@shohaghinfo/aerojs 0.1.0

package/dist/security/totp.js

@@ -0,0 +1,122 @@
+/**
+ * @file totp.ts
+ * @description Zero-dependency implementation of RFC 6238 Time-Based One-Time Password (TOTP)
+ * and RFC 4226 HMAC-Based One-Time Password (HOTP) using node:crypto.
+ */
+import * as crypto from 'node:crypto';
+export class Totp {
+    /**
+     * Generates a base32 TOTP secret and a corresponding otpauth:// URI.
+     */
+    static generateSecret(options = {}) {
+        const length = options.length || 20; // 20 bytes is standard for Google Authenticator (160 bits)
+        const secretBuffer = crypto.randomBytes(length);
+        const base32Secret = this.base32Encode(secretBuffer);
+        let uri = `otpauth://totp/`;
+        const label = encodeURIComponent(options.label || 'AeroJS');
+        uri += label;
+        uri += `?secret=${base32Secret}`;
+        if (options.issuer) {
+            uri += `&issuer=${encodeURIComponent(options.issuer)}`;
+        }
+        return {
+            secret: base32Secret,
+            uri
+        };
+    }
+    /**
+     * Verifies a TOTP token against a secret.
+     * @param token The 6-digit user input token
+     * @param secret The base32 secret
+     * @param options window: number of 30-second steps to allow before/after current time (drift)
+     */
+    static verify(token, secret, options = {}) {
+        const window = options.window ?? 1;
+        const time = options.time || Date.now();
+        const counter = Math.floor(time / 1000 / 30);
+        const secretBuffer = this.base32Decode(secret);
+        // Check current time window, then past windows, then future windows
+        for (let i = -window; i <= window; i++) {
+            const computedToken = this.hotp(secretBuffer, counter + i);
+            // Use timing-safe equal to prevent timing attacks
+            if (crypto.timingSafeEqual(Buffer.from(computedToken), Buffer.from(token.padStart(6, '0')))) {
+                return true;
+            }
+        }
+        return false;
+    }
+    /**
+     * Generates recovery/backup codes for 2FA.
+     * Returns plain codes to show to the user, and hashed codes to store in DB.
+     */
+    static generateBackupCodes(count = 8) {
+        const plainCodes = [];
+        const hashedCodes = [];
+        for (let i = 0; i < count; i++) {
+            // 8 character random hex codes
+            const code = crypto.randomBytes(4).toString('hex').toLowerCase();
+            plainCodes.push(code);
+            const hash = crypto.createHash('sha256').update(code).digest('hex');
+            hashedCodes.push(hash);
+        }
+        return { plainCodes, hashedCodes };
+    }
+    /**
+     * RFC 4226 HOTP algorithm.
+     */
+    static hotp(secret, counter) {
+        const counterBuffer = Buffer.alloc(8);
+        counterBuffer.writeBigInt64BE(BigInt(counter), 0);
+        const hmac = crypto.createHmac('sha1', secret);
+        hmac.update(counterBuffer);
+        const digest = hmac.digest();
+        const offset = digest[digest.length - 1] & 0xf;
+        const binary = ((digest[offset] & 0x7f) << 24) |
+            ((digest[offset + 1] & 0xff) << 16) |
+            ((digest[offset + 2] & 0xff) << 8) |
+            (digest[offset + 3] & 0xff);
+        const otp = binary % 1000000;
+        return otp.toString().padStart(6, '0');
+    }
+    static base32Encode(buffer) {
+        const alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
+        let bits = 0;
+        let value = 0;
+        let output = '';
+        for (let i = 0; i < buffer.length; i++) {
+            value = (value << 8) | buffer[i];
+            bits += 8;
+            while (bits >= 5) {
+                output += alphabet[(value >>> (bits - 5)) & 31];
+                bits -= 5;
+            }
+        }
+        if (bits > 0) {
+            output += alphabet[(value << (5 - bits)) & 31];
+        }
+        return output;
+    }
+    static base32Decode(encoded) {
+        const alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
+        let bits = 0;
+        let value = 0;
+        let index = 0;
+        const output = Buffer.alloc(Math.ceil((encoded.length * 5) / 8));
+        for (let i = 0; i < encoded.length; i++) {
+            const char = encoded[i].toUpperCase();
+            if (char === '=' || char === ' ')
+                continue;
+            const charIndex = alphabet.indexOf(char);
+            if (charIndex === -1)
+                throw new Error('Invalid base32 character');
+            value = (value << 5) | charIndex;
+            bits += 5;
+            if (bits >= 8) {
+                output[index++] = (value >>> (bits - 8)) & 255;
+                bits -= 8;
+            }
+        }
+        return output.subarray(0, index);
+    }
+}
+//# sourceMappingURL=totp.js.map

package/dist/security/totp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.js","sourceRoot":"","sources":["../../src/security/totp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,MAAM,OAAO,IAAI;IACf;;OAEG;IACI,MAAM,CAAC,cAAc,CAAC,UAAgE,EAAE;QAC7F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,2DAA2D;QAChG,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAErD,IAAI,GAAG,GAAG,iBAAiB,CAAC;QAC5B,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC;QAC5D,GAAG,IAAI,KAAK,CAAC;QACb,GAAG,IAAI,WAAW,YAAY,EAAE,CAAC;QAEjC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,GAAG,IAAI,WAAW,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,CAAC;QAED,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,GAAG;SACJ,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,MAAM,CAAC,KAAa,EAAE,MAAc,EAAE,UAA8C,EAAE;QAClG,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;QAE7C,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAE/C,oEAAoE;QACpE,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;YAC3D,kDAAkD;YAClD,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5F,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,mBAAmB,CAAC,KAAK,GAAG,CAAC;QACzC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,+BAA+B;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACjE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,IAAI,CAAC,MAAc,EAAE,OAAe;QACjD,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAElD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,GAAG,CAAC;QAChD,MAAM,MAAM,GACV,CAAC,CAAC,MAAM,CAAC,MAAM,CAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,CAAC;QAE/B,MAAM,GAAG,GAAG,MAAM,GAAG,OAAO,CAAC;QAC7B,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,MAAc;QACxC,MAAM,QAAQ,GAAG,kCAAkC,CAAC;QACpD,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;YAClC,IAAI,IAAI,CAAC,CAAC;YACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,QAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;gBAChD,IAAI,IAAI,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,MAAM,IAAI,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,OAAe;QACzC,MAAM,QAAQ,GAAG,kCAAkC,CAAC;QACpD,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAEjE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;YACvC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;gBAAE,SAAS;YAE3C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,SAAS,KAAK,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAElE,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;YACjC,IAAI,IAAI,CAAC,CAAC;YAEV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;gBACd,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;gBAC/C,IAAI,IAAI,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/security/vault.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @file vault.ts
+ * @description Encrypts and decrypts environment files into a secure .env.vault format
+ * using AES-256-GCM authenticated encryption.
+ */
+export declare class EnvVault {
+    /**
+     * Generates a 32-byte encryption key encoded as hex.
+     */
+    static generateKey(): string;
+    /**
+     * Encrypts the contents of a .env file and writes it to .env.vault.
+     * @param envContent The raw content of the .env file
+     * @param keyHex The 32-byte hex key (AERO_KEY)
+     */
+    static encrypt(envContent: string, keyHex: string): string;
+    /**
+     * Decrypts the contents of a .env.vault file.
+     * @param vaultPayload The encrypted payload from .env.vault
+     * @param keyHex The 32-byte hex key (AERO_KEY)
+     */
+    static decrypt(vaultPayload: string, keyHex: string): string;
+    /**
+     * Syncs a local .env file to a .env.vault file.
+     */
+    static syncToVault(envPath?: string, vaultPath?: string, keyHex?: string): void;
+}
+//# sourceMappingURL=vault.d.ts.map

package/dist/security/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../../src/security/vault.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,qBAAa,QAAQ;IACnB;;OAEG;WACW,WAAW,IAAI,MAAM;IAInC;;;;OAIG;WACW,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAkBjE;;;;OAIG;WACW,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAwBnE;;OAEG;WACW,WAAW,CAAC,OAAO,SAAS,EAAE,SAAS,SAAe,EAAE,MAAM,CAAC,EAAE,MAAM;CAatF"}

package/dist/security/vault.js

@@ -0,0 +1,73 @@
+/**
+ * @file vault.ts
+ * @description Encrypts and decrypts environment files into a secure .env.vault format
+ * using AES-256-GCM authenticated encryption.
+ */
+import * as fs from 'node:fs';
+import * as crypto from 'node:crypto';
+export class EnvVault {
+    /**
+     * Generates a 32-byte encryption key encoded as hex.
+     */
+    static generateKey() {
+        return crypto.randomBytes(32).toString('hex');
+    }
+    /**
+     * Encrypts the contents of a .env file and writes it to .env.vault.
+     * @param envContent The raw content of the .env file
+     * @param keyHex The 32-byte hex key (AERO_KEY)
+     */
+    static encrypt(envContent, keyHex) {
+        const key = Buffer.from(keyHex, 'hex');
+        if (key.length !== 32) {
+            throw new Error('Encryption key must be exactly 32 bytes (64 hex characters).');
+        }
+        const iv = crypto.randomBytes(12); // Standard 96-bit IV for GCM
+        const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
+        let encrypted = cipher.update(envContent, 'utf8', 'hex');
+        encrypted += cipher.final('hex');
+        const authTag = cipher.getAuthTag().toString('hex');
+        // Format: IV:AuthTag:Ciphertext
+        const payload = `${iv.toString('hex')}:${authTag}:${encrypted}`;
+        return payload;
+    }
+    /**
+     * Decrypts the contents of a .env.vault file.
+     * @param vaultPayload The encrypted payload from .env.vault
+     * @param keyHex The 32-byte hex key (AERO_KEY)
+     */
+    static decrypt(vaultPayload, keyHex) {
+        const key = Buffer.from(keyHex, 'hex');
+        if (key.length !== 32) {
+            throw new Error('Decryption key must be exactly 32 bytes (64 hex characters).');
+        }
+        const parts = vaultPayload.trim().split(':');
+        if (parts.length !== 3) {
+            throw new Error('Invalid vault payload format. Expected IV:AuthTag:Ciphertext.');
+        }
+        const [ivHex, authTagHex, encryptedHex] = parts;
+        const iv = Buffer.from(ivHex, 'hex');
+        const authTag = Buffer.from(authTagHex, 'hex');
+        const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
+        decipher.setAuthTag(authTag);
+        let decrypted = decipher.update(encryptedHex, 'hex', 'utf8');
+        decrypted += decipher.final('utf8');
+        return decrypted;
+    }
+    /**
+     * Syncs a local .env file to a .env.vault file.
+     */
+    static syncToVault(envPath = '.env', vaultPath = '.env.vault', keyHex) {
+        if (!fs.existsSync(envPath))
+            throw new Error(`.env file not found at ${envPath}`);
+        const key = keyHex || process.env['AERO_KEY'] || process.env['DOTENV_PRIVATE_KEY'];
+        if (!key)
+            throw new Error('AERO_KEY or DOTENV_PRIVATE_KEY environment variable is required to encrypt.');
+        const envContent = fs.readFileSync(envPath, 'utf8');
+        const encrypted = this.encrypt(envContent, key);
+        // Wrap in standard DOTENV_VAULT format or similar
+        const vaultContent = `#/!\n# This file is encrypted. Do not edit manually.\n# Decrypt using AERO_KEY\nAERO_VAULT="${encrypted}"\n`;
+        fs.writeFileSync(vaultPath, vaultContent);
+    }
+}
+//# sourceMappingURL=vault.js.map

package/dist/security/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../src/security/vault.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,MAAM,OAAO,QAAQ;IACnB;;OAEG;IACI,MAAM,CAAC,WAAW;QACvB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,OAAO,CAAC,UAAkB,EAAE,MAAc;QACtD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,6BAA6B;QAChE,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAE7D,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACzD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEpD,gCAAgC;QAChC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;QAChE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,OAAO,CAAC,YAAoB,EAAE,MAAc;QACxD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;QAChD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAM,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAW,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACjE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAE7B,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAa,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC9D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,WAAW,CAAC,OAAO,GAAG,MAAM,EAAE,SAAS,GAAG,YAAY,EAAE,MAAe;QACnF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;QAElF,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACnF,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;QAEzG,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAEhD,kDAAkD;QAClD,MAAM,YAAY,GAAG,+FAA+F,SAAS,KAAK,CAAC;QACnI,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/session/session-driver.d.ts

@@ -0,0 +1,53 @@
+import { RedisClient } from '../redis/redis-client.js';
+/**
+ * @file session-driver.ts
+ * @description Session Driver interface and base implementations for AeroJS.
+ */
+export interface SessionDriver {
+    read(sessionId: string): Promise<Record<string, unknown>>;
+    write(sessionId: string, data: Record<string, unknown>, ttl: number): Promise<void>;
+    destroy(sessionId: string): Promise<void>;
+    gc(): Promise<void>;
+}
+/**
+ * In-memory session driver (development/testing only).
+ * WARNING: All sessions lost on server restart.
+ */
+export declare class MemorySessionDriver implements SessionDriver {
+    private store;
+    read(sessionId: string): Promise<Record<string, unknown>>;
+    write(sessionId: string, data: Record<string, unknown>, ttl: number): Promise<void>;
+    destroy(sessionId: string): Promise<void>;
+    gc(): Promise<void>;
+}
+/**
+ * File-based session driver.
+ * Suitable for single-server hospital deployments.
+ */
+export declare class FileSessionDriver implements SessionDriver {
+    private dir;
+    constructor(dir?: string);
+    private filePath;
+    read(sessionId: string): Promise<Record<string, unknown>>;
+    write(sessionId: string, data: Record<string, unknown>, ttl: number): Promise<void>;
+    destroy(sessionId: string): Promise<void>;
+    gc(): Promise<void>;
+}
+/**
+ * Redis session driver — recommended for production hospital deployments.
+ * Requires ioredis: npm install ioredis
+ */
+/**
+ * Native Redis session driver using AeroJS zero-dependency Redis client.
+ */
+export declare class RedisSessionDriver implements SessionDriver {
+    private client;
+    private prefix;
+    constructor(redisClient: RedisClient, prefix?: string);
+    private key;
+    read(sessionId: string): Promise<Record<string, unknown>>;
+    write(sessionId: string, data: Record<string, unknown>, ttl: number): Promise<void>;
+    destroy(sessionId: string): Promise<void>;
+    gc(): Promise<void>;
+}
+//# sourceMappingURL=session-driver.d.ts.map

package/dist/session/session-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-driver.d.ts","sourceRoot":"","sources":["../../src/session/session-driver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD;;;GAGG;AAEH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAED;;;GAGG;AACH,qBAAa,mBAAoB,YAAW,aAAa;IACvD,OAAO,CAAC,KAAK,CAA2E;IAE3E,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAUzD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC;CAMjC;AAED;;;GAGG;AACH,qBAAa,iBAAkB,YAAW,aAAa;IACrD,OAAO,CAAC,GAAG,CAAS;gBAER,GAAG,SAAuB;IAItC,OAAO,CAAC,QAAQ;IAMH,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAezD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOzC,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC;CAejC;AAED;;;GAGG;AAEH;;GAEG;AACH,qBAAa,kBAAmB,YAAW,aAAa;IACtD,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAS;gBAEX,WAAW,EAAE,WAAW,EAAE,MAAM,SAAU;IAKtD,OAAO,CAAC,GAAG;IAIE,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAUzD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInF,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC;CAGjC"}

package/dist/session/session-driver.js

@@ -0,0 +1,132 @@
+import { RedisClient } from '../redis/redis-client.js';
+/**
+ * In-memory session driver (development/testing only).
+ * WARNING: All sessions lost on server restart.
+ */
+export class MemorySessionDriver {
+    store = new Map();
+    async read(sessionId) {
+        const entry = this.store.get(sessionId);
+        if (!entry)
+            return {};
+        if (Date.now() > entry.expiresAt) {
+            this.store.delete(sessionId);
+            return {};
+        }
+        return { ...entry.data };
+    }
+    async write(sessionId, data, ttl) {
+        this.store.set(sessionId, { data: { ...data }, expiresAt: Date.now() + ttl * 1000 });
+    }
+    async destroy(sessionId) {
+        this.store.delete(sessionId);
+    }
+    async gc() {
+        const now = Date.now();
+        for (const [key, val] of this.store) {
+            if (now > val.expiresAt)
+                this.store.delete(key);
+        }
+    }
+}
+/**
+ * File-based session driver.
+ * Suitable for single-server hospital deployments.
+ */
+export class FileSessionDriver {
+    dir;
+    constructor(dir = './storage/sessions') {
+        this.dir = dir;
+    }
+    filePath(id) {
+        // Sanitize to prevent path traversal
+        const safe = id.replace(/[^a-zA-Z0-9_-]/g, '');
+        return `${this.dir}/${safe}.json`;
+    }
+    async read(sessionId) {
+        try {
+            const { readFile } = await import('node:fs/promises');
+            const raw = await readFile(this.filePath(sessionId), 'utf-8');
+            const parsed = JSON.parse(raw);
+            if (Date.now() > parsed.expiresAt) {
+                await this.destroy(sessionId);
+                return {};
+            }
+            return parsed.data;
+        }
+        catch {
+            return {};
+        }
+    }
+    async write(sessionId, data, ttl) {
+        const { writeFile, mkdir } = await import('node:fs/promises');
+        await mkdir(this.dir, { recursive: true });
+        const payload = JSON.stringify({ data, expiresAt: Date.now() + ttl * 1000 });
+        await writeFile(this.filePath(sessionId), payload, 'utf-8');
+    }
+    async destroy(sessionId) {
+        try {
+            const { unlink } = await import('node:fs/promises');
+            await unlink(this.filePath(sessionId));
+        }
+        catch { }
+    }
+    async gc() {
+        const { readdir, readFile, unlink } = await import('node:fs/promises');
+        try {
+            const files = await readdir(this.dir);
+            const now = Date.now();
+            for (const file of files) {
+                if (!file.endsWith('.json'))
+                    continue;
+                try {
+                    const raw = await readFile(`${this.dir}/${file}`, 'utf-8');
+                    const parsed = JSON.parse(raw);
+                    if (now > parsed.expiresAt)
+                        await unlink(`${this.dir}/${file}`);
+                }
+                catch { }
+            }
+        }
+        catch { }
+    }
+}
+/**
+ * Redis session driver — recommended for production hospital deployments.
+ * Requires ioredis: npm install ioredis
+ */
+/**
+ * Native Redis session driver using AeroJS zero-dependency Redis client.
+ */
+export class RedisSessionDriver {
+    client;
+    prefix;
+    constructor(redisClient, prefix = 'sess:') {
+        this.client = redisClient;
+        this.prefix = prefix;
+    }
+    key(sessionId) {
+        return `${this.prefix}${sessionId}`;
+    }
+    async read(sessionId) {
+        try {
+            const raw = await this.client.get(this.key(sessionId));
+            if (!raw)
+                return {};
+            return JSON.parse(raw);
+        }
+        catch {
+            return {};
+        }
+    }
+    async write(sessionId, data, ttl) {
+        await this.client.setex(this.key(sessionId), ttl, JSON.stringify(data));
+    }
+    async destroy(sessionId) {
+        await this.client.del(this.key(sessionId));
+    }
+    async gc() {
+        // Redis TTL handles expiry automatically — no-op
+    }
+}
+//# sourceMappingURL=session-driver.js.map

package/dist/session/session-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-driver.js","sourceRoot":"","sources":["../../src/session/session-driver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAavD;;;GAGG;AACH,MAAM,OAAO,mBAAmB;IACtB,KAAK,GAAG,IAAI,GAAG,EAAgE,CAAC;IAEjF,KAAK,CAAC,IAAI,CAAC,SAAiB;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAA6B,EAAE,GAAW;QAC9E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;IACvF,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,SAAiB;QACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAEM,KAAK,CAAC,EAAE;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACpB,GAAG,CAAS;IAEpB,YAAY,GAAG,GAAG,oBAAoB;QACpC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAEO,QAAQ,CAAC,EAAU;QACzB,qCAAqC;QACrC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC/C,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC;IACpC,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,SAAiB;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyD,CAAC;YACvF,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC9B,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAA6B,EAAE,GAAW;QAC9E,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC9D,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;QAC7E,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,SAAiB;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACpD,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAEM,KAAK,CAAC,EAAE;QACb,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACtC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;oBAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;oBACxD,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS;wBAAE,MAAM,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;gBAClE,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;CACF;AAED;;;GAGG;AAEH;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACrB,MAAM,CAAc;IACpB,MAAM,CAAS;IAEvB,YAAY,WAAwB,EAAE,MAAM,GAAG,OAAO;QACpD,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEO,GAAG,CAAC,SAAiB;QAC3B,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;IACtC,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,SAAiB;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YACvD,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAA6B,EAAE,GAAW;QAC9E,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,SAAiB;QACpC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7C,CAAC;IAEM,KAAK,CAAC,EAAE;QACb,iDAAiD;IACnD,CAAC;CACF"}

package/dist/session/session-manager.d.ts

@@ -0,0 +1,100 @@
+/**
+ * @file session-manager.ts
+ * @description Server-side Session Manager for AeroJS.
+ * Provides a clean API for reading/writing session data per HTTP request.
+ * Hospital use: Cashier shift sessions, CSRF tokens, flash messages, terminal binding.
+ */
+import type { AeroContext } from '../core/context.js';
+import type { SessionDriver } from './session-driver.js';
+import type { Middleware } from '../core/types.js';
+export interface SessionConfig {
+    /**
+     * Session driver. Default: memory (use redis/file for production).
+     */
+    driver?: SessionDriver;
+    /**
+     * Session cookie name. Default: 'aero_session'.
+     */
+    cookieName?: string;
+    /**
+     * Session lifetime in seconds. Default: 28800 (8 hours = one hospital shift).
+     */
+    lifetime?: number;
+    /**
+     * Cookie security options.
+     */
+    cookie?: {
+        httpOnly?: boolean;
+        secure?: boolean;
+        sameSite?: 'strict' | 'lax' | 'none' | boolean;
+        path?: string;
+        domain?: string;
+    };
+}
+/**
+ * Per-request Session Manager.
+ * Loaded lazily from the driver on first access, written back at response end.
+ */
+export declare class SessionManager {
+    private sessionId;
+    private data;
+    private _loaded;
+    private _dirty;
+    private readonly driver;
+    private readonly config;
+    private readonly ctx;
+    constructor(ctx: AeroContext, sessionId: string, config: Required<SessionConfig>);
+    /**
+     * Lazily load session data from the driver.
+     */
+    private ensureLoaded;
+    /** Get a session value. */
+    get<T = unknown>(key: string): Promise<T | undefined>;
+    /** Get all session data. */
+    all(): Promise<Record<string, unknown>>;
+    /** Set a session value. */
+    put(key: string, value: unknown): Promise<void>;
+    /** Check if a session key exists. */
+    has(key: string): Promise<boolean>;
+    /** Remove a session key. */
+    forget(key: string): Promise<void>;
+    /** Clear all session data. */
+    flush(): Promise<void>;
+    /**
+     * Set or get a flash message (single-use — removed on next request).
+     * Hospital use: "Shift closed successfully" message after cashier close.
+     */
+    flash(key: string, value?: unknown): Promise<unknown>;
+    /**
+     * Update session lifetime for "remember me" functionality.
+     */
+    setExpiry(_seconds: number): Promise<void>;
+    /**
+     * Regenerate session ID to prevent session fixation attacks.
+     * Call this after login and logout.
+     */
+    regenerate(): Promise<void>;
+    /**
+     * Destroy the current session completely.
+     */
+    destroy(): Promise<void>;
+    /**
+     * Persist session data to driver (called automatically at end of request).
+     */
+    commit(): Promise<void>;
+    private writeSessionCookie;
+    getId(): string;
+}
+/**
+ * Global Session Plugin factory.
+ * Attaches ctx.session to every request and auto-commits at response end.
+ *
+ * @example
+ * app.use(sessionPlugin({
+ *   driver: new RedisSessionDriver(redisClient),
+ *   lifetime: 8 * 3600, // 8-hour hospital shift
+ *   cookie: { httpOnly: true, secure: true, sameSite: 'Strict' }
+ * }));
+ */
+export declare function sessionPlugin(config?: SessionConfig): Middleware;
+//# sourceMappingURL=session-manager.d.ts.map

package/dist/session/session-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/session/session-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;IAEvB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,MAAM,CAAC,EAAE;QACP,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;QAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,IAAI,CAA+B;IAC3C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;gBAEtB,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC;IAOhF;;OAEG;YACW,YAAY;IAM1B,2BAA2B;IACd,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAKlE,4BAA4B;IACf,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAKpD,2BAA2B;IACd,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAM5D,qCAAqC;IACxB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK/C,4BAA4B;IACf,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM/C,8BAA8B;IACjB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAMnC;;;OAGG;IACU,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAclE;;OAEG;IACU,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD;;;OAGG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAaxC;;OAEG;IACU,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IASrC;;OAEG;IACU,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAQpC,OAAO,CAAC,kBAAkB;IAUnB,KAAK,IAAI,MAAM;CAGvB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,MAAM,GAAE,aAAkB,GAAG,UAAU,CA+BpE"}