@zintrust/cloudflare-kv-proxy 0.9.3 → 1.5.0

package/dist/build-manifest.json

@@ -1,15 +1,15 @@
 {
   "name": "@zintrust/cloudflare-kv-proxy",
-  "version": "0.9.3",
-  "buildDate": "2026-04-22T15:46:37.893Z",
+  "version": "1.1.0",
+  "buildDate": "2026-04-23T23:14:58.658Z",
   "buildEnvironment": {
-    "node": "v20.20.2",
-    "platform": "linux",
-    "arch": "x64"
+    "node": "v22.22.1",
+    "platform": "darwin",
+    "arch": "arm64"
   },
   "git": {
-    "commit": "552dfdf4",
-    "branch": "master"
+    "commit": "ade51fe7",
+    "branch": "release"
   },
   "package": {
     "engines": {
@@ -29,13 +29,17 @@
       "size": 5398,
       "sha256": "5be1bc4b1ad88b1980c28e5ca45c1e564f44466bd5d0cda8bc07403031ce87a1"
     },
+    "build-manifest.json": {
+      "size": 1112,
+      "sha256": "dde4348c9d2259bd687e64f0494400c0d7cc553be309e9a07788559de5725745"
+    },
     "index.d.ts": {
-      "size": 1352,
-      "sha256": "549fb10f7f52c85ed38ee9f6627c43579b77b164f2791747b5daa760e50aab53"
+      "size": 1335,
+      "sha256": "b616e14ae1faa6abafb66b7a79511fd7822a3a58243bf8033cf3d67562bf2a3b"
     },
     "index.js": {
-      "size": 12757,
-      "sha256": "2eb9df33f79a8c1aee5f5c81126e0534a3704c07482b62eec451f6d2093fe697"
+      "size": 11682,
+      "sha256": "5ee2ac34141f1ba9e595ef2baaff4ae2fc30e32b5135bc3862a0b7a6dfa4c604"
     }
   }
 }

package/dist/index.d.ts

@@ -12,9 +12,9 @@ type KVListResult = {
 type KVNamespace = {
     get: {
         (key: string): Promise<string | null>;
-        (key: string, type: 'json'): Promise<unknown | null>;
+        (key: string, type: 'json'): Promise<unknown>;
         (key: string, type: 'arrayBuffer'): Promise<ArrayBuffer | null>;
-        (key: string, type: KvGetType): Promise<unknown | ArrayBuffer | string | null>;
+        (key: string, type: KvGetType): Promise<ArrayBuffer | string | null>;
     };
     put: (key: string, value: string, options?: KVNamespacePutOptions) => Promise<void>;
     delete: (key: string) => Promise<void>;

package/dist/index.js

@@ -1,4 +1,4 @@
-import { ErrorHandler, RequestValidator, SigningService } from '@zintrust/core/proxy';
+import { ErrorHandler, RequestValidator, WorkerSigning } from '@zintrust/core/proxy';
 const DEFAULT_SIGNING_WINDOW_MS = 60_000;
 const DEFAULT_MAX_BODY_BYTES = 128 * 1024;
 const DEFAULT_LIST_LIMIT = 100;
@@ -62,40 +62,12 @@ const parseOptionalJson = (text) => {
     const successResult = parsed;
     return { ok: true, payload: successResult.value };
 };
-const loadSigningSecret = (env) => {
-    const direct = typeof env.KV_REMOTE_SECRET === 'string' ? env.KV_REMOTE_SECRET.trim() : '';
-    if (direct !== '')
-        return direct;
-    const fallback = typeof env.APP_KEY === 'string' ? env.APP_KEY.trim() : '';
-    if (fallback !== '')
-        return fallback;
-    return null;
-};
-const verifyNonceKv = async (kv, keyId, nonce, ttlMs) => {
-    const ttlSeconds = Math.max(1, Math.ceil(ttlMs / 1000));
-    const storageKey = `nonce:${keyId}:${nonce}`;
-    const existing = await kv.get(storageKey);
-    if (existing !== null)
-        return false;
-    await kv.put(storageKey, '1', { expirationTtl: ttlSeconds });
-    return true;
-};
 const verifySignedRequest = async (request, env, bodyBytes) => {
-    const secret = loadSigningSecret(env);
-    if (secret === null) {
-        return toErrorResponse(500, 'CONFIG_ERROR', 'Missing signing secret (KV_REMOTE_SECRET or APP_KEY)');
-    }
-    const windowMs = getEnvInt(env, 'ZT_PROXY_SIGNING_WINDOW_MS', DEFAULT_SIGNING_WINDOW_MS);
-    const verifyResult = await SigningService.verifyWithKeyProvider({
-        method: request.method,
-        url: request.url,
-        body: bodyBytes,
-        headers: request.headers,
-        windowMs,
-        getSecretForKeyId: async (_keyId) => secret,
-        verifyNonce: env.ZT_NONCES === undefined
-            ? undefined
-            : async (keyId, nonce, ttlMs) => verifyNonceKv(env.ZT_NONCES, keyId, nonce, ttlMs),
+    const verifyResult = await WorkerSigning.verifySignedRequest(request, env, bodyBytes, {
+        secretEnvVar: 'KV_REMOTE_SECRET',
+        missingSecretStatus: 500,
+        missingSecretMessage: 'Missing signing secret (KV_REMOTE_SECRET or APP_KEY)',
+        defaultSigningWindowMs: DEFAULT_SIGNING_WINDOW_MS,
     });
     if (verifyResult.ok === false) {
         return toErrorResponse(verifyResult.status, verifyResult.code, verifyResult.message);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zintrust/cloudflare-kv-proxy",
-  "version": "0.9.3",
+  "version": "1.5.0",
   "description": "Cloudflare KV proxy package for ZinTrust.",
   "type": "module",
   "private": false,
@@ -20,7 +20,7 @@
     "access": "public"
   },
   "peerDependencies": {
-    "@zintrust/core": "^0.9.2"
+    "@zintrust/core": "*"
   },
   "keywords": [
     "zintrust",
@@ -34,4 +34,4 @@
     "prepublishOnly": "npm run build",
     "type-check": "tsc -p tsconfig.json --noEmit"
   }
-}
+}