ioredis-toolkit 0.0.11 → 0.0.12

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.0.12
+
+### Patch Changes
+
+- e218550: Removed lua scripts
+
 ## 0.0.11
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ioredis-toolkit",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "description": "Production-grade Redis sessions, cache, locks, rate limiting, Pub/Sub, and Streams for Node.js",
   "type": "module",
   "main": "./dist/index.js",

package/src/scripts/cleanup-index.lua

@@ -1,4 +0,0 @@
--- KEYS[1] user index
--- ARGV[1..N] stale token hashes (user-index ZSET members, not JTIs)
-for i=1,#ARGV do redis.call('ZREM', KEYS[1], ARGV[i]) end
-return #ARGV

package/src/scripts/conditional-update.lua

@@ -1,21 +0,0 @@
--- Reference copy only. This duplicates update-session.lua: both must mirror the
--- authoritative script actually executed at runtime, SCRIPT_SOURCES.update_session
--- in src/session/script-sources.ts. Do not use this script directly.
--- KEYS[1] session key
--- ARGV[1] expected version
--- ARGV[2] now
--- ARGV[3] serialized replacement
-local raw = redis.call('GET', KEYS[1])
-if not raw then return {0} end
-local ok, s = pcall(cjson.decode, raw)
-if not ok or not s.data then return {-4} end
-if s.data.status ~= 'active' then return {-3} end
-if tonumber(s.data.version) ~= tonumber(ARGV[1]) then return {-2, s.data.version} end
-local replacement = ARGV[3]
-local ok2, parsed = pcall(cjson.decode, replacement)
-if not ok2 or not parsed.data then return {-4} end
-if parsed.data.userId ~= s.data.userId or parsed.data.jti ~= s.data.jti or parsed.data.id ~= s.data.id or parsed.data.createdAt ~= s.data.createdAt or parsed.data.absoluteExpiresAt ~= s.data.absoluteExpiresAt then return {-5} end
-local ttl = tonumber(s.data.expiresAt) - tonumber(ARGV[2])
-if ttl <= 0 then return {-1} end
-redis.call('SET', KEYS[1], replacement, 'XX', 'EX', ttl)
-return {1}

package/src/scripts/consume-session.lua

@@ -1,21 +0,0 @@
--- KEYS[1] session key
--- ARGV[1] now epoch seconds
--- ARGV[2] tombstone ttl seconds
-local raw = redis.call('GET', KEYS[1])
-if not raw then return {0} end
-local ok, s = pcall(cjson.decode, raw)
-if not ok or not s.data then return {-4} end
-local r = s.data
-if r.status == 'consumed' then return {-1} end
-if r.status == 'revoked' then return {-3} end
-local now = tonumber(ARGV[1])
-if tonumber(r.expiresAt) <= now then return {-2} end
-if r.absoluteExpiresAt and r.absoluteExpiresAt ~= cjson.null and tonumber(r.absoluteExpiresAt) > 0 and tonumber(r.absoluteExpiresAt) <= now then return {-2} end
-if r.idleExpiresAt and tonumber(r.idleExpiresAt) > 0 and tonumber(r.idleExpiresAt) <= now then return {-2} end
-r.status = 'consumed'
-r.consumedAt = now
-r.version = tonumber(r.version) + 1
-local ttl = tonumber(ARGV[2])
-local encoded = cjson.encode({v=1, data=r})
-redis.call('SET', KEYS[1], encoded, 'XX', 'EX', ttl)
-return {1, r.userId, r.jti, r.version}

package/src/scripts/create-session.lua

@@ -1,28 +0,0 @@
--- Reference copy only. The authoritative script actually executed at runtime is
--- SCRIPT_SOURCES.create_session in src/session/script-sources.ts — keep this file in sync with it.
--- KEYS[1] session key
--- KEYS[2] user index
--- ARGV[1] serialized record
--- ARGV[2] ttl seconds
--- ARGV[3] createdAt score
--- ARGV[4] tokenHash
--- ARGV[5] max sessions (0 = unlimited)
--- ARGV[6] namespace
--- ARGV[7] userTag
-local created = redis.call('SET', KEYS[1], ARGV[1], 'NX', 'EX', ARGV[2])
-if not created then return {-1} end
-redis.call('ZADD', KEYS[2], ARGV[3], ARGV[4])
-if tonumber(ARGV[5]) > 0 then
-  local count = redis.call('ZCARD', KEYS[2])
-  if count > tonumber(ARGV[5]) then
-    local excess = count - tonumber(ARGV[5])
-    local old = redis.call('ZRANGE', KEYS[2], 0, excess - 1)
-    for _, evictedHash in ipairs(old) do
-      redis.call('ZREM', KEYS[2], evictedHash)
-      redis.call('DEL', ARGV[6] .. ':session:{' .. ARGV[7] .. '}:' .. evictedHash)
-      redis.call('DEL', ARGV[6] .. ':token-index:' .. evictedHash)
-    end
-    return {1, excess}
-  end
-end
-return {1}

package/src/scripts/delete.lua

@@ -1,2 +0,0 @@
--- KEYS[1] session key
-return redis.call('DEL', KEYS[1])

package/src/scripts/destroy-user.lua

@@ -1,13 +0,0 @@
--- Reference copy only. Not present in SCRIPT_SOURCES and not executed by the
--- repository at runtime (SessionRepository.revokeAll implements the equivalent
--- operation in TypeScript via a pipeline). Bounded helper: the application must
--- pass session keys to delete as KEYS, matching enforce-limit.lua's pattern.
--- KEYS[1] user index; KEYS[2..N] session keys corresponding to the returned members.
--- ARGV[1] max batch
-local n = tonumber(ARGV[1])
-local members = redis.call('ZRANGE', KEYS[1], 0, n - 1)
-for i, tokenHash in ipairs(members) do
-  redis.call('ZREM', KEYS[1], tokenHash)
-  redis.call('DEL', KEYS[i + 1])
-end
-return members

package/src/scripts/enforce-limit.lua

@@ -1,17 +0,0 @@
--- Bounded helper. The application must pass session keys to delete as KEYS.
--- KEYS[1] user index; KEYS[2..N] session keys corresponding to the oldest members.
--- ARGV[1] max sessions; ARGV[2] number of candidate keys.
-local max=tonumber(ARGV[1])
-local candidateCount=tonumber(ARGV[2])
-local count=redis.call('ZCARD', KEYS[1])
-if max <= 0 or count <= max then return {0} end
-local excess=math.min(count-max, candidateCount)
-local removed=0
-for i=1,excess do
-  local tokenHash=redis.call('ZRANGE', KEYS[1], 0, 0)[1]
-  if not tokenHash then break end
-  redis.call('ZREM', KEYS[1], tokenHash)
-  redis.call('DEL', KEYS[i+1])
-  removed=removed+1
-end
-return {removed}

package/src/scripts/revoke-session.lua

@@ -1,13 +0,0 @@
--- KEYS[1] session key
--- ARGV[1] now
--- ARGV[2] tombstone ttl
-local raw = redis.call('GET', KEYS[1])
-if not raw then return {0} end
-local ok, s = pcall(cjson.decode, raw)
-if not ok or not s.data then return {-4} end
-local r=s.data
-if r.status == 'revoked' then return {2} end
-r.status='revoked'; r.version=tonumber(r.version)+1
-local ttl=tonumber(ARGV[2])
-if ttl < 1 then redis.call('DEL', KEYS[1]) else redis.call('SET', KEYS[1], cjson.encode({v=1,data=r}), 'XX', 'EX', ttl) end
-return {1}

package/src/scripts/rotate.lua

@@ -1,24 +0,0 @@
--- Reference copy only. This duplicates consume-session.lua: both must mirror the
--- authoritative script actually executed at runtime, SCRIPT_SOURCES.consume_session
--- in src/session/script-sources.ts. Do not use this script directly.
--- KEYS[1] session key
--- ARGV[1] now epoch seconds
--- ARGV[2] tombstone ttl seconds
-local raw = redis.call('GET', KEYS[1])
-if not raw then return {0} end
-local ok, s = pcall(cjson.decode, raw)
-if not ok or not s.data then return {-4} end
-local r = s.data
-if r.status == 'consumed' then return {-1} end
-if r.status == 'revoked' then return {-3} end
-local now = tonumber(ARGV[1])
-if tonumber(r.expiresAt) <= now then return {-2} end
-if r.absoluteExpiresAt and r.absoluteExpiresAt ~= cjson.null and tonumber(r.absoluteExpiresAt) > 0 and tonumber(r.absoluteExpiresAt) <= now then return {-2} end
-if r.idleExpiresAt and tonumber(r.idleExpiresAt) > 0 and tonumber(r.idleExpiresAt) <= now then return {-2} end
-r.status = 'consumed'
-r.consumedAt = now
-r.version = tonumber(r.version) + 1
-local ttl = tonumber(ARGV[2])
-local encoded = cjson.encode({v=1, data=r})
-redis.call('SET', KEYS[1], encoded, 'XX', 'EX', ttl)
-return {1, r.userId, r.jti, r.version}

package/src/scripts/touch-session.lua

@@ -1,28 +0,0 @@
--- KEYS[1] session key
--- ARGV[1] now epoch seconds
--- ARGV[2] touch interval
--- ARGV[3] new idle expiry epoch seconds (0 = no idle timeout)
--- ARGV[4] new absolute expiry epoch seconds (0 = no absolute timeout)
-local raw = redis.call('GET', KEYS[1])
-if not raw then return {0} end
-local ok, s = pcall(cjson.decode, raw)
-if not ok or not s.data then return {-4} end
-local r = s.data
-if r.status ~= 'active' then return {-1} end
-local now = tonumber(ARGV[1])
-if tonumber(r.expiresAt) <= now then return {-2} end
-if r.absoluteExpiresAt and r.absoluteExpiresAt ~= cjson.null and tonumber(r.absoluteExpiresAt) > 0 and tonumber(r.absoluteExpiresAt) <= now then return {-2} end
-if r.idleExpiresAt and tonumber(r.idleExpiresAt) > 0 and tonumber(r.idleExpiresAt) <= now then return {-3} end
-if now - tonumber(r.lastAccessedAt) < tonumber(ARGV[2]) then return {2} end
-local idle = tonumber(ARGV[3])
-local absolute = tonumber(ARGV[4])
-if absolute > 0 and idle > absolute then idle = absolute end
-r.lastAccessedAt = now
-r.idleExpiresAt = idle > 0 and idle or cjson.null
-r.version = tonumber(r.version) + 1
-local wrapper = {v=1, data=r}
-local encoded = cjson.encode(wrapper)
-local ttl = tonumber(r.expiresAt) - now
-if ttl <= 0 then return {-2} end
-redis.call('SET', KEYS[1], encoded, 'XX', 'EX', ttl)
-return {1, r.version, idle}

package/src/scripts/update-session.lua

@@ -1,18 +0,0 @@
--- KEYS[1] session key
--- ARGV[1] expected version
--- ARGV[2] now
--- ARGV[3] serialized replacement
-local raw = redis.call('GET', KEYS[1])
-if not raw then return {0} end
-local ok, s = pcall(cjson.decode, raw)
-if not ok or not s.data then return {-4} end
-if s.data.status ~= 'active' then return {-3} end
-if tonumber(s.data.version) ~= tonumber(ARGV[1]) then return {-2, s.data.version} end
-local replacement = ARGV[3]
-local ok2, parsed = pcall(cjson.decode, replacement)
-if not ok2 or not parsed.data then return {-4} end
-if parsed.data.userId ~= s.data.userId or parsed.data.jti ~= s.data.jti or parsed.data.id ~= s.data.id or parsed.data.createdAt ~= s.data.createdAt or parsed.data.absoluteExpiresAt ~= s.data.absoluteExpiresAt then return {-5} end
-local ttl = tonumber(s.data.expiresAt) - tonumber(ARGV[2])
-if ttl <= 0 then return {-1} end
-redis.call('SET', KEYS[1], replacement, 'XX', 'EX', ttl)
-return {1}