@guard-rail/core 0.9.1 → 0.11.0

package/dist/adapters/supabase/rateLimit.js

@@ -0,0 +1,37 @@
+import { adminClient, assertCredentials } from "./client";
+import { GR_SCHEMA } from "../../core/defs";
+import { memoryLimiter } from "../../server/rateLimit";
+function supabaseRateLimit(creds) {
+  assertCredentials(creds);
+  if (!creds.serviceRoleKey) return void 0;
+  let warned = false;
+  return async ({ name, key, limit, windowSeconds }) => {
+    const { data, error } = await adminClient(creds).schema(GR_SCHEMA).rpc("gr_rate_hit", {
+      p_name: name,
+      p_key: key,
+      p_limit: limit,
+      p_window_seconds: windowSeconds
+    });
+    if (error) {
+      if (error.code === "42883" || error.code === "PGRST202") {
+        if (!warned) {
+          warned = true;
+          console.warn(
+            "Guardrail (Supabase): the rate-limit function isn't installed, so limits are counted in memory. Run `pnpm exec guardrail-init-db --push` to add it."
+          );
+        }
+        return memoryLimiter({ name, key, limit, windowSeconds });
+      }
+      throw new Error(error.message);
+    }
+    const row = Array.isArray(data) ? data[0] : data;
+    return {
+      allowed: Boolean(row?.allowed),
+      retryAfterSeconds: Number(row?.retry_after_seconds) || void 0
+    };
+  };
+}
+export {
+  supabaseRateLimit
+};
+//# sourceMappingURL=rateLimit.js.map

package/dist/adapters/supabase/rateLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/adapters/supabase/rateLimit.ts"],"sourcesContent":["import { adminClient, assertCredentials, type SupabaseCredentials } from \"./client\";\nimport { GR_SCHEMA } from \"../../core/defs\";\nimport { memoryLimiter } from \"../../server/rateLimit\";\nimport type { GRRateLimiter } from \"../../core/adapter-types\";\n\n/**\n * Rate-limit counters in the project's own `guardrail` schema (see the\n * rate_limits migration), so a site gets limits that hold across serverless\n * instances with nothing extra to run. One database round trip per counted\n * attempt — slower than Redis, and fine at the rate people sign in.\n *\n * Needs the service-role key, because sign-in and \"Forgot password?\" have no\n * session to carry the call. Used automatically by supabaseAdapters() when\n * that key is present.\n *\n * Failure handling: if the migration hasn't been applied yet (the function\n * doesn't exist), this warns once and counts in memory instead — an upgrade\n * that forgot the migration shouldn't lock everyone out of signing in. Any\n * other database error throws, which blocks the request (fail closed).\n */\nexport function supabaseRateLimit(creds: SupabaseCredentials): GRRateLimiter | undefined {\n  assertCredentials(creds);\n  if (!creds.serviceRoleKey) return undefined;\n\n  let warned = false;\n  return async ({ name, key, limit, windowSeconds }) => {\n    const { data, error } = await adminClient(creds)\n      .schema(GR_SCHEMA)\n      .rpc(\"gr_rate_hit\", {\n        p_name: name,\n        p_key: key,\n        p_limit: limit,\n        p_window_seconds: windowSeconds,\n      });\n\n    if (error) {\n      // 42883 = function doesn't exist; PGRST202 = PostgREST can't find it.\n      if (error.code === \"42883\" || error.code === \"PGRST202\") {\n        if (!warned) {\n          warned = true;\n          console.warn(\n            \"Guardrail (Supabase): the rate-limit function isn't installed, so limits are counted in memory. Run `pnpm exec guardrail-init-db --push` to add it.\",\n          );\n        }\n        return memoryLimiter({ name, key, limit, windowSeconds });\n      }\n      throw new Error(error.message);\n    }\n\n    const row = Array.isArray(data) ? data[0] : data;\n    return {\n      allowed: Boolean(row?.allowed),\n      retryAfterSeconds: Number(row?.retry_after_seconds) || undefined,\n    };\n  };\n}\n"],"mappings":"AAAA,SAAS,aAAa,yBAAmD;AACzE,SAAS,iBAAiB;AAC1B,SAAS,qBAAqB;AAkBvB,SAAS,kBAAkB,OAAuD;AACvF,oBAAkB,KAAK;AACvB,MAAI,CAAC,MAAM,eAAgB,QAAO;AAElC,MAAI,SAAS;AACb,SAAO,OAAO,EAAE,MAAM,KAAK,OAAO,cAAc,MAAM;AACpD,UAAM,EAAE,MAAM,MAAM,IAAI,MAAM,YAAY,KAAK,EAC5C,OAAO,SAAS,EAChB,IAAI,eAAe;AAAA,MAClB,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,SAAS;AAAA,MACT,kBAAkB;AAAA,IACpB,CAAC;AAEH,QAAI,OAAO;AAET,UAAI,MAAM,SAAS,WAAW,MAAM,SAAS,YAAY;AACvD,YAAI,CAAC,QAAQ;AACX,mBAAS;AACT,kBAAQ;AAAA,YACN;AAAA,UACF;AAAA,QACF;AACA,eAAO,cAAc,EAAE,MAAM,KAAK,OAAO,cAAc,CAAC;AAAA,MAC1D;AACA,YAAM,IAAI,MAAM,MAAM,OAAO;AAAA,IAC/B;AAEA,UAAM,MAAM,MAAM,QAAQ,IAAI,IAAI,KAAK,CAAC,IAAI;AAC5C,WAAO;AAAA,MACL,SAAS,QAAQ,KAAK,OAAO;AAAA,MAC7B,mBAAmB,OAAO,KAAK,mBAAmB,KAAK;AAAA,IACzD;AAAA,EACF;AACF;","names":[]}

package/dist/cli/doctor.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node