@bgord/bun 1.6.7 → 1.7.0

package/dist/security-rule-user-agent.strategy.js

@@ -0,0 +1,18 @@
+import { ALL_BOTS } from "./bots.vo";
+import { ClientFromHono } from "./client-from-hono.adapter";
+import { ClientUserAgent } from "./client-user-agent.vo";
+import { SecurityRuleName } from "./security-rule-name.vo";
+export class SecurityRuleUserAgentStrategy {
+    blacklist;
+    constructor(blacklist = ALL_BOTS) {
+        this.blacklist = blacklist;
+    }
+    async isViolated(c) {
+        const client = ClientFromHono.translate(c);
+        return this.blacklist.some((bot) => client.matchesUa(ClientUserAgent.parse(bot)));
+    }
+    get name() {
+        return SecurityRuleName.parse("user_agent");
+    }
+}
+//# sourceMappingURL=security-rule-user-agent.strategy.js.map

package/dist/security-rule-user-agent.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule-user-agent.strategy.js","sourceRoot":"","sources":["../src/security-rule-user-agent.strategy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,OAAO,6BAA6B;IACX;IAA7B,YAA6B,YAAsB,QAAQ;QAA9B,cAAS,GAAT,SAAS,CAAqB;IAAG,CAAC;IAE/D,KAAK,CAAC,UAAU,CAAC,CAAU;QACzB,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAE3C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,IAAI;QACN,OAAO,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/security-rule-violation-threshold.strategy.d.ts

@@ -0,0 +1,20 @@
+import type { Context } from "hono";
+import type { CacheRepositoryPort } from "./cache-repository.port";
+import type { HashContentStrategy } from "./hash-content.strategy";
+import type { SecurityRuleStrategy } from "./security-rule.strategy";
+type Dependencies = {
+    CacheRepository: CacheRepositoryPort;
+    HashContent: HashContentStrategy;
+};
+export declare class SecurityRuleViolationThresholdStrategy implements SecurityRuleStrategy {
+    private readonly rule;
+    private readonly config;
+    private readonly deps;
+    constructor(rule: SecurityRuleStrategy, config: {
+        threshold: number;
+    }, deps: Dependencies);
+    isViolated(c: Context): Promise<boolean>;
+    get name(): string & import("zod").$brand<"SecurityRuleName">;
+}
+export {};
+//# sourceMappingURL=security-rule-violation-threshold.strategy.d.ts.map

package/dist/security-rule-violation-threshold.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule-violation-threshold.strategy.d.ts","sourceRoot":"","sources":["../src/security-rule-violation-threshold.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAInE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGrE,KAAK,YAAY,GAAG;IAAE,eAAe,EAAE,mBAAmB,CAAC;IAAC,WAAW,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAE/F,qBAAa,sCAAuC,YAAW,oBAAoB;IAE/E,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAFJ,IAAI,EAAE,oBAAoB,EAC1B,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,EAC7B,IAAI,EAAE,YAAY;IAI/B,UAAU,CAAC,CAAC,EAAE,OAAO;IAuB3B,IAAI,IAAI,sDAEP;CACF"}

package/dist/security-rule-violation-threshold.strategy.js

@@ -0,0 +1,36 @@
+import { CacheSubjectResolver } from "./cache-subject-resolver.vo";
+import { CacheSubjectSegmentFixedStrategy } from "./cache-subject-segment-fixed.strategy";
+import { CacheSubjectSegmentIpStrategy } from "./cache-subject-segment-ip.strategy";
+import { SecurityRuleName } from "./security-rule-name.vo";
+export class SecurityRuleViolationThresholdStrategy {
+    rule;
+    config;
+    deps;
+    constructor(rule, config, deps) {
+        this.rule = rule;
+        this.config = config;
+        this.deps = deps;
+    }
+    // Best-effort increment, occasional lost increments are acceptable for concurrent requests.
+    async isViolated(c) {
+        const resolver = new CacheSubjectResolver([new CacheSubjectSegmentFixedStrategy(this.name), new CacheSubjectSegmentIpStrategy()], this.deps);
+        const subject = await resolver.resolve(c);
+        const violated = await this.rule.isViolated(c);
+        if (!violated)
+            return false;
+        try {
+            const count = (await this.deps.CacheRepository.get(subject.hex)) ?? 0;
+            await this.deps.CacheRepository.set(subject.hex, count + 1);
+            if (count + 1 >= this.config.threshold)
+                return true;
+            return false;
+        }
+        catch {
+            return false;
+        }
+    }
+    get name() {
+        return SecurityRuleName.parse(`violation_threshold_${this.config.threshold}_${this.rule.name}`);
+    }
+}
+//# sourceMappingURL=security-rule-violation-threshold.strategy.js.map

package/dist/security-rule-violation-threshold.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule-violation-threshold.strategy.js","sourceRoot":"","sources":["../src/security-rule-violation-threshold.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,gCAAgC,EAAE,MAAM,wCAAwC,CAAC;AAC1F,OAAO,EAAE,6BAA6B,EAAE,MAAM,qCAAqC,CAAC;AAGpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAI3D,MAAM,OAAO,sCAAsC;IAE9B;IACA;IACA;IAHnB,YACmB,IAA0B,EAC1B,MAA6B,EAC7B,IAAkB;QAFlB,SAAI,GAAJ,IAAI,CAAsB;QAC1B,WAAM,GAAN,MAAM,CAAuB;QAC7B,SAAI,GAAJ,IAAI,CAAc;IAClC,CAAC;IAEJ,4FAA4F;IAC5F,KAAK,CAAC,UAAU,CAAC,CAAU;QACzB,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CACvC,CAAC,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,6BAA6B,EAAE,CAAC,EACtF,IAAI,CAAC,IAAI,CACV,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAE1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAE/C,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE5B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAS,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;YAE9E,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAS,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAEpE,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QACN,OAAO,gBAAgB,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAClG,CAAC;CACF"}

package/dist/security-rule.strategy.d.ts

@@ -0,0 +1,7 @@
+import type { Context } from "hono";
+import type { SecurityRuleNameType } from "./security-rule-name.vo";
+export interface SecurityRuleStrategy {
+    isViolated(c: Context): Promise<boolean>;
+    get name(): SecurityRuleNameType;
+}
+//# sourceMappingURL=security-rule.strategy.d.ts.map

package/dist/security-rule.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule.strategy.d.ts","sourceRoot":"","sources":["../src/security-rule.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzC,IAAI,IAAI,IAAI,oBAAoB,CAAC;CAClC"}

package/dist/security-rule.strategy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security-rule.strategy.js.map

package/dist/security-rule.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rule.strategy.js","sourceRoot":"","sources":["../src/security-rule.strategy.ts"],"names":[],"mappings":""}

package/dist/setup.service.d.ts

@@ -1,23 +1,25 @@
 import { cors } from "hono/cors";
 import { secureHeaders } from "hono/secure-headers";
 import type { ClockPort } from "./clock.port";
+import type { FileReaderJsonPort } from "./file-reader-json.port";
 import { type HttpLoggerOptions } from "./http-logger.middleware";
 import type { I18nConfigType } from "./i18n.service";
 import type { IdProviderPort } from "./id-provider.port";
-import type { JsonFileReaderPort } from "./json-file-reader.port";
 import type { LoggerPort } from "./logger.port";
+import { type MaintenanceModeConfigType } from "./maintenance-mode.middleware";
 export declare const BODY_LIMIT_MAX_SIZE: number & import("zod").$brand<"SizeBytes">;
 type SetupOverridesType = {
     cors?: Parameters<typeof cors>[0];
     secureHeaders?: Parameters<typeof secureHeaders>[0];
     httpLogger?: HttpLoggerOptions;
+    maintenanceMode?: MaintenanceModeConfigType;
 };
 type Dependencies = {
     Logger: LoggerPort;
     IdProvider: IdProviderPort;
     I18n: I18nConfigType;
     Clock: ClockPort;
-    JsonFileReader: JsonFileReaderPort;
+    JsonFileReader: FileReaderJsonPort;
 };
 export declare class Setup {
     static essentials(deps: Dependencies, overrides?: SetupOverridesType): (import("hono").MiddlewareHandler<any, string, {}, Response> | import("hono").MiddlewareHandler<{

package/dist/setup.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.service.d.ts","sourceRoot":"","sources":["../src/setup.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAI9C,OAAO,EAAc,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAKhD,eAAO,MAAM,mBAAmB,4CAAmC,CAAC;AAEpE,KAAK,kBAAkB,GAAG;IACxB,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC,CAAC;AAEF,KAAK,YAAY,GAAG;IAClB,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,cAAc,CAAC;IAC3B,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,SAAS,CAAC;IACjB,cAAc,EAAE,kBAAkB,CAAC;CACpC,CAAC;AAEF,qBAAa,KAAK;IAChB,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,kBAAkB;;;CA6BrE"}
+{"version":3,"file":"setup.service.d.ts","sourceRoot":"","sources":["../src/setup.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAI9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAc,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAmB,KAAK,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAIhG,eAAO,MAAM,mBAAmB,4CAAmC,CAAC;AAEpE,KAAK,kBAAkB,GAAG;IACxB,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,eAAe,CAAC,EAAE,yBAAyB,CAAC;CAC7C,CAAC;AAEF,KAAK,YAAY,GAAG;IAClB,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,cAAc,CAAC;IAC3B,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,SAAS,CAAC;IACjB,cAAc,EAAE,kBAAkB,CAAC;CACpC,CAAC;AAEF,qBAAa,KAAK;IAChB,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,kBAAkB;;;CA6BrE"}

package/dist/setup.service.js

@@ -10,7 +10,7 @@ import { Context } from "./context.middleware";
 import { CorrelationStorage } from "./correlation-storage.service";
 import { ETagExtractor } from "./etag-extractor.middleware";
 import { HttpLogger } from "./http-logger.middleware";
-import { ShieldUserAgentBlockerAdapter } from "./shield-user-agent-blocker.adapter";
+import { MaintenanceMode } from "./maintenance-mode.middleware";
 import { TimeZoneOffset } from "./time-zone-offset.middleware";
 import { WeakETagExtractor } from "./weak-etag-extractor.middleware";
 export const BODY_LIMIT_MAX_SIZE = tools.Size.fromKb(128).toBytes();
@@ -19,9 +19,9 @@ export class Setup {
         const corsOptions = overrides?.cors ?? { origin: "*" };
         const secureHeadersOptions = { crossOriginResourcePolicy: "cross-origin", ...overrides?.secureHeaders };
         return [
+            MaintenanceMode.build(overrides?.maintenanceMode),
             secureHeaders(secureHeadersOptions),
             bodyLimit({ maxSize: BODY_LIMIT_MAX_SIZE }),
-            new ShieldUserAgentBlockerAdapter().verify,
             ApiVersion.build({ Clock: deps.Clock, JsonFileReader: deps.JsonFileReader }),
             cors(corsOptions),
             languageDetector({

package/dist/setup.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup.service.js","sourceRoot":"","sources":["../src/setup.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAA0B,MAAM,0BAA0B,CAAC;AAK9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,qCAAqC,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;AAgBpE,MAAM,OAAO,KAAK;IAChB,MAAM,CAAC,UAAU,CAAC,IAAkB,EAAE,SAA8B;QAClE,MAAM,WAAW,GAAG,SAAS,EAAE,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACvD,MAAM,oBAAoB,GAAG,EAAE,yBAAyB,EAAE,cAAc,EAAE,GAAG,SAAS,EAAE,aAAa,EAAE,CAAC;QAExG,OAAO;YACL,aAAa,CAAC,oBAAoB,CAAC;YACnC,SAAS,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;YAC3C,IAAI,6BAA6B,EAAE,CAAC,MAAM;YAC1C,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5E,IAAI,CAAC,WAAW,CAAC;YACjB,gBAAgB,CAAC;gBACf,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC;gBAC7D,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;gBAC3C,MAAM,EAAE,KAAK;aACd,CAAC;YACF,SAAS,CAAC;gBACR,WAAW,EAAE,EAAE;gBACf,UAAU,EAAE,kBAAkB;gBAC9B,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;aAC5C,CAAC;YACF,cAAc,CAAC,MAAM;YACrB,OAAO,CAAC,MAAM;YACd,iBAAiB,CAAC,MAAM;YACxB,aAAa,CAAC,MAAM;YACpB,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;YAC7C,MAAM,EAAE;YACR,kBAAkB,CAAC,MAAM,EAAE;SAC5B,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"setup.service.js","sourceRoot":"","sources":["../src/setup.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,OAAO,EAAE,UAAU,EAA0B,MAAM,0BAA0B,CAAC;AAI9E,OAAO,EAAE,eAAe,EAAkC,MAAM,+BAA+B,CAAC;AAChG,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;AAiBpE,MAAM,OAAO,KAAK;IAChB,MAAM,CAAC,UAAU,CAAC,IAAkB,EAAE,SAA8B;QAClE,MAAM,WAAW,GAAG,SAAS,EAAE,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACvD,MAAM,oBAAoB,GAAG,EAAE,yBAAyB,EAAE,cAAc,EAAE,GAAG,SAAS,EAAE,aAAa,EAAE,CAAC;QAExG,OAAO;YACL,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC;YACjD,aAAa,CAAC,oBAAoB,CAAC;YACnC,SAAS,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;YAC3C,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5E,IAAI,CAAC,WAAW,CAAC;YACjB,gBAAgB,CAAC;gBACf,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC;gBAC7D,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;gBAC3C,MAAM,EAAE,KAAK;aACd,CAAC;YACF,SAAS,CAAC;gBACR,WAAW,EAAE,EAAE;gBACf,UAAU,EAAE,kBAAkB;gBAC9B,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;aAC5C,CAAC;YACF,cAAc,CAAC,MAAM;YACrB,OAAO,CAAC,MAAM;YACd,iBAAiB,CAAC,MAAM;YACxB,aAAa,CAAC,MAAM;YACpB,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;YAC7C,MAAM,EAAE;YACR,kBAAkB,CAAC,MAAM,EAAE;SAC5B,CAAC;IACJ,CAAC;CACF"}

package/dist/shield-api-key.strategy.d.ts

@@ -0,0 +1,15 @@
+import type * as tools from "@bgord/tools";
+import { HTTPException } from "hono/http-exception";
+import type { ShieldStrategy } from "./shield.strategy";
+type ApiKeyShieldConfigType = {
+    API_KEY: tools.ApiKeyType;
+};
+export declare const AccessDeniedApiKeyError: HTTPException;
+export declare class ShieldApiKeyStrategy implements ShieldStrategy {
+    private readonly config;
+    static readonly HEADER_NAME = "bgord-api-key";
+    constructor(config: ApiKeyShieldConfigType);
+    verify: import("hono").MiddlewareHandler<any, string, {}, Response>;
+}
+export {};
+//# sourceMappingURL=shield-api-key.strategy.d.ts.map

package/dist/shield-api-key.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-api-key.strategy.d.ts","sourceRoot":"","sources":["../src/shield-api-key.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,KAAK,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,KAAK,sBAAsB,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAA;CAAE,CAAC;AAE5D,eAAO,MAAM,uBAAuB,eAA+D,CAAC;AAEpG,qBAAa,oBAAqB,YAAW,cAAc;IAG7C,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,MAAM,CAAC,QAAQ,CAAC,WAAW,mBAAmB;gBAEjB,MAAM,EAAE,sBAAsB;IAE3D,MAAM,8DAIH;CACJ"}

package/dist/shield-api-key.strategy.js

@@ -0,0 +1,16 @@
+import { createMiddleware } from "hono/factory";
+import { HTTPException } from "hono/http-exception";
+export const AccessDeniedApiKeyError = new HTTPException(403, { message: "access_denied_api_key" });
+export class ShieldApiKeyStrategy {
+    config;
+    static HEADER_NAME = "bgord-api-key";
+    constructor(config) {
+        this.config = config;
+    }
+    verify = createMiddleware(async (c, next) => {
+        if (c.req.header(ShieldApiKeyStrategy.HEADER_NAME) === this.config.API_KEY)
+            return next();
+        throw AccessDeniedApiKeyError;
+    });
+}
+//# sourceMappingURL=shield-api-key.strategy.js.map

package/dist/shield-api-key.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-api-key.strategy.js","sourceRoot":"","sources":["../src/shield-api-key.strategy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAKpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;AAEpG,MAAM,OAAO,oBAAoB;IAGF;IAF7B,MAAM,CAAU,WAAW,GAAG,eAAe,CAAC;IAE9C,YAA6B,MAA8B;QAA9B,WAAM,GAAN,MAAM,CAAwB;IAAG,CAAC;IAE/D,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC1C,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,EAAE,CAAC;QAE1F,MAAM,uBAAuB,CAAC;IAChC,CAAC,CAAC,CAAC"}

package/dist/shield-auth.strategy.d.ts

@@ -0,0 +1,12 @@
+import type { betterAuth } from "better-auth";
+import type hono from "hono";
+import { HTTPException } from "hono/http-exception";
+export declare const ShieldAuthStrategyError: HTTPException;
+export declare class ShieldAuthStrategy {
+    private readonly Auth;
+    constructor(Auth: ReturnType<typeof betterAuth>);
+    attach: hono.MiddlewareHandler<any, any, {}, Response>;
+    verify: hono.MiddlewareHandler<any, any, {}, Response>;
+    reverse: hono.MiddlewareHandler<any, any, {}, Response>;
+}
+//# sourceMappingURL=shield-auth.strategy.d.ts.map

package/dist/shield-auth.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-auth.strategy.d.ts","sourceRoot":"","sources":["../src/shield-auth.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,eAAO,MAAM,uBAAuB,eAAmE,CAAC;AAExG,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC;IAEhE,MAAM,iDAcH;IAEH,MAAM,iDAKH;IAEH,OAAO,iDAKJ;CACJ"}

package/dist/shield-auth.strategy.js

@@ -0,0 +1,34 @@
+// TODO: tests
+import { createMiddleware } from "hono/factory";
+import { HTTPException } from "hono/http-exception";
+export const ShieldAuthStrategyError = new HTTPException(403, { message: "access_denied_auth_shield" });
+export class ShieldAuthStrategy {
+    Auth;
+    constructor(Auth) {
+        this.Auth = Auth;
+    }
+    attach = createMiddleware(async (c, next) => {
+        const session = await this.Auth.api.getSession({ headers: c.req.raw.headers });
+        if (!session) {
+            c.set("user", null);
+            c.set("session", null);
+            return next();
+        }
+        c.set("user", session.user);
+        c.set("session", session.session);
+        return next();
+    });
+    verify = createMiddleware(async (c, next) => {
+        const user = c.get("user");
+        if (!user)
+            throw ShieldAuthStrategyError;
+        return next();
+    });
+    reverse = createMiddleware(async (c, next) => {
+        const user = c.get("user");
+        if (user)
+            throw ShieldAuthStrategyError;
+        return next();
+    });
+}
+//# sourceMappingURL=shield-auth.strategy.js.map

package/dist/shield-auth.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-auth.strategy.js","sourceRoot":"","sources":["../src/shield-auth.strategy.ts"],"names":[],"mappings":"AAAA,cAAc;AAId,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;AAExG,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,IAAmC;QAAnC,SAAI,GAAJ,IAAI,CAA+B;IAAG,CAAC;IAEpE,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,CAAe,EAAE,IAAe,EAAE,EAAE;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAE/E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpB,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAEvB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAElC,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,CAAe,EAAE,IAAe,EAAE,EAAE;QACnE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE3B,IAAI,CAAC,IAAI;YAAE,MAAM,uBAAuB,CAAC;QACzC,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,CAAe,EAAE,IAAe,EAAE,EAAE;QACpE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE3B,IAAI,IAAI;YAAE,MAAM,uBAAuB,CAAC;QACxC,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;CACJ"}

package/dist/shield-basic-auth.strategy.d.ts

@@ -0,0 +1,14 @@
+import type { BasicAuthPasswordType } from "./basic-auth-password.vo";
+import type { BasicAuthUsernameType } from "./basic-auth-username.vo";
+import type { ShieldStrategy } from "./shield.strategy";
+type ShieldBasicAuthConfigType = {
+    username: BasicAuthUsernameType;
+    password: BasicAuthPasswordType;
+};
+export declare class ShieldBasicAuthStrategy implements ShieldStrategy {
+    private readonly basicAuth;
+    constructor(config: ShieldBasicAuthConfigType);
+    verify: import("hono").MiddlewareHandler<any, string, {}, Response>;
+}
+export {};
+//# sourceMappingURL=shield-basic-auth.strategy.d.ts.map

package/dist/shield-basic-auth.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-basic-auth.strategy.d.ts","sourceRoot":"","sources":["../src/shield-basic-auth.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,KAAK,yBAAyB,GAAG;IAAE,QAAQ,EAAE,qBAAqB,CAAC;IAAC,QAAQ,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAEtG,qBAAa,uBAAwB,YAAW,cAAc;IAC5D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAEf,MAAM,EAAE,yBAAyB;IAI7C,MAAM,8DAAgE;CACvE"}

package/dist/shield-basic-auth.strategy.js

@@ -0,0 +1,10 @@
+import { basicAuth } from "hono/basic-auth";
+import { createMiddleware } from "hono/factory";
+export class ShieldBasicAuthStrategy {
+    basicAuth;
+    constructor(config) {
+        this.basicAuth = basicAuth(config);
+    }
+    verify = createMiddleware(async (c, next) => this.basicAuth(c, next));
+}
+//# sourceMappingURL=shield-basic-auth.strategy.js.map

package/dist/shield-basic-auth.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-basic-auth.strategy.js","sourceRoot":"","sources":["../src/shield-basic-auth.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAOhD,MAAM,OAAO,uBAAuB;IACjB,SAAS,CAAC;IAE3B,YAAY,MAAiC;QAC3C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;CACvE"}

package/dist/shield-captcha-hcaptcha-local.strategy.d.ts

@@ -0,0 +1,10 @@
+import { HTTPException } from "hono/http-exception";
+import type { HCaptchaSecretKeyType } from "./hcaptcha-secret-key.vo";
+import type { ShieldStrategy } from "./shield.strategy";
+export declare const AccessDeniedHcaptchaLocalError: HTTPException;
+export declare class ShieldCaptchaHcaptchaLocalStrategy implements ShieldStrategy {
+    private readonly secretKey;
+    constructor(secretKey: HCaptchaSecretKeyType);
+    verify: import("hono").MiddlewareHandler<any, string, {}, Response>;
+}
+//# sourceMappingURL=shield-captcha-hcaptcha-local.strategy.d.ts.map

package/dist/shield-captcha-hcaptcha-local.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-captcha-hcaptcha-local.strategy.d.ts","sourceRoot":"","sources":["../src/shield-captcha-hcaptcha-local.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,eAAO,MAAM,8BAA8B,eAEzC,CAAC;AAEH,qBAAa,kCAAmC,YAAW,cAAc;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,qBAAqB;IAE7D,MAAM,8DASH;CACJ"}

package/dist/shield-captcha-hcaptcha-local.strategy.js

@@ -0,0 +1,24 @@
+import hcaptcha from "hcaptcha";
+import { createMiddleware } from "hono/factory";
+import { HTTPException } from "hono/http-exception";
+export const AccessDeniedHcaptchaLocalError = new HTTPException(403, {
+    message: "access_denied_hcaptcha_local",
+});
+export class ShieldCaptchaHcaptchaLocalStrategy {
+    secretKey;
+    constructor(secretKey) {
+        this.secretKey = secretKey;
+    }
+    verify = createMiddleware(async (_c, next) => {
+        try {
+            const result = await hcaptcha.verify(this.secretKey, "10000000-aaaa-bbbb-cccc-000000000001");
+            if (!result?.success)
+                throw AccessDeniedHcaptchaLocalError;
+            return next();
+        }
+        catch {
+            throw AccessDeniedHcaptchaLocalError;
+        }
+    });
+}
+//# sourceMappingURL=shield-captcha-hcaptcha-local.strategy.js.map

package/dist/shield-captcha-hcaptcha-local.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-captcha-hcaptcha-local.strategy.js","sourceRoot":"","sources":["../src/shield-captcha-hcaptcha-local.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIpD,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,aAAa,CAAC,GAAG,EAAE;IACnE,OAAO,EAAE,8BAA8B;CACxC,CAAC,CAAC;AAEH,MAAM,OAAO,kCAAkC;IAChB;IAA7B,YAA6B,SAAgC;QAAhC,cAAS,GAAT,SAAS,CAAuB;IAAG,CAAC;IAEjE,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QAC3C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC;YAE7F,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,8BAA8B,CAAC;YAC3D,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,8BAA8B,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;CACJ"}

package/dist/shield-captcha-hcaptcha.strategy.d.ts

@@ -0,0 +1,10 @@
+import { HTTPException } from "hono/http-exception";
+import type { HCaptchaSecretKeyType } from "./hcaptcha-secret-key.vo";
+import type { ShieldStrategy } from "./shield.strategy";
+export declare const AccessDeniedHcaptchaError: HTTPException;
+export declare class ShieldCaptchaHcaptchaStrategy implements ShieldStrategy {
+    private readonly secretKey;
+    constructor(secretKey: HCaptchaSecretKeyType);
+    verify: import("hono").MiddlewareHandler<any, string, {}, Response>;
+}
+//# sourceMappingURL=shield-captcha-hcaptcha.strategy.d.ts.map

package/dist/shield-captcha-hcaptcha.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-captcha-hcaptcha.strategy.d.ts","sourceRoot":"","sources":["../src/shield-captcha-hcaptcha.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,eAAO,MAAM,yBAAyB,eAAgE,CAAC;AAEvG,qBAAa,6BAA8B,YAAW,cAAc;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,qBAAqB;IAE7D,MAAM,8DAWH;CACJ"}

package/dist/shield-captcha-hcaptcha.strategy.js

@@ -0,0 +1,24 @@
+import hcaptcha from "hcaptcha";
+import { createMiddleware } from "hono/factory";
+import { HTTPException } from "hono/http-exception";
+export const AccessDeniedHcaptchaError = new HTTPException(403, { message: "access_denied_hcaptcha" });
+export class ShieldCaptchaHcaptchaStrategy {
+    secretKey;
+    constructor(secretKey) {
+        this.secretKey = secretKey;
+    }
+    verify = createMiddleware(async (c, next) => {
+        try {
+            const form = await c.req.formData();
+            const hcaptchaTokenFormData = form.get("h-captcha-response")?.toString();
+            const result = await hcaptcha.verify(this.secretKey, hcaptchaTokenFormData);
+            if (!result?.success)
+                throw AccessDeniedHcaptchaError;
+            return next();
+        }
+        catch {
+            throw AccessDeniedHcaptchaError;
+        }
+    });
+}
+//# sourceMappingURL=shield-captcha-hcaptcha.strategy.js.map

package/dist/shield-captcha-hcaptcha.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-captcha-hcaptcha.strategy.js","sourceRoot":"","sources":["../src/shield-captcha-hcaptcha.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIpD,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;AAEvG,MAAM,OAAO,6BAA6B;IACX;IAA7B,YAA6B,SAAgC;QAAhC,cAAS,GAAT,SAAS,CAAuB;IAAG,CAAC;IAEjE,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,qBAAqB,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAY,CAAC;YACnF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;YAE5E,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,yBAAyB,CAAC;YACtD,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,yBAAyB,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,CAAC;CACJ"}

package/dist/shield-captcha-recaptcha.strategy.d.ts

@@ -0,0 +1,18 @@
+import { HTTPException } from "hono/http-exception";
+import type { RecaptchaSecretKeyType } from "./recaptcha-secret-key.vo";
+import type { ShieldStrategy } from "./shield.strategy";
+export type RecaptchaVerifierConfigType = {
+    secretKey: RecaptchaSecretKeyType;
+};
+export type RecaptchaResultType = {
+    success: boolean;
+    score: number;
+};
+export declare const AccessDeniedRecaptchaError: HTTPException;
+export declare class ShieldCaptchaRecaptchaStrategy implements ShieldStrategy {
+    private readonly config;
+    private static readonly URL;
+    constructor(config: RecaptchaVerifierConfigType);
+    verify: import("hono").MiddlewareHandler<any, string, {}, Response>;
+}
+//# sourceMappingURL=shield-captcha-recaptcha.strategy.d.ts.map

package/dist/shield-captcha-recaptcha.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-captcha-recaptcha.strategy.d.ts","sourceRoot":"","sources":["../src/shield-captcha-recaptcha.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,MAAM,2BAA2B,GAAG;IAAE,SAAS,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAChF,MAAM,MAAM,mBAAmB,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtE,eAAO,MAAM,0BAA0B,eAAiE,CAAC;AAEzG,qBAAa,8BAA+B,YAAW,cAAc;IAKvD,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAEzB;gBAE2B,MAAM,EAAE,2BAA2B;IAEhE,MAAM,8DA6BH;CACJ"}

package/dist/shield-captcha-recaptcha.strategy.js

@@ -0,0 +1,37 @@
+import * as tools from "@bgord/tools";
+import { createMiddleware } from "hono/factory";
+import { HTTPException } from "hono/http-exception";
+export const AccessDeniedRecaptchaError = new HTTPException(403, { message: "access_denied_recaptcha" });
+export class ShieldCaptchaRecaptchaStrategy {
+    config;
+    static URL = tools.UrlWithoutSlash.parse("https://www.google.com/recaptcha/api/siteverify");
+    constructor(config) {
+        this.config = config;
+    }
+    verify = createMiddleware(async (c, next) => {
+        try {
+            const header = c.req.header("x-recaptcha-token");
+            const query = c.req.query("recaptchaToken");
+            const form = (await c.req.formData()).get("g-recaptcha-response")?.toString();
+            const token = header ?? query ?? form;
+            if (!token)
+                throw AccessDeniedRecaptchaError;
+            // cSpell:ignore remoteip
+            const remoteip = c.req.header("x-forwarded-for") ?? "";
+            const params = new URLSearchParams({ secret: this.config.secretKey, response: token, remoteip });
+            const response = await fetch(ShieldCaptchaRecaptchaStrategy.URL, {
+                method: "POST",
+                headers: { "Content-Type": "application/x-www-form-urlencoded" },
+                body: params,
+            });
+            const result = await response.json();
+            if (!result.success || result.score < 0.5)
+                throw AccessDeniedRecaptchaError;
+            await next();
+        }
+        catch {
+            throw AccessDeniedRecaptchaError;
+        }
+    });
+}
+//# sourceMappingURL=shield-captcha-recaptcha.strategy.js.map

package/dist/shield-captcha-recaptcha.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-captcha-recaptcha.strategy.js","sourceRoot":"","sources":["../src/shield-captcha-recaptcha.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAOpD,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;AAEzG,MAAM,OAAO,8BAA8B;IAKZ;IAJrB,MAAM,CAAU,GAAG,GAAG,KAAK,CAAC,eAAe,CAAC,KAAK,CACvD,iDAAiD,CAClD,CAAC;IAEF,YAA6B,MAAmC;QAAnC,WAAM,GAAN,MAAM,CAA6B;IAAG,CAAC;IAEpE,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,QAAQ,EAAE,CAAC;YAE9E,MAAM,KAAK,GAAG,MAAM,IAAI,KAAK,IAAI,IAAI,CAAC;YAEtC,IAAI,CAAC,KAAK;gBAAE,MAAM,0BAA0B,CAAC;YAE7C,yBAAyB;YACzB,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;YAEvD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEjG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,8BAA8B,CAAC,GAAG,EAAE;gBAC/D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;YAEH,MAAM,MAAM,GAAwB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE1D,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,GAAG,GAAG;gBAAE,MAAM,0BAA0B,CAAC;YAE5E,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,0BAA0B,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC"}

package/dist/shield-noop.strategy.d.ts

@@ -0,0 +1,5 @@
+import type { ShieldStrategy } from "./shield.strategy";
+export declare class ShieldNoopStrategy implements ShieldStrategy {
+    verify: import("hono").MiddlewareHandler<any, string, {}, Response>;
+}
+//# sourceMappingURL=shield-noop.strategy.d.ts.map

package/dist/shield-noop.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-noop.strategy.d.ts","sourceRoot":"","sources":["../src/shield-noop.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,qBAAa,kBAAmB,YAAW,cAAc;IACvD,MAAM,8DAAgD;CACvD"}

package/dist/shield-noop.strategy.js

@@ -0,0 +1,5 @@
+import { createMiddleware } from "hono/factory";
+export class ShieldNoopStrategy {
+    verify = createMiddleware(async (_c, next) => next());
+}
+//# sourceMappingURL=shield-noop.strategy.js.map

package/dist/shield-noop.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-noop.strategy.js","sourceRoot":"","sources":["../src/shield-noop.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGhD,MAAM,OAAO,kBAAkB;IAC7B,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;CACvD"}

package/dist/shield-rate-limit.strategy.d.ts

@@ -0,0 +1,24 @@
+import * as tools from "@bgord/tools";
+import { HTTPException } from "hono/http-exception";
+import type { CacheResolverStrategy } from "./cache-resolver.strategy";
+import type { CacheSubjectResolver } from "./cache-subject-resolver.vo";
+import type { ClockPort } from "./clock.port";
+import type { ShieldStrategy } from "./shield.strategy";
+type ShieldRateLimitOptionsType = {
+    enabled: boolean;
+    resolver: CacheSubjectResolver;
+    window: tools.Duration;
+};
+type Dependencies = {
+    Clock: ClockPort;
+    CacheResolver: CacheResolverStrategy;
+};
+export declare const TooManyRequestsError: HTTPException;
+export declare class ShieldRateLimitStrategy implements ShieldStrategy {
+    private readonly options;
+    private readonly deps;
+    constructor(options: ShieldRateLimitOptionsType, deps: Dependencies);
+    verify: import("hono").MiddlewareHandler<any, string, {}, Response>;
+}
+export {};
+//# sourceMappingURL=shield-rate-limit.strategy.d.ts.map

package/dist/shield-rate-limit.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-rate-limit.strategy.d.ts","sourceRoot":"","sources":["../src/shield-rate-limit.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,KAAK,0BAA0B,GAAG;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;CACxB,CAAC;AAEF,KAAK,YAAY,GAAG;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,aAAa,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAE/E,eAAO,MAAM,oBAAoB,eAA+D,CAAC;AAEjG,qBAAa,uBAAwB,YAAW,cAAc;IAE1D,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBADJ,OAAO,EAAE,0BAA0B,EACnC,IAAI,EAAE,YAAY;IAGrC,MAAM,8DAeH;CACJ"}

package/dist/shield-rate-limit.strategy.js

@@ -0,0 +1,23 @@
+import * as tools from "@bgord/tools";
+import { createMiddleware } from "hono/factory";
+import { HTTPException } from "hono/http-exception";
+export const TooManyRequestsError = new HTTPException(429, { message: "app.too_many_requests" });
+export class ShieldRateLimitStrategy {
+    options;
+    deps;
+    constructor(options, deps) {
+        this.options = options;
+        this.deps = deps;
+    }
+    verify = createMiddleware(async (c, next) => {
+        if (!this.options.enabled)
+            return next();
+        const subject = await this.options.resolver.resolve(c);
+        const limiter = await this.deps.CacheResolver.resolve(subject.hex, async () => new tools.RateLimiter(this.options.window));
+        const result = limiter.verify(this.deps.Clock.now());
+        if (!result.allowed)
+            throw TooManyRequestsError;
+        return next();
+    });
+}
+//# sourceMappingURL=shield-rate-limit.strategy.js.map

package/dist/shield-rate-limit.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-rate-limit.strategy.js","sourceRoot":"","sources":["../src/shield-rate-limit.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAcpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;AAEjG,MAAM,OAAO,uBAAuB;IAEf;IACA;IAFnB,YACmB,OAAmC,EACnC,IAAkB;QADlB,YAAO,GAAP,OAAO,CAA4B;QACnC,SAAI,GAAJ,IAAI,CAAc;IAClC,CAAC;IAEJ,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,EAAE,CAAC;QAEzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CACnD,OAAO,CAAC,GAAG,EACX,KAAK,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CACvD,CAAC;QAEF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAErD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,oBAAoB,CAAC;QAEhD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;CACJ"}

package/dist/shield-security.strategy.d.ts

@@ -0,0 +1,19 @@
+import type { SecurityPolicy } from "./security-policy.vo";
+import type { ShieldStrategy } from "./shield.strategy";
+import type { SleeperPort } from "./sleeper.port";
+type Dependencies = {
+    Sleeper: SleeperPort;
+};
+export declare const ShieldSecurityAdapterError: {
+    Unhandled: string;
+    MissingPolicies: string;
+    MaxPolicies: string;
+};
+export declare class ShieldSecurityStrategy implements ShieldStrategy {
+    private readonly policies;
+    private readonly deps;
+    constructor(policies: SecurityPolicy[], deps: Dependencies);
+    verify: import("hono").MiddlewareHandler<any, string, {}, (Response & import("hono").TypedResponse<string, 100 | 102 | 103 | 200 | 201 | 202 | 203 | 206 | 207 | 208 | 226 | 300 | 301 | 302 | 303 | 305 | 306 | 307 | 308 | 400 | 401 | 402 | 403 | 404 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 501 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 | -1, "text">) | (Response & import("hono").TypedResponse<{}, 100 | 102 | 103 | 200 | 201 | 202 | 203 | 206 | 207 | 208 | 226 | 300 | 301 | 302 | 303 | 305 | 306 | 307 | 308 | 400 | 401 | 402 | 403 | 404 | 405 | 406 | 407 | 408 | 409 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 421 | 422 | 423 | 424 | 425 | 426 | 428 | 429 | 431 | 451 | 500 | 501 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 510 | 511 | -1, "json">)>;
+}
+export {};
+//# sourceMappingURL=shield-security.strategy.d.ts.map

package/dist/shield-security.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shield-security.strategy.d.ts","sourceRoot":"","sources":["../src/shield-security.strategy.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,KAAK,YAAY,GAAG;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAE7C,eAAO,MAAM,0BAA0B;;;;CAItC,CAAC;AAEF,qBAAa,sBAAuB,YAAW,cAAc;IAEzD,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBADJ,QAAQ,EAAE,cAAc,EAAE,EAC1B,IAAI,EAAE,YAAY;IAMrC,MAAM,m3BA4CH;CACJ"}