@bymax-one/nest-ai-tokens 1.0.0 → 1.0.1

package/CHANGELOG.md

@@ -8,6 +8,30 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) and
 
 ## [Unreleased]
 
+## [1.0.1] - 2026-08-04
+
+### Removed
+
+- The README's `Migration` section, which described migrating an AI cost layer out of a
+  named private monorepo. It reached the npm page of a public package, where it named a
+  repository its readers cannot see and cannot act on. The normative rule it carried —
+  translate `0`/`null` limits to no budget row — is already stated under the budget
+  semantics and is unchanged.
+
+### Security
+
+- The Redis credentials are no longer disclosed when `RedisBudgetCounterStore` is
+  serialized. The store kept the live client — or the connection URL it is opened from —
+  in a TypeScript `private` property, which is erased at runtime and leaves an enumerable
+  own property. A connection URL carries the password inline and an ioredis instance
+  carries `options.password` as a plain field, so `JSON.stringify`, object spread and
+  `util.inspect` emitted the password in plaintext, which is what a structured logger does
+  when it renders its arguments and what an error reporter does when it captures the scope
+  of a throw. The source and the in-flight lazy connection both move to ECMAScript private
+  fields.
+
+Reading on purpose is unchanged and no public type or export moved.
+
 ## [1.0.0] - 2026-08-03
 
 First published release. Everything below ships in it.
@@ -110,4 +134,5 @@ have regressed from. They are kept because the reasoning is worth having.
 ---
 
 [1.0.0]: https://github.com/bymaxone/nest-ai-tokens/releases/tag/v1.0.0
-[Unreleased]: https://github.com/bymaxone/nest-ai-tokens/compare/v1.0.0...HEAD
+[1.0.1]: https://github.com/bymaxone/nest-ai-tokens/compare/v1.0.0...v1.0.1
+[Unreleased]: https://github.com/bymaxone/nest-ai-tokens/compare/v1.0.1...HEAD

package/README.md

@@ -395,7 +395,7 @@ const status = await metering.getStatus(tenantId, { type: 'user', id: userId })
 // status[].remaining, status[].exhausted, status[].policy
 ```
 
-**Unlimited semantics:** no budget row = unlimited. `limit = 0` = hard block. Never use `null` or `0` to mean unlimited (see §22 migration notes).
+**Unlimited semantics:** no budget row = unlimited. `limit = 0` = hard block. Never use `null` or `0` to mean unlimited.
 
 ---
 
@@ -532,14 +532,6 @@ formatNanoUsd(5_000_000n, { currency: 'BRL', fxRateNano: 5_000_000_000n }) // '0
 
 ---
 
-## 🚚 Migration
-
-If you are migrating the `_commons_/ai/*` layer from `bymax-fitness`, see [docs/technical_specification.md §22](./docs/technical_specification.md) for the full field-by-field mapping table, the zero/null → unlimited translation rules, and backfill notes.
-
-Key caution: `bymax-fitness` treats `0` as unlimited on most paths and as blocked on one path. Do not import plan rows verbatim. Translate `0`/`null` limits to **no budget row** (the normative unlimited representation in this library).
-
----
-
 ## 📖 API Reference
 
 The sections above document each of these with a runnable example. This is the index.

package/dist/redis/index.cjs

@@ -36,15 +36,26 @@ var CounterValueOutOfRangeError = class extends Error {
 };
 var RedisBudgetCounterStore = class {
   keyPrefix;
-  source;
-  connecting = null;
+  /**
+   * The live client or the connection URL it is opened from.
+   *
+   * An ECMAScript private field rather than a TypeScript `private` one, which is
+   * erased at runtime: a connection URL carries the Redis password inline, and an
+   * ioredis instance carries `options.password` as a plain field. Leaving either
+   * enumerable would let anything that serializes this store — a structured
+   * logger rendering its arguments, an error reporter capturing the scope of a
+   * throw — emit the credentials in plaintext.
+   */
+  #source;
+  /** The in-flight lazy connection, which resolves to the same credentialed client. */
+  #connecting = null;
   /**
    * @param redis A live `ioredis` client, or a connection URL to lazily connect.
    * @param options Optional key prefix.
    */
   constructor(redis, options = {}) {
     this.keyPrefix = options.keyPrefix ?? "";
-    this.source = redis;
+    this.#source = redis;
   }
   /**
    * Atomically increment `key` by `amount` iff the result stays `<= limit`, setting
@@ -95,9 +106,9 @@ var RedisBudgetCounterStore = class {
   }
   /** Resolve the live client, lazily connecting a URL via a dynamic `ioredis` import. */
   resolve() {
-    if (typeof this.source !== "string") return Promise.resolve(this.source);
-    this.connecting ??= this.connect(this.source);
-    return this.connecting;
+    if (typeof this.#source !== "string") return Promise.resolve(this.#source);
+    this.#connecting ??= this.connect(this.#source);
+    return this.#connecting;
   }
   /** Dynamically import `ioredis` and connect the given URL. */
   async connect(url) {

package/dist/redis/index.d.cts

@@ -54,9 +54,8 @@ declare class CounterValueOutOfRangeError extends Error {
 }
 /** The official Redis adapter for the live budget counter port. */
 declare class RedisBudgetCounterStore implements IBudgetCounterStore {
+    #private;
     private readonly keyPrefix;
-    private readonly source;
-    private connecting;
     /**
      * @param redis A live `ioredis` client, or a connection URL to lazily connect.
      * @param options Optional key prefix.

package/dist/redis/index.d.ts

@@ -54,9 +54,8 @@ declare class CounterValueOutOfRangeError extends Error {
 }
 /** The official Redis adapter for the live budget counter port. */
 declare class RedisBudgetCounterStore implements IBudgetCounterStore {
+    #private;
     private readonly keyPrefix;
-    private readonly source;
-    private connecting;
     /**
      * @param redis A live `ioredis` client, or a connection URL to lazily connect.
      * @param options Optional key prefix.

package/dist/redis/index.mjs

@@ -34,15 +34,26 @@ var CounterValueOutOfRangeError = class extends Error {
 };
 var RedisBudgetCounterStore = class {
   keyPrefix;
-  source;
-  connecting = null;
+  /**
+   * The live client or the connection URL it is opened from.
+   *
+   * An ECMAScript private field rather than a TypeScript `private` one, which is
+   * erased at runtime: a connection URL carries the Redis password inline, and an
+   * ioredis instance carries `options.password` as a plain field. Leaving either
+   * enumerable would let anything that serializes this store — a structured
+   * logger rendering its arguments, an error reporter capturing the scope of a
+   * throw — emit the credentials in plaintext.
+   */
+  #source;
+  /** The in-flight lazy connection, which resolves to the same credentialed client. */
+  #connecting = null;
   /**
    * @param redis A live `ioredis` client, or a connection URL to lazily connect.
    * @param options Optional key prefix.
    */
   constructor(redis, options = {}) {
     this.keyPrefix = options.keyPrefix ?? "";
-    this.source = redis;
+    this.#source = redis;
   }
   /**
    * Atomically increment `key` by `amount` iff the result stays `<= limit`, setting
@@ -93,9 +104,9 @@ var RedisBudgetCounterStore = class {
   }
   /** Resolve the live client, lazily connecting a URL via a dynamic `ioredis` import. */
   resolve() {
-    if (typeof this.source !== "string") return Promise.resolve(this.source);
-    this.connecting ??= this.connect(this.source);
-    return this.connecting;
+    if (typeof this.#source !== "string") return Promise.resolve(this.#source);
+    this.#connecting ??= this.connect(this.#source);
+    return this.#connecting;
   }
   /** Dynamically import `ioredis` and connect the given URL. */
   async connect(url) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bymax-one/nest-ai-tokens",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "AI token metering & usage-based billing for NestJS 11: provider usage normalizer (×9), versioned effective-dated pricing, immutable append-only ledger, prepaid wallets, multi-dimension budgets, and markup/margin. Zero runtime dependencies.",
   "author": "Bymax One <support@bymax.one>",
   "license": "MIT",
@@ -73,6 +73,31 @@
     },
     "./package.json": "./package.json"
   },
+  "scripts": {
+    "build": "pnpm clean && tsup",
+    "check:exports": "attw --pack . --profile strict",
+    "check:published": "node scripts/check-published-surface.mjs",
+    "check:runtime": "node scripts/check-consumer-runtime.mjs",
+    "clean": "node -e \"const {rmSync}=require('node:fs');for(const d of ['dist','coverage'])rmSync(d,{recursive:true,force:true})\"",
+    "db:generate": "prisma generate",
+    "docs:check": "node scripts/check-jsdoc.mjs && tsc --noEmit -p tsconfig.e2e.json",
+    "lint": "eslint src",
+    "lint:fix": "eslint src --fix",
+    "mutation": "stryker run",
+    "mutation:dry-run": "stryker run --dryRunOnly",
+    "mutation:incremental": "stryker run --incremental",
+    "prepare": "prisma generate",
+    "prepublishOnly": "pnpm clean && pnpm typecheck && pnpm lint && pnpm test:cov:all && pnpm build && pnpm size && pnpm check:published",
+    "release": "npm publish --provenance --access public",
+    "size": "node scripts/check-size.mjs",
+    "test": "jest",
+    "test:all": "pnpm test && pnpm test:e2e",
+    "test:cov": "jest --coverage",
+    "test:cov:all": "jest --config jest.coverage.config.ts --coverage",
+    "test:e2e": "jest --config jest.e2e.config.ts",
+    "test:watch": "jest --watch",
+    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.server.json"
+  },
   "dependencies": {},
   "peerDependencies": {
     "@nestjs/common": "^11.0.16",
@@ -146,6 +171,26 @@
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.65.0"
   },
+  "pnpm": {
+    "overrides": {
+      "brace-expansion@1": "^1.1.17",
+      "brace-expansion@2": "^2.1.3",
+      "brace-expansion@5": "^5.0.8",
+      "esbuild": "0.28.1",
+      "fast-uri": "^3.1.4",
+      "multer": "2.2.0",
+      "protobufjs": "^7.6.5",
+      "qs": "6.15.2",
+      "undici": "^8.9.0",
+      "uuid": "11.1.1"
+    },
+    "onlyBuiltDependencies": [
+      "esbuild",
+      "@prisma/client",
+      "@prisma/engines",
+      "prisma"
+    ]
+  },
   "keywords": [
     "nestjs",
     "ai",
@@ -163,6 +208,7 @@
     "budget",
     "markup"
   ],
+  "packageManager": "pnpm@10.8.1",
   "engines": {
     "node": ">=24.0.0"
   },
@@ -189,28 +235,5 @@
         "./dist/redis/index.d.cts"
       ]
     }
-  },
-  "scripts": {
-    "build": "pnpm clean && tsup",
-    "check:exports": "attw --pack . --profile strict",
-    "check:published": "node scripts/check-published-surface.mjs",
-    "check:runtime": "node scripts/check-consumer-runtime.mjs",
-    "clean": "node -e \"const {rmSync}=require('node:fs');for(const d of ['dist','coverage'])rmSync(d,{recursive:true,force:true})\"",
-    "db:generate": "prisma generate",
-    "docs:check": "node scripts/check-jsdoc.mjs && tsc --noEmit -p tsconfig.e2e.json",
-    "lint": "eslint src",
-    "lint:fix": "eslint src --fix",
-    "mutation": "stryker run",
-    "mutation:dry-run": "stryker run --dryRunOnly",
-    "mutation:incremental": "stryker run --incremental",
-    "release": "npm publish --provenance --access public",
-    "size": "node scripts/check-size.mjs",
-    "test": "jest",
-    "test:all": "pnpm test && pnpm test:e2e",
-    "test:cov": "jest --coverage",
-    "test:cov:all": "jest --config jest.coverage.config.ts --coverage",
-    "test:e2e": "jest --config jest.e2e.config.ts",
-    "test:watch": "jest --watch",
-    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.server.json"
   }
-}
+}