@micacms/runtime 0.2.0

package/dist/lib/errors.js

@@ -0,0 +1,52 @@
+/**
+ * Error taxonomy.
+ *
+ * Every failure the API reports on purpose is an `ApiError` carrying a stable
+ * machine-readable `code`. Anything else that reaches the error middleware is
+ * treated as a bug: logged with its stack, reported as a bare 500.
+ */
+const STATUS = {
+    bad_request: 400,
+    validation_failed: 422,
+    unauthenticated: 401,
+    invalid_credentials: 401,
+    forbidden: 403,
+    not_found: 404,
+    conflict: 409,
+    payload_too_large: 413,
+    unsupported_media_type: 415,
+    rate_limited: 429,
+    internal_error: 500,
+    service_unavailable: 503,
+};
+export class ApiError extends Error {
+    name = "ApiError";
+    code;
+    status;
+    issues;
+    /** Extra response headers, e.g. `Retry-After` on a rate limit. */
+    headers;
+    constructor(code, message, options = {}) {
+        super(message, { cause: options.cause });
+        this.code = code;
+        this.status = STATUS[code];
+        this.issues = options.issues;
+        this.headers = options.headers;
+    }
+    toBody() {
+        return {
+            error: {
+                code: this.code,
+                message: this.message,
+                ...(this.issues ? { issues: this.issues } : {}),
+            },
+        };
+    }
+}
+export const badRequest = (message) => new ApiError("bad_request", message);
+export const unauthenticated = (message = "Authentication required.") => new ApiError("unauthenticated", message);
+export const forbidden = (message = "You do not have access to this resource.") => new ApiError("forbidden", message);
+export const notFound = (message = "Not found.") => new ApiError("not_found", message);
+export const conflict = (message) => new ApiError("conflict", message);
+export const validationFailed = (issues, message = "The content is not valid.") => new ApiError("validation_failed", message, { issues });
+//# sourceMappingURL=errors.js.map

package/dist/lib/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmBH,MAAM,MAAM,GAA8B;IACxC,WAAW,EAAE,GAAG;IAChB,iBAAiB,EAAE,GAAG;IACtB,eAAe,EAAE,GAAG;IACpB,mBAAmB,EAAE,GAAG;IACxB,SAAS,EAAE,GAAG;IACd,SAAS,EAAE,GAAG;IACd,QAAQ,EAAE,GAAG;IACb,iBAAiB,EAAE,GAAG;IACtB,sBAAsB,EAAE,GAAG;IAC3B,YAAY,EAAE,GAAG;IACjB,cAAc,EAAE,GAAG;IACnB,mBAAmB,EAAE,GAAG;CACzB,CAAC;AAUF,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,GAAG,UAAU,CAAC;IAClB,IAAI,CAAY;IAChB,MAAM,CAAS;IACf,MAAM,CAAgB;IAC/B,kEAAkE;IACzD,OAAO,CAA0B;IAE1C,YACE,IAAe,EACf,OAAe,EACf,UAAwF,EAAE;QAE1F,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAED,MAAM;QACJ,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAO,GAAG,0BAA0B,EAAE,EAAE,CACtE,IAAI,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAO,GAAG,0CAA0C,EAAE,EAAE,CAChF,IAAI,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,OAAO,GAAG,YAAY,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACvF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAoB,EAAE,OAAO,GAAG,2BAA2B,EAAE,EAAE,CAC9F,IAAI,QAAQ,CAAC,mBAAmB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC"}

package/dist/lib/file-type.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Content sniffing for uploads.
+ *
+ * The browser-supplied MIME type is attacker-controlled and must not be
+ * trusted: an executable renamed to `.jpg` arrives as `image/jpeg`. The stored
+ * type is derived from the bytes instead, and the extension is regenerated
+ * from it rather than taken from the filename.
+ */
+export interface DetectedType {
+    mimeType: string;
+    extension: string;
+}
+export declare function detectFileType(bytes: Uint8Array): DetectedType | null;
+export declare const isImageType: (mimeType: string) => boolean;
+/**
+ * Whether a detected type is acceptable for a field's `accept` setting.
+ * `any` deliberately does not mean "anything": only the types listed here can
+ * be stored at all.
+ */
+export declare function isAccepted(mimeType: string, accept: "image" | "document" | "any"): boolean;
+/**
+ * SVG can carry scripts, so it is served under a sandbox CSP. Callers use this
+ * to decide whether the extra header is needed.
+ */
+export declare const isScriptable: (mimeType: string) => boolean;
+//# sourceMappingURL=file-type.d.ts.map

package/dist/lib/file-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-type.d.ts","sourceRoot":"","sources":["../../src/lib/file-type.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAQD,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,GAAG,IAAI,CA2CrE;AA4BD,eAAO,MAAM,WAAW,GAAI,UAAU,MAAM,KAAG,OAAoC,CAAC;AAEpF;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,KAAK,GAAG,OAAO,CAI1F;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,KAAG,OAAuC,CAAC"}

package/dist/lib/file-type.js

@@ -0,0 +1,89 @@
+/**
+ * Content sniffing for uploads.
+ *
+ * The browser-supplied MIME type is attacker-controlled and must not be
+ * trusted: an executable renamed to `.jpg` arrives as `image/jpeg`. The stored
+ * type is derived from the bytes instead, and the extension is regenerated
+ * from it rather than taken from the filename.
+ */
+const startsWith = (bytes, signature, offset = 0) => signature.every((byte, index) => bytes[offset + index] === byte);
+const ascii = (bytes, offset, length) => Array.from(bytes.slice(offset, offset + length), (byte) => String.fromCharCode(byte)).join("");
+export function detectFileType(bytes) {
+    if (bytes.length < 12)
+        return null;
+    if (startsWith(bytes, [0xff, 0xd8, 0xff])) {
+        return { mimeType: "image/jpeg", extension: "jpg" };
+    }
+    if (startsWith(bytes, [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a])) {
+        return { mimeType: "image/png", extension: "png" };
+    }
+    const header = ascii(bytes, 0, 6);
+    if (header === "GIF87a" || header === "GIF89a") {
+        return { mimeType: "image/gif", extension: "gif" };
+    }
+    if (ascii(bytes, 0, 4) === "RIFF" && ascii(bytes, 8, 4) === "WEBP") {
+        return { mimeType: "image/webp", extension: "webp" };
+    }
+    // ISO base media formats declare their brand at offset 8, after the box size.
+    if (ascii(bytes, 4, 4) === "ftyp") {
+        const brand = ascii(bytes, 8, 4);
+        if (brand === "avif" || brand === "avis") {
+            return { mimeType: "image/avif", extension: "avif" };
+        }
+        if (brand === "heic" || brand === "heix" || brand === "mif1") {
+            return { mimeType: "image/heic", extension: "heic" };
+        }
+        if (brand === "isom" || brand === "mp42" || brand === "M4V ") {
+            return { mimeType: "video/mp4", extension: "mp4" };
+        }
+    }
+    if (ascii(bytes, 0, 5) === "%PDF-") {
+        return { mimeType: "application/pdf", extension: "pdf" };
+    }
+    if (isSvg(bytes)) {
+        return { mimeType: "image/svg+xml", extension: "svg" };
+    }
+    return null;
+}
+/** SVG has no magic number, so look for a root `<svg>` in the leading text. */
+function isSvg(bytes) {
+    const head = new TextDecoder("utf-8", { fatal: false })
+        .decode(bytes.slice(0, 1024))
+        .trimStart()
+        .toLowerCase();
+    if (head.startsWith("<svg"))
+        return true;
+    if (head.startsWith("<?xml") || head.startsWith("<!doctype svg")) {
+        return head.includes("<svg");
+    }
+    return false;
+}
+const IMAGE_TYPES = new Set([
+    "image/jpeg",
+    "image/png",
+    "image/gif",
+    "image/webp",
+    "image/avif",
+    "image/heic",
+    "image/svg+xml",
+]);
+const DOCUMENT_TYPES = new Set(["application/pdf"]);
+export const isImageType = (mimeType) => IMAGE_TYPES.has(mimeType);
+/**
+ * Whether a detected type is acceptable for a field's `accept` setting.
+ * `any` deliberately does not mean "anything": only the types listed here can
+ * be stored at all.
+ */
+export function isAccepted(mimeType, accept) {
+    if (accept === "image")
+        return IMAGE_TYPES.has(mimeType);
+    if (accept === "document")
+        return DOCUMENT_TYPES.has(mimeType);
+    return IMAGE_TYPES.has(mimeType) || DOCUMENT_TYPES.has(mimeType) || mimeType === "video/mp4";
+}
+/**
+ * SVG can carry scripts, so it is served under a sandbox CSP. Callers use this
+ * to decide whether the extra header is needed.
+ */
+export const isScriptable = (mimeType) => mimeType === "image/svg+xml";
+//# sourceMappingURL=file-type.js.map

package/dist/lib/file-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-type.js","sourceRoot":"","sources":["../../src/lib/file-type.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAE,SAAmB,EAAE,MAAM,GAAG,CAAC,EAAW,EAAE,CACjF,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;AAEnE,MAAM,KAAK,GAAG,CAAC,KAAiB,EAAE,MAAc,EAAE,MAAc,EAAU,EAAE,CAC1E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAEjG,MAAM,UAAU,cAAc,CAAC,KAAiB;IAC9C,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACnE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACvD,CAAC;IAED,8EAA8E;IAC9E,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACzC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YAC7D,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YAC7D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACzD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,SAAS,KAAK,CAAC,KAAiB;IAC9B,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;SACpD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;SAC5B,SAAS,EAAE;SACX,WAAW,EAAE,CAAC;IAEjB,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,YAAY;IACZ,WAAW;IACX,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAEpD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAW,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAEpF;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,MAAoC;IAC/E,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/D,OAAO,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,WAAW,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAW,EAAE,CAAC,QAAQ,KAAK,eAAe,CAAC"}

package/dist/lib/git.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Spawning the developer's own `git`.
+ *
+ * Deliberately the binary, not a JavaScript Git implementation. The reason is
+ * credentials: a developer's push already works because of their SSH agent,
+ * credential helper and remote configuration, and the spawned binary inherits
+ * all three. A library would have to reimplement them, and would do it worse
+ * — see decisions.md, "Local publishing spawns the `git` binary".
+ *
+ * `GIT_TERMINAL_PROMPT=0` because there is no terminal to answer: a push that
+ * would ask for credentials must fail with Git's own message rather than hang
+ * the request that triggered it.
+ */
+export declare class GitError extends Error {
+    readonly stderr: string;
+    readonly exitCode: number | null;
+    name: string;
+    constructor(message: string, stderr: string, exitCode: number | null);
+}
+export interface GitRunner {
+    /** Runs `git` in the runner's directory. Trimmed stdout, or a `GitError`. */
+    run(args: string[]): Promise<string>;
+    /** Like `run`, but null instead of a throw — for questions Git may say no to. */
+    tryRun(args: string[]): Promise<string | null>;
+}
+export declare function gitRunner(cwd: string): GitRunner;
+/** The line a person should see first — Git puts its verdict there. */
+export declare function firstLine(text: string): string;
+//# sourceMappingURL=git.d.ts.map

package/dist/lib/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/lib/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,qBAAa,QAAS,SAAQ,KAAK;IAI/B,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAJzB,IAAI,SAAc;gBAEzB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GAAG,IAAI;CAInC;AAED,MAAM,WAAW,SAAS;IACxB,6EAA6E;IAC7E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,iFAAiF;IACjF,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAChD;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAyChD;AAED,uEAAuE;AACvE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO9C"}

package/dist/lib/git.js

@@ -0,0 +1,62 @@
+/**
+ * Spawning the developer's own `git`.
+ *
+ * Deliberately the binary, not a JavaScript Git implementation. The reason is
+ * credentials: a developer's push already works because of their SSH agent,
+ * credential helper and remote configuration, and the spawned binary inherits
+ * all three. A library would have to reimplement them, and would do it worse
+ * — see decisions.md, "Local publishing spawns the `git` binary".
+ *
+ * `GIT_TERMINAL_PROMPT=0` because there is no terminal to answer: a push that
+ * would ask for credentials must fail with Git's own message rather than hang
+ * the request that triggered it.
+ */
+import { execFile } from "node:child_process";
+export class GitError extends Error {
+    stderr;
+    exitCode;
+    name = "GitError";
+    constructor(message, stderr, exitCode) {
+        super(message);
+        this.stderr = stderr;
+        this.exitCode = exitCode;
+    }
+}
+export function gitRunner(cwd) {
+    const run = (args) => new Promise((resolve, reject) => {
+        execFile("git", args, {
+            cwd,
+            env: { ...process.env, GIT_TERMINAL_PROMPT: "0" },
+            timeout: 60_000,
+            maxBuffer: 10 * 1024 * 1024,
+        }, (error, stdout, stderr) => {
+            if (error) {
+                const missing = error.code === "ENOENT";
+                reject(new GitError(missing
+                    ? "Git is not installed, or not on the PATH."
+                    : firstLine(stderr) || error.message, stderr, missing ? null : (error.code ?? null)));
+                return;
+            }
+            resolve(stdout.replace(/\n$/, ""));
+        });
+    });
+    return {
+        run,
+        async tryRun(args) {
+            try {
+                return await run(args);
+            }
+            catch {
+                return null;
+            }
+        },
+    };
+}
+/** The line a person should see first — Git puts its verdict there. */
+export function firstLine(text) {
+    return (text
+        .split("\n")
+        .map((line) => line.trim())
+        .find((line) => line !== "") ?? "");
+}
+//# sourceMappingURL=git.js.map

package/dist/lib/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/lib/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,OAAO,QAAS,SAAQ,KAAK;IAItB;IACA;IAJF,IAAI,GAAG,UAAU,CAAC;IAC3B,YACE,OAAe,EACN,MAAc,EACd,QAAuB;QAEhC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAAe;IAGlC,CAAC;CACF;AASD,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,GAAG,GAAG,CAAC,IAAc,EAAmB,EAAE,CAC9C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9B,QAAQ,CACN,KAAK,EACL,IAAI,EACJ;YACE,GAAG;YACH,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;YACjD,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC5B,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,OAAO,GAAI,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC;gBACnE,MAAM,CACJ,IAAI,QAAQ,CACV,OAAO;oBACL,CAAC,CAAC,2CAA2C;oBAC7C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EACtC,MAAM,EACN,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,KAA2B,CAAC,IAAI,IAAI,IAAI,CAAC,CAC7D,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,OAAO;QACL,GAAG;QACH,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,IAAI,CAAC;gBACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,CACL,IAAI;SACD,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,EAAE,CACrC,CAAC;AACJ,CAAC"}

package/dist/lib/id.d.ts

@@ -0,0 +1,13 @@
+/**
+ * ULID generation.
+ *
+ * Lexicographically sortable, so `ORDER BY id` matches creation order and
+ * pagination stays stable without a secondary sort. This is an identifier
+ * encoding, not a cryptographic construction — the randomness comes from
+ * `crypto.randomBytes`.
+ */
+export declare function ulid(now?: number): string;
+export declare function isUlid(value: string): boolean;
+/** URL-safe random token for sessions and one-time links. */
+export declare function randomToken(bytes?: number): string;
+//# sourceMappingURL=id.d.ts.map

package/dist/lib/id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../../src/lib/id.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAsCH,wBAAgB,IAAI,CAAC,GAAG,SAAa,GAAG,MAAM,CAQ7C;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE7C;AAED,6DAA6D;AAC7D,wBAAgB,WAAW,CAAC,KAAK,SAAK,GAAG,MAAM,CAE9C"}

package/dist/lib/id.js

@@ -0,0 +1,56 @@
+/**
+ * ULID generation.
+ *
+ * Lexicographically sortable, so `ORDER BY id` matches creation order and
+ * pagination stays stable without a secondary sort. This is an identifier
+ * encoding, not a cryptographic construction — the randomness comes from
+ * `crypto.randomBytes`.
+ */
+import { randomBytes } from "node:crypto";
+const ALPHABET = "0123456789ABCDEFGHJKMNPQRSTVWXYZ"; // Crockford base32
+const TIME_CHARS = 10;
+const RANDOM_CHARS = 16;
+let lastTime = 0;
+let lastRandom = [];
+function encodeTime(time) {
+    let out = "";
+    for (let i = TIME_CHARS - 1; i >= 0; i--) {
+        out = ALPHABET[time % 32] + out;
+        time = Math.floor(time / 32);
+    }
+    return out;
+}
+function randomChars() {
+    const bytes = randomBytes(RANDOM_CHARS);
+    return Array.from(bytes, (byte) => byte % 32);
+}
+/** Increments the random component so ids created in the same millisecond still sort. */
+function bumpRandom(chars) {
+    const next = [...chars];
+    for (let i = next.length - 1; i >= 0; i--) {
+        if (next[i] < 31) {
+            next[i] = next[i] + 1;
+            return next;
+        }
+        next[i] = 0;
+    }
+    return randomChars();
+}
+export function ulid(now = Date.now()) {
+    if (now === lastTime) {
+        lastRandom = bumpRandom(lastRandom);
+    }
+    else {
+        lastTime = now;
+        lastRandom = randomChars();
+    }
+    return encodeTime(now) + lastRandom.map((index) => ALPHABET[index]).join("");
+}
+export function isUlid(value) {
+    return value.length === 26 && [...value].every((char) => ALPHABET.includes(char));
+}
+/** URL-safe random token for sessions and one-time links. */
+export function randomToken(bytes = 32) {
+    return randomBytes(bytes).toString("base64url");
+}
+//# sourceMappingURL=id.js.map

package/dist/lib/id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../../src/lib/id.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,QAAQ,GAAG,kCAAkC,CAAC,CAAC,mBAAmB;AACxE,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,IAAI,QAAQ,GAAG,CAAC,CAAC;AACjB,IAAI,UAAU,GAAa,EAAE,CAAC;AAE9B,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,GAAG,GAAG,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;QAChC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,KAAe;IACjC,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACxB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,CAAC,CAAE,GAAG,EAAE,EAAE,CAAC;YAClB,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IACD,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACnC,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,GAAG,CAAC;QACf,UAAU,GAAG,WAAW,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,WAAW,CAAC,KAAK,GAAG,EAAE;IACpC,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC"}

package/dist/lib/logger.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Structured logging.
+ *
+ * JSON lines in production so a log shipper can parse them; a compact
+ * human-readable form in development.
+ */
+export type LogLevel = "debug" | "info" | "warn" | "error" | "silent";
+export interface Logger {
+    debug(message: string, fields?: Record<string, unknown>): void;
+    info(message: string, fields?: Record<string, unknown>): void;
+    warn(message: string, fields?: Record<string, unknown>): void;
+    error(message: string, fields?: Record<string, unknown>): void;
+    child(bindings: Record<string, unknown>): Logger;
+}
+export declare function createLogger(options: {
+    level: LogLevel;
+    pretty: boolean;
+    bindings?: Record<string, unknown>;
+}): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/lib/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/lib/logger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAUtE,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;CAClD;AASD,wBAAgB,YAAY,CAAC,OAAO,EAAE;IACpC,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,GAAG,MAAM,CAkCT"}

package/dist/lib/logger.js

@@ -0,0 +1,65 @@
+/**
+ * Structured logging.
+ *
+ * JSON lines in production so a log shipper can parse them; a compact
+ * human-readable form in development.
+ */
+const ORDER = {
+    debug: 10,
+    info: 20,
+    warn: 30,
+    error: 40,
+    silent: 100,
+};
+const COLORS = {
+    debug: "",
+    info: "",
+    warn: "",
+    error: "",
+};
+export function createLogger(options) {
+    const threshold = ORDER[options.level];
+    const bindings = options.bindings ?? {};
+    const write = (level, message, fields) => {
+        if (ORDER[level] < threshold)
+            return;
+        const payload = { ...bindings, ...fields };
+        const stream = level === "error" || level === "warn" ? process.stderr : process.stdout;
+        if (options.pretty) {
+            const extra = Object.keys(payload).length > 0 ? ` ${formatFields(payload)}` : "";
+            stream.write(`${COLORS[level]}${level.padEnd(5)} ${message}${extra}\n`);
+            return;
+        }
+        stream.write(`${JSON.stringify({
+            time: new Date().toISOString(),
+            level,
+            message,
+            ...payload,
+        })}\n`);
+    };
+    return {
+        debug: (message, fields) => write("debug", message, fields),
+        info: (message, fields) => write("info", message, fields),
+        warn: (message, fields) => write("warn", message, fields),
+        error: (message, fields) => write("error", message, fields),
+        child: (extra) => createLogger({ ...options, bindings: { ...bindings, ...extra } }),
+    };
+}
+function formatFields(fields) {
+    return Object.entries(fields)
+        .map(([key, value]) => `${key}=${format(value)}`)
+        .join(" ");
+}
+function format(value) {
+    if (typeof value === "string")
+        return value;
+    if (value instanceof Error)
+        return value.stack ?? value.message;
+    try {
+        return JSON.stringify(value) ?? String(value);
+    }
+    catch {
+        return String(value);
+    }
+}
+//# sourceMappingURL=logger.js.map

package/dist/lib/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/lib/logger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,KAAK,GAA6B;IACtC,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,GAAG;CACZ,CAAC;AAUF,MAAM,MAAM,GAAgD;IAC1D,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,KAAK,EAAE,OAAO;CACf,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,OAI5B;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IAExC,MAAM,KAAK,GAAG,CAAC,KAAkC,EAAE,OAAe,EAAE,MAAgC,EAAE,EAAE;QACtG,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,SAAS;YAAE,OAAO;QAErC,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAEvF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;QAED,MAAM,CAAC,KAAK,CACV,GAAG,IAAI,CAAC,SAAS,CAAC;YAChB,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,KAAK;YACL,OAAO;YACP,GAAG,OAAO;SACX,CAAC,IAAI,CACP,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;QAC3D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACzD,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACzD,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;QAC3D,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,YAAY,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAA+B;IACnD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,GAAG,QAAQ,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;SACzD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC;IAChE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/lib/ports.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The port Mica listens on when nobody says otherwise.
+ *
+ * 6422 is `MICA` on a telephone keypad, which is the only reason anybody will
+ * remember it. What matters more is what it is not: 3000, 4000, 4173, 4200,
+ * 4321, 5000, 5173, 8000, 8080 and 1313 all belong to something a developer is
+ * likely to be running beside Mica — Astro's dev server most of all — and IANA
+ * has 6420 and 6421 assigned but not 6422, so nothing on the machine is
+ * expected to want it.
+ *
+ * A port collision is a bad first minute: the command fails, and the reason is
+ * somebody else's software. Picking an unfashionable number is the whole fix.
+ */
+export declare const DEFAULT_PORT = 6422;
+/** The address the CLI prints and the browser opens. */
+export declare const DEFAULT_BASE_URL = "http://localhost:6422";
+//# sourceMappingURL=ports.d.ts.map

package/dist/lib/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../../src/lib/ports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,YAAY,OAAO,CAAC;AAEjC,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,0BAAqC,CAAC"}

package/dist/lib/ports.js

@@ -0,0 +1,17 @@
+/**
+ * The port Mica listens on when nobody says otherwise.
+ *
+ * 6422 is `MICA` on a telephone keypad, which is the only reason anybody will
+ * remember it. What matters more is what it is not: 3000, 4000, 4173, 4200,
+ * 4321, 5000, 5173, 8000, 8080 and 1313 all belong to something a developer is
+ * likely to be running beside Mica — Astro's dev server most of all — and IANA
+ * has 6420 and 6421 assigned but not 6422, so nothing on the machine is
+ * expected to want it.
+ *
+ * A port collision is a bad first minute: the command fails, and the reason is
+ * somebody else's software. Picking an unfashionable number is the whole fix.
+ */
+export const DEFAULT_PORT = 6422;
+/** The address the CLI prints and the browser opens. */
+export const DEFAULT_BASE_URL = `http://localhost:${DEFAULT_PORT}`;
+//# sourceMappingURL=ports.js.map

package/dist/lib/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../src/lib/ports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AAEjC,wDAAwD;AACxD,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,YAAY,EAAE,CAAC"}

package/dist/lib/rate-limit.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Fixed-window rate limiting, in memory.
+ *
+ * The CMS is a single process by design, so an in-memory counter is
+ * sufficient and avoids a Redis dependency. The trade-off is deliberate:
+ * counters reset on restart. Login is additionally protected by scrypt's cost,
+ * so a restart-and-retry loop gains an attacker very little.
+ */
+export interface RateLimitResult {
+    allowed: boolean;
+    remaining: number;
+    /** Seconds until the window resets. */
+    retryAfter: number;
+}
+export interface RateLimiter {
+    check(key: string): RateLimitResult;
+    /** Forgets a key — called after a successful login. */
+    reset(key: string): void;
+    size(): number;
+    stop(): void;
+}
+export interface RateLimiterOptions {
+    limit: number;
+    windowMs: number;
+    /** How often expired buckets are swept. */
+    sweepMs?: number;
+}
+export declare function createRateLimiter(options: RateLimiterOptions): RateLimiter;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/lib/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/lib/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAAC;IACpC,uDAAuD;IACvD,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,IAAI,MAAM,CAAC;IACf,IAAI,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CA8C1E"}

package/dist/lib/rate-limit.js

@@ -0,0 +1,47 @@
+/**
+ * Fixed-window rate limiting, in memory.
+ *
+ * The CMS is a single process by design, so an in-memory counter is
+ * sufficient and avoids a Redis dependency. The trade-off is deliberate:
+ * counters reset on restart. Login is additionally protected by scrypt's cost,
+ * so a restart-and-retry loop gains an attacker very little.
+ */
+export function createRateLimiter(options) {
+    const buckets = new Map();
+    const sweep = setInterval(() => {
+        const now = Date.now();
+        for (const [key, bucket] of buckets) {
+            if (bucket.resetAt <= now)
+                buckets.delete(key);
+        }
+    }, options.sweepMs ?? Math.max(options.windowMs, 60_000));
+    // A sweep timer must not keep the process alive on shutdown.
+    sweep.unref?.();
+    return {
+        check(key) {
+            const now = Date.now();
+            const bucket = buckets.get(key);
+            if (!bucket || bucket.resetAt <= now) {
+                buckets.set(key, { count: 1, resetAt: now + options.windowMs });
+                return { allowed: true, remaining: options.limit - 1, retryAfter: 0 };
+            }
+            bucket.count++;
+            const retryAfter = Math.ceil((bucket.resetAt - now) / 1000);
+            if (bucket.count > options.limit) {
+                return { allowed: false, remaining: 0, retryAfter };
+            }
+            return { allowed: true, remaining: options.limit - bucket.count, retryAfter };
+        },
+        reset(key) {
+            buckets.delete(key);
+        },
+        size() {
+            return buckets.size;
+        },
+        stop() {
+            clearInterval(sweep);
+            buckets.clear();
+        },
+    };
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/lib/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/lib/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAwBH,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8C,CAAC;IAEtE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAE1D,6DAA6D;IAC7D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAEhB,OAAO;QACL,KAAK,CAAC,GAAG;YACP,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEhC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YACxE,CAAC;YAED,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAE5D,IAAI,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;YACtD,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;QAChF,CAAC;QAED,KAAK,CAAC,GAAG;YACP,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAED,IAAI;YACF,OAAO,OAAO,CAAC,IAAI,CAAC;QACtB,CAAC;QAED,IAAI;YACF,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}