tempest-express-sdk 0.7.0 → 0.8.0

package/dist/index.d.cts

@@ -1635,6 +1635,45 @@ interface SessionMiddlewareOptions {
  */
 declare function makeSessionMiddleware(service: SessionService, options?: SessionMiddlewareOptions): RequestHandler;
 
+/**
+ * Redis-backed {@link SessionStore} for multi-replica deployments.
+ *
+ * Sessions live under `sess:<idHash>` with a Redis TTL; a per-user set
+ * (`sess:user:<userId>`) indexes them so `listByUser`/`deleteByUser` work
+ * without scanning. Takes an injected client (node-redis v4 compatible) so the
+ * SDK never hard-depends on `redis`. Expired keys drop via TTL; stale index
+ * entries are pruned lazily on read.
+ */
+
+/** The subset of a node-redis v4 client this store needs. */
+interface SessionRedisLike {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, options?: {
+        EX?: number;
+    }): Promise<unknown>;
+    del(key: string): Promise<unknown>;
+    sAdd(key: string, member: string): Promise<unknown>;
+    sRem(key: string, member: string): Promise<unknown>;
+    sMembers(key: string): Promise<string[]>;
+}
+/** Redis-backed session store. */
+declare class RedisSessionStore implements SessionStore {
+    private readonly client;
+    private readonly prefix;
+    /**
+     * @param client - A connected node-redis v4 (or compatible) client.
+     * @param prefix - Key prefix. Default `sess:`.
+     */
+    constructor(client: SessionRedisLike, prefix?: string);
+    private key;
+    private userKey;
+    get(idHash: string): Promise<Session | null>;
+    set(session: Session): Promise<void>;
+    delete(idHash: string): Promise<void>;
+    deleteByUser(userId: string): Promise<number>;
+    listByUser(userId: string): Promise<Session[]>;
+}
+
 /**
  * Server-Sent Events primitives, mirroring `sse.event_stream`.
  *
@@ -1761,6 +1800,73 @@ declare class SSEBroker {
     publish(channel: string, data: unknown, event?: string): number;
 }
 
+/**
+ * Redis pub/sub SSE broker for multi-replica deployments.
+ *
+ * The in-process {@link SSEBroker} only reaches subscribers on the same node.
+ * {@link RedisSSEBroker} publishes to a Redis channel; every replica's
+ * subscriber connection receives it and fans out to its local {@link EventStream}s
+ * — so a publish on any node reaches SSE clients on all nodes. Takes injected
+ * node-redis v4 clients (a dedicated subscriber connection, per Redis pub/sub
+ * rules) so the SDK never hard-depends on `redis`.
+ */
+
+/** Publisher side (the main client). */
+interface RedisPublisherLike {
+    publish(channel: string, message: string): Promise<unknown>;
+}
+/** Subscriber side (a dedicated connection — `client.duplicate()`). */
+interface RedisSubscriberLike {
+    subscribe(channel: string, listener: (message: string) => void): Promise<unknown>;
+    unsubscribe(channel: string): Promise<unknown>;
+}
+/** Options for {@link RedisSSEBroker}. */
+interface RedisSSEBrokerOptions extends EventStreamOptions {
+    /** Redis channel prefix. Default `sse:`. */
+    prefix?: string;
+}
+/** Cross-replica SSE fan-out over Redis pub/sub. */
+declare class RedisSSEBroker {
+    private readonly publisher;
+    private readonly subscriber;
+    private readonly local;
+    private readonly prefix;
+    private readonly streamOptions;
+    /**
+     * @param publisher - The main Redis client (used to `publish`).
+     * @param subscriber - A dedicated subscriber connection (`client.duplicate()`).
+     * @param options - Channel prefix + per-stream options.
+     */
+    constructor(publisher: RedisPublisherLike, subscriber: RedisSubscriberLike, options?: RedisSSEBrokerOptions);
+    private channelKey;
+    /** Emit a decoded payload to every local stream on a channel. */
+    private emitLocal;
+    /**
+     * Register a subscriber stream, subscribing to the Redis channel on first use.
+     *
+     * @param channel - The channel name.
+     * @returns A fresh {@link EventStream} to serve to the client.
+     */
+    register(channel: string): Promise<EventStream>;
+    /**
+     * Remove a subscriber stream; unsubscribe from Redis when the last leaves.
+     *
+     * @param channel - The channel name.
+     * @param stream - The stream to remove.
+     */
+    unregister(channel: string, stream: EventStream): Promise<void>;
+    /** Local subscriber count on `channel` (this replica only). */
+    localSubscribers(channel: string): number;
+    /**
+     * Publish to every subscriber across all replicas.
+     *
+     * @param channel - The channel name.
+     * @param data - The payload (JSON-encoded).
+     * @param event - Optional event name.
+     */
+    publish(channel: string, data: unknown, event?: string): Promise<void>;
+}
+
 /** WebSocket message envelope, mirroring `websockets.schemas`. */
 
 /** The canonical message envelope exchanged over a socket. */
@@ -3469,6 +3575,6 @@ interface RunServerOptions {
 declare function runServer(app: Express, options?: RunServerOptions): Promise<Server>;
 
 /** The installed SDK version. Single source of truth for the barrel + CLI. */
-declare const VERSION = "0.7.0";
+declare const VERSION = "0.8.0";
 
-export { type ActivationInput, ActivationService, type ActivationServiceOptions, type ActivationStore, type AdminField, type AdminListQuery, type AdminListResult, type AdminResource, type AdminRouterOptions, AdminSite, AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, type AuthResponse, type AuthRouterOptions, type AuthUser, type BaseAppSettings, BaseController, BaseModel, type BaseResponse, BaseService, type BrokerManager, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, type CacheManager, type CachedOptions, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CursorPaginationFilter, DEFAULT_LOCALE, type EmailMessage, type EmailOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FlagContext, ForbiddenException, type GenerateOpenApiOptions, HTTPClient, type HTTPClientOptions, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, type InboundHandler, type InboundMessage, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, LocalUploadStorage, type LocalUploadStorageOptions, type LogExtra, type LogLevel, type LoginInput, type MediaKind, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, type MemoryMetrics, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, type MessagingProvider, MetricsUtils, type MfaCodeInput, type MfaEnrollment, MfaService, type MfaServiceOptions, type MfaStore, NotFoundException, type OpenApiDocument, type OpenApiInfo, type OutboundMedia, type OutboundResult, PHONE_BR_PATTERN, type PaginationFilter, type PasswordResetConfirmInput, type PasswordResetRequestInput, PasswordResetService, type PasswordResetServiceOptions, type PasswordResetStore, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, RedisCacheManager, type RedisLike, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type ResponseMapper, RetryPolicy, type RunServerOptions, SSEBroker, type SaveOptions, type SendOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type StateBR, type SwaggerOptions, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, TelegramProvider, type TelegramProviderOptions, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, TwilioSmsProvider, type TwilioSmsProviderOptions, type TwilioWebhookOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, type UserPublic, type UserStore, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, WhatsAppProvider, type WhatsAppProviderOptions, type WhatsAppWebhookOptions, activationSchema, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeSessionMiddleware, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaCodeSchema, mfaEnrollResponseSchema, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };
+export { type ActivationInput, ActivationService, type ActivationServiceOptions, type ActivationStore, type AdminField, type AdminListQuery, type AdminListResult, type AdminResource, type AdminRouterOptions, AdminSite, AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, type AuthResponse, type AuthRouterOptions, type AuthUser, type BaseAppSettings, BaseController, BaseModel, type BaseResponse, BaseService, type BrokerManager, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, type CacheManager, type CachedOptions, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CursorPaginationFilter, DEFAULT_LOCALE, type EmailMessage, type EmailOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FlagContext, ForbiddenException, type GenerateOpenApiOptions, HTTPClient, type HTTPClientOptions, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, type InboundHandler, type InboundMessage, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, LocalUploadStorage, type LocalUploadStorageOptions, type LogExtra, type LogLevel, type LoginInput, type MediaKind, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, type MemoryMetrics, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, type MessagingProvider, MetricsUtils, type MfaCodeInput, type MfaEnrollment, MfaService, type MfaServiceOptions, type MfaStore, NotFoundException, type OpenApiDocument, type OpenApiInfo, type OutboundMedia, type OutboundResult, PHONE_BR_PATTERN, type PaginationFilter, type PasswordResetConfirmInput, type PasswordResetRequestInput, PasswordResetService, type PasswordResetServiceOptions, type PasswordResetStore, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, RedisCacheManager, type RedisLike, type RedisPublisherLike, RedisSSEBroker, type RedisSSEBrokerOptions, RedisSessionStore, type RedisSubscriberLike, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type ResponseMapper, RetryPolicy, type RunServerOptions, SSEBroker, type SaveOptions, type SendOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, type SessionRedisLike, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type StateBR, type SwaggerOptions, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, TelegramProvider, type TelegramProviderOptions, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, TwilioSmsProvider, type TwilioSmsProviderOptions, type TwilioWebhookOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, type UserPublic, type UserStore, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, WhatsAppProvider, type WhatsAppProviderOptions, type WhatsAppWebhookOptions, activationSchema, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeSessionMiddleware, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaCodeSchema, mfaEnrollResponseSchema, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };

package/dist/index.d.ts

@@ -1635,6 +1635,45 @@ interface SessionMiddlewareOptions {
  */
 declare function makeSessionMiddleware(service: SessionService, options?: SessionMiddlewareOptions): RequestHandler;
 
+/**
+ * Redis-backed {@link SessionStore} for multi-replica deployments.
+ *
+ * Sessions live under `sess:<idHash>` with a Redis TTL; a per-user set
+ * (`sess:user:<userId>`) indexes them so `listByUser`/`deleteByUser` work
+ * without scanning. Takes an injected client (node-redis v4 compatible) so the
+ * SDK never hard-depends on `redis`. Expired keys drop via TTL; stale index
+ * entries are pruned lazily on read.
+ */
+
+/** The subset of a node-redis v4 client this store needs. */
+interface SessionRedisLike {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, options?: {
+        EX?: number;
+    }): Promise<unknown>;
+    del(key: string): Promise<unknown>;
+    sAdd(key: string, member: string): Promise<unknown>;
+    sRem(key: string, member: string): Promise<unknown>;
+    sMembers(key: string): Promise<string[]>;
+}
+/** Redis-backed session store. */
+declare class RedisSessionStore implements SessionStore {
+    private readonly client;
+    private readonly prefix;
+    /**
+     * @param client - A connected node-redis v4 (or compatible) client.
+     * @param prefix - Key prefix. Default `sess:`.
+     */
+    constructor(client: SessionRedisLike, prefix?: string);
+    private key;
+    private userKey;
+    get(idHash: string): Promise<Session | null>;
+    set(session: Session): Promise<void>;
+    delete(idHash: string): Promise<void>;
+    deleteByUser(userId: string): Promise<number>;
+    listByUser(userId: string): Promise<Session[]>;
+}
+
 /**
  * Server-Sent Events primitives, mirroring `sse.event_stream`.
  *
@@ -1761,6 +1800,73 @@ declare class SSEBroker {
     publish(channel: string, data: unknown, event?: string): number;
 }
 
+/**
+ * Redis pub/sub SSE broker for multi-replica deployments.
+ *
+ * The in-process {@link SSEBroker} only reaches subscribers on the same node.
+ * {@link RedisSSEBroker} publishes to a Redis channel; every replica's
+ * subscriber connection receives it and fans out to its local {@link EventStream}s
+ * — so a publish on any node reaches SSE clients on all nodes. Takes injected
+ * node-redis v4 clients (a dedicated subscriber connection, per Redis pub/sub
+ * rules) so the SDK never hard-depends on `redis`.
+ */
+
+/** Publisher side (the main client). */
+interface RedisPublisherLike {
+    publish(channel: string, message: string): Promise<unknown>;
+}
+/** Subscriber side (a dedicated connection — `client.duplicate()`). */
+interface RedisSubscriberLike {
+    subscribe(channel: string, listener: (message: string) => void): Promise<unknown>;
+    unsubscribe(channel: string): Promise<unknown>;
+}
+/** Options for {@link RedisSSEBroker}. */
+interface RedisSSEBrokerOptions extends EventStreamOptions {
+    /** Redis channel prefix. Default `sse:`. */
+    prefix?: string;
+}
+/** Cross-replica SSE fan-out over Redis pub/sub. */
+declare class RedisSSEBroker {
+    private readonly publisher;
+    private readonly subscriber;
+    private readonly local;
+    private readonly prefix;
+    private readonly streamOptions;
+    /**
+     * @param publisher - The main Redis client (used to `publish`).
+     * @param subscriber - A dedicated subscriber connection (`client.duplicate()`).
+     * @param options - Channel prefix + per-stream options.
+     */
+    constructor(publisher: RedisPublisherLike, subscriber: RedisSubscriberLike, options?: RedisSSEBrokerOptions);
+    private channelKey;
+    /** Emit a decoded payload to every local stream on a channel. */
+    private emitLocal;
+    /**
+     * Register a subscriber stream, subscribing to the Redis channel on first use.
+     *
+     * @param channel - The channel name.
+     * @returns A fresh {@link EventStream} to serve to the client.
+     */
+    register(channel: string): Promise<EventStream>;
+    /**
+     * Remove a subscriber stream; unsubscribe from Redis when the last leaves.
+     *
+     * @param channel - The channel name.
+     * @param stream - The stream to remove.
+     */
+    unregister(channel: string, stream: EventStream): Promise<void>;
+    /** Local subscriber count on `channel` (this replica only). */
+    localSubscribers(channel: string): number;
+    /**
+     * Publish to every subscriber across all replicas.
+     *
+     * @param channel - The channel name.
+     * @param data - The payload (JSON-encoded).
+     * @param event - Optional event name.
+     */
+    publish(channel: string, data: unknown, event?: string): Promise<void>;
+}
+
 /** WebSocket message envelope, mirroring `websockets.schemas`. */
 
 /** The canonical message envelope exchanged over a socket. */
@@ -3469,6 +3575,6 @@ interface RunServerOptions {
 declare function runServer(app: Express, options?: RunServerOptions): Promise<Server>;
 
 /** The installed SDK version. Single source of truth for the barrel + CLI. */
-declare const VERSION = "0.7.0";
+declare const VERSION = "0.8.0";
 
-export { type ActivationInput, ActivationService, type ActivationServiceOptions, type ActivationStore, type AdminField, type AdminListQuery, type AdminListResult, type AdminResource, type AdminRouterOptions, AdminSite, AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, type AuthResponse, type AuthRouterOptions, type AuthUser, type BaseAppSettings, BaseController, BaseModel, type BaseResponse, BaseService, type BrokerManager, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, type CacheManager, type CachedOptions, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CursorPaginationFilter, DEFAULT_LOCALE, type EmailMessage, type EmailOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FlagContext, ForbiddenException, type GenerateOpenApiOptions, HTTPClient, type HTTPClientOptions, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, type InboundHandler, type InboundMessage, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, LocalUploadStorage, type LocalUploadStorageOptions, type LogExtra, type LogLevel, type LoginInput, type MediaKind, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, type MemoryMetrics, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, type MessagingProvider, MetricsUtils, type MfaCodeInput, type MfaEnrollment, MfaService, type MfaServiceOptions, type MfaStore, NotFoundException, type OpenApiDocument, type OpenApiInfo, type OutboundMedia, type OutboundResult, PHONE_BR_PATTERN, type PaginationFilter, type PasswordResetConfirmInput, type PasswordResetRequestInput, PasswordResetService, type PasswordResetServiceOptions, type PasswordResetStore, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, RedisCacheManager, type RedisLike, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type ResponseMapper, RetryPolicy, type RunServerOptions, SSEBroker, type SaveOptions, type SendOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type StateBR, type SwaggerOptions, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, TelegramProvider, type TelegramProviderOptions, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, TwilioSmsProvider, type TwilioSmsProviderOptions, type TwilioWebhookOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, type UserPublic, type UserStore, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, WhatsAppProvider, type WhatsAppProviderOptions, type WhatsAppWebhookOptions, activationSchema, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeSessionMiddleware, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaCodeSchema, mfaEnrollResponseSchema, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };
+export { type ActivationInput, ActivationService, type ActivationServiceOptions, type ActivationStore, type AdminField, type AdminListQuery, type AdminListResult, type AdminResource, type AdminRouterOptions, AdminSite, AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, type AuthResponse, type AuthRouterOptions, type AuthUser, type BaseAppSettings, BaseController, BaseModel, type BaseResponse, BaseService, type BrokerManager, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, type CacheManager, type CachedOptions, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CursorPaginationFilter, DEFAULT_LOCALE, type EmailMessage, type EmailOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FlagContext, ForbiddenException, type GenerateOpenApiOptions, HTTPClient, type HTTPClientOptions, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, type InboundHandler, type InboundMessage, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, LocalUploadStorage, type LocalUploadStorageOptions, type LogExtra, type LogLevel, type LoginInput, type MediaKind, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, type MemoryMetrics, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, type MessagingProvider, MetricsUtils, type MfaCodeInput, type MfaEnrollment, MfaService, type MfaServiceOptions, type MfaStore, NotFoundException, type OpenApiDocument, type OpenApiInfo, type OutboundMedia, type OutboundResult, PHONE_BR_PATTERN, type PaginationFilter, type PasswordResetConfirmInput, type PasswordResetRequestInput, PasswordResetService, type PasswordResetServiceOptions, type PasswordResetStore, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, RedisCacheManager, type RedisLike, type RedisPublisherLike, RedisSSEBroker, type RedisSSEBrokerOptions, RedisSessionStore, type RedisSubscriberLike, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type ResponseMapper, RetryPolicy, type RunServerOptions, SSEBroker, type SaveOptions, type SendOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, type SessionRedisLike, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type StateBR, type SwaggerOptions, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, TelegramProvider, type TelegramProviderOptions, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, TwilioSmsProvider, type TwilioSmsProviderOptions, type TwilioWebhookOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, type UserPublic, type UserStore, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, WhatsAppProvider, type WhatsAppProviderOptions, type WhatsAppWebhookOptions, activationSchema, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeSessionMiddleware, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaCodeSchema, mfaEnrollResponseSchema, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };

package/dist/index.js

@@ -1,4 +1,4 @@
-export { VERSION } from './chunk-PKUUVK7K.js';
+export { VERSION } from './chunk-JWJJAIXV.js';
 import { AsyncLocalStorage } from 'async_hooks';
 import { extendZodWithOpenApi, OpenAPIRegistry, OpenApiGeneratorV31, OpenApiGeneratorV3 } from '@asteasolutions/zod-to-openapi';
 export { OpenAPIRegistry } from '@asteasolutions/zod-to-openapi';
@@ -7326,6 +7326,76 @@ function makeSessionMiddleware(service, options = {}) {
   };
 }
 
+// src/sessions/redisStore.ts
+var RedisSessionStore = class {
+  /**
+   * @param client - A connected node-redis v4 (or compatible) client.
+   * @param prefix - Key prefix. Default `sess:`.
+   */
+  constructor(client, prefix = "sess:") {
+    this.client = client;
+    this.prefix = prefix;
+  }
+  client;
+  prefix;
+  key(idHash) {
+    return `${this.prefix}${idHash}`;
+  }
+  userKey(userId) {
+    return `${this.prefix}user:${userId}`;
+  }
+  async get(idHash) {
+    const raw = await this.client.get(this.key(idHash));
+    if (raw === null) return null;
+    const session = JSON.parse(raw);
+    if (session.expiresAt <= Date.now()) {
+      await this.delete(idHash);
+      return null;
+    }
+    return session;
+  }
+  async set(session) {
+    const ttlSeconds = Math.max(1, Math.ceil((session.expiresAt - Date.now()) / 1e3));
+    await this.client.set(this.key(session.idHash), JSON.stringify(session), {
+      EX: ttlSeconds
+    });
+    await this.client.sAdd(this.userKey(session.userId), session.idHash);
+  }
+  async delete(idHash) {
+    const raw = await this.client.get(this.key(idHash));
+    await this.client.del(this.key(idHash));
+    if (raw) {
+      const session = JSON.parse(raw);
+      await this.client.sRem(this.userKey(session.userId), idHash);
+    }
+  }
+  async deleteByUser(userId) {
+    const ids = await this.client.sMembers(this.userKey(userId));
+    let count = 0;
+    for (const idHash of ids) {
+      await this.client.del(this.key(idHash));
+      await this.client.sRem(this.userKey(userId), idHash);
+      count += 1;
+    }
+    return count;
+  }
+  async listByUser(userId) {
+    const ids = await this.client.sMembers(this.userKey(userId));
+    const sessions = [];
+    const now = Date.now();
+    for (const idHash of ids) {
+      const raw = await this.client.get(this.key(idHash));
+      if (raw === null) {
+        await this.client.sRem(this.userKey(userId), idHash);
+        continue;
+      }
+      const session = JSON.parse(raw);
+      if (session.expiresAt > now) sessions.push(session);
+    }
+    return sessions.sort((a, b) => a.createdAt - b.createdAt);
+  }
+};
+
 // src/sse/eventStream.ts
 var ServerSentEvent = class {
   constructor(init) {
@@ -7498,6 +7568,92 @@ var SSEBroker = class {
   }
 };
 
+// src/sse/redisBroker.ts
+var RedisSSEBroker = class {
+  /**
+   * @param publisher - The main Redis client (used to `publish`).
+   * @param subscriber - A dedicated subscriber connection (`client.duplicate()`).
+   * @param options - Channel prefix + per-stream options.
+   */
+  constructor(publisher, subscriber, options = {}) {
+    this.publisher = publisher;
+    this.subscriber = subscriber;
+    this.prefix = options.prefix ?? "sse:";
+    const { prefix: _p, ...streamOptions } = options;
+    this.streamOptions = streamOptions;
+  }
+  publisher;
+  subscriber;
+  local = /* @__PURE__ */ new Map();
+  prefix;
+  streamOptions;
+  channelKey(channel) {
+    return `${this.prefix}${channel}`;
+  }
+  /** Emit a decoded payload to every local stream on a channel. */
+  emitLocal(channel, data, event) {
+    const set = this.local.get(channel);
+    if (!set) return;
+    for (const stream of set) stream.publish(data, event);
+  }
+  /**
+   * Register a subscriber stream, subscribing to the Redis channel on first use.
+   *
+   * @param channel - The channel name.
+   * @returns A fresh {@link EventStream} to serve to the client.
+   */
+  async register(channel) {
+    const stream = new EventStream(this.streamOptions);
+    let set = this.local.get(channel);
+    if (!set) {
+      set = /* @__PURE__ */ new Set();
+      this.local.set(channel, set);
+      await this.subscriber.subscribe(this.channelKey(channel), (raw) => {
+        try {
+          const { data, event } = JSON.parse(raw);
+          this.emitLocal(channel, data, event);
+        } catch {
+        }
+      });
+    }
+    set.add(stream);
+    return stream;
+  }
+  /**
+   * Remove a subscriber stream; unsubscribe from Redis when the last leaves.
+   *
+   * @param channel - The channel name.
+   * @param stream - The stream to remove.
+   */
+  async unregister(channel, stream) {
+    const set = this.local.get(channel);
+    if (!set) return;
+    set.delete(stream);
+    stream.close();
+    if (set.size === 0) {
+      this.local.delete(channel);
+      await this.subscriber.unsubscribe(this.channelKey(channel));
+    }
+  }
+  /** Local subscriber count on `channel` (this replica only). */
+  localSubscribers(channel) {
+    return this.local.get(channel)?.size ?? 0;
+  }
+  /**
+   * Publish to every subscriber across all replicas.
+   *
+   * @param channel - The channel name.
+   * @param data - The payload (JSON-encoded).
+   * @param event - Optional event name.
+   */
+  async publish(channel, data, event) {
+    await this.publisher.publish(
+      this.channelKey(channel),
+      JSON.stringify({ data, ...event ? { event } : {} })
+    );
+  }
+};
+
 // src/websockets/schemas.ts
 var wsEnvelopeSchema = z.object({
   type: z.string().openapi({ description: "Message type discriminator." }),
@@ -9223,6 +9379,6 @@ function runServer(app, options = {}) {
   });
 }
 
-export { ActivationService, AdminSite, AppException, AttemptThrottle, BaseController, BaseModel, BaseService, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, CircuitOpenError, CompositeFeatureFlagBackend, ConflictException, DEFAULT_LOCALE, EmailUtils, EnvFeatureFlagBackend, EventStream, ExpiredTokenException, FeatureFlags, ForbiddenException, HTTPClient, HTTP_500_MARKER, InvalidTokenException, JSONLogger, JWTUtils, LocalUploadStorage, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, MetricsUtils, MfaService, NotFoundException, PHONE_BR_PATTERN, PasswordResetService, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, RedisCacheManager, Region, RetryPolicy, SSEBroker, ServerSentEvent, SessionService, TOTPHelper, TaskManager, TelegramProvider, TooManyRequestsException, TwilioSmsProvider, UF, UnauthorizedException, UserAuthService, ValidationException, WebPushDispatcher, WebPushError, WebPushGoneError, WebSocketHub, WhatsAppProvider, activationSchema, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached3 as cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeSessionMiddleware, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaCodeSchema, mfaEnrollResponseSchema, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };
+export { ActivationService, AdminSite, AppException, AttemptThrottle, BaseController, BaseModel, BaseService, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, CircuitOpenError, CompositeFeatureFlagBackend, ConflictException, DEFAULT_LOCALE, EmailUtils, EnvFeatureFlagBackend, EventStream, ExpiredTokenException, FeatureFlags, ForbiddenException, HTTPClient, HTTP_500_MARKER, InvalidTokenException, JSONLogger, JWTUtils, LocalUploadStorage, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, MetricsUtils, MfaService, NotFoundException, PHONE_BR_PATTERN, PasswordResetService, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, RedisCacheManager, RedisSSEBroker, RedisSessionStore, Region, RetryPolicy, SSEBroker, ServerSentEvent, SessionService, TOTPHelper, TaskManager, TelegramProvider, TooManyRequestsException, TwilioSmsProvider, UF, UnauthorizedException, UserAuthService, ValidationException, WebPushDispatcher, WebPushError, WebPushGoneError, WebSocketHub, WhatsAppProvider, activationSchema, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached3 as cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeSessionMiddleware, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaCodeSchema, mfaEnrollResponseSchema, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map