@zintrust/core 0.1.25 → 0.1.26

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zintrust/core",
-  "version": "0.1.25",
+  "version": "0.1.26",
   "description": "Production-grade TypeScript backend framework for JavaScript",
   "homepage": "https://zintrust.com",
   "repository": {

package/src/cli/services/VersionChecker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"VersionChecker.d.ts","sourceRoot":"","sources":["../../../../src/cli/services/VersionChecker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,UAAU,kBAAkB;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAUD,UAAU,kBAAkB;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,eAAO,MAAM,cAAc;IACzB;;OAEG;yBACkB,MAAM;IAY3B;;OAEG;iBACU,kBAAkB;IAQ/B;;OAEG;0BACmB,OAAO;IA+B7B;;OAEG;0BACyB,OAAO,CAAC,MAAM,CAAC;IAwB3C;;OAEG;6BACsB,MAAM,UAAU,MAAM,GAAG,MAAM;IAmBxD;;OAEG;oBACmB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IA8BxD;;OAEG;sCAC+B,kBAAkB,GAAG,IAAI;IA4B3D;;OAEG;uBACsB,OAAO,CAAC,IAAI,CAAC;EAWtC,CAAC"}
+{"version":3,"file":"VersionChecker.d.ts","sourceRoot":"","sources":["../../../../src/cli/services/VersionChecker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,UAAU,kBAAkB;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAUD,UAAU,kBAAkB;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,eAAO,MAAM,cAAc;IACzB;;OAEG;yBACkB,MAAM;IAY3B;;OAEG;iBACU,kBAAkB;IAQ/B;;OAEG;0BACmB,OAAO;IA+B7B;;OAEG;0BACyB,OAAO,CAAC,MAAM,CAAC;IAwB3C;;OAEG;6BACsB,MAAM,UAAU,MAAM,GAAG,MAAM;IAuBxD;;OAEG;oBACmB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IA8BxD;;OAEG;sCAC+B,kBAAkB,GAAG,IAAI;IA4B3D;;OAEG;uBACsB,OAAO,CAAC,IAAI,CAAC;EAWtC,CAAC"}

package/src/cli/services/VersionChecker.js

@@ -28,7 +28,7 @@ export const VersionChecker = Object.freeze({
     getConfig() {
         return {
             enabled: process.env['ZINTRUST_VERSION_CHECK'] !== 'false',
-            checkInterval: parseInt(process.env['ZINTRUST_VERSION_CHECK_INTERVAL'] ?? '24', 10),
+            checkInterval: Number.parseInt(process.env['ZINTRUST_VERSION_CHECK_INTERVAL'] ?? '24', 10),
             skipVersionCheck: process.env['ZINTRUST_SKIP_VERSION_CHECK'] === 'true',
         };
     },
@@ -42,15 +42,15 @@ export const VersionChecker = Object.freeze({
             return false;
         }
         // Skip for version commands
-        const args = process.argv.slice(2);
-        if (args.includes('-v') || args.includes('--version') || args.includes('help')) {
+        const args = new Set(process.argv.slice(2));
+        if (args.has('-v') || args.has('--version') || args.has('help')) {
             return false;
         }
         // Check last check time
         const lastCheckKey = 'zintrust_last_version_check';
         const lastCheck = globalThis.localStorage?.getItem?.(lastCheckKey);
         if (lastCheck !== null && lastCheck !== undefined) {
-            const lastCheckTime = parseInt(lastCheck, 10);
+            const lastCheckTime = Number.parseInt(lastCheck, 10);
             const now = Date.now();
             const hoursSinceLastCheck = (now - lastCheckTime) / (1000 * 60 * 60);
             if (hoursSinceLastCheck < config.checkInterval) {
@@ -88,7 +88,11 @@ export const VersionChecker = Object.freeze({
      * Compare versions using semver-like comparison
      */
     compareVersions(current, latest) {
-        const cleanVersion = (version) => version.replace(/^v/, '').replace(/-.*$/, '');
+        const cleanVersion = (version) => {
+            // Remove leading 'v' and trailing pre-release identifiers safely
+            // Using specific patterns instead of greedy quantifiers to prevent ReDoS
+            return version.replace(/^v/, '').replace(/-[^-]*$/, '');
+        };
         const currentParts = cleanVersion(current).split('.').map(Number);
         const latestParts = cleanVersion(latest).split('.').map(Number);
         const maxLength = Math.max(currentParts.length, latestParts.length);

package/src/index.js

@@ -1,11 +1,11 @@
 /**
- * @zintrust/core v0.1.25
+ * @zintrust/core v0.1.26
  *
  * ZinTrust Framework - Production-Grade TypeScript Backend
  * Built for performance, type safety, and exceptional developer experience
  *
  * Build Information:
- *   Built: 2026-01-27T17:04:32.521Z
+ *   Built: 2026-01-27T19:14:04.015Z
  *   Node: >=20.0.0
  *   License: MIT
  *
@@ -21,7 +21,7 @@
  * Available at runtime for debugging and health checks
  */
 export const ZINTRUST_VERSION = '0.1.23';
-export const ZINTRUST_BUILD_DATE = '2026-01-27T17:04:32.494Z'; // Replaced during build
+export const ZINTRUST_BUILD_DATE = '2026-01-27T19:14:03.983Z'; // Replaced during build
 import { Application } from './boot/Application.js';
 import { AwsSigV4 } from './common/index.js';
 import { SignedRequest } from './security/SignedRequest.js';

package/src/tools/queue/LockProvider.d.ts

@@ -7,9 +7,6 @@ import type { LockProvider, LockProviderConfig } from '../../types/Queue';
  * Redis-based Lock Provider Implementation
  */
 export declare function createRedisLockProvider(config: LockProviderConfig): LockProvider;
-/**
- * Memory-based Lock Provider (for testing/sync driver)
- */
 export declare function createMemoryLockProvider(config: LockProviderConfig): LockProvider;
 export declare function registerLockProvider(name: string, provider: LockProvider): void;
 export declare function getLockProvider(name: string): LockProvider | undefined;

package/src/tools/queue/LockProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LockProvider.d.ts","sourceRoot":"","sources":["../../../../src/tools/queue/LockProvider.ts"],"names":[],"mappings":"AACA;;;GAGG;AAGH,OAAO,KAAK,EAGV,YAAY,EACZ,kBAAkB,EAEnB,MAAM,eAAe,CAAC;AAwKvB;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CAWhF;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CA4FjF;AAOD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAG/E;AACD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAEtE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CAS3E"}
+{"version":3,"file":"LockProvider.d.ts","sourceRoot":"","sources":["../../../../src/tools/queue/LockProvider.ts"],"names":[],"mappings":"AACA;;;GAGG;AAGH,OAAO,KAAK,EAGV,YAAY,EACZ,kBAAkB,EAEnB,MAAM,eAAe,CAAC;AAwKvB;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CAWhF;AAYD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CA4FjF;AAOD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAG/E;AACD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAEtE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CAS3E"}

package/src/tools/queue/LockProvider.js

@@ -165,6 +165,12 @@ export function createRedisLockProvider(config) {
 /**
  * Memory-based Lock Provider (for testing/sync driver)
  */
+function globToRegExp(pattern) {
+    // Escape all regex metacharacters, then turn '*' into '.*' as a wildcard
+    const escaped = pattern.replaceAll(/[.*+?^${}()|[\]\\]/g, String.raw `\$&`);
+    const regexSource = escaped.replaceAll(String.raw `\*`, '.*');
+    return new RegExp(`^${regexSource}$`);
+}
 export function createMemoryLockProvider(config) {
     const locks = new Map();
     const prefix = config.prefix ?? ZintrustLang.MEMORY_LOCKS;
@@ -230,8 +236,8 @@ export function createMemoryLockProvider(config) {
             };
         },
         async list(pattern = '*') {
-            // Simple regex match for memory provider
-            const regex = new RegExp(pattern.replace('*', '.*'));
+            // Simple glob-style match for memory provider ('*' as wildcard)
+            const regex = globToRegExp(pattern);
             const keys = [];
             for (const key of locks.keys()) {
                 const strippedKey = key.replace(prefix, '');