@zintrust/core 0.1.40 → 0.1.42

package/src/security/Sanitizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Sanitizer.d.ts","sourceRoot":"","sources":["../../../src/security/Sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA8CH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC/D,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACzC,mBAAmB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEhD,yFAAyF;IACzF,8BAA8B,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC;IAElG,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACzD,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAExC,cAAc,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE1C,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC5D,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAElD,UAAU,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC9D,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAEjE,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEtC,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACrE,kBAAkB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE/C,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAClD,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAElD,oBAAoB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACjD,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE9C,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEtC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;CACrC,CAAC,CAAC;AAufH,eAAO,MAAM,eAAe,QAAO,aAMlC,CAAC;AAEF,eAAO,MAAM,SAAS;iBAniBP,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;kBAChD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;yBACnB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;IAE/C,yFAAyF;oCACzD,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM;iBAEpF,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;eAC5B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;WAC9B,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;iBAC3C,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;oBAEvB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;mBAC3B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;cAE/B,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;2BACpC,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;gBAErC,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;mBAC9C,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;eAErD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;uBAElB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;wBAChD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;2BAEvB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;2BAC1B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;0BAE3B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;uBAC7B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;mBAE9B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;eAC9B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;aAE5B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;EAggBK,CAAC"}
+{"version":3,"file":"Sanitizer.d.ts","sourceRoot":"","sources":["../../../src/security/Sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAmCH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC/D,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACzC,mBAAmB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEhD,yFAAyF;IACzF,8BAA8B,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC;IAElG,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACzD,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAExC,cAAc,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE1C,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC5D,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAElD,UAAU,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC9D,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAEjE,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEtC,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACrE,kBAAkB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE/C,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAClD,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAElD,oBAAoB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACjD,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE9C,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEtC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;CACrC,CAAC,CAAC;AAufH,eAAO,MAAM,eAAe,QAAO,aAMlC,CAAC;AAEF,eAAO,MAAM,SAAS;iBAniBP,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;kBAChD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;yBACnB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;IAE/C,yFAAyF;oCACzD,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM;iBAEpF,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;eAC5B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;WAC9B,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;iBAC3C,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;oBAEvB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;mBAC3B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;cAE/B,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;2BACpC,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;gBAErC,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;mBAC9C,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;eAErD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;uBAElB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;wBAChD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;2BAEvB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;2BAC1B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;0BAE3B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;uBAC7B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;mBAE9B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;eAC9B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;aAE5B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;EAggBK,CAAC"}

package/src/security/Sanitizer.js

@@ -19,6 +19,7 @@
  * - ~5-15% performance overhead; disable for performance-critical paths
  */
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
+import { isEmpty } from '../helper/index.js';
 const MAX_NUMERIC_INPUT_LEN = 64;
 const MAX_EMAIL_LEN = 254;
 const MAX_NAME_LEN = 200;
@@ -28,15 +29,6 @@ const assertMaxLen = (method, label, value, maxLen) => {
         return;
     throw ErrorFactory.createSanitizerError(method, `${label} too long`, value);
 };
-const isEmpty = (value) => {
-    // Preserve legacy semantics: treat 0 and "0" as empty.
-    return (value === null ||
-        value === undefined ||
-        value === false ||
-        value === 0 ||
-        value === '' ||
-        value === '0');
-};
 const toStr = (value) => {
     return String(value ?? '');
 };

package/src/security/SignedRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignedRequest.d.ts","sourceRoot":"","sources":["../../../src/security/SignedRequest.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAIF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACjF,CAAC;AAEF,MAAM,MAAM,yBAAyB,GACjC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EACA,gBAAgB,GAChB,mBAAmB,GACnB,SAAS,GACT,kBAAkB,GAClB,mBAAmB,GACnB,aAAa,GACb,UAAU,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAyFN,eAAO,MAAM,aAAa;sBAzBK,MAAM,GAAG,UAAU,KAAG,OAAO,CAAC,MAAM,CAAC;8BAKnC;QAC/B,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;KACvB,KAAG,MAAM;0BAiBoB,gCAAgC,GAAG,OAAO,CAAC,oBAAoB,CAAC;mBAuCvE,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;EAuCnF,CAAC"}
+{"version":3,"file":"SignedRequest.d.ts","sourceRoot":"","sources":["../../../src/security/SignedRequest.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACjF,CAAC;AAEF,MAAM,MAAM,yBAAyB,GACjC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EACA,gBAAgB,GAChB,mBAAmB,GACnB,SAAS,GACT,kBAAkB,GAClB,mBAAmB,GACnB,aAAa,GACb,UAAU,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AA0FN,eAAO,MAAM,aAAa;sBAzBK,MAAM,GAAG,UAAU,KAAG,OAAO,CAAC,MAAM,CAAC;8BAKnC;QAC/B,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;KACvB,KAAG,MAAM;0BAiBoB,gCAAgC,GAAG,OAAO,CAAC,oBAAoB,CAAC;mBAuCvE,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;EAuCnF,CAAC"}

package/src/security/SignedRequest.js

@@ -1,4 +1,3 @@
-import { ErrorFactory } from '../exceptions/ZintrustError.js';
 const getHeader = (headers, name) => {
     if (typeof headers.get === 'function') {
         const value = headers.get(name);
@@ -19,7 +18,8 @@ const getCrypto = () => {
     if (typeof crypto === 'undefined' || crypto.subtle === undefined) {
         // Some runtimes (or test environments) may not expose WebCrypto.
         // Keep this as a typed ZinTrust error to satisfy lint rules.
-        throw ErrorFactory.createSecurityError('WebCrypto is not available in this runtime');
+        // eslint-disable-next-line no-restricted-syntax
+        throw new Error('WebCrypto is not available in this runtime');
     }
     return crypto;
 };

package/src/seeders/SeederLoader.js

@@ -1,6 +1,6 @@
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
 import * as path from '../node-singletons/path.js';
-import { pathToFileURL } from 'node:url';
+import { pathToFileURL } from '../node-singletons/url.js';
 function isFunction(value) {
     return typeof value === 'function';
 }

package/src/session/SessionManager.d.ts

@@ -26,11 +26,14 @@ export interface ISessionManager {
     get(sessionId: string): ISession;
     destroy(sessionId: string): void;
     cleanup(): number;
+    dispose(): void;
 }
 export interface SessionManagerOptions {
     cookieName?: string;
     headerName?: string;
     ttlMs?: number;
+    maxSessions?: number;
+    cleanupIntervalMs?: number;
 }
 export declare const SessionManager: Readonly<{
     create(options?: SessionManagerOptions): ISessionManager;

package/src/session/SessionManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SessionManager.d.ts","sourceRoot":"","sources":["../../../src/session/SessionManager.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAElD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC;IAC7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACvC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,IAAI,WAAW,CAAC;IACnB,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5E,gBAAgB,CAAC,GAAG,EAAE;QACpB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,GAAG,MAAM,GAAG,SAAS,CAAC;IACvB,eAAe,CACb,GAAG,EAAE;QACH,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,EACD,GAAG,EAAE;QACH,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,OAAO,CAAC;KAChE,GACA,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC;IACjC,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,OAAO,IAAI,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAyHD,eAAO,MAAM,cAAc;qBACT,qBAAqB,GAAQ,eAAe;EA2E5D,CAAC;AAEH,eAAe,cAAc,CAAC"}
+{"version":3,"file":"SessionManager.d.ts","sourceRoot":"","sources":["../../../src/session/SessionManager.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAElD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC;IAC7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACvC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,IAAI,WAAW,CAAC;IACnB,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5E,gBAAgB,CAAC,GAAG,EAAE;QACpB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,GAAG,MAAM,GAAG,SAAS,CAAC;IACvB,eAAe,CACb,GAAG,EAAE;QACH,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,EACD,GAAG,EAAE;QACH,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,OAAO,CAAC;KAChE,GACA,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC;IACjC,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,OAAO,IAAI,MAAM,CAAC;IAClB,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAwKD,eAAO,MAAM,cAAc;qBACT,qBAAqB,GAAQ,eAAe;EAkF5D,CAAC;AAEH,eAAe,cAAc,CAAC"}

package/src/session/SessionManager.js

@@ -3,7 +3,39 @@ const DEFAULT_OPTIONS = {
     cookieName: 'ZIN_SESSION_ID',
     headerName: 'x-session-id',
     ttlMs: 7 * 24 * 60 * 60 * 1000,
+    maxSessions: 10000,
+    cleanupIntervalMs: 60000,
 };
+function isUnrefableTimer(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        'unref' in value &&
+        typeof value.unref === 'function');
+}
+function cleanupExpiredSessions(sessions) {
+    const now = Date.now();
+    let removed = 0;
+    for (const [id, stored] of sessions.entries()) {
+        if (stored.expiresAt <= now) {
+            sessions.delete(id);
+            removed++;
+        }
+    }
+    return removed;
+}
+function enforceSessionCapacity(sessions, maxSessions, preserveId) {
+    if (sessions.size < maxSessions)
+        return;
+    cleanupExpiredSessions(sessions);
+    if (sessions.size < maxSessions)
+        return;
+    for (const id of sessions.keys()) {
+        if (id === preserveId)
+            continue;
+        sessions.delete(id);
+        break;
+    }
+}
 function parseCookies(cookieHeader) {
     const list = {};
     if (cookieHeader.length === 0)
@@ -39,7 +71,7 @@ function buildSessionCookie(cookieName, sessionId) {
     // HttpOnly prevents JS access; SameSite=Lax is a reasonable default for app sessions.
     return `${cookieName}=${encodeURIComponent(sessionId)}; Path=/; HttpOnly; SameSite=Lax`;
 }
-function createSessionApi(sessions, sessionId, ttlMs) {
+function createSessionApi(sessions, sessionId, ttlMs, maxSessions) {
     const withoutKey = (data, key) => {
         if (!Object.prototype.hasOwnProperty.call(data, key))
             return data;
@@ -53,6 +85,7 @@ function createSessionApi(sessions, sessionId, ttlMs) {
         if (existing !== undefined && existing.expiresAt > now) {
             return existing;
         }
+        enforceSessionCapacity(sessions, maxSessions, sessionId);
         const created = { data: {}, expiresAt: now + ttlMs };
         sessions.set(sessionId, created);
         return created;
@@ -89,6 +122,14 @@ export const SessionManager = Object.freeze({
     create(options = {}) {
         const config = { ...DEFAULT_OPTIONS, ...options };
         const sessions = new Map();
+        const cleanupInterval = config.cleanupIntervalMs > 0
+            ? globalThis.setInterval(() => {
+                cleanupExpiredSessions(sessions);
+            }, config.cleanupIntervalMs)
+            : undefined;
+        if (cleanupInterval && isUnrefableTimer(cleanupInterval)) {
+            cleanupInterval.unref();
+        }
         return {
             getIdFromCookieHeader(cookieHeader) {
                 if (cookieHeader === undefined || cookieHeader.length === 0)
@@ -127,21 +168,19 @@ export const SessionManager = Object.freeze({
                 return sessionId;
             },
             get(sessionId) {
-                return createSessionApi(sessions, sessionId, config.ttlMs);
+                return createSessionApi(sessions, sessionId, config.ttlMs, config.maxSessions);
             },
             destroy(sessionId) {
                 sessions.delete(sessionId);
             },
             cleanup() {
-                const now = Date.now();
-                let removed = 0;
-                for (const [id, stored] of sessions.entries()) {
-                    if (stored.expiresAt <= now) {
-                        sessions.delete(id);
-                        removed++;
-                    }
+                return cleanupExpiredSessions(sessions);
+            },
+            dispose() {
+                if (cleanupInterval !== undefined) {
+                    clearInterval(cleanupInterval);
                 }
-                return removed;
+                sessions.clear();
             },
         };
     },

package/src/sockets/CloudflareSocket.d.ts

@@ -0,0 +1,24 @@
+import { EventEmitter } from '../node-singletons/index.js';
+export type CloudflareSocketOptions = {
+    tls?: boolean;
+    timeoutMs?: number;
+};
+export type CloudflareSocketInstance = EventEmitter & {
+    write: (data: Buffer | Uint8Array) => boolean;
+    end: () => void;
+    destroy: () => void;
+    connect: (..._args: unknown[]) => CloudflareSocketInstance;
+    startTls: () => Promise<void>;
+    pause: () => void;
+    resume: () => void;
+    setTimeout: (timeoutMs: number, callback?: () => void) => void;
+    setNoDelay: (_noDelay?: boolean) => void;
+    setKeepAlive: (_enable?: boolean, _initialDelay?: number) => void;
+    ref: () => void;
+    unref: () => void;
+};
+export type CloudflareSocketFactory = {
+    create: (hostname: string, port: number, options?: CloudflareSocketOptions) => CloudflareSocketInstance;
+};
+export declare const CloudflareSocket: CloudflareSocketFactory;
+//# sourceMappingURL=CloudflareSocket.d.ts.map

package/src/sockets/CloudflareSocket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudflareSocket.d.ts","sourceRoot":"","sources":["../../../src/sockets/CloudflareSocket.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAehD,MAAM,MAAM,uBAAuB,GAAG;IACpC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,YAAY,GAAG;IACpD,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,KAAK,OAAO,CAAC;IAC9C,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,OAAO,EAAE,CAAC,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,wBAAwB,CAAC;IAC3D,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IAC/D,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAClE,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,CACN,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,uBAAuB,KAC9B,wBAAwB,CAAC;CAC/B,CAAC;AAoSF,eAAO,MAAM,gBAAgB,EAAE,uBAE7B,CAAC"}

package/src/sockets/CloudflareSocket.js

@@ -0,0 +1,259 @@
+import { ErrorFactory } from '../exceptions/ZintrustError.js';
+import { EventEmitter } from '../node-singletons/index.js';
+// Lazy import cloudflare:sockets to prevent Node.js evaluation errors
+let connect;
+const getCloudflareConnect = async () => {
+    if (connect === undefined) {
+        const module = await import('cloudflare:sockets');
+        connect = module.connect;
+    }
+    return connect;
+};
+const DEFAULT_TIMEOUT_MS = 30000;
+const toBuffer = (data) => {
+    if (typeof Buffer !== 'undefined')
+        return Buffer.from(data);
+    return data;
+};
+const createTimeoutSignal = (timeoutMs) => {
+    if (timeoutMs <= 0)
+        return undefined;
+    if (typeof AbortSignal === 'undefined' || typeof AbortSignal.timeout !== 'function')
+        return undefined;
+    return AbortSignal.timeout(timeoutMs);
+};
+const withTimeout = async (promise, timeoutMs, message) => {
+    const signal = createTimeoutSignal(timeoutMs);
+    if (!signal)
+        return promise;
+    const timeoutPromise = new Promise((_, reject) => {
+        signal.addEventListener('abort', () => reject(ErrorFactory.createConnectionError(message)), {
+            once: true,
+        });
+    });
+    return Promise.race([promise, timeoutPromise]);
+};
+const releaseStreamLocks = (state) => {
+    if (typeof process !== 'undefined' && process.env?.['VITEST'] !== undefined) {
+        state.reader = undefined;
+        state.writer = undefined;
+        return;
+    }
+    const reader = state.reader;
+    if (reader && typeof reader.releaseLock === 'function') {
+        try {
+            reader.releaseLock();
+        }
+        catch {
+            // ignore lock release errors
+        }
+    }
+    const writer = state.writer;
+    if (writer && typeof writer.releaseLock === 'function') {
+        try {
+            writer.releaseLock();
+        }
+        catch {
+            // ignore lock release errors
+        }
+    }
+    state.reader = undefined;
+    state.writer = undefined;
+};
+const flushBuffered = (state, emitter) => {
+    if (state.paused)
+        return;
+    while (state.bufferedChunks.length > 0) {
+        const chunk = state.bufferedChunks.shift();
+        if (chunk !== undefined)
+            emitter.emit('data', toBuffer(chunk));
+    }
+};
+const startReading = (state, emitter) => {
+    const token = state.socketToken;
+    const readNext = async () => {
+        if (state.socketToken !== token)
+            return;
+        if (!state.reader)
+            return; //NOSONAR
+        return state.reader
+            .read()
+            .then(async ({ done, value }) => {
+            if (state.socketToken !== token)
+                return;
+            if (done) {
+                emitter.emit('end');
+                return undefined;
+            }
+            if (state.paused) {
+                state.bufferedChunks.push(value);
+            }
+            else {
+                emitter.emit('data', toBuffer(value));
+            }
+            return readNext();
+        })
+            .catch((error) => {
+            emitter.emit('error', error);
+        });
+    };
+    readNext().catch((error) => emitter.emit('error', error));
+};
+const bindSocketLifecycle = async (emitter, state, socket, emitConnect) => {
+    state.socketToken += 1;
+    const token = state.socketToken;
+    state.socket = socket;
+    state.closed = false;
+    const waitForOpen = withTimeout(socket.opened, state.timeoutMs, 'Cloudflare socket connection timed out');
+    return waitForOpen
+        .then(() => {
+        state.reader = socket.readable.getReader();
+        state.writer = socket.writable.getWriter();
+        if (emitConnect)
+            emitter.emit('connect');
+        startReading(state, emitter);
+        socket.closed
+            .then(() => {
+            if (state.socketToken !== token)
+                return;
+            if (state.closed)
+                return;
+            state.closed = true;
+            emitter.emit('close');
+            try {
+                releaseStreamLocks(state);
+            }
+            catch {
+                // ignore release errors
+            }
+            emitter.removeAllListeners();
+        })
+            .catch((error) => {
+            if (state.socketToken !== token)
+                return;
+            if (state.closed)
+                return;
+            state.closed = true;
+            emitter.emit('error', error);
+            try {
+                releaseStreamLocks(state);
+            }
+            catch {
+                // ignore release errors
+            }
+            emitter.removeAllListeners();
+        });
+    })
+        .catch((error) => {
+        emitter.emit('error', error);
+        try {
+            releaseStreamLocks(state);
+        }
+        catch {
+            // ignore release errors
+        }
+        emitter.removeAllListeners();
+    });
+};
+const createEmitterHandlers = (emitter, state) => {
+    emitter.write = (data) => {
+        if (!state.writer)
+            return false;
+        try {
+            const payload = data instanceof Uint8Array ? data : new Uint8Array(data);
+            const writePromise = state.writer.write(payload);
+            writePromise.catch((error) => emitter.emit('error', error));
+            if (state.writer.desiredSize !== null && state.writer.desiredSize <= 0) {
+                state.writer.ready
+                    .then(() => emitter.emit('drain'))
+                    .catch((error) => emitter.emit('error', error));
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            emitter.emit('error', error);
+            return false;
+        }
+    };
+    emitter.end = () => {
+        const socket = state.socket;
+        if (!socket)
+            return;
+        socket
+            .close()
+            .then(() => {
+            emitter.emit('close');
+            releaseStreamLocks(state);
+            emitter.removeAllListeners();
+        })
+            .catch((error) => {
+            emitter.emit('error', error);
+            releaseStreamLocks(state);
+            emitter.removeAllListeners();
+        });
+    };
+    emitter.destroy = emitter.end;
+    emitter.connect = (...args) => {
+        const last = args.at(-1);
+        if (typeof last === 'function') {
+            emitter.once('connect', last);
+        }
+        return emitter;
+    };
+    emitter.startTls = async () => {
+        const socket = state.socket;
+        if (!socket || typeof socket.startTls !== 'function') {
+            throw ErrorFactory.createConnectionError('Cloudflare socket does not support STARTTLS');
+        }
+        releaseStreamLocks(state);
+        state.bufferedChunks = [];
+        const tlsSocket = socket.startTls();
+        await bindSocketLifecycle(emitter, state, tlsSocket, false);
+    };
+    emitter.pause = () => {
+        state.paused = true;
+    };
+    emitter.resume = () => {
+        state.paused = false;
+        flushBuffered(state, emitter);
+    };
+    emitter.setTimeout = (timeoutMs, callback) => {
+        state.timeoutToken += 1;
+        const token = state.timeoutToken;
+        const signal = createTimeoutSignal(timeoutMs);
+        if (!signal)
+            return;
+        signal.addEventListener('abort', () => {
+            if (state.timeoutToken !== token)
+                return;
+            emitter.emit('timeout');
+            callback?.();
+        }, { once: true });
+    };
+    emitter.setNoDelay = () => undefined;
+    emitter.setKeepAlive = () => undefined;
+    emitter.ref = () => undefined;
+    emitter.unref = () => undefined;
+};
+function createCloudflareSocket(hostname, port, options = {}) {
+    const emitter = new EventEmitter();
+    const secureTransport = options.tls === true ? 'starttls' : 'off';
+    const state = {
+        paused: false,
+        bufferedChunks: [],
+        closed: false,
+        timeoutToken: 0,
+        socketToken: 0,
+        timeoutMs: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+    };
+    createEmitterHandlers(emitter, state);
+    getCloudflareConnect()
+        .then((connectFn) => connectFn({ hostname, port }, { secureTransport, allowHalfOpen: false }))
+        .then(async (socket) => bindSocketLifecycle(emitter, state, socket, true))
+        .catch((error) => emitter.emit('error', error));
+    return emitter;
+}
+export const CloudflareSocket = Object.freeze({
+    create: createCloudflareSocket,
+});

package/src/start.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/start.ts"],"names":[],"mappings":"AAwBA,eAAO,MAAM,UAAU,GAAI,eAAe,MAAM,KAAG,OAYlD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,KAAK,QAAa,OAAO,CAAC,IAAI,CAO1C,CAAC;AAEF;;GAEG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEpE;;GAEG;AACH,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAElD;;GAEG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/start.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,UAAU,GAAI,eAAe,MAAM,KAAG,OAYlD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,KAAK,QAAa,OAAO,CAAC,IAAI,CAO1C,CAAC;AAEF;;GAEG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEpE;;GAEG;AACH,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAElD;;GAEG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC"}

package/src/start.js

@@ -1,12 +1,5 @@
 import { ZintrustLang } from './lang/lang.js';
-const isNodeRuntime = () => {
-    // Avoid importing any `node:*` modules so this file remains Worker-safe.
-    // In Workers/Deno, `process` is typically undefined.
-    return (typeof process !== ZintrustLang.UNDEFINED &&
-        typeof process === ZintrustLang.OBJECT &&
-        process !== null &&
-        typeof process.versions === ZintrustLang.OBJECT);
-};
+import { isNodeRuntime } from './runtime/detectRuntime.js';
 const fileUrlToPathLike = (value) => {
     if (!value.startsWith(ZintrustLang.FILE_PROTOCOL))
         return value;