tempest-express-sdk 0.7.0 → 0.9.0

package/dist/index.d.cts

@@ -1291,8 +1291,9 @@ declare class HTTPClient {
  * System metrics, mirroring `utils.metrics.MetricsUtils`.
  *
  * Reads CPU, memory and process stats from Node's built-in `node:os` /
- * `process` — no native dependency (GPU metrics from the FastAPI SDK are out of
- * scope here). Includes a Prometheus text-format exporter.
+ * `process` — no native dependency. Optional GPU metrics shell out to
+ * `nvidia-smi` (returns `[]` when unavailable). Includes a Prometheus
+ * text-format exporter.
  */
 /** CPU load metrics. */
 interface CPUMetrics {
@@ -1316,6 +1317,19 @@ interface MemoryMetrics {
     /** Resident set size of the current process. */
     processRss: number;
 }
+/** A single GPU's metrics (from `nvidia-smi`). */
+interface GPUMetrics {
+    /** GPU index. */
+    index: number;
+    /** GPU utilization percent. */
+    utilizationPercent: number;
+    /** Used memory in MiB. */
+    memoryUsedMb: number;
+    /** Total memory in MiB. */
+    memoryTotalMb: number;
+    /** Core temperature in °C. */
+    temperatureC: number;
+}
 /** A snapshot of system + process metrics. */
 interface SystemMetrics {
     cpu: CPUMetrics;
@@ -1330,17 +1344,26 @@ declare function readMemory(): MemoryMetrics;
 /** Read a full system snapshot. */
 declare function readSystem(): SystemMetrics;
 /**
- * Render a snapshot as Prometheus text-format metrics.
+ * Read GPU metrics via `nvidia-smi`. Returns `[]` when the tool is absent or
+ * fails (no GPU, not installed) — never throws.
  *
- * @param snapshot - A snapshot (defaults to a fresh {@link readSystem}).
+ * @returns One {@link GPUMetrics} per detected GPU.
+ */
+declare function readGpus(): Promise<GPUMetrics[]>;
+/**
+ * Render metrics as Prometheus text-format.
+ *
+ * @param snapshot - A system snapshot (defaults to a fresh {@link readSystem}).
+ * @param gpus - Optional GPU metrics to append (from {@link readGpus}).
  * @returns The Prometheus exposition text.
  */
-declare function toPrometheus(snapshot?: SystemMetrics): string;
+declare function toPrometheus(snapshot?: SystemMetrics, gpus?: GPUMetrics[]): string;
 /** Stateless system-metrics reader + Prometheus exporter. */
 declare const MetricsUtils: {
     readonly cpu: typeof readCpu;
     readonly memory: typeof readMemory;
     readonly system: typeof readSystem;
+    readonly gpus: typeof readGpus;
     readonly toPrometheus: typeof toPrometheus;
 };
 
@@ -1635,6 +1658,45 @@ interface SessionMiddlewareOptions {
  */
 declare function makeSessionMiddleware(service: SessionService, options?: SessionMiddlewareOptions): RequestHandler;
 
+/**
+ * Redis-backed {@link SessionStore} for multi-replica deployments.
+ *
+ * Sessions live under `sess:<idHash>` with a Redis TTL; a per-user set
+ * (`sess:user:<userId>`) indexes them so `listByUser`/`deleteByUser` work
+ * without scanning. Takes an injected client (node-redis v4 compatible) so the
+ * SDK never hard-depends on `redis`. Expired keys drop via TTL; stale index
+ * entries are pruned lazily on read.
+ */
+
+/** The subset of a node-redis v4 client this store needs. */
+interface SessionRedisLike {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, options?: {
+        EX?: number;
+    }): Promise<unknown>;
+    del(key: string): Promise<unknown>;
+    sAdd(key: string, member: string): Promise<unknown>;
+    sRem(key: string, member: string): Promise<unknown>;
+    sMembers(key: string): Promise<string[]>;
+}
+/** Redis-backed session store. */
+declare class RedisSessionStore implements SessionStore {
+    private readonly client;
+    private readonly prefix;
+    /**
+     * @param client - A connected node-redis v4 (or compatible) client.
+     * @param prefix - Key prefix. Default `sess:`.
+     */
+    constructor(client: SessionRedisLike, prefix?: string);
+    private key;
+    private userKey;
+    get(idHash: string): Promise<Session | null>;
+    set(session: Session): Promise<void>;
+    delete(idHash: string): Promise<void>;
+    deleteByUser(userId: string): Promise<number>;
+    listByUser(userId: string): Promise<Session[]>;
+}
+
 /**
  * Server-Sent Events primitives, mirroring `sse.event_stream`.
  *
@@ -1761,6 +1823,73 @@ declare class SSEBroker {
     publish(channel: string, data: unknown, event?: string): number;
 }
 
+/**
+ * Redis pub/sub SSE broker for multi-replica deployments.
+ *
+ * The in-process {@link SSEBroker} only reaches subscribers on the same node.
+ * {@link RedisSSEBroker} publishes to a Redis channel; every replica's
+ * subscriber connection receives it and fans out to its local {@link EventStream}s
+ * — so a publish on any node reaches SSE clients on all nodes. Takes injected
+ * node-redis v4 clients (a dedicated subscriber connection, per Redis pub/sub
+ * rules) so the SDK never hard-depends on `redis`.
+ */
+
+/** Publisher side (the main client). */
+interface RedisPublisherLike {
+    publish(channel: string, message: string): Promise<unknown>;
+}
+/** Subscriber side (a dedicated connection — `client.duplicate()`). */
+interface RedisSubscriberLike {
+    subscribe(channel: string, listener: (message: string) => void): Promise<unknown>;
+    unsubscribe(channel: string): Promise<unknown>;
+}
+/** Options for {@link RedisSSEBroker}. */
+interface RedisSSEBrokerOptions extends EventStreamOptions {
+    /** Redis channel prefix. Default `sse:`. */
+    prefix?: string;
+}
+/** Cross-replica SSE fan-out over Redis pub/sub. */
+declare class RedisSSEBroker {
+    private readonly publisher;
+    private readonly subscriber;
+    private readonly local;
+    private readonly prefix;
+    private readonly streamOptions;
+    /**
+     * @param publisher - The main Redis client (used to `publish`).
+     * @param subscriber - A dedicated subscriber connection (`client.duplicate()`).
+     * @param options - Channel prefix + per-stream options.
+     */
+    constructor(publisher: RedisPublisherLike, subscriber: RedisSubscriberLike, options?: RedisSSEBrokerOptions);
+    private channelKey;
+    /** Emit a decoded payload to every local stream on a channel. */
+    private emitLocal;
+    /**
+     * Register a subscriber stream, subscribing to the Redis channel on first use.
+     *
+     * @param channel - The channel name.
+     * @returns A fresh {@link EventStream} to serve to the client.
+     */
+    register(channel: string): Promise<EventStream>;
+    /**
+     * Remove a subscriber stream; unsubscribe from Redis when the last leaves.
+     *
+     * @param channel - The channel name.
+     * @param stream - The stream to remove.
+     */
+    unregister(channel: string, stream: EventStream): Promise<void>;
+    /** Local subscriber count on `channel` (this replica only). */
+    localSubscribers(channel: string): number;
+    /**
+     * Publish to every subscriber across all replicas.
+     *
+     * @param channel - The channel name.
+     * @param data - The payload (JSON-encoded).
+     * @param event - Optional event name.
+     */
+    publish(channel: string, data: unknown, event?: string): Promise<void>;
+}
+
 /** WebSocket message envelope, mirroring `websockets.schemas`. */
 
 /** The canonical message envelope exchanged over a socket. */
@@ -3403,6 +3532,31 @@ interface HealthRouterOptions {
  */
 declare function makeHealthRouter(options?: HealthRouterOptions): Router;
 
+/**
+ * Prometheus `/metrics` router, mirroring `api.routers.metrics`.
+ *
+ * Serves {@link MetricsUtils.toPrometheus} as `text/plain`. Optionally includes
+ * GPU metrics (via `nvidia-smi`) and can be guarded so the endpoint stays on the
+ * internal network / behind auth.
+ */
+
+/** Options for {@link makeMetricsRouter}. */
+interface MetricsRouterOptions {
+    /** Route path. Default `/metrics`. */
+    path?: string;
+    /** Include GPU metrics via `nvidia-smi` (adds a subprocess call). Default `false`. */
+    includeGpu?: boolean;
+    /** Optional guard middleware (e.g. internal-network or token check). */
+    guard?: RequestHandler;
+}
+/**
+ * Build the Prometheus metrics router.
+ *
+ * @param options - Path, GPU toggle and optional guard.
+ * @returns An Express router exposing the metrics endpoint.
+ */
+declare function makeMetricsRouter(options?: MetricsRouterOptions): Router;
+
 /**
  * Application factory and server runner, mirroring `api.app` + `api.server`.
  *
@@ -3469,6 +3623,6 @@ interface RunServerOptions {
 declare function runServer(app: Express, options?: RunServerOptions): Promise<Server>;
 
 /** The installed SDK version. Single source of truth for the barrel + CLI. */
-declare const VERSION = "0.7.0";
+declare const VERSION = "0.9.0";
 
-export { type ActivationInput, ActivationService, type ActivationServiceOptions, type ActivationStore, type AdminField, type AdminListQuery, type AdminListResult, type AdminResource, type AdminRouterOptions, AdminSite, AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, type AuthResponse, type AuthRouterOptions, type AuthUser, type BaseAppSettings, BaseController, BaseModel, type BaseResponse, BaseService, type BrokerManager, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, type CacheManager, type CachedOptions, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CursorPaginationFilter, DEFAULT_LOCALE, type EmailMessage, type EmailOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FlagContext, ForbiddenException, type GenerateOpenApiOptions, HTTPClient, type HTTPClientOptions, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, type InboundHandler, type InboundMessage, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, LocalUploadStorage, type LocalUploadStorageOptions, type LogExtra, type LogLevel, type LoginInput, type MediaKind, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, type MemoryMetrics, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, type MessagingProvider, MetricsUtils, type MfaCodeInput, type MfaEnrollment, MfaService, type MfaServiceOptions, type MfaStore, NotFoundException, type OpenApiDocument, type OpenApiInfo, type OutboundMedia, type OutboundResult, PHONE_BR_PATTERN, type PaginationFilter, type PasswordResetConfirmInput, type PasswordResetRequestInput, PasswordResetService, type PasswordResetServiceOptions, type PasswordResetStore, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, RedisCacheManager, type RedisLike, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type ResponseMapper, RetryPolicy, type RunServerOptions, SSEBroker, type SaveOptions, type SendOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type StateBR, type SwaggerOptions, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, TelegramProvider, type TelegramProviderOptions, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, TwilioSmsProvider, type TwilioSmsProviderOptions, type TwilioWebhookOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, type UserPublic, type UserStore, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, WhatsAppProvider, type WhatsAppProviderOptions, type WhatsAppWebhookOptions, activationSchema, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeSessionMiddleware, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaCodeSchema, mfaEnrollResponseSchema, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };
+export { type ActivationInput, ActivationService, type ActivationServiceOptions, type ActivationStore, type AdminField, type AdminListQuery, type AdminListResult, type AdminResource, type AdminRouterOptions, AdminSite, AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, type AuthResponse, type AuthRouterOptions, type AuthUser, type BaseAppSettings, BaseController, BaseModel, type BaseResponse, BaseService, type BrokerManager, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, type CacheManager, type CachedOptions, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CursorPaginationFilter, DEFAULT_LOCALE, type EmailMessage, type EmailOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FlagContext, ForbiddenException, type GPUMetrics, type GenerateOpenApiOptions, HTTPClient, type HTTPClientOptions, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, type InboundHandler, type InboundMessage, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, LocalUploadStorage, type LocalUploadStorageOptions, type LogExtra, type LogLevel, type LoginInput, type MediaKind, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, type MemoryMetrics, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, type MessagingProvider, type MetricsRouterOptions, MetricsUtils, type MfaCodeInput, type MfaEnrollment, MfaService, type MfaServiceOptions, type MfaStore, NotFoundException, type OpenApiDocument, type OpenApiInfo, type OutboundMedia, type OutboundResult, PHONE_BR_PATTERN, type PaginationFilter, type PasswordResetConfirmInput, type PasswordResetRequestInput, PasswordResetService, type PasswordResetServiceOptions, type PasswordResetStore, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, RedisCacheManager, type RedisLike, type RedisPublisherLike, RedisSSEBroker, type RedisSSEBrokerOptions, RedisSessionStore, type RedisSubscriberLike, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type ResponseMapper, RetryPolicy, type RunServerOptions, SSEBroker, type SaveOptions, type SendOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, type SessionRedisLike, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type StateBR, type SwaggerOptions, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, TelegramProvider, type TelegramProviderOptions, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, TwilioSmsProvider, type TwilioSmsProviderOptions, type TwilioWebhookOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, type UserPublic, type UserStore, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, WhatsAppProvider, type WhatsAppProviderOptions, type WhatsAppWebhookOptions, activationSchema, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeMetricsRouter, makeSessionMiddleware, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaCodeSchema, mfaEnrollResponseSchema, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };

package/dist/index.d.ts

@@ -1291,8 +1291,9 @@ declare class HTTPClient {
  * System metrics, mirroring `utils.metrics.MetricsUtils`.
  *
  * Reads CPU, memory and process stats from Node's built-in `node:os` /
- * `process` — no native dependency (GPU metrics from the FastAPI SDK are out of
- * scope here). Includes a Prometheus text-format exporter.
+ * `process` — no native dependency. Optional GPU metrics shell out to
+ * `nvidia-smi` (returns `[]` when unavailable). Includes a Prometheus
+ * text-format exporter.
  */
 /** CPU load metrics. */
 interface CPUMetrics {
@@ -1316,6 +1317,19 @@ interface MemoryMetrics {
     /** Resident set size of the current process. */
     processRss: number;
 }
+/** A single GPU's metrics (from `nvidia-smi`). */
+interface GPUMetrics {
+    /** GPU index. */
+    index: number;
+    /** GPU utilization percent. */
+    utilizationPercent: number;
+    /** Used memory in MiB. */
+    memoryUsedMb: number;
+    /** Total memory in MiB. */
+    memoryTotalMb: number;
+    /** Core temperature in °C. */
+    temperatureC: number;
+}
 /** A snapshot of system + process metrics. */
 interface SystemMetrics {
     cpu: CPUMetrics;
@@ -1330,17 +1344,26 @@ declare function readMemory(): MemoryMetrics;
 /** Read a full system snapshot. */
 declare function readSystem(): SystemMetrics;
 /**
- * Render a snapshot as Prometheus text-format metrics.
+ * Read GPU metrics via `nvidia-smi`. Returns `[]` when the tool is absent or
+ * fails (no GPU, not installed) — never throws.
  *
- * @param snapshot - A snapshot (defaults to a fresh {@link readSystem}).
+ * @returns One {@link GPUMetrics} per detected GPU.
+ */
+declare function readGpus(): Promise<GPUMetrics[]>;
+/**
+ * Render metrics as Prometheus text-format.
+ *
+ * @param snapshot - A system snapshot (defaults to a fresh {@link readSystem}).
+ * @param gpus - Optional GPU metrics to append (from {@link readGpus}).
  * @returns The Prometheus exposition text.
  */
-declare function toPrometheus(snapshot?: SystemMetrics): string;
+declare function toPrometheus(snapshot?: SystemMetrics, gpus?: GPUMetrics[]): string;
 /** Stateless system-metrics reader + Prometheus exporter. */
 declare const MetricsUtils: {
     readonly cpu: typeof readCpu;
     readonly memory: typeof readMemory;
     readonly system: typeof readSystem;
+    readonly gpus: typeof readGpus;
     readonly toPrometheus: typeof toPrometheus;
 };
 
@@ -1635,6 +1658,45 @@ interface SessionMiddlewareOptions {
  */
 declare function makeSessionMiddleware(service: SessionService, options?: SessionMiddlewareOptions): RequestHandler;
 
+/**
+ * Redis-backed {@link SessionStore} for multi-replica deployments.
+ *
+ * Sessions live under `sess:<idHash>` with a Redis TTL; a per-user set
+ * (`sess:user:<userId>`) indexes them so `listByUser`/`deleteByUser` work
+ * without scanning. Takes an injected client (node-redis v4 compatible) so the
+ * SDK never hard-depends on `redis`. Expired keys drop via TTL; stale index
+ * entries are pruned lazily on read.
+ */
+
+/** The subset of a node-redis v4 client this store needs. */
+interface SessionRedisLike {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, options?: {
+        EX?: number;
+    }): Promise<unknown>;
+    del(key: string): Promise<unknown>;
+    sAdd(key: string, member: string): Promise<unknown>;
+    sRem(key: string, member: string): Promise<unknown>;
+    sMembers(key: string): Promise<string[]>;
+}
+/** Redis-backed session store. */
+declare class RedisSessionStore implements SessionStore {
+    private readonly client;
+    private readonly prefix;
+    /**
+     * @param client - A connected node-redis v4 (or compatible) client.
+     * @param prefix - Key prefix. Default `sess:`.
+     */
+    constructor(client: SessionRedisLike, prefix?: string);
+    private key;
+    private userKey;
+    get(idHash: string): Promise<Session | null>;
+    set(session: Session): Promise<void>;
+    delete(idHash: string): Promise<void>;
+    deleteByUser(userId: string): Promise<number>;
+    listByUser(userId: string): Promise<Session[]>;
+}
+
 /**
  * Server-Sent Events primitives, mirroring `sse.event_stream`.
  *
@@ -1761,6 +1823,73 @@ declare class SSEBroker {
     publish(channel: string, data: unknown, event?: string): number;
 }
 
+/**
+ * Redis pub/sub SSE broker for multi-replica deployments.
+ *
+ * The in-process {@link SSEBroker} only reaches subscribers on the same node.
+ * {@link RedisSSEBroker} publishes to a Redis channel; every replica's
+ * subscriber connection receives it and fans out to its local {@link EventStream}s
+ * — so a publish on any node reaches SSE clients on all nodes. Takes injected
+ * node-redis v4 clients (a dedicated subscriber connection, per Redis pub/sub
+ * rules) so the SDK never hard-depends on `redis`.
+ */
+
+/** Publisher side (the main client). */
+interface RedisPublisherLike {
+    publish(channel: string, message: string): Promise<unknown>;
+}
+/** Subscriber side (a dedicated connection — `client.duplicate()`). */
+interface RedisSubscriberLike {
+    subscribe(channel: string, listener: (message: string) => void): Promise<unknown>;
+    unsubscribe(channel: string): Promise<unknown>;
+}
+/** Options for {@link RedisSSEBroker}. */
+interface RedisSSEBrokerOptions extends EventStreamOptions {
+    /** Redis channel prefix. Default `sse:`. */
+    prefix?: string;
+}
+/** Cross-replica SSE fan-out over Redis pub/sub. */
+declare class RedisSSEBroker {
+    private readonly publisher;
+    private readonly subscriber;
+    private readonly local;
+    private readonly prefix;
+    private readonly streamOptions;
+    /**
+     * @param publisher - The main Redis client (used to `publish`).
+     * @param subscriber - A dedicated subscriber connection (`client.duplicate()`).
+     * @param options - Channel prefix + per-stream options.
+     */
+    constructor(publisher: RedisPublisherLike, subscriber: RedisSubscriberLike, options?: RedisSSEBrokerOptions);
+    private channelKey;
+    /** Emit a decoded payload to every local stream on a channel. */
+    private emitLocal;
+    /**
+     * Register a subscriber stream, subscribing to the Redis channel on first use.
+     *
+     * @param channel - The channel name.
+     * @returns A fresh {@link EventStream} to serve to the client.
+     */
+    register(channel: string): Promise<EventStream>;
+    /**
+     * Remove a subscriber stream; unsubscribe from Redis when the last leaves.
+     *
+     * @param channel - The channel name.
+     * @param stream - The stream to remove.
+     */
+    unregister(channel: string, stream: EventStream): Promise<void>;
+    /** Local subscriber count on `channel` (this replica only). */
+    localSubscribers(channel: string): number;
+    /**
+     * Publish to every subscriber across all replicas.
+     *
+     * @param channel - The channel name.
+     * @param data - The payload (JSON-encoded).
+     * @param event - Optional event name.
+     */
+    publish(channel: string, data: unknown, event?: string): Promise<void>;
+}
+
 /** WebSocket message envelope, mirroring `websockets.schemas`. */
 
 /** The canonical message envelope exchanged over a socket. */
@@ -3403,6 +3532,31 @@ interface HealthRouterOptions {
  */
 declare function makeHealthRouter(options?: HealthRouterOptions): Router;
 
+/**
+ * Prometheus `/metrics` router, mirroring `api.routers.metrics`.
+ *
+ * Serves {@link MetricsUtils.toPrometheus} as `text/plain`. Optionally includes
+ * GPU metrics (via `nvidia-smi`) and can be guarded so the endpoint stays on the
+ * internal network / behind auth.
+ */
+
+/** Options for {@link makeMetricsRouter}. */
+interface MetricsRouterOptions {
+    /** Route path. Default `/metrics`. */
+    path?: string;
+    /** Include GPU metrics via `nvidia-smi` (adds a subprocess call). Default `false`. */
+    includeGpu?: boolean;
+    /** Optional guard middleware (e.g. internal-network or token check). */
+    guard?: RequestHandler;
+}
+/**
+ * Build the Prometheus metrics router.
+ *
+ * @param options - Path, GPU toggle and optional guard.
+ * @returns An Express router exposing the metrics endpoint.
+ */
+declare function makeMetricsRouter(options?: MetricsRouterOptions): Router;
+
 /**
  * Application factory and server runner, mirroring `api.app` + `api.server`.
  *
@@ -3469,6 +3623,6 @@ interface RunServerOptions {
 declare function runServer(app: Express, options?: RunServerOptions): Promise<Server>;
 
 /** The installed SDK version. Single source of truth for the barrel + CLI. */
-declare const VERSION = "0.7.0";
+declare const VERSION = "0.9.0";
 
-export { type ActivationInput, ActivationService, type ActivationServiceOptions, type ActivationStore, type AdminField, type AdminListQuery, type AdminListResult, type AdminResource, type AdminRouterOptions, AdminSite, AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, type AuthResponse, type AuthRouterOptions, type AuthUser, type BaseAppSettings, BaseController, BaseModel, type BaseResponse, BaseService, type BrokerManager, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, type CacheManager, type CachedOptions, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CursorPaginationFilter, DEFAULT_LOCALE, type EmailMessage, type EmailOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FlagContext, ForbiddenException, type GenerateOpenApiOptions, HTTPClient, type HTTPClientOptions, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, type InboundHandler, type InboundMessage, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, LocalUploadStorage, type LocalUploadStorageOptions, type LogExtra, type LogLevel, type LoginInput, type MediaKind, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, type MemoryMetrics, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, type MessagingProvider, MetricsUtils, type MfaCodeInput, type MfaEnrollment, MfaService, type MfaServiceOptions, type MfaStore, NotFoundException, type OpenApiDocument, type OpenApiInfo, type OutboundMedia, type OutboundResult, PHONE_BR_PATTERN, type PaginationFilter, type PasswordResetConfirmInput, type PasswordResetRequestInput, PasswordResetService, type PasswordResetServiceOptions, type PasswordResetStore, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, RedisCacheManager, type RedisLike, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type ResponseMapper, RetryPolicy, type RunServerOptions, SSEBroker, type SaveOptions, type SendOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type StateBR, type SwaggerOptions, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, TelegramProvider, type TelegramProviderOptions, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, TwilioSmsProvider, type TwilioSmsProviderOptions, type TwilioWebhookOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, type UserPublic, type UserStore, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, WhatsAppProvider, type WhatsAppProviderOptions, type WhatsAppWebhookOptions, activationSchema, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeSessionMiddleware, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaCodeSchema, mfaEnrollResponseSchema, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };
+export { type ActivationInput, ActivationService, type ActivationServiceOptions, type ActivationStore, type AdminField, type AdminListQuery, type AdminListResult, type AdminResource, type AdminRouterOptions, AdminSite, AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, type AuthResponse, type AuthRouterOptions, type AuthUser, type BaseAppSettings, BaseController, BaseModel, type BaseResponse, BaseService, type BrokerManager, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, type CacheManager, type CachedOptions, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CursorPaginationFilter, DEFAULT_LOCALE, type EmailMessage, type EmailOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FlagContext, ForbiddenException, type GPUMetrics, type GenerateOpenApiOptions, HTTPClient, type HTTPClientOptions, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, type InboundHandler, type InboundMessage, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, LocalUploadStorage, type LocalUploadStorageOptions, type LogExtra, type LogLevel, type LoginInput, type MediaKind, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, type MemoryMetrics, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, type MessagingProvider, type MetricsRouterOptions, MetricsUtils, type MfaCodeInput, type MfaEnrollment, MfaService, type MfaServiceOptions, type MfaStore, NotFoundException, type OpenApiDocument, type OpenApiInfo, type OutboundMedia, type OutboundResult, PHONE_BR_PATTERN, type PaginationFilter, type PasswordResetConfirmInput, type PasswordResetRequestInput, PasswordResetService, type PasswordResetServiceOptions, type PasswordResetStore, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, RedisCacheManager, type RedisLike, type RedisPublisherLike, RedisSSEBroker, type RedisSSEBrokerOptions, RedisSessionStore, type RedisSubscriberLike, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type ResponseMapper, RetryPolicy, type RunServerOptions, SSEBroker, type SaveOptions, type SendOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, type SessionRedisLike, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type StateBR, type SwaggerOptions, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, TelegramProvider, type TelegramProviderOptions, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, TwilioSmsProvider, type TwilioSmsProviderOptions, type TwilioWebhookOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, type UserPublic, type UserStore, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, WhatsAppProvider, type WhatsAppProviderOptions, type WhatsAppWebhookOptions, activationSchema, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeMetricsRouter, makeSessionMiddleware, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaCodeSchema, mfaEnrollResponseSchema, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };