@zintrust/core 2.3.1 → 2.4.1

package/src/profiling/types.d.ts

@@ -1,77 +0,0 @@
-/**
- * Profiling Type Definitions
- * Shared interfaces for query logging, N+1 detection, and memory profiling
- */
-export declare const PROFILING_TYPES_MODULE: string;
-/**
- * Log entry for a single database query execution
- */
-export interface QueryLogEntry {
-    sql: string;
-    params: unknown[];
-    duration: number;
-    timestamp: Date;
-    context: string;
-    executionCount?: number;
-}
-/**
- * Detected N+1 query pattern
- */
-export interface N1Pattern {
-    table: string;
-    queryCount: number;
-    query: string;
-    severity: 'warning' | 'critical';
-}
-/**
- * Memory snapshot at a point in time
- */
-export interface MemorySnapshot {
-    heapUsed: number;
-    heapTotal: number;
-    external: number;
-    rss: number;
-    timestamp: Date;
-}
-/**
- * Memory delta between two snapshots
- */
-export interface MemoryDelta {
-    heapUsed: number;
-    heapTotal: number;
-    external: number;
-    rss: number;
-}
-/**
- * N1Detector analyzes query logs to identify N+1 patterns
- * Groups identical queries and flags those executed 5+ times as critical
- */
-export interface IN1Detector {
-    /**
-     * Extract table name from SQL query
-     */
-    extractTableFromSQL(sql: string): string;
-    /**
-     * Detect N+1 patterns in query log
-     */
-    detect(queryLog: QueryLogEntry[]): N1Pattern[];
-    /**
-     * Get severity level based on repetition count
-     */
-    getSeverity(count: number): 'warning' | 'critical';
-    /**
-     * Generate human-readable summary of N+1 patterns
-     */
-    generateSummary(patterns: N1Pattern[]): string;
-}
-/**
- * Complete profile report for a request
- */
-export interface ProfileReport {
-    duration: number;
-    queriesExecuted: number;
-    n1Patterns: N1Pattern[];
-    memoryDelta: MemoryDelta;
-    timestamp: Date;
-}
-//# sourceMappingURL=types.d.ts.map

package/src/profiling/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/profiling/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,sBAAsB,QAAkC,CAAC;AAEtE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,SAAS,GAAG,UAAU,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAEzC;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,SAAS,EAAE,CAAC;IAE/C;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;IAEnD;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;CACjB"}

package/src/profiling/types.js

@@ -1,5 +0,0 @@
-/**
- * Profiling Type Definitions
- * Shared interfaces for query logging, N+1 detection, and memory profiling
- */
-export const PROFILING_TYPES_MODULE = Object.freeze('ProfilingTypes');

package/src/proxy/CloudflareProxyShared.d.ts

@@ -1,45 +0,0 @@
-import type { WorkerSigningOptions } from './WorkerSigning';
-export type { ProxyNonceNamespace, ProxyNoncePutOptions, WorkerSigningOptions, } from './WorkerSigning';
-type ReadAndVerifyJsonOptions = WorkerSigningOptions & Readonly<{
-    defaultMaxBodyBytes: number;
-}>;
-type ProxyRequestEnv = object;
-export type ProxyRpcService = 'redis' | 'worker' | 'queue-monitor';
-export type ProxyRpcEnvelope = Readonly<{
-    service: ProxyRpcService;
-    action: string;
-    requestId: string;
-    payload: Record<string, unknown>;
-}>;
-export declare const resolveProxyRpcService: (subsystem?: string) => ProxyRpcService;
-export declare const json: (status: number, body: unknown) => Response;
-export declare const toErrorResponse: (status: number, code: string, message: string) => Response;
-export declare const getEnvInt: (env: ProxyRequestEnv, name: string, fallback: number) => number;
-export declare const normalizeBindingName: (value: unknown) => string | null;
-export declare const readBodyBytes: (request: Request, maxBytes: number) => Promise<{
-    ok: true;
-    bytes: Uint8Array;
-    text: string;
-} | {
-    ok: false;
-    response: Response;
-}>;
-export declare const parseOptionalJson: (text: string) => {
-    ok: true;
-    payload: Record<string, unknown> | null;
-} | {
-    ok: false;
-    response: Response;
-};
-export declare const verifySignedRequest: (request: Request, env: ProxyRequestEnv, bodyBytes: Uint8Array, options: WorkerSigningOptions) => Promise<Response | {
-    ok: true;
-}>;
-export declare const readAndVerifyJson: (request: Request, env: ProxyRequestEnv, options: ReadAndVerifyJsonOptions) => Promise<{
-    ok: true;
-    payload: Record<string, unknown> | null;
-    bodyBytes: Uint8Array;
-} | {
-    ok: false;
-    response: Response;
-}>;
-//# sourceMappingURL=CloudflareProxyShared.d.ts.map

package/src/proxy/CloudflareProxyShared.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CloudflareProxyShared.d.ts","sourceRoot":"","sources":["../../../src/proxy/CloudflareProxyShared.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAGjE,YAAY,EACV,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAE9B,KAAK,wBAAwB,GAAG,oBAAoB,GAClD,QAAQ,CAAC;IACP,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC,CAAC;AAEL,KAAK,eAAe,GAAG,MAAM,CAAC;AAE9B,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,QAAQ,GAAG,eAAe,CAAC;AAEnE,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IACtC,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH,eAAO,MAAM,sBAAsB,GAAI,YAAY,MAAM,KAAG,eAK3D,CAAC;AAEF,eAAO,MAAM,IAAI,GAAI,QAAQ,MAAM,EAAE,MAAM,OAAO,KAAG,QAQpD,CAAC;AAEF,eAAO,MAAM,eAAe,GAAI,QAAQ,MAAM,EAAE,MAAM,MAAM,EAAE,SAAS,MAAM,KAAG,QAG/E,CAAC;AAMF,eAAO,MAAM,SAAS,GAAI,KAAK,eAAe,EAAE,MAAM,MAAM,EAAE,UAAU,MAAM,KAAG,MAKhF,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAI,OAAO,OAAO,KAAG,MAAM,GAAG,IAI9D,CAAC;AAEF,eAAO,MAAM,aAAa,GACxB,SAAS,OAAO,EAChB,UAAU,MAAM,KACf,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAY3F,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAC5B,MAAM,MAAM,KACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAezF,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,SAAS,OAAO,EAChB,KAAK,eAAe,EACpB,WAAW,UAAU,EACrB,SAAS,oBAAoB,KAC5B,OAAO,CAAC,QAAQ,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAQjC,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAC5B,SAAS,OAAO,EAChB,KAAK,eAAe,EACpB,SAAS,wBAAwB,KAChC,OAAO,CACN;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,UAAU,CAAA;CAAE,GAC5E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAapC,CAAC"}

package/src/proxy/CloudflareProxyShared.js

@@ -1,89 +0,0 @@
-import { isString } from '../helper/index.js';
-import { ErrorHandler } from './ErrorHandler.js';
-import { RequestValidator } from './RequestValidator.js';
-import { WorkerSigning } from './WorkerSigning.js';
-export const resolveProxyRpcService = (subsystem) => {
-    const normalized = typeof subsystem === 'string' ? subsystem.trim().toLowerCase() : '';
-    if (normalized.startsWith('queue-monitor'))
-        return 'queue-monitor';
-    if (normalized.startsWith('worker'))
-        return 'worker';
-    return 'redis';
-};
-export const json = (status, body) => {
-    return new Response(JSON.stringify(body), {
-        status,
-        headers: {
-            'Content-Type': 'application/json; charset=utf-8',
-            'Cache-Control': 'no-store',
-        },
-    });
-};
-export const toErrorResponse = (status, code, message) => {
-    const error = ErrorHandler.toProxyError(status, code, message);
-    return json(error.status, error.body);
-};
-const getEnvValue = (env, name) => {
-    return env[name];
-};
-export const getEnvInt = (env, name, fallback) => {
-    const raw = getEnvValue(env, name);
-    if (!isString(raw))
-        return fallback;
-    const parsed = Number.parseInt(raw, 10);
-    return Number.isFinite(parsed) ? parsed : fallback;
-};
-export const normalizeBindingName = (value) => {
-    if (!isString(value))
-        return null;
-    const trimmed = value.trim();
-    return trimmed === '' ? null : trimmed;
-};
-export const readBodyBytes = async (request, maxBytes) => {
-    const buf = await request.arrayBuffer();
-    if (buf.byteLength > maxBytes) {
-        return {
-            ok: false,
-            response: toErrorResponse(413, 'PAYLOAD_TOO_LARGE', 'Body too large'),
-        };
-    }
-    const bytes = new Uint8Array(buf);
-    const text = new TextDecoder().decode(bytes);
-    return { ok: true, bytes, text };
-};
-export const parseOptionalJson = (text) => {
-    if (text.trim() === '')
-        return { ok: true, payload: null };
-    const parsed = RequestValidator.parseJson(text);
-    if (!parsed.ok) {
-        let message = parsed.error.message;
-        if (parsed.error.code === 'INVALID_JSON') {
-            message = 'Invalid JSON body';
-        }
-        else if (parsed.error.code === 'VALIDATION_ERROR') {
-            message = 'Invalid body';
-        }
-        return { ok: false, response: toErrorResponse(400, parsed.error.code, message) };
-    }
-    return { ok: true, payload: parsed.value };
-};
-export const verifySignedRequest = async (request, env, bodyBytes, options) => {
-    const verifyResult = await WorkerSigning.verifySignedRequest(request, env, bodyBytes, options);
-    if (!verifyResult.ok) {
-        return toErrorResponse(verifyResult.status, verifyResult.code, verifyResult.message);
-    }
-    return { ok: true };
-};
-export const readAndVerifyJson = async (request, env, options) => {
-    const maxBodyBytes = getEnvInt(env, 'ZT_MAX_BODY_BYTES', options.defaultMaxBodyBytes);
-    const bodyResult = await readBodyBytes(request, maxBodyBytes);
-    if (!bodyResult.ok)
-        return { ok: false, response: bodyResult.response };
-    const auth = await verifySignedRequest(request, env, bodyResult.bytes, options);
-    if (auth instanceof Response)
-        return { ok: false, response: auth };
-    const parsed = parseOptionalJson(bodyResult.text);
-    if (!parsed.ok)
-        return { ok: false, response: parsed.response };
-    return { ok: true, payload: parsed.payload, bodyBytes: bodyResult.bytes };
-};

package/src/proxy/ErrorHandler.d.ts

@@ -1,11 +0,0 @@
-export type ProxyErrorResponse = Readonly<{
-    status: number;
-    body: {
-        code: string;
-        message: string;
-    };
-}>;
-export declare const ErrorHandler: Readonly<{
-    toProxyError: (status: number, code: string, message: string) => ProxyErrorResponse;
-}>;
-//# sourceMappingURL=ErrorHandler.d.ts.map

package/src/proxy/ErrorHandler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ErrorHandler.d.ts","sourceRoot":"","sources":["../../../src/proxy/ErrorHandler.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC,CAAC,CAAC;AAOH,eAAO,MAAM,YAAY;2BALK,MAAM,QAAQ,MAAM,WAAW,MAAM,KAAG,kBAAkB;EAOtF,CAAC"}

package/src/proxy/ErrorHandler.js

@@ -1,7 +0,0 @@
-const toProxyError = (status, code, message) => ({
-    status,
-    body: { code, message },
-});
-export const ErrorHandler = Object.freeze({
-    toProxyError,
-});

package/src/proxy/PoolManager.d.ts

@@ -1,8 +0,0 @@
-export type PoolFactory<T> = () => T;
-export type PoolDisposer<T> = (pool: T) => Promise<void> | void;
-export type PoolManager<T> = Readonly<{
-    get: () => T;
-    dispose: () => Promise<void>;
-}>;
-export declare const createPoolManager: <T>(create: PoolFactory<T>, dispose: PoolDisposer<T>) => PoolManager<T>;
-//# sourceMappingURL=PoolManager.d.ts.map

package/src/proxy/PoolManager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PoolManager.d.ts","sourceRoot":"","sources":["../../../src/proxy/PoolManager.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AACrC,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAEhE,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,QAAQ,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC,CAAC;IACb,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC,CAAC;AAEH,eAAO,MAAM,iBAAiB,GAAI,CAAC,EACjC,QAAQ,WAAW,CAAC,CAAC,CAAC,EACtB,SAAS,YAAY,CAAC,CAAC,CAAC,KACvB,WAAW,CAAC,CAAC,CAmBf,CAAC"}

package/src/proxy/PoolManager.js

@@ -1,18 +0,0 @@
-export const createPoolManager = (create, dispose) => {
-    let pool = null;
-    const get = () => {
-        pool ??= create();
-        return pool;
-    };
-    const disposePool = async () => {
-        if (pool === null)
-            return;
-        const current = pool;
-        pool = null;
-        await Promise.resolve(dispose(current));
-    };
-    return Object.freeze({
-        get,
-        dispose: disposePool,
-    });
-};

package/src/proxy/ProxyBackend.d.ts

@@ -1,18 +0,0 @@
-export type ProxyRequest = Readonly<{
-    method: string;
-    path: string;
-    headers: Record<string, string | undefined>;
-    body: string;
-}>;
-export type ProxyResponse = Readonly<{
-    status: number;
-    body: unknown;
-    headers?: Record<string, string>;
-}>;
-export type ProxyBackend = Readonly<{
-    name: string;
-    handle: (request: ProxyRequest) => Promise<ProxyResponse>;
-    health: () => Promise<ProxyResponse>;
-    shutdown?: () => Promise<void>;
-}>;
-//# sourceMappingURL=ProxyBackend.d.ts.map

package/src/proxy/ProxyBackend.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProxyBackend.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyBackend.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;CACd,CAAC,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC,CAAC,CAAC"}

package/src/proxy/ProxyBackend.js

@@ -1 +0,0 @@
-export {};

package/src/proxy/ProxyConfig.d.ts

@@ -1,12 +0,0 @@
-export type ProxySigningConfig = Readonly<{
-    keyId: string;
-    secret: string;
-    require: boolean;
-    windowMs: number;
-}>;
-export type ProxyServerConfig = Readonly<{
-    host: string;
-    port: number;
-    maxBodyBytes: number;
-}>;
-//# sourceMappingURL=ProxyConfig.d.ts.map

package/src/proxy/ProxyConfig.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProxyConfig.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyConfig.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC"}

package/src/proxy/ProxyConfig.js

@@ -1 +0,0 @@
-export {};

package/src/proxy/ProxyRegistry.d.ts

@@ -1,10 +0,0 @@
-export type ProxyRegistration = Readonly<{
-    name: string;
-    description: string;
-}>;
-export declare const ProxyRegistry: Readonly<{
-    register: (proxy: ProxyRegistration) => void;
-    get: (name: string) => ProxyRegistration | undefined;
-    list: () => ProxyRegistration[];
-}>;
-//# sourceMappingURL=ProxyRegistry.d.ts.map

package/src/proxy/ProxyRegistry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProxyRegistry.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyRegistry.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAAC;AAYH,eAAO,MAAM,aAAa;sBARD,iBAAiB,KAAG,IAAI;gBAI9B,MAAM,KAAG,iBAAiB,GAAG,SAAS;gBAExC,iBAAiB,EAAE;EAMlC,CAAC"}

package/src/proxy/ProxyRegistry.js

@@ -1,11 +0,0 @@
-const registry = new Map();
-const register = (proxy) => {
-    registry.set(proxy.name, proxy);
-};
-const get = (name) => registry.get(name);
-const list = () => Array.from(registry.values());
-export const ProxyRegistry = Object.freeze({
-    register,
-    get,
-    list,
-});

package/src/proxy/ProxyRequestParsing.d.ts

@@ -1,9 +0,0 @@
-import type { ProxyResponse } from './ProxyBackend';
-export declare const validateProxyRequest: (request: {
-    method: string;
-}) => ProxyResponse | null;
-export declare const parseJsonBody: (body: string) => {
-    ok: true;
-    value: Record<string, unknown>;
-} | ProxyResponse;
-//# sourceMappingURL=ProxyRequestParsing.d.ts.map

package/src/proxy/ProxyRequestParsing.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProxyRequestParsing.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyRequestParsing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,eAAO,MAAM,oBAAoB,GAAI,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,KAAG,aAAa,GAAG,IAMlF,CAAC;AAEF,eAAO,MAAM,aAAa,GACxB,MAAM,MAAM,KACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,aAMjD,CAAC"}

package/src/proxy/ProxyRequestParsing.js

@@ -1,16 +0,0 @@
-import { ErrorHandler } from './ErrorHandler.js';
-import { RequestValidator } from './RequestValidator.js';
-export const validateProxyRequest = (request) => {
-    const methodError = RequestValidator.requirePost(request.method);
-    if (methodError) {
-        return ErrorHandler.toProxyError(405, methodError.code, methodError.message);
-    }
-    return null;
-};
-export const parseJsonBody = (body) => {
-    const parsed = RequestValidator.parseJson(body);
-    if (!parsed.ok) {
-        return ErrorHandler.toProxyError(400, parsed.error.code, parsed.error.message);
-    }
-    return { ok: true, value: parsed.value };
-};

package/src/proxy/ProxyServer.d.ts

@@ -1,21 +0,0 @@
-import { type IncomingMessage, type Server } from '../node-singletons/http';
-import type { ProxyBackend } from './ProxyBackend';
-export type ProxyServerOptions = Readonly<{
-    host: string;
-    port: number;
-    maxBodyBytes: number;
-    backend: ProxyBackend;
-    verify?: (req: IncomingMessage, body: string) => Promise<{
-        ok: true;
-    } | {
-        ok: false;
-        status: number;
-        message: string;
-    }>;
-}>;
-export declare const createProxyServer: (options: ProxyServerOptions) => Readonly<{
-    start: () => Promise<void>;
-    stop: () => Promise<void>;
-    server: Server;
-}>;
-//# sourceMappingURL=ProxyServer.d.ts.map

package/src/proxy/ProxyServer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProxyServer.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyServer.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,MAAM,EAEZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,YAAY,EAA+B,MAAM,qBAAqB,CAAC;AAErF,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,CAAC,EAAE,CACP,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,MAAM,KACT,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7E,CAAC,CAAC;AA0CH,eAAO,MAAM,iBAAiB,GAC5B,SAAS,kBAAkB,KAC1B,QAAQ,CAAC;IACV,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB,CAkEA,CAAC"}

package/src/proxy/ProxyServer.js

@@ -1,93 +0,0 @@
-import { ErrorFactory } from '../exceptions/ZintrustError.js';
-import { createServer, } from '../node-singletons/http.js';
-const readBody = async (req, maxBodyBytes) => {
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of req) {
-        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        size += buffer.length;
-        if (size > maxBodyBytes) {
-            throw ErrorFactory.createValidationError('Body too large');
-        }
-        chunks.push(buffer);
-    }
-    return Buffer.concat(chunks).toString('utf8');
-};
-const respond = (res, response) => {
-    res.writeHead(response.status, {
-        'Content-Type': 'application/json; charset=utf-8',
-        'Cache-Control': 'no-store',
-        ...response.headers,
-    });
-    res.end(JSON.stringify(response.body));
-};
-const toProxyRequest = (req, body) => {
-    const url = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
-    const headers = {};
-    for (const [key, value] of Object.entries(req.headers)) {
-        headers[key.toLowerCase()] = Array.isArray(value) ? value.join(',') : value;
-    }
-    return {
-        method: req.method ?? 'POST',
-        path: url.pathname,
-        headers,
-        body,
-    };
-};
-export const createProxyServer = (options) => {
-    const server = createServer(async (req, res) => {
-        try {
-            const body = await readBody(req, options.maxBodyBytes);
-            const rawUrl = req.url ?? '';
-            if (rawUrl.startsWith('/containerstarthealthcheck') ||
-                rawUrl.startsWith('containerstarthealthcheck')) {
-                respond(res, {
-                    status: 200,
-                    body: { status: 'ok' },
-                });
-                return;
-            }
-            if ((req.url ?? '').startsWith('/health')) {
-                const response = await options.backend.health();
-                respond(res, response);
-                return;
-            }
-            if (options.verify) {
-                const verified = await options.verify(req, body);
-                if (!verified.ok) {
-                    respond(res, {
-                        status: verified.status,
-                        body: { code: 'UNAUTHORIZED', message: verified.message },
-                    });
-                    return;
-                }
-            }
-            const request = toProxyRequest(req, body);
-            const response = await options.backend.handle(request);
-            respond(res, response);
-        }
-        catch (error) {
-            respond(res, {
-                status: 500,
-                body: { code: 'PROXY_ERROR', message: String(error) },
-            });
-        }
-    });
-    const start = async () => new Promise((resolve) => {
-        server.listen(options.port, options.host, () => resolve());
-    });
-    const stop = async () => new Promise((resolve, reject) => {
-        server.close((error) => {
-            if (error) {
-                reject(error);
-                return;
-            }
-            resolve();
-        });
-    });
-    return Object.freeze({
-        start,
-        stop,
-        server,
-    });
-};

package/src/proxy/ProxyServerUtils.d.ts

@@ -1,37 +0,0 @@
-import type { IncomingMessage } from '../node-singletons/http';
-import type { ProxySigningConfig } from './ProxyConfig';
-export type BaseProxyConfig = {
-    host: string;
-    port: number;
-    maxBodyBytes: number;
-};
-export type BaseProxyOverrides = Partial<{
-    host: string;
-    port: number;
-    maxBodyBytes: number;
-    requireSigning: boolean;
-    keyId: string;
-    secret: string;
-    signingWindowMs: number;
-}>;
-export declare const resolveBaseConfig: (overrides: BaseProxyOverrides, prefix: string, defaults?: {
-    host?: string;
-    port?: number;
-    maxBodyBytes?: number;
-}) => BaseProxyConfig;
-export declare const resolveBaseSigningConfig: (overrides: BaseProxyOverrides, prefix: string) => {
-    keyId: string;
-    secret: string;
-    requireSigning: boolean;
-    signingWindowMs: number;
-};
-export declare const verifyRequestSignature: (req: IncomingMessage, body: string, config: {
-    signing: ProxySigningConfig;
-}, serviceName: string) => Promise<{
-    ok: boolean;
-    error?: {
-        status: number;
-        message: string;
-    };
-}>;
-//# sourceMappingURL=ProxyServerUtils.d.ts.map

package/src/proxy/ProxyServerUtils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProxyServerUtils.d.ts","sourceRoot":"","sources":["../../../src/proxy/ProxyServerUtils.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAI7D,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAuCH,eAAO,MAAM,iBAAiB,GAC5B,WAAW,kBAAkB,EAC7B,QAAQ,MAAM,EACd,WAAW;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,KACjE,eAUF,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,WAAW,kBAAkB,EAC7B,QAAQ,MAAM,KACb;IACD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;CAOtB,CAAC;AAEL,eAAO,MAAM,sBAAsB,GACjC,KAAK,eAAe,EACpB,MAAM,MAAM,EACZ,QAAQ;IAAE,OAAO,EAAE,kBAAkB,CAAA;CAAE,EACvC,aAAa,MAAM,KAClB,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAoCtE,CAAC"}

package/src/proxy/ProxyServerUtils.js

@@ -1,83 +0,0 @@
-import { Env } from '../config/env.js';
-import { Logger } from '../config/logger.js';
-import { isNonEmptyString } from '../helper/index.js';
-import { resolveProxySigningConfig } from './ProxySigningConfigResolver.js';
-import { extractSigningHeaders, verifyProxySignatureIfNeeded } from './ProxySigningRequest.js';
-const PROXY_DEBUG_ENV_BY_SERVICE = Object.freeze({
-    MySQLProxyServer: 'MYSQL_PROXY_DEBUG',
-    PostgresProxyServer: 'POSTGRES_PROXY_DEBUG',
-    RedisProxyServer: 'REDIS_PROXY_DEBUG',
-    SqlServerProxyServer: 'SQLSERVER_PROXY_DEBUG',
-});
-const parseProxyDebugValue = (raw) => {
-    const normalized = raw.trim().toLowerCase();
-    if (normalized === 'true' || normalized === '1' || normalized === 'yes')
-        return true;
-    if (normalized === 'false' || normalized === '0' || normalized === 'no')
-        return false;
-    return undefined;
-};
-const resolveProxyDebugEnabled = (serviceName) => {
-    const serviceEnvKey = PROXY_DEBUG_ENV_BY_SERVICE[serviceName];
-    const serviceRaw = serviceEnvKey ? Env.get(serviceEnvKey, '') : '';
-    if (isNonEmptyString(serviceRaw)) {
-        const parsed = parseProxyDebugValue(serviceRaw);
-        if (parsed !== undefined)
-            return parsed;
-    }
-    const sharedRaw = Env.get('ZT_PROXY_DEBUG', '');
-    if (isNonEmptyString(sharedRaw)) {
-        const parsed = parseProxyDebugValue(sharedRaw);
-        if (parsed !== undefined)
-            return parsed;
-    }
-    return false;
-};
-const withTraceSkipProxyContext = (context) => ({
-    ...context,
-    __zintrustSkipTraceLog: true,
-});
-export const resolveBaseConfig = (overrides, prefix, defaults) => {
-    const host = overrides.host ?? Env.get(`${prefix}_PROXY_HOST`, Env.HOST ?? defaults?.host ?? '127.0.0.1');
-    const port = overrides.port ?? Env.getInt(`${prefix}_PROXY_PORT`, Env.PORT ?? defaults?.port ?? 3000);
-    const maxBodyBytes = overrides.maxBodyBytes ??
-        Env.getInt(`${prefix}_PROXY_MAX_BODY_BYTES`, Env.MAX_BODY_SIZE ?? defaults?.maxBodyBytes ?? 0);
-    return { host, port, maxBodyBytes };
-};
-export const resolveBaseSigningConfig = (overrides, prefix) => resolveProxySigningConfig(overrides, {
-    keyIdEnvVar: `${prefix}_PROXY_KEY_ID`,
-    secretEnvVar: `${prefix}_PROXY_SECRET`,
-    requireEnvVar: `${prefix}_PROXY_REQUIRE_SIGNING`,
-    windowEnvVar: `${prefix}_PROXY_SIGNING_WINDOW_MS`,
-});
-export const verifyRequestSignature = async (req, body, config, serviceName) => {
-    const headers = extractSigningHeaders(req);
-    const hasAnySigningHeader = Object.values(headers).some((value) => typeof value === 'string' && value.trim() !== '');
-    if (resolveProxyDebugEnabled(serviceName)) {
-        Logger.debug(`[${serviceName}] Verifying request signature`, {
-            ...withTraceSkipProxyContext({
-                path: req.url ?? '',
-                method: req.method ?? 'POST',
-                requireSigning: config.signing.require,
-                hasAnySigningHeader,
-                configuredKeyId: config.signing.keyId,
-                hasConfiguredSecret: config.signing.secret.trim() !== '',
-                bodyBytes: body.length,
-            }),
-        });
-    }
-    const verified = await verifyProxySignatureIfNeeded(req, body, config.signing);
-    if (!verified.ok) {
-        const error = verified.error ?? { status: 401, message: 'Unauthorized' };
-        Logger.warn(`[${serviceName}] Signature verification failed`, {
-            ...withTraceSkipProxyContext({
-                path: req.url ?? '',
-                method: req.method ?? 'POST',
-                status: error.status,
-                message: error.message,
-            }),
-        });
-        return { ok: false, error };
-    }
-    return { ok: true };
-};