@zintrust/core 0.7.7 → 0.7.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zintrust/core",
-  "version": "0.7.7",
+  "version": "0.7.9",
   "description": "Production-grade TypeScript backend framework for JavaScript",
   "homepage": "https://zintrust.com",
   "repository": {

package/src/auth/LoginFlow.d.ts

@@ -24,6 +24,12 @@ export type LoginFlowIssuerInput<TContext = unknown> = {
     verified: LoginFlowVerifiedRecord;
     context: TContext;
 };
+export type BulletproofJwtIssued = Readonly<{
+    token: string;
+    token_type: 'Bearer';
+    deviceId: string;
+    deviceSecret: string;
+}>;
 export type LoginFlowIssuer<TContext = unknown> = (input: LoginFlowIssuerInput<TContext>) => Promise<unknown>;
 export type LoginFlowAuditEvent<TContext = unknown> = {
     status: 'success' | 'failed';
@@ -36,7 +42,7 @@ export type LoginFlowAuditEvent<TContext = unknown> = {
     error?: unknown;
     context: TContext;
 };
-export type LoginFlowAuditor<TContext = unknown> = (event: LoginFlowAuditEvent<TContext>) => Promise<void>;
+export type LoginFlowAuditor<TContext = unknown> = (event: LoginFlowAuditEvent<TContext>) => void | Promise<void>;
 export type LoginFlowCreateOptions<TContext = unknown> = {
     provider: string | LoginFlowProvider<TContext>;
     context: TContext;

package/src/auth/LoginFlow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LoginFlow.d.ts","sourceRoot":"","sources":["../../../src/auth/LoginFlow.ts"],"names":[],"mappings":"AAGA,OAAO,EAAc,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEnE,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvE,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG;IACnC,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;AAE/D,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,QAAQ,EAAE,uBAAuB,CAAC;IAClC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,QAAQ,GAAG,OAAO,IAAI;IAClD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5E,MAAM,EAAE,CACN,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,QAAQ,KACd,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,QAAQ,GAAG,OAAO,IAAI;IACrD,QAAQ,EAAE,uBAAuB,CAAC;IAClC,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,eAAe,CAAC,QAAQ,GAAG,OAAO,IAAI,CAChD,KAAK,EAAE,oBAAoB,CAAC,QAAQ,CAAC,KAClC,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,MAAM,MAAM,mBAAmB,CAAC,QAAQ,GAAG,OAAO,IAAI;IACpD,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAAC,QAAQ,GAAG,OAAO,IAAI,CACjD,KAAK,EAAE,mBAAmB,CAAC,QAAQ,CAAC,KACjC,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,MAAM,MAAM,sBAAsB,CAAC,QAAQ,GAAG,OAAO,IAAI;IACvD,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAAC,QAAQ,GAAG,OAAO,IAAI;IACjD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACvD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAClF,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrF,GAAG,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,CAAC,QAAQ,GAAG,OAAO,EACzB,OAAO,EAAE,sBAAsB,CAAC,QAAQ,CAAC,KACtC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAChC,gBAAgB,EAAE,CAAC,QAAQ,GAAG,OAAO,EACnC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,KAClC,IAAI,CAAC;IACV,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACvC,cAAc,EAAE,CAAC,QAAQ,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;IAC9F,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACrC,eAAe,EAAE,CAAC,QAAQ,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;IACjG,iBAAiB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,kBAAkB,EAAE,MAAM,IAAI,CAAC;CAChC,CAAC;AA8cF,eAAO,MAAM,SAAS,EAAE,kBAYtB,CAAC"}
+{"version":3,"file":"LoginFlow.d.ts","sourceRoot":"","sources":["../../../src/auth/LoginFlow.ts"],"names":[],"mappings":"AAaA,OAAO,EAAc,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEnE,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvE,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG;IACnC,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;AAE/D,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,QAAQ,EAAE,uBAAuB,CAAC;IAClC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,QAAQ,GAAG,OAAO,IAAI;IAClD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5E,MAAM,EAAE,CACN,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,QAAQ,KACd,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,QAAQ,GAAG,OAAO,IAAI;IACrD,QAAQ,EAAE,uBAAuB,CAAC;IAClC,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,QAAQ,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH,MAAM,MAAM,eAAe,CAAC,QAAQ,GAAG,OAAO,IAAI,CAChD,KAAK,EAAE,oBAAoB,CAAC,QAAQ,CAAC,KAClC,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,MAAM,MAAM,mBAAmB,CAAC,QAAQ,GAAG,OAAO,IAAI;IACpD,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAAC,QAAQ,GAAG,OAAO,IAAI,CACjD,KAAK,EAAE,mBAAmB,CAAC,QAAQ,CAAC,KACjC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,MAAM,MAAM,sBAAsB,CAAC,QAAQ,GAAG,OAAO,IAAI;IACvD,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAAC,QAAQ,GAAG,OAAO,IAAI;IACjD,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACvD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAClF,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrF,GAAG,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,CAAC,QAAQ,GAAG,OAAO,EACzB,OAAO,EAAE,sBAAsB,CAAC,QAAQ,CAAC,KACtC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAChC,gBAAgB,EAAE,CAAC,QAAQ,GAAG,OAAO,EACnC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,KAClC,IAAI,CAAC;IACV,kBAAkB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACvC,cAAc,EAAE,CAAC,QAAQ,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;IAC9F,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACrC,eAAe,EAAE,CAAC,QAAQ,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;IACjG,iBAAiB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,kBAAkB,EAAE,MAAM,IAAI,CAAC;CAChC,CAAC;AA2lBF,eAAO,MAAM,SAAS,EAAE,kBAYtB,CAAC"}

package/src/auth/LoginFlow.js

@@ -1,6 +1,8 @@
 import { SystemTraceBridge } from '../trace/SystemTraceBridge.js';
 import { ErrorFactory } from '../exceptions/ZintrustError.js';
 import { isFunction, isNonEmptyString, isObject } from '../helper/index.js';
+import { detectRuntimePlatform, RuntimeServices, } from '../runtime/RuntimeServices.js';
+import { BulletproofDeviceStore, } from '../security/BulletproofDeviceStore.js';
 import { JwtManager } from '../security/JwtManager.js';
 const providerRegistry = new Map();
 const issuerRegistry = new Map();
@@ -98,12 +100,105 @@ const createJwtIssuer = async ({ verified, }) => {
     }
     return JwtManager.signAccessToken(claims);
 };
-const createTraceAuditor = async (event) => {
+const getContextRecord = (context) => {
+    return isObject(context) ? context : {};
+};
+const getContextRequest = (context) => {
+    const request = getContextRecord(context)['request'];
+    return isObject(request) ? request : undefined;
+};
+const getContextString = (context, key) => {
+    const value = getContextRecord(context)[key];
+    return typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined;
+};
+const getBodyString = (request, key) => {
+    if (request === undefined || typeof request.getBody !== 'function')
+        return undefined;
+    const body = request.getBody();
+    if (!isObject(body))
+        return undefined;
+    const value = body[key];
+    return typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined;
+};
+const getRequestHeaderString = (request, name) => {
+    if (request === undefined || typeof request.getHeader !== 'function')
+        return undefined;
+    const value = request.getHeader(name);
+    if (Array.isArray(value)) {
+        return typeof value[0] === 'string' && value[0].trim() !== '' ? value[0].trim() : undefined;
+    }
+    return typeof value === 'string' && value.trim() !== '' ? value.trim() : undefined;
+};
+const bytesToHex = (bytes) => {
+    let out = '';
+    for (const byte of bytes)
+        out += byte.toString(16).padStart(2, '0');
+    return out;
+};
+const getRuntimeCrypto = () => RuntimeServices.create(detectRuntimePlatform()).crypto;
+const generateDeviceId = () => {
+    const bytes = getRuntimeCrypto().getRandomValues(new Uint8Array(16));
+    return `dev_${bytesToHex(bytes)}`;
+};
+const generateDeviceSecret = () => {
+    const bytes = getRuntimeCrypto().getRandomValues(new Uint8Array(32));
+    return `hex:${bytesToHex(bytes)}`;
+};
+const getClaimedDeviceId = (claims) => {
+    const deviceId = claims['deviceId'];
+    return typeof deviceId === 'string' && deviceId.trim() !== '' ? deviceId.trim() : undefined;
+};
+const resolveBulletproofDeviceId = (context, request, claims) => {
+    return (getContextString(context, 'deviceId') ??
+        getBodyString(request, 'deviceId') ??
+        getClaimedDeviceId(claims) ??
+        generateDeviceId());
+};
+const resolveBulletproofUserId = (context, verified) => {
+    const subjectUserId = isNonEmptyString(verified.subject) ? verified.subject.trim() : undefined;
+    const verifiedUserId = isObject(verified.user) && verified.user['id'] !== undefined
+        ? String(verified.user['id'])
+        : undefined;
+    return getContextString(context, 'userId') ?? subjectUserId ?? verifiedUserId;
+};
+const buildBulletproofDeviceRecord = (context, verified, request, claims, deviceSecret) => {
+    const deviceId = resolveBulletproofDeviceId(context, request, claims);
+    const userId = resolveBulletproofUserId(context, verified);
+    const userAgent = getRequestHeaderString(request, 'user-agent');
+    return {
+        deviceId,
+        record: {
+            deviceId,
+            signingSecret: deviceSecret,
+            lastSeenAt: new Date(),
+            ...(isNonEmptyString(userId) ? { userId } : {}),
+            ...(userAgent === undefined ? {} : { userAgent }),
+        },
+    };
+};
+const createBulletproofIssuer = async ({ verified, context, }) => {
+    const claims = isObject(verified.claims) ? { ...verified.claims } : {};
+    if (isNonEmptyString(verified.subject) && !isNonEmptyString(claims.sub)) {
+        claims.sub = verified.subject;
+    }
+    const request = getContextRequest(context);
+    const deviceSecret = generateDeviceSecret();
+    const { deviceId, record } = buildBulletproofDeviceRecord(context, verified, request, claims, deviceSecret);
+    claims['deviceId'] = deviceId;
+    await BulletproofDeviceStore.upsert(record);
+    const token = await JwtManager.signAccessToken(claims);
+    return Object.freeze({
+        token,
+        token_type: 'Bearer',
+        deviceId,
+        deviceSecret,
+    });
+};
+const createTraceAuditor = (event) => {
     const subject = typeof event.verified?.subject === 'string' && event.verified.subject.trim() !== ''
         ? event.verified.subject
         : undefined;
     SystemTraceBridge.emitAuth(event.status === 'success' ? 'login' : 'failed', subject);
-    return Promise.resolve();
 };
 const ensureNamedRegistration = (kind, name) => {
     if (!isNonEmptyString(name)) {
@@ -334,6 +429,7 @@ const clearRegistrations = () => {
     issuerRegistry.clear();
     auditorRegistry.clear();
     issuerRegistry.set('jwt', createJwtIssuer);
+    issuerRegistry.set('bulletproof', createBulletproofIssuer);
     auditorRegistry.set('trace', createTraceAuditor);
 };
 clearRegistrations();

package/src/cli/OptionalCliExtensions.d.ts

@@ -24,6 +24,7 @@ export declare const OptionalCliExtensions: Readonly<{
     findRequestedExtension: (args: string[]) => OptionalCliExtension | undefined;
 }>;
 export declare const OptionalCliExtensionsInternal: Readonly<{
+    loadAllInstalledExtensions: () => Promise<OptionalCliExtensionStatus[]>;
     getProjectCwd: () => string;
     resolveProjectRoot: () => string;
     resolveProjectInstalledUrl: (entry: OptionalCliExtension, options?: OptionalCliExtensionLoadOptions) => string | null;

package/src/cli/OptionalCliExtensions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OptionalCliExtensions.d.ts","sourceRoot":"","sources":["../../../src/cli/OptionalCliExtensions.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC;AAEF,KAAK,8BAA8B,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAE3F,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,8BAA8B,CAAC;CACxC,CAAC,CAAC;AAEH,KAAK,+BAA+B,GAAG,QAAQ,CAAC;IAC9C,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC,CAAC;AAySH,eAAO,MAAM,qBAAqB;oCACM,OAAO,CAAC,0BAA0B,EAAE,CAAC;sBAQnD,MAAM,EAAE,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC;sCAmBhE,MAAM,EAAE,YACJ,aAAa,CAAC,0BAA0B,CAAC,GAClD,0BAA0B,GAAG,SAAS;uCASN,0BAA0B,GAAG,MAAM;mCArDlC,MAAM,EAAE,KAAG,oBAAoB,GAAG,SAAS;EA8D/E,CAAC;AAEH,eAAO,MAAM,6BAA6B;yBAtVhB,MAAM;8BAQD,MAAM;wCA2G5B,oBAAoB,YACjB,+BAA+B,KACxC,MAAM,GAAG,IAAI;kCAvGqB,+BAA+B,KAAG,OAAO;4BAMnE,MAAM,QACT,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YACnB,+BAA+B,KACxC,IAAI;8CAoHE,oBAAoB,YACjB,+BAA+B,KACxC,OAAO,CAAC,OAAO,CAAC;qCA0BV,oBAAoB,YACjB,+BAA+B,KACxC,OAAO,CAAC,OAAO,CAAC;uCAgCV,oBAAoB,YACjB,+BAA+B,KACxC,OAAO,CAAC,OAAO,CAAC;gCAuBV,oBAAoB,YACjB,+BAA+B,KACxC,OAAO,CAAC,0BAA0B,CAAC;gCAwCH,MAAM,EAAE,KAAG,MAAM,GAAG,SAAS;mCAU1B,MAAM,EAAE,KAAG,oBAAoB,GAAG,SAAS;8BAOhD,MAAM,EAAE,KAAG,OAAO;uCAvMT,oBAAoB,KAAG,MAAM,EAAE;gCAwBtC,oBAAoB,KAAG,MAAM,EAAE;EAuPhE,CAAC"}
+{"version":3,"file":"OptionalCliExtensions.d.ts","sourceRoot":"","sources":["../../../src/cli/OptionalCliExtensions.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC;AAEF,KAAK,8BAA8B,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,GAAG,SAAS,CAAC;AAE3F,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,8BAA8B,CAAC;CACxC,CAAC,CAAC;AAEH,KAAK,+BAA+B,GAAG,QAAQ,CAAC;IAC9C,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC,CAAC;AAoUH,eAAO,MAAM,qBAAqB;oCACM,OAAO,CAAC,0BAA0B,EAAE,CAAC;sBAKnD,MAAM,EAAE,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC;sCAmBhE,MAAM,EAAE,YACJ,aAAa,CAAC,0BAA0B,CAAC,GAClD,0BAA0B,GAAG,SAAS;uCASN,0BAA0B,GAAG,MAAM;mCAlDlC,MAAM,EAAE,KAAG,oBAAoB,GAAG,SAAS;EA2D/E,CAAC;AAEH,eAAO,MAAM,6BAA6B;sCAlFG,OAAO,CAAC,0BAA0B,EAAE,CAAC;yBA5RxD,MAAM;8BAoBD,MAAM;wCA+G5B,oBAAoB,YACjB,+BAA+B,KACxC,MAAM,GAAG,IAAI;kCAzGqB,+BAA+B,KAAG,OAAO;4BAMnE,MAAM,QACT,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YACnB,+BAA+B,KACxC,IAAI;8CAsHE,oBAAoB,YACjB,+BAA+B,KACxC,OAAO,CAAC,OAAO,CAAC;qCA0BV,oBAAoB,YACjB,+BAA+B,KACxC,OAAO,CAAC,OAAO,CAAC;uCAgCV,oBAAoB,YACjB,+BAA+B,KACxC,OAAO,CAAC,OAAO,CAAC;gCAuBV,oBAAoB,YACjB,+BAA+B,KACxC,OAAO,CAAC,0BAA0B,CAAC;gCAmDH,MAAM,EAAE,KAAG,MAAM,GAAG,SAAS;mCAU1B,MAAM,EAAE,KAAG,oBAAoB,GAAG,SAAS;8BAOhD,MAAM,EAAE,KAAG,OAAO;uCAlNT,oBAAoB,KAAG,MAAM,EAAE;gCAwBtC,oBAAoB,KAAG,MAAM,EAAE;EAgQhE,CAAC"}

package/src/cli/OptionalCliExtensions.js

@@ -13,11 +13,23 @@ const getProjectCwd = () => {
     }
     return packageRoot;
 };
+const findNearestPackageJsonDir = (cwd) => {
+    let current = cwd;
+    while (true) {
+        if (existsSync(path.join(current, 'package.json')))
+            return current;
+        const parent = path.dirname(current);
+        if (parent === current)
+            return undefined;
+        current = parent;
+    }
+};
 const resolveProjectRoot = () => {
     const configured = readEnvString('ZINTRUST_PROJECT_ROOT').trim();
     if (configured !== '')
         return configured;
-    return getProjectCwd();
+    const cwd = getProjectCwd();
+    return findNearestPackageJsonDir(cwd) ?? cwd;
 };
 const shouldLogFailures = (options) => {
     if (options?.logFailures === true)
@@ -86,6 +98,7 @@ const OPTIONAL_CLI_EXTENSIONS = Object.freeze([
         ],
     },
 ]);
+let installedExtensionsPromise;
 const getProjectLocalCandidates = (entry) => {
     const projectRoot = resolveProjectRoot();
     if (projectRoot === packageRoot)
@@ -220,6 +233,13 @@ const tryImportExtension = async (entry, options) => {
         source: 'missing',
     };
 };
+const loadAllInstalledExtensions = async () => {
+    return OPTIONAL_CLI_EXTENSIONS.reduce(async (statusesPromise, entry) => {
+        const statuses = await statusesPromise;
+        const status = await tryImportExtension(entry, { logFailures: false });
+        return [...statuses, status];
+    }, Promise.resolve([]));
+};
 const getRequestedCommand = (args) => {
     if (args.length === 0)
         return undefined;
@@ -244,7 +264,8 @@ const isRootHelpRequest = (args) => {
 };
 export const OptionalCliExtensions = Object.freeze({
     async tryImportInstalledExtensions() {
-        return Promise.all(OPTIONAL_CLI_EXTENSIONS.map(async (entry) => tryImportExtension(entry, { logFailures: false })));
+        installedExtensionsPromise ??= loadAllInstalledExtensions();
+        return installedExtensionsPromise;
     },
     async loadForArgs(args) {
         const requestedExtension = findRequestedExtension(args);
@@ -272,6 +293,7 @@ export const OptionalCliExtensions = Object.freeze({
     findRequestedExtension,
 });
 export const OptionalCliExtensionsInternal = Object.freeze({
+    loadAllInstalledExtensions,
     getProjectCwd,
     resolveProjectRoot,
     resolveProjectInstalledUrl,

package/src/cli/commands/MySqlProxyCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MySqlProxyCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/MySqlProxyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAgCrE,eAAO,MAAM,iBAAiB;cAClB,YAAY;EAatB,CAAC;AAEH,eAAe,iBAAiB,CAAC"}
+{"version":3,"file":"MySqlProxyCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/MySqlProxyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA+BrE,eAAO,MAAM,iBAAiB;cAClB,YAAY;EActB,CAAC;AAEH,eAAe,iBAAiB,CAAC"}

package/src/cli/commands/MySqlProxyCommand.js

@@ -2,7 +2,6 @@ import { BaseCommand } from '../BaseCommand.js';
 import { ensureProxyEnvLoadedForCwd } from '../commands/ProxyCommandUtils.js';
 import { addSqlProxyOptions, runSqlProxyCommand, } from '../commands/SqlProxyCommandUtils.js';
 import { Env } from '../../config/env.js';
-import { MySqlProxyServer } from '../../proxy/mysql/MySqlProxyServer.js';
 const addOptions = (command) => {
     ensureProxyEnvLoadedForCwd();
     addSqlProxyOptions(command, {
@@ -25,6 +24,7 @@ export const MySqlProxyCommand = Object.freeze({
             addOptions,
             execute: async (options) => {
                 await runSqlProxyCommand(options, async (input) => {
+                    const { MySqlProxyServer } = await import('../../proxy/mysql/MySqlProxyServer.js');
                     await MySqlProxyServer.start(input);
                 });
             },

package/src/cli/commands/RoutesCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RoutesCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/RoutesCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA2VvF,eAAO,MAAM,aAAa;cACd,YAAY;EAatB,CAAC;AAEH,eAAe,aAAa,CAAC"}
+{"version":3,"file":"RoutesCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/RoutesCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAoYvF,eAAO,MAAM,aAAa;cACd,YAAY;EAatB,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/src/cli/commands/RoutesCommand.js

@@ -9,6 +9,8 @@ import { ErrorFactory } from '../../exceptions/ZintrustError.js';
 import { isObject } from '../../helper/index.js';
 import { getServicePrefix } from '../../microservices/ServiceManifest.js';
 import { ProjectRuntime } from '../../runtime/ProjectRuntime.js';
+import { resolveNodeProjectRoot } from '../../runtime/resolveNodeProjectRoot.js';
+import { useFileLoader } from '../../runtime/useFileLoader.js';
 const parseGroupBy = (value) => {
     const raw = typeof value === 'string' ? value.trim().toLowerCase() : '';
     if (raw === '' || raw === 'group')
@@ -194,6 +196,39 @@ const registerManifestRoutes = async (router) => {
         }
     }
 };
+const ensureProjectRootEnv = async () => {
+    const projectRoot = await resolveNodeProjectRoot();
+    if ((process.env['ZINTRUST_PROJECT_ROOT'] ?? '').trim() === '') {
+        process.env['ZINTRUST_PROJECT_ROOT'] = projectRoot;
+    }
+    return projectRoot;
+};
+const loadProjectRouteRegistrar = async () => {
+    await ensureProjectRootEnv();
+    const loader = useFileLoader('routes/api.ts');
+    if (loader.exists()) {
+        try {
+            const routeModule = await loader.getModule();
+            const registerRoutes = isObject(routeModule) ? routeModule['registerRoutes'] : undefined;
+            if (typeof registerRoutes === 'function') {
+                return registerRoutes;
+            }
+        }
+        catch {
+            // Fall back to the framework alias import when the project file cannot be imported.
+        }
+    }
+    try {
+        const routeModule = (await import('../../../routes/api.js'));
+        const registerRoutes = isObject(routeModule) ? routeModule['registerRoutes'] : undefined;
+        return typeof registerRoutes === 'function'
+            ? registerRoutes
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
 const buildRows = async (options) => {
     const groupBy = parseGroupBy(options.groupBy);
     const filterText = typeof options.filter === 'string' ? options.filter.trim().toLowerCase() : '';
@@ -205,8 +240,10 @@ const buildRows = async (options) => {
     registerCoreRoutes(router);
     // 2. Try to load application routes if available
     try {
-        const { registerRoutes } = await import('../../../routes/api.js');
-        registerRoutes(router);
+        const registerRoutes = await loadProjectRouteRegistrar();
+        if (typeof registerRoutes === 'function') {
+            registerRoutes(router);
+        }
     }
     catch {
         // routes/api.ts not found, continue with just core routes

package/src/cli/commands/ScheduleStartCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ScheduleStartCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/ScheduleStartCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAiDrE,eAAO,MAAM,oBAAoB;cACrB,YAAY;EAOtB,CAAC;AAEH,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"ScheduleStartCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/ScheduleStartCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAqDrE,eAAO,MAAM,oBAAoB;cACrB,YAAY;EAOtB,CAAC;AAEH,eAAe,oBAAoB,CAAC"}

package/src/cli/commands/ScheduleStartCommand.js

@@ -21,15 +21,20 @@ const execute = async (_options) => {
     if (await ScheduleCliSupport.ensureProjectSourceContext()) {
         return;
     }
-    await ScheduleCliSupport.registerAll();
-    const registeredCount = SchedulerRuntime.list().length;
-    Logger.info('Starting schedules daemon', { registeredCount });
-    SchedulerRuntime.start();
-    const signal = await waitForSignal();
-    Logger.info('Stopping schedules daemon', { signal });
-    const timeoutMs = Env.getInt('SCHEDULE_SHUTDOWN_TIMEOUT_MS', 30000);
-    await SchedulerRuntime.stop(timeoutMs);
-    Logger.info('Schedules daemon stopped');
+    try {
+        await ScheduleCliSupport.registerAll();
+        const registeredCount = SchedulerRuntime.list().length;
+        Logger.info('Starting schedules daemon', { registeredCount });
+        SchedulerRuntime.start();
+        const signal = await waitForSignal();
+        Logger.info('Stopping schedules daemon', { signal });
+        const timeoutMs = Env.getInt('SCHEDULE_SHUTDOWN_TIMEOUT_MS', 30000);
+        await SchedulerRuntime.stop(timeoutMs);
+        Logger.info('Schedules daemon stopped');
+    }
+    finally {
+        await ScheduleCliSupport.shutdownCliResources();
+    }
 };
 export const ScheduleStartCommand = Object.freeze({
     create() {

package/src/cli/commands/schedule/ScheduleCliSupport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ScheduleCliSupport.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/schedule/ScheduleCliSupport.ts"],"names":[],"mappings":"AAyNA,eAAO,MAAM,kBAAkB;sCAzEc,OAAO,CAAC,OAAO,CAAC;mBA2EtC,OAAO,CAAC,IAAI,CAAC;gCA3BG,OAAO,CAAC,IAAI,CAAC;EAqClD,CAAC;AAEH,eAAe,kBAAkB,CAAC"}
+{"version":3,"file":"ScheduleCliSupport.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/schedule/ScheduleCliSupport.ts"],"names":[],"mappings":"AAyPA,eAAO,MAAM,kBAAkB;sCAzEc,OAAO,CAAC,OAAO,CAAC;mBA2EtC,OAAO,CAAC,IAAI,CAAC;gCA3BG,OAAO,CAAC,IAAI,CAAC;EAqClD,CAAC;AAEH,eAAe,kBAAkB,CAAC"}

package/src/cli/commands/schedule/ScheduleCliSupport.js

@@ -14,6 +14,28 @@ const isSchedule = (value) => {
         return false;
     return 'name' in value && typeof value.name === 'string';
 };
+const getDefaultExport = (moduleNamespace) => {
+    return Object.hasOwn(moduleNamespace, 'default') ? moduleNamespace['default'] : undefined;
+};
+const flattenScheduleCandidates = (moduleNamespace) => {
+    const candidates = [
+        ...Object.values(moduleNamespace),
+        getDefaultExport(moduleNamespace),
+    ];
+    return candidates.flatMap((value) => (Array.isArray(value) ? value : [value]));
+};
+const collectSchedules = (moduleNamespace) => {
+    const flattenedCandidates = flattenScheduleCandidates(moduleNamespace);
+    const seen = new Set();
+    return flattenedCandidates.filter(isSchedule).filter((schedule) => {
+        const normalizedName = schedule.name.trim();
+        if (normalizedName === '' || seen.has(normalizedName)) {
+            return false;
+        }
+        seen.add(normalizedName);
+        return true;
+    });
+};
 const getProjectScheduleLoaders = () => [
     useFileLoader('app/Schedules/index.ts'),
     useFileLoader('app/Schedules.ts'),
@@ -80,7 +102,7 @@ const tryLoadProjectScheduleModuleFromFiles = async () => {
         }
         try {
             return {
-                module: await entry.loader.get(),
+                module: await entry.loader.getModule(),
                 loadedPath: entry.loadedPath,
             };
         }
@@ -91,13 +113,16 @@ const tryLoadProjectScheduleModuleFromFiles = async () => {
     return tryAt(0);
 };
 const loadAppScheduleModule = async () => {
+    const fileLoaded = await tryLoadProjectScheduleModuleFromFiles();
+    if (fileLoaded !== undefined) {
+        return fileLoaded;
+    }
     try {
         return {
             module: (await import('../../../../app/Schedules/index.js')),
         };
     }
     catch {
-        const fileLoaded = await tryLoadProjectScheduleModuleFromFiles();
         return fileLoaded ?? { module: {} };
     }
 };
@@ -105,8 +130,8 @@ const loadScheduleModules = async () => {
     const coreSchedules = await import('../../../schedules/index.js');
     const appSchedules = await loadAppScheduleModule();
     return {
-        core: Object.values(coreSchedules).filter(isSchedule),
-        app: Object.values(appSchedules.module).filter(isSchedule),
+        core: collectSchedules(coreSchedules),
+        app: collectSchedules(appSchedules.module),
     };
 };
 const ensureProjectSourceContext = async () => {

package/src/config/env.d.ts

@@ -191,6 +191,8 @@ export declare const Env: Readonly<{
     JWT_REVOCATION_DRIVER: string;
     JWT_REVOCATION_DB_CONNECTION: string;
     JWT_REVOCATION_DB_TABLE: string;
+    BULLETPROOF_DEVICE_DB_CONNECTION: string;
+    BULLETPROOF_DEVICE_DB_TABLE: string;
     JWT_REVOCATION_REDIS_DB: number;
     JWT_REVOCATION_REDIS_PREFIX: string;
     JWT_REVOCATION_KV_BINDING: string;

package/src/config/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAClF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAsNF,eAAO,MAAM,cAAc,QAAO,WAAW,GAAG,SAAwB,CAAC;AAEzE,eAAO,MAAM,mBAAmB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,MAKzE,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,KAAK,MAAM,KAAG,MAAM,GAAG,SAKlD,CAAC;AAEF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,KAAG,OAGjC,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,KAAK,MAAM,KAAG,MAAM,GAAG,SAKlD,CAAC;AAEF,eAAO,MAAM,eAAe,QAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAEvD,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAO,gBAAyC,CAAC;AAG9E,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAIxD,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,MAMrC,CAAC;AAEF,eAAO,MAAM,MAAM,GAAI,KAAK,MAAM,EAAE,cAAc,MAAM,KAAG,MAI1D,CAAC;AAEF,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAI7D,CAAC;AAEF,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,EAAE,eAAe,OAAO,KAAG,OAI7D,CAAC;AAEF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,OAAO,MAAM,KAAG,IAGhD,CAAC;AAEF,eAAO,MAAM,KAAK,GAAI,KAAK,MAAM,KAAG,IAInC,CAAC;AAEF,eAAO,MAAM,SAAS,GAAI,QAAQ,SAAS,GAAG,IAAI,KAAG,IAEpD,CAAC;AAEF,eAAO,MAAM,QAAQ,QAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAOhD,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAKjE,CAAC;AACF,eAAO,MAAM,mBAAmB,QAAuC,CAAC;AAKxE,eAAO,MAAM,GAAG;eAnES,MAAM,iBAAiB,MAAM,KAAG,MAAM;uBA1B9B,MAAM,KAAG,MAAM,GAAG,SAAS;kBAwChC,MAAM,gBAAgB,MAAM,KAAG,MAAM;mBAYpC,MAAM,iBAAiB,OAAO,KAAG,OAAO;oBANvC,MAAM,iBAAiB,MAAM,KAAG,MAAM;eAvC3C,MAAM,KAAG,OAAO;eAmDhB,MAAM,SAAS,MAAM,KAAG,IAAI;iBAK1B,MAAM,KAAG,IAAI;wBAMN,SAAS,GAAG,IAAI,KAAG,IAAI;oBAI7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;uBA7DjB,MAAM,KAAG,MAAM,GAAG,SAAS;2BAOzB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;4BAIrB,gBAAgB;cAuFN,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAgOpB,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoFxF,CAAC;AAEH,eAAO,MAAM,aAAa,QAAO,MAchC,CAAC"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAClF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAsNF,eAAO,MAAM,cAAc,QAAO,WAAW,GAAG,SAAwB,CAAC;AAEzE,eAAO,MAAM,mBAAmB,GAAI,UAAU,MAAM,EAAE,WAAW,MAAM,KAAG,MAKzE,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,KAAK,MAAM,KAAG,MAAM,GAAG,SAKlD,CAAC;AAEF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,KAAG,OAGjC,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,KAAK,MAAM,KAAG,MAAM,GAAG,SAKlD,CAAC;AAEF,eAAO,MAAM,eAAe,QAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAEvD,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAO,gBAAyC,CAAC;AAG9E,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAIxD,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,MAMrC,CAAC;AAEF,eAAO,MAAM,MAAM,GAAI,KAAK,MAAM,EAAE,cAAc,MAAM,KAAG,MAI1D,CAAC;AAEF,eAAO,MAAM,QAAQ,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,KAAG,MAI7D,CAAC;AAEF,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,EAAE,eAAe,OAAO,KAAG,OAI7D,CAAC;AAEF,eAAO,MAAM,GAAG,GAAI,KAAK,MAAM,EAAE,OAAO,MAAM,KAAG,IAGhD,CAAC;AAEF,eAAO,MAAM,KAAK,GAAI,KAAK,MAAM,KAAG,IAInC,CAAC;AAEF,eAAO,MAAM,SAAS,GAAI,QAAQ,SAAS,GAAG,IAAI,KAAG,IAEpD,CAAC;AAEF,eAAO,MAAM,QAAQ,QAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAOhD,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAO,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAKjE,CAAC;AACF,eAAO,MAAM,mBAAmB,QAAuC,CAAC;AAKxE,eAAO,MAAM,GAAG;eAnES,MAAM,iBAAiB,MAAM,KAAG,MAAM;uBA1B9B,MAAM,KAAG,MAAM,GAAG,SAAS;kBAwChC,MAAM,gBAAgB,MAAM,KAAG,MAAM;mBAYpC,MAAM,iBAAiB,OAAO,KAAG,OAAO;oBANvC,MAAM,iBAAiB,MAAM,KAAG,MAAM;eAvC3C,MAAM,KAAG,OAAO;eAmDhB,MAAM,SAAS,MAAM,KAAG,IAAI;iBAK1B,MAAM,KAAG,IAAI;wBAMN,SAAS,GAAG,IAAI,KAAG,IAAI;oBAI7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;uBA7DjB,MAAM,KAAG,MAAM,GAAG,SAAS;2BAOzB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;4BAIrB,gBAAgB;cAuFN,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAkOpB,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoFxF,CAAC;AAEH,eAAO,MAAM,aAAa,QAAO,MAchC,CAAC"}

package/src/config/env.js

@@ -440,6 +440,8 @@ export const Env = Object.freeze({
     JWT_REVOCATION_DRIVER: get('JWT_REVOCATION_DRIVER', 'database'),
     JWT_REVOCATION_DB_CONNECTION: get('JWT_REVOCATION_DB_CONNECTION', 'default'),
     JWT_REVOCATION_DB_TABLE: get('JWT_REVOCATION_DB_TABLE', 'zintrust_jwt_revocations'),
+    BULLETPROOF_DEVICE_DB_CONNECTION: get('BULLETPROOF_DEVICE_DB_CONNECTION', 'default'),
+    BULLETPROOF_DEVICE_DB_TABLE: get('BULLETPROOF_DEVICE_DB_TABLE', 'zintrust_bulletproof_devices'),
     JWT_REVOCATION_REDIS_DB: getInt('JWT_REVOCATION_REDIS_DB', 0),
     JWT_REVOCATION_REDIS_PREFIX: get('JWT_REVOCATION_REDIS_PREFIX', 'zt:jwt:revoked:'),
     JWT_REVOCATION_KV_BINDING: get('JWT_REVOCATION_KV_BINDING', 'CACHE'),

package/src/http/Request.d.ts

@@ -22,6 +22,7 @@ export interface IRequest {
     getHeaders(): http.IncomingHttpHeaders;
     readonly headers: http.IncomingHttpHeaders;
     getHeader(name: string): HeadParam;
+    header(name: string): HeadParam;
     getParams(): Record<string, string>;
     getParam(key: string): string | undefined;
     setParams(params: Record<string, string>): void;

package/src/http/Request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Request.d.ts","sourceRoot":"","sources":["../../../src/http/Request.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE5F,OAAO,KAAK,KAAK,IAAI,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,KAAK,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;AAE/C,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,SAAS,EAAE;QACT,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF,SAAS,IAAI,MAAM,CAAC;IACpB,OAAO,IAAI,MAAM,CAAC;IAClB,UAAU,IAAI,IAAI,CAAC,mBAAmB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC3C,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC1C,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAChD,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,OAAO,IAAI,OAAO,CAAC;IACnB,MAAM,IAAI,OAAO,CAAC;IAClB,MAAM,IAAI,IAAI,CAAC,eAAe,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAGjC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,YAAY,GAAG,SAAS,CAAC;IAC/E,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,YAAY,EAAE,CAAC;IACtE,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,UAAU,IAAI,kBAAkB,CAAC;IAEjC;;;OAGG;IACH,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEhC;;OAEG;IACH,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;CACpD;AAED,MAAM,MAAM,gBAAgB,CAC1B,KAAK,GAAG,OAAO,EACf,MAAM,GAAG,OAAO,EAChB,OAAO,GAAG,OAAO,EACjB,QAAQ,GAAG,OAAO,IAChB,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG;IAChC,SAAS,EAAE;QACT,IAAI,EAAE,KAAK,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,EAAE,QAAQ,CAAC;KACnB,CAAC;CACH,CAAC;AA2SF,eAAO,MAAM,OAAO;IAClB;;OAEG;gBACS,IAAI,CAAC,eAAe,GAAG,QAAQ;EAO3C,CAAC;AAEH,eAAe,OAAO,CAAC"}
+{"version":3,"file":"Request.d.ts","sourceRoot":"","sources":["../../../src/http/Request.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE5F,OAAO,KAAK,KAAK,IAAI,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,KAAK,SAAS,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;AAE/C,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,SAAS,EAAE;QACT,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF,SAAS,IAAI,MAAM,CAAC;IACpB,OAAO,IAAI,MAAM,CAAC;IAClB,UAAU,IAAI,IAAI,CAAC,mBAAmB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC3C,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC1C,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAChD,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,OAAO,IAAI,OAAO,CAAC;IACnB,MAAM,IAAI,OAAO,CAAC;IAClB,MAAM,IAAI,IAAI,CAAC,eAAe,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAGjC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,YAAY,GAAG,SAAS,CAAC;IAC/E,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,YAAY,EAAE,CAAC;IACtE,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,UAAU,IAAI,kBAAkB,CAAC;IAEjC;;;OAGG;IACH,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEhC;;OAEG;IACH,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;CACpD;AAED,MAAM,MAAM,gBAAgB,CAC1B,KAAK,GAAG,OAAO,EACf,MAAM,GAAG,OAAO,EAChB,OAAO,GAAG,OAAO,EACjB,QAAQ,GAAG,OAAO,IAChB,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG;IAChC,SAAS,EAAE;QACT,IAAI,EAAE,KAAK,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,EAAE,QAAQ,CAAC;KACnB,CAAC;CACH,CAAC;AA+SF,eAAO,MAAM,OAAO;IAClB;;OAEG;gBACS,IAAI,CAAC,eAAe,GAAG,QAAQ;EAO3C,CAAC;AAEH,eAAe,OAAO,CAAC"}

package/src/http/Request.js

@@ -105,6 +105,9 @@ function createHttpHelpers(req) {
         getHeader(name) {
             return req.headers[name.toLowerCase()];
         },
+        header(name) {
+            return req.headers[name.toLowerCase()];
+        },
     };
 }
 /**

package/src/index.d.ts

@@ -31,6 +31,7 @@ export { RequestContext } from './http/RequestContext';
 export { Response } from './http/Response';
 export type { IResponse } from './http/Response';
 export { getValidatedBody, getValidatedHeaders, getValidatedParams, getValidatedQuery, hasValidatedBody, requireValidatedBody, ValidationHelper, } from './http/ValidationHelper';
+export { BulletproofAuthMiddleware } from './middleware/BulletproofAuthMiddleware';
 export { CsrfMiddleware } from './middleware/CsrfMiddleware';
 export { ErrorHandlerMiddleware } from './middleware/ErrorHandlerMiddleware';
 export { LoggingMiddleware } from './middleware/LoggingMiddleware';
@@ -64,8 +65,8 @@ export type { RouteMeta, RouteMetaInput, RouteRegistration } from './routes/Rout
 export { DatabaseAdapterRegistry } from './orm/DatabaseAdapterRegistry';
 export { generateSecureJobId, generateUuid, getString, Utilities, type UtilitiesType, } from './common/utility';
 export { ContextLoader } from './common/ContextLoader';
-export { delay, ensureDirSafe } from './common/index';
 export type { ContextLoaderBatchHandler, ContextLoaderBatchKey, ContextLoaderBatchResult, ContextLoaderContext, ContextLoaderInstance, ContextLoaderMode, ContextLoaderPlan, ContextLoaderResolver, } from './common/ContextLoader';
+export { delay, ensureDirSafe } from './common/index';
 export { collect, Collection } from './collections/index';
 export type { ICollection, PrimitiveKey } from './collections/index';
 export { HttpClient } from './tools/http/Http';
@@ -87,6 +88,7 @@ export type { FieldError } from './validation/ValidationError';
 export { Schema, Validator } from './validation/Validator';
 export type { ISchema, SchemaType } from './validation/Validator';
 export { Schedule } from './scheduler/Schedule';
+export { BulletproofDeviceStore } from './security/BulletproofDeviceStore';
 export { CsrfTokenManager } from './security/CsrfTokenManager';
 export type { CsrfTokenData, CsrfTokenManagerType, ICsrfTokenManager, } from './security/CsrfTokenManager';
 export { EncryptedEnvelope } from './security/EncryptedEnvelope';
@@ -95,6 +97,8 @@ export { Hash } from './security/Hash';
 export { JwtManager } from './security/JwtManager';
 export type { IJwtManager, JwtAlgorithm, JwtManagerType, JwtOptions, JwtPayload, } from './security/JwtManager';
 export { JwtSessions } from './security/JwtSessions';
+export { JwtVerifier } from './security/JwtVerifier';
+export type { JwtVerifierAlgorithm, JwtVerifierFailure, JwtVerifierFailureReason, JwtVerifierJwk, JwtVerifierJwksDocument, JwtVerifierResult, JwtVerifierSuccess, JwtVerifierWithJwkInput, JwtVerifierWithJwksInput, } from './security/JwtVerifier';
 export { PasswordResetTokenBroker } from './security/PasswordResetTokenBroker';
 export type { IPasswordResetTokenBroker, IPasswordResetTokenStore, PasswordResetTokenBrokerOptions, PasswordResetTokenBrokerType, PasswordResetTokenRecord, } from './security/PasswordResetTokenBroker';
 export { createSanitizer, Sanitizer, type SanitizerType } from './security/Sanitizer';
@@ -178,13 +182,13 @@ export { SendGridDriver } from './tools/mail/drivers/SendGrid';
 export type { SendGridConfig, MailAddress as SendGridMailAddress, MailAttachment as SendGridMailAttachment, MailMessage as SendGridMailMessage, SendResult as SendGridSendResult, } from './tools/mail/drivers/SendGrid';
 export { MailgunDriver } from './tools/mail/drivers/Mailgun';
 export type { MailgunConfig, MailMessage as MailgunMessage, SendResult as MailgunResult, } from './tools/mail/drivers/Mailgun';
+export { NotificationComposer } from './tools/notification/Composer';
+export type { NotificationChannelHandler, NotificationComposeBuilder, NotificationComposeChannelResult, NotificationComposeError, NotificationComposeOptions, NotificationComposePolicy, NotificationComposeResult, } from './tools/notification/Composer';
 export { sendSlackWebhook } from './tools/notification/drivers/Slack';
 export { TermiiDriver } from './tools/notification/drivers/Termii';
 export { sendSms } from './tools/notification/drivers/Twilio';
 export { Notification } from './tools/notification/Notification';
-export { NotificationComposer } from './tools/notification/Composer';
 export { NotificationRegistry } from './tools/notification/Registry';
-export type { NotificationChannelHandler, NotificationComposeBuilder, NotificationComposeChannelResult, NotificationComposeError, NotificationComposeOptions, NotificationComposePolicy, NotificationComposeResult, } from './tools/notification/Composer';
 export { MarkdownRenderer } from './tools/templates';
 export { RuntimeHealthProbes } from './health/RuntimeHealthProbes';
 export { Broadcast } from './tools/broadcast/Broadcast';
@@ -223,7 +227,7 @@ export { default as logCleanup } from './schedules/log-cleanup';
 export * as NodeSingletons from './node-singletons/index';
 export { Auth } from './auth/Auth';
 export { LoginFlow } from './auth/LoginFlow';
-export type { LoginFlowAuditEvent, LoginFlowAuditor, LoginFlowBuilder, LoginFlowCreateOptions, LoginFlowError, LoginFlowIdentity, LoginFlowIssuer, LoginFlowIssuerInput, LoginFlowProvider, LoginFlowResult, LoginFlowStage, LoginFlowVerifiedRecord, } from './auth/LoginFlow';
+export type { BulletproofJwtIssued, LoginFlowAuditEvent, LoginFlowAuditor, LoginFlowBuilder, LoginFlowCreateOptions, LoginFlowError, LoginFlowIdentity, LoginFlowIssuer, LoginFlowIssuerInput, LoginFlowProvider, LoginFlowResult, LoginFlowStage, LoginFlowVerifiedRecord, } from './auth/LoginFlow';
 export { MicroserviceGenerator } from './microservices/MicroserviceGenerator';
 export type { GenerateServiceOptions, IMicroserviceGenerator, } from './microservices/MicroserviceGenerator';
 export { ErrorHandler as ProxyErrorHandler } from './proxy/ErrorHandler';