@chaos-overlords/kernel 0.9.0 → 0.9.1

package/dist/logic/canonical-json.js

@@ -20,25 +20,53 @@ export class NonCanonicalValueError extends Error {
         this.name = 'NonCanonicalValueError';
     }
 }
-function canonicalize(value, path = '') {
+function canonicalize(value, path = []) {
     if (value === null || typeof value === 'boolean' || typeof value === 'string')
         return value;
     if (typeof value === 'number') {
         if (!Number.isSafeInteger(value) || Object.is(value, -0)) {
-            throw new NonCanonicalValueError(path, `${value} is not a safe non-negative-zero integer`);
+            throw new NonCanonicalValueError(describe(path), `${value} is not a safe non-negative-zero integer`);
         }
         return value;
     }
     if (Array.isArray(value))
-        return value.map((item, index) => canonicalize(item, `${path}[${index}]`));
+        return value.map((item, index) => descend(path, index, item));
     if (typeof value === 'object') {
         const source = value;
         const sorted = {};
         for (const key of Object.keys(source).sort()) {
-            sorted[key] = canonicalize(source[key], path ? `${path}.${key}` : key);
+            sorted[key] = descend(path, key, source[key]);
         }
         return sorted;
     }
-    throw new NonCanonicalValueError(path, `unsupported type ${typeof value}`);
+    throw new NonCanonicalValueError(describe(path), `unsupported type ${typeof value}`);
+}
+function descend(path, segment, value) {
+    path.push(segment);
+    try {
+        return canonicalize(value, path);
+    }
+    finally {
+        path.pop();
+    }
+}
+/**
+ * Renders the accumulated segments the way the C# mirror's `path` parameter spells them
+ * (`CanonicalJson.WriteObject`/`WriteArray`): an index is always `[n]`, and a key is dotted unless
+ * nothing has been rendered yet. The emptiness of what came before decides the dot, not the
+ * segment's position -- an empty-string key renders as nothing, so `{ '': { y: 1.5 } }` reports
+ * `y` rather than `.y`, matching both the mirror and the string-building version this replaced.
+ *
+ * Only a throw reaches here, so the allocation is off the hot path.
+ */
+function describe(path) {
+    let rendered = '';
+    for (const segment of path) {
+        if (typeof segment === 'number')
+            rendered += `[${segment}]`;
+        else
+            rendered += rendered.length === 0 ? segment : `.${segment}`;
+    }
+    return rendered;
 }
 //# sourceMappingURL=canonical-json.js.map

package/dist/logic/canonical-json.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-json.js","sourceRoot":"","sources":["../../src/logic/canonical-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAEpC,IAAI;IADf,YACW,IAAY,EACrB,MAAc;QAEd,KAAK,CAAC,uBAAuB,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC,CAAA;oBAHjD,IAAI;QAIb,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACtC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAI,GAAG,EAAE;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,sBAAsB,CAAC,IAAI,EAAE,GAAG,KAAK,0CAA0C,CAAC,CAAA;QAC5F,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAA;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAA;QAC/C,MAAM,MAAM,GAA4B,EAAE,CAAA;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACxE,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IACD,MAAM,IAAI,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,OAAO,KAAK,EAAE,CAAC,CAAA;AAC5E,CAAC"}
+{"version":3,"file":"canonical-json.js","sourceRoot":"","sources":["../../src/logic/canonical-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAEpC,IAAI;IADf,YACW,IAAY,EACrB,MAAc;QAEd,KAAK,CAAC,uBAAuB,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC,CAAA;oBAHjD,IAAI;QAIb,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACtC,CAAC;CACF;AAID,SAAS,YAAY,CAAC,KAAc,EAAE,IAAI,GAAkB,EAAE;IAC5D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,sBAAsB,CAC9B,QAAQ,CAAC,IAAI,CAAC,EACd,GAAG,KAAK,0CAA0C,CACnD,CAAA;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;IACvF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAA;QAC/C,MAAM,MAAM,GAA4B,EAAE,CAAA;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QAC/C,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IACD,MAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,oBAAoB,OAAO,KAAK,EAAE,CAAC,CAAA;AACtF,CAAC;AAED,SAAS,OAAO,CAAC,IAAmB,EAAE,OAAoB,EAAE,KAAc;IACxE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAClB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAClC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,GAAG,EAAE,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,QAAQ,CAAC,IAA4B;IAC5C,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,QAAQ,IAAI,IAAI,OAAO,GAAG,CAAA;;YACtD,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAA;IAClE,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/services/RateLimiter.d.ts

@@ -1,4 +1,10 @@
 import type { Clock } from '../ports/runtime';
+export interface RateLimiterOptions {
+    limit: number;
+    windowMs: number;
+    /** Residency bound; defaults to {@link DEFAULT_MAX_KEYS}. */
+    maxKeys?: number;
+}
 /**
  * Fixed-window counter per key, in memory. It protects the unauthenticated doors (create, join)
  * from brute force on one process; a horizontally scaled deployment puts a shared limiter (a WAF
@@ -8,19 +14,35 @@ export declare class RateLimiter {
     private readonly clock;
     private readonly options;
     private readonly windows;
+    private readonly maxKeys;
     private lastPrune;
-    constructor(clock: Clock, options: {
-        limit: number;
-        windowMs: number;
-    });
+    private lastWall;
+    private elapsed;
+    constructor(clock: Clock, options: RateLimiterOptions);
     /** Returns the retry delay in seconds when over the limit, or null when the call is allowed. */
     take(key: string): number | null;
     /** What `take` would answer right now, spending nothing. */
     peek(key: string): number | null;
     /** How much of `key`'s budget the current window has already spent; 0 once it has rolled. */
     spent(key: string): number;
-    /** The window `key` is spending from, or undefined once it has rolled or was never opened. */
+    /**
+     * Milliseconds on a clock that only moves forward, accumulated from the wall clock's forward steps.
+     *
+     * Production passes the wall clock, which NTP can step backwards. Measured directly, a step back
+     * would give new windows an earlier start than older ones already at the head, breaking the
+     * eviction order, and make elapsed time negative, keeping spent windows alive past `windowMs`.
+     * A backward step here just pauses the limiter's time until the wall clock moves forward again.
+     */
+    private tick;
+    /**
+     * The window `key` is spending from, or undefined once it has rolled or was never opened.
+     *
+     * A rolled window is removed here rather than overwritten later: Map#set keeps an existing key's
+     * insertion position, so overwriting would leave a fresh, possibly spent window at the head, first
+     * in line for eviction.
+     */
     private live;
+    private expired;
     /** Whole seconds until `entry`'s window rolls, rounded up. */
     private retryAfter;
     /**

package/dist/services/RateLimiter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RateLimiter.d.ts","sourceRoot":"","sources":["../../src/services/RateLimiter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAmB7C;;;;GAIG;AACH,qBAAa,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,SAAS,CAA2B;IAE5C,YACmB,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAC3D;IAEJ,gGAAgG;IAChG,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAY/B;IAED,4DAA4D;IAC5D,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK/B;IAED,6FAA6F;IAC7F,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzB;IAED,8FAA8F;IAC9F,OAAO,CAAC,IAAI;IAMZ,8DAA8D;IAC9D,OAAO,CAAC,UAAU;IAIlB;;;;;;;OAOG;IACH,OAAO,CAAC,KAAK;IAQb,0FAA0F;IAC1F,OAAO,CAAC,WAAW;CAOpB"}
+{"version":3,"file":"RateLimiter.d.ts","sourceRoot":"","sources":["../../src/services/RateLimiter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAe7C,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAOD;;;;GAIG;AACH,qBAAa,WAAW;IAQpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAR1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,SAAS,CAA2B;IAC5C,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,OAAO,CAAI;IAEnB,YACmB,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,kBAAkB,EAG7C;IAED,gGAAgG;IAChG,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAa/B;IAED,4DAA4D;IAC5D,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK/B;IAED,6FAA6F;IAC7F,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzB;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,IAAI;IAOZ;;;;;;OAMG;IACH,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,OAAO;IAIf,8DAA8D;IAC9D,OAAO,CAAC,UAAU;IAIlB;;;;;;;OAOG;IACH,OAAO,CAAC,KAAK;IAQb,0FAA0F;IAC1F,OAAO,CAAC,WAAW;CAOpB"}

package/dist/services/RateLimiter.js

@@ -1,14 +1,15 @@
 /**
- * How many distinct keys one limiter holds before the oldest are dropped.
+ * How many distinct keys one limiter holds by default before the oldest are dropped.
  *
  * `prune` only collects windows that have EXPIRED, at most once per window period, which is right
  * for a minute-long window and wrong for a day-long one: the bug-report budget's window is
  * twenty-four hours, so every address that ever posted stayed resident for a day or two on an
- * unauthenticated route. A Map iterates in insertion order, so the head is the oldest key and
- * evicting from there is one shift. Dropping a live window forgives that key's remaining budget,
- * which is the safe direction to fail on a memory bound.
+ * unauthenticated route. The Map iterates in window-start order — windows open on a clock that
+ * never runs backwards, and a rolled window is removed before it reopens at the tail — so the head
+ * is the oldest window and evicting from there is one shift. Dropping a live window forgives that
+ * key's remaining budget, which is the safe direction to fail on a memory bound.
  */
-const MAX_KEYS = 50_000;
+const DEFAULT_MAX_KEYS = 50_000;
 /**
  * Fixed-window counter per key, in memory. It protects the unauthenticated doors (create, join)
  * from brute force on one process; a horizontally scaled deployment puts a shared limiter (a WAF
@@ -18,16 +19,21 @@ export class RateLimiter {
     clock;
     options;
     windows = new Map();
+    maxKeys;
     lastPrune = Number.NEGATIVE_INFINITY;
+    lastWall = Number.NaN;
+    elapsed = 0;
     constructor(clock, options) {
         this.clock = clock;
         this.options = options;
+        this.maxKeys = options.maxKeys ?? DEFAULT_MAX_KEYS;
     }
     /** Returns the retry delay in seconds when over the limit, or null when the call is allowed. */
     take(key) {
-        const now = this.clock.now().getTime();
+        const now = this.tick();
         const entry = this.live(key, now);
         if (!entry) {
+            // `live` removed any rolled window, so this appends at the tail and keeps the Map ordered.
             this.windows.set(key, { windowStart: now, count: 1 });
             this.prune(now);
             this.evictOldest();
@@ -40,7 +46,7 @@ export class RateLimiter {
     }
     /** What `take` would answer right now, spending nothing. */
     peek(key) {
-        const now = this.clock.now().getTime();
+        const now = this.tick();
         const entry = this.live(key, now);
         if (!entry || entry.count < this.options.limit)
             return null;
@@ -48,14 +54,39 @@ export class RateLimiter {
     }
     /** How much of `key`'s budget the current window has already spent; 0 once it has rolled. */
     spent(key) {
-        return this.live(key, this.clock.now().getTime())?.count ?? 0;
+        return this.live(key, this.tick())?.count ?? 0;
     }
-    /** The window `key` is spending from, or undefined once it has rolled or was never opened. */
+    /**
+     * Milliseconds on a clock that only moves forward, accumulated from the wall clock's forward steps.
+     *
+     * Production passes the wall clock, which NTP can step backwards. Measured directly, a step back
+     * would give new windows an earlier start than older ones already at the head, breaking the
+     * eviction order, and make elapsed time negative, keeping spent windows alive past `windowMs`.
+     * A backward step here just pauses the limiter's time until the wall clock moves forward again.
+     */
+    tick() {
+        const wall = this.clock.now().getTime();
+        if (wall > this.lastWall)
+            this.elapsed += wall - this.lastWall;
+        this.lastWall = wall;
+        return this.elapsed;
+    }
+    /**
+     * The window `key` is spending from, or undefined once it has rolled or was never opened.
+     *
+     * A rolled window is removed here rather than overwritten later: Map#set keeps an existing key's
+     * insertion position, so overwriting would leave a fresh, possibly spent window at the head, first
+     * in line for eviction.
+     */
     live(key, now) {
         const entry = this.windows.get(key);
-        if (!entry || now - entry.windowStart >= this.options.windowMs)
-            return undefined;
-        return entry;
+        if (!entry || !this.expired(entry, now))
+            return entry;
+        this.windows.delete(key);
+        return undefined;
+    }
+    expired(entry, now) {
+        return now - entry.windowStart >= this.options.windowMs;
     }
     /** Whole seconds until `entry`'s window rolls, rounded up. */
     retryAfter(entry, now) {
@@ -74,13 +105,13 @@ export class RateLimiter {
             return;
         this.lastPrune = now;
         for (const [key, entry] of this.windows) {
-            if (now - entry.windowStart >= this.options.windowMs)
+            if (this.expired(entry, now))
                 this.windows.delete(key);
         }
     }
     /** Hard bound on residency, for windows too long for `prune` to be the only collector. */
     evictOldest() {
-        while (this.windows.size > MAX_KEYS) {
+        while (this.windows.size > this.maxKeys) {
             const oldest = this.windows.keys().next();
             if (oldest.done)
                 return;

package/dist/services/RateLimiter.js.map

@@ -1 +1 @@
-{"version":3,"file":"RateLimiter.js","sourceRoot":"","sources":["../../src/services/RateLimiter.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,QAAQ,GAAG,MAAM,CAAA;AAOvB;;;;GAIG;AACH,MAAM,OAAO,WAAW;IAKH,KAAK;IACL,OAAO;IALT,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAA;IACjD,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAA;IAE5C,YACmB,KAAY,EACZ,OAA4C;qBAD5C,KAAK;uBACL,OAAO;IACvB,CAAC;IAEJ,gGAAgG;IAChG,IAAI,CAAC,GAAW;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACf,IAAI,CAAC,WAAW,EAAE,CAAA;YAClB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QACzE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAA;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,4DAA4D;IAC5D,IAAI,CAAC,GAAW;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QAC3D,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACpC,CAAC;IAED,6FAA6F;IAC7F,KAAK,CAAC,GAAW;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;IAC/D,CAAC;IAED,8FAA8F;IACtF,IAAI,CAAC,GAAW,EAAE,GAAW;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACnC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAA;QAChF,OAAO,KAAK,CAAA;IACd,CAAC;IAED,8DAA8D;IACtD,UAAU,CAAC,KAAkB,EAAE,GAAW;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAC5E,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,GAAW;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAM;QACxD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAA;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChF,CAAC;IACH,CAAC;IAED,0FAA0F;IAClF,WAAW;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAA;YACzC,IAAI,MAAM,CAAC,IAAI;gBAAE,OAAM;YACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"RateLimiter.js","sourceRoot":"","sources":["../../src/services/RateLimiter.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAc/B;;;;GAIG;AACH,MAAM,OAAO,WAAW;IAQH,KAAK;IACL,OAAO;IART,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAA;IACxC,OAAO,CAAQ;IACxB,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAA;IACpC,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA;IACrB,OAAO,GAAG,CAAC,CAAA;IAEnB,YACmB,KAAY,EACZ,OAA2B;qBAD3B,KAAK;uBACL,OAAO;QAExB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAA;IACpD,CAAC;IAED,gGAAgG;IAChG,IAAI,CAAC,GAAW;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,2FAA2F;YAC3F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACf,IAAI,CAAC,WAAW,EAAE,CAAA;YAClB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QACzE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAA;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,4DAA4D;IAC5D,IAAI,CAAC,GAAW;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QAC3D,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACpC,CAAC;IAED,6FAA6F;IAC7F,KAAK,CAAC,GAAW;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,CAAA;IAChD,CAAC;IAED;;;;;;;OAOG;IACK,IAAI;QACV,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;QACvC,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,OAAO,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC9D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,OAAO,IAAI,CAAC,OAAO,CAAA;IACrB,CAAC;IAED;;;;;;OAMG;IACK,IAAI,CAAC,GAAW,EAAE,GAAW;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACnC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QACrD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IAEO,OAAO,CAAC,KAAkB,EAAE,GAAW;QAC7C,OAAO,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAA;IACzD,CAAC;IAED,8DAA8D;IACtD,UAAU,CAAC,KAAkB,EAAE,GAAW;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAC5E,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,GAAW;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAM;QACxD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAA;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACxD,CAAC;IACH,CAAC;IAED,0FAA0F;IAClF,WAAW;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAA;YACzC,IAAI,MAAM,CAAC,IAAI;gBAAE,OAAM;YACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chaos-overlords/kernel",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Runtime-neutral domain of the multiplayer server: entities, ports, pure turn logic and the lobby/turn/snapshot services.",
   "keywords": [
     "chaos-overlords",
@@ -52,7 +52,7 @@
     "provenance": true
   },
   "dependencies": {
-    "@chaos-overlords/contracts": "0.9.0"
+    "@chaos-overlords/contracts": "0.9.1"
   },
   "devDependencies": {
     "typescript": "^7.0.2",