sessionId);
+        const json = await this.store.get(sessionKey(sessionId));
+        if (!json) {
+            return undefined;
+        }
+        const session = JSON.parse(json);
+        if (Date.now() - Date.parse(session.createdAt) > MAX_SESSION_LIFETIME_MS) {
+            await this.destroy(sessionId);
+            return undefined;
+        }
+        return session;
     }
+    /** Saves `context` only if nobody else saved it since it was loaded and it is within `MAX_SESSION_BYTES`,
+     * bumping its `version` on success. */
     async save(context) {
-        await this.cache.save(context.uid, context, SESSION_TTL_SECONDS);
+        const expected = context.version;
+        context.version = expected + 1;
+        const json = JSON.stringify(context);
+        const result = Buffer.byteLength(json) > MAX_SESSION_BYTES
+            ? "tooBig"
+            : await this.store.compareAndSet(sessionKey(context.uid), expected, json, SESSION_TTL_SECONDS);
+        if (result !== "saved") {
+            context.version = expected;
+        }
+        return result;
     }
+    /** Ends a session, deleting its stored handle data too. */
     async destroy(sessionId) {
-        await this.cache.delete(sessionId);
+        await this.store.delete(sessionKey(sessionId));
+        await this.deleteHandleData(sessionId);
+    }
+    /** Deletes every FastTransfer stream and write-stream chunk the session stored. Best effort: they expire anyway. */
+    async deleteHandleData(sessionId) {
+        await this.handleDataStore.deleteOwnedBy(sessionHandleDataIndex(sessionId)).catch(() => undefined);
+    }
+    /** Takes the session's `Execute` lock. Returns the token to release it with, or `undefined` while another
+     * request holds it. */
+    async acquireLock(sessionId) {
+        const token = crypto.randomUUID();
+        return (await this.store.acquireLock(`${sessionKey(sessionId)}.lock`, token, SESSION_LOCK_TTL_MS)) ? token : undefined;
+    }
+    async releaseLock(sessionId, token) {
+        await this.store.releaseLock(`${sessionKey(sessionId)}.lock`, token);
+    }
+    /** Extends the session's lock by another `SESSION_LOCK_TTL_MS`. `false` when `token` no longer holds it. */
+    async renewLock(sessionId, token) {
+        return this.store.renewLock(`${sessionKey(sessionId)}.lock`, token, SESSION_LOCK_TTL_MS);
+    }
+    /** The response last sent on this session if it answered `requestId`; `"inProgress"` while a request with that id
+     * is still running (or ran on a pod that died less than `SESSION_LOCK_TTL_MS` ago); otherwise `undefined`. */
+    async storedResponse(sessionId, requestId) {
+        const json = await this.store.getValue(`${sessionKey(sessionId)}.last`);
+        const stored = json ? JSON.parse(json) : undefined;
+        if (stored?.requestId !== requestId) {
+            return undefined;
+        }
+        return stored.body === undefined ? "inProgress" : Buffer.from(stored.body, "base64");
+    }
+    /** Records that `requestId` is running on this session, for `SESSION_LOCK_TTL_MS` (renewed along with the lock). A
+     * retry of it is then answered as busy instead of running a second time. */
+    async markInProgress(sessionId, requestId) {
+        await this.store.putValue(`${sessionKey(sessionId)}.last`, inProgressMarker(requestId), SESSION_LOCK_TTL_MS / 1000);
+    }
+    /** Extends the in-progress marker of `requestId` by another `SESSION_LOCK_TTL_MS`, only while it is still that marker:
+     * once the request's response (or anything else) has replaced it, nothing is written. `false` when it wasn't there. */
+    async renewInProgress(sessionId, requestId) {
+        // The lock scripts are exactly "extend/delete only while the value is still this one".
+        return this.store.renewLock(`${sessionKey(sessionId)}.last`, inProgressMarker(requestId), SESSION_LOCK_TTL_MS);
+    }
+    /** Drops the in-progress marker of `requestId` when it is still there (the request ended without storing a
+     * response), so a retry runs. Atomic, so it never deletes a response stored meanwhile. */
+    async clearInProgress(sessionId, requestId) {
+        await this.store.releaseLock(`${sessionKey(sessionId)}.last`, inProgressMarker(requestId));
+    }
+    /** Remembers `body` as this session's answer to `requestId`. Only the latest request is kept. */
+    async storeResponse(sessionId, requestId, body) {
+        await this.store.putValue(`${sessionKey(sessionId)}.last`, JSON.stringify({ requestId, body: body.toString("base64") }), SESSION_TTL_SECONDS);
     }
 }
+__decorate([
+    Redis("cache", false),
+    __metadata("design:type", Object)
+], MapiSessionManager.prototype, "redisClient", void 0);
 __decorate([
     Init,
     __metadata("design:type", Function),
     __metadata("design:paramtypes", []),
-    __metadata("design:returntype", Promise)
+    __metadata("design:returntype", void 0)
 ], MapiSessionManager.prototype, "init", null);
 //# sourceMappingURL=MapiSessionManager.js.map

package/dist/lib/MapiSessionManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"MapiSessionManager.js","sourceRoot":"","sources":["../../src/MapiSessionManager.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAiB,UAAU,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAClF,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC;AAElC;8GAC8G;AAC9G,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,CAAC;AAgDpC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IA8ChD;;6GAEyG;IACzG,YAAmB,KAAsE;QACrF,KAAK,CAAC,KAAK,CAAC,CAAC;QA/CV,YAAO,GAAqC,EAAE,CAAC;QAC/C,oBAAe,GAAG,CAAC,CAAC;QACpB,cAAS,GAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpD;;+DAEuD;QAChD,cAAS,GAA2B,EAAE,CAAC;QAE9C;;;;;8GAKsG;QAC/F,oBAAe,GAA2B,EAAE,CAAC;QAC7C,iBAAY,GAAG,CAAC,CAAC;QAExB;;;qFAG6E;QACtE,eAAU,GAA2B,EAAE,CAAC;QAE/C;2FACmF;QAC5E,qBAAgB,GAA2B,EAAE,CAAC;QAC9C,kBAAa,GAAG,CAAC,CAAC;QAEzB;;;;;gHAKwG;QACjG,oBAAe,GAA2B,EAAE,CAAC;QAEpD;;;oCAG4B;QACrB,qBAAgB,GAA2B,EAAE,CAAC;QAC9C,wBAAmB,GAAG,MAAM,CAAC;QAOhC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACjC,CAAC;CACJ;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,kBAAkB;IAOd,AAAN,KAAK,CAAC,IAAI;QACb,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,UAAU,EAAE;YAC5D,IAAI,EAAE,kBAAkB,CAAC,IAAI;YAC7B,IAAI,EAAE,CAAC,kBAAkB,CAAC;SAC7B,CAAC,CAAC;IACP,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,UAAkB,EAAE,OAAe;QACnD,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,KAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;QAClE,OAAO,OAAO,CAAC;IACnB,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,KAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,OAA2B;QACzC,MAAM,IAAI,CAAC,KAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACtE,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,SAAiB;QAClC,MAAM,IAAI,CAAC,KAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;CACJ;AAxBgB;IADZ,IAAI;;;;8CAMJ"}
+{"version":3,"file":"MapiSessionManager.js","sourceRoot":"","sources":["../../src/MapiSessionManager.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EACH,eAAe,EACf,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,GAEjB,MAAM,0BAA0B,CAAC;AAClC,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC;AAClC,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC;AAErC;8GAC8G;AAC9G,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,CAAC;AAE3C,4GAA4G;AAC5G,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3D;gFACgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAExC;;wGAEwG;AACxG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD;;uCAEuC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,GAAG,IAAI,CAAC;AAE9C,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,GAAG,CAAC,CAAC;AA0D7D;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IAwChD,YAAmB,KAAsE;QACrF,KAAK,CAAC,KAAK,CAAC,CAAC;QAtCV,YAAO,GAAG,CAAC,CAAC;QACZ,YAAO,GAAqC,EAAE,CAAC;QAC/C,oBAAe,GAAG,CAAC,CAAC;QACpB,cAAS,GAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpD;;+DAEuD;QAChD,cAAS,GAA2B,EAAE,CAAC;QAE9C;;yFAEiF;QAC1E,oBAAe,GAA2B,EAAE,CAAC;QAC7C,iBAAY,GAAG,CAAC,CAAC;QAExB;;;+BAGuB;QAChB,eAAU,GAA2B,EAAE,CAAC;QAE/C,4EAA4E;QACrE,qBAAgB,GAA2B,EAAE,CAAC;QAC9C,kBAAa,GAAG,CAAC,CAAC;QACzB;6CACqC;QAC9B,mBAAc,GAAG,CAAC,CAAC;QAE1B;;yCAEiC;QAC1B,oBAAe,GAA2B,EAAE,CAAC;QAEpD,yGAAyG;QAClG,qBAAgB,GAA2B,EAAE,CAAC;QAC9C,wBAAmB,GAAG,MAAM,CAAC;QAIhC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACjC,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAA2B,EAAE,KAAa,EAAE,MAAwB;IAC7F,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACxC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAChC,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAA2B,EAAE,KAAa;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO;IACX,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,eAAe,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7J,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,IAAI,SAAS,CAAC,sBAAsB,KAAK,KAAK,IAAI,SAAS,CAAC,qBAAqB,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;YACtG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;IACL,CAAC;AACL,CAAC;AAED;8DAC8D;AAC9D,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAAoB,CAAC;AAE3D;8EAC8E;AAC9E,MAAM,UAAU,sBAAsB,CAAC,OAA2B;IAC9D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACvD,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC;AACpB,CAAC;AAiCD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAG;;;;CAI5B,CAAC;AAEF;wHACwH;AACxH,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;CAOrC,CAAC;AAEF;;;kDAGkD;AAClD,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;CAevC,CAAC;AAEF,gEAAgE;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;CAGlC,CAAC;AAEF,sFAAsF;AACtF,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;CAGlC,CAAC;AAEF,yGAAyG;AACzG,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;CAGhC,CAAC;AAEF,sGAAsG;AACtG,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;CAGtC,CAAC;AAEF;oCACoC;AACpC,MAAM,OAAO,qBAAqB;IAC9B,YAAoC,MAAW;QAAX,WAAM,GAAN,MAAM,CAAK;IAAG,CAAC;IAE5C,KAAK,CAAC,GAAG,CAAC,GAAW;QACxB,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC;IACrD,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,KAAa,EAAE,UAAkB;QAC9D,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,eAAuB,EAAE,KAAa,EAAE,UAAkB;QAC9F,MAAM,MAAM,GAAG,MAAM,CACjB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;YAC3C,IAAI,EAAE,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;YAC5B,SAAS,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;SAClE,CAAC,CACL,CAAC;QACF,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,GAAW;QAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,SAAiB,EAAE,WAAmB,EAAE,GAAW,EAAE,UAAkB;QACjH,MAAM,KAAK,GAAc,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;YACtE,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,kBAAkB,EAAE,kBAAkB,CAAC;SACvH,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,KAAa,EAAE,KAAa;QAC9D,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACzH,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,KAAa;QAC/C,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,KAAa,EAAE,KAAa;QAC5D,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACvH,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,SAAiB,EAAE,KAAa;QAC1E,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACjH,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,GAAW;QAC7B,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC;IACrD,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,KAAa,EAAE,UAAkB;QAChE,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;CACJ;AAED;wGACwG;AACxG,MAAM,OAAO,sBAAsB;IAAnC;QACqB,YAAO,GAAG,IAAI,GAAG,EAAgD,CAAC;QAClE,YAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IA6GtE,CAAC;IA3GU,KAAK,CAAC,GAAG,CAAC,GAAW;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,KAAa,EAAE,UAAkB;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,eAAuB,EAAE,KAAa,EAAE,UAAkB;QAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YACxD,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,eAAe,EAAE,CAAC;YACtC,OAAO,UAAU,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACrE,OAAO,OAAO,CAAC;IACnB,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,GAAW;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,SAAiB,EAAE,WAAmB,EAAE,GAAW;QAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpC,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB,GAAG,EAAE,GAAG,kBAAkB,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;QACL,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAG,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,GAAG,MAAM,GAAG,kBAAkB,CAAC,CAAC;YACtE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,GAAG,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC;YAClF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC;IACjB,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,KAAa,EAAE,KAAa;QAC9D,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IAChB,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,KAAa;QAC/C,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,KAAa,EAAE,KAAa;QAC5D,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IAChB,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,SAAiB,EAAE,KAAa;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,GAAW;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,KAAa,EAAE,UAAkB;QAChE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACvC,CAAC;IAEO,IAAI,CAAC,GAAW;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,KAAK,EAAE,KAAK,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,GAAW,EAAE,KAAa,EAAE,UAAkB;QACxD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC;IAEO,KAAK;QACT,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;QACL,CAAC;IACL,CAAC;CACJ;AAED,kHAAkH;AAClH,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAC5C,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,yCAAyC;AACzC,MAAM,UAAU,UAAU,CAAC,SAAiB;IACxC,OAAO,kBAAkB,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,kBAAkB,CAAC;AACnF,CAAC;AAED,2HAA2H;AAC3H,SAAS,gBAAgB,CAAC,SAAiB;IACvC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC3B,OAAO,GAAG,GAAG,UAAU,CAAC;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACjC,OAAO,qBAAqB,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,kBAAkB;IAWpB,IAAI;QACP,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,sBAAsB,EAAE,CAAC;QAC3G,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,qBAAqB,EAAE,CAAC;IACvH,CAAC;IAED;uDACmD;IAC5C,KAAK,CAAC,MAAM,CAAC,UAAkB,EAAE,OAAe;QACnD,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,KAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAChG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAM,CAAC,cAAc,CAC1C,YAAY,CAAC,OAAO,CAAC,EACrB,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,EAC/B,IAAI,CAAC,GAAG,EAAE,EACV,qBAAqB,EACrB,uBAAuB,GAAG,IAAI,CACjC,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;qBACiB;IACV,KAAK,CAAC,KAAK,CAAC,OAA2B;QAC1C,MAAM,IAAI,CAAC,KAAM,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjH,CAAC;IAED;kBACc;IACP,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAM,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,OAAO,GAAuB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,uBAAuB,EAAE,CAAC;YACvE,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC9B,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;2CACuC;IAChC,KAAK,CAAC,IAAI,CAAC,OAA2B;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QACjC,OAAO,CAAC,OAAO,GAAG,QAAQ,GAAG,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,MAAM,GACR,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,iBAAiB;YACvC,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,MAAM,IAAI,CAAC,KAAM,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;QACxG,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC;QAC/B,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,2DAA2D;IACpD,KAAK,CAAC,OAAO,CAAC,SAAiB;QAClC,MAAM,IAAI,CAAC,KAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAED,oHAAoH;IAC5G,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QAC5C,MAAM,IAAI,CAAC,eAAgB,CAAC,aAAa,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxG,CAAC;IAED;2BACuB;IAChB,KAAK,CAAC,WAAW,CAAC,SAAiB;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,IAAI,CAAC,KAAM,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5H,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,KAAa;QACrD,MAAM,IAAI,CAAC,KAAM,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAED,4GAA4G;IACrG,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,KAAa;QACnD,OAAO,IAAI,CAAC,KAAM,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC9F,CAAC;IAED;kHAC8G;IACvG,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,SAAiB;QAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACzE,MAAM,MAAM,GAAqD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrG,IAAI,MAAM,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzF,CAAC;IAED;gFAC4E;IACrE,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,SAAiB;QAC5D,MAAM,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACzH,CAAC;IAED;2HACuH;IAChH,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,SAAiB;QAC7D,uFAAuF;QACvF,OAAO,IAAI,CAAC,KAAM,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACpH,CAAC;IAED;8FAC0F;IACnF,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,SAAiB;QAC7D,MAAM,IAAI,CAAC,KAAM,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,iGAAiG;IAC1F,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,SAAiB,EAAE,IAAY;QACzE,MAAM,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACnJ,CAAC;CACJ;AAlIW;IADP,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC;;uDACI;AASnB;IADN,IAAI;;;;8CAIJ"}

package/dist/lib/RegexPatternUtils.js

@@ -0,0 +1,30 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { StringUtils } from "@rapidrest/core";
+/**
+ * Mirrors `@rapidrest/service-core`'s private `ModelUtils.MAX_PATTERN_LENGTH`: a `regex(...)` query operand
+ * longer than this is rejected as a potential ReDoS pattern with `INVALID_REQUEST`. The check runs against the
+ * operand AFTER escaping, so a raw client term well under the limit can still exceed it once each regex
+ * metacharacter doubles in length.
+ */
+export const MAX_REGEX_PATTERN_LENGTH = 100;
+/**
+ * Escapes `value` for a literal-substring `regex(...)` match, truncating the raw term (never mid-escape or
+ * mid-code-point) so the escaped result always fits `MAX_REGEX_PATTERN_LENGTH`. Matching on a prefix of an
+ * over-long search term still yields a superset of the full term's matches, which is a far better outcome than
+ * the whole command failing.
+ */
+export function boundedEscapedPattern(value, maxLength = MAX_REGEX_PATTERN_LENGTH) {
+    let pattern = "";
+    for (const char of value) {
+        const escaped = StringUtils.escapeRegExp(char);
+        if (pattern.length + escaped.length > maxLength) {
+            break;
+        }
+        pattern += escaped;
+    }
+    return pattern;
+}
+//# sourceMappingURL=RegexPatternUtils.js.map

package/dist/lib/RegexPatternUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RegexPatternUtils.js","sourceRoot":"","sources":["../../src/RegexPatternUtils.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,YAAoB,wBAAwB;IAC7F,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC9C,MAAM;QACV,CAAC;QACD,OAAO,IAAI,OAAO,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC"}