@rapidrest/core 1.14.0 → 2.0.0

package/dist/lib/threads/ThreadPool.js.map

@@ -1 +1 @@
-{"version":3,"file":"ThreadPool.js","sourceRoot":"","sources":["../../../src/threads/ThreadPool.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,kDAAkD;AAClD,+EAA+E;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9D,OAAO,EAAiB,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAC;AA0B5E;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,OAAO,UAAU;IAgBnB;;OAEG;IACH,IAAW,GAAG;QACV,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAW,IAAI;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,YAAY,MAAc,CAAC,EAAE,MAAY;QA5BzC,6CAA6C;QAErC,eAAU,GAAW,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;QA2B1C,wGAAwG;QACxG,yGAAyG;QACzG,yFAAyF;QACzF,oBAAoB;QACpB,IAAI,CAAC,UAAU,GAAG,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;QAC7D,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,CAAC;IAEO,YAAY,CAAC,GAAW,EAAE,OAAsB;QACpD,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACrC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,aAAa,GAAQ;YACvB,UAAU,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI;YAC/D,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;SAC/D,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,MAAM,GAAW,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAEhE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,MAAM,SAAS,GAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACjF,IAAI,SAAS,EAAE,CAAC;gBACZ,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBAC/B,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACzB,CAAC;YACL,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,kGAAkG;YAClG,iGAAiG;YACjG,qFAAqF;YACrF,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAChF,IAAI,SAAS,EAAE,CAAC;oBACZ,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;wBAC/B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBACxB,CAAC;gBACL,CAAC;YACL,CAAC;YAED,wBAAwB;YACxB,IAAI,OAAO,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC3C,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBAC5B,MAAM,SAAS,GAAW,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC1D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YAClC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAkB,EAAE,EAAE;YACxC,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,iBAAiB,CAAC,GAAG;oBACtB,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC3B,MAAM;gBACV,KAAK,iBAAiB,CAAC,MAAM;oBACzB,CAAC;wBACG,MAAM,SAAS,GAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;wBAClF,IAAI,SAAS,EAAE,CAAC;4BACZ,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gCAC/B,QAAQ,CAAC,GAAG,CAAC,CAAC;4BAClB,CAAC;wBACL,CAAC;oBACL,CAAC;oBACD,MAAM;gBACV;oBACI,CAAC;wBACG,MAAM,SAAS,GAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;wBACnF,IAAI,SAAS,EAAE,CAAC;4BACZ,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gCAC/B,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;4BACvB,CAAC;wBACL,CAAC;oBACL,CAAC;oBACD,MAAM;YACd,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,OAAuB,EAAE,MAAc,IAAI,CAAC,GAAG;QACxD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,QAAQ,GAAW,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,GAAG,EAAE,CAAC;YACjB,CAAC;YACD,OAAO,CAAC,OAAO,GAAG,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAEhE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;gBAClD,MAAM,MAAM,GAAW,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACrD,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;oBACrB,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;wBAC7B,QAAQ,EAAE,CAAC;oBACf,CAAC;oBAED,uDAAuD;oBACvD,IAAI,QAAQ,IAAI,GAAG,IAAI,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;wBACjD,OAAO,EAAE,CAAC;oBACd,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAQ,EAAE,EAAE;oBAC9B,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;wBACf,KAAK,iBAAiB,CAAC,KAAK;4BACxB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BACjB,MAAM;wBACV,KAAK,iBAAiB,CAAC,MAAM;4BACzB,QAAQ,EAAE,CAAC;4BACX,MAAM;oBACd,CAAC;oBAED,uDAAuD;oBACvD,IAAI,QAAQ,IAAI,GAAG,IAAI,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;wBACjD,OAAO,EAAE,CAAC;oBACd,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IAEU,AAAN,KAAK,CAAC,IAAI;QACb,MAAM,SAAS,GAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,wDAAwD;QACxD,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,+CAA+C;QAC/C,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAEhB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;YACjD,MAAM,MAAM,GAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAW,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YAElD,IAAI,SAAS,EAAE,CAAC;gBACZ,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBAC/B,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC5B,CAAC;YACL,CAAC;QACL,CAAC;QAED,8FAA8F;QAC9F,0GAA0G;QAC1G,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACI,EAAE,CAAC,IAAY,EAAE,IAAoB;QACxC,IAAI,SAAS,GAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,SAAS,GAAG,IAAI,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACI,IAAI,CAAC,GAAQ;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAChC,IAAI,GAAG,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAC7C,IAAI,GAAG,GAAG,QAAQ,CAAC;QACnB,GAAG,CAAC;YACA,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,MAAM,EAAE,CAAC;gBACT,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBACxB,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;gBACtB,OAAO;YACX,CAAC;YACD,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAC1B,CAAC,QAAQ,GAAG,KAAK,QAAQ,EAAE;QAC3B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC;IAED;;;OAGG;IACI,OAAO,CAAC,GAAQ;QACnB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,EAAU,EAAE,GAAQ;QAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;IACL,CAAC;CACJ;AAtPW;IADP,MAAM;;0CACc;AAGb;IADP,MAAM,CAAC,yBAAyB,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;;8CACN;AAkKjC;IADZ,OAAO;;;;sCAwBP"}
+{"version":3,"file":"ThreadPool.js","sourceRoot":"","sources":["../../../src/threads/ThreadPool.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+EAA+E;AAC/E,kDAAkD;AAClD,+EAA+E;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9D,OAAO,EAAiB,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAC;AAiC5E;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,OAAO,UAAU;IAwBnB;;OAEG;IACH,IAAW,GAAG;QACV,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAW,IAAI;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,YAAY,MAAc,CAAC,EAAE,MAAY;QAhCzC,6CAA6C;QAErC,eAAU,GAAW,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;QAK9C;;gCAEwB;QAChB,kBAAa,GAAoB,IAAI,OAAO,EAAE,CAAC;QAuBnD,wGAAwG;QACxG,yGAAyG;QACzG,yFAAyF;QACzF,oBAAoB;QACpB,IAAI,CAAC,UAAU,GAAG,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;QAC7D,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH;;;;;;OAMG;IACK,QAAQ,CAAC,IAAY,EAAE,GAAW,EAAE,IAAU;QAClD,MAAM,SAAS,GAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,SAAS,EAAE,CAAC;YACZ,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBAC/B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxB,CAAC;QACL,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,GAAW,EAAE,OAAsB,EAAE,SAAuC;QAC7F,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACrC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,aAAa,GAAQ;YACvB,UAAU,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI;YAC/D,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;SAC/D,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,MAAM,GAAW,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAEhE,mGAAmG;QACnG,kGAAkG;QAClG,sGAAsG;QACtG,6DAA6D;QAC7D,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACrB,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACjC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC7B,gGAAgG;YAChG,iGAAiG;YACjG,qGAAqG;YACrG,eAAe;YACf,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAE/B,kGAAkG;YAClG,iGAAiG;YACjG,qFAAqF;YACrF,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjB,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;YAED,wBAAwB;YACxB,IAAI,OAAO,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC3C,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBAC5B,4FAA4F;gBAC5F,8FAA8F;gBAC9F,8FAA8F;gBAC9F,kGAAkG;gBAClG,+FAA+F;gBAC/F,iGAAiG;gBACjG,2CAA2C;gBAC3C,IAAI,CAAC;oBACD,MAAM,SAAS,GAAW,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;oBACrE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;oBAC9B,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACb,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBACvC,CAAC;YACL,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAkB,EAAE,EAAE;YACxC,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,iBAAiB,CAAC,GAAG;oBACtB,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC3B,MAAM;gBACV,KAAK,iBAAiB,CAAC,MAAM;oBACzB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;oBAC7B,MAAM;gBACV,KAAK,iBAAiB,CAAC,KAAK;oBACxB,0FAA0F;oBAC1F,yFAAyF;oBACzF,yFAAyF;oBACzF,wDAAwD;oBACxD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;oBACtC,MAAM;gBACV;oBACI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;oBACnC,MAAM;YACd,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,OAAuB,EAAE,MAAc,IAAI,CAAC,GAAG;QACxD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QAEtB,uGAAuG;QACvG,6FAA6F;QAC7F,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAExB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,QAAQ,GAAW,CAAC,CAAC;YACzB,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,gGAAgG;YAChG,iGAAiG;YACjG,oGAAoG;YACpG,oFAAoF;YACpF,MAAM,eAAe,GAAkB,EAAE,GAAG,OAAO,EAAE,CAAC;YACtD,eAAe,CAAC,OAAO,GAAG,SAAS,IAAI,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAExF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;gBACd,kGAAkG;gBAClG,0BAA0B;gBAC1B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBACnD,OAAO,EAAE,CAAC;gBACV,OAAO;YACX,CAAC;YAED,6FAA6F;YAC7F,+FAA+F;YAC/F,+FAA+F;YAC/F,mGAAmG;YACnG,iGAAiG;YACjG,wFAAwF;YACxF,4FAA4F;YAC5F,iGAAiG;YACjG,yEAAyE;YACzE,MAAM,WAAW,GAAG,CAAC,KAAU,EAAE,EAAE;gBAC/B,IAAI,OAAO,EAAE,CAAC;oBACV,OAAO;gBACX,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBAChC,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC5B,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC;YAEF,+EAA+E;YAC/E,MAAM,SAAS,GAAG,eAAe,CAAC,gBAAgB,IAAI,UAAU,CAAC,gBAAgB,CAAC;YAClF,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBAClC,WAAW,CAAC,IAAI,KAAK,CAAC,uDAAuD,SAAS,KAAK,CAAC,CAAC,CAAC;YAClG,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;YAExB,MAAM,OAAO,GAAG,GAAG,EAAE;gBACjB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,OAAO,EAAE,CAAC;YACd,CAAC,CAAC;YAEF,qGAAqG;YACrG,qGAAqG;YACrG,gGAAgG;YAChG,mGAAmG;YACnG,0EAA0E;YAC1E,MAAM,oBAAoB,GAAG,CAAC,CAAS,EAAQ,EAAE;gBAC7C,IAAI,KAAK,GAAG,KAAK,CAAC;gBAClB,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;oBAChB,IAAI,OAAO,EAAE,CAAC;wBACV,OAAO;oBACX,CAAC;oBACD,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;wBAC1B,KAAK,GAAG,IAAI,CAAC;wBACb,QAAQ,EAAE,CAAC;oBACf,CAAC;oBAED,uDAAuD;oBACvD,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;wBACrB,OAAO,EAAE,CAAC;oBACd,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,6FAA6F;gBAC7F,oCAAoC;gBACpC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBACpB,IAAI,CAAC,KAAK,EAAE,CAAC;wBACT,WAAW,CAAC,KAAK,CAAC,CAAC;oBACvB,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAQ,EAAE,EAAE;oBACzB,IAAI,OAAO,EAAE,CAAC;wBACV,OAAO;oBACX,CAAC;oBACD,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;wBACf,KAAK,iBAAiB,CAAC,KAAK;4BACxB,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BACtB,OAAO;wBACX,KAAK,iBAAiB,CAAC,MAAM;4BACzB,KAAK,GAAG,IAAI,CAAC;4BACb,QAAQ,EAAE,CAAC;4BACX,MAAM;oBACd,CAAC;oBAED,uDAAuD;oBACvD,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;wBACrB,OAAO,EAAE,CAAC;oBACd,CAAC;gBACL,CAAC,CAAC,CAAC;YACP,CAAC,CAAC;YAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAW,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,SAAS,EAAE,EAAE;oBACvE,IAAI,CAAC,OAAO,EAAE,CAAC;wBACX,oBAAoB,CAAC,SAAS,CAAC,CAAC;oBACpC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,oBAAoB,CAAC,MAAM,CAAC,CAAC;gBAC7B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;OAGG;IAEU,AAAN,KAAK,CAAC,IAAI;QACb,MAAM,SAAS,GAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,mEAAmE;QACnE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;QAE/C,sGAAsG;QACtG,oGAAoG;QACpG,mGAAmG;QACnG,0FAA0F;QAC1F,MAAM,OAAO,CAAC,GAAG,CACb,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACnC,IAAI,QAA4B,CAAC;YACjC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,+FAA+F;gBAC/F,oCAAoC;gBACpC,QAAQ,GAAG,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACJ,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBACnF,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAE9E,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACzB,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;gBACxC,CAAC;YACL,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACZ,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBAC/B,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC5B,CAAC;YACL,CAAC;QACL,CAAC,CAAC,CACL,CAAC;QAEF,8FAA8F;QAC9F,0GAA0G;QAC1G,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACI,EAAE,CAAC,IAAY,EAAE,IAAoB;QACxC,IAAI,SAAS,GAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,SAAS,GAAG,IAAI,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACI,IAAI,CAAC,GAAQ;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAChC,IAAI,GAAG,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAC7C,IAAI,GAAG,GAAG,QAAQ,CAAC;QACnB,GAAG,CAAC;YACA,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,oGAAoG;YACpG,qEAAqE;YACrE,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBACxB,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;gBACtB,OAAO;YACX,CAAC;YACD,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAC1B,CAAC,QAAQ,GAAG,KAAK,QAAQ,EAAE;QAC3B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACI,OAAO,CAAC,GAAQ;QACnB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACL,CAAC;IACL,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,EAAU,EAAE,GAAQ;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;;AAhZD,+HAA+H;AACvG,+BAAoB,GAAG,IAAI,AAAP,CAAQ;AACpD,4LAA4L;AACpK,2BAAgB,GAAG,KAAK,AAAR,CAAS;AAOzC;IADP,MAAM;;0CACc;AAGb;IADP,MAAM,CAAC,yBAAyB,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;;8CACN;AA4RjC;IADZ,OAAO;;;;sCAwCP"}

package/dist/types/AlertUtils.d.ts

@@ -100,6 +100,10 @@ export declare class AlertUtils {
      * @param options The configuration options to use.
      */
     constructor(options: AlertUtilsOptions);
+    /** Returns `true` if `status` is a 2XX HTTP success code. Shared by every method below that inspects a
+     * response's status, so a future change to what counts as "success" (e.g. also accepting 304) only needs
+     * to be made in one place. */
+    private static isSuccess;
     /**
      * Attempts to close the existing alert with the given identifier.
      * @param id The unique identifier of the alert to close.

package/dist/types/CacheUtils.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Utility functions for working with bounded in-memory caches.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export declare class CacheUtils {
+    /**
+     * Evicts the oldest inserted entry from `map`, if any. A `Map` preserves insertion order, so this removes
+     * whatever entry was `set()` least recently among those still present.
+     *
+     * @param map The map to evict the oldest entry from.
+     */
+    static evictOldest<K, V>(map: Map<K, V>): void;
+}

package/dist/types/ClassLoader.d.ts

@@ -34,6 +34,10 @@
  * an ESM-only project you must use the `ts-node/esm` module loader. This can be specified by passing the `--loader` to
  * node at runtime.
  *
+ * Also, this code intentionally does not perform path-containment and symlink checks during it's load process as the
+ * purpose of this utility is never to be exposed to a client-facing API or process. Doing so would never make sense
+ * anyway. The lack of containment checks here is to eliminate real performance costs that such containment introduces.
+ *
  * ```
  * node --loader ts-node/esm <module>
  * ```
@@ -77,6 +81,12 @@ export declare class ClassLoader {
      * @returns `true` if a class definition exists for the given fully qualified name, otherwise `false`.
      */
     hasClass(fqn: string): any | undefined;
+    /**
+     * Imports the module at `fullpath` and registers each of its exports as a class under its fully qualified
+     * name, shared by both the JavaScript and TypeScript loading branches of `load()` so a future change to
+     * how exports are turned into registered classes only needs to be made in one place.
+     */
+    private registerModule;
     /**
      * Loads all modules exports contained in the directory specified. The folder must be a child
      * directory to the `rootDir` parameter passed in to the constructor.

package/dist/types/FileUtils.d.ts

@@ -4,14 +4,27 @@
  */
 export declare class FileUtils {
     /**
-     * Throws an error if the resolved `target` path is not contained within the resolved `rootDir` directory. Used
-     * to prevent path traversal (e.g. `../`) from escaping an intended root when a caller opts in by providing
-     * `rootDir`.
+     * Determines if the provided path exists on the filesystem.
+     */
+    static exists(target: string): Promise<boolean>;
+    /**
+     * Throws an error if `target` is not contained within `rootDir`. Used to prevent path traversal (e.g. `../`)
+     * from escaping an intended root when a caller opts in by providing `rootDir`.
+     *
+     * Both `rootDir` and the longest already-existing ancestor of `target` are resolved via `fs.promises.realpath`
+     * before the containment check, not just `path.resolve`. Without this, a symlink placed anywhere on disk
+     * within `target`'s existing ancestry (including `target` itself) that points outside `rootDir` would pass
+     * a purely lexical check, yet `fs.existsSync`/`fs.writeFileSync`/`fs.readFileSync` etc. would transparently
+     * follow it - defeating the containment guarantee entirely. Any remaining (not-yet-existing) trailing path
+     * segments can't be symlinks yet, so they're safely appended as literal strings.
      *
-     * @param {string} rootDir The directory that `target` must be contained within.
-     * @param {string} target The fully resolved path to verify.
+     * @param {string} rootDir The directory that `target` must be contained within. Must exist.
+     * @param {string} target The path to verify.
+     * @returns The fully resolved (existing-portion realpath'd) path. Callers should use this value - not the
+     * original `target` - for the actual filesystem operation, so a symlink swapped in after this check can't
+     * reintroduce the gap it closes.
      */
-    private static assertContained;
+    static assertContained(rootDir: string, target: string): Promise<string>;
     /**
      * Attempts to write the provided contents to the file path given. If a file already exists at the destination
      * an error is thrown unless `overwrite` is set to `true`.
@@ -45,8 +58,11 @@ export declare class FileUtils {
      * @param {Map<string,string>} variables The map of variable names to values to swap. Applies to outPath only.
      * @param {string} rootDir Optional. When provided, all resolved source and destination paths must be contained
      * within this directory, otherwise an error is thrown.
+     * @param {boolean} overwrite Set to `true` to overwrite an existing file at the destination. Default is `false`,
+     * matching the behavior of `writeFile`/`copyFile`. Appended after `rootDir` to preserve the existing positional
+     * call signature - note this is the opposite order from `copyFile`'s `(overwrite, rootDir)`.
      */
-    static copyBinaryFile(srcPath: string, outPath: string, variables?: any, rootDir?: string): Promise<void>;
+    static copyBinaryFile(srcPath: string, outPath: string, variables?: any, rootDir?: string, overwrite?: boolean): Promise<void>;
     /**
      * Performs a deep copy of a directory tree at the given srcPath to the specified output directory. Performs
      * template replacement for all variables given and skips any files in the specified filter.

package/dist/types/JWTUtils.d.ts

@@ -122,34 +122,103 @@ export interface JWTUtilsConfig {
  * @author Jean-Philippe Steinmetz <rapidrests@gmail.com>
  */
 export declare class JWTUtils {
-    private static _parsedKeyCache;
-    /**
-     * Throws if `config.secret` looks like an asymmetric (RSA/EC) key but `config.options.algorithms` was not
-     * explicitly restricted. Signing/verifying with an asymmetric key while leaving `algorithms` unset opens the
-     * door to algorithm-confusion attacks (e.g. an attacker forging an HS256 token using the public key as the
-     * HMAC secret). HMAC secrets (plain strings/buffers that aren't PEM-encoded) are unaffected.
+    /** HMAC algorithm names that must never be permitted alongside a non-HMAC secret (see `assertSafeAlgorithm`). */
+    private static readonly HMAC_ALGORITHMS;
+    /** Maximum size, in bytes, a compressed profile is allowed to decompress to (see `finalizePayload`). Guards
+     * against a decompression bomb - a small compressed payload expanding to consume excessive memory. */
+    private static readonly MAX_DECOMPRESSED_PROFILE_BYTES;
+    /**
+     * Returns `true` if `secret` is a form that is only ever usable as a genuine HMAC secret - a plain
+     * string/Buffer that isn't PEM-encoded, or a `KeyObject` of type `"secret"`. Anything else (a PEM
+     * string/Buffer, an asymmetric `KeyObject`, a `{ key, passphrase }` wrapper, a `GetPublicKeyOrSecret`
+     * callback, a JWK-shaped object, etc.) is *not* considered safe, since it may resolve to a non-secret
+     * (public) value that an attacker could use to forge an HS256/384/512 token.
+     */
+    private static isKnownSafeHmacSecret;
+    /**
+     * Throws unless `config.secret` is a known-safe plain HMAC secret. Any other secret shape is treated
+     * conservatively as potentially asymmetric (fail closed, rather than only matching a fixed allowlist of
+     * asymmetric shapes seen so far) and requires `config.options.algorithms` to be explicitly set to a list
+     * that does not itself include an HMAC algorithm. Without this, signing/verifying with e.g. an RSA key
+     * while leaving `algorithms` unset - or restricting it to `["RS256", "HS256"]` - opens the door to
+     * algorithm-confusion attacks: an attacker holding only the public half of the key pair can forge a token
+     * by signing it with HS256 using that public value as the HMAC secret.
      *
      * @param config The JWT configuration to validate.
      */
     private static assertSafeAlgorithm;
     /**
-     * Generates a new JWT token for the given config and user object. The user object must be a valid RapidREST
-     * user.
-     *
-     * @param config The JWT configuration to use when generating the token.
-     * @param user The user to encode into the token's payload.
+     * Returns the key length, in bytes, required by `algorithm` (e.g. 32 for `aes-256-cbc`, 24 for
+     * `aes-192-cbc`), so the scrypt-derived key `deriveKey`/`deriveKeySync` produce always matches whatever
+     * cipher `passwordOptions.algorithm` actually names, instead of a length hard-coded for one specific
+     * algorithm. Throws a clear error for an algorithm Node's `crypto` module doesn't recognize, rather than
+     * letting `createCipheriv`/`createDecipheriv` fail later with an opaque "Invalid key length".
+     */
+    private static resolveKeyLength;
+    /**
+     * Derives a symmetric encryption key from `password`/`salt` for use with `algorithm`.
      */
     private static deriveKey;
     /**
-     * Generates a new JWT token for the given config and user object. The user object must be a valid RapidREST
-     * user.
-     *
-     * @param config The JWT configuration to use when generating the token.
-     * @param user The user to encode into the token's payload.
+     * Synchronous counterpart to `deriveKey()`. **Blocks the event loop** for the duration of the scrypt
+     * derivation (deliberately CPU-expensive, typically tens of milliseconds) - `createTokenSync`/
+     * `decodeTokenSync` should therefore be avoided on a request-handling path when password-based payload
+     * encryption is configured; prefer `createToken`/`decodeToken` there.
      */
     private static deriveKeySync;
+    /**
+     * Encrypts `plaintext` for `publicKey` using hybrid encryption: `plaintext` is encrypted with a fresh
+     * AES-256-GCM key, which is itself wrapped with RSA. This avoids `crypto.publicEncrypt`'s fixed plaintext-size
+     * limit (e.g. ~214 bytes for a 2048-bit key with OAEP padding), which a raw JSON user profile easily exceeds.
+     *
+     * @param publicKey The RSA public key to wrap the AES key with.
+     * @param plaintext The data to encrypt.
+     * @returns The encrypted data, encoded as `<wrapped-key>.<iv>.<authTag>.<ciphertext>`, all base64.
+     */
+    private static hybridEncrypt;
+    /**
+     * Returns the base64-encoded authentication tag for `cipher` if it's an AEAD cipher, otherwise `""`. Rather
+     * than pattern-matching the algorithm name (which only recognizes a fixed list of known AEAD naming
+     * conventions), this asks the cipher itself via `getAuthTag()`, which throws for any non-AEAD cipher - so
+     * any AEAD cipher/alias supported by the current Node/OpenSSL build is handled correctly, including ones
+     * not known when this was last updated.
+     */
+    private static getAuthTagIfAEAD;
+    /**
+     * Decrypts data produced by `hybridEncrypt`.
+     *
+     * @param privateKey The RSA private key to unwrap the AES key with.
+     * @param encoded The encrypted data, as produced by `hybridEncrypt`.
+     */
+    private static hybridDecrypt;
+    /**
+     * Builds the signable payload shared by `createToken`/`createTokenSync`: validates `config`/`user`, spreads
+     * `data`, compresses the profile if requested, and - for public-key encryption only, which has no async
+     * dependency - encrypts it. Password-based encryption is left for the caller to finish via
+     * `finishPasswordEncryption()`, since deriving the key is the one step that differs between the sync and
+     * async entry points.
+     */
+    private static preparePayload;
+    /** Finishes password-based payload encryption once `key` has been derived (sync or async). */
+    private static finishPasswordEncryption;
     static createToken(config: JWTUtilsConfig, user: JWTUser, data?: any): Promise<string>;
+    /**
+     * Synchronous counterpart to `createToken()`. **Blocks the event loop** while deriving the encryption key
+     * when password-based payload encryption is configured (see `deriveKeySync`) - prefer `createToken()` on a
+     * request-handling path in that case.
+     */
     static createTokenSync(config: JWTUtilsConfig, user: JWTUser, data?: any): string;
+    /**
+     * Verifies `token` and prepares its payload for `decodeToken`/`decodeTokenSync`: validates the signature/
+     * shape, and - for private-key decryption only, which has no async dependency - decrypts it in place.
+     * Password-based decryption is left for the caller to finish via `finishPasswordDecryption()`, since
+     * deriving the key is the one step that differs between the sync and async entry points.
+     */
+    private static preDecode;
+    /** Finishes password-based payload decryption once `key` has been derived (sync or async). */
+    private static finishPasswordDecryption;
+    /** Decompresses (if applicable) and parses the final payload profile shared by both decode entry points. */
+    private static finalizePayload;
     /**
      * Decodes the given JWT authentication token using the provided configuration. If the token is not valid an
      * error is thrown with the reason. Returns the encoded user object payload upon success.
@@ -160,8 +229,9 @@ export declare class JWTUtils {
      */
     static decodeToken(config: JWTUtilsConfig, token: string): Promise<JWTPayload>;
     /**
-     * Decodes the given JWT authentication token using the provided configuration. If the token is not valid an
-     * error is thrown with the reason. Returns the encoded user object payload upon success.
+     * Synchronous counterpart to `decodeToken()`. **Blocks the event loop** while deriving the decryption key
+     * when password-based payload encryption is configured (see `deriveKeySync`) - prefer `decodeToken()` on a
+     * request-handling path in that case.
      *
      * @param config The JWT configuration to use when validating the token.
      * @param token The JWT token to validate.

package/dist/types/MessagingUtils.d.ts

@@ -57,12 +57,18 @@ export declare class MessagingUtils {
     private _transporter;
     /** Cache of compiled Handlebars delegates keyed by "<templateName>:<field>". */
     private _compiledTemplates;
+    /** Source string each `_compiledTemplates` entry was compiled from, keyed the same way. Lets `loadTemplate()`
+     * detect when an existing field's value has changed (e.g. a live config reload editing a template's subject/
+     * text/html) and recompile, instead of only ever compiling a field once and rendering stale content forever. */
+    private _compiledTemplateSources;
+    /** Names of templates already compiled into `_compiledTemplates` for this instance. See `loadTemplate()`. */
+    private _loadedTemplates;
     init(): Promise<void>;
     /**
      * Loads the template with the given name and returns its contents as a string.
      * @param name The name of the template to load.
      */
-    loadTemplate(name: string): Template;
+    loadTemplate(name: string): Promise<Template>;
     /**
      * Sends an email using the given template name and variables.
      * @param templateName The name of the email template to send.

package/dist/types/NotificationsUtils.d.ts

@@ -4,17 +4,42 @@
  * @author Jean-Philippe Steinmetz
  */
 export declare class NotificationUtils {
+    /**
+     * The redis channel `broadcastMessage()` publishes to. Namespaced (rather than a bare `"allusers"`) so it
+     * can never collide with a per-recipient channel `sendMessage()` derives from a caller-supplied uid - a
+     * client-facing "send a message to this uid" feature that passes its recipient straight through to
+     * `sendMessage()` must not be able to choose a uid that lands on the broadcast channel and reach every
+     * subscriber instead of the intended one recipient.
+     */
+    static readonly BROADCAST_CHANNEL = "broadcast:allusers";
+    /**
+     * Prefix applied to every per-recipient channel in `sendMessage()`. Combined with `BROADCAST_CHANNEL`'s own
+     * distinct `"broadcast:"` prefix, this guarantees the two channel namespaces can never overlap regardless of
+     * what uid value a caller supplies.
+     */
+    static readonly USER_CHANNEL_PREFIX = "user:";
     /** The redis client to use for broadcasting messages. */
     private redis;
+    /** The logging utility to use. */
+    private logger?;
     /**
      * Initializes the utility using the given redis connection.
      *
      * @param {any} redis The redis connection to publish to.
+     * @param {any} logger The logging utility to use.
      */
     constructor(redis: any);
+    /**
+     * Publishes to the given redis channel, logging (rather than crashing the process via an unhandled rejection)
+     * if the underlying client's `publish()` rejects.
+     */
+    private publish;
     /**
      * Broadcasts a given message to all users.
      *
+     * Subscribers must listen on `NotificationUtils.BROADCAST_CHANNEL` (rather than a bare `"allusers"`) to
+     * receive these messages.
+     *
      * @param {any} type The type of message being sent.
      * @param {string} action The action performed on the data (if applicable).
      * @param {string} data The contents of the message to send.
@@ -23,6 +48,11 @@ export declare class NotificationUtils {
     /**
      * Sends a given message to the room or user with the specified uid(s).
      *
+     * Each recipient's channel is `NotificationUtils.USER_CHANNEL_PREFIX + uid` (rather than the bare uid), so
+     * that no caller-supplied uid can collide with `NotificationUtils.BROADCAST_CHANNEL` or any other reserved
+     * channel and be delivered to unintended subscribers. Subscribers must listen on that prefixed channel name
+     * to receive messages sent to their uid.
+     *
      * @param {string} uids The universally unique identifier of the room or user to send the message to.
      * @param {string} type The type of message being sent.
      * @param {string} action The action performed on the data (if applicable).

package/dist/types/ObjectFactory.d.ts

@@ -22,7 +22,10 @@ export declare class ObjectFactory {
     readonly classes: Map<string, any>;
     /** The global application configuration object. */
     protected config: any;
-    /** A map for the unique name to the intance of a particular class type. */
+    /** A map for the unique name to the intance of a particular class type.
+     *
+     * Note that this map is unbounded and only shrinks via an explicit `destroy()` call.
+     */
     readonly instances: Map<string, any>;
     /** The application logging utility. */
     protected logger: any;
@@ -30,6 +33,12 @@ export declare class ObjectFactory {
     private readonly _metadataCache;
     /** Secondary index: className → first registered instance key, for O(1) getInstance() fallback. */
     private readonly _firstByClass;
+    /** Tracks in-flight `initialize()` promises, keyed by registry name, for instances currently completing
+     * async initialization. `newInstance()` registers an instance in `instances` before its (possibly async)
+     * initialization completes, so a concurrent `newInstance()` call for the same name would otherwise find the
+     * entry via the instances-map fast path and receive the not-yet-initialized instance synchronously instead
+     * of waiting. Consulting this map lets that caller await the same in-flight initialization instead. */
+    private readonly _pendingInit;
     constructor(config?: any, logger?: any);
     /** Walks the prototype chain once for `obj` and caches the discovered decorator metadata on the constructor. */
     private _getOrBuildMetadata;
@@ -37,6 +46,11 @@ export declare class ObjectFactory {
      * Destroys the specified objects. If `undefined` is passed in, all objects managed by the factory are destroyed.
      */
     destroy(objs?: any | any[]): Promise<void>;
+    /** Removes `name` from `instances`. If it was the secondary index's "first" entry for its class, promotes
+     * another surviving instance of the same class if one exists, otherwise drops the entry so `getInstance()`
+     * correctly reports no instance is available. Shared by `destroy()` and `newInstance()`'s failed-initialization
+     * cleanup. */
+    private _removeInstance;
     /**
      * Deletes all instantiated objects.
      */
@@ -57,6 +71,16 @@ export declare class ObjectFactory {
      * @returns The list of functions that implements the `@Init` decorator if found, otherwise undefined.
      */
     getInitMethods(obj: any): Function[];
+    /**
+     * Derives the class name/fqn used to index `instances`/`classes` from a class type, fully qualified name
+     * string, or (defensively) a live instance. Shared by `getInstance`, `newInstance` and `register` so the
+     * three can never disagree about which string identifies a given class - a custom `.fqn` (e.g. one assigned
+     * by `ClassLoader`) always takes precedence over the bare `.name`, honored consistently everywhere a class
+     * identity is resolved.
+     *
+     * @param typeOrInstance The class type, fqn string, or instance to derive the name from.
+     */
+    private static classNameOf;
     /**
      * Returns the object instance with the given unique name. Unique names take the form `<ClassName>:<InstanceName>`.
      * It is possible to only specifiy the `<ClassName>`, doing so will automatically look for the `<ClassName>:default`

package/dist/types/ObjectUtils.d.ts

@@ -6,6 +6,10 @@ import { JWTUser } from "./JWTUtils.js";
  * @author Jean-Philippe Steinmetz
  */
 export declare class ObjectUtils {
+    /** Maximum object nesting depth `deleteScopedProps`/`validate` will recurse into with `recurse: true`. Guards
+     * against stack exhaustion from a pathologically deep (but otherwise valid, e.g. attacker-controlled JSON)
+     * object graph - cycle detection alone doesn't bound depth for a non-cyclic but very deep structure. */
+    private static readonly MAX_RECURSE_DEPTH;
     /**
      * Deletes all properties from the given object(s) that the specified user does not have scope to read.
      *
@@ -15,6 +19,11 @@ export declare class ObjectUtils {
      * @param recurse Set to `true` to validate all child objects.
      */
     static deleteScopedProps(obj: any, user?: JWTUser, clazz?: any, recurse?: boolean): void;
+    /**
+     * Internal implementation of `deleteScopedProps` that tracks already-visited objects so that circular
+     * references (e.g. ORM-populated relations that reference each other) don't cause infinite recursion.
+     */
+    private static _deleteScopedProps;
     /**
      * Performs validation of the given object or array. Validation is performed by scanning the object class for properties
      * decorated with `@Validator` and executing the provided validation function.
@@ -24,4 +33,9 @@ export declare class ObjectUtils {
      * @param recurse Set to `true` to validate all child objects.
      */
     static validate(obj: any, clazz?: any, recurse?: boolean): void;
+    /**
+     * Internal implementation of `validate` that tracks already-visited objects so that circular references
+     * (e.g. ORM-populated relations that reference each other) don't cause infinite recursion.
+     */
+    private static _validate;
 }

package/dist/types/StringUtils.d.ts

@@ -4,6 +4,14 @@
  * @author Jean-Philippe Steinmetz
  */
 export declare class StringUtils {
+    /**
+     * Escapes all regular expression metacharacters in `str` so it can be safely embedded in a `RegExp` pattern
+     * and matched as a literal string.
+     *
+     * @param {string} str The string to escape.
+     * @returns {string} The escaped string.
+     */
+    static escapeRegExp(str: string): string;
     /**
      * Returns a list of all parameters contained within the string. A parameter is a bracket delimited substring
      * (e.g. /my/{key}/with/{id}).

package/dist/types/TelemetryUtils.d.ts

@@ -49,6 +49,14 @@ export declare class Event implements NewEvent {
  * The `on` function allows code within the same application or service to listen for outgoing events that have been
  * sent via the `record` function.
  *
+ * The utility uses an application specific JWT access token for sending telemetry events. The purpose of using an
+ * application specific JWT token versus user token is to identify a potentially compromised application server. This
+ * also allows the server to send telemetry events on behalf of the user that the user may not otherwise have permission
+ * to send.
+ *
+ * Note: This class is considered a runtime singleton and intentionally uses static state. Do not initialize this
+ * class more than once in your application.
+ *
  * @author Jean-Philippe Steinmetz <rapidrests@gmail.com>
  */
 export declare class EventUtils {
@@ -63,7 +71,7 @@ export declare class EventUtils {
      *
      * @param config The application configuration to use.
      * @param logger The logging utility to use.
-     * @param jwtToken The user's JWT token to send telemetry events on behalf of.
+     * @param jwtToken The application's JWT token to send telemetry events on behalf of.
      */
     static init(config: any, logger: any, jwtToken: string): Promise<void>;
     /**
@@ -81,4 +89,14 @@ export declare class EventUtils {
      * @param callback The function to call when an event is recorded.
      */
     static on(type: string, callback: Function): void;
+    /**
+     * Unregisters a `callback` previously registered via `on()` for the given event `type`. Since `EventUtils` is
+     * a long-lived process-wide singleton, any listener registered dynamically (rather than once at startup) must
+     * eventually be removed via this method or its closure - and anything it captures - is retained for the life
+     * of the process.
+     *
+     * @param type The type of event the callback was registered for.
+     * @param callback The exact function reference passed to `on()`.
+     */
+    static off(type: string, callback: Function): void;
 }

package/dist/types/ValidationUtils.d.ts

@@ -24,7 +24,7 @@ export declare class ValidationUtils {
      */
     static checkEmail(val: string): string;
     /**
-     * Validates that the provided array is not empty.
+     * Validates that the provided array is not empty (nor `null`/`undefined`).
      */
     static checkEmpty(val: Array<any>): Array<any>;
     /**

package/dist/types/index.d.ts

@@ -1,5 +1,6 @@
 export * from "./ApiError.js";
 export * from "./AlertUtils.js";
+export * from "./CacheUtils.js";
 export * from "./ClassLoader.js";
 export * from "./decorators/index.js";
 export * from "./FileUtils.js";
@@ -7,6 +8,7 @@ export * from "./JWTUtils.js";
 export * from "./Logger.js";
 export * from "./MemoryStore.js";
 export * from "./MessagingUtils.js";
+export * from "./NotificationsUtils.js";
 export * from "./ObjectFactory.js";
 export * from "./ObjectUtils.js";
 export * from "./OASUtils.js";

package/dist/types/threads/ThreadPool.d.ts

@@ -20,6 +20,13 @@ export interface WorkerOptions {
     allowTs?: boolean;
     /** The path to the worker file. This must be set when using `ThreadWorkerEntry` as the default entry file. */
     worker?: string;
+    /**
+     * The maximum amount of time, in milliseconds, to wait for all worker threads to report readiness before
+     * `start()` rejects. Default is `ThreadPool.START_TIMEOUT_MS`. Guards against a worker whose entry script
+     * hangs during its own setup and never posts online/emits an error, which would otherwise leave the
+     * returned promise hanging forever with no way to detect or recover.
+     */
+    startupTimeoutMs?: number;
 }
 /**
  * The `ThreadPool` class provides an interface for managing a pool of execution threads that can be used for parallel
@@ -49,6 +56,10 @@ export interface WorkerOptions {
  * @author Jean-Philippe Steinmetz
  */
 export declare class ThreadPool {
+    /** The maximum amount of time, in milliseconds, `stop()` waits for a worker to exit on its own before force-terminating it. */
+    private static readonly STOP_GRACE_PERIOD_MS;
+    /** The default maximum amount of time, in milliseconds, `start()` waits for all workers to report readiness before rejecting. Overridable per-call via `WorkerOptions.startupTimeoutMs`. */
+    private static readonly START_TIMEOUT_MS;
     /** The map of event types to a list of callback functions. */
     private callbacks;
     /** The index of the last worker that was assigned work. */
@@ -61,6 +72,10 @@ export declare class ThreadPool {
     readonly workers: Array<Worker>;
     /** Used to indicate that the pool is shutting down. */
     private shutdown;
+    /** Tracks workers whose "exit" event has already fired, so a dead worker left in `workers` (e.g. exited
+     * without `restartOnExit`) is never sent a message via `postMessage()`, which throws synchronously once a
+     * worker has exited. */
+    private exitedWorkers;
     /**
      * The maximum number of threads that can be created by the pool.
      */
@@ -76,6 +91,20 @@ export declare class ThreadPool {
      * @param logger The Winston logger instance to forward all worker thread logs to.
      */
     constructor(max?: number, logger?: any);
+    /**
+     * @param onRestart Invoked with the replacement `Worker` whenever `restartOnExit` recreates the worker for
+     * `idx`. Lets `start()` re-attach its readiness-tracking listeners to the replacement - without this, a
+     * worker that crashes and is restarted before ever reporting ready would leave `start()`'s returned promise
+     * hanging forever, since nothing would be listening for the *replacement's* readiness signal.
+     */
+    /**
+     * Invokes every callback registered for `type` via `on()`, passing `idx` and optional `data`. Centralizes
+     * the "look up listeners, no-op if none registered" dispatch idiom shared by every worker event handler in
+     * `createWorker()`/`stop()` below, so a future change to how listeners are invoked - or a new message type
+     * that needs routing to a given event - only has to be made in one place instead of risking a hand-copied
+     * site being missed (as happened with WorkerMessageType.ERROR previously falling through to "message").
+     */
+    private dispatch;
     private createWorker;
     /**
      * Initializes the thread pool with the initial worker threads and begins execution.
@@ -85,7 +114,8 @@ export declare class ThreadPool {
      */
     start(options?: WorkerOptions, num?: number): Promise<void>;
     /**
-     * Stops all running thread executions.
+     * Stops all running thread executions. Each worker is given `ThreadPool.STOP_GRACE_PERIOD_MS` to gracefully
+     * finish its own `stop()` and exit on its own before being force-terminated.
      */
     stop(): Promise<void>;
     /**
@@ -101,7 +131,9 @@ export declare class ThreadPool {
      */
     send(msg: any): void;
     /**
-     * Sends the provided message to all worker threads in the pool.
+     * Sends the provided message to all worker threads in the pool. Workers that have already exited (e.g.
+     * crashed with no `restartOnExit`) are silently skipped rather than throwing, so one dead worker doesn't
+     * prevent delivery to every worker after it in the array.
      * @param msg The message to send to all workers.
      */
     sendAll(msg: any): void;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rapidrest/core",
-    "version": "1.14.0",
+    "version": "2.0.0",
     "description": "A collection of common utilities and core functionality for rapidly building RESTful applications.",
     "repository": "https://github.com/rapidrest/core.git",
     "author": "RapidREST <rapidrests@gmail.com>",