@zintrust/core 0.1.40 → 0.1.42

package/src/orm/adapters/SqlProxyRegistryMode.d.ts

@@ -0,0 +1,12 @@
+export type SqlProxyMode = 'sql' | 'registry';
+export declare const resolveSqlProxyMode: (envKey: string) => SqlProxyMode;
+export declare const createStatementId: (sql: string) => Promise<string>;
+export declare const createStatementPayload: (sql: string, parameters: unknown[]) => Promise<{
+    statementId: string;
+    params: unknown[];
+}>;
+export declare const getExecMetaWithLastRowId: (value: unknown) => {
+    changes: number;
+    lastRowId?: number | string | bigint;
+};
+//# sourceMappingURL=SqlProxyRegistryMode.d.ts.map

package/src/orm/adapters/SqlProxyRegistryMode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqlProxyRegistryMode.d.ts","sourceRoot":"","sources":["../../../../src/orm/adapters/SqlProxyRegistryMode.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,UAAU,CAAC;AAE9C,eAAO,MAAM,mBAAmB,GAAI,QAAQ,MAAM,KAAG,YAGpD,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAU,KAAK,MAAM,KAAG,OAAO,CAAC,MAAM,CAEnE,CAAC;AAEF,eAAO,MAAM,sBAAsB,GACjC,KAAK,MAAM,EACX,YAAY,OAAO,EAAE,KACpB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAGpD,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,OAAO,OAAO,KACb;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAA;CAOzD,CAAC"}

package/src/orm/adapters/SqlProxyRegistryMode.js

@@ -0,0 +1,24 @@
+import { Env } from '../../config/env.js';
+import { isRecord } from '../adapters/SqlProxyAdapterUtils.js';
+import { SignedRequest } from '../../security/SignedRequest.js';
+export const resolveSqlProxyMode = (envKey) => {
+    const raw = Env.get(envKey, 'sql').trim().toLowerCase();
+    return raw === 'registry' ? 'registry' : 'sql';
+};
+export const createStatementId = async (sql) => {
+    return SignedRequest.sha256Hex(sql);
+};
+export const createStatementPayload = async (sql, parameters) => {
+    const statementId = await createStatementId(sql);
+    return { statementId, params: parameters };
+};
+export const getExecMetaWithLastRowId = (value) => {
+    if (!isRecord(value) || typeof value['ok'] !== 'boolean')
+        return { changes: 0 };
+    const meta = value['meta'];
+    if (!isRecord(meta))
+        return { changes: 0 };
+    const changes = typeof meta['changes'] === 'number' ? meta['changes'] : 0;
+    const lastRowId = meta['lastRowId'];
+    return { changes, lastRowId: lastRowId };
+};

package/src/orm/adapters/SqlServerProxyAdapter.d.ts

@@ -0,0 +1,6 @@
+/**
+ * SQL Server Proxy Adapter (HTTP)
+ */
+import type { IDatabaseAdapter } from '../DatabaseAdapter';
+export declare function createSqlServerProxyAdapter(): IDatabaseAdapter;
+//# sourceMappingURL=SqlServerProxyAdapter.d.ts.map

package/src/orm/adapters/SqlServerProxyAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqlServerProxyAdapter.d.ts","sourceRoot":"","sources":["../../../../src/orm/adapters/SqlServerProxyAdapter.ts"],"names":[],"mappings":"AACA;;GAEG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAe,MAAM,sBAAsB,CAAC;AAwO1E,wBAAgB,2BAA2B,IAAI,gBAAgB,CAI9D"}

package/src/orm/adapters/SqlServerProxyAdapter.js

@@ -0,0 +1,154 @@
+/* eslint-disable @typescript-eslint/require-await */
+/**
+ * SQL Server Proxy Adapter (HTTP)
+ */
+import { Env } from '../../config/env.js';
+import { ErrorFactory } from '../../exceptions/ZintrustError.js';
+import { AdaptersEnum } from '../../migrations/enum/index.js';
+import { QueryBuilder } from '../QueryBuilder.js';
+import { ensureSignedSettings, isRecord, requestSignedProxy, } from '../adapters/SqlProxyAdapterUtils.js';
+import { createStatementPayload, getExecMetaWithLastRowId, resolveSqlProxyMode, } from '../adapters/SqlProxyRegistryMode.js';
+const resolveProxyMode = () => {
+    return resolveSqlProxyMode('SQLSERVER_PROXY_MODE');
+};
+const resolveBaseUrl = () => {
+    const explicit = Env.get('SQLSERVER_PROXY_URL', '').trim();
+    if (explicit !== '')
+        return explicit;
+    const host = Env.get('SQLSERVER_PROXY_HOST', '127.0.0.1');
+    const port = Env.getInt('SQLSERVER_PROXY_PORT', 8793);
+    return `http://${host}:${port}`;
+};
+const buildProxySettings = () => {
+    const baseUrl = resolveBaseUrl();
+    const keyId = Env.get('SQLSERVER_PROXY_KEY_ID', '');
+    const secret = Env.get('SQLSERVER_PROXY_SECRET', '');
+    const timeoutMs = Env.getInt('SQLSERVER_PROXY_TIMEOUT_MS', Env.ZT_PROXY_TIMEOUT_MS ?? 30000);
+    return { baseUrl, keyId, secret, timeoutMs };
+};
+const buildSignedProxyConfig = (settings) => ({
+    settings,
+    missingUrlMessage: 'SQL Server proxy URL is missing (SQLSERVER_PROXY_URL)',
+    missingCredentialsMessage: 'SQL Server proxy signing credentials are missing (SQLSERVER_PROXY_KEY_ID / SQLSERVER_PROXY_SECRET)',
+    messages: {
+        unauthorized: 'SQL Server proxy unauthorized',
+        forbidden: 'SQL Server proxy forbidden',
+        rateLimited: 'SQL Server proxy rate limited',
+        rejected: 'SQL Server proxy rejected request',
+        error: 'SQL Server proxy error',
+        timedOut: 'SQL Server proxy request timed out',
+    },
+});
+const isQueryResponse = (value) => isRecord(value) && Array.isArray(value['rows']) && typeof value['rowCount'] === 'number';
+const isQueryOneResponse = (value) => isRecord(value) && 'row' in value;
+const requestProxy = async (settings, path, payload) => requestSignedProxy(buildSignedProxyConfig(settings), path, payload);
+const requireConnected = (state) => {
+    if (!state.connected)
+        throw ErrorFactory.createConnectionError('Database not connected');
+};
+const toQueryResult = (out) => {
+    if (isQueryResponse(out)) {
+        return { rows: out.rows, rowCount: out.rowCount };
+    }
+    if (isQueryOneResponse(out)) {
+        const row = out.row ?? null;
+        return { rows: row ? [row] : [], rowCount: row ? 1 : 0 };
+    }
+    const meta = getExecMetaWithLastRowId(out);
+    return { rows: [], rowCount: meta.changes, lastInsertId: meta.lastRowId };
+};
+const createQuery = (state) => async (sql, parameters) => {
+    requireConnected(state);
+    const mode = resolveProxyMode();
+    const out = mode === 'registry'
+        ? await requestProxy(state.settings, '/zin/sqlserver/statement', await createStatementPayload(sql, parameters))
+        : await requestProxy(state.settings, '/zin/sqlserver/query', {
+            sql,
+            params: parameters,
+        });
+    return toQueryResult(out);
+};
+const createQueryOne = (state) => async (sql, parameters) => {
+    requireConnected(state);
+    const mode = resolveProxyMode();
+    if (mode !== 'registry') {
+        const out = await requestProxy(state.settings, '/zin/sqlserver/queryOne', {
+            sql,
+            params: parameters,
+        });
+        return out.row ?? null;
+    }
+    const out = await requestProxy(state.settings, '/zin/sqlserver/statement', await createStatementPayload(sql, parameters));
+    if (isQueryOneResponse(out))
+        return out.row ?? null;
+    if (isQueryResponse(out))
+        return out.rows[0] ?? null;
+    return null;
+};
+const createPing = (query) => async () => {
+    await query(QueryBuilder.create('').select('1').toSQL(), []);
+};
+const createTransaction = (state, getAdapter) => async (callback) => {
+    if (state.inTransaction) {
+        throw ErrorFactory.createGeneralError('Transaction already in progress');
+    }
+    requireConnected(state);
+    state.inTransaction = true;
+    try {
+        const adapter = getAdapter();
+        await adapter.query('BEGIN TRANSACTION', []);
+        const result = await callback(adapter);
+        await adapter.query('COMMIT', []);
+        return result;
+    }
+    catch (error) {
+        try {
+            await getAdapter().query('ROLLBACK', []);
+        }
+        catch {
+            void 0;
+        }
+        throw error;
+    }
+    finally {
+        state.inTransaction = false;
+    }
+};
+const createRawQuery = (query) => async (sql, parameters) => {
+    const result = await query(sql, parameters ?? []);
+    return result.rows;
+};
+const createAdapter = (state) => {
+    const query = createQuery(state);
+    const queryOne = createQueryOne(state);
+    const adapter = {
+        async connect() {
+            ensureSignedSettings(buildSignedProxyConfig(state.settings));
+            state.connected = true;
+        },
+        async disconnect() {
+            state.connected = false;
+            state.inTransaction = false;
+        },
+        query,
+        queryOne,
+        ping: createPing(query),
+        transaction: createTransaction(state, () => adapter),
+        rawQuery: createRawQuery(query),
+        getType() {
+            return AdaptersEnum.sqlserver;
+        },
+        isConnected() {
+            return state.connected;
+        },
+        getPlaceholder(index) {
+            return `@param${index}`;
+        },
+    };
+    return adapter;
+};
+export function createSqlServerProxyAdapter() {
+    const settings = buildProxySettings();
+    const state = { connected: false, inTransaction: false, settings };
+    return createAdapter(state);
+}

package/src/orm/migrations/MigrationStore.js

@@ -12,7 +12,7 @@ const toSafeService = (service) => {
 };
 const assertDbSupportsMigrations = (db) => {
     const t = db.getType();
-    if (t === 'd1' || t === 'd1-remote') {
+    if (t === 'd1') {
         throw ErrorFactory.createCliError('This project is configured for D1. Use `zin d1:migrate --local|--remote` for now.');
     }
 };

package/src/performance/Optimizer.d.ts

@@ -7,6 +7,7 @@ export interface IGenerationCache {
     set(type: string, params: Record<string, unknown>, code: string): Promise<void>;
     save(): Promise<void>;
     clear(): Promise<void>;
+    dispose(): Promise<void>;
     getStats(): Promise<{
         size: number;
         entries: number;

package/src/performance/Optimizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Optimizer.d.ts","sourceRoot":"","sources":["../../../src/performance/Optimizer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,IAAI,OAAO,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,EAAE,CAAC;KAChB,CAAC,CAAC;CACJ;AAkDD;;;GAGG;AACH,eAAO,MAAM,eAAe;IAC1B;;OAEG;sBAES,MAAM,UACT,MAAM,eACD,MAAM,GACjB,gBAAgB;EAUnB,CAAC;AAiWH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;cACO,WAAW;EAqCrB,CAAC;AAEH;;GAEG;AAEH;;GAEG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,UAAU,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,EACnC,SAAS,GAAE,MAAU,GACpB,OAAO,CAAC,CAAC,EAAE,CAAC,CAcd;AAED;;GAEG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAEjF;AAED,eAAO,MAAM,iBAAiB;;;EAG5B,CAAC;AAEH;;GAEG;AAEH;;GAEG;AAEH,wBAAgB,cAAc,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAC9D,EAAE,EAAE,CAAC,EACL,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/F,CAAC,CA+DH;AAED,eAAO,MAAM,OAAO;;EAElB,CAAC;AAEH,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,CAAC,CAAC,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,WAAW,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC5B,OAAO,CAAC,CAAC,CAAC,CAAC;IACd,kBAAkB,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,QAAQ,IAAI;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KAC/C,CAAC;IACF,SAAS,IAAI,IAAI,CAAC;IAClB,KAAK,IAAI,IAAI,CAAC;CACf;AASD;;;GAGG;AACH,eAAO,MAAM,oBAAoB;IAC/B;;OAEG;cACO,qBAAqB;EAoE/B,CAAC;AA2HH,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"Optimizer.d.ts","sourceRoot":"","sources":["../../../src/performance/Optimizer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,QAAQ,IAAI,OAAO,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,EAAE,CAAC;KAChB,CAAC,CAAC;CACJ;AAkDD;;;GAGG;AACH,eAAO,MAAM,eAAe;IAC1B;;OAEG;sBAES,MAAM,UACT,MAAM,eACD,MAAM,GACjB,gBAAgB;EAUnB,CAAC;AAiXH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;cACO,WAAW;EAqCrB,CAAC;AAEH;;GAEG;AAEH;;GAEG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,UAAU,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,EACnC,SAAS,GAAE,MAAU,GACpB,OAAO,CAAC,CAAC,EAAE,CAAC,CAcd;AAED;;GAEG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAEjF;AAED,eAAO,MAAM,iBAAiB;;;EAG5B,CAAC;AAEH;;GAEG;AAEH;;GAEG;AAEH,wBAAgB,cAAc,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAC9D,EAAE,EAAE,CAAC,EACL,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/F,CAAC,CA+DH;AAED,eAAO,MAAM,OAAO;;EAElB,CAAC;AAEH,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,CAAC,CAAC,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,WAAW,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC5B,OAAO,CAAC,CAAC,CAAC,CAAC;IACd,kBAAkB,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,QAAQ,IAAI;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KAC/C,CAAC;IACF,SAAS,IAAI,IAAI,CAAC;IAClB,KAAK,IAAI,IAAI,CAAC;CACf;AASD;;;GAGG;AACH,eAAO,MAAM,oBAAoB;IAC/B;;OAEG;cACO,qBAAqB;EAoE/B,CAAC;AA2HH,eAAe,oBAAoB,CAAC"}

package/src/performance/Optimizer.js

@@ -192,17 +192,16 @@ function createCacheInstance(state) {
          * Clear cache (async)
          */
         async clear() {
-            if (state.cleanupInterval) {
-                clearInterval(state.cleanupInterval);
-                state.cleanupInterval = undefined;
-            }
-            if (state.flushTimer) {
-                clearTimeout(state.flushTimer);
-                state.flushTimer = undefined;
-            }
+            stopCacheTimers(state);
             state.pendingWrites.clear();
             await clearCache(state);
         },
+        // eslint-disable-next-line @typescript-eslint/require-await
+        async dispose() {
+            stopCacheTimers(state);
+            state.pendingWrites.clear();
+            state.cache.clear();
+        },
         /**
          * Get cache statistics (async)
          */
@@ -211,6 +210,16 @@ function createCacheInstance(state) {
         },
     };
 }
+function stopCacheTimers(state) {
+    if (state.cleanupInterval) {
+        clearInterval(state.cleanupInterval);
+        state.cleanupInterval = undefined;
+    }
+    if (state.flushTimer) {
+        clearTimeout(state.flushTimer);
+        state.flushTimer = undefined;
+    }
+}
 function attachCacheStateForTests(instance, state) {
     Object.defineProperty(instance, GENERATION_CACHE_STATE_SYMBOL, {
         value: state,
@@ -222,6 +231,10 @@ function attachCacheStateForTests(instance, state) {
  */
 async function saveCacheToDisk(state) {
     try {
+        if (state.flushTimer !== undefined) {
+            clearTimeout(state.flushTimer);
+            state.flushTimer = undefined;
+        }
         const flushedEnsured = await flushPendingWrites(state);
         if (!flushedEnsured) {
             await ensureCacheDir(state.cacheDir);

package/src/proxy/ErrorHandler.d.ts

@@ -0,0 +1,11 @@
+export type ProxyErrorResponse = Readonly<{
+    status: number;
+    body: {
+        code: string;
+        message: string;
+    };
+}>;
+export declare const ErrorHandler: Readonly<{
+    toProxyError: (status: number, code: string, message: string) => ProxyErrorResponse;
+}>;
+//# sourceMappingURL=ErrorHandler.d.ts.map

package/src/proxy/ErrorHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ErrorHandler.d.ts","sourceRoot":"","sources":["../../../src/proxy/ErrorHandler.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC,CAAC,CAAC;AAOH,eAAO,MAAM,YAAY;2BALK,MAAM,QAAQ,MAAM,WAAW,MAAM,KAAG,kBAAkB;EAOtF,CAAC"}

package/src/proxy/ErrorHandler.js

@@ -0,0 +1,7 @@
+const toProxyError = (status, code, message) => ({
+    status,
+    body: { code, message },
+});
+export const ErrorHandler = Object.freeze({
+    toProxyError,
+});

package/src/proxy/PoolManager.d.ts

@@ -0,0 +1,8 @@
+export type PoolFactory<T> = () => T;
+export type PoolDisposer<T> = (pool: T) => Promise<void> | void;
+export type PoolManager<T> = Readonly<{
+    get: () => T;
+    dispose: () => Promise<void>;
+}>;
+export declare const createPoolManager: <T>(create: PoolFactory<T>, dispose: PoolDisposer<T>) => PoolManager<T>;
+//# sourceMappingURL=PoolManager.d.ts.map

package/src/proxy/PoolManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PoolManager.d.ts","sourceRoot":"","sources":["../../../src/proxy/PoolManager.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AACrC,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAEhE,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,QAAQ,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC,CAAC;IACb,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC,CAAC;AAEH,eAAO,MAAM,iBAAiB,GAAI,CAAC,EACjC,QAAQ,WAAW,CAAC,CAAC,CAAC,EACtB,SAAS,YAAY,CAAC,CAAC,CAAC,KACvB,WAAW,CAAC,CAAC,CAmBf,CAAC"}

package/src/proxy/PoolManager.js

@@ -0,0 +1,18 @@
+export const createPoolManager = (create, dispose) => {
+    let pool = null;
+    const get = () => {
+        pool ??= create();
+        return pool;
+    };
+    const disposePool = async () => {
+        if (pool === null)
+            return;
+        const current = pool;
+        pool = null;
+        await Promise.resolve(dispose(current));
+    };
+    return Object.freeze({
+        get,
+        dispose: disposePool,
+    });
+};

package/src/proxy/ProxyBackend.d.ts

@@ -0,0 +1,18 @@
+export type ProxyRequest = Readonly<{
+    method: string;
+    path: string;
+    headers: Record<string, string | undefined>;
+    body: string;
+}>;
+export type ProxyResponse = Readonly<{
+    status: number;
+    body: unknown;
+    headers?: Record<string, string>;
+}>;
+export type ProxyBackend = Readonly<{
+    name: string;
+    handle: (request: ProxyRequest) => Promise<ProxyResponse>;
+    health: () => Promise<ProxyResponse>;
+    shutdown?: () => Promise<void>;
+}>;
+//# sourceMappingURL=ProxyBackend.d.ts.map

package/src/proxy/ProxyBackend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProxyBackend.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyBackend.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;CACd,CAAC,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC,CAAC,CAAC"}

package/src/proxy/ProxyBackend.js

@@ -0,0 +1 @@
+export {};

package/src/proxy/ProxyConfig.d.ts

@@ -0,0 +1,12 @@
+export type ProxySigningConfig = Readonly<{
+    keyId: string;
+    secret: string;
+    require: boolean;
+    windowMs: number;
+}>;
+export type ProxyServerConfig = Readonly<{
+    host: string;
+    port: number;
+    maxBodyBytes: number;
+}>;
+//# sourceMappingURL=ProxyConfig.d.ts.map

package/src/proxy/ProxyConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProxyConfig.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyConfig.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC"}

package/src/proxy/ProxyConfig.js

@@ -0,0 +1 @@
+export {};

package/src/proxy/ProxyRegistry.d.ts

@@ -0,0 +1,10 @@
+export type ProxyRegistration = Readonly<{
+    name: string;
+    description: string;
+}>;
+export declare const ProxyRegistry: Readonly<{
+    register: (proxy: ProxyRegistration) => void;
+    get: (name: string) => ProxyRegistration | undefined;
+    list: () => ProxyRegistration[];
+}>;
+//# sourceMappingURL=ProxyRegistry.d.ts.map

package/src/proxy/ProxyRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProxyRegistry.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyRegistry.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAAC;AAYH,eAAO,MAAM,aAAa;sBARD,iBAAiB,KAAG,IAAI;gBAI9B,MAAM,KAAG,iBAAiB,GAAG,SAAS;gBAExC,iBAAiB,EAAE;EAMlC,CAAC"}

package/src/proxy/ProxyRegistry.js

@@ -0,0 +1,11 @@
+const registry = new Map();
+const register = (proxy) => {
+    registry.set(proxy.name, proxy);
+};
+const get = (name) => registry.get(name);
+const list = () => Array.from(registry.values());
+export const ProxyRegistry = Object.freeze({
+    register,
+    get,
+    list,
+});

package/src/proxy/ProxyRequestParsing.d.ts

@@ -0,0 +1,9 @@
+import type { ProxyResponse } from './ProxyBackend';
+export declare const validateProxyRequest: (request: {
+    method: string;
+}) => ProxyResponse | null;
+export declare const parseJsonBody: (body: string) => {
+    ok: true;
+    value: Record<string, unknown>;
+} | ProxyResponse;
+//# sourceMappingURL=ProxyRequestParsing.d.ts.map

package/src/proxy/ProxyRequestParsing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProxyRequestParsing.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyRequestParsing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,eAAO,MAAM,oBAAoB,GAAI,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,KAAG,aAAa,GAAG,IAMlF,CAAC;AAEF,eAAO,MAAM,aAAa,GACxB,MAAM,MAAM,KACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,aAMjD,CAAC"}

package/src/proxy/ProxyRequestParsing.js

@@ -0,0 +1,16 @@
+import { ErrorHandler } from './ErrorHandler.js';
+import { RequestValidator } from './RequestValidator.js';
+export const validateProxyRequest = (request) => {
+    const methodError = RequestValidator.requirePost(request.method);
+    if (methodError) {
+        return ErrorHandler.toProxyError(405, methodError.code, methodError.message);
+    }
+    return null;
+};
+export const parseJsonBody = (body) => {
+    const parsed = RequestValidator.parseJson(body);
+    if (!parsed.ok) {
+        return ErrorHandler.toProxyError(400, parsed.error.code, parsed.error.message);
+    }
+    return { ok: true, value: parsed.value };
+};

package/src/proxy/ProxyServer.d.ts

@@ -0,0 +1,21 @@
+import { type IncomingMessage, type Server } from '../node-singletons/http';
+import type { ProxyBackend } from './ProxyBackend';
+export type ProxyServerOptions = Readonly<{
+    host: string;
+    port: number;
+    maxBodyBytes: number;
+    backend: ProxyBackend;
+    verify?: (req: IncomingMessage, body: string) => Promise<{
+        ok: true;
+    } | {
+        ok: false;
+        status: number;
+        message: string;
+    }>;
+}>;
+export declare const createProxyServer: (options: ProxyServerOptions) => Readonly<{
+    start: () => Promise<void>;
+    stop: () => Promise<void>;
+    server: Server;
+}>;
+//# sourceMappingURL=ProxyServer.d.ts.map

package/src/proxy/ProxyServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProxyServer.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyServer.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,MAAM,EAEZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,YAAY,EAA+B,MAAM,qBAAqB,CAAC;AAErF,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,CAAC,EAAE,CACP,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,MAAM,KACT,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7E,CAAC,CAAC;AA0CH,eAAO,MAAM,iBAAiB,GAC5B,SAAS,kBAAkB,KAC1B,QAAQ,CAAC;IACV,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB,CAsDA,CAAC"}

package/src/proxy/ProxyServer.js

@@ -0,0 +1,84 @@
+import { ErrorFactory } from '../exceptions/ZintrustError.js';
+import { createServer, } from '../node-singletons/http.js';
+const readBody = async (req, maxBodyBytes) => {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += buffer.length;
+        if (size > maxBodyBytes) {
+            throw ErrorFactory.createValidationError('Body too large');
+        }
+        chunks.push(buffer);
+    }
+    return Buffer.concat(chunks).toString('utf8');
+};
+const respond = (res, response) => {
+    res.writeHead(response.status, {
+        'Content-Type': 'application/json; charset=utf-8',
+        'Cache-Control': 'no-store',
+        ...response.headers,
+    });
+    res.end(JSON.stringify(response.body));
+};
+const toProxyRequest = (req, body) => {
+    const url = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
+    const headers = {};
+    for (const [key, value] of Object.entries(req.headers)) {
+        headers[key.toLowerCase()] = Array.isArray(value) ? value.join(',') : value;
+    }
+    return {
+        method: req.method ?? 'POST',
+        path: url.pathname,
+        headers,
+        body,
+    };
+};
+export const createProxyServer = (options) => {
+    const server = createServer(async (req, res) => {
+        try {
+            const body = await readBody(req, options.maxBodyBytes);
+            if ((req.url ?? '').startsWith('/health')) {
+                const response = await options.backend.health();
+                respond(res, response);
+                return;
+            }
+            if (options.verify) {
+                const verified = await options.verify(req, body);
+                if (!verified.ok) {
+                    respond(res, {
+                        status: verified.status,
+                        body: { code: 'UNAUTHORIZED', message: verified.message },
+                    });
+                    return;
+                }
+            }
+            const request = toProxyRequest(req, body);
+            const response = await options.backend.handle(request);
+            respond(res, response);
+        }
+        catch (error) {
+            respond(res, {
+                status: 500,
+                body: { code: 'PROXY_ERROR', message: String(error) },
+            });
+        }
+    });
+    const start = async () => new Promise((resolve) => {
+        server.listen(options.port, options.host, () => resolve());
+    });
+    const stop = async () => new Promise((resolve, reject) => {
+        server.close((error) => {
+            if (error) {
+                reject(error);
+                return;
+            }
+            resolve();
+        });
+    });
+    return Object.freeze({
+        start,
+        stop,
+        server,
+    });
+};

package/src/proxy/ProxyServerUtils.d.ts

@@ -0,0 +1,37 @@
+import type { IncomingMessage } from '../node-singletons/http';
+import type { ProxySigningConfig } from './ProxyConfig';
+export type BaseProxyConfig = {
+    host: string;
+    port: number;
+    maxBodyBytes: number;
+};
+export type BaseProxyOverrides = Partial<{
+    host: string;
+    port: number;
+    maxBodyBytes: number;
+    requireSigning: boolean;
+    keyId: string;
+    secret: string;
+    signingWindowMs: number;
+}>;
+export declare const resolveBaseConfig: (overrides: BaseProxyOverrides, prefix: string, defaults?: {
+    host?: string;
+    port?: number;
+    maxBodyBytes?: number;
+}) => BaseProxyConfig;
+export declare const resolveBaseSigningConfig: (overrides: BaseProxyOverrides, prefix: string) => {
+    keyId: string;
+    secret: string;
+    requireSigning: boolean;
+    signingWindowMs: number;
+};
+export declare const verifyRequestSignature: (req: IncomingMessage, body: string, config: {
+    signing: ProxySigningConfig;
+}, serviceName: string) => Promise<{
+    ok: boolean;
+    error?: {
+        status: number;
+        message: string;
+    };
+}>;
+//# sourceMappingURL=ProxyServerUtils.d.ts.map

package/src/proxy/ProxyServerUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProxyServerUtils.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyServerUtils.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAI7D,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH,eAAO,MAAM,iBAAiB,GAC5B,WAAW,kBAAkB,EAC7B,QAAQ,MAAM,EACd,WAAW;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,KACjE,eAUF,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,WAAW,kBAAkB,EAC7B,QAAQ,MAAM,KACb;IACD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;CAOtB,CAAC;AAEL,eAAO,MAAM,sBAAsB,GACjC,KAAK,eAAe,EACpB,MAAM,MAAM,EACZ,QAAQ;IAAE,OAAO,EAAE,kBAAkB,CAAA;CAAE,EACvC,aAAa,MAAM,KAClB,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CA8BtE,CAAC"}