@luckystack/core 0.2.4 → 0.2.6

package/dist/index.js

@@ -49,7 +49,7 @@ import {
   tryCatchSync,
   validatePagePath,
   waitForSocket
-} from "./chunk-HQX3X5QW.js";
+} from "./chunk-6YKLU3ZR.js";
 import {
   DEFAULT_PROJECT_CONFIG,
   deepMerge,
@@ -96,7 +96,7 @@ import {
   startSpan,
   startSpanAcrossTrackers,
   startSpanHandle
-} from "./chunk-V2WKGTZH.js";
+} from "./chunk-OHGJSQZE.js";
 import {
   createRegistry
 } from "./chunk-USQA6QTX.js";
@@ -1246,10 +1246,16 @@ var isLoopbackIp = (ip) => {
 };
 var TOKEN_HASH_LENGTH = 32;
 var deriveTokenBucketId = (token) => createHash2("sha256").update(token).digest("hex").slice(0, TOKEN_HASH_LENGTH);
+var UNKNOWN_IP_WARN_COOLDOWN_MS = 6e4;
+var unknownIpLastWarnedAt = 0;
 var resolveClientIp = ({ rawAddress, headers, trustProxy = false, trustedProxyHopCount = 1 }) => {
   const resolved = resolveRaw({ rawAddress, headers, trustProxy, trustedProxyHopCount });
   if (resolved === UNKNOWN_CLIENT_IP) {
-    getLogger().warn('rate-limit: client IP unresolved \u2014 keyed into the shared "unknown" bucket', { trustProxy });
+    const now = Date.now();
+    if (now - unknownIpLastWarnedAt >= UNKNOWN_IP_WARN_COOLDOWN_MS) {
+      unknownIpLastWarnedAt = now;
+      getLogger().warn('rate-limit: client IP unresolved \u2014 keyed into the shared "unknown" bucket', { trustProxy });
+    }
   }
   return resolved;
 };
@@ -1359,8 +1365,15 @@ var checkRateLimitInMemory = ({
   const entry = rateLimitStore.get(key);
   if (!entry || entry.resetAt < now) {
     if (rateLimitStore.size >= MAX_MEMORY_STORE_SIZE) {
-      const oldest = rateLimitStore.keys().next().value;
-      if (oldest !== void 0) rateLimitStore.delete(oldest);
+      let evictKey;
+      for (const [k, e] of rateLimitStore) {
+        if (e.resetAt < now) {
+          evictKey = k;
+          break;
+        }
+      }
+      evictKey ??= rateLimitStore.keys().next().value;
+      if (evictKey !== void 0) rateLimitStore.delete(evictKey);
     }
     rateLimitStore.set(key, { count: 1, resetAt: now + safeWindowMs });
     return { allowed: true, remaining: limit - 1, resetIn: Math.ceil(safeWindowMs / 1e3) };
@@ -1508,8 +1521,7 @@ var getRateLimitStatus = async (key, limit) => {
 var clearRateLimit = async (key) => strategyRegistry.get().clear(key);
 var clearAllRateLimits = async () => {
   if (process.env.NODE_ENV === "production") {
-    getLogger().warn("[RateLimiter] clearAllRateLimits() called in production \u2014 ignored. Use clearRateLimit(key) for scoped resets.");
-    return;
+    throw new Error("[RateLimiter] clearAllRateLimits() is not allowed in production. Use clearRateLimit(key) for scoped resets.");
   }
   return strategyRegistry.get().clearAll();
 };
@@ -1631,17 +1643,40 @@ var parseObjectFields = (typeText) => {
   const indexSignatures = [];
   let part = "";
   let depth = 0;
-  for (const char of inner) {
-    if (char === "{" || char === "[" || char === "(" || char === "<") depth += 1;
-    if (char === "}" || char === "]" || char === ")" || char === ">") depth -= 1;
-    if (char === ";" && depth === 0) {
-      const trimmed = part.trim();
-      if (trimmed) {
-        parseFieldOrIndex(trimmed, fields, indexSignatures);
+  let inString = null;
+  const codePoints = [...inner];
+  let i = 0;
+  while (i < codePoints.length) {
+    const char = codePoints[i] ?? "";
+    i += 1;
+    if (inString && char === "\\") {
+      part += char;
+      const next = codePoints[i] ?? "";
+      part += next;
+      i += 1;
+      continue;
+    }
+    if (char === '"' || char === "'") {
+      if (inString === char) {
+        inString = null;
+      } else {
+        inString ??= char;
       }
-      part = "";
+      part += char;
       continue;
     }
+    if (!inString) {
+      if (char === "{" || char === "[" || char === "(" || char === "<") depth += 1;
+      if (char === "}" || char === "]" || char === ")" || char === ">") depth -= 1;
+      if (char === ";" && depth === 0) {
+        const trimmed = part.trim();
+        if (trimmed) {
+          parseFieldOrIndex(trimmed, fields, indexSignatures);
+        }
+        part = "";
+        continue;
+      }
+    }
     part += char;
   }
   const final = part.trim();
@@ -1905,16 +1940,17 @@ var allowedOrigin = (origin) => {
     }
   }
   const debugAllowedOrigins = typeof configured === "function" ? ["<dynamic-resolver>", location] : [location, ...configured].map((value) => normalizeOrigin({ value, secure })).filter(Boolean);
+  const safeOrigin = origin.slice(0, 512).replaceAll(/[^ -~]/g, "");
   if (getProjectConfig().logging.devLogs) {
     getLogger().warn("cors: origin not allowed", {
-      origin,
+      origin: safeOrigin,
       normalizedOrigin,
       allowedOrigins: debugAllowedOrigins,
       allowLocalhost: cors.allowLocalhost
     });
   }
   void dispatchHook("corsRejected", {
-    origin,
+    origin: safeOrigin,
     normalizedOrigin,
     allowedOrigins: debugAllowedOrigins,
     allowLocalhost: cors.allowLocalhost
@@ -1994,11 +2030,13 @@ var consumeOneTimeToken = async (namespace, token) => {
   if (!token || typeof token !== "string") return null;
   const key = tokenKey(namespace, token);
   const txResult = await redis_default.multi().get(key).del(key).exec();
-  if (!txResult || txResult.length === 0) return null;
+  if (!txResult || txResult.length < 2) return null;
   const first = txResult[0];
   if (!first) return null;
   const [getErr, value] = first;
   if (getErr) return null;
+  const second = txResult[1];
+  if (!second || second[0]) return null;
   return typeof value === "string" && value.length > 0 ? value : null;
 };
 var consumeOneTimeTokenJson = async (namespace, token) => {