@mhbdev/redis 0.2.0

package/dist/rate-limit/contracts.js

@@ -0,0 +1,304 @@
+import { RedisClientStateError, RedisConfigurationError, RedisConnectionError, RedisProtocolError, RedisTimeoutError, RedisUnavailableError, } from "../core/errors.js";
+import { withTimeout } from "../core/executor.js";
+import { assertKeyPart, hashIdentifier } from "../core/keys.js";
+export function fixedWindow(limit, windowMs) {
+    assertAlgorithmValues(limit, windowMs);
+    return { kind: "fixed-window", limit, windowMs };
+}
+export function slidingWindow(limit, windowMs) {
+    assertAlgorithmValues(limit, windowMs);
+    return { kind: "sliding-window", limit, windowMs };
+}
+export function tokenBucket(refillRate, windowMs, maxTokens) {
+    assertAlgorithmValues(refillRate, windowMs);
+    if (!Number.isSafeInteger(maxTokens) || maxTokens <= 0)
+        throw new RedisConfigurationError("Token bucket maximum must be positive");
+    return { kind: "token-bucket", limit: maxTokens, windowMs, maxTokens, refillRate };
+}
+export function createRateLimiter(algorithm, options) {
+    return new RedisRateLimiter(algorithm, options);
+}
+/** A discoverable alias for applications that prefer Redis-prefixed factory names. */
+export const createRedisRateLimiter = createRateLimiter;
+export class RedisRateLimiter {
+    algorithm;
+    options;
+    prefix;
+    timeoutMs;
+    failureMode;
+    cache;
+    now;
+    constructor(algorithm, options) {
+        this.algorithm = algorithm;
+        this.options = options;
+        this.prefix = options.prefix ?? "mhbdev:rate-limit";
+        this.timeoutMs = options.timeoutMs ?? 3_000;
+        this.failureMode = options.failureMode ?? "closed";
+        this.cache =
+            options.ephemeralCache === false
+                ? null
+                : options.ephemeralCache instanceof Map
+                    ? options.ephemeralCache
+                    : new Map();
+        this.now = options.now ?? Date.now;
+        if (!this.prefix.trim())
+            throw new RedisConfigurationError("Rate-limit prefix is required");
+    }
+    async limit(identifier, request = {}) {
+        assertIdentifier(identifier);
+        const weight = request.rate ?? 1;
+        if (!Number.isSafeInteger(weight) || weight <= 0)
+            throw new RedisConfigurationError("Rate-limit request rate must be positive");
+        const cachedUntil = this.cache?.get(identifier);
+        if (cachedUntil !== undefined) {
+            if (cachedUntil > this.now())
+                return this.response(false, this.algorithm.limit, 0, cachedUntil, "cache");
+            this.cache?.delete(identifier);
+        }
+        const started = this.now();
+        try {
+            const dynamicLimit = this.options.dynamicLimits
+                ? await this.getDynamicLimit()
+                : null;
+            const result = await withTimeout(() => this.runAlgorithm(identifier, dynamicLimit ?? this.algorithm.limit, weight, started), this.timeoutMs);
+            if (!result.allowed && this.cache)
+                this.cache.set(identifier, result.reset);
+            const response = this.response(result.allowed, result.limit, result.remaining, result.reset, result.allowed ? "success" : "limit");
+            const pending = this.options.analytics?.record({
+                identifier,
+                algorithm: this.algorithm.kind,
+                allowed: result.allowed,
+                limit: result.limit,
+                remaining: result.remaining,
+                timestamp: started,
+            });
+            return { ...response, pending: Promise.resolve(pending) };
+        }
+        catch (error) {
+            if (this.failureMode === "open" && isAvailabilityFailure(error))
+                return this.response(true, this.algorithm.limit, this.algorithm.limit, started + this.algorithm.windowMs, error instanceof RedisTimeoutError ? "timeout" : "redis");
+            throw error;
+        }
+    }
+    async check(identity, policy) {
+        assertKeyPart(policy.name, "Rate-limit policy name");
+        const limiter = new RedisRateLimiter(fixedWindow(policy.maxRequests, policy.windowMs), {
+            ...this.options,
+            prefix: `${this.prefix}:${policy.name}`,
+            failureMode: policy.failureMode,
+        });
+        const result = await limiter.limit(identity);
+        return {
+            allowed: result.allowed,
+            limit: result.limit,
+            remaining: result.remaining,
+            resetAt: result.resetAt,
+        };
+    }
+    async getRemaining(identifier) {
+        assertIdentifier(identifier);
+        const now = this.now();
+        const digest = await hashIdentifier(identifier);
+        const limit = this.options.dynamicLimits
+            ? ((await this.getDynamicLimit()) ?? this.algorithm.limit)
+            : this.algorithm.limit;
+        if (this.algorithm.kind === "fixed-window") {
+            const start = Math.floor(now / this.algorithm.windowMs) * this.algorithm.windowMs;
+            const count = Number((await this.options.redis.execute([
+                "GET",
+                `${this.prefix}:${digest}:${start}`,
+            ])) ?? 0);
+            return {
+                remaining: Math.max(0, limit - count),
+                reset: start + this.algorithm.windowMs,
+                resetAt: new Date(start + this.algorithm.windowMs),
+            };
+        }
+        if (this.algorithm.kind === "sliding-window") {
+            const start = Math.floor(now / this.algorithm.windowMs) * this.algorithm.windowMs;
+            const values = await this.options.redis.execute([
+                "MGET",
+                `${this.prefix}:${digest}:${start}`,
+                `${this.prefix}:${digest}:${start - this.algorithm.windowMs}`,
+            ]);
+            const current = Number(values?.[0] ?? 0);
+            const previous = Number(values?.[1] ?? 0);
+            const weighted = previous * ((this.algorithm.windowMs - (now - start)) / this.algorithm.windowMs) +
+                current;
+            return {
+                remaining: Math.max(0, Math.floor(limit - weighted)),
+                reset: start + this.algorithm.windowMs,
+                resetAt: new Date(start + this.algorithm.windowMs),
+            };
+        }
+        const values = await this.options.redis.execute([
+            "HMGET",
+            `${this.prefix}:bucket:${digest}`,
+            "tokens",
+            "updated",
+        ]);
+        const tokens = Number(values?.[0] ?? limit);
+        const updated = Number(values?.[1] ?? now);
+        const refilled = Math.min(limit, tokens +
+            (Math.max(0, now - updated) * (this.algorithm.refillRate ?? 0)) /
+                this.algorithm.windowMs);
+        const reset = now +
+            Math.max(0, Math.ceil(((1 - refilled) * this.algorithm.windowMs) / (this.algorithm.refillRate ?? 1)));
+        return { remaining: Math.floor(refilled), reset, resetAt: new Date(reset) };
+    }
+    async reset(identifier) {
+        assertIdentifier(identifier);
+        const keys = await this.keysFor(identifier, this.now());
+        if (keys.length)
+            await this.options.redis.execute(["DEL", ...keys]);
+        this.cache?.delete(identifier);
+    }
+    async blockUntilReady(identifier, timeoutMs, request = {}) {
+        const deadline = this.now() + timeoutMs;
+        while (this.now() <= deadline) {
+            const result = await this.limit(identifier, request);
+            if (result.success)
+                return result;
+            await new Promise((resolve) => setTimeout(resolve, Math.min(Math.max(result.retryAfterMs, 10), Math.max(10, deadline - this.now()))));
+        }
+        return this.limit(identifier, request);
+    }
+    async setDynamicLimit(limit) {
+        if (!this.options.dynamicLimits)
+            throw new RedisConfigurationError("Dynamic limits are not enabled");
+        const key = `${this.prefix}:dynamic-limit`;
+        if (limit === false)
+            await this.options.redis.execute(["DEL", key]);
+        else {
+            if (!Number.isSafeInteger(limit) || limit <= 0)
+                throw new RedisConfigurationError("Dynamic limit must be positive");
+            await this.options.redis.execute(["SET", key, String(limit)]);
+        }
+    }
+    async getDynamicLimit() {
+        if (!this.options.dynamicLimits)
+            return null;
+        const value = await this.options.redis.execute([
+            "GET",
+            `${this.prefix}:dynamic-limit`,
+        ]);
+        if (value === null)
+            return null;
+        const limit = Number(value);
+        if (!Number.isSafeInteger(limit) || limit <= 0)
+            throw new RedisProtocolError("Invalid dynamic rate-limit response");
+        return limit;
+    }
+    async runAlgorithm(identifier, limit, weight, now) {
+        const digest = await hashIdentifier(identifier);
+        if (this.algorithm.kind === "fixed-window") {
+            const start = Math.floor(now / this.algorithm.windowMs) * this.algorithm.windowMs;
+            const reset = start + this.algorithm.windowMs;
+            const value = await this.options.redis.eval(FIXED_WINDOW_SCRIPT, {
+                keys: [`${this.prefix}:${digest}:${start}`],
+                arguments: [String(weight), String(reset - now)],
+            });
+            const count = parseInteger(value, "fixed-window");
+            return {
+                allowed: count <= limit,
+                limit,
+                remaining: Math.max(0, limit - count),
+                reset,
+            };
+        }
+        if (this.algorithm.kind === "sliding-window") {
+            const start = Math.floor(now / this.algorithm.windowMs) * this.algorithm.windowMs;
+            const value = await this.options.redis.eval(SLIDING_WINDOW_SCRIPT, {
+                keys: [
+                    `${this.prefix}:${digest}:${start}`,
+                    `${this.prefix}:${digest}:${start - this.algorithm.windowMs}`,
+                ],
+                arguments: [
+                    String(weight),
+                    String(this.algorithm.windowMs),
+                    String(now - start),
+                    String(start + this.algorithm.windowMs - now),
+                ],
+            });
+            if (!Array.isArray(value) || value.length < 2)
+                throw new RedisProtocolError("Invalid sliding-window response");
+            const weighted = Number(value[1]);
+            return {
+                allowed: weighted <= limit,
+                limit,
+                remaining: Math.max(0, Math.floor(limit - weighted)),
+                reset: start + this.algorithm.windowMs,
+            };
+        }
+        const value = await this.options.redis.eval(TOKEN_BUCKET_SCRIPT, {
+            keys: [`${this.prefix}:bucket:${digest}`],
+            arguments: [
+                String(limit),
+                String(this.algorithm.refillRate),
+                String(this.algorithm.windowMs),
+                String(weight),
+                String(now),
+            ],
+        });
+        if (!Array.isArray(value) || value.length < 3)
+            throw new RedisProtocolError("Invalid token-bucket response");
+        const allowed = Number(value[0]) === 1;
+        const remaining = Math.max(0, Math.floor(Number(value[1])));
+        const reset = Number(value[2]);
+        return { allowed, limit, remaining, reset };
+    }
+    async keysFor(identifier, now) {
+        const digest = await hashIdentifier(identifier);
+        if (this.algorithm.kind === "fixed-window")
+            return [
+                `${this.prefix}:${digest}:${Math.floor(now / this.algorithm.windowMs) * this.algorithm.windowMs}`,
+            ];
+        if (this.algorithm.kind === "sliding-window") {
+            const start = Math.floor(now / this.algorithm.windowMs) * this.algorithm.windowMs;
+            return [
+                `${this.prefix}:${digest}:${start}`,
+                `${this.prefix}:${digest}:${start - this.algorithm.windowMs}`,
+            ];
+        }
+        return [`${this.prefix}:bucket:${digest}`];
+    }
+    response(allowed, limit, remaining, reset, reason) {
+        return {
+            success: allowed,
+            allowed,
+            limit,
+            remaining,
+            reset,
+            resetAt: new Date(reset),
+            retryAfterMs: Math.max(0, reset - this.now()),
+            reason,
+            pending: Promise.resolve(),
+        };
+    }
+}
+const FIXED_WINDOW_SCRIPT = `local current = redis.call("INCRBY", KEYS[1], ARGV[1]) if current == tonumber(ARGV[1]) then redis.call("PEXPIRE", KEYS[1], ARGV[2]) end return current`;
+const SLIDING_WINDOW_SCRIPT = `local current = redis.call("INCRBY", KEYS[1], ARGV[1]) if current == tonumber(ARGV[1]) then redis.call("PEXPIRE", KEYS[1], ARGV[2]) redis.call("PEXPIRE", KEYS[2], ARGV[2]) end local previous = tonumber(redis.call("GET", KEYS[2]) or "0") local weighted = previous * ((tonumber(ARGV[2]) - tonumber(ARGV[3])) / tonumber(ARGV[2])) + current return {current, weighted}`;
+const TOKEN_BUCKET_SCRIPT = `local state = redis.call("HMGET", KEYS[1], "tokens", "updated") local tokens = tonumber(state[1]) or tonumber(ARGV[1]) local updated = tonumber(state[2]) or tonumber(ARGV[5]) local elapsed = math.max(0, tonumber(ARGV[5]) - updated) local refill = elapsed * tonumber(ARGV[2]) / tonumber(ARGV[3]) tokens = math.min(tonumber(ARGV[1]), tokens + refill) local requested = tonumber(ARGV[4]) local allowed = 0 if tokens >= requested then tokens = tokens - requested allowed = 1 end local reset = tonumber(ARGV[5]) + math.ceil((requested - tokens) * tonumber(ARGV[3]) / tonumber(ARGV[2])) redis.call("HSET", KEYS[1], "tokens", tokens, "updated", ARGV[5]) redis.call("PEXPIRE", KEYS[1], ARGV[3]) return {allowed, tokens, reset}`;
+function assertIdentifier(identifier) {
+    if (!identifier.trim() || identifier.length > 512)
+        throw new RedisConfigurationError("Rate-limit identifier must be between one and 512 characters");
+}
+function assertAlgorithmValues(limit, windowMs) {
+    if (!Number.isSafeInteger(limit) || limit <= 0)
+        throw new RedisConfigurationError("Rate-limit limit must be positive");
+    if (!Number.isSafeInteger(windowMs) || windowMs <= 0)
+        throw new RedisConfigurationError("Rate-limit window must be positive");
+}
+function parseInteger(value, name) {
+    const result = Number(value);
+    if (!Number.isSafeInteger(result))
+        throw new RedisProtocolError(`Invalid ${name} response`);
+    return result;
+}
+function isAvailabilityFailure(error) {
+    return (error instanceof RedisTimeoutError ||
+        error instanceof RedisUnavailableError ||
+        error instanceof RedisConnectionError ||
+        error instanceof RedisClientStateError);
+}
+//# sourceMappingURL=contracts.js.map

package/dist/rate-limit/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/rate-limit/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAsB,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAiFhE,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,QAAgB;IAC1D,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACvC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,QAAgB;IAC5D,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACvC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,WAAW,CAC1B,UAAkB,EAClB,QAAgB,EAChB,SAAiB;IAEjB,qBAAqB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;QACrD,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAChC,SAA6B,EAC7B,OAA2B;IAE3B,OAAO,IAAI,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AAExD,MAAM,OAAO,gBAAgB;IAQV,SAAS;IACT,OAAO;IARR,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,WAAW,CAAuB;IAClC,KAAK,CAA6B;IAClC,GAAG,CAAe;IAEnC,YACkB,SAA6B,EAC7B,OAA2B;yBAD3B,SAAS;uBACT,OAAO;QAExB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC;QACpD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC;QACnD,IAAI,CAAC,KAAK;YACT,OAAO,CAAC,cAAc,KAAK,KAAK;gBAC/B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,OAAO,CAAC,cAAc,YAAY,GAAG;oBACtC,CAAC,CAAC,OAAO,CAAC,cAAc;oBACxB,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;QACf,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YACtB,MAAM,IAAI,uBAAuB,CAAC,+BAA+B,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,KAAK,CACV,UAAkB,EAClB,OAAO,GAAqB,EAAE;QAE9B,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;YAC/C,MAAM,IAAI,uBAAuB,CAAC,0CAA0C,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE;gBAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC5E,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa;gBAC9C,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE;gBAC9B,CAAC,CAAC,IAAI,CAAC;YACR,MAAM,MAAM,GAAG,MAAM,WAAW,CAC/B,GAAG,EAAE,CACJ,IAAI,CAAC,YAAY,CAChB,UAAU,EACV,YAAY,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,EACpC,MAAM,EACN,OAAO,CACP,EACF,IAAI,CAAC,SAAS,CACd,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAC7B,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CACpC,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;gBAC9C,UAAU;gBACV,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;gBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC;gBAC9D,OAAO,IAAI,CAAC,QAAQ,CACnB,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,KAAK,EACpB,IAAI,CAAC,SAAS,CAAC,KAAK,EACpB,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EACjC,KAAK,YAAY,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CACxD,CAAC;YACH,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,MAAuB;QACpD,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,gBAAgB,CACnC,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,EAChD;YACC,GAAG,IAAI,CAAC,OAAO;YACf,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE;YACvC,WAAW,EAAE,MAAM,CAAC,WAAW;SAC/B,CACD,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7C,OAAO;YACN,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;SACvB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CACjB,UAAkB;QAElB,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa;YACvC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QACxB,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAClF,MAAM,KAAK,GAAG,MAAM,CACnB,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAgB;gBAChD,KAAK;gBACL,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,EAAE;aACnC,CAAC,CAAC,IAAI,CAAC,CACR,CAAC;YACF,OAAO;gBACN,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;gBACrC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ;gBACtC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;aAClD,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAClF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAuB;gBACrE,MAAM;gBACN,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,EAAE;gBACnC,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;aAC7D,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1C,MAAM,QAAQ,GACb,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAChF,OAAO,CAAC;YACT,OAAO;gBACN,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC;gBACpD,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ;gBACtC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;aAClD,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAuB;YACrE,OAAO;YACP,GAAG,IAAI,CAAC,MAAM,WAAW,MAAM,EAAE;YACjC,QAAQ;YACR,SAAS;SACT,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACxB,KAAK,EACL,MAAM;YACL,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;gBAC9D,IAAI,CAAC,SAAS,CAAC,QAAQ,CACzB,CAAC;QACF,MAAM,KAAK,GACV,GAAG;YACH,IAAI,CAAC,GAAG,CACP,CAAC,EACD,IAAI,CAAC,IAAI,CACR,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAC7E,CACD,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB;QAC7B,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,UAAkB,EAClB,SAAiB,EACjB,OAAO,GAAqB,EAAE;QAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAC;YAClC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,UAAU,CACT,OAAO,EACP,IAAI,CAAC,GAAG,CACP,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC,EACjC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CACnC,CACD,CACD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAqB;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa;YAC9B,MAAM,IAAI,uBAAuB,CAAC,gCAAgC,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,gBAAgB,CAAC;QAC3C,IAAI,KAAK,KAAK,KAAK;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;aAC/D,CAAC;YACL,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;gBAC7C,MAAM,IAAI,uBAAuB,CAAC,gCAAgC,CAAC,CAAC;YACrE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;IACF,CAAC;IAED,KAAK,CAAC,eAAe;QACpB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAgB;YAC7D,KAAK;YACL,GAAG,IAAI,CAAC,MAAM,gBAAgB;SAC9B,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAC7C,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,CAAC,CAAC;QACrE,OAAO,KAAK,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,YAAY,CACzB,UAAkB,EAClB,KAAa,EACb,MAAc,EACd,GAAW;QAEX,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAClF,MAAM,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAU,mBAAmB,EAAE;gBACzE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC3C,SAAS,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;aAChD,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YAClD,OAAO;gBACN,OAAO,EAAE,KAAK,IAAI,KAAK;gBACvB,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;gBACrC,KAAK;aACL,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAClF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAU,qBAAqB,EAAE;gBAC3E,IAAI,EAAE;oBACL,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,EAAE;oBACnC,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;iBAC7D;gBACD,SAAS,EAAE;oBACV,MAAM,CAAC,MAAM,CAAC;oBACd,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;oBAC/B,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC;oBACnB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,GAAG,GAAG,CAAC;iBAC7C;aACD,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAC5C,MAAM,IAAI,kBAAkB,CAAC,iCAAiC,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,OAAO;gBACN,OAAO,EAAE,QAAQ,IAAI,KAAK;gBAC1B,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC;gBACpD,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ;aACtC,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAU,mBAAmB,EAAE;YACzE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,WAAW,MAAM,EAAE,CAAC;YACzC,SAAS,EAAE;gBACV,MAAM,CAAC,KAAK,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC/B,MAAM,CAAC,MAAM,CAAC;gBACd,MAAM,CAAC,GAAG,CAAC;aACX;SACD,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAC5C,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,UAAkB,EAAE,GAAW;QACpD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc;YACzC,OAAO;gBACN,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;aACjG,CAAC;QACH,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAClF,OAAO;gBACN,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,EAAE;gBACnC,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;aAC7D,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,WAAW,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAEO,QAAQ,CACf,OAAgB,EAChB,KAAa,EACb,SAAiB,EACjB,KAAa,EACb,MAAuB;QAEvB,OAAO;YACN,OAAO,EAAE,OAAO;YAChB,OAAO;YACP,KAAK;YACL,SAAS;YACT,KAAK;YACL,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC;YACxB,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7C,MAAM;YACN,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;SAC1B,CAAC;IACH,CAAC;CACD;AAED,MAAM,mBAAmB,GAAG,wJAAwJ,CAAC;AACrL,MAAM,qBAAqB,GAAG,6WAA6W,CAAC;AAC5Y,MAAM,mBAAmB,GAAG,gtBAAgtB,CAAC;AAE7uB,SAAS,gBAAgB,CAAC,UAAkB;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG;QAChD,MAAM,IAAI,uBAAuB,CAChC,8DAA8D,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,QAAgB;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAC7C,MAAM,IAAI,uBAAuB,CAAC,mCAAmC,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC;QACnD,MAAM,IAAI,uBAAuB,CAAC,oCAAoC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAChC,MAAM,IAAI,kBAAkB,CAAC,WAAW,IAAI,WAAW,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC5C,OAAO,CACN,KAAK,YAAY,iBAAiB;QAClC,KAAK,YAAY,qBAAqB;QACtC,KAAK,YAAY,oBAAoB;QACrC,KAAK,YAAY,qBAAqB,CACtC,CAAC;AACH,CAAC"}

package/dist/rate-limit/index.d.ts

@@ -0,0 +1,3 @@
+export type { RateLimitAlgorithm, RateLimitAnalyticsEvent, RateLimitAnalyticsSink, RateLimiter, RateLimiterOptions, RateLimitFailureMode, RateLimitPolicy, RateLimitReason, RateLimitRequest, RateLimitResponse, RateLimitResult, } from "./contracts.js";
+export { createRateLimiter, createRedisRateLimiter, fixedWindow, RedisRateLimiter, slidingWindow, tokenBucket, } from "./contracts.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/rate-limit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rate-limit/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACX,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,EACtB,WAAW,EACX,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACN,iBAAiB,EACjB,sBAAsB,EACtB,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,WAAW,GACX,MAAM,gBAAgB,CAAC"}

package/dist/rate-limit/index.js

@@ -0,0 +1,2 @@
+export { createRateLimiter, createRedisRateLimiter, fixedWindow, RedisRateLimiter, slidingWindow, tokenBucket, } from "./contracts.js";
+//# sourceMappingURL=index.js.map

package/dist/rate-limit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rate-limit/index.ts"],"names":[],"mappings":"AAaA,OAAO,EACN,iBAAiB,EACjB,sBAAsB,EACtB,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,WAAW,GACX,MAAM,gBAAgB,CAAC"}

package/dist/testing/fake-executor.d.ts

@@ -0,0 +1,9 @@
+import type { RedisCommand, RedisExecutor, RedisScriptOptions } from "../core/executor.js";
+export declare class FakeRedisExecutor implements RedisExecutor {
+    private readonly scriptResult;
+    readonly commands: RedisCommand[];
+    constructor(scriptResult?: unknown);
+    execute<T = unknown>(command: RedisCommand): Promise<T>;
+    eval<T = unknown>(_script: string, _options: RedisScriptOptions): Promise<T>;
+}
+//# sourceMappingURL=fake-executor.d.ts.map

package/dist/testing/fake-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-executor.d.ts","sourceRoot":"","sources":["../../src/testing/fake-executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,MAAM,qBAAqB,CAAC;AAE7B,qBAAa,iBAAkB,YAAW,aAAa;IAE1C,OAAO,CAAC,QAAQ,CAAC,YAAY;IADzC,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAM;IACvC,YAA6B,YAAY,GAAE,OAAoB,EAAI;IACnE,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,CAGtD;IACD,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC,CAE3E;CACD"}

package/dist/testing/fake-executor.js

@@ -0,0 +1,15 @@
+export class FakeRedisExecutor {
+    scriptResult;
+    commands = [];
+    constructor(scriptResult = [1, 1_000]) {
+        this.scriptResult = scriptResult;
+    }
+    execute(command) {
+        this.commands.push(command);
+        return Promise.resolve(undefined);
+    }
+    eval(_script, _options) {
+        return Promise.resolve(this.scriptResult);
+    }
+}
+//# sourceMappingURL=fake-executor.js.map

package/dist/testing/fake-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-executor.js","sourceRoot":"","sources":["../../src/testing/fake-executor.ts"],"names":[],"mappings":"AAMA,MAAM,OAAO,iBAAiB;IAEA,YAAY;IADhC,QAAQ,GAAmB,EAAE,CAAC;IACvC,YAA6B,YAAY,GAAY,CAAC,CAAC,EAAE,KAAK,CAAC;4BAAlC,YAAY;IAAyB,CAAC;IACnE,OAAO,CAAc,OAAqB;QACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,OAAO,CAAC,OAAO,CAAC,SAAc,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,CAAc,OAAe,EAAE,QAA4B;QAC9D,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,YAAiB,CAAC,CAAC;IAChD,CAAC;CACD"}

package/dist/testing/index.d.ts

@@ -0,0 +1,2 @@
+export { FakeRedisExecutor } from "./fake-executor.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/testing/index.js

@@ -0,0 +1,2 @@
+export { FakeRedisExecutor } from "./fake-executor.js";
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC"}

package/docs/adapters.md

@@ -0,0 +1,41 @@
+# Adapters
+
+Feature modules are transport-neutral. They accept `RedisExecutor` or
+`RedisSubscriptionTransport`, which means a project can replace its Redis client
+without rewriting application-facing cache, limiter, lock, pub/sub, or queue code.
+
+## node-redis
+
+`createRedisClient` and `createRedisPool` are the default Node/Bun adapters and are
+included with the package's normal `redis` dependency.
+
+## ioredis
+
+Install ioredis in the consuming project and pass its configured client to
+`createIoredisExecutor`. The adapter does not create an ioredis client or read
+environment variables, so authentication, TLS, retry, and sentinel/cluster choices
+remain under application control.
+
+`createIoredisPubSubTransport` accepts a publisher plus an explicit subscriber or a
+publisher with `duplicate()`.
+
+The bridge applies a command timeout (3 seconds by default); configure it with
+`commandTimeoutMs`. If an application uses ioredis-specific error classes, pass a
+typed `normalizeError` function to map those classes to this package's exported
+errors. The hook receives the original error object, so message or stack matching is
+not required.
+
+## BullMQ
+
+`createBullMqQueueAdapter` accepts an existing BullMQ queue and an injected worker
+factory. BullMQ remains optional and is not imported by the Redis package at runtime.
+This keeps the package installable for consumers who use the native Streams queue or
+only the lower-level modules.
+
+Both queue implementations expose the same `JobQueue<T>` and `QueueWorker` contracts.
+Both are at-least-once systems; handlers must be idempotent.
+
+All adapters are structural contracts. They do not create hidden clients, read
+environment variables, or force a retry policy, so switching from node-redis to
+ioredis or BullMQ is an application-composition change rather than a feature-module
+rewrite.

package/docs/architecture.md

@@ -0,0 +1,41 @@
+# Architecture
+
+The package is organized around a small transport contract and independent feature
+modules. Modules do not create connections, read environment variables, or choose
+application-level failure policy.
+
+```text
+application
+    |
+    v
+feature module (cache, limiter, lock, pub/sub, queue)
+    |
+    v
+RedisExecutor / RedisSubscriptionTransport
+    |
+    v
+node-redis adapter, pool, or user adapter
+```
+
+`RedisExecutor` exposes command and script execution without coupling the feature
+modules to node-redis. `@mhbdev/redis/node` owns TCP/TLS connection lifecycle,
+timeouts, bounded reconnects, pooling, and the explicit raw-client escape hatch.
+
+Every public module validates configuration at construction or before issuing a
+command. Redis responses from scripts are validated before becoming public values.
+Errors preserve their causes while avoiding connection URLs, credentials, raw
+identifiers, and payloads in messages.
+
+## Lifecycle
+
+Create one managed client or pool per process and close it during graceful shutdown.
+Do not create a connection per request. Pub/sub uses dedicated subscriber connections
+because Redis subscriber clients cannot safely execute ordinary commands while
+subscribed.
+
+## Compatibility boundary
+
+The new API is intentionally clean rather than a copy of the private
+`@dordoone/redis-runtime` package. The existing atomic rate-limit behavior is
+preserved through `RateLimiter.check`, `RateLimitPolicy`, and `RateLimitResult`; the
+migration guide maps the old connection manager to `createRedisClient`.

package/docs/errors.md

@@ -0,0 +1,27 @@
+# Errors and failure handling
+
+Every package error is an instance of `RedisError` with a stable `code`, a safe
+human-readable message, and an optional `cause`. Use `instanceof` or
+`isRedisErrorCode(error, code)` for control flow; do not inspect `message`, `stack`, or
+serialized causes.
+
+```ts
+import { isRedisErrorCode } from "@mhbdev/redis";
+
+try {
+  await redis.ping();
+} catch (error) {
+  if (isRedisErrorCode(error, "REDIS_TIMEOUT")) return retry();
+  if (isRedisErrorCode(error, "REDIS_UNAVAILABLE")) return useFallback();
+  throw error;
+}
+```
+
+The node-redis adapter maps its exported error classes directly. The ioredis bridge
+maps unknown failures to `REDIS_UNAVAILABLE` by default and accepts an optional typed
+normalizer for application-specific or plugin-specific error classes. No adapter uses
+error-message or stack-trace matching to determine behavior.
+
+Configuration, protocol, serialization, lock, and queue errors are not converted into
+availability failures. This distinction prevents `failureMode: "open"` in the rate
+limiter from masking a programming error or malformed Redis response.

package/docs/migration.md

@@ -0,0 +1,21 @@
+# Migration from `@dordoone/redis-runtime`
+
+```sh
+npm uninstall @dordoone/redis-runtime
+npm install @mhbdev/redis
+```
+
+The primary mapping is:
+
+| Internal package | `@mhbdev/redis` |
+| --- | --- |
+| `new RedisClientManager({ url })` | `createRedisClient({ url })` |
+| `manager.getClient()` | `client.execute()` or `client.raw()` |
+| `manager.ping()` | `client.ping()` |
+| `manager.close()` | `client.close()` |
+| `new RedisRateLimiter(manager)` | `createRateLimiter(fixedWindow(...), { redis: client })` |
+| `RateLimitPolicy` / `RateLimitResult` | same names from `@mhbdev/redis/rate-limit` |
+
+The package remains application-policy neutral. The application still decides whether
+an endpoint fails open or closed; the limiter only exposes the configured behavior and
+typed result.

package/docs/queues.md

@@ -0,0 +1,13 @@
+# Queues
+
+`RedisQueue` stores immediate work in a Redis Stream and delayed work in a sorted set.
+Workers consume through Redis consumer groups. A failed job is acknowledged and
+re-enqueued with an incremented attempt count until `maxAttempts` is reached; then it
+is written to the dead-letter stream.
+
+Delivery is at-least-once. A process crash can leave a pending message, and handlers
+must be safe to run more than once. Use application-level idempotency keys for external
+side effects.
+
+Use a pool when workers need blocking reads or concurrent command execution. Keep queue
+names and prefixes stable during rolling deployments.

package/docs/rate-limiting.md

@@ -0,0 +1,23 @@
+# Rate limiting
+
+The package implements three atomic algorithms:
+
+| Algorithm | Storage | Best for |
+| --- | --- | --- |
+| Fixed window | One counter per time boundary | Lowest cost and simple quotas |
+| Sliding window | Current and previous counters | Fewer boundary bursts |
+| Token bucket | Tokens and last-refill timestamp | Controlled bursts and sustained rate |
+
+All algorithms execute their state transition in one Redis script. Identifiers are
+SHA-256 hashed and namespaced with the configured prefix. Weighted requests subtract
+more than one unit from the current quota.
+
+Optional local blocked-result caching reduces Redis calls after an identifier has been
+denied. Keep the limiter outside hot serverless handlers when using that cache.
+
+`failureMode: "closed"` propagates Redis failures. `failureMode: "open"` returns a
+successful timeout/Redis result and should only be used when availability is the
+stronger requirement.
+
+Analytics are delivered to an injected `RateLimitAnalyticsSink`; the package does not
+force a logging or metrics vendor.

package/docs/releasing.md

@@ -0,0 +1,45 @@
+# Releasing to npm
+
+## One-time initial publication
+
+The package is intentionally published once by an authorized maintainer before npm
+can attach a trusted publisher to it. From this package directory, after reviewing the
+dry-run output:
+
+```sh
+npm whoami
+npm run pack:check
+npm publish --access public --provenance=false
+```
+
+The one-time local publication explicitly disables provenance because a local shell has
+no OIDC provider. The package still declares provenance by default, and the GitHub
+workflow will generate provenance through npm trusted publishing. Do not add an npm
+token to the repository or GitHub secrets for that workflow.
+
+## Configure npm trusted publishing
+
+After `@mhbdev/redis` exists on npm, open the package's npm settings and add a GitHub
+Actions trusted publisher with:
+
+- GitHub organization/user: `mhbdev`
+- Repository: `redis`
+- Workflow filename: `.github/workflows/release.yml`
+- Environment: `npm-release`
+
+The GitHub repository must also have the `npm-release` environment available. The
+release job already requests only the permissions required for Changesets and npm
+provenance: repository contents, pull requests, and the OIDC `id-token`. It does not
+provide `NODE_AUTH_TOKEN`, so npm uses trusted publishing rather than a long-lived
+automation token.
+
+## Subsequent releases
+
+1. Add a Changeset describing the public change.
+2. Merge the Changesets version pull request created by `release.yml`.
+3. The next push to `main` runs the release gate and publishes the version through npm
+   trusted publishing.
+
+The workflow validates linting, types, tests, build output, declaration packaging,
+`publint`, `arethetypeswrong`, tarball imports, and npm audit before Changesets is
+allowed to version or publish the package.