@flytedesk/app-kit 0.0.1 → 0.1.1

package/dist/cli/trace-sync.js

@@ -0,0 +1,362 @@
+#!/usr/bin/env node
+/**
+ * trace-sync — the CLI half of @flytedesk/app-kit/trace (DEC-39).
+ *
+ * This package never generates its own Prisma Client. Instead this CLI copies
+ * prisma/fragments/trace.prisma into the *consumer's* own multi-file Prisma
+ * schema folder, applies the raw SQL migration directly against the consumer's
+ * configured datasource, and tracks what's been applied in a lock file
+ * (`.app-kit-trace.lock.json`) written at the consumer project root. The
+ * consumer's own `prisma generate` then produces one client that includes these
+ * models alongside their own.
+ *
+ * Subcommands:
+ *   trace-sync init    copy fragment + migration in, run `prisma validate` and
+ *                       `prisma db execute`, write the lock file.
+ *   trace-sync diff     read-only: compare this package's bundled fragment
+ *                       version / migration manifest against the consumer's lock
+ *                       file and report what's pending. Never applies anything.
+ *   trace-sync apply    apply pending migrations + refresh the fragment copy,
+ *                       update the lock file. Does not re-run `prisma validate`
+ *                       against a fresh init — use `init` for first install.
+ *   trace-sync status   read-only report: fragment version, applied migrations,
+ *                       and whether the consumer's copy of the fragment has been
+ *                       hand-edited (checksum mismatch).
+ *
+ * This is a real, runnable CLI — it shells out to the consumer's local `prisma`
+ * via `npx` and touches the consumer's real filesystem — not a stub.
+ */
+import { createHash } from "node:crypto";
+import spawn from "cross-spawn";
+import { copyFileSync, cpSync, existsSync, mkdirSync, readFileSync, writeFileSync, } from "node:fs";
+import path from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+// ---------------------------------------------------------------------------
+// Package-relative paths
+// ---------------------------------------------------------------------------
+/** Root of the installed @flytedesk/app-kit package (two levels up from
+ *  dist/cli/trace-sync.js — this file, once built). */
+const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "..");
+const fragmentSrcPath = path.join(packageRoot, "prisma", "fragments", "trace.prisma");
+const fragmentMetaPath = path.join(packageRoot, "prisma", "fragments", "trace.meta.json");
+const migrationsSrcDir = path.join(packageRoot, "prisma", "migrations");
+const manifestSrcPath = path.join(migrationsSrcDir, "manifest.json");
+const LOCK_FILE_NAME = ".app-kit-trace.lock.json";
+class TraceSyncError extends Error {
+}
+function fail(message) {
+    console.error(`trace-sync: ${message}`);
+    process.exitCode = 1;
+    throw new TraceSyncError(message);
+}
+function readJson(filePath) {
+    return JSON.parse(readFileSync(filePath, "utf8"));
+}
+function sha256(content) {
+    return `sha256:${createHash("sha256").update(content).digest("hex")}`;
+}
+function sha256File(filePath) {
+    return sha256(readFileSync(filePath));
+}
+function readFragmentMeta() {
+    return readJson(fragmentMetaPath);
+}
+function readManifest() {
+    return readJson(manifestSrcPath);
+}
+function lockFilePath(consumerRoot) {
+    return path.join(consumerRoot, LOCK_FILE_NAME);
+}
+function readLockFile(consumerRoot) {
+    const p = lockFilePath(consumerRoot);
+    if (!existsSync(p))
+        return null;
+    return readJson(p);
+}
+function writeLockFile(consumerRoot, lock) {
+    writeFileSync(lockFilePath(consumerRoot), `${JSON.stringify(lock, null, 2)}\n`, "utf8");
+}
+// ---------------------------------------------------------------------------
+// Locating the consumer's Prisma schema folder via their prisma.config.ts
+// ---------------------------------------------------------------------------
+const CONSUMER_CONFIG_CANDIDATES = [
+    "prisma.config.ts",
+    "prisma.config.mts",
+    "prisma.config.js",
+    "prisma.config.mjs",
+];
+function findConsumerConfigFile(consumerRoot) {
+    for (const candidate of CONSUMER_CONFIG_CANDIDATES) {
+        const p = path.join(consumerRoot, candidate);
+        if (existsSync(p))
+            return p;
+    }
+    fail(`could not find a prisma.config.{ts,mts,js,mjs} in ${consumerRoot}. ` +
+        `trace-sync reads this file to find your Prisma schema folder — it does not assume a path.`);
+}
+/**
+ * Best-effort read of the consumer's `schema` setting out of their
+ * prisma.config.ts default export. Supports the shapes Prisma's config API has
+ * used: a bare string path (file or folder), or `{ path: string }`. Relies on
+ * Node's native TypeScript type-stripping (unflagged as of the Node 24 baseline
+ * this package requires) to import a .ts file directly — if the consumer's
+ * config uses syntax that isn't erasable (enums, namespaces, parameter
+ * properties, etc.) this import will fail, and that failure is surfaced as-is
+ * rather than swallowed.
+ */
+async function loadConsumerSchemaPath(consumerRoot) {
+    const configFile = findConsumerConfigFile(consumerRoot);
+    let mod;
+    try {
+        mod = await import(pathToFileURL(configFile).href);
+    }
+    catch (err) {
+        fail(`failed to load ${configFile}: ${err.message}\n` +
+            `If this config file uses TypeScript syntax that Node can't type-strip natively ` +
+            `(enums, namespaces, decorators, ...), trace-sync can't import it directly.`);
+    }
+    const config = mod.default ?? mod;
+    const schema = config?.schema;
+    let schemaPath;
+    if (typeof schema === "string") {
+        schemaPath = schema;
+    }
+    else if (schema &&
+        typeof schema === "object" &&
+        typeof schema.path === "string") {
+        schemaPath = schema.path;
+    }
+    if (!schemaPath) {
+        fail(`could not find a "schema" path in ${configFile}'s default export. ` +
+            `Expected \`defineConfig({ schema: "prisma/schema" })\` (or a { path } object).`);
+    }
+    return path.resolve(path.dirname(configFile), schemaPath);
+}
+/** Resolve the folder trace.prisma gets copied into, from the config's schema
+ *  path (which may point at the folder itself, or at a single schema file
+ *  inside it, e.g. "prisma/schema.prisma"). */
+function resolveSchemaFolder(schemaPath) {
+    if (schemaPath.endsWith(".prisma")) {
+        return path.dirname(schemaPath);
+    }
+    return schemaPath;
+}
+/** The conventional "prisma root" a schema folder sits under, used to locate
+ *  (or create) the sibling `migrations/` directory. For the common multi-file
+ *  layout `prisma/schema/*.prisma`, that's `prisma/`; for a flat
+ *  `prisma/schema.prisma` layout, `resolveSchemaFolder` already returned
+ *  `prisma/`, so this is a no-op. */
+function resolvePrismaRoot(schemaFolder) {
+    return path.basename(schemaFolder) === "schema"
+        ? path.dirname(schemaFolder)
+        : schemaFolder;
+}
+// ---------------------------------------------------------------------------
+// Shelling out to the consumer's local `prisma`
+// ---------------------------------------------------------------------------
+function runPrisma(args, cwd) {
+    // On Windows, npx resolves to npx.cmd, a shell script — node:child_process's
+    // spawnSync can't exec it directly (EINVAL) without shell:true, and shell:true
+    // with an argument array is an unescaped-concatenation footgun (path arguments
+    // here can contain spaces). cross-spawn resolves and correctly quotes .cmd/.bat
+    // executables on Windows without going through a shell at all.
+    const result = spawn.sync("npx", ["prisma", ...args], { cwd, stdio: "inherit" });
+    if (result.error) {
+        fail(`failed to run "npx prisma ${args.join(" ")}": ${result.error.message}`);
+    }
+    if (result.status !== 0) {
+        fail(`"npx prisma ${args.join(" ")}" exited with code ${result.status}`);
+    }
+}
+// ---------------------------------------------------------------------------
+// File copying
+// ---------------------------------------------------------------------------
+function copyFragment(schemaFolder) {
+    mkdirSync(schemaFolder, { recursive: true });
+    copyFileSync(fragmentSrcPath, path.join(schemaFolder, "trace.prisma"));
+}
+function copyMigration(migrationId, migrationsDestDir) {
+    const srcDir = path.join(migrationsSrcDir, migrationId);
+    const destDir = path.join(migrationsDestDir, migrationId);
+    mkdirSync(destDir, { recursive: true });
+    cpSync(srcDir, destDir, { recursive: true });
+}
+// ---------------------------------------------------------------------------
+// Subcommands
+// ---------------------------------------------------------------------------
+async function cmdInit(consumerRoot) {
+    const schemaPath = await loadConsumerSchemaPath(consumerRoot);
+    const schemaFolder = resolveSchemaFolder(schemaPath);
+    const prismaRoot = resolvePrismaRoot(schemaFolder);
+    const migrationsDestDir = path.join(prismaRoot, "migrations");
+    console.log(`trace-sync: copying trace.prisma into ${schemaFolder}`);
+    copyFragment(schemaFolder);
+    console.log(`trace-sync: running "npx prisma validate" against ${consumerRoot}`);
+    runPrisma(["validate"], consumerRoot);
+    const manifest = readManifest();
+    const appliedMigrations = [];
+    for (const entry of manifest) {
+        console.log(`trace-sync: copying migration ${entry.id} into ${migrationsDestDir}`);
+        copyMigration(entry.id, migrationsDestDir);
+        const migrationSqlPath = path.join(migrationsDestDir, entry.id, "migration.sql");
+        console.log(`trace-sync: applying ${entry.id} via "npx prisma db execute"`);
+        runPrisma(["db", "execute", "--file", migrationSqlPath, "--schema", schemaFolder], consumerRoot);
+        appliedMigrations.push(entry.id);
+    }
+    const meta = readFragmentMeta();
+    writeLockFile(consumerRoot, {
+        fragmentVersion: meta.fragmentVersion,
+        fragmentChecksum: sha256File(fragmentSrcPath),
+        appliedMigrations,
+        lastSyncedAt: new Date().toISOString(),
+    });
+    console.log(`trace-sync: wrote ${lockFilePath(consumerRoot)}`);
+    console.log("trace-sync: init complete.");
+}
+function computePending(consumerRoot) {
+    const lock = readLockFile(consumerRoot);
+    if (!lock) {
+        fail(`no ${LOCK_FILE_NAME} found at ${consumerRoot}. Run "trace-sync init" first.`);
+    }
+    const meta = readFragmentMeta();
+    const manifest = readManifest();
+    const applied = new Set(lock.appliedMigrations);
+    const pendingMigrations = manifest.filter((entry) => !applied.has(entry.id));
+    return {
+        fragmentVersionCurrent: meta.fragmentVersion,
+        fragmentVersionInstalled: lock.fragmentVersion,
+        fragmentVersionChanged: meta.fragmentVersion !== lock.fragmentVersion,
+        pendingMigrations,
+    };
+}
+function cmdDiff(consumerRoot) {
+    const report = computePending(consumerRoot);
+    if (report.fragmentVersionChanged) {
+        console.log(`fragment version: ${report.fragmentVersionInstalled} -> ${report.fragmentVersionCurrent} (changed)`);
+    }
+    else {
+        console.log(`fragment version: ${report.fragmentVersionCurrent} (up to date)`);
+    }
+    if (report.pendingMigrations.length === 0) {
+        console.log("migrations: up to date, nothing pending.");
+        return;
+    }
+    console.log(`migrations: ${report.pendingMigrations.length} pending:`);
+    for (const entry of report.pendingMigrations) {
+        console.log(`  - ${entry.id} (introduced in fragment ${entry.introducedInFragmentVersion})`);
+    }
+    console.log('trace-sync diff is read-only. Run "trace-sync apply" to apply these.');
+}
+async function cmdApply(consumerRoot) {
+    const report = computePending(consumerRoot);
+    const schemaPath = await loadConsumerSchemaPath(consumerRoot);
+    const schemaFolder = resolveSchemaFolder(schemaPath);
+    const prismaRoot = resolvePrismaRoot(schemaFolder);
+    const migrationsDestDir = path.join(prismaRoot, "migrations");
+    console.log(`trace-sync: refreshing trace.prisma in ${schemaFolder}`);
+    copyFragment(schemaFolder);
+    const lock = readLockFile(consumerRoot);
+    if (!lock) {
+        fail(`no ${LOCK_FILE_NAME} found at ${consumerRoot}. Run "trace-sync init" first.`);
+    }
+    const appliedMigrations = [...lock.appliedMigrations];
+    if (report.pendingMigrations.length === 0) {
+        console.log("trace-sync: no pending migrations to apply.");
+    }
+    for (const entry of report.pendingMigrations) {
+        console.log(`trace-sync: copying migration ${entry.id} into ${migrationsDestDir}`);
+        copyMigration(entry.id, migrationsDestDir);
+        const migrationSqlPath = path.join(migrationsDestDir, entry.id, "migration.sql");
+        console.log(`trace-sync: applying ${entry.id} via "npx prisma db execute"`);
+        runPrisma(["db", "execute", "--file", migrationSqlPath, "--schema", schemaFolder], consumerRoot);
+        appliedMigrations.push(entry.id);
+    }
+    const meta = readFragmentMeta();
+    writeLockFile(consumerRoot, {
+        fragmentVersion: meta.fragmentVersion,
+        fragmentChecksum: sha256File(fragmentSrcPath),
+        appliedMigrations,
+        lastSyncedAt: new Date().toISOString(),
+    });
+    console.log(`trace-sync: wrote ${lockFilePath(consumerRoot)}`);
+    console.log("trace-sync: apply complete.");
+}
+async function cmdStatus(consumerRoot) {
+    const lock = readLockFile(consumerRoot);
+    if (!lock) {
+        console.log(`no ${LOCK_FILE_NAME} found at ${consumerRoot}. Not yet initialized — run "trace-sync init".`);
+        return;
+    }
+    console.log(`fragment version (installed):  ${lock.fragmentVersion}`);
+    console.log(`fragment version (package):    ${readFragmentMeta().fragmentVersion}`);
+    console.log(`last synced:                   ${lock.lastSyncedAt}`);
+    console.log(`applied migrations (${lock.appliedMigrations.length}):`);
+    for (const id of lock.appliedMigrations) {
+        console.log(`  - ${id}`);
+    }
+    try {
+        const schemaPath = await loadConsumerSchemaPath(consumerRoot);
+        const schemaFolder = resolveSchemaFolder(schemaPath);
+        const copiedFragmentPath = path.join(schemaFolder, "trace.prisma");
+        if (!existsSync(copiedFragmentPath)) {
+            console.log(`fragment copy:                 MISSING at ${copiedFragmentPath}`);
+            return;
+        }
+        const installedChecksum = sha256File(copiedFragmentPath);
+        if (installedChecksum === lock.fragmentChecksum) {
+            console.log("fragment copy:                 unmodified");
+        }
+        else {
+            console.log(`fragment copy:                 CHECKSUM MISMATCH — ${copiedFragmentPath} has been hand-edited ` +
+                `(or is out of sync with the lock file)`);
+        }
+    }
+    catch (err) {
+        console.log(`fragment copy:                 could not verify (${err.message})`);
+    }
+}
+// ---------------------------------------------------------------------------
+// Entry point
+// ---------------------------------------------------------------------------
+const SUBCOMMANDS = ["init", "diff", "apply", "status"];
+function isSubcommand(value) {
+    return SUBCOMMANDS.includes(value);
+}
+export async function main(argv) {
+    const [subcommand, ...rest] = argv;
+    if (!isSubcommand(subcommand)) {
+        console.error(`usage: trace-sync <${SUBCOMMANDS.join("|")}>`);
+        process.exitCode = 1;
+        return;
+    }
+    // Reserved for a future --cwd override; today trace-sync always operates on
+    // the directory it's invoked from, which is how `npx trace-sync ...` /
+    // an npm script in the consumer's own package.json will run it.
+    void rest;
+    const consumerRoot = process.cwd();
+    switch (subcommand) {
+        case "init":
+            await cmdInit(consumerRoot);
+            break;
+        case "diff":
+            cmdDiff(consumerRoot);
+            break;
+        case "apply":
+            await cmdApply(consumerRoot);
+            break;
+        case "status":
+            await cmdStatus(consumerRoot);
+            break;
+    }
+}
+const isMainModule = process.argv[1] !== undefined &&
+    import.meta.url === pathToFileURL(process.argv[1]).href;
+if (isMainModule) {
+    main(process.argv.slice(2)).catch((err) => {
+        if (!(err instanceof TraceSyncError)) {
+            console.error(err);
+        }
+        process.exitCode = process.exitCode ?? 1;
+    });
+}
+//# sourceMappingURL=trace-sync.js.map

package/dist/cli/trace-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-sync.js","sourceRoot":"","sources":["../../src/cli/trace-sync.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,MAAM,aAAa,CAAC;AAChC,OAAO,EACL,YAAY,EACZ,MAAM,EACN,UAAU,EACV,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAExD,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E;uDACuD;AACvD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAC9B,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,IAAI,EACJ,IAAI,CACL,CAAC;AAEF,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAC/B,WAAW,EACX,QAAQ,EACR,WAAW,EACX,cAAc,CACf,CAAC;AACF,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAChC,WAAW,EACX,QAAQ,EACR,WAAW,EACX,iBAAiB,CAClB,CAAC;AACF,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACxE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;AAErE,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAyBlD,MAAM,cAAe,SAAQ,KAAK;CAAG;AAErC,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,CAAC,KAAK,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACrB,MAAM,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CAAI,QAAgB;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAM,CAAC;AACzD,CAAC;AAED,SAAS,MAAM,CAAC,OAAwB;IACtC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,QAAQ,CAAe,gBAAgB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,QAAQ,CAA2B,eAAe,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB;IACxC,MAAM,CAAC,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,QAAQ,CAAW,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,aAAa,CAAC,YAAoB,EAAE,IAAc;IACzD,aAAa,CACX,YAAY,CAAC,YAAY,CAAC,EAC1B,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACpC,MAAM,CACP,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E,MAAM,0BAA0B,GAAG;IACjC,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,mBAAmB;CACpB,CAAC;AAEF,SAAS,sBAAsB,CAAC,YAAoB;IAClD,KAAK,MAAM,SAAS,IAAI,0BAA0B,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,CACF,qDAAqD,YAAY,IAAI;QACnE,2FAA2F,CAC9F,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,sBAAsB,CAAC,YAAoB;IACxD,MAAM,UAAU,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACxD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CACF,kBAAkB,UAAU,KAAM,GAAa,CAAC,OAAO,IAAI;YACzD,iFAAiF;YACjF,4EAA4E,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAI,GAA6B,CAAC,OAAO,IAAI,GAAG,CAAC;IAC7D,MAAM,MAAM,GAAI,MAA2C,EAAE,MAAM,CAAC;IAEpE,IAAI,UAA8B,CAAC;IACnC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;SAAM,IACL,MAAM;QACN,OAAO,MAAM,KAAK,QAAQ;QAC1B,OAAQ,MAA6B,CAAC,IAAI,KAAK,QAAQ,EACvD,CAAC;QACD,UAAU,GAAI,MAA2B,CAAC,IAAI,CAAC;IACjD,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CACF,qCAAqC,UAAU,qBAAqB;YAClE,gFAAgF,CACnF,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;AAC5D,CAAC;AAED;;+CAE+C;AAC/C,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;qCAIqC;AACrC,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,QAAQ;QAC7C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QAC5B,CAAC,CAAC,YAAY,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,SAAS,SAAS,CAAC,IAAc,EAAE,GAAW;IAC5C,6EAA6E;IAC7E,+EAA+E;IAC/E,+EAA+E;IAC/E,gFAAgF;IAChF,+DAA+D;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CACF,6BAA6B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACxE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,SAAS,YAAY,CAAC,YAAoB;IACxC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB,EAAE,iBAAyB;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAC1D,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,KAAK,UAAU,OAAO,CAAC,YAAoB;IACzC,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAE9D,OAAO,CAAC,GAAG,CAAC,yCAAyC,YAAY,EAAE,CAAC,CAAC;IACrE,YAAY,CAAC,YAAY,CAAC,CAAC;IAE3B,OAAO,CAAC,GAAG,CACT,qDAAqD,YAAY,EAAE,CACpE,CAAC;IACF,SAAS,CAAC,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;IAEtC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CACT,iCAAiC,KAAK,CAAC,EAAE,SAAS,iBAAiB,EAAE,CACtE,CAAC;QACF,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAE3C,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAChC,iBAAiB,EACjB,KAAK,CAAC,EAAE,EACR,eAAe,CAChB,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,CAAC,EAAE,8BAA8B,CAAC,CAAC;QAC5E,SAAS,CACP,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,CAAC,EACvE,YAAY,CACb,CAAC;QACF,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,aAAa,CAAC,YAAY,EAAE;QAC1B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,gBAAgB,EAAE,UAAU,CAAC,eAAe,CAAC;QAC7C,iBAAiB;QACjB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACvC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,qBAAqB,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAC5C,CAAC;AASD,SAAS,cAAc,CAAC,YAAoB;IAC1C,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CACF,MAAM,cAAc,aAAa,YAAY,gCAAgC,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7E,OAAO;QACL,sBAAsB,EAAE,IAAI,CAAC,eAAe;QAC5C,wBAAwB,EAAE,IAAI,CAAC,eAAe;QAC9C,sBAAsB,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe;QACrE,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,YAAoB;IACnC,MAAM,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAE5C,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CACT,qBAAqB,MAAM,CAAC,wBAAwB,OAAO,MAAM,CAAC,sBAAsB,YAAY,CACrG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,qBAAqB,MAAM,CAAC,sBAAsB,eAAe,CAClE,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,iBAAiB,CAAC,MAAM,WAAW,CAAC,CAAC;IACvE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CACT,OAAO,KAAK,CAAC,EAAE,4BAA4B,KAAK,CAAC,2BAA2B,GAAG,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CACT,sEAAsE,CACvE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,YAAoB;IAC1C,MAAM,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAE9D,OAAO,CAAC,GAAG,CAAC,0CAA0C,YAAY,EAAE,CAAC,CAAC;IACtE,YAAY,CAAC,YAAY,CAAC,CAAC;IAE3B,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CACF,MAAM,cAAc,aAAa,YAAY,gCAAgC,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAEtD,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CACT,iCAAiC,KAAK,CAAC,EAAE,SAAS,iBAAiB,EAAE,CACtE,CAAC;QACF,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAE3C,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAChC,iBAAiB,EACjB,KAAK,CAAC,EAAE,EACR,eAAe,CAChB,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,CAAC,EAAE,8BAA8B,CAAC,CAAC;QAC5E,SAAS,CACP,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,CAAC,EACvE,YAAY,CACb,CAAC;QACF,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,aAAa,CAAC,YAAY,EAAE;QAC1B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,gBAAgB,EAAE,UAAU,CAAC,eAAe,CAAC;QAC7C,iBAAiB;QACjB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACvC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,qBAAqB,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,YAAoB;IAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CACT,MAAM,cAAc,aAAa,YAAY,gDAAgD,CAC9F,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CACT,kCAAkC,gBAAgB,EAAE,CAAC,eAAe,EAAE,CACvE,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,iBAAiB,CAAC,MAAM,IAAI,CAAC,CAAC;IACtE,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CACT,6CAA6C,kBAAkB,EAAE,CAClE,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,iBAAiB,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACzD,IAAI,iBAAiB,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,sDAAsD,kBAAkB,wBAAwB;gBAC9F,wCAAwC,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CACT,oDAAqD,GAAa,CAAC,OAAO,GAAG,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAGjE,SAAS,YAAY,CAAC,KAAyB;IAC7C,OAAO,WAAW,CAAC,QAAQ,CAAC,KAAmB,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACvC,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACnC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,sBAAsB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,gEAAgE;IAChE,KAAK,IAAI,CAAC;IACV,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEnC,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5B,MAAM;QACR,KAAK,MAAM;YACT,OAAO,CAAC,YAAY,CAAC,CAAC;YACtB,MAAM;QACR,KAAK,OAAO;YACV,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC7B,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC;YAC9B,MAAM;IACV,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;IAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAE1D,IAAI,YAAY,EAAE,CAAC;IACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACjD,IAAI,CAAC,CAAC,GAAG,YAAY,cAAc,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/rate-limit/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * In-memory-by-default Fastify rate-limit plugin (DEC-48). See ./plugin.ts
+ * for the scoping model and ./store.ts for the storage seam.
+ */
+export { rateLimit, type RateLimitOptions } from "./plugin.js";
+export { MemoryRateLimitStore, type RateLimitStore, type RateLimitStoreResult, } from "./store.js";

package/dist/rate-limit/index.js

@@ -0,0 +1,7 @@
+/**
+ * In-memory-by-default Fastify rate-limit plugin (DEC-48). See ./plugin.ts
+ * for the scoping model and ./store.ts for the storage seam.
+ */
+export { rateLimit } from "./plugin.js";
+export { MemoryRateLimitStore, } from "./store.js";
+//# sourceMappingURL=index.js.map

package/dist/rate-limit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rate-limit/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAyB,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,oBAAoB,GAGrB,MAAM,YAAY,CAAC"}

package/dist/rate-limit/plugin.d.ts

@@ -0,0 +1,23 @@
+import type { FastifyPluginAsync, FastifyReply, FastifyRequest } from "fastify";
+export interface RateLimitOptions {
+    /** Length of the rate-limit window in ms. Default 60_000 (1 minute). */
+    windowMs?: number;
+    /** Max requests allowed per key within `windowMs`. Default 100. */
+    max?: number;
+    /**
+     * Derives the bucket key for a request. Default: `request.ip`. Pass a
+     * custom function for e.g. per-user limiting once `request.authUser`
+     * exists (from the /auth module) — a common choice is
+     * `(request) => request.authUser?.id ?? request.ip`.
+     */
+    keyGenerator?: (request: FastifyRequest) => string;
+    /** Return true to bypass rate limiting entirely for a request. Default: never skip. */
+    skip?: (request: FastifyRequest) => boolean;
+    /**
+     * Called instead of the default response when a request exceeds its
+     * limit. Responsible for sending the reply itself. Default: sends a 429
+     * with `Retry-After` and a JSON body (see below).
+     */
+    onLimitExceeded?: (request: FastifyRequest, reply: FastifyReply) => void;
+}
+export declare const rateLimit: FastifyPluginAsync<RateLimitOptions>;

package/dist/rate-limit/plugin.js

@@ -0,0 +1,75 @@
+import fp from "fastify-plugin";
+import { MemoryRateLimitStore } from "./store.js";
+const DEFAULT_WINDOW_MS = 60_000;
+const DEFAULT_MAX = 100;
+function defaultKeyGenerator(request) {
+    return request.ip;
+}
+function neverSkip() {
+    return false;
+}
+/**
+ * In-memory-by-default rate-limit plugin (DEC-48). No new infra (no
+ * Redis/Memorystore) — consistent with this platform's real traffic volume
+ * (~20 total users, bursty, idle overnight; DEC-37), where a per-instance
+ * counter is more than enough headroom.
+ *
+ * Scoping: this plugin is wrapped with `fastify-plugin` so that, when
+ * registered, it adds its hook to the *current* encapsulation context
+ * instead of an isolated child context. That means:
+ *  - `fastify.register(rateLimit, opts)` at the top level applies globally.
+ *  - Registering it inside a normal (non-fp) sub-plugin/prefixed scope
+ *    applies it only to routes in that scope, via Fastify's own
+ *    encapsulation — e.g.:
+ *
+ *      fastify.register(async (scoped) => {
+ *        await scoped.register(rateLimit, { max: 5 });
+ *        scoped.get("/expensive", handler);
+ *      }, { prefix: "/api" });
+ *
+ *    `/expensive` is limited; routes registered outside that scope are not.
+ *    This is why the plugin does not implement its own per-route config —
+ *    Fastify's encapsulation already provides it, and building a parallel
+ *    mechanism would just be two ways to do the same thing.
+ */
+const rateLimitPlugin = async (fastify, opts) => {
+    const windowMs = opts.windowMs ?? DEFAULT_WINDOW_MS;
+    const max = opts.max ?? DEFAULT_MAX;
+    const keyGenerator = opts.keyGenerator ?? defaultKeyGenerator;
+    const skip = opts.skip ?? neverSkip;
+    const onLimitExceeded = opts.onLimitExceeded;
+    // Swapping this for a Postgres- or Redis-backed RateLimitStore later is
+    // the only line that needs to change — the rest of the plugin only knows
+    // about the RateLimitStore interface.
+    const store = new MemoryRateLimitStore();
+    fastify.addHook("onClose", (_instance, done) => {
+        store.close?.();
+        done();
+    });
+    fastify.addHook("onRequest", async (request, reply) => {
+        if (skip(request)) {
+            return;
+        }
+        const key = keyGenerator(request);
+        const { count, resetAt } = store.increment(key, windowMs);
+        reply.header("RateLimit-Limit", max);
+        reply.header("RateLimit-Remaining", Math.max(0, max - count));
+        reply.header("RateLimit-Reset", Math.ceil((resetAt - Date.now()) / 1000));
+        if (count <= max) {
+            return;
+        }
+        if (onLimitExceeded) {
+            onLimitExceeded(request, reply);
+            return;
+        }
+        const retryAfterSeconds = Math.max(1, Math.ceil((resetAt - Date.now()) / 1000));
+        reply
+            .code(429)
+            .header("Retry-After", retryAfterSeconds)
+            .send({ error: "Too Many Requests", code: "rate_limited" });
+    });
+};
+export const rateLimit = fp(rateLimitPlugin, {
+    name: "@flytedesk/app-kit/rate-limit",
+});
+//# sourceMappingURL=plugin.js.map

package/dist/rate-limit/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/rate-limit/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEhC,OAAO,EAAE,oBAAoB,EAAuB,MAAM,YAAY,CAAC;AAwBvE,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,SAAS,mBAAmB,CAAC,OAAuB;IAClD,OAAO,OAAO,CAAC,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,eAAe,GAAyC,KAAK,EACjE,OAAO,EACP,IAAI,EACJ,EAAE;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC;IACpC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;IACpC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAE7C,wEAAwE;IACxE,yEAAyE;IACzE,sCAAsC;IACtC,MAAM,KAAK,GAAmB,IAAI,oBAAoB,EAAE,CAAC;IAEzD,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE;QAC7C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAE1D,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QACrC,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAE1E,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,eAAe,EAAE,CAAC;YACpB,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAChC,CAAC,EACD,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CACzC,CAAC;QACF,KAAK;aACF,IAAI,CAAC,GAAG,CAAC;aACT,MAAM,CAAC,aAAa,EAAE,iBAAiB,CAAC;aACxC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,eAAe,EAAE;IAC3C,IAAI,EAAE,+BAA+B;CACtC,CAAC,CAAC"}

package/dist/rate-limit/store.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Storage backend for the rate limiter, kept behind a narrow interface so the
+ * default in-memory implementation can be swapped for a Postgres- or
+ * Redis-backed store later (per DEC-48: per-instance memory is a deliberate
+ * v1 choice, not a permanent ceiling) without touching the plugin's public
+ * API in ./plugin.ts.
+ */
+export interface RateLimitStoreResult {
+    /** Number of requests recorded for this key in the current window, including this one. */
+    count: number;
+    /** Epoch ms at which the current window ends and the count resets. */
+    resetAt: number;
+}
+export interface RateLimitStore {
+    /**
+     * Record one request for `key` and return the up-to-date count for the
+     * window it falls in, opening a fresh window if none is active.
+     */
+    increment(key: string, windowMs: number): RateLimitStoreResult;
+    /** Release any resources held by the store (e.g. sweep timers). */
+    close?(): void;
+}
+/**
+ * Fixed-window counter store: each key gets a counter that resets `windowMs`
+ * after its first request in the window, rather than a true sliding window
+ * or token bucket. Chosen over those because:
+ *  - the shape (count + resetAt per key) is trivial to reason about, test
+ *    with fake timers, and eventually reimplement against Postgres/Redis
+ *    with a single row per key (an `INCR`-style upsert);
+ *  - a true sliding window needs a timestamp log (or a weighted two-window
+ *    approximation) purely to smooth boundary bursts — at this platform's
+ *    real traffic volume (~20 total users, bursty, idle overnight, per
+ *    DEC-37) that precision buys nothing and isn't worth the extra state;
+ *  - a token bucket adds a refill-rate concept for the same "protect
+ *    against bursts" goal this traffic profile doesn't need.
+ *
+ * Expiry is primarily lazy: `increment` checks each key's `resetAt` on
+ * access and starts a fresh window once it has passed, so a key is never
+ * read with stale data. The periodic sweep below is only a backstop to
+ * reclaim memory for keys that stop being requested entirely (so they
+ * aren't touched by the lazy check again) — it is not required for
+ * correctness.
+ */
+export declare class MemoryRateLimitStore implements RateLimitStore {
+    private readonly entries;
+    private readonly sweepTimer;
+    constructor(sweepIntervalMs?: number);
+    increment(key: string, windowMs: number): RateLimitStoreResult;
+    private sweep;
+    close(): void;
+}

package/dist/rate-limit/store.js

@@ -0,0 +1,59 @@
+// Backstop sweep interval for reclaiming memory from keys that are never
+// requested again (e.g. a one-off client IP). Kept coarse and infrequent
+// since this platform's real traffic (~20 users, bursty, idle overnight —
+// DEC-37) never produces enough distinct keys for the Map to matter between
+// sweeps.
+const DEFAULT_SWEEP_INTERVAL_MS = 5 * 60_000;
+/**
+ * Fixed-window counter store: each key gets a counter that resets `windowMs`
+ * after its first request in the window, rather than a true sliding window
+ * or token bucket. Chosen over those because:
+ *  - the shape (count + resetAt per key) is trivial to reason about, test
+ *    with fake timers, and eventually reimplement against Postgres/Redis
+ *    with a single row per key (an `INCR`-style upsert);
+ *  - a true sliding window needs a timestamp log (or a weighted two-window
+ *    approximation) purely to smooth boundary bursts — at this platform's
+ *    real traffic volume (~20 total users, bursty, idle overnight, per
+ *    DEC-37) that precision buys nothing and isn't worth the extra state;
+ *  - a token bucket adds a refill-rate concept for the same "protect
+ *    against bursts" goal this traffic profile doesn't need.
+ *
+ * Expiry is primarily lazy: `increment` checks each key's `resetAt` on
+ * access and starts a fresh window once it has passed, so a key is never
+ * read with stale data. The periodic sweep below is only a backstop to
+ * reclaim memory for keys that stop being requested entirely (so they
+ * aren't touched by the lazy check again) — it is not required for
+ * correctness.
+ */
+export class MemoryRateLimitStore {
+    entries = new Map();
+    sweepTimer;
+    constructor(sweepIntervalMs = DEFAULT_SWEEP_INTERVAL_MS) {
+        this.sweepTimer = setInterval(() => this.sweep(), sweepIntervalMs);
+        // Never keep the process (or a test runner) alive just for the sweep.
+        this.sweepTimer.unref();
+    }
+    increment(key, windowMs) {
+        const now = Date.now();
+        const existing = this.entries.get(key);
+        if (existing && existing.resetAt > now) {
+            existing.count += 1;
+            return { count: existing.count, resetAt: existing.resetAt };
+        }
+        const entry = { count: 1, resetAt: now + windowMs };
+        this.entries.set(key, entry);
+        return { count: entry.count, resetAt: entry.resetAt };
+    }
+    sweep() {
+        const now = Date.now();
+        for (const [key, entry] of this.entries) {
+            if (entry.resetAt <= now) {
+                this.entries.delete(key);
+            }
+        }
+    }
+    close() {
+        clearInterval(this.sweepTimer);
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/rate-limit/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/rate-limit/store.ts"],"names":[],"mappings":"AA6BA,yEAAyE;AACzE,yEAAyE;AACzE,0EAA0E;AAC1E,4EAA4E;AAC5E,UAAU;AACV,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,oBAAoB;IACd,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IACnC,UAAU,CAAiC;IAE5D,YAAY,kBAA0B,yBAAyB;QAC7D,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,eAAe,CAAC,CAAC;QACnE,sEAAsE;QACtE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,SAAS,CAAC,GAAW,EAAE,QAAgB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;YACvC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;YACpB,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC9D,CAAC;QAED,MAAM,KAAK,GAAU,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACxD,CAAC;IAEO,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK;QACH,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;CACF"}

package/dist/trace/client.d.ts

@@ -0,0 +1,20 @@
+/**
+ * createTraceClient(prisma) — bundles the query helpers and captureError into one
+ * object bound to the consumer's PrismaClient (or any TracePrismaClient-shaped
+ * object), so call sites don't have to thread `prisma` through every call.
+ */
+import { type CaptureErrorOptions } from "./errors.js";
+import { type NewApiCallLogInput, type NewModelAuditInput, type NewTraceLinkInput, type NewTraceNodeInput } from "./queries.js";
+import type { ApiCallLogRow, ModelAuditRow, TraceLinkRow, TraceNodeRow, TracePrismaClient } from "./types.js";
+export interface TraceClient {
+    insertTraceNode(input: NewTraceNodeInput): Promise<TraceNodeRow>;
+    setTraceNodeRoot(id: bigint, rootId: bigint): Promise<TraceNodeRow>;
+    getTraceChainForRoot(rootId: bigint): Promise<TraceNodeRow[]>;
+    insertModelAudit(input: NewModelAuditInput): Promise<ModelAuditRow>;
+    getAuditHistoryForModel(modelType: string, modelId: string, limit?: number): Promise<ModelAuditRow[]>;
+    insertApiCallLog(input: NewApiCallLogInput): Promise<ApiCallLogRow>;
+    getRecentApiCallsForRoute(route: string, sinceMinutes?: number): Promise<ApiCallLogRow[]>;
+    insertTraceLink(input: NewTraceLinkInput): Promise<TraceLinkRow>;
+    captureError(options: CaptureErrorOptions): Promise<TraceNodeRow>;
+}
+export declare function createTraceClient(prisma: TracePrismaClient): TraceClient;