@20syldev/api 4.7.0 → 4.9.0

package/src/app.ts

@@ -1,53 +0,0 @@
-import express from 'express';
-
-import { env } from './config/env.js';
-import { setupCors } from './middleware/cors.js';
-import { errorHandler } from './middleware/error.js';
-import { jsonResponseMiddleware } from './middleware/json.js';
-import { loggerMiddleware } from './middleware/logger.js';
-import { rateLimitMiddleware } from './middleware/ratelimit.js';
-import { endpointCheckMiddleware, versionCheckMiddleware } from './middleware/version.js';
-import deleteRoutes from './routes/delete.js';
-import getRoutes from './routes/get.js';
-import indexRoutes from './routes/index.js';
-import patchRoutes from './routes/patch.js';
-import postRoutes from './routes/post.js';
-
-const app = express();
-
-// Setup CORS, body parsing, static files
-setupCors(app);
-
-// Custom JSON response
-app.use(jsonResponseMiddleware);
-
-// Rate limiting
-app.use(rateLimitMiddleware);
-
-// Request logging
-app.use(loggerMiddleware);
-
-// Error handling
-app.use(errorHandler);
-
-// Root routes (before version check)
-app.use(indexRoutes);
-
-// Version & endpoint validation
-app.use('/:version', versionCheckMiddleware);
-app.use('/:version/:endpoint', endpointCheckMiddleware);
-
-// Versioned routes
-app.use(getRoutes);
-app.use(postRoutes);
-app.use(patchRoutes);
-app.use(deleteRoutes);
-
-// Start server
-if (process.env.NODE_ENV !== 'test') {
-    app.listen(env.PORT, () =>
-        console.log(`API is running on\n    - http://127.0.0.1:${env.PORT}\n    - http://localhost:${env.PORT}`),
-    );
-}
-
-export default app;

package/src/config/env.ts

@@ -1,87 +0,0 @@
-import dotenv from 'dotenv';
-
-import { DEFAULT_PORT } from '../constants.js';
-
-dotenv.config();
-
-function envList(key: string): string[] | null {
-    const v = process.env[key];
-    return v && v !== 'undefined' ? v.split(' ') : null;
-}
-
-function envNumber(key: string, fallback: number): number {
-    const v = parseInt(process.env[key] ?? '', 10);
-    return isNaN(v) ? fallback : v;
-}
-
-export const env = {
-    PORT: envNumber('PORT', DEFAULT_PORT),
-    GITHUB_TOKEN: process.env.GITHUB_TOKEN ?? '',
-
-    DEFAULT_LIMIT: envNumber('DEFAULT_LIMIT', 2000),
-    ADVANCED_LIMIT: envNumber('ADVANCED_LIMIT', 3500),
-    PRO_LIMIT: envNumber('PRO_LIMIT', 6000),
-    BUSINESS_LIMIT: envNumber('BUSINESS_LIMIT', 10000),
-    GLOBAL_LIMIT: envNumber('GLOBAL_LIMIT', 50000),
-
-    DEFAULT_BURST: envNumber('DEFAULT_BURST', 50),
-    ADVANCED_BURST: envNumber('ADVANCED_BURST', 80),
-    PRO_BURST: envNumber('PRO_BURST', 120),
-    BUSINESS_BURST: envNumber('BUSINESS_BURST', 200),
-
-    BUSINESS_TOKEN_LIST: envList('BUSINESS_TOKEN_LIST') ?? [],
-    PRO_TOKEN_LIST: envList('PRO_TOKEN_LIST') ?? [],
-    ADVANCED_TOKEN_LIST: envList('ADVANCED_TOKEN_LIST') ?? [],
-
-    // Website endpoint env vars
-    G_2048: process.env.G_2048,
-    API: process.env.API,
-    CDN: process.env.CDN,
-    COOP_API: process.env.COOP_API,
-    COOP_STATUS: process.env.COOP_STATUS,
-    CHAT: process.env.CHAT,
-    DIGIT: process.env.DIGIT,
-    DOC_COOPBOT: process.env.DOC_COOPBOT,
-    DOCS: process.env.DOCS,
-    DONUT: process.env.DONUT,
-    DRAWIO_PLUGIN: process.env.DRAWIO_PLUGIN,
-    FLOWERS: process.env.FLOWERS,
-    GEMSYNC: process.env.GEMSYNC,
-    GFT: process.env.GFT,
-    GITSITE: process.env.GITSITE,
-    LEBONCHAR: process.env.LEBONCHAR,
-    LOGGER: process.env.LOGGER,
-    LOGS: process.env.LOGS,
-    LOGVAULT: process.env.LOGVAULT,
-    LYAH: process.env.LYAH,
-    MINIFY: process.env.MINIFY,
-    MN: process.env.MN,
-    MONITORING: process.env.MONITORING,
-    MORPION: process.env.MORPION,
-    NITROGEN: process.env.NITROGEN,
-    OLD_DATABASE: process.env.OLD_DATABASE,
-    PASSWORD: process.env.PASSWORD,
-    PHP: process.env.PHP,
-    PLANNING: process.env.PLANNING,
-    PING: process.env.PING,
-    PORTFOLIO: process.env.PORTFOLIO,
-    PYTHON_API: process.env.PYTHON_API,
-    README: process.env.README,
-    TIMESTAMP: process.env.TIMESTAMP,
-    TERMINAL: process.env.TERMINAL,
-    VALENTINE: process.env.VALENTINE,
-    WRKIT: process.env.WRKIT,
-    ZPKI: process.env.ZPKI,
-
-    PATCH: envList('PATCH'),
-    RECENT: envList('RECENT'),
-    NEW: envList('NEW'),
-    DOMAINS: envList('DOMAINS'),
-
-    STATS1: process.env.STATS1,
-    STATS2: process.env.STATS2,
-    STATS3: process.env.STATS3,
-    STATS4: process.env.STATS4,
-    TAG: process.env.TAG,
-    ACTIVE: process.env.ACTIVE === 'true',
-};

package/src/config/plans.ts

@@ -1,61 +0,0 @@
-import { env } from './env.js';
-
-/**
- * Rate limit plans configuration.
- *
- * hourly  — max requests per hour (matches pricing page)
- * burst   — max requests per 10-second window
- * tokens  — list of bearer tokens for this tier
- *
- * To adjust limits, edit the values below or override via .env:
- *   DEFAULT_LIMIT, ADVANCED_LIMIT, PRO_LIMIT, BUSINESS_LIMIT
- *   DEFAULT_BURST, ADVANCED_BURST, PRO_BURST, BUSINESS_BURST
- */
-
-export interface Plan {
-    hourly: number;
-    burst: number;
-    tokens: string[];
-}
-
-export const plans: Record<string, Plan> = {
-    business: {
-        hourly: env.BUSINESS_LIMIT,
-        burst: env.BUSINESS_BURST,
-        tokens: env.BUSINESS_TOKEN_LIST,
-    },
-    pro: {
-        hourly: env.PRO_LIMIT,
-        burst: env.PRO_BURST,
-        tokens: env.PRO_TOKEN_LIST,
-    },
-    advanced: {
-        hourly: env.ADVANCED_LIMIT,
-        burst: env.ADVANCED_BURST,
-        tokens: env.ADVANCED_TOKEN_LIST,
-    },
-    default: {
-        hourly: env.DEFAULT_LIMIT,
-        burst: env.DEFAULT_BURST,
-        tokens: [],
-    },
-};
-
-export const globalLimit = env.GLOBAL_LIMIT; // 50 000/h
-
-/**
- * Returns the plan matching a bearer token, or 'default'.
- * Returns null if the token is provided but invalid.
- */
-export function getPlan(token: string): { name: string; plan: Plan } | null {
-    if (!token) return { name: 'default', plan: plans.default! };
-    if (token === 'undefined') return null;
-
-    for (const [name, plan] of Object.entries(plans)) {
-        if (name === 'default') continue;
-        if (plan.tokens.includes('undefined')) continue;
-        if (plan.tokens.includes(token)) return { name, plan };
-    }
-
-    return null;
-}

package/src/config/versions.ts

@@ -1,119 +0,0 @@
-import * as apiv3 from '../modules/v3.js';
-import * as apiv4 from '../modules/v4.js';
-
-export interface Endpoint {
-    name: string;
-    path?: string;
-    children?: Record<string, string>;
-}
-
-export interface VersionConfig {
-    endpoints: {
-        get: Endpoint[];
-        post: Endpoint[];
-        patch?: Endpoint[];
-        delete?: Endpoint[];
-    };
-    modules: typeof apiv3 | typeof apiv4;
-}
-
-/**
- * Merges a base list of endpoints with additions, deduplicating by `name`.
- * If an addition has the same name as a base entry, it overrides it.
- */
-const merge = (base: Endpoint[], additions: Endpoint[]): Endpoint[] => {
-    const map = new Map(base.map((e) => [e.name, e]));
-    for (const e of additions) map.set(e.name, e);
-    return [...map.values()];
-};
-
-const v1 = {
-    get: [
-        { name: 'algorithms', path: '/algorithms?method={algorithm}&value={value}(&value2={value2})' },
-        { name: 'captcha', path: '/captcha?text={text}' },
-        { name: 'color', path: '/color' },
-        { name: 'convert', path: '/convert?value={value}&from={unit}&to={unit}' },
-        { name: 'domain', path: '/domain' },
-        { name: 'infos', path: '/infos' },
-        { name: 'personal', path: '/personal' },
-        { name: 'qrcode', path: '/qrcode?url={URL}' },
-        { name: 'username', path: '/username' },
-        { name: 'website', path: '/website' },
-    ],
-    post: [{ name: 'token', path: '/token' }],
-};
-
-const v2 = {
-    get: merge(v1.get, [{ name: 'chat', path: '/chat' }]),
-    post: merge(v1.post, [
-        {
-            name: 'chat',
-            children: {
-                chat: '/chat',
-                private: '/chat/private',
-            } as Record<string, string>,
-        },
-        { name: 'hash', path: '/hash' },
-        {
-            name: 'tic_tac_toe',
-            children: {
-                tic_tac_toe: '/tic-tac-toe',
-                fetch: '/tic-tac-toe/fetch',
-                list: '/tic-tac-toe/list',
-            } as Record<string, string>,
-        },
-    ]),
-};
-
-const v3 = {
-    get: merge(v2.get, [
-        { name: 'levenshtein', path: '/levenshtein?str1={string}&str2={string}' },
-        {
-            name: 'time',
-            path: '/time(?type={type}&start={timestamp}&end={timestamp}&format={format}&timezone={timezone})',
-        },
-    ]),
-    post: merge(v2.post, [{ name: 'hyperplanning', path: '/hyperplanning' }]),
-};
-
-const v4 = {
-    get: merge(v3.get, [
-        { name: 'address', path: '/address(&country={code}&count={n})' },
-        { name: 'agent', path: '/agent(&ua={string})' },
-        {
-            name: 'captcha',
-            path: '/captcha(&text={text}&length={n}&width={px}&height={px}&noise={low|medium|high}&bg={hex}&color={hex})',
-        },
-        { name: 'color', path: '/color(&hex={hex})' },
-        { name: 'convert', path: '/convert?value={value}&from={unit}&to={unit}' },
-        { name: 'dice', path: '/dice?roll={NdX+M}' },
-        { name: 'encode', path: '/encode?method={method}&text={text}(&shift={shift})' },
-        { name: 'geo', path: '/geo?lat1={lat}&lon1={lon}&lat2={lat}&lon2={lon}' },
-        { name: 'headers', path: '/headers(&filter={header1,header2})' },
-        { name: 'ip', path: '/ip(&address={ip})' },
-        { name: 'palette', path: '/palette?color={#hex}&type={type}' },
-        {
-            name: 'password',
-            path: '/password(&type={random|passphrase}&length={n}&uppercase={bool}&lowercase={bool}&digits={bool}&symbols={bool}&exclude={chars}&count={n}&separator={char})',
-        },
-        {
-            name: 'placeholder',
-            path: '/placeholder?type={image|skeleton}&width={w}&height={h}(&bg={hex}&color={hex}&text={text}&rows={n}&avatar={bool})',
-        },
-        {
-            name: 'qrcode',
-            path: '/qrcode?url={URL}(&size={px}&margin={n}&correction={L|M|Q|H}&dark={hex}&light={hex}&icon={URL}&iconSize={px}&iconPadding={px}&iconRadius={px}&format={png|base64})',
-        },
-        { name: 'statistics', path: '/statistics?values={n1,n2,n3,...}' },
-        { name: 'text', path: '/text?method={method}(&value={value}&type={type}&count={count}&lang={lang})' },
-        { name: 'validate', path: '/validate?type={type}&value={value}' },
-    ]),
-    post: [...v3.post],
-};
-
-export const versions: Record<string, VersionConfig> = {
-    v1: { endpoints: v1, modules: apiv3 },
-    v2: { endpoints: v2, modules: apiv3 },
-    v3: { endpoints: v3, modules: apiv3 },
-    v4: { endpoints: v4, modules: apiv4 },
-};

package/src/constants.ts

@@ -1,46 +0,0 @@
-import pkg from '../package.json' with { type: 'json' };
-
-export const APP_VERSION = pkg.version;
-export const MAX_LOG_ENTRIES = 1000;
-export const RATE_LIMIT_WINDOW = 10_000;
-export const RATE_LIMIT_MAX = 50;
-export const SESSION_TTL = 3_600_000;
-export const GAME_CLEANUP_TTL = 600_000;
-export const GITHUB_CACHE_TTL = 600_000;
-export const MIN_TOKEN_LENGTH = 12;
-export const MAX_TOKEN_LENGTH = 4096;
-export const MAX_FACTORIAL = 170;
-export const MAX_GCD_VALUE = 100_000;
-export const MAX_PRIME_LIST = 10_000;
-export const MAX_LEVENSHTEIN_LENGTH = 1000;
-export const MAX_STRING_LENGTH = 1000;
-export const DOCS_URL = 'https://docs.sylvain.sh';
-export const DEFAULT_PORT = 3000;
-
-export const STATUS_MESSAGES: Record<number, string> = {
-    400: 'Bad Request',
-    401: 'Unauthorized',
-    404: 'Not Found',
-    405: 'Method Not Allowed',
-    413: 'Payload Too Large',
-    429: 'Too Many Requests',
-    500: 'Internal Server Error',
-};
-
-export const START_TIME = Date.now();
-
-export const ROMAN_VALUES: [number, string][] = [
-    [1000, 'M'],
-    [900, 'CM'],
-    [500, 'D'],
-    [400, 'CD'],
-    [100, 'C'],
-    [90, 'XC'],
-    [50, 'L'],
-    [40, 'XL'],
-    [10, 'X'],
-    [9, 'IX'],
-    [5, 'V'],
-    [4, 'IV'],
-    [1, 'I'],
-];

package/src/middleware/cors.ts

@@ -1,23 +0,0 @@
-import cors from 'cors';
-import express, { type Express } from 'express';
-import { dirname, join } from 'path';
-import { fileURLToPath } from 'url';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-export function setupCors(app: Express): void {
-    app.set('trust proxy', 1);
-    app.use(cors({ methods: ['GET', 'POST', 'PATCH', 'DELETE', 'OPTIONS'] }));
-    app.use(express.urlencoded({ extended: true, limit: '10kb' }));
-    app.use(express.json({ limit: '10kb' }));
-
-    app.use((_req, res, next) => {
-        res.setHeader('X-Content-Type-Options', 'nosniff');
-        res.setHeader('X-Frame-Options', 'DENY');
-        next();
-    });
-
-    app.use('/favicon.ico', express.static(join(__dirname, '..', '..', 'src', 'favicon.ico')));
-    app.use('/robots.txt', express.static(join(__dirname, '..', '..', 'robots.txt')));
-}

package/src/middleware/error.ts

@@ -1,16 +0,0 @@
-import type { NextFunction, Request, Response } from 'express';
-
-import { error } from '../utils/response.js';
-
-export function errorHandler(
-    err: Error & { status?: number },
-    _req: Request,
-    res: Response,
-    _next: NextFunction,
-): void {
-    console.error(err.stack);
-
-    const status = err.status && err.status >= 400 && err.status < 600 ? err.status : 500;
-    const sensitive = status === 500 && /\/[a-z]|\\[a-z]|ECONNREFUSED|ENOENT|EPERM|at\s+\w/i.test(err.message);
-    error(res, status, sensitive ? 'An unexpected error occurred.' : err.message);
-}

package/src/middleware/json.ts

@@ -1,9 +0,0 @@
-import type { NextFunction, Request, Response } from 'express';
-
-export function jsonResponseMiddleware(_req: Request, res: Response, next: NextFunction): void {
-    res.setHeader('Content-Type', 'application/json');
-    res.jsonResponse = (data: unknown) => {
-        res.send(JSON.stringify(data, null, 2));
-    };
-    next();
-}

package/src/middleware/logger.ts

@@ -1,32 +0,0 @@
-import { createLogger } from '@20syldev/logger.ts';
-import type { NextFunction, Request, Response } from 'express';
-
-import { MAX_LOG_ENTRIES } from '../constants.js';
-
-export const logger = createLogger({
-    maxEntries: MAX_LOG_ENTRIES,
-    console: true,
-    theme: 'colored',
-});
-
-export function loggerMiddleware(req: Request, res: Response, next: NextFunction): void {
-    if (req.method === 'HEAD') {
-        next();
-        return;
-    }
-    if (req.originalUrl === '/logs') {
-        next();
-        return;
-    }
-
-    const startTime = Date.now();
-    const platform = (req.headers['sec-ch-ua-platform'] as string)?.replace(/"/g, '');
-
-    res.on('finish', () => {
-        const status = res.statusCode === 304 ? 200 : res.statusCode;
-        const duration = `${Date.now() - startTime}ms`;
-
-        logger.log({ method: req.method, url: req.originalUrl, status, duration, platform });
-    });
-    next();
-}

package/src/middleware/ratelimit.ts

@@ -1,89 +0,0 @@
-import type { NextFunction, Request, Response } from 'express';
-
-import { getPlan, globalLimit } from '../config/plans.js';
-import { RATE_LIMIT_WINDOW, SESSION_TTL } from '../constants.js';
-import { ipLimits } from '../storage/index.js';
-import { error } from '../utils/response.js';
-
-let requests = 0;
-let resetTime = Date.now() + SESSION_TTL;
-
-const burstTracker: Record<string, number[]> = {};
-
-// Cleanup stale IPs every hour
-setInterval(() => {
-    const currentHour = String(Math.floor(Date.now() / 3600000) % 24);
-    for (const ip of Object.keys(ipLimits)) {
-        const hours = Object.keys(ipLimits[ip]!);
-        if (hours.length === 0 || (hours.length === 1 && hours[0] !== currentHour)) {
-            delete ipLimits[ip];
-        }
-    }
-
-    const now = Date.now();
-    for (const ip of Object.keys(burstTracker)) {
-        burstTracker[ip] = burstTracker[ip]!.filter((t) => now - t < RATE_LIMIT_WINDOW);
-        if (burstTracker[ip]!.length === 0) delete burstTracker[ip];
-    }
-}, SESSION_TTL);
-
-export function rateLimitMiddleware(req: Request, res: Response, next: NextFunction): void {
-    const ip = req.ip || req.socket.remoteAddress || '';
-    const token = req.headers.authorization?.split(' ')[1] || '';
-
-    const now = Date.now();
-    const minute = String(Math.floor(now / 60000) % 60);
-    const hour = String(Math.floor(now / 3600000) % 24);
-
-    const match = getPlan(token);
-    if (!match) {
-        error(res, 401, 'Invalid token.');
-        return;
-    }
-
-    const { plan } = match;
-
-    if (now > resetTime) {
-        requests = 0;
-        resetTime = now + SESSION_TTL;
-    }
-
-    if (++requests > Math.max(globalLimit, plan.hourly)) {
-        error(res, 429, 'Global rate limit exceeded.');
-        return;
-    }
-
-    if (['__proto__', 'constructor', 'prototype'].includes(ip)) {
-        error(res, 400, 'Invalid IP address.');
-        return;
-    }
-
-    // Burst protection per tier
-    if (process.env.NODE_ENV !== 'test') {
-        if (!burstTracker[ip]) burstTracker[ip] = [];
-        burstTracker[ip] = burstTracker[ip]!.filter((t) => now - t < RATE_LIMIT_WINDOW);
-        burstTracker[ip]!.push(now);
-
-        if (burstTracker[ip]!.length > plan.burst) {
-            error(res, 429, 'Too many requests, please slow down.');
-            return;
-        }
-    }
-
-    // Hourly rate limit per IP
-    if (!ipLimits[ip]) ipLimits[ip] = {};
-    if (!ipLimits[ip]![hour]) ipLimits[ip]![hour] = {};
-    ipLimits[ip]![hour]![minute] = (ipLimits[ip]![hour]![minute] ?? 0) + 1;
-
-    const hourTotal = Object.values(ipLimits[ip]![hour]!).reduce((sum, count) => sum + count, 0);
-    if (hourTotal > plan.hourly) {
-        error(res, 429, `You have exceeded the limit of ${plan.hourly} requests per hour.`);
-        return;
-    }
-
-    Object.keys(ipLimits[ip]!).forEach((h) => {
-        if (h != hour) delete ipLimits[ip]![h];
-    });
-
-    next();
-}

package/src/middleware/version.ts

@@ -1,40 +0,0 @@
-import type { NextFunction, Request, Response } from 'express';
-
-import { versions } from '../config/versions.js';
-import { error } from '../utils/response.js';
-
-export function versionCheckMiddleware(req: Request, res: Response, next: NextFunction): void {
-    const version = req.params.version as string;
-    const latest = Object.keys(versions).pop()!;
-
-    req.version = version;
-    req.latest = latest;
-
-    if (!versions[version]) {
-        error(res, 404, `Invalid API version (${version}).`, latest);
-        return;
-    }
-
-    req.module = versions[version]!.modules;
-
-    if (!req.module) {
-        error(res, 404, `Module not found for version ${version}.`, latest);
-        return;
-    }
-
-    next();
-}
-
-export function endpointCheckMiddleware(req: Request, res: Response, next: NextFunction): void {
-    const version = req.params.version as string;
-    const endpoint = req.params.endpoint as string;
-
-    req.version = version;
-    req.endpoint = endpoint;
-
-    if (!endpoint) {
-        error(res, 404, `Endpoint '${endpoint}' does not exist in ${req.version}.`);
-        return;
-    }
-    next();
-}