@zintrust/core 0.1.41 → 0.1.42

package/src/scheduler/leader/SchedulerLeader.js

@@ -0,0 +1,187 @@
+import { Env } from '../../config/env.js';
+import { Logger } from '../../config/logger.js';
+import { ErrorFactory } from '../../exceptions/ZintrustError.js';
+import { ZintrustLang } from '../../lang/lang.js';
+import { createAdvancedQueue } from '../../tools/queue/AdvancedQueue.js';
+import { getLockProvider } from '../../tools/queue/LockProvider.js';
+const readSettings = () => {
+    const enabled = Env.getBool('SCHEDULE_LEADER_ENABLED', false);
+    const provider = Env.get('SCHEDULE_LEADER_LOCK_PROVIDER', 'redis').trim() || 'redis';
+    const key = Env.get('SCHEDULE_LEADER_LOCK_KEY', 'scheduler:leader').trim() || 'scheduler:leader';
+    const ttlMs = Env.getInt('SCHEDULE_LEADER_LOCK_TTL_MS', 30000);
+    const renewEveryMs = Env.getInt('SCHEDULE_LEADER_LOCK_RENEW_MS', Math.floor(ttlMs / 2));
+    const retryEveryMs = Env.getInt('SCHEDULE_LEADER_LOCK_RETRY_MS', 5000);
+    const acquireTimeoutMs = Env.getInt('SCHEDULE_LEADER_LOCK_ACQUIRE_TIMEOUT_MS', 2000);
+    return Object.freeze({
+        enabled,
+        provider,
+        key,
+        ttlMs: Math.max(1000, ttlMs),
+        renewEveryMs: Math.max(250, renewEveryMs),
+        retryEveryMs: Math.max(250, retryEveryMs),
+        acquireTimeoutMs: Math.max(250, acquireTimeoutMs),
+    });
+};
+const isUnrefableTimer = (timer) => {
+    return (typeof timer === 'object' &&
+        timer !== null &&
+        'unref' in timer &&
+        typeof timer.unref === 'function');
+};
+const withTimeout = async (promise, timeoutMs) => {
+    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0)
+        return promise;
+    let timeoutId;
+    try {
+        return await Promise.race([
+            promise,
+            new Promise((_, reject) => {
+                timeoutId = globalThis.setTimeout(() => {
+                    reject(ErrorFactory.createConnectionError('Leader lock acquire timed out', { timeoutMs }));
+                }, timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        if (timeoutId !== undefined)
+            globalThis.clearTimeout(timeoutId);
+    }
+};
+const resolveProvider = (providerName, ttlMs) => {
+    const name = providerName.trim().toLowerCase();
+    if (name.length === 0)
+        return null;
+    // Ensure provider is registered; AdvancedQueue wiring bootstraps lock providers.
+    createAdvancedQueue({
+        name: ZintrustLang.CLI_LOCKS,
+        connection: undefined,
+        defaultDedupTtl: ttlMs,
+        lockProvider: name,
+    });
+    return getLockProvider(name) ?? null;
+};
+const clearTimers = (state) => {
+    if (state.renewTimer !== undefined) {
+        globalThis.clearInterval(state.renewTimer);
+        state.renewTimer = undefined;
+    }
+    if (state.retryTimer !== undefined) {
+        globalThis.clearInterval(state.retryTimer);
+        state.retryTimer = undefined;
+    }
+};
+const loseLeadership = (state) => {
+    if (state.leaderLock !== null) {
+        Logger.warn('Scheduler leadership lost; stopping schedules');
+    }
+    state.leaderLock = null;
+    state.hooks?.onLostLeadership();
+};
+const ensureProvider = (state, settings) => {
+    if (state.provider !== null)
+        return state.provider;
+    state.provider = resolveProvider(settings.provider, settings.ttlMs);
+    if (state.provider === null) {
+        Logger.warn('Leader lock provider not available; scheduling disabled', {
+            provider: settings.provider,
+        });
+    }
+    return state.provider;
+};
+const tryAcquire = async (state, settings) => {
+    if (!state.started)
+        return;
+    if (state.leaderLock !== null)
+        return;
+    const provider = ensureProvider(state, settings);
+    if (provider === null)
+        return;
+    try {
+        const lock = await withTimeout(provider.acquire(settings.key, { ttl: settings.ttlMs }), settings.acquireTimeoutMs);
+        if (!lock.acquired)
+            return;
+        state.leaderLock = lock;
+        Logger.info('Scheduler leadership acquired', { key: settings.key, ttlMs: settings.ttlMs });
+        state.hooks?.onBecameLeader();
+    }
+    catch (error) {
+        Logger.warn('Failed to acquire scheduler leader lock', {
+            key: settings.key,
+            provider: settings.provider,
+            message: error instanceof Error ? error.message : String(error),
+        });
+    }
+};
+const startRenewLoop = (state, settings) => {
+    if (state.renewTimer !== undefined)
+        return;
+    state.renewTimer = globalThis.setInterval(async () => {
+        if (!state.started)
+            return;
+        if (state.leaderLock === null || state.provider === null)
+            return;
+        const ok = await state.provider.extend(state.leaderLock, settings.ttlMs);
+        if (!ok)
+            loseLeadership(state);
+    }, settings.renewEveryMs);
+    if (isUnrefableTimer(state.renewTimer))
+        state.renewTimer.unref();
+};
+const startRetryLoop = (state, settings) => {
+    if (state.retryTimer !== undefined)
+        return;
+    state.retryTimer = globalThis.setInterval(() => {
+        void tryAcquire(state, settings);
+    }, settings.retryEveryMs);
+    if (isUnrefableTimer(state.retryTimer))
+        state.retryTimer.unref();
+};
+export const SchedulerLeader = Object.freeze({
+    create() {
+        const state = {
+            started: false,
+            leaderLock: null,
+            provider: null,
+            renewTimer: undefined,
+            retryTimer: undefined,
+            hooks: null,
+        };
+        return Object.freeze({
+            isEnabled() {
+                return readSettings().enabled;
+            },
+            start(newHooks) {
+                const settings = readSettings();
+                if (!settings.enabled)
+                    return;
+                if (state.started)
+                    return;
+                state.started = true;
+                state.hooks = newHooks;
+                state.provider = null;
+                // Attempt immediately; keep retrying until acquired.
+                void tryAcquire(state, settings);
+                startRetryLoop(state, settings);
+                startRenewLoop(state, settings);
+            },
+            async stop() {
+                if (!state.started)
+                    return;
+                state.started = false;
+                clearTimers(state);
+                if (state.leaderLock !== null && state.provider !== null) {
+                    try {
+                        await state.provider.release(state.leaderLock);
+                    }
+                    catch {
+                        // best-effort
+                    }
+                }
+                state.leaderLock = null;
+                state.provider = null;
+                state.hooks = null;
+            },
+        });
+    },
+});
+export default SchedulerLeader;

package/src/scheduler/state/ScheduleStateStore.d.ts

@@ -0,0 +1,27 @@
+export type ScheduleRunState = Readonly<{
+    lastRunAt?: number;
+    lastSuccessAt?: number;
+    lastErrorAt?: number;
+    lastErrorMessage?: string;
+    nextRunAt?: number;
+    consecutiveFailures?: number;
+}>;
+export type ScheduleRunStatePatch = Partial<ScheduleRunState>;
+export type IScheduleStateStore = Readonly<{
+    get: (name: string) => Promise<ScheduleRunState | null>;
+    set: (name: string, patch: ScheduleRunStatePatch) => Promise<void>;
+    list: () => Promise<Array<{
+        name: string;
+        state: ScheduleRunState;
+    }>>;
+}>;
+export declare const InMemoryScheduleStateStore: Readonly<{
+    create(): IScheduleStateStore;
+}>;
+declare const _default: {
+    InMemoryScheduleStateStore: Readonly<{
+        create(): IScheduleStateStore;
+    }>;
+};
+export default _default;
+//# sourceMappingURL=ScheduleStateStore.d.ts.map

package/src/scheduler/state/ScheduleStateStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScheduleStateStore.d.ts","sourceRoot":"","sources":["../../../../src/scheduler/state/ScheduleStateStore.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAE9D,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACxD,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC,CAAC;CACvE,CAAC,CAAC;AAIH,eAAO,MAAM,0BAA0B;cAC3B,mBAAmB;EAuB7B,CAAC;;;kBAvBS,mBAAmB;;;AAyB/B,wBAEE"}

package/src/scheduler/state/ScheduleStateStore.js

@@ -0,0 +1,27 @@
+const normalizeName = (name) => String(name ?? '').trim();
+export const InMemoryScheduleStateStore = Object.freeze({
+    create() {
+        const states = new Map();
+        return Object.freeze({
+            async get(name) {
+                const key = normalizeName(name);
+                if (key.length === 0)
+                    return null;
+                return states.get(key) ?? null;
+            },
+            async set(name, patch) {
+                const key = normalizeName(name);
+                if (key.length === 0)
+                    return;
+                const current = states.get(key) ?? {};
+                states.set(key, { ...current, ...patch });
+            },
+            async list() {
+                return Array.from(states.entries()).map(([name, state]) => ({ name, state }));
+            },
+        });
+    },
+});
+export default {
+    InMemoryScheduleStateStore,
+};

package/src/scheduler/types.d.ts

@@ -6,9 +6,19 @@ export type IScheduleKernel = Readonly<{
     getRouter?: () => unknown;
 }>;
 export type IScheduleHandler = (kernel?: IScheduleKernel) => Promise<void> | void;
+export type IScheduleBackoffPolicy = Readonly<{
+    initialMs: number;
+    maxMs: number;
+    factor?: number;
+}>;
 export type ISchedule = {
     name: string;
     intervalMs?: number;
+    cron?: string;
+    timezone?: string;
+    jitterMs?: number;
+    backoff?: IScheduleBackoffPolicy;
+    leaderOnly?: boolean;
     handler: IScheduleHandler;
     enabled?: boolean;
     runOnStart?: boolean;

package/src/scheduler/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/scheduler/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAElF,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/scheduler/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAElF,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC"}

package/src/schedules/index.d.ts

@@ -1,2 +1,3 @@
+export { default as jobTrackingCleanup } from './job-tracking-cleanup';
 export { default as logCleanup } from './log-cleanup';
 //# sourceMappingURL=index.d.ts.map

package/src/schedules/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/schedules/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/schedules/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,wBAAwB,CAAC"}

package/src/schedules/index.js

@@ -1 +1,2 @@
+export { default as jobTrackingCleanup } from './job-tracking-cleanup.js';
 export { default as logCleanup } from './log-cleanup.js';

package/src/schedules/job-tracking-cleanup.d.ts

@@ -0,0 +1,4 @@
+export declare const cleanupJobTrackingOnce: () => Promise<void>;
+declare const JobTrackingCleanupSchedule: import("../scheduler").ISchedule;
+export default JobTrackingCleanupSchedule;
+//# sourceMappingURL=job-tracking-cleanup.d.ts.map

package/src/schedules/job-tracking-cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-tracking-cleanup.d.ts","sourceRoot":"","sources":["../../../src/schedules/job-tracking-cleanup.ts"],"names":[],"mappings":"AA4FA,eAAO,MAAM,sBAAsB,QAAa,OAAO,CAAC,IAAI,CAS3D,CAAC;AAKF,QAAA,MAAM,0BAA0B,kCAsCtB,CAAC;AAEX,eAAe,0BAA0B,CAAC"}

package/src/schedules/job-tracking-cleanup.js

@@ -0,0 +1,116 @@
+import { Env } from '../config/env.js';
+import { Logger } from '../config/logger.js';
+import { ErrorFactory } from '../exceptions/ZintrustError.js';
+import { useDatabase } from '../orm/Database.js';
+import { Schedule } from '../scheduler/Schedule.js';
+const toSqlDateTime = (value) => value.toISOString().slice(0, 19).replace('T', ' ');
+const assertSafeTableName = (raw, label) => {
+    const value = raw.trim();
+    if (value.length === 0)
+        throw ErrorFactory.createGeneralError(`${label} table is empty`);
+    // allow db.schema.table and underscores
+    if (!/^[A-Za-z0-9_.]+$/u.test(value)) {
+        throw ErrorFactory.createGeneralError(`${label} table contains invalid characters: ${value}`);
+    }
+    return value;
+};
+const cleanupJobTrackingBatch = async () => {
+    const connection = Env.get('JOB_TRACKING_DB_CONNECTION', 'default');
+    const jobsTable = assertSafeTableName(Env.get('JOB_TRACKING_DB_TABLE', 'zintrust_jobs'), 'Jobs');
+    const transitionsTable = assertSafeTableName(Env.get('JOB_TRACKING_DB_TRANSITIONS_TABLE', 'zintrust_job_transitions'), 'Transitions');
+    const retentionHoursRaw = Env.get('JOB_TRACKING_CLEANUP_RETENTION_HOURS', '').trim();
+    const retentionHours = retentionHoursRaw.length > 0 ? Number.parseFloat(retentionHoursRaw) : Number.NaN;
+    const retentionDays = Math.max(1, Env.getInt('JOB_TRACKING_CLEANUP_RETENTION_DAYS', 30));
+    const batchSize = Math.max(100, Env.getInt('JOB_TRACKING_CLEANUP_BATCH_SIZE', 5000));
+    const retentionMs = Number.isFinite(retentionHours) && retentionHours > 0
+        ? retentionHours * 60 * 60 * 1000
+        : retentionDays * 24 * 60 * 60 * 1000;
+    const cutoff = new Date(Date.now() - retentionMs);
+    const cutoffSql = toSqlDateTime(cutoff);
+    const db = useDatabase(undefined, connection);
+    const transitionRows = await db
+        .table(transitionsTable)
+        .select('id')
+        .where('transitioned_at', '<=', cutoffSql)
+        .orderBy('id', 'ASC')
+        .limit(batchSize)
+        .get();
+    const transitionIds = (transitionRows ?? [])
+        .map((row) => Number(row.id))
+        .filter((id) => Number.isFinite(id))
+        .map((id) => Math.floor(id));
+    if (transitionIds.length > 0) {
+        await db.table(transitionsTable).whereIn('id', transitionIds).delete();
+    }
+    const jobRows = await db
+        .table(jobsTable)
+        .select('id')
+        .where('status', '=', 'enqueued')
+        .where('updated_at', '<=', cutoffSql)
+        .orderBy('id', 'ASC')
+        .limit(batchSize)
+        .get();
+    const jobIds = (jobRows ?? [])
+        .map((row) => Number(row.id))
+        .filter((id) => Number.isFinite(id))
+        .map((id) => Math.floor(id));
+    if (jobIds.length > 0) {
+        await db.table(jobsTable).whereIn('id', jobIds).delete();
+    }
+    return {
+        retentionDays,
+        cutoffIso: cutoff.toISOString(),
+        batchSize,
+        deletedTransitions: transitionIds.length,
+        deletedJobs: jobIds.length,
+    };
+};
+export const cleanupJobTrackingOnce = async () => {
+    const result = await cleanupJobTrackingBatch();
+    Logger.info('Job tracking cleanup batch completed', {
+        retentionDays: result.retentionDays,
+        cutoff: result.cutoffIso,
+        deletedTransitions: result.deletedTransitions,
+        deletedJobs: result.deletedJobs,
+        batchSize: result.batchSize,
+    });
+};
+const enabled = Env.getBool('JOB_TRACKING_CLEANUP_ENABLED', false);
+const intervalMs = Env.getInt('JOB_TRACKING_CLEANUP_INTERVAL_MS', 6 * 60 * 60 * 1000);
+const JobTrackingCleanupSchedule = Schedule.define('jobTracking.cleanup', async () => {
+    const maxBatches = Math.max(1, Env.getInt('JOB_TRACKING_CLEANUP_MAX_BATCHES', 1));
+    let batchesRun = 0;
+    let deletedTransitionsTotal = 0;
+    let deletedJobsTotal = 0;
+    let retentionDays;
+    let cutoffIso;
+    let batchSize;
+    for (let i = 0; i < maxBatches; i += 1) {
+        // Bounded sequential batches are intentional; we want predictable DB load.
+        // eslint-disable-next-line no-await-in-loop
+        const result = await cleanupJobTrackingBatch();
+        batchesRun += 1;
+        deletedTransitionsTotal += result.deletedTransitions;
+        deletedJobsTotal += result.deletedJobs;
+        retentionDays = result.retentionDays;
+        cutoffIso = result.cutoffIso;
+        batchSize = result.batchSize;
+        if (result.deletedTransitions + result.deletedJobs === 0) {
+            break;
+        }
+    }
+    Logger.info('Job tracking cleanup run completed', {
+        retentionDays,
+        cutoff: cutoffIso,
+        batchSize,
+        batchesRun,
+        maxBatches,
+        deletedTransitionsTotal,
+        deletedJobsTotal,
+    });
+})
+    .intervalMs(intervalMs)
+    .withoutOverlapping({ provider: Env.get('JOB_TRACKING_CLEANUP_LOCK_PROVIDER', 'redis') })
+    .enabledWhen(enabled)
+    .build();
+export default JobTrackingCleanupSchedule;

package/src/schedules/log-cleanup.d.ts

@@ -1,4 +1,3 @@
-import type { ISchedule } from '../scheduler/types';
-declare const LogCleanupSchedule: ISchedule;
+declare const LogCleanupSchedule: import("../scheduler").ISchedule;
 export default LogCleanupSchedule;
 //# sourceMappingURL=log-cleanup.d.ts.map

package/src/schedules/log-cleanup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"log-cleanup.d.ts","sourceRoot":"","sources":["../../../src/schedules/log-cleanup.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAIlD,QAAA,MAAM,kBAAkB,EAAE,SAYzB,CAAC;AAEF,eAAe,kBAAkB,CAAC"}
+{"version":3,"file":"log-cleanup.d.ts","sourceRoot":"","sources":["../../../src/schedules/log-cleanup.ts"],"names":[],"mappings":"AAIA,QAAA,MAAM,kBAAkB,kCASd,CAAC;AAEX,eAAe,kBAAkB,CAAC"}

package/src/schedules/log-cleanup.js

@@ -1,18 +1,15 @@
 import { Env } from '../config/env.js';
 import { Logger, cleanLogsOnce } from '../config/logger.js';
-const intervalMs = Env.getInt('LOG_CLEANUP_INTERVAL_MS', 3600000);
-const LogCleanupSchedule = {
-    name: 'log.cleanup',
-    intervalMs: intervalMs,
-    handler: async () => {
-        try {
-            await cleanLogsOnce();
-        }
-        catch (err) {
-            Logger.error('Log cleanup schedule failed', err);
-        }
-    },
-    enabled: Env.getBool('LOG_CLEANUP_ENABLED', Env.getBool('LOG_TO_FILE', false)),
-    runOnStart: false,
-};
+import { Schedule } from '../scheduler/Schedule.js';
+const LogCleanupSchedule = Schedule.define('log.cleanup', async () => {
+    try {
+        await cleanLogsOnce();
+    }
+    catch (err) {
+        Logger.error('Log cleanup schedule failed', err);
+    }
+})
+    .intervalMs(Env.getInt('LOG_CLEANUP_INTERVAL_MS', 3600000))
+    .enabledWhen(Env.getBool('LOG_CLEANUP_ENABLED', Env.getBool('LOG_TO_FILE', false)))
+    .build();
 export default LogCleanupSchedule;

package/src/security/Sanitizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Sanitizer.d.ts","sourceRoot":"","sources":["../../../src/security/Sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA8CH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC/D,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACzC,mBAAmB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEhD,yFAAyF;IACzF,8BAA8B,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC;IAElG,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACzD,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAExC,cAAc,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE1C,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC5D,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAElD,UAAU,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC9D,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAEjE,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEtC,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACrE,kBAAkB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE/C,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAClD,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAElD,oBAAoB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACjD,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE9C,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEtC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;CACrC,CAAC,CAAC;AAufH,eAAO,MAAM,eAAe,QAAO,aAMlC,CAAC;AAEF,eAAO,MAAM,SAAS;iBAniBP,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;kBAChD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;yBACnB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;IAE/C,yFAAyF;oCACzD,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM;iBAEpF,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;eAC5B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;WAC9B,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;iBAC3C,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;oBAEvB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;mBAC3B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;cAE/B,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;2BACpC,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;gBAErC,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;mBAC9C,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;eAErD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;uBAElB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;wBAChD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;2BAEvB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;2BAC1B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;0BAE3B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;uBAC7B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;mBAE9B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;eAC9B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;aAE5B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;EAggBK,CAAC"}
+{"version":3,"file":"Sanitizer.d.ts","sourceRoot":"","sources":["../../../src/security/Sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAmCH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC/D,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACzC,mBAAmB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEhD,yFAAyF;IACzF,8BAA8B,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC;IAElG,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACzD,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAExC,cAAc,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE1C,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC5D,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAElD,UAAU,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAC9D,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAEjE,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEtC,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IACrE,kBAAkB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE/C,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAClD,qBAAqB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAElD,oBAAoB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACjD,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAE9C,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAEtC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;CACrC,CAAC,CAAC;AAufH,eAAO,MAAM,eAAe,QAAO,aAMlC,CAAC;AAEF,eAAO,MAAM,SAAS;iBAniBP,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;kBAChD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;yBACnB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;IAE/C,yFAAyF;oCACzD,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM;iBAEpF,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;eAC5B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;WAC9B,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;iBAC3C,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;oBAEvB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;mBAC3B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;cAE/B,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;2BACpC,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;gBAErC,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;mBAC9C,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;eAErD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;uBAElB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,MAAM;wBAChD,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;2BAEvB,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;2BAC1B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;0BAE3B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;uBAC7B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;mBAE9B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;eAC9B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;aAE5B,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM;EAggBK,CAAC"}

package/src/security/Sanitizer.js

@@ -19,6 +19,7 @@
  * - ~5-15% performance overhead; disable for performance-critical paths
  */
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
+import { isEmpty } from '../helper/index.js';
 const MAX_NUMERIC_INPUT_LEN = 64;
 const MAX_EMAIL_LEN = 254;
 const MAX_NAME_LEN = 200;
@@ -28,15 +29,6 @@ const assertMaxLen = (method, label, value, maxLen) => {
         return;
     throw ErrorFactory.createSanitizerError(method, `${label} too long`, value);
 };
-const isEmpty = (value) => {
-    // Preserve legacy semantics: treat 0 and "0" as empty.
-    return (value === null ||
-        value === undefined ||
-        value === false ||
-        value === 0 ||
-        value === '' ||
-        value === '0');
-};
 const toStr = (value) => {
     return String(value ?? '');
 };

package/src/security/SignedRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignedRequest.d.ts","sourceRoot":"","sources":["../../../src/security/SignedRequest.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAIF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACjF,CAAC;AAEF,MAAM,MAAM,yBAAyB,GACjC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EACA,gBAAgB,GAChB,mBAAmB,GACnB,SAAS,GACT,kBAAkB,GAClB,mBAAmB,GACnB,aAAa,GACb,UAAU,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAyFN,eAAO,MAAM,aAAa;sBAzBK,MAAM,GAAG,UAAU,KAAG,OAAO,CAAC,MAAM,CAAC;8BAKnC;QAC/B,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;KACvB,KAAG,MAAM;0BAiBoB,gCAAgC,GAAG,OAAO,CAAC,oBAAoB,CAAC;mBAuCvE,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;EAuCnF,CAAC"}
+{"version":3,"file":"SignedRequest.d.ts","sourceRoot":"","sources":["../../../src/security/SignedRequest.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACjF,CAAC;AAEF,MAAM,MAAM,yBAAyB,GACjC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EACA,gBAAgB,GAChB,mBAAmB,GACnB,SAAS,GACT,kBAAkB,GAClB,mBAAmB,GACnB,aAAa,GACb,UAAU,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AA0FN,eAAO,MAAM,aAAa;sBAzBK,MAAM,GAAG,UAAU,KAAG,OAAO,CAAC,MAAM,CAAC;8BAKnC;QAC/B,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;KACvB,KAAG,MAAM;0BAiBoB,gCAAgC,GAAG,OAAO,CAAC,oBAAoB,CAAC;mBAuCvE,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;EAuCnF,CAAC"}

package/src/security/SignedRequest.js

@@ -1,4 +1,3 @@
-import { ErrorFactory } from '../exceptions/ZintrustError.js';
 const getHeader = (headers, name) => {
     if (typeof headers.get === 'function') {
         const value = headers.get(name);
@@ -19,7 +18,8 @@ const getCrypto = () => {
     if (typeof crypto === 'undefined' || crypto.subtle === undefined) {
         // Some runtimes (or test environments) may not expose WebCrypto.
         // Keep this as a typed ZinTrust error to satisfy lint rules.
-        throw ErrorFactory.createSecurityError('WebCrypto is not available in this runtime');
+        // eslint-disable-next-line no-restricted-syntax
+        throw new Error('WebCrypto is not available in this runtime');
     }
     return crypto;
 };