@zintrust/core 0.1.39 → 0.1.41

package/src/orm/adapters/PostgreSQLProxyAdapter.js

@@ -0,0 +1,147 @@
+/* eslint-disable @typescript-eslint/require-await */
+/**
+ * PostgreSQL Proxy Adapter (HTTP)
+ *
+ * Used in Cloudflare Workers when POSTGRES_PROXY_URL is configured.
+ */
+import { Env } from '../../config/env.js';
+import { ErrorFactory } from '../../exceptions/ZintrustError.js';
+import { AdaptersEnum } from '../../migrations/enum/index.js';
+import { QueryBuilder } from '../QueryBuilder.js';
+import { ensureSignedSettings, isRecord, requestSignedProxy, } from '../adapters/SqlProxyAdapterUtils.js';
+const resolveBaseUrl = () => {
+    const explicit = Env.POSTGRES_PROXY_URL.trim();
+    if (explicit !== '')
+        return explicit;
+    const host = Env.POSTGRES_PROXY_HOST || '127.0.0.1';
+    const port = Env.POSTGRES_PROXY_PORT;
+    return `http://${host}:${port}`;
+};
+const buildProxySettings = () => {
+    const baseUrl = resolveBaseUrl();
+    const keyId = Env.POSTGRES_PROXY_KEY_ID ?? '';
+    const secret = Env.POSTGRES_PROXY_SECRET ?? '';
+    const timeoutMs = Env.POSTGRES_PROXY_TIMEOUT_MS;
+    return { baseUrl, keyId, secret, timeoutMs };
+};
+const buildSignedProxyConfig = (settings) => ({
+    settings,
+    missingUrlMessage: 'PostgreSQL proxy URL is missing (POSTGRES_PROXY_URL)',
+    missingCredentialsMessage: 'PostgreSQL proxy signing credentials are missing (POSTGRES_PROXY_KEY_ID / POSTGRES_PROXY_SECRET)',
+    messages: {
+        unauthorized: 'PostgreSQL proxy unauthorized',
+        forbidden: 'PostgreSQL proxy forbidden',
+        rateLimited: 'PostgreSQL proxy rate limited',
+        rejected: 'PostgreSQL proxy rejected request',
+        error: 'PostgreSQL proxy error',
+        timedOut: 'PostgreSQL proxy request timed out',
+    },
+});
+const isQueryResponse = (value) => isRecord(value) && Array.isArray(value['rows']) && typeof value['rowCount'] === 'number';
+const isQueryOneResponse = (value) => isRecord(value) && 'row' in value;
+const normalizeLastInsertId = (value) => {
+    if (typeof value === 'number' || typeof value === 'string' || typeof value === 'bigint') {
+        return value;
+    }
+    return undefined;
+};
+const extractRowId = (row) => {
+    if (!isRecord(row))
+        return undefined;
+    return normalizeLastInsertId(row['id']);
+};
+const getExecMeta = (value) => {
+    if (!isRecord(value) || typeof value['ok'] !== 'boolean')
+        return { changes: 0 };
+    const meta = value['meta'];
+    if (!isRecord(meta))
+        return { changes: 0 };
+    const changes = typeof meta['changes'] === 'number' ? meta['changes'] : 0;
+    return { changes };
+};
+const toQueryResult = (out) => {
+    if (isQueryResponse(out)) {
+        return {
+            rows: out.rows,
+            rowCount: out.rowCount,
+            lastInsertId: extractRowId(out.rows[0]),
+        };
+    }
+    if (isQueryOneResponse(out)) {
+        const row = out.row ?? null;
+        return {
+            rows: row ? [row] : [],
+            rowCount: row ? 1 : 0,
+            lastInsertId: extractRowId(row),
+        };
+    }
+    const meta = getExecMeta(out);
+    return { rows: [], rowCount: meta.changes };
+};
+const requestProxy = async (settings, path, payload) => {
+    return requestSignedProxy(buildSignedProxyConfig(settings), path, payload);
+};
+export const PostgreSQLProxyAdapter = Object.freeze({
+    create(_config) {
+        let connected = true;
+        const settings = buildProxySettings();
+        return {
+            async connect() {
+                ensureSignedSettings(buildSignedProxyConfig(settings));
+                connected = true;
+            },
+            async disconnect() {
+                connected = true;
+            },
+            async query(sql, parameters) {
+                if (!connected)
+                    throw ErrorFactory.createConnectionError('Database not connected');
+                const out = await requestProxy(settings, '/zin/postgres/query', {
+                    sql,
+                    params: parameters,
+                });
+                return toQueryResult(out);
+            },
+            async queryOne(sql, parameters) {
+                if (!connected)
+                    throw ErrorFactory.createConnectionError('Database not connected');
+                const out = await requestProxy(settings, '/zin/postgres/queryOne', {
+                    sql,
+                    params: parameters,
+                });
+                return out.row ?? null;
+            },
+            async ping() {
+                if (!connected)
+                    throw ErrorFactory.createConnectionError('Database not connected');
+                await this.queryOne(QueryBuilder.create('').select('1').toSQL(), []);
+            },
+            async transaction(callback) {
+                if (!connected)
+                    throw ErrorFactory.createConnectionError('Database not connected');
+                try {
+                    return await callback(this);
+                }
+                catch (error) {
+                    throw ErrorFactory.createTryCatchError('PostgreSQL proxy transaction failed', error);
+                }
+            },
+            async rawQuery(sql, parameters = []) {
+                if (!connected)
+                    throw ErrorFactory.createConnectionError('Database not connected');
+                const out = await this.query(sql, parameters);
+                return out.rows;
+            },
+            getType() {
+                return AdaptersEnum.postgresql;
+            },
+            isConnected() {
+                return connected;
+            },
+            getPlaceholder(index) {
+                return `$${index}`;
+            },
+        };
+    },
+});
+export default PostgreSQLProxyAdapter;

package/src/orm/adapters/ProxyCache.d.ts

@@ -0,0 +1,9 @@
+import type { QueryResult } from '../DatabaseAdapter';
+export declare const ProxyCache: Readonly<{
+    create(): Readonly<{
+        get(key: string): QueryResult | null;
+        set(key: string, data: QueryResult): void;
+        clear(): void;
+    }>;
+}>;
+//# sourceMappingURL=ProxyCache.d.ts.map

package/src/orm/adapters/ProxyCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProxyCache.d.ts","sourceRoot":"","sources":["../../../../src/orm/adapters/ProxyCache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AASxD,eAAO,MAAM,UAAU;;iBAKR,MAAM,GAAG,WAAW,GAAG,IAAI;iBAU3B,MAAM,QAAQ,WAAW,GAAG,IAAI;iBAIhC,IAAI;;EAKjB,CAAC"}

package/src/orm/adapters/ProxyCache.js

@@ -0,0 +1,24 @@
+const CACHE_TTL_MS = 5000;
+export const ProxyCache = Object.freeze({
+    create() {
+        const cache = new Map();
+        return Object.freeze({
+            get(key) {
+                const entry = cache.get(key);
+                if (!entry)
+                    return null;
+                if (Date.now() - entry.timestamp > CACHE_TTL_MS) {
+                    cache.delete(key);
+                    return null;
+                }
+                return entry.data;
+            },
+            set(key, data) {
+                cache.set(key, { data, timestamp: Date.now() });
+            },
+            clear() {
+                cache.clear();
+            },
+        });
+    },
+});

package/src/orm/adapters/ProxySignedRequest.d.ts

@@ -0,0 +1,11 @@
+export declare const createSignedProxyRequest: (input: {
+    url: string;
+    body: string;
+    keyId: string;
+    secret: string;
+    missingCredentialsMessage: string;
+}) => Promise<{
+    headers: Record<string, string>;
+    body: string;
+}>;
+//# sourceMappingURL=ProxySignedRequest.d.ts.map

package/src/orm/adapters/ProxySignedRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProxySignedRequest.d.ts","sourceRoot":"","sources":["../../../../src/orm/adapters/ProxySignedRequest.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,wBAAwB,GAAU,OAAO;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB,EAAE,MAAM,CAAC;CACnC,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CA4B5D,CAAC"}

package/src/orm/adapters/ProxySignedRequest.js

@@ -0,0 +1,30 @@
+import { ErrorFactory } from '../../exceptions/ZintrustError.js';
+import { normalizeSigningCredentials } from '../../proxy/SigningService.js';
+import { SignedRequest } from '../../security/SignedRequest.js';
+import { buildSigningUrl } from '../adapters/ProxySigningPath.js';
+export const createSignedProxyRequest = async (input) => {
+    const creds = normalizeSigningCredentials({ keyId: input.keyId, secret: input.secret });
+    if (creds.keyId.trim() === '' || creds.secret.trim() === '') {
+        throw ErrorFactory.createConfigError(input.missingCredentialsMessage);
+    }
+    const urlObj = new URL(input.url);
+    const signingUrl = buildSigningUrl(urlObj, input.url);
+    const signResult = await SignedRequest.createHeaders({
+        method: 'POST',
+        url: signingUrl,
+        body: input.body,
+        keyId: creds.keyId,
+        secret: creds.secret,
+    });
+    return {
+        headers: {
+            'content-type': 'application/json',
+            'x-zt-key-id': signResult['x-zt-key-id'],
+            'x-zt-timestamp': signResult['x-zt-timestamp'],
+            'x-zt-nonce': signResult['x-zt-nonce'],
+            'x-zt-body-sha256': signResult['x-zt-body-sha256'],
+            'x-zt-signature': signResult['x-zt-signature'],
+        },
+        body: input.body,
+    };
+};

package/src/orm/adapters/ProxySigningPath.d.ts

@@ -0,0 +1,3 @@
+export declare const resolveSigningPrefix: (baseUrl: string) => string | undefined;
+export declare const buildSigningUrl: (requestUrl: URL, baseUrl: string) => URL;
+//# sourceMappingURL=ProxySigningPath.d.ts.map

package/src/orm/adapters/ProxySigningPath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProxySigningPath.d.ts","sourceRoot":"","sources":["../../../../src/orm/adapters/ProxySigningPath.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,GAAI,SAAS,MAAM,KAAG,MAAM,GAAG,SAU/D,CAAC;AAEF,eAAO,MAAM,eAAe,GAAI,YAAY,GAAG,EAAE,SAAS,MAAM,KAAG,GAYlE,CAAC"}

package/src/orm/adapters/ProxySigningPath.js

@@ -0,0 +1,25 @@
+export const resolveSigningPrefix = (baseUrl) => {
+    try {
+        const parsed = new URL(baseUrl);
+        const pathname = parsed.pathname;
+        const path = pathname.endsWith('/') ? pathname.slice(0, -1) : pathname;
+        if (path === '' || path === '/')
+            return undefined;
+        return path;
+    }
+    catch {
+        return undefined;
+    }
+};
+export const buildSigningUrl = (requestUrl, baseUrl) => {
+    const prefix = resolveSigningPrefix(baseUrl);
+    if (typeof prefix !== 'string' || prefix.trim() === '')
+        return requestUrl;
+    if (requestUrl.pathname === prefix || requestUrl.pathname.startsWith(`${prefix}/`)) {
+        const signingUrl = new URL(requestUrl.toString());
+        const stripped = requestUrl.pathname.slice(prefix.length);
+        signingUrl.pathname = stripped.startsWith('/') ? stripped : `/${stripped}`;
+        return signingUrl;
+    }
+    return requestUrl;
+};

package/src/orm/adapters/SqlProxyAdapterUtils.d.ts

@@ -0,0 +1,19 @@
+import { type RemoteSignedJsonSettings } from '../../common/RemoteSignedJson';
+export type ProxySettings = {
+    baseUrl: string;
+    keyId?: string;
+    secret?: string;
+    timeoutMs: number;
+    signaturePathPrefixToStrip?: string;
+};
+export type SignedProxyConfig = {
+    settings: ProxySettings;
+    missingUrlMessage: string;
+    missingCredentialsMessage: string;
+    messages: RemoteSignedJsonSettings['messages'];
+};
+export declare const buildSignedSettings: (config: SignedProxyConfig) => RemoteSignedJsonSettings;
+export declare const ensureSignedSettings: (config: SignedProxyConfig) => RemoteSignedJsonSettings;
+export declare const requestSignedProxy: <T>(config: SignedProxyConfig, path: string, payload: Record<string, unknown>) => Promise<T>;
+export declare const isRecord: (value: unknown) => value is Record<string, unknown>;
+//# sourceMappingURL=SqlProxyAdapterUtils.d.ts.map

package/src/orm/adapters/SqlProxyAdapterUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqlProxyAdapterUtils.d.ts","sourceRoot":"","sources":["../../../../src/orm/adapters/SqlProxyAdapterUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAK3F,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,aAAa,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yBAAyB,EAAE,MAAM,CAAC;IAClC,QAAQ,EAAE,wBAAwB,CAAC,UAAU,CAAC,CAAC;CAChD,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,QAAQ,iBAAiB,KAAG,wBAiB/D,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAI,QAAQ,iBAAiB,KAAG,wBAYhE,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAU,CAAC,EACxC,QAAQ,iBAAiB,EACzB,MAAM,MAAM,EACZ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,OAAO,CAAC,CAAC,CAGX,CAAC;AAEF,eAAO,MAAM,QAAQ,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAC5B,CAAC"}

package/src/orm/adapters/SqlProxyAdapterUtils.js

@@ -0,0 +1,35 @@
+import { RemoteSignedJson } from '../../common/RemoteSignedJson.js';
+import { ErrorFactory } from '../../exceptions/ZintrustError.js';
+import { resolveSigningPrefix } from '../adapters/ProxySigningPath.js';
+import { normalizeSigningCredentials } from '../../proxy/SigningService.js';
+export const buildSignedSettings = (config) => {
+    const creds = normalizeSigningCredentials({
+        keyId: config.settings.keyId ?? '',
+        secret: config.settings.secret ?? '',
+    });
+    return {
+        baseUrl: config.settings.baseUrl,
+        keyId: creds.keyId,
+        secret: creds.secret,
+        timeoutMs: config.settings.timeoutMs,
+        signaturePathPrefixToStrip: config.settings.signaturePathPrefixToStrip ?? resolveSigningPrefix(config.settings.baseUrl),
+        missingUrlMessage: config.missingUrlMessage,
+        missingCredentialsMessage: config.missingCredentialsMessage,
+        messages: config.messages,
+    };
+};
+export const ensureSignedSettings = (config) => {
+    const signedSettings = buildSignedSettings(config);
+    if (signedSettings.baseUrl.trim() === '') {
+        throw ErrorFactory.createConfigError(config.missingUrlMessage);
+    }
+    if (signedSettings.keyId.trim() === '' || signedSettings.secret.trim() === '') {
+        throw ErrorFactory.createConfigError(config.missingCredentialsMessage);
+    }
+    return signedSettings;
+};
+export const requestSignedProxy = async (config, path, payload) => {
+    const signedSettings = ensureSignedSettings(config);
+    return RemoteSignedJson.request(signedSettings, path, payload);
+};
+export const isRecord = (value) => typeof value === 'object' && value !== null;

package/src/orm/adapters/SqlServerProxyAdapter.d.ts

@@ -0,0 +1,3 @@
+import type { IDatabaseAdapter } from '../DatabaseAdapter';
+export declare function createSqlServerProxyAdapter(): IDatabaseAdapter;
+//# sourceMappingURL=SqlServerProxyAdapter.d.ts.map

package/src/orm/adapters/SqlServerProxyAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqlServerProxyAdapter.d.ts","sourceRoot":"","sources":["../../../../src/orm/adapters/SqlServerProxyAdapter.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAe,MAAM,sBAAsB,CAAC;AAyF1E,wBAAgB,2BAA2B,IAAI,gBAAgB,CAsF9D"}

package/src/orm/adapters/SqlServerProxyAdapter.js

@@ -0,0 +1,146 @@
+import { Env } from '../../config/env.js';
+import { Logger } from '../../config/logger.js';
+import { ErrorFactory } from '../../exceptions/ZintrustError.js';
+import { createSignedProxyRequest } from '../adapters/ProxySignedRequest.js';
+const cache = new Map();
+const CACHE_TTL_MS = 5000;
+const getCacheKey = (sql, params) => {
+    return `${sql}:${JSON.stringify(params)}`;
+};
+const getCachedResult = (key) => {
+    const entry = cache.get(key);
+    if (!entry)
+        return null;
+    if (Date.now() - entry.timestamp > CACHE_TTL_MS) {
+        cache.delete(key);
+        return null;
+    }
+    return entry.data;
+};
+const setCachedResult = (key, data) => {
+    cache.set(key, { data, timestamp: Date.now() });
+};
+const resolveProxyUrl = () => {
+    const url = Env.get('SQLSERVER_PROXY_URL', '');
+    if (typeof url === 'string' && url.trim() !== '')
+        return url;
+    const host = Env.get('SQLSERVER_PROXY_HOST', '127.0.0.1');
+    const port = Env.getInt('SQLSERVER_PROXY_PORT', 8793);
+    return `http://${host}:${port}`;
+};
+const createSignedRequest = async (url, body) => {
+    return createSignedProxyRequest({
+        url,
+        body,
+        keyId: Env.get('SQLSERVER_PROXY_KEY_ID', ''),
+        secret: Env.get('SQLSERVER_PROXY_SECRET', ''),
+        missingCredentialsMessage: 'SQL Server proxy signing credentials are missing (SQLSERVER_PROXY_KEY_ID / SQLSERVER_PROXY_SECRET)',
+    });
+};
+const sendQuery = async (sql, params) => {
+    const proxyUrl = resolveProxyUrl();
+    const payload = { sql, params };
+    const body = JSON.stringify(payload);
+    const { headers, body: signedBody } = await createSignedRequest(proxyUrl, body);
+    const timeout = Env.getInt('SQLSERVER_PROXY_TIMEOUT_MS', 30000);
+    const controller = new AbortController();
+    const timeoutId = globalThis.setTimeout(() => controller.abort(), timeout);
+    try {
+        const response = await fetch(proxyUrl, {
+            method: 'POST',
+            headers,
+            body: signedBody,
+            signal: controller.signal,
+        });
+        clearTimeout(timeoutId);
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw ErrorFactory.createDatabaseError(`SQL Server proxy error: ${errorText}`);
+        }
+        const result = (await response.json());
+        return result;
+    }
+    catch (error) {
+        clearTimeout(timeoutId);
+        if (error.name === 'AbortError') {
+            throw ErrorFactory.createGeneralError('SQL Server proxy request timed out');
+        }
+        throw error;
+    }
+};
+export function createSqlServerProxyAdapter() {
+    let connected = false;
+    let inTransaction = false;
+    return {
+        // eslint-disable-next-line @typescript-eslint/require-await
+        async connect() {
+            const proxyUrl = resolveProxyUrl();
+            Logger.info(`Connecting to SQL Server via proxy: ${proxyUrl}`);
+            connected = true;
+        },
+        // eslint-disable-next-line @typescript-eslint/require-await
+        async disconnect() {
+            connected = false;
+            inTransaction = false;
+            cache.clear();
+            Logger.info('Disconnected from SQL Server proxy');
+        },
+        async query(sql, parameters) {
+            if (!connected) {
+                throw ErrorFactory.createConnectionError('Not connected to SQL Server proxy');
+            }
+            if (sql.trim().toUpperCase().startsWith('SELECT')) {
+                const cacheKey = getCacheKey(sql, parameters);
+                const cached = getCachedResult(cacheKey);
+                if (cached)
+                    return cached;
+                const result = await sendQuery(sql, parameters);
+                setCachedResult(cacheKey, result);
+                return result;
+            }
+            return sendQuery(sql, parameters);
+        },
+        async queryOne(sql, parameters) {
+            const result = await this.query(sql, parameters);
+            return result.rows[0] ?? null;
+        },
+        async ping() {
+            if (!connected) {
+                throw ErrorFactory.createConnectionError('Not connected to SQL Server proxy');
+            }
+            await this.query('SELECT 1 AS ping', []);
+        },
+        async transaction(callback) {
+            if (inTransaction) {
+                throw ErrorFactory.createGeneralError('Transaction already in progress');
+            }
+            inTransaction = true;
+            try {
+                await this.query('BEGIN TRANSACTION', []);
+                const result = await callback(this);
+                await this.query('COMMIT', []);
+                return result;
+            }
+            catch (error) {
+                await this.query('ROLLBACK', []);
+                throw error;
+            }
+            finally {
+                inTransaction = false;
+            }
+        },
+        async rawQuery(sql, parameters) {
+            const result = await this.query(sql, parameters ?? []);
+            return result.rows;
+        },
+        getType() {
+            return 'sqlserver-proxy';
+        },
+        isConnected() {
+            return connected;
+        },
+        getPlaceholder(index) {
+            return `@param${index}`;
+        },
+    };
+}

package/src/performance/Optimizer.d.ts

@@ -7,6 +7,7 @@ export interface IGenerationCache {
     set(type: string, params: Record<string, unknown>, code: string): Promise<void>;
     save(): Promise<void>;
     clear(): Promise<void>;
+    dispose(): Promise<void>;
     getStats(): Promise<{
         size: number;
         entries: number;

package/src/performance/Optimizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Optimizer.d.ts","sourceRoot":"","sources":["../../../src/performance/Optimizer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,IAAI,OAAO,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,EAAE,CAAC;KAChB,CAAC,CAAC;CACJ;AAkDD;;;GAGG;AACH,eAAO,MAAM,eAAe;IAC1B;;OAEG;sBAES,MAAM,UACT,MAAM,eACD,MAAM,GACjB,gBAAgB;EAUnB,CAAC;AAiWH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;cACO,WAAW;EAqCrB,CAAC;AAEH;;GAEG;AAEH;;GAEG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,UAAU,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,EACnC,SAAS,GAAE,MAAU,GACpB,OAAO,CAAC,CAAC,EAAE,CAAC,CAcd;AAED;;GAEG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAEjF;AAED,eAAO,MAAM,iBAAiB;;;EAG5B,CAAC;AAEH;;GAEG;AAEH;;GAEG;AAEH,wBAAgB,cAAc,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAC9D,EAAE,EAAE,CAAC,EACL,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/F,CAAC,CA+DH;AAED,eAAO,MAAM,OAAO;;EAElB,CAAC;AAEH,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,CAAC,CAAC,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,WAAW,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC5B,OAAO,CAAC,CAAC,CAAC,CAAC;IACd,kBAAkB,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,QAAQ,IAAI;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KAC/C,CAAC;IACF,SAAS,IAAI,IAAI,CAAC;IAClB,KAAK,IAAI,IAAI,CAAC;CACf;AASD;;;GAGG;AACH,eAAO,MAAM,oBAAoB;IAC/B;;OAEG;cACO,qBAAqB;EAoE/B,CAAC;AA2HH,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"Optimizer.d.ts","sourceRoot":"","sources":["../../../src/performance/Optimizer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,QAAQ,IAAI,OAAO,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,EAAE,CAAC;KAChB,CAAC,CAAC;CACJ;AAkDD;;;GAGG;AACH,eAAO,MAAM,eAAe;IAC1B;;OAEG;sBAES,MAAM,UACT,MAAM,eACD,MAAM,GACjB,gBAAgB;EAUnB,CAAC;AAiXH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;cACO,WAAW;EAqCrB,CAAC;AAEH;;GAEG;AAEH;;GAEG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,UAAU,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,EACnC,SAAS,GAAE,MAAU,GACpB,OAAO,CAAC,CAAC,EAAE,CAAC,CAcd;AAED;;GAEG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAEjF;AAED,eAAO,MAAM,iBAAiB;;;EAG5B,CAAC;AAEH;;GAEG;AAEH;;GAEG;AAEH,wBAAgB,cAAc,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAC9D,EAAE,EAAE,CAAC,EACL,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/F,CAAC,CA+DH;AAED,eAAO,MAAM,OAAO;;EAElB,CAAC;AAEH,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,CAAC,CAAC,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,WAAW,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC5B,OAAO,CAAC,CAAC,CAAC,CAAC;IACd,kBAAkB,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,QAAQ,IAAI;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KAC/C,CAAC;IACF,SAAS,IAAI,IAAI,CAAC;IAClB,KAAK,IAAI,IAAI,CAAC;CACf;AASD;;;GAGG;AACH,eAAO,MAAM,oBAAoB;IAC/B;;OAEG;cACO,qBAAqB;EAoE/B,CAAC;AA2HH,eAAe,oBAAoB,CAAC"}

package/src/performance/Optimizer.js

@@ -192,17 +192,16 @@ function createCacheInstance(state) {
          * Clear cache (async)
          */
         async clear() {
-            if (state.cleanupInterval) {
-                clearInterval(state.cleanupInterval);
-                state.cleanupInterval = undefined;
-            }
-            if (state.flushTimer) {
-                clearTimeout(state.flushTimer);
-                state.flushTimer = undefined;
-            }
+            stopCacheTimers(state);
             state.pendingWrites.clear();
             await clearCache(state);
         },
+        // eslint-disable-next-line @typescript-eslint/require-await
+        async dispose() {
+            stopCacheTimers(state);
+            state.pendingWrites.clear();
+            state.cache.clear();
+        },
         /**
          * Get cache statistics (async)
          */
@@ -211,6 +210,16 @@ function createCacheInstance(state) {
         },
     };
 }
+function stopCacheTimers(state) {
+    if (state.cleanupInterval) {
+        clearInterval(state.cleanupInterval);
+        state.cleanupInterval = undefined;
+    }
+    if (state.flushTimer) {
+        clearTimeout(state.flushTimer);
+        state.flushTimer = undefined;
+    }
+}
 function attachCacheStateForTests(instance, state) {
     Object.defineProperty(instance, GENERATION_CACHE_STATE_SYMBOL, {
         value: state,
@@ -222,6 +231,10 @@ function attachCacheStateForTests(instance, state) {
  */
 async function saveCacheToDisk(state) {
     try {
+        if (state.flushTimer !== undefined) {
+            clearTimeout(state.flushTimer);
+            state.flushTimer = undefined;
+        }
         const flushedEnsured = await flushPendingWrites(state);
         if (!flushedEnsured) {
             await ensureCacheDir(state.cacheDir);

package/src/proxy/ErrorHandler.d.ts

@@ -0,0 +1,11 @@
+export type ProxyErrorResponse = Readonly<{
+    status: number;
+    body: {
+        code: string;
+        message: string;
+    };
+}>;
+export declare const ErrorHandler: Readonly<{
+    toProxyError: (status: number, code: string, message: string) => ProxyErrorResponse;
+}>;
+//# sourceMappingURL=ErrorHandler.d.ts.map

package/src/proxy/ErrorHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ErrorHandler.d.ts","sourceRoot":"","sources":["../../../src/proxy/ErrorHandler.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC,CAAC,CAAC;AAOH,eAAO,MAAM,YAAY;2BALK,MAAM,QAAQ,MAAM,WAAW,MAAM,KAAG,kBAAkB;EAOtF,CAAC"}

package/src/proxy/ErrorHandler.js

@@ -0,0 +1,7 @@
+const toProxyError = (status, code, message) => ({
+    status,
+    body: { code, message },
+});
+export const ErrorHandler = Object.freeze({
+    toProxyError,
+});

package/src/proxy/PoolManager.d.ts

@@ -0,0 +1,8 @@
+export type PoolFactory<T> = () => T;
+export type PoolDisposer<T> = (pool: T) => Promise<void> | void;
+export type PoolManager<T> = Readonly<{
+    get: () => T;
+    dispose: () => Promise<void>;
+}>;
+export declare const createPoolManager: <T>(create: PoolFactory<T>, dispose: PoolDisposer<T>) => PoolManager<T>;
+//# sourceMappingURL=PoolManager.d.ts.map

package/src/proxy/PoolManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PoolManager.d.ts","sourceRoot":"","sources":["../../../src/proxy/PoolManager.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AACrC,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAEhE,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,QAAQ,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC,CAAC;IACb,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC,CAAC;AAEH,eAAO,MAAM,iBAAiB,GAAI,CAAC,EACjC,QAAQ,WAAW,CAAC,CAAC,CAAC,EACtB,SAAS,YAAY,CAAC,CAAC,CAAC,KACvB,WAAW,CAAC,CAAC,CAmBf,CAAC"}

package/src/proxy/PoolManager.js

@@ -0,0 +1,18 @@
+export const createPoolManager = (create, dispose) => {
+    let pool = null;
+    const get = () => {
+        pool ??= create();
+        return pool;
+    };
+    const disposePool = async () => {
+        if (pool === null)
+            return;
+        const current = pool;
+        pool = null;
+        await Promise.resolve(dispose(current));
+    };
+    return Object.freeze({
+        get,
+        dispose: disposePool,
+    });
+};

package/src/proxy/ProxyBackend.d.ts

@@ -0,0 +1,18 @@
+export type ProxyRequest = Readonly<{
+    method: string;
+    path: string;
+    headers: Record<string, string | undefined>;
+    body: string;
+}>;
+export type ProxyResponse = Readonly<{
+    status: number;
+    body: unknown;
+    headers?: Record<string, string>;
+}>;
+export type ProxyBackend = Readonly<{
+    name: string;
+    handle: (request: ProxyRequest) => Promise<ProxyResponse>;
+    health: () => Promise<ProxyResponse>;
+    shutdown?: () => Promise<void>;
+}>;
+//# sourceMappingURL=ProxyBackend.d.ts.map

package/src/proxy/ProxyBackend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProxyBackend.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyBackend.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;CACd,CAAC,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC,CAAC,CAAC"}

package/src/proxy/ProxyBackend.js

@@ -0,0 +1 @@
+export {};

package/src/proxy/ProxyConfig.d.ts

@@ -0,0 +1,12 @@
+export type ProxySigningConfig = Readonly<{
+    keyId: string;
+    secret: string;
+    require: boolean;
+    windowMs: number;
+}>;
+export type ProxyServerConfig = Readonly<{
+    host: string;
+    port: number;
+    maxBodyBytes: number;
+}>;
+//# sourceMappingURL=ProxyConfig.d.ts.map