exisjs 0.6.0 → 0.7.0

package/dist/auth/oauth/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/auth/oauth/types.ts"],"names":[],"mappings":";AAAA,mFAAmF"}

package/dist/auth/password.d.ts

@@ -1,25 +0,0 @@
-export interface HashOptions {
-    /** The length of the salt in bytes. Default: 16 */
-    saltLength?: number;
-    /** The length of the derived key in bytes. Default: 64 */
-    keyLength?: number;
-    /** CPU/memory cost parameter (N). Must be a power of 2 greater than 1. Default: 16384 */
-    cost?: number;
-    /** Block size parameter (r). Default: 8 */
-    blockSize?: number;
-    /** Parallelization parameter (p). Default: 1 */
-    parallelization?: number;
-}
-/**
- * Hash a password using scrypt.
- * Returns a string formatted as: `scrypt:N:r:p:keylen:salt:hash`
- * This ensures the options are securely stored alongside the hash for future verification.
- */
-export declare function hashPassword(password: string, options?: HashOptions): Promise<string>;
-/**
- * Verify a password against a stored scrypt hash.
- * @param password The plaintext password to verify.
- * @param storedHash The stored hash string generated by `hashPassword`.
- */
-export declare function verifyPassword(password: string, storedHash: string): Promise<boolean>;
-//# sourceMappingURL=password.d.ts.map

package/dist/auth/password.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../src/auth/password.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAUD;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,MAAM,CAAC,CAajB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAwClB"}

package/dist/auth/password.js

@@ -1,93 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.hashPassword = hashPassword;
-exports.verifyPassword = verifyPassword;
-const node_crypto_1 = require("node:crypto");
-const scryptAsync = (password, salt, keylen, options) => {
-    return new Promise((resolve, reject) => {
-        if (options) {
-            (0, node_crypto_1.scrypt)(password, salt, keylen, options, (err, derivedKey) => {
-                if (err)
-                    reject(err);
-                else
-                    resolve(derivedKey);
-            });
-        }
-        else {
-            (0, node_crypto_1.scrypt)(password, salt, keylen, (err, derivedKey) => {
-                if (err)
-                    reject(err);
-                else
-                    resolve(derivedKey);
-            });
-        }
-    });
-};
-const DEFAULT_OPTIONS = {
-    saltLength: 16,
-    keyLength: 64,
-    cost: 16384,
-    blockSize: 8,
-    parallelization: 1,
-};
-/**
- * Hash a password using scrypt.
- * Returns a string formatted as: `scrypt:N:r:p:keylen:salt:hash`
- * This ensures the options are securely stored alongside the hash for future verification.
- */
-async function hashPassword(password, options) {
-    const opts = { ...DEFAULT_OPTIONS, ...options };
-    const salt = (0, node_crypto_1.randomBytes)(opts.saltLength).toString('hex');
-    const derivedKey = (await scryptAsync(password, salt, opts.keyLength, {
-        N: opts.cost,
-        r: opts.blockSize,
-        p: opts.parallelization,
-    }));
-    // Store the parameters used to create the hash so we can verify it later
-    // Format: scrypt:cost:blockSize:parallelization:keyLength:salt:hash
-    return `scrypt:${opts.cost}:${opts.blockSize}:${opts.parallelization}:${opts.keyLength}:${salt}:${derivedKey.toString('hex')}`;
-}
-/**
- * Verify a password against a stored scrypt hash.
- * @param password The plaintext password to verify.
- * @param storedHash The stored hash string generated by `hashPassword`.
- */
-async function verifyPassword(password, storedHash) {
-    if (!password || !storedHash || typeof storedHash !== 'string') {
-        return false;
-    }
-    // Backwards compatibility with the old simple format `salt:hash`
-    const parts = storedHash.split(':');
-    if (parts.length === 2) {
-        const [salt, key] = parts;
-        if (!salt || !key)
-            return false;
-        const keyBuffer = Buffer.from(key, 'hex');
-        const derivedKey = (await scryptAsync(password, salt, 64));
-        if (keyBuffer.length !== derivedKey.length)
-            return false;
-        return (0, node_crypto_1.timingSafeEqual)(keyBuffer, derivedKey);
-    }
-    // New format: scrypt:N:r:p:keylen:salt:hash
-    if (parts.length === 7 && parts[0] === 'scrypt') {
-        const cost = parseInt(parts[1], 10);
-        const blockSize = parseInt(parts[2], 10);
-        const parallelization = parseInt(parts[3], 10);
-        const keyLength = parseInt(parts[4], 10);
-        const salt = parts[5];
-        const key = parts[6];
-        if (!salt || !key)
-            return false;
-        const keyBuffer = Buffer.from(key, 'hex');
-        const derivedKey = (await scryptAsync(password, salt, keyLength, {
-            N: cost,
-            r: blockSize,
-            p: parallelization,
-        }));
-        if (keyBuffer.length !== derivedKey.length)
-            return false;
-        return (0, node_crypto_1.timingSafeEqual)(keyBuffer, derivedKey);
-    }
-    return false;
-}
-//# sourceMappingURL=password.js.map

package/dist/auth/password.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/auth/password.ts"],"names":[],"mappings":";;AAiDA,oCAgBC;AAOD,wCA2CC;AAnHD,6CAAkE;AAElE,MAAM,WAAW,GAAG,CAClB,QAAyB,EACzB,IAAqB,EACrB,MAAc,EACd,OAA6C,EAC5B,EAAE;IACnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAA,oBAAM,EAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE;gBAC1D,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAA;;oBACf,OAAO,CAAC,UAAU,CAAC,CAAA;YAC1B,CAAC,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,IAAA,oBAAM,EAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE;gBACjD,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAA;;oBACf,OAAO,CAAC,UAAU,CAAC,CAAA;YAC1B,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAeD,MAAM,eAAe,GAA0B;IAC7C,UAAU,EAAE,EAAE;IACd,SAAS,EAAE,EAAE;IACb,IAAI,EAAE,KAAK;IACX,SAAS,EAAE,CAAC;IACZ,eAAe,EAAE,CAAC;CACnB,CAAA;AAED;;;;GAIG;AACI,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,OAAqB;IAErB,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAA;IAC/C,MAAM,IAAI,GAAG,IAAA,yBAAW,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAEzD,MAAM,UAAU,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE;QACpE,CAAC,EAAE,IAAI,CAAC,IAAI;QACZ,CAAC,EAAE,IAAI,CAAC,SAAS;QACjB,CAAC,EAAE,IAAI,CAAC,eAAe;KACxB,CAAC,CAAW,CAAA;IAEb,yEAAyE;IACzE,oEAAoE;IACpE,OAAO,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;AAChI,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,UAAkB;IAElB,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC/D,OAAO,KAAK,CAAA;IACd,CAAC;IAED,iEAAiE;IACjE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAEnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,KAAK,CAAA;QACzB,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAA;QAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACzC,MAAM,UAAU,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAW,CAAA;QACpE,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QACxD,OAAO,IAAA,6BAAe,EAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAC/C,CAAC;IAED,4CAA4C;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACnC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACxC,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAEpB,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAA;QAE/B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACzC,MAAM,UAAU,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;YAC/D,CAAC,EAAE,IAAI;YACP,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,eAAe;SACnB,CAAC,CAAW,CAAA;QAEb,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QACxD,OAAO,IAAA,6BAAe,EAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAC/C,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/auth/rbac.d.ts

@@ -1,10 +0,0 @@
-import type { Request, Response, NextFunction } from '../types';
-/**
- * Middleware that ensures the authenticated user has one of the required roles.
- * Expects `req.user` to be populated (e.g., by a previous session or JWT middleware),
- * and expects `req.user.role` to be a string or array of strings.
- *
- * @param allowedRoles A single role string or an array of allowed roles.
- */
-export declare function requireRole(allowedRoles: string | string[]): (req: Request, res: Response, next: NextFunction) => void;
-//# sourceMappingURL=rbac.d.ts.map

package/dist/auth/rbac.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rbac.d.ts","sourceRoot":"","sources":["../../src/auth/rbac.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE/D;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,IAGjD,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,UA8BxD"}

package/dist/auth/rbac.js

@@ -1,34 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.requireRole = requireRole;
-const errors_1 = require("../error/errors");
-/**
- * Middleware that ensures the authenticated user has one of the required roles.
- * Expects `req.user` to be populated (e.g., by a previous session or JWT middleware),
- * and expects `req.user.role` to be a string or array of strings.
- *
- * @param allowedRoles A single role string or an array of allowed roles.
- */
-function requireRole(allowedRoles) {
-    const roles = Array.isArray(allowedRoles) ? allowedRoles : [allowedRoles];
-    return (req, res, next) => {
-        // 1. Ensure user is authenticated
-        if (!req.user) {
-            return next(errors_1.HttpError.unauthorized('Authentication required to access this resource'));
-        }
-        // 2. Ensure user has a role property
-        if (!req.user.role) {
-            return next(errors_1.HttpError.forbidden('Access denied: No role assigned'));
-        }
-        const userRoles = Array.isArray(req.user.role)
-            ? req.user.role
-            : [req.user.role];
-        // 3. Check for intersection between user roles and allowed roles
-        const hasRole = userRoles.some((role) => roles.includes(role));
-        if (!hasRole) {
-            return next(errors_1.HttpError.forbidden('Access denied: Insufficient permissions'));
-        }
-        next();
-    };
-}
-//# sourceMappingURL=rbac.js.map

package/dist/auth/rbac.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rbac.js","sourceRoot":"","sources":["../../src/auth/rbac.ts"],"names":[],"mappings":";;AAUA,kCAiCC;AA3CD,4CAA2C;AAG3C;;;;;;GAMG;AACH,SAAgB,WAAW,CAAC,YAA+B;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAEzE,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,kCAAkC;QAClC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,IAAI,CACT,kBAAS,CAAC,YAAY,CACpB,iDAAiD,CAClD,CACF,CAAA;QACH,CAAC;QAED,qCAAqC;QACrC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,kBAAS,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC,CAAA;QACrE,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,CAAC,CAAE,GAAG,CAAC,IAAI,CAAC,IAAiB;YAC7B,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAc,CAAC,CAAA;QAE7B,iEAAiE;QACjE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;QAE9D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CACT,kBAAS,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAC/D,CAAA;QACH,CAAC;QAED,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC"}

package/dist/auth/session.d.ts

@@ -1,26 +0,0 @@
-import type { Request, Response, NextFunction } from '../types';
-export type SessionData = Record<string, unknown>;
-export interface SessionStore {
-    get(sessionId: string): Promise<SessionData | null> | SessionData | null;
-    set(sessionId: string, data: SessionData, ttl?: number): Promise<void> | void;
-    destroy(sessionId: string): Promise<void> | void;
-}
-export declare class MemorySessionStore implements SessionStore {
-    private nativeStore;
-    private fallbackSessions;
-    private isFallback;
-    constructor();
-    get(sessionId: string): SessionData | null;
-    set(sessionId: string, data: SessionData, ttl?: number): void;
-    destroy(sessionId: string): void;
-}
-export interface SessionOptions {
-    secret: string;
-    store?: SessionStore;
-    cookieName?: string;
-    ttl?: number;
-    secure?: boolean;
-    sameSite?: 'Strict' | 'Lax' | 'None';
-}
-export declare function session(options: SessionOptions): (req: Request, res: Response, next: NextFunction) => Promise<void>;
-//# sourceMappingURL=session.d.ts.map

package/dist/auth/session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/auth/session.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE/D,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEjD,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,WAAW,GAAG,IAAI,CAAA;IACxE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAC7E,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CACjD;AAED,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,gBAAgB,CAGrB;IACH,OAAO,CAAC,UAAU,CAAQ;;IAY1B,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAoB1C,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,GAAE,MAAqB,GAAG,IAAI;IAY3E,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CAQjC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,YAAY,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAA;CACrC;AAuBD,wBAAgB,OAAO,CAAC,OAAO,EAAE,cAAc,IAW/B,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,mBAqD9D"}

package/dist/auth/session.js

@@ -1,134 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MemorySessionStore = void 0;
-exports.session = session;
-const node_crypto_1 = require("node:crypto");
-class MemorySessionStore {
-    constructor() {
-        this.fallbackSessions = new Map();
-        this.isFallback = false;
-        try {
-            // eslint-disable-next-line @typescript-eslint/no-require-imports
-            const { NativeSessionStore } = require('@exisjs/rs');
-            this.nativeStore = new NativeSessionStore();
-        }
-        catch {
-            this.isFallback = true;
-        }
-    }
-    get(sessionId) {
-        if (!this.isFallback) {
-            const dataStr = this.nativeStore.get(sessionId);
-            if (!dataStr)
-                return null;
-            try {
-                return JSON.parse(dataStr);
-            }
-            catch {
-                return null;
-            }
-        }
-        const session = this.fallbackSessions.get(sessionId);
-        if (!session)
-            return null;
-        if (session.expiresAt < Date.now()) {
-            this.fallbackSessions.delete(sessionId);
-            return null;
-        }
-        return session.data;
-    }
-    set(sessionId, data, ttl = 86400 * 1000) {
-        if (!this.isFallback) {
-            this.nativeStore.set(sessionId, JSON.stringify(data), ttl);
-            return;
-        }
-        this.fallbackSessions.set(sessionId, {
-            data,
-            expiresAt: Date.now() + ttl,
-        });
-    }
-    destroy(sessionId) {
-        if (!this.isFallback) {
-            this.nativeStore.destroy(sessionId);
-            return;
-        }
-        this.fallbackSessions.delete(sessionId);
-    }
-}
-exports.MemorySessionStore = MemorySessionStore;
-function signCookie(val, secret) {
-    const signature = (0, node_crypto_1.createHmac)('sha256', secret).update(val).digest('base64url');
-    return `${val}.${signature}`;
-}
-function unsignCookie(val, secret) {
-    const parts = val.split('.');
-    if (parts.length !== 2)
-        return false;
-    const [str, signature] = parts;
-    const expectedSignature = (0, node_crypto_1.createHmac)('sha256', secret)
-        .update(str)
-        .digest('base64url');
-    const sigBuf = Buffer.from(signature);
-    const expectedBuf = Buffer.from(expectedSignature);
-    if (sigBuf.length !== expectedBuf.length)
-        return false;
-    if (!(0, node_crypto_1.timingSafeEqual)(sigBuf, expectedBuf))
-        return false;
-    return str;
-}
-function session(options) {
-    if (!options.secret || options.secret.length < 32) {
-        throw new Error('session options.secret must be at least 32 characters long');
-    }
-    const store = options.store || new MemorySessionStore();
-    const cookieName = options.cookieName || 'exis_sid';
-    const ttl = options.ttl || 86400 * 1000; // 1 day
-    return async (req, res, next) => {
-        let sessionId;
-        // 1. Try to get session ID from cookie
-        const cookieVal = req.cookies?.[cookieName];
-        if (cookieVal) {
-            const unsigned = unsignCookie(cookieVal, options.secret);
-            if (unsigned) {
-                sessionId = unsigned;
-            }
-        }
-        // 2. Load session data or create new
-        let sessionData = {};
-        if (sessionId) {
-            const data = await store.get(sessionId);
-            if (data) {
-                sessionData = data;
-            }
-            else {
-                sessionId = undefined; // Invalid or expired
-            }
-        }
-        if (!sessionId) {
-            sessionId = (0, node_crypto_1.randomBytes)(24).toString('base64url');
-            // Only set cookie if we created a new session ID
-            res.cookie(cookieName, signCookie(sessionId, options.secret), {
-                maxAge: ttl / 1000,
-                httpOnly: true,
-                secure: options.secure ?? process.env.NODE_ENV === 'production',
-                sameSite: options.sameSite ?? 'Lax',
-                path: '/',
-            });
-        }
-        // 3. Attach session to request
-        req.session = sessionData;
-        const initialState = JSON.stringify(sessionData);
-        // 4. Hook into res.raw.end to save the session automatically
-        const originalEnd = res.raw.end.bind(res.raw);
-        res.raw.end = function (...args) {
-            if (JSON.stringify(sessionData) !== initialState) {
-                store.set(sessionId, sessionData, ttl);
-            }
-            // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-            // @ts-ignore
-            return originalEnd(...args);
-        };
-        next();
-    };
-}
-//# sourceMappingURL=session.js.map

package/dist/auth/session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/auth/session.ts"],"names":[],"mappings":";;;AAqGA,0BAgEC;AArKD,6CAAsE;AAWtE,MAAa,kBAAkB;IAQ7B;QANQ,qBAAgB,GAAG,IAAI,GAAG,EAG/B,CAAA;QACK,eAAU,GAAG,KAAK,CAAA;QAGxB,IAAI,CAAC;YACH,iEAAiE;YACjE,MAAM,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;YACpD,IAAI,CAAC,WAAW,GAAG,IAAI,kBAAkB,EAAE,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QACxB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC/C,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAA;YACzB,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAA;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACpD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACzB,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACvC,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAA;IACrB,CAAC;IAED,GAAG,CAAC,SAAiB,EAAE,IAAiB,EAAE,MAAc,KAAK,GAAG,IAAI;QAClE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;YAC1D,OAAM;QACR,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE;YACnC,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG;SAC5B,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,CAAC,SAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YACnC,OAAM;QACR,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACzC,CAAC;CACF;AA1DD,gDA0DC;AAWD,SAAS,UAAU,CAAC,GAAW,EAAE,MAAc;IAC7C,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC9E,OAAO,GAAG,GAAG,IAAI,SAAS,EAAE,CAAA;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,MAAc;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACpC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,KAAK,CAAA;IAC9B,MAAM,iBAAiB,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC;SACnD,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,WAAW,CAAC,CAAA;IAEtB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAElD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACtD,IAAI,CAAC,IAAA,6BAAe,EAAC,MAAM,EAAE,WAAW,CAAC;QAAE,OAAO,KAAK,CAAA;IACvD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAgB,OAAO,CAAC,OAAuB;IAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,kBAAkB,EAAE,CAAA;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,UAAU,CAAA;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,KAAK,GAAG,IAAI,CAAA,CAAC,QAAQ;IAEhD,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,IAAI,SAA6B,CAAA;QAEjC,uCAAuC;QACvC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAA;QAC3C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;YACxD,IAAI,QAAQ,EAAE,CAAC;gBACb,SAAS,GAAG,QAAQ,CAAA;YACtB,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,IAAI,WAAW,GAAgB,EAAE,CAAA;QACjC,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACvC,IAAI,IAAI,EAAE,CAAC;gBACT,WAAW,GAAG,IAAI,CAAA;YACpB,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,SAAS,CAAA,CAAC,qBAAqB;YAC7C,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACjD,iDAAiD;YACjD,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC5D,MAAM,EAAE,GAAG,GAAG,IAAI;gBAClB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBAC/D,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;gBACnC,IAAI,EAAE,GAAG;aACV,CAAC,CAAA;QACJ,CAAC;QAED,+BAA+B;QAC/B,GAAG,CAAC,OAAO,GAAG,WAAW,CAAA;QAEzB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QAEhD,6DAA6D;QAC7D,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC7C,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,UAAU,GAAG,IAAe;YACxC,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,YAAY,EAAE,CAAC;gBACjD,KAAK,CAAC,GAAG,CAAC,SAAmB,EAAE,WAAW,EAAE,GAAG,CAAC,CAAA;YAClD,CAAC;YACD,6DAA6D;YAC7D,aAAa;YACb,OAAO,WAAW,CAAC,GAAG,IAAI,CAAC,CAAA;QAC7B,CAAC,CAAA;QAED,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC"}

package/dist/cache/index.d.ts

@@ -1,4 +0,0 @@
-export declare function revalidateTag(tag: string): Promise<void>;
-export * from '../middleware/cache';
-export * from './store';
-//# sourceMappingURL=index.d.ts.map

package/dist/cache/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cache/index.ts"],"names":[],"mappings":"AAEA,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG9D;AAED,cAAc,qBAAqB,CAAA;AACnC,cAAc,SAAS,CAAA"}

package/dist/cache/index.js

@@ -1,25 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.revalidateTag = revalidateTag;
-const store_1 = require("./store");
-async function revalidateTag(tag) {
-    const store = (0, store_1.getCacheStore)();
-    await store.revalidateTag(tag);
-}
-__exportStar(require("../middleware/cache"), exports);
-__exportStar(require("./store"), exports);
-//# sourceMappingURL=index.js.map

package/dist/cache/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cache/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAEA,sCAGC;AALD,mCAAuC;AAEhC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,MAAM,KAAK,GAAG,IAAA,qBAAa,GAAE,CAAA;IAC7B,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;AAChC,CAAC;AAED,sDAAmC;AACnC,0CAAuB"}

package/dist/cache/store.d.ts

@@ -1,58 +0,0 @@
-export interface CacheItem {
-    data: any;
-    tags: string[];
-    createdAt: number;
-}
-export interface CacheStore {
-    get(key: string): Promise<CacheItem | null>;
-    set(key: string, data: any, tags: string[], ttlMs?: number): Promise<void>;
-    revalidateTag(tag: string): Promise<void>;
-    getTags(): Promise<Record<string, number>>;
-}
-export declare class FileSystemCacheStore implements CacheStore {
-    private cacheDir;
-    private tagsPath;
-    constructor(cwd: string);
-    private ensureDir;
-    private hashKey;
-    getTags(): Promise<Record<string, number>>;
-    get(key: string): Promise<CacheItem | null>;
-    set(key: string, data: any, tags: string[], _ttlMs?: number): Promise<void>;
-    revalidateTag(tag: string): Promise<void>;
-}
-export declare class MemoryCacheStore implements CacheStore {
-    private cache;
-    private isWorker;
-    constructor(capacity?: number);
-    get(key: string): Promise<CacheItem | null>;
-    set(key: string, data: any, tags: string[], _ttlMs?: number): Promise<void>;
-    revalidateTag(tag: string): Promise<void>;
-    getTags(): Promise<Record<string, number>>;
-}
-export interface MinimalRedisClient {
-    get(key: string): Promise<string | null>;
-    set(key: string, value: string, mode: string, duration: number): Promise<unknown>;
-    del(key: string): Promise<number>;
-    flushdb(): Promise<unknown>;
-}
-export declare class RedisCacheStore implements CacheStore {
-    private client;
-    private prefix;
-    constructor(client: MinimalRedisClient, prefix?: string);
-    getTags(): Promise<Record<string, number>>;
-    get(key: string): Promise<CacheItem | null>;
-    set(key: string, data: any, tags: string[], ttlMs?: number): Promise<void>;
-    revalidateTag(tag: string): Promise<void>;
-}
-export declare class TieredCacheStore implements CacheStore {
-    private local;
-    private remote;
-    constructor(local: CacheStore, remote: CacheStore);
-    get(key: string): Promise<CacheItem | null>;
-    set(key: string, data: any, tags: string[], ttlMs?: number): Promise<void>;
-    revalidateTag(tag: string): Promise<void>;
-    getTags(): Promise<Record<string, number>>;
-}
-export declare function getCacheStore(): CacheStore;
-export declare function setCacheStore(store: CacheStore): void;
-//# sourceMappingURL=store.d.ts.map

package/dist/cache/store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/cache/store.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,GAAG,CAAA;IACT,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;IAC3C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1E,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC3C;AAED,qBAAa,oBAAqB,YAAW,UAAU;IACrD,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,QAAQ,CAAQ;gBAEZ,GAAG,EAAE,MAAM;YAKT,SAAS;IAQvB,OAAO,CAAC,OAAO;IAIT,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAS1C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAwB3C,GAAG,CACP,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,GAAG,EACT,IAAI,EAAE,MAAM,EAAE,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAYV,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMhD;AAED,qBAAa,gBAAiB,YAAW,UAAU;IACjD,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,QAAQ,CAAS;gBAEb,QAAQ,SAAQ;IAkBtB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAU3C,GAAG,CACP,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,GAAG,EACT,IAAI,EAAE,MAAM,EAAE,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IASV,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CASjD;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACxC,GAAG,CACD,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACjC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAC5B;AAED,qBAAa,eAAgB,YAAW,UAAU;IAChD,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,MAAM,CAAQ;gBAEV,MAAM,EAAE,kBAAkB,EAAE,MAAM,SAAgB;IAKxD,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAU1C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAkB3C,GAAG,CACP,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,GAAG,EACT,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAyBV,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAchD;AAED,qBAAa,gBAAiB,YAAW,UAAU;IAE/C,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,MAAM;gBADN,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,UAAU;IAGtB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAiB3C,GAAG,CACP,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,GAAG,EACT,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAOV,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOzC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAIjD;AAKD,wBAAgB,aAAa,IAAI,UAAU,CAwB1C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,QAE9C"}