@aruvili/api 0.1.0

package/dist/config.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Meta Framework - Centralized Configuration Module
+ * Validates all required environment variables at startup.
+ */
+export declare const config: {
+    port: number;
+    nodeEnv: string;
+    isProduction: boolean;
+    databaseUrl: string;
+    dbPoolMax: number;
+    dbIdleTimeout: number;
+    dbConnectTimeout: number;
+    dbStatementTimeout: string;
+    jwtSecret: string;
+    jwtExpiresIn: number;
+    bcryptRounds: number;
+    corsOrigins: string[];
+    rateLimitMax: number;
+    rateLimitWindowMs: number;
+    bodyLimitBytes: number;
+};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;CAuBlB,CAAC"}

package/dist/config.js

@@ -0,0 +1,34 @@
+/**
+ * Meta Framework - Centralized Configuration Module
+ * Validates all required environment variables at startup.
+ */
+function requireEnv(key, fallback) {
+    const value = process.env[key] || fallback;
+    if (!value && process.env.NODE_ENV === 'production') {
+        console.error(`[CONFIG FATAL] Required environment variable ${key} is not set.`);
+        process.exit(1);
+    }
+    return value || '';
+}
+export const config = {
+    // Server
+    port: parseInt(process.env.PORT || '3000'),
+    nodeEnv: process.env.NODE_ENV || 'development',
+    isProduction: process.env.NODE_ENV === 'production',
+    // Database
+    databaseUrl: requireEnv('DATABASE_URL', 'postgresql://postgres:postgres@localhost:5432/meta_db'),
+    dbPoolMax: parseInt(process.env.DB_POOL_MAX || '20'),
+    dbIdleTimeout: parseInt(process.env.DB_IDLE_TIMEOUT || '30000'),
+    dbConnectTimeout: parseInt(process.env.DB_CONNECT_TIMEOUT || '5000'),
+    dbStatementTimeout: process.env.DB_STATEMENT_TIMEOUT || '30000',
+    // Auth
+    jwtSecret: requireEnv('JWT_SECRET', 'dev-secret-change-in-production'),
+    jwtExpiresIn: parseInt(process.env.JWT_EXPIRES_IN || '86400'), // 24 hours
+    bcryptRounds: parseInt(process.env.BCRYPT_ROUNDS || '12'),
+    // Security
+    corsOrigins: (process.env.CORS_ORIGINS || '*').split(',').map(s => s.trim()),
+    rateLimitMax: parseInt(process.env.RATE_LIMIT_MAX || '100'),
+    rateLimitWindowMs: parseInt(process.env.RATE_LIMIT_WINDOW_MS || '60000'),
+    bodyLimitBytes: parseInt(process.env.BODY_LIMIT_BYTES || '1048576'), // 1MB
+};
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,SAAS,UAAU,CAAC,GAAW,EAAE,QAAiB;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,gDAAgD,GAAG,cAAc,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,SAAS;IACT,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa;IAC9C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;IAEnD,WAAW;IACX,WAAW,EAAE,UAAU,CAAC,cAAc,EAAE,uDAAuD,CAAC;IAChG,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC;IACpD,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC;IAC/D,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC;IACpE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO;IAE/D,OAAO;IACP,SAAS,EAAE,UAAU,CAAC,YAAY,EAAE,iCAAiC,CAAC;IACtE,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,EAAE,WAAW;IAC1E,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC;IAEzD,WAAW;IACX,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC;IAC3D,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC;IACxE,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS,CAAC,EAAE,MAAM;CAC5E,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,7 @@
+import { AsyncLocalStorage } from 'async_hooks';
+export interface RequestContextStore {
+    tenantId?: string;
+    user?: any;
+}
+export declare const requestContext: AsyncLocalStorage<RequestContextStore>;
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,GAAG,CAAC;CACZ;AAED,eAAO,MAAM,cAAc,wCAA+C,CAAC"}

package/dist/context.js

@@ -0,0 +1,3 @@
+import { AsyncLocalStorage } from 'async_hooks';
+export const requestContext = new AsyncLocalStorage();
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAOhD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAuB,CAAC"}

package/dist/controllers/index.d.ts

@@ -0,0 +1,39 @@
+import pg from 'pg';
+export interface ControllerContext {
+    db: pg.PoolClient;
+    user: {
+        email: string;
+        roles: string[];
+    };
+}
+export declare abstract class DocTypeController {
+    before_insert(doc: any, ctx: ControllerContext): Promise<void>;
+    after_insert(doc: any, ctx: ControllerContext): Promise<void>;
+    before_save(doc: any, ctx: ControllerContext): Promise<void>;
+    on_update(doc: any, oldDoc: any, ctx: ControllerContext): Promise<void>;
+    before_delete(doc: any, ctx: ControllerContext): Promise<void>;
+    on_trash(doc: any, ctx: ControllerContext): Promise<void>;
+    before_submit(doc: any, ctx: ControllerContext): Promise<void>;
+    on_submit(doc: any, ctx: ControllerContext): Promise<void>;
+    before_cancel(doc: any, ctx: ControllerContext): Promise<void>;
+    on_cancel(doc: any, ctx: ControllerContext): Promise<void>;
+}
+declare class ControllerRegistry {
+    private controllers;
+    register(doctypeName: string, controller: DocTypeController): void;
+    get(doctypeName: string): DocTypeController | undefined;
+    private trigger;
+    triggerBeforeInsert(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerAfterInsert(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerBeforeSave(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerOnUpdate(n: string, doc: any, old: any, ctx: ControllerContext): Promise<void>;
+    triggerBeforeDelete(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerOnTrash(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerBeforeSubmit(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerOnSubmit(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerBeforeCancel(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+    triggerOnCancel(n: string, doc: any, ctx: ControllerContext): Promise<void>;
+}
+export declare const controllerRegistry: ControllerRegistry;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/controllers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/controllers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC;IAClB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC1C;AAED,8BAAsB,iBAAiB;IAC/B,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9D,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC7D,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC5D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IACvE,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IACzD,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1D,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;CACjE;AAED,cAAM,kBAAkB;IACtB,OAAO,CAAC,WAAW,CAAwC;IAEpD,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB;IAI3D,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;YAIhD,OAAO;IAOf,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC/D,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC9D,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC7D,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IACrE,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC/D,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC1D,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC/D,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC3D,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;IAC/D,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB;CAClE;AAED,eAAO,MAAM,kBAAkB,oBAA2B,CAAC"}

package/dist/controllers/index.js

@@ -0,0 +1,39 @@
+export class DocTypeController {
+    async before_insert(doc, ctx) { }
+    async after_insert(doc, ctx) { }
+    async before_save(doc, ctx) { }
+    async on_update(doc, oldDoc, ctx) { }
+    async before_delete(doc, ctx) { }
+    async on_trash(doc, ctx) { }
+    async before_submit(doc, ctx) { }
+    async on_submit(doc, ctx) { }
+    async before_cancel(doc, ctx) { }
+    async on_cancel(doc, ctx) { }
+}
+class ControllerRegistry {
+    controllers = new Map();
+    register(doctypeName, controller) {
+        this.controllers.set(doctypeName, controller);
+    }
+    get(doctypeName) {
+        return this.controllers.get(doctypeName);
+    }
+    async trigger(name, method, ...args) {
+        const ctrl = this.get(name);
+        if (ctrl && typeof ctrl[method] === 'function') {
+            await ctrl[method](...args);
+        }
+    }
+    async triggerBeforeInsert(n, doc, ctx) { await this.trigger(n, 'before_insert', doc, ctx); }
+    async triggerAfterInsert(n, doc, ctx) { await this.trigger(n, 'after_insert', doc, ctx); }
+    async triggerBeforeSave(n, doc, ctx) { await this.trigger(n, 'before_save', doc, ctx); }
+    async triggerOnUpdate(n, doc, old, ctx) { await this.trigger(n, 'on_update', doc, old, ctx); }
+    async triggerBeforeDelete(n, doc, ctx) { await this.trigger(n, 'before_delete', doc, ctx); }
+    async triggerOnTrash(n, doc, ctx) { await this.trigger(n, 'on_trash', doc, ctx); }
+    async triggerBeforeSubmit(n, doc, ctx) { await this.trigger(n, 'before_submit', doc, ctx); }
+    async triggerOnSubmit(n, doc, ctx) { await this.trigger(n, 'on_submit', doc, ctx); }
+    async triggerBeforeCancel(n, doc, ctx) { await this.trigger(n, 'before_cancel', doc, ctx); }
+    async triggerOnCancel(n, doc, ctx) { await this.trigger(n, 'on_cancel', doc, ctx); }
+}
+export const controllerRegistry = new ControllerRegistry();
+//# sourceMappingURL=index.js.map

package/dist/controllers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/controllers/index.ts"],"names":[],"mappings":"AAOA,MAAM,OAAgB,iBAAiB;IACrC,KAAK,CAAC,aAAa,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACvE,KAAK,CAAC,YAAY,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACtE,KAAK,CAAC,WAAW,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACrE,KAAK,CAAC,SAAS,CAAC,GAAQ,EAAE,MAAW,EAAE,GAAsB,IAAkB,CAAC;IAChF,KAAK,CAAC,aAAa,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACvE,KAAK,CAAC,QAAQ,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IAClE,KAAK,CAAC,aAAa,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACvE,KAAK,CAAC,SAAS,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACnE,KAAK,CAAC,aAAa,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;IACvE,KAAK,CAAC,SAAS,CAAC,GAAQ,EAAE,GAAsB,IAAkB,CAAC;CACpE;AAED,MAAM,kBAAkB;IACd,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEpD,QAAQ,CAAC,WAAmB,EAAE,UAA6B;QAChE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IAEM,GAAG,CAAC,WAAmB;QAC5B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,MAAc,EAAE,GAAG,IAAW;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,IAAI,IAAI,OAAQ,IAAY,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YACxD,MAAO,IAAY,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5H,KAAK,CAAC,kBAAkB,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1H,KAAK,CAAC,iBAAiB,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACxH,KAAK,CAAC,eAAe,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACnI,KAAK,CAAC,mBAAmB,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5H,KAAK,CAAC,cAAc,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAClH,KAAK,CAAC,mBAAmB,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5H,KAAK,CAAC,eAAe,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACpH,KAAK,CAAC,mBAAmB,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5H,KAAK,CAAC,eAAe,CAAC,CAAS,EAAE,GAAQ,EAAE,GAAsB,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;CACrH;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC"}

package/dist/db.d.ts

@@ -0,0 +1,6 @@
+import pg from 'pg';
+export declare const pool: import("pg").Pool;
+export declare function query(text: string, params?: any[]): Promise<any>;
+export declare function withTransaction<T>(callback: (client: pg.PoolClient) => Promise<T>): Promise<T>;
+export declare function closePool(): Promise<void>;
+//# sourceMappingURL=db.d.ts.map

package/dist/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAIpB,eAAO,MAAM,IAAI,mBAMf,CAAC;AAMH,wBAAsB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,gBA2BvD;AAED,wBAAsB,eAAe,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAuBpG;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAE/C"}

package/dist/db.js

@@ -0,0 +1,74 @@
+import pg from 'pg';
+import { config } from './config.js';
+import { requestContext } from './context.js';
+export const pool = new pg.Pool({
+    connectionString: config.databaseUrl,
+    max: config.dbPoolMax,
+    idleTimeoutMillis: config.dbIdleTimeout,
+    connectionTimeoutMillis: config.dbConnectTimeout,
+    allowExitOnIdle: false
+});
+pool.on('error', (err) => {
+    console.error('[DB POOL ERROR] Unexpected error on idle client:', err);
+});
+export async function query(text, params) {
+    if (globalThis.dbMock) {
+        return globalThis.dbMock.query(text, params);
+    }
+    const start = Date.now();
+    const client = await pool.connect();
+    try {
+        const store = requestContext.getStore();
+        const tenantId = store?.tenantId || 'public';
+        await client.query(`SET search_path TO ${tenantId}, public`);
+        const result = await client.query(text, params);
+        const duration = Date.now() - start;
+        if (duration > 1000) {
+            console.warn(`[DB SLOW QUERY] ${duration}ms: ${text.substring(0, 120)}...`);
+        }
+        return result;
+    }
+    catch (error) {
+        const duration = Date.now() - start;
+        console.error(`[DB QUERY ERROR] ${duration}ms | ${text.substring(0, 120)} | ${error.message}`);
+        throw error;
+    }
+    finally {
+        try {
+            await client.query('RESET search_path');
+        }
+        catch (_) { }
+        client.release();
+    }
+}
+export async function withTransaction(callback) {
+    if (globalThis.dbMock) {
+        return globalThis.dbMock.withTransaction(callback);
+    }
+    const client = await pool.connect();
+    try {
+        const store = requestContext.getStore();
+        const tenantId = store?.tenantId || 'public';
+        await client.query('BEGIN');
+        await client.query(`SET search_path TO ${tenantId}, public`);
+        await client.query(`SET LOCAL statement_timeout = '${config.dbStatementTimeout}'`);
+        const result = await callback(client);
+        await client.query('COMMIT');
+        return result;
+    }
+    catch (error) {
+        await client.query('ROLLBACK');
+        throw error;
+    }
+    finally {
+        try {
+            await client.query('RESET search_path');
+        }
+        catch (_) { }
+        client.release();
+    }
+}
+export async function closePool() {
+    await pool.end();
+}
+//# sourceMappingURL=db.js.map

package/dist/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC,WAAW;IACpC,GAAG,EAAE,MAAM,CAAC,SAAS;IACrB,iBAAiB,EAAE,MAAM,CAAC,aAAa;IACvC,uBAAuB,EAAE,MAAM,CAAC,gBAAgB;IAChD,eAAe,EAAE,KAAK;CACvB,CAAC,CAAC;AAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;IACvB,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,GAAG,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,MAAc;IACtD,IAAK,UAAkB,CAAC,MAAM,EAAE,CAAC;QAC/B,OAAQ,UAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,QAAQ,CAAC;QAC7C,MAAM,MAAM,CAAC,KAAK,CAAC,sBAAsB,QAAQ,UAAU,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,IAAI,QAAQ,GAAG,IAAI,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,mBAAmB,QAAQ,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,OAAO,CAAC,KAAK,CAAC,oBAAoB,QAAQ,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAA,CAAC;QACd,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAI,QAA+C;IACtF,IAAK,UAAkB,CAAC,MAAM,EAAE,CAAC;QAC/B,OAAQ,UAAkB,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,QAAQ,CAAC;QAC7C,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,sBAAsB,QAAQ,UAAU,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,KAAK,CAAC,kCAAkC,MAAM,CAAC,kBAAkB,GAAG,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/B,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAA,CAAC;QACd,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;AACnB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+declare const _default: {
+    port: number;
+    fetch: (request: Request, Env?: unknown, executionCtx?: import("hono").ExecutionContext) => Response | Promise<Response>;
+};
+export default _default;
+export { metaRouter } from './routes/meta.js';
+export { crudRouter } from './routes/crud.js';
+export { authRouter } from './routes/auth.js';
+export { filesRouter } from './routes/files.js';
+export { tenantMiddleware } from './middleware/tenant.js';
+export { bodyLimitMiddleware } from './middleware/body-limit.js';
+export { rateLimitMiddleware } from './middleware/rate-limit.js';
+export { authMiddleware } from './middleware/auth.js';
+export { rbacMiddleware } from './middleware/rbac.js';
+export { query, withTransaction } from './db.js';
+export { config } from './config.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAoKA,wBAAuD;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,154 @@
+import { Hono } from 'hono';
+import { cors } from 'hono/cors';
+import { config } from './config.js';
+import { metaRouter } from './routes/meta.js';
+import { crudRouter } from './routes/crud.js';
+import { authRouter } from './routes/auth.js';
+import { authMiddleware } from './middleware/auth.js';
+import { rbacMiddleware } from './middleware/rbac.js';
+import { rateLimitMiddleware } from './middleware/rate-limit.js';
+import { bodyLimitMiddleware } from './middleware/body-limit.js';
+import { query, closePool } from './db.js';
+import { filesRouter } from './routes/files.js';
+import { tenantMiddleware } from './middleware/tenant.js';
+import crypto from 'crypto';
+const app = new Hono();
+// Global Middleware Stack
+// CORS
+app.use('*', cors({
+    origin: config.corsOrigins.includes('*') ? '*' : config.corsOrigins,
+    allowMethods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
+    allowHeaders: ['Content-Type', 'Authorization'],
+    exposeHeaders: ['X-Request-ID', 'X-RateLimit-Limit', 'X-RateLimit-Remaining', 'X-RateLimit-Reset'],
+    maxAge: 86400
+}));
+// Request ID + structured logging
+app.use('*', async (c, next) => {
+    const requestId = crypto.randomUUID();
+    c.set('request_id', requestId);
+    c.header('X-Request-ID', requestId);
+    const start = Date.now();
+    await next();
+    console.log(JSON.stringify({
+        level: 'info', type: 'http', method: c.req.method, url: c.req.url,
+        status: c.res.status, duration_ms: Date.now() - start, request_id: requestId
+    }));
+});
+// Tenant Isolation Context
+app.use('*', tenantMiddleware);
+// Body size limit
+app.use('*', bodyLimitMiddleware);
+// Rate limiting
+app.use('*', rateLimitMiddleware);
+// Error handler - hide details in production
+app.onError((err, c) => {
+    const requestId = c.get('request_id') || crypto.randomUUID();
+    console.error(JSON.stringify({
+        level: 'error', type: 'exception', request_id: requestId,
+        message: err.message, stack: config.isProduction ? undefined : err.stack
+    }));
+    return c.json({
+        error: 'Internal Server Error', request_id: requestId,
+        ...(config.isProduction ? {} : { message: err.message })
+    }, 500);
+});
+// === Public Routes (no auth required) ===
+app.get('/api/health', (c) => c.json({ status: 'ok', timestamp: new Date().toISOString() }));
+app.route('/api/auth', authRouter);
+app.route('/api/meta', metaRouter);
+// === Protected Routes ===
+app.use('/api/files/*', authMiddleware);
+app.route('/api/files', filesRouter);
+app.use('/api/doctype/*', authMiddleware, rbacMiddleware);
+app.route('/api/doctype/:doctype', crudRouter);
+// === Bootstrap ===
+async function bootstrapDatabase() {
+    console.log('[BOOT] Initializing system database schemas...');
+    try {
+        // System tables
+        await query(`CREATE TABLE IF NOT EXISTS _tenants (
+      id VARCHAR(100) PRIMARY KEY,
+      name VARCHAR(255) NOT NULL,
+      domain VARCHAR(255),
+      created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
+    );`);
+        await query(`CREATE TABLE IF NOT EXISTS _doctype_meta (
+      name VARCHAR(255) PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      definition JSONB NOT NULL, created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+      updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW());`);
+        await query(`CREATE TABLE IF NOT EXISTS _doctype_migration_history (
+      id SERIAL PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      doctype_name VARCHAR(255) NOT NULL, version INTEGER NOT NULL,
+      ddl_executed TEXT NOT NULL, executed_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+      executed_by VARCHAR(255));`);
+        await query(`CREATE TABLE IF NOT EXISTS _doctype_definition_history (
+      id SERIAL PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      doctype_name VARCHAR(255) REFERENCES _doctype_meta(name) ON DELETE CASCADE,
+      version INTEGER NOT NULL,
+      definition JSONB NOT NULL,
+      changed_by VARCHAR(255) NOT NULL,
+      changed_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+      ddl_applied TEXT,
+      notes TEXT);`);
+        await query(`CREATE TABLE IF NOT EXISTS _naming_series (
+      prefix VARCHAR(100) PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      current_value INTEGER NOT NULL DEFAULT 0);`);
+        await query(`CREATE TABLE IF NOT EXISTS _audit_log (
+      id BIGSERIAL PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      doctype_name VARCHAR(255) NOT NULL, docname VARCHAR(255) NOT NULL,
+      action VARCHAR(50) NOT NULL, changed_by VARCHAR(255) NOT NULL,
+      changed_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(), diff JSONB NOT NULL);`);
+        // User management table
+        await query(`CREATE TABLE IF NOT EXISTS _users (
+      name VARCHAR(255) PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      email VARCHAR(255) UNIQUE NOT NULL, full_name VARCHAR(255) DEFAULT '',
+      hashed_password TEXT NOT NULL, roles JSONB DEFAULT '["Guest"]',
+      enabled BOOLEAN DEFAULT true, last_login TIMESTAMP WITH TIME ZONE,
+      created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+      updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW());`);
+        // Files attachment tracking table
+        await query(`CREATE TABLE IF NOT EXISTS _files (
+      name VARCHAR(255) PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      file_name VARCHAR(255) NOT NULL, file_url VARCHAR(255) NOT NULL,
+      file_size INTEGER NOT NULL, mime_type VARCHAR(100) NOT NULL,
+      attached_to_doctype VARCHAR(255), attached_to_name VARCHAR(255),
+      attached_to_field VARCHAR(255), created_by VARCHAR(255),
+      created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW());`);
+        // System indexes
+        await query(`CREATE INDEX IF NOT EXISTS idx_audit_log_doctype ON _audit_log (doctype_name, docname);`);
+        await query(`CREATE INDEX IF NOT EXISTS idx_audit_log_changed_at ON _audit_log (changed_at);`);
+        await query(`CREATE INDEX IF NOT EXISTS idx_users_email ON _users (email);`);
+        console.log('[BOOT] System database schemas initialized successfully.');
+    }
+    catch (err) {
+        console.error('[BOOT ERROR] Failed to initialize system schemas:', err);
+        process.exit(1);
+    }
+}
+bootstrapDatabase().then(() => {
+    console.log(`[BOOT] Server launching on http://localhost:${config.port}`);
+    if (!config.isProduction) {
+        console.log('[BOOT] Running in DEVELOPMENT mode. Set NODE_ENV=production for production.');
+    }
+});
+// Graceful shutdown
+const shutdown = async () => {
+    console.log('[SHUTDOWN] Graceful shutdown initiated...');
+    await closePool();
+    process.exit(0);
+};
+process.on('SIGTERM', shutdown);
+process.on('SIGINT', shutdown);
+export default { port: config.port, fetch: app.fetch };
+export { metaRouter } from './routes/meta.js';
+export { crudRouter } from './routes/crud.js';
+export { authRouter } from './routes/auth.js';
+export { filesRouter } from './routes/files.js';
+export { tenantMiddleware } from './middleware/tenant.js';
+export { bodyLimitMiddleware } from './middleware/body-limit.js';
+export { rateLimitMiddleware } from './middleware/rate-limit.js';
+export { authMiddleware } from './middleware/auth.js';
+export { rbacMiddleware } from './middleware/rbac.js';
+export { query, withTransaction } from './db.js';
+export { config } from './config.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAqD,CAAC;AAE1E,0BAA0B;AAE1B,OAAO;AACP,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW;IACnE,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;IACzD,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;IAC/C,aAAa,EAAE,CAAC,cAAc,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,mBAAmB,CAAC;IAClG,MAAM,EAAE,KAAK;CACd,CAAC,CAAC,CAAC;AAEJ,kCAAkC;AAClC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACtC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,IAAI,EAAE,CAAC;IACb,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QACzB,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;QACjE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,SAAS;KAC7E,CAAC,CAAC,CAAC;AACN,CAAC,CAAC,CAAC;AAEH,2BAA2B;AAC3B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;AAE/B,kBAAkB;AAClB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;AAElC,gBAAgB;AAChB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;AAElC,6CAA6C;AAC7C,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;IACrB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;IAC7D,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3B,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS;QACxD,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK;KACzE,CAAC,CAAC,CAAC;IACJ,OAAO,CAAC,CAAC,IAAI,CAAC;QACZ,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,SAAS;QACrD,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;KACzD,EAAE,GAAG,CAAC,CAAC;AACV,CAAC,CAAC,CAAC;AAEH,2CAA2C;AAC3C,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7F,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AACnC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AAEnC,2BAA2B;AAC3B,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;AACxC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAErC,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;AAC1D,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;AAE/C,oBAAoB;AACpB,KAAK,UAAU,iBAAiB;IAC9B,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,gBAAgB;QAChB,MAAM,KAAK,CAAC;;;;;OAKT,CAAC,CAAC;QAEL,MAAM,KAAK,CAAC;;;0DAG0C,CAAC,CAAC;QAExD,MAAM,KAAK,CAAC;;;;iCAIiB,CAAC,CAAC;QAE/B,MAAM,KAAK,CAAC;;;;;;;;mBAQG,CAAC,CAAC;QAEjB,MAAM,KAAK,CAAC;;iDAEiC,CAAC,CAAC;QAE/C,MAAM,KAAK,CAAC;;;;+EAI+D,CAAC,CAAC;QAE7E,wBAAwB;QACxB,MAAM,KAAK,CAAC;;;;;;0DAM0C,CAAC,CAAC;QAExD,kCAAkC;QAClC,MAAM,KAAK,CAAC;;;;;;0DAM0C,CAAC,CAAC;QAExD,iBAAiB;QACjB,MAAM,KAAK,CAAC,yFAAyF,CAAC,CAAC;QACvG,MAAM,KAAK,CAAC,iFAAiF,CAAC,CAAC;QAC/F,MAAM,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAE7E,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,iBAAiB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IAC5B,OAAO,CAAC,GAAG,CAAC,+CAA+C,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,oBAAoB;AACpB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;IAC1B,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,MAAM,SAAS,EAAE,CAAC;IAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAE/B,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC"}

package/dist/middleware/auth.d.ts

@@ -0,0 +1,15 @@
+import { Context, Next } from 'hono';
+export interface UserSession {
+    email: string;
+    roles: string[];
+    session_id: string;
+}
+/**
+ * Resolves request JWT signature and binds session properties to Hono request context.
+ * In production: validates HMAC-SHA256 signature against JWT_SECRET.
+ * In development: supports mock tokens for testing.
+ */
+export declare function authMiddleware(c: Context, next: Next): Promise<(Response & import("hono").TypedResponse<{
+    error: string;
+}, 401, "json">) | undefined>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAGrC,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI;;8BA8F1D"}

package/dist/middleware/auth.js

@@ -0,0 +1,93 @@
+import crypto from 'crypto';
+/**
+ * Resolves request JWT signature and binds session properties to Hono request context.
+ * In production: validates HMAC-SHA256 signature against JWT_SECRET.
+ * In development: supports mock tokens for testing.
+ */
+export async function authMiddleware(c, next) {
+    const authHeader = c.req.header('Authorization');
+    if (!authHeader || !authHeader.startsWith('Bearer ')) {
+        // If no auth token is provided, assign Guest role session context
+        c.set('user', {
+            email: 'guest@system.local',
+            roles: ['Guest'],
+            session_id: crypto.randomUUID()
+        });
+        await next();
+        return;
+    }
+    const token = authHeader.split(' ')[1];
+    if (!token || token.trim() === '') {
+        return c.json({ error: 'Unauthorized: Empty bearer token' }, 401);
+    }
+    // Enforce maximum token length to prevent abuse
+    if (token.length > 4096) {
+        return c.json({ error: 'Unauthorized: Token exceeds maximum allowed length' }, 401);
+    }
+    try {
+        const parts = token.split('.');
+        if (parts.length === 3) {
+            const jwtSecret = process.env.JWT_SECRET;
+            if (jwtSecret) {
+                // Production: Verify HMAC-SHA256 signature
+                const [headerB64, payloadB64, signatureB64] = parts;
+                const signatureInput = `${headerB64}.${payloadB64}`;
+                const expectedSignature = crypto
+                    .createHmac('sha256', jwtSecret)
+                    .update(signatureInput)
+                    .digest('base64url');
+                if (signatureB64 !== expectedSignature) {
+                    return c.json({ error: 'Unauthorized: Invalid token signature' }, 401);
+                }
+                // Decode and validate payload
+                const payloadJson = Buffer.from(payloadB64.replace(/-/g, '+').replace(/_/g, '/'), 'base64').toString('utf-8');
+                const payload = JSON.parse(payloadJson);
+                // Check token expiry
+                if (payload.exp && Date.now() / 1000 > payload.exp) {
+                    return c.json({ error: 'Unauthorized: Token has expired' }, 401);
+                }
+                // Check issued-at is not in the future (clock skew tolerance: 60s)
+                if (payload.iat && payload.iat > Date.now() / 1000 + 60) {
+                    return c.json({ error: 'Unauthorized: Token issued in the future' }, 401);
+                }
+                c.set('user', {
+                    email: payload.email || 'unknown@user.local',
+                    roles: Array.isArray(payload.roles) ? payload.roles : ['Guest'],
+                    session_id: crypto.randomUUID()
+                });
+            }
+            else {
+                // Development fallback: decode without verification (JWT_SECRET not set)
+                console.warn('[AUTH] JWT_SECRET not configured. Running in development mode - tokens are NOT verified.');
+                const payloadB64 = parts[1].replace(/-/g, '+').replace(/_/g, '/');
+                const payloadJson = Buffer.from(payloadB64, 'base64').toString('utf-8');
+                const payload = JSON.parse(payloadJson);
+                c.set('user', {
+                    email: payload.email || 'unknown@user.local',
+                    roles: Array.isArray(payload.roles) ? payload.roles : ['Guest'],
+                    session_id: crypto.randomUUID()
+                });
+            }
+        }
+        else {
+            // Mock/testing token support (non-JWT format)
+            if (process.env.NODE_ENV === 'production') {
+                return c.json({ error: 'Unauthorized: Invalid token format' }, 401);
+            }
+            if (token === 'admin-token') {
+                c.set('user', { email: 'admin@system.local', roles: ['System Manager'], session_id: crypto.randomUUID() });
+            }
+            else if (token === 'user-token') {
+                c.set('user', { email: 'user@system.local', roles: ['Employee'], session_id: crypto.randomUUID() });
+            }
+            else {
+                return c.json({ error: 'Unauthorized: Invalid authentication signature' }, 401);
+            }
+        }
+        await next();
+    }
+    catch (err) {
+        return c.json({ error: 'Unauthorized: Could not resolve session token' }, 401);
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAQ5B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,CAAU,EAAE,IAAU;IACzD,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAEjD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,kEAAkE;QAClE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE;YACZ,KAAK,EAAE,oBAAoB;YAC3B,KAAK,EAAE,CAAC,OAAO,CAAC;YAChB,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;SACjB,CAAC,CAAC;QAClB,MAAM,IAAI,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,gDAAgD;IAChD,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oDAAoD,EAAE,EAAE,GAAG,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YAEzC,IAAI,SAAS,EAAE,CAAC;gBACd,2CAA2C;gBAC3C,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;gBACpD,MAAM,cAAc,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;gBACpD,MAAM,iBAAiB,GAAG,MAAM;qBAC7B,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;qBAC/B,MAAM,CAAC,cAAc,CAAC;qBACtB,MAAM,CAAC,WAAW,CAAC,CAAC;gBAEvB,IAAI,YAAY,KAAK,iBAAiB,EAAE,CAAC;oBACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACzE,CAAC;gBAED,8BAA8B;gBAC9B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC9G,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAExC,qBAAqB;gBACrB,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;oBACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACnE,CAAC;gBAED,mEAAmE;gBACnE,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC;oBACxD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC5E,CAAC;gBAED,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE;oBACZ,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,oBAAoB;oBAC5C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC/D,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;iBACjB,CAAC,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,yEAAyE;gBACzE,OAAO,CAAC,IAAI,CAAC,0FAA0F,CAAC,CAAC;gBACzG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAClE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACxE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAExC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE;oBACZ,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,oBAAoB;oBAC5C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC/D,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;iBACjB,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,8CAA8C;YAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;YAED,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;gBAC5B,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,gBAAgB,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAiB,CAAC,CAAC;YAC5H,CAAC;iBAAM,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;gBAClC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAiB,CAAC,CAAC;YACrH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAAE,GAAG,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+CAA+C,EAAE,EAAE,GAAG,CAAC,CAAC;IACjF,CAAC;AACH,CAAC"}

package/dist/middleware/body-limit.d.ts

@@ -0,0 +1,9 @@
+import { Context, Next } from 'hono';
+/**
+ * Enforces max request body size to prevent memory exhaustion attacks.
+ */
+export declare function bodyLimitMiddleware(c: Context, next: Next): Promise<(Response & import("hono").TypedResponse<{
+    error: string;
+    max_bytes: number;
+}, 413, "json">) | undefined>;
+//# sourceMappingURL=body-limit.d.ts.map

package/dist/middleware/body-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-limit.d.ts","sourceRoot":"","sources":["../../src/middleware/body-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAGrC;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI;;;8BAS/D"}

package/dist/middleware/body-limit.js

@@ -0,0 +1,15 @@
+import { config } from '../config.js';
+/**
+ * Enforces max request body size to prevent memory exhaustion attacks.
+ */
+export async function bodyLimitMiddleware(c, next) {
+    const contentLength = c.req.header('content-length');
+    if (contentLength && parseInt(contentLength) > config.bodyLimitBytes) {
+        return c.json({
+            error: 'Payload Too Large',
+            max_bytes: config.bodyLimitBytes
+        }, 413);
+    }
+    await next();
+}
+//# sourceMappingURL=body-limit.js.map

package/dist/middleware/body-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-limit.js","sourceRoot":"","sources":["../../src/middleware/body-limit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,CAAU,EAAE,IAAU;IAC9D,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACrD,IAAI,aAAa,IAAI,QAAQ,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QACrE,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,mBAAmB;YAC1B,SAAS,EAAE,MAAM,CAAC,cAAc;SACjC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IACD,MAAM,IAAI,EAAE,CAAC;AACf,CAAC"}

package/dist/middleware/rate-limit.d.ts

@@ -0,0 +1,6 @@
+import { Context, Next } from 'hono';
+export declare function rateLimitMiddleware(c: Context, next: Next): Promise<(Response & import("hono").TypedResponse<{
+    error: string;
+    retry_after_ms: number;
+}, 429, "json">) | undefined>;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/middleware/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAuBrC,wBAAsB,mBAAmB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI;;;8BAuB/D"}