@avijs/security 0.1.2 → 0.2.0

package/dist/index.d.ts

@@ -2,4 +2,6 @@ export { cors } from './cors.js';
 export type { CorsOptions, CorsOrigin } from './cors.js';
 export { securityHeaders } from './headers.js';
 export type { SecurityHeadersOptions } from './headers.js';
+export { memoryStore, rateLimit } from './rate-limit.js';
+export type { MemoryStore, MemoryStoreOptions, RateLimitOptions, RateLimitResult, RateLimitStore, RateLimiter, } from './rate-limit.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACzD,YAAY,EACV,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,WAAW,GACZ,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -1,3 +1,4 @@
 export { cors } from './cors.js';
 export { securityHeaders } from './headers.js';
+export { memoryStore, rateLimit } from './rate-limit.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/rate-limit.d.ts

@@ -0,0 +1,48 @@
+import { type Context, type Guard, type Logger, type RequestHook } from '@avijs/http';
+/** Counts requests per key in fixed windows. Implement it to share counts, for example in Redis. */
+export interface RateLimitStore {
+    /** Counts one request for `key` and returns the window's count and end time (ms since epoch). */
+    increment(key: string, window: number): RateLimitResult | Promise<RateLimitResult>;
+}
+export interface RateLimitResult {
+    readonly count: number;
+    readonly resetAt: number;
+}
+export interface RateLimitOptions {
+    /** Requests allowed per window. */
+    limit: number;
+    /** Window length in ms. */
+    window: number;
+    /** What to count by. Default: the client IP, `ctx.ip`. */
+    key?: (ctx: Context) => string;
+    /** Default: a new in-memory store for this limiter. */
+    store?: RateLimitStore;
+    /** When the store fails: let requests through (default) or reject them with `503`. */
+    onStoreError?: 'allow' | 'deny';
+    /** Receives store failures. Default: `console.error`. */
+    logger?: Pick<Logger, 'error'>;
+}
+/** A rate limit as an `onRequest` hook, with `.guard` to limit single routes instead. */
+export interface RateLimiter extends RequestHook {
+    readonly guard: Guard;
+}
+/**
+ * Limits each client to `limit` requests per `window`. Over the limit: `429` with
+ * `Retry-After`. Every response carries `RateLimit-Limit`, `RateLimit-Remaining` and
+ * `RateLimit-Reset`, so clients can slow down first.
+ */
+export declare function rateLimit(options: RateLimitOptions): RateLimiter;
+export interface MemoryStoreOptions {
+    /**
+     * Most keys tracked at once. When full, the oldest window is dropped, so a flood of new clients
+     * cannot use unbounded memory. Default: 100 000.
+     */
+    maxKeys?: number;
+}
+/** A store that counts synchronously, in this process. */
+export interface MemoryStore extends RateLimitStore {
+    increment(key: string, window: number): RateLimitResult;
+}
+/** Counts in this process only. For several processes or servers, use a shared store. */
+export declare function memoryStore(options?: MemoryStoreOptions): MemoryStore;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,OAAO,EAAE,KAAK,KAAK,EAAE,KAAK,MAAM,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAEjG,oGAAoG;AACpG,MAAM,WAAW,cAAc;IAC7B,iGAAiG;IACjG,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;IAC/B,uDAAuD;IACvD,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,sFAAsF;IACtF,YAAY,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAChC,yDAAyD;IACzD,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,yFAAyF;AACzF,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,WAAW,CAuDhE;AAED,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAY,SAAQ,cAAc;IACjD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CAAC;CACzD;AAED,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,WAAW,CAuBzE"}

package/dist/rate-limit.js

@@ -0,0 +1,91 @@
+import { HttpError } from '@avijs/http';
+/**
+ * Limits each client to `limit` requests per `window`. Over the limit: `429` with
+ * `Retry-After`. Every response carries `RateLimit-Limit`, `RateLimit-Remaining` and
+ * `RateLimit-Reset`, so clients can slow down first.
+ */
+export function rateLimit(options) {
+    const limit = positive('limit', options.limit);
+    const window = positive('window', options.window);
+    const store = options.store ?? memoryStore();
+    const key = options.key ?? ((ctx) => ctx.ip);
+    const deny = options.onStoreError === 'deny';
+    const logger = options.logger ?? {
+        error: (message, error) => {
+            console.error(message, error);
+        },
+    };
+    const apply = (ctx, { count, resetAt }) => {
+        const seconds = Math.max(0, Math.ceil((resetAt - Date.now()) / 1000));
+        ctx.setHeader('ratelimit-limit', limit);
+        ctx.setHeader('ratelimit-remaining', Math.max(0, limit - count));
+        ctx.setHeader('ratelimit-reset', seconds);
+        if (count > limit) {
+            throw new HttpError(429, 'Too many requests', {
+                headers: { 'retry-after': String(seconds) },
+            });
+        }
+    };
+    const failed = (ctx, error) => {
+        logger.error(`Rate limit store failed: ${ctx.method} ${ctx.path}`, error);
+        if (deny)
+            throw new HttpError(503, 'Service unavailable');
+    };
+    const check = (ctx) => {
+        let result;
+        try {
+            result = store.increment(key(ctx), window);
+        }
+        catch (error) {
+            failed(ctx, error);
+            return;
+        }
+        if (result instanceof Promise) {
+            return result.then((value) => {
+                apply(ctx, value);
+            }, (error) => {
+                failed(ctx, error);
+            });
+        }
+        apply(ctx, result);
+    };
+    const hook = (ctx) => check(ctx);
+    const guard = (ctx) => {
+        const pending = check(ctx);
+        return pending ? pending.then(() => true) : true;
+    };
+    return Object.assign(hook, { guard });
+}
+/** Counts in this process only. For several processes or servers, use a shared store. */
+export function memoryStore(options = {}) {
+    const maxKeys = positive('maxKeys', options.maxKeys ?? 100_000);
+    // Insertion order is window order: a new window is re-inserted at the end.
+    const windows = new Map();
+    return {
+        increment(key, window) {
+            const now = Date.now();
+            const current = windows.get(key);
+            if (current && current.resetAt > now) {
+                current.count++;
+                return { count: current.count, resetAt: current.resetAt };
+            }
+            if (current)
+                windows.delete(key);
+            for (const [oldest, entry] of windows) {
+                if (entry.resetAt > now && windows.size < maxKeys)
+                    break;
+                windows.delete(oldest);
+            }
+            const fresh = { count: 1, resetAt: now + window };
+            windows.set(key, fresh);
+            return { count: fresh.count, resetAt: fresh.resetAt };
+        },
+    };
+}
+function positive(name, value) {
+    if (!Number.isInteger(value) || value <= 0) {
+        throw new RangeError(`rateLimit: ${name} must be a positive integer, got ${String(value)}`);
+    }
+    return value;
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAA2D,MAAM,aAAa,CAAC;AAiCjG;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,OAAyB;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI;QAC/B,KAAK,EAAE,CAAC,OAAe,EAAE,KAAc,EAAE,EAAE;YACzC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,GAAY,EAAE,EAAE,KAAK,EAAE,OAAO,EAAmB,EAAQ,EAAE;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACtE,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACxC,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC;QACjE,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,mBAAmB,EAAE;gBAC5C,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE,KAAc,EAAQ,EAAE;QACpD,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1E,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,GAAY,EAAwB,EAAE;QACnD,IAAI,MAAkD,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,KAAK,EAAE,EAAE;gBACR,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;gBACjB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACrB,CAAC,CACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAU,CAAC,GAAG,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AACxC,CAAC;AAeD,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAC,UAA8B,EAAE;IAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC;IAChE,2EAA2E;IAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8C,CAAC;IAEtE,OAAO;QACL,SAAS,CAAC,GAAG,EAAE,MAAM;YACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;gBACrC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5D,CAAC;YACD,IAAI,OAAO;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACtC,IAAI,KAAK,CAAC,OAAO,GAAG,GAAG,IAAI,OAAO,CAAC,IAAI,GAAG,OAAO;oBAAE,MAAM;gBACzD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;YACD,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,UAAU,CAAC,cAAc,IAAI,oCAAoC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@avijs/security",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "CORS and security headers for Avi.js.",
   "keywords": [
     "avi",
@@ -42,7 +42,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@avijs/http": "0.1.2"
+    "@avijs/http": "0.2.0"
   },
   "scripts": {
     "typecheck": "tsc -p tsconfig.json"

package/src/index.ts

@@ -2,3 +2,12 @@ export { cors } from './cors.js';
 export type { CorsOptions, CorsOrigin } from './cors.js';
 export { securityHeaders } from './headers.js';
 export type { SecurityHeadersOptions } from './headers.js';
+export { memoryStore, rateLimit } from './rate-limit.js';
+export type {
+  MemoryStore,
+  MemoryStoreOptions,
+  RateLimitOptions,
+  RateLimitResult,
+  RateLimitStore,
+  RateLimiter,
+} from './rate-limit.js';

package/src/rate-limit.ts

@@ -0,0 +1,140 @@
+import { HttpError, type Context, type Guard, type Logger, type RequestHook } from '@avijs/http';
+
+/** Counts requests per key in fixed windows. Implement it to share counts, for example in Redis. */
+export interface RateLimitStore {
+  /** Counts one request for `key` and returns the window's count and end time (ms since epoch). */
+  increment(key: string, window: number): RateLimitResult | Promise<RateLimitResult>;
+}
+
+export interface RateLimitResult {
+  readonly count: number;
+  readonly resetAt: number;
+}
+
+export interface RateLimitOptions {
+  /** Requests allowed per window. */
+  limit: number;
+  /** Window length in ms. */
+  window: number;
+  /** What to count by. Default: the client IP, `ctx.ip`. */
+  key?: (ctx: Context) => string;
+  /** Default: a new in-memory store for this limiter. */
+  store?: RateLimitStore;
+  /** When the store fails: let requests through (default) or reject them with `503`. */
+  onStoreError?: 'allow' | 'deny';
+  /** Receives store failures. Default: `console.error`. */
+  logger?: Pick<Logger, 'error'>;
+}
+
+/** A rate limit as an `onRequest` hook, with `.guard` to limit single routes instead. */
+export interface RateLimiter extends RequestHook {
+  readonly guard: Guard;
+}
+
+/**
+ * Limits each client to `limit` requests per `window`. Over the limit: `429` with
+ * `Retry-After`. Every response carries `RateLimit-Limit`, `RateLimit-Remaining` and
+ * `RateLimit-Reset`, so clients can slow down first.
+ */
+export function rateLimit(options: RateLimitOptions): RateLimiter {
+  const limit = positive('limit', options.limit);
+  const window = positive('window', options.window);
+  const store = options.store ?? memoryStore();
+  const key = options.key ?? ((ctx: Context) => ctx.ip);
+  const deny = options.onStoreError === 'deny';
+  const logger = options.logger ?? {
+    error: (message: string, error: unknown) => {
+      console.error(message, error);
+    },
+  };
+
+  const apply = (ctx: Context, { count, resetAt }: RateLimitResult): void => {
+    const seconds = Math.max(0, Math.ceil((resetAt - Date.now()) / 1000));
+    ctx.setHeader('ratelimit-limit', limit);
+    ctx.setHeader('ratelimit-remaining', Math.max(0, limit - count));
+    ctx.setHeader('ratelimit-reset', seconds);
+    if (count > limit) {
+      throw new HttpError(429, 'Too many requests', {
+        headers: { 'retry-after': String(seconds) },
+      });
+    }
+  };
+  const failed = (ctx: Context, error: unknown): void => {
+    logger.error(`Rate limit store failed: ${ctx.method} ${ctx.path}`, error);
+    if (deny) throw new HttpError(503, 'Service unavailable');
+  };
+
+  const check = (ctx: Context): void | Promise<void> => {
+    let result: RateLimitResult | Promise<RateLimitResult>;
+    try {
+      result = store.increment(key(ctx), window);
+    } catch (error) {
+      failed(ctx, error);
+      return;
+    }
+    if (result instanceof Promise) {
+      return result.then(
+        (value) => {
+          apply(ctx, value);
+        },
+        (error: unknown) => {
+          failed(ctx, error);
+        },
+      );
+    }
+    apply(ctx, result);
+  };
+
+  const hook = (ctx: Context) => check(ctx);
+  const guard: Guard = (ctx) => {
+    const pending = check(ctx);
+    return pending ? pending.then(() => true) : true;
+  };
+  return Object.assign(hook, { guard });
+}
+
+export interface MemoryStoreOptions {
+  /**
+   * Most keys tracked at once. When full, the oldest window is dropped, so a flood of new clients
+   * cannot use unbounded memory. Default: 100 000.
+   */
+  maxKeys?: number;
+}
+
+/** A store that counts synchronously, in this process. */
+export interface MemoryStore extends RateLimitStore {
+  increment(key: string, window: number): RateLimitResult;
+}
+
+/** Counts in this process only. For several processes or servers, use a shared store. */
+export function memoryStore(options: MemoryStoreOptions = {}): MemoryStore {
+  const maxKeys = positive('maxKeys', options.maxKeys ?? 100_000);
+  // Insertion order is window order: a new window is re-inserted at the end.
+  const windows = new Map<string, { count: number; resetAt: number }>();
+
+  return {
+    increment(key, window) {
+      const now = Date.now();
+      const current = windows.get(key);
+      if (current && current.resetAt > now) {
+        current.count++;
+        return { count: current.count, resetAt: current.resetAt };
+      }
+      if (current) windows.delete(key);
+      for (const [oldest, entry] of windows) {
+        if (entry.resetAt > now && windows.size < maxKeys) break;
+        windows.delete(oldest);
+      }
+      const fresh = { count: 1, resetAt: now + window };
+      windows.set(key, fresh);
+      return { count: fresh.count, resetAt: fresh.resetAt };
+    },
+  };
+}
+
+function positive(name: string, value: number): number {
+  if (!Number.isInteger(value) || value <= 0) {
+    throw new RangeError(`rateLimit: ${name} must be a positive integer, got ${String(value)}`);
+  }
+  return value;
+}