@morojs/moro 1.6.1 → 1.6.3

package/dist/core/middleware/built-in/index.d.ts

@@ -1,69 +1,36 @@
-export { auth } from './auth';
-export { rateLimit } from './rate-limit';
-export { cors } from './cors';
-export { validation } from './validation';
-export { requestLogger } from './request-logger';
-export { performanceMonitor } from './performance-monitor';
-export { errorTracker } from './error-tracker';
-export { cookie } from './cookie';
-export { csrf } from './csrf';
-export { csp } from './csp';
-export { sse } from './sse';
-export { session } from './session';
-export { cache } from './cache';
-export { cdn } from './cdn';
-export { requireAuth, requireRole, requirePermission, requireAdmin, guestOnly, optionalAuth, withAuth, protectedRoute, authUtils, authResponses, sessionHelpers, } from './auth-helpers';
-export { extendedProviders, enterpriseProviders, createCustomOAuthProvider, createCustomOIDCProvider, } from './auth-providers';
+export { auth } from './auth/index.js';
+export { rateLimit } from './rate-limit/index.js';
+export { cors } from './cors/index.js';
+export { validation } from './validation/index.js';
+export { requestLogger } from './request-logger/index.js';
+export { performanceMonitor } from './performance-monitor/index.js';
+export { errorTracker } from './error-tracker/index.js';
+export { cookie } from './cookie/index.js';
+export { csrf } from './csrf/index.js';
+export { csp } from './csp/index.js';
+export { sse } from './sse/index.js';
+export { session } from './session/index.js';
+export { cache } from './cache/index.js';
+export { cdn } from './cdn/index.js';
+export { requireAuth, requireRole, requirePermission, requireAdmin, guestOnly, optionalAuth, withAuth, protectedRoute, authUtils, authResponses, sessionHelpers, } from './auth/helpers.js';
+export { safeVerifyJWT, extractJWTFromHeader, createAuthErrorResponse, type JWTVerificationResult, } from './auth/jwt-helpers.js';
+export { extendedProviders, enterpriseProviders, createCustomOAuthProvider, createCustomOIDCProvider, } from './auth/providers.js';
 export declare const builtInMiddleware: {
-    auth: (options: import("../../..").AuthOptions) => import("..").MiddlewareInterface;
+    auth: (options: import("./auth/index.js").AuthOptions) => import("../index.js").MiddlewareInterface;
     rateLimit: (options?: {
         windowMs?: number;
         max?: number;
         message?: string;
-    }) => import("..").MiddlewareInterface;
-    cors: (options?: any) => import("..").MiddlewareInterface;
-    validation: () => import("..").MiddlewareInterface;
-    cookie: (options?: {
-        secret?: string;
-        signed?: boolean;
-    }) => import("..").MiddlewareInterface;
-    csrf: (options?: {
-        secret?: string;
-        tokenLength?: number;
-        cookieName?: string;
-        headerName?: string;
-        ignoreMethods?: string[];
-        sameSite?: boolean;
-    }) => import("..").MiddlewareInterface;
-    csp: (options?: {
-        directives?: {
-            defaultSrc?: string[];
-            scriptSrc?: string[];
-            styleSrc?: string[];
-            imgSrc?: string[];
-            connectSrc?: string[];
-            fontSrc?: string[];
-            objectSrc?: string[];
-            mediaSrc?: string[];
-            frameSrc?: string[];
-            childSrc?: string[];
-            workerSrc?: string[];
-            formAction?: string[];
-            upgradeInsecureRequests?: boolean;
-            blockAllMixedContent?: boolean;
-        };
-        reportOnly?: boolean;
-        reportUri?: string;
-        nonce?: boolean;
-    }) => import("..").MiddlewareInterface;
-    sse: (options?: {
-        heartbeat?: number;
-        retry?: number;
-        cors?: boolean;
-    }) => import("..").MiddlewareInterface;
-    session: (options?: import("./session").SessionOptions) => import("..").MiddlewareInterface;
-    cache: (options?: import("../../..").CacheOptions) => import("..").MiddlewareInterface;
-    cdn: (options?: import("../../..").CDNOptions) => import("..").MiddlewareInterface;
+    }) => import("../index.js").MiddlewareInterface;
+    cors: (options?: import("./cors/core.js").CORSOptions) => import("../index.js").MiddlewareInterface;
+    validation: () => import("../index.js").MiddlewareInterface;
+    cookie: (config?: import("./cookie/hook.js").CookieConfig) => import("../index.js").MiddlewareInterface;
+    csrf: (options?: import("./csrf/core.js").CSRFOptions) => import("../index.js").MiddlewareInterface;
+    csp: (options?: import("./csp/core.js").CSPOptions) => import("../index.js").MiddlewareInterface;
+    sse: (options?: import("./sse/core.js").SSEOptions) => import("../index.js").MiddlewareInterface;
+    session: (options?: import("./session/core.js").SessionOptions) => import("../index.js").MiddlewareInterface;
+    cache: (options?: import("../../../index.js").CacheOptions) => import("../index.js").MiddlewareInterface;
+    cdn: (options?: import("./cdn/index.js").CDNOptions) => import("../index.js").MiddlewareInterface;
 };
 export declare const simpleMiddleware: {
     requestLogger: (context: any) => Promise<void>;

package/dist/core/middleware/built-in/index.js

@@ -1,88 +1,58 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.simpleMiddleware = exports.builtInMiddleware = exports.createCustomOIDCProvider = exports.createCustomOAuthProvider = exports.enterpriseProviders = exports.extendedProviders = exports.sessionHelpers = exports.authResponses = exports.authUtils = exports.protectedRoute = exports.withAuth = exports.optionalAuth = exports.guestOnly = exports.requireAdmin = exports.requirePermission = exports.requireRole = exports.requireAuth = exports.cdn = exports.cache = exports.session = exports.sse = exports.csp = exports.csrf = exports.cookie = exports.errorTracker = exports.performanceMonitor = exports.requestLogger = exports.validation = exports.cors = exports.rateLimit = exports.auth = void 0;
 // Built-in Middleware Exports
-var auth_1 = require("./auth");
-Object.defineProperty(exports, "auth", { enumerable: true, get: function () { return auth_1.auth; } });
-var rate_limit_1 = require("./rate-limit");
-Object.defineProperty(exports, "rateLimit", { enumerable: true, get: function () { return rate_limit_1.rateLimit; } });
-var cors_1 = require("./cors");
-Object.defineProperty(exports, "cors", { enumerable: true, get: function () { return cors_1.cors; } });
-var validation_1 = require("./validation");
-Object.defineProperty(exports, "validation", { enumerable: true, get: function () { return validation_1.validation; } });
-var request_logger_1 = require("./request-logger");
-Object.defineProperty(exports, "requestLogger", { enumerable: true, get: function () { return request_logger_1.requestLogger; } });
-var performance_monitor_1 = require("./performance-monitor");
-Object.defineProperty(exports, "performanceMonitor", { enumerable: true, get: function () { return performance_monitor_1.performanceMonitor; } });
-var error_tracker_1 = require("./error-tracker");
-Object.defineProperty(exports, "errorTracker", { enumerable: true, get: function () { return error_tracker_1.errorTracker; } });
+export { auth } from './auth/index.js';
+export { rateLimit } from './rate-limit/index.js';
+export { cors } from './cors/index.js';
+export { validation } from './validation/index.js';
+export { requestLogger } from './request-logger/index.js';
+export { performanceMonitor } from './performance-monitor/index.js';
+export { errorTracker } from './error-tracker/index.js';
 // Advanced Security & Performance Middleware
-var cookie_1 = require("./cookie");
-Object.defineProperty(exports, "cookie", { enumerable: true, get: function () { return cookie_1.cookie; } });
-var csrf_1 = require("./csrf");
-Object.defineProperty(exports, "csrf", { enumerable: true, get: function () { return csrf_1.csrf; } });
-var csp_1 = require("./csp");
-Object.defineProperty(exports, "csp", { enumerable: true, get: function () { return csp_1.csp; } });
-var sse_1 = require("./sse");
-Object.defineProperty(exports, "sse", { enumerable: true, get: function () { return sse_1.sse; } });
-var session_1 = require("./session");
-Object.defineProperty(exports, "session", { enumerable: true, get: function () { return session_1.session; } });
+export { cookie } from './cookie/index.js';
+export { csrf } from './csrf/index.js';
+export { csp } from './csp/index.js';
+export { sse } from './sse/index.js';
+export { session } from './session/index.js';
 // Clean Architecture Middleware
-var cache_1 = require("./cache");
-Object.defineProperty(exports, "cache", { enumerable: true, get: function () { return cache_1.cache; } });
-var cdn_1 = require("./cdn");
-Object.defineProperty(exports, "cdn", { enumerable: true, get: function () { return cdn_1.cdn; } });
+export { cache } from './cache/index.js';
+export { cdn } from './cdn/index.js';
 // Auth Helpers and Extended Providers
-var auth_helpers_1 = require("./auth-helpers");
-Object.defineProperty(exports, "requireAuth", { enumerable: true, get: function () { return auth_helpers_1.requireAuth; } });
-Object.defineProperty(exports, "requireRole", { enumerable: true, get: function () { return auth_helpers_1.requireRole; } });
-Object.defineProperty(exports, "requirePermission", { enumerable: true, get: function () { return auth_helpers_1.requirePermission; } });
-Object.defineProperty(exports, "requireAdmin", { enumerable: true, get: function () { return auth_helpers_1.requireAdmin; } });
-Object.defineProperty(exports, "guestOnly", { enumerable: true, get: function () { return auth_helpers_1.guestOnly; } });
-Object.defineProperty(exports, "optionalAuth", { enumerable: true, get: function () { return auth_helpers_1.optionalAuth; } });
-Object.defineProperty(exports, "withAuth", { enumerable: true, get: function () { return auth_helpers_1.withAuth; } });
-Object.defineProperty(exports, "protectedRoute", { enumerable: true, get: function () { return auth_helpers_1.protectedRoute; } });
-Object.defineProperty(exports, "authUtils", { enumerable: true, get: function () { return auth_helpers_1.authUtils; } });
-Object.defineProperty(exports, "authResponses", { enumerable: true, get: function () { return auth_helpers_1.authResponses; } });
-Object.defineProperty(exports, "sessionHelpers", { enumerable: true, get: function () { return auth_helpers_1.sessionHelpers; } });
-var auth_providers_1 = require("./auth-providers");
-Object.defineProperty(exports, "extendedProviders", { enumerable: true, get: function () { return auth_providers_1.extendedProviders; } });
-Object.defineProperty(exports, "enterpriseProviders", { enumerable: true, get: function () { return auth_providers_1.enterpriseProviders; } });
-Object.defineProperty(exports, "createCustomOAuthProvider", { enumerable: true, get: function () { return auth_providers_1.createCustomOAuthProvider; } });
-Object.defineProperty(exports, "createCustomOIDCProvider", { enumerable: true, get: function () { return auth_providers_1.createCustomOIDCProvider; } });
+export { requireAuth, requireRole, requirePermission, requireAdmin, guestOnly, optionalAuth, withAuth, protectedRoute, authUtils, authResponses, sessionHelpers, } from './auth/helpers.js';
+// JWT Utilities for Custom Middleware
+export { safeVerifyJWT, extractJWTFromHeader, createAuthErrorResponse, } from './auth/jwt-helpers.js';
+export { extendedProviders, enterpriseProviders, createCustomOAuthProvider, createCustomOIDCProvider, } from './auth/providers.js';
 // Import for collections
-const auth_2 = require("./auth");
-const rate_limit_2 = require("./rate-limit");
-const cors_2 = require("./cors");
-const validation_2 = require("./validation");
-const request_logger_2 = require("./request-logger");
-const performance_monitor_2 = require("./performance-monitor");
-const error_tracker_2 = require("./error-tracker");
-const cookie_2 = require("./cookie");
-const csrf_2 = require("./csrf");
-const csp_2 = require("./csp");
-const sse_2 = require("./sse");
-const session_2 = require("./session");
-const cache_2 = require("./cache");
-const cdn_2 = require("./cdn");
-exports.builtInMiddleware = {
-    auth: auth_2.auth,
-    rateLimit: rate_limit_2.rateLimit,
-    cors: cors_2.cors,
-    validation: validation_2.validation,
+import { auth } from './auth/index.js';
+import { rateLimit } from './rate-limit/index.js';
+import { cors } from './cors/index.js';
+import { validation } from './validation/index.js';
+import { requestLogger } from './request-logger/index.js';
+import { performanceMonitor } from './performance-monitor/index.js';
+import { errorTracker } from './error-tracker/index.js';
+import { cookie } from './cookie/index.js';
+import { csrf } from './csrf/index.js';
+import { csp } from './csp/index.js';
+import { sse } from './sse/index.js';
+import { session } from './session/index.js';
+import { cache } from './cache/index.js';
+import { cdn } from './cdn/index.js';
+export const builtInMiddleware = {
+    auth,
+    rateLimit,
+    cors,
+    validation,
     // Advanced middleware
-    cookie: cookie_2.cookie,
-    csrf: csrf_2.csrf,
-    csp: csp_2.csp,
-    sse: sse_2.sse,
-    session: session_2.session,
+    cookie,
+    csrf,
+    csp,
+    sse,
+    session,
     // Clean architecture middleware
-    cache: cache_2.cache,
-    cdn: cdn_2.cdn,
+    cache,
+    cdn,
 };
-exports.simpleMiddleware = {
-    requestLogger: request_logger_2.requestLogger,
-    performanceMonitor: performance_monitor_2.performanceMonitor,
-    errorTracker: error_tracker_2.errorTracker,
+export const simpleMiddleware = {
+    requestLogger,
+    performanceMonitor,
+    errorTracker,
 };
 //# sourceMappingURL=index.js.map

package/dist/core/middleware/built-in/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/middleware/built-in/index.ts"],"names":[],"mappings":";;;AAAA,8BAA8B;AAC9B,+BAA8B;AAArB,4FAAA,IAAI,OAAA;AACb,2CAAyC;AAAhC,uGAAA,SAAS,OAAA;AAClB,+BAA8B;AAArB,4FAAA,IAAI,OAAA;AACb,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,mDAAiD;AAAxC,+GAAA,aAAa,OAAA;AACtB,6DAA2D;AAAlD,yHAAA,kBAAkB,OAAA;AAC3B,iDAA+C;AAAtC,6GAAA,YAAY,OAAA;AAErB,6CAA6C;AAC7C,mCAAkC;AAAzB,gGAAA,MAAM,OAAA;AACf,+BAA8B;AAArB,4FAAA,IAAI,OAAA;AACb,6BAA4B;AAAnB,0FAAA,GAAG,OAAA;AACZ,6BAA4B;AAAnB,0FAAA,GAAG,OAAA;AACZ,qCAAoC;AAA3B,kGAAA,OAAO,OAAA;AAEhB,gCAAgC;AAChC,iCAAgC;AAAvB,8FAAA,KAAK,OAAA;AACd,6BAA4B;AAAnB,0FAAA,GAAG,OAAA;AAEZ,sCAAsC;AACtC,+CAYwB;AAXtB,2GAAA,WAAW,OAAA;AACX,2GAAA,WAAW,OAAA;AACX,iHAAA,iBAAiB,OAAA;AACjB,4GAAA,YAAY,OAAA;AACZ,yGAAA,SAAS,OAAA;AACT,4GAAA,YAAY,OAAA;AACZ,wGAAA,QAAQ,OAAA;AACR,8GAAA,cAAc,OAAA;AACd,yGAAA,SAAS,OAAA;AACT,6GAAA,aAAa,OAAA;AACb,8GAAA,cAAc,OAAA;AAGhB,mDAK0B;AAJxB,mHAAA,iBAAiB,OAAA;AACjB,qHAAA,mBAAmB,OAAA;AACnB,2HAAA,yBAAyB,OAAA;AACzB,0HAAA,wBAAwB,OAAA;AAG1B,yBAAyB;AACzB,iCAA8B;AAC9B,6CAAyC;AACzC,iCAA8B;AAC9B,6CAA0C;AAC1C,qDAAiD;AACjD,+DAA2D;AAC3D,mDAA+C;AAC/C,qCAAkC;AAClC,iCAA8B;AAC9B,+BAA4B;AAC5B,+BAA4B;AAC5B,uCAAoC;AACpC,mCAAgC;AAChC,+BAA4B;AAEf,QAAA,iBAAiB,GAAG;IAC/B,IAAI,EAAJ,WAAI;IACJ,SAAS,EAAT,sBAAS;IACT,IAAI,EAAJ,WAAI;IACJ,UAAU,EAAV,uBAAU;IACV,sBAAsB;IACtB,MAAM,EAAN,eAAM;IACN,IAAI,EAAJ,WAAI;IACJ,GAAG,EAAH,SAAG;IACH,GAAG,EAAH,SAAG;IACH,OAAO,EAAP,iBAAO;IACP,gCAAgC;IAChC,KAAK,EAAL,aAAK;IACL,GAAG,EAAH,SAAG;CACJ,CAAC;AAEW,QAAA,gBAAgB,GAAG;IAC9B,aAAa,EAAb,8BAAa;IACb,kBAAkB,EAAlB,wCAAkB;IAClB,YAAY,EAAZ,4BAAY;CACb,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/middleware/built-in/index.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,6CAA6C;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,gCAAgC;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAErC,sCAAsC;AACtC,OAAO,EACL,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,SAAS,EACT,aAAa,EACb,cAAc,GACf,MAAM,mBAAmB,CAAC;AAE3B,sCAAsC;AACtC,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,uBAAuB,GAExB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAE7B,yBAAyB;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAErC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI;IACJ,SAAS;IACT,IAAI;IACJ,UAAU;IACV,sBAAsB;IACtB,MAAM;IACN,IAAI;IACJ,GAAG;IACH,GAAG;IACH,OAAO;IACP,gCAAgC;IAChC,KAAK;IACL,GAAG;CACJ,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,aAAa;IACb,kBAAkB;IAClB,YAAY;CACb,CAAC"}

package/dist/core/middleware/built-in/performance-monitor/index.d.ts

@@ -0,0 +1 @@
+export { performanceMonitor } from './middleware.js';

package/dist/core/middleware/built-in/performance-monitor/index.js

@@ -0,0 +1,4 @@
+// Performance Monitor - Main entry point
+// Re-exports the performance monitor middleware
+export { performanceMonitor } from './middleware.js';
+//# sourceMappingURL=index.js.map

package/dist/core/middleware/built-in/performance-monitor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/performance-monitor/index.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,gDAAgD;AAEhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/core/middleware/built-in/performance-monitor/middleware.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Performance monitoring middleware
+ * Tracks request duration and logs warnings for slow requests
+ *
+ * @example
+ * ```ts
+ * import { performanceMonitor } from '@/middleware/built-in/performance-monitor';
+ *
+ * app.use(performanceMonitor);
+ * ```
+ */
+export declare const performanceMonitor: (context: any) => Promise<void>;

package/dist/core/middleware/built-in/performance-monitor/middleware.js

@@ -0,0 +1,29 @@
+// Performance Monitor Middleware
+import { createFrameworkLogger } from '../../../logger/index.js';
+const logger = createFrameworkLogger('PerformanceMonitor');
+/**
+ * Performance monitoring middleware
+ * Tracks request duration and logs warnings for slow requests
+ *
+ * @example
+ * ```ts
+ * import { performanceMonitor } from '@/middleware/built-in/performance-monitor';
+ *
+ * app.use(performanceMonitor);
+ * ```
+ */
+export const performanceMonitor = async (context) => {
+    const startTime = Date.now();
+    context.onComplete = () => {
+        const duration = Date.now() - startTime;
+        // Log slow requests
+        if (duration > 1000) {
+            logger.warn(`Slow request detected: ${context.request?.path} took ${duration}ms`, 'SlowRequest', {
+                path: context.request?.path,
+                method: context.request?.method,
+                duration,
+            });
+        }
+    };
+};
+//# sourceMappingURL=middleware.js.map

package/dist/core/middleware/built-in/performance-monitor/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/performance-monitor/middleware.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,MAAM,MAAM,GAAG,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;AAE3D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAY,EAAiB,EAAE;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO,CAAC,UAAU,GAAG,GAAG,EAAE;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,oBAAoB;QACpB,IAAI,QAAQ,GAAG,IAAI,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CACT,0BAA0B,OAAO,CAAC,OAAO,EAAE,IAAI,SAAS,QAAQ,IAAI,EACpE,aAAa,EACb;gBACE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI;gBAC3B,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM;gBAC/B,QAAQ;aACT,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/dist/core/middleware/built-in/rate-limit/core.d.ts

@@ -0,0 +1,33 @@
+import { HttpRequest, HttpResponse } from '../../../../types/http.js';
+export interface RateLimitConfig {
+    requests: number;
+    window: number;
+    skipSuccessfulRequests?: boolean;
+}
+/**
+ * RateLimitCore - Core rate limiting logic
+ * Used directly by the router for route-based rate limiting
+ * Can be instantiated for use in middleware or hooks
+ */
+export declare class RateLimitCore {
+    private store;
+    /**
+     * High-level check for router use: checkLimit(req, res, config)
+     * Sends response if rate limit exceeded
+     */
+    checkLimit(req: HttpRequest, res: HttpResponse, config: RateLimitConfig): Promise<void>;
+    /**
+     * Low-level check method
+     * Returns true if request is allowed, false if rate limit exceeded
+     */
+    check(clientId: string, routeKey: string, requests: number, window: number): boolean;
+    /**
+     * Get retry-after time in seconds for a rate-limited client
+     */
+    getRetryAfter(clientId: string, routeKey: string): number;
+    /**
+     * Clear all rate limit data
+     */
+    clear(): void;
+}
+export declare const sharedRateLimitCore: RateLimitCore;

package/dist/core/middleware/built-in/rate-limit/core.js

@@ -0,0 +1,86 @@
+// Rate Limit Core - Reusable rate limiting logic
+import { createFrameworkLogger } from '../../../logger/index.js';
+const logger = createFrameworkLogger('RateLimitCore');
+// ===== Core Logic =====
+/**
+ * RateLimitCore - Core rate limiting logic
+ * Used directly by the router for route-based rate limiting
+ * Can be instantiated for use in middleware or hooks
+ */
+export class RateLimitCore {
+    store = new Map();
+    /**
+     * High-level check for router use: checkLimit(req, res, config)
+     * Sends response if rate limit exceeded
+     */
+    async checkLimit(req, res, config) {
+        // Don't send response if headers already sent
+        if (res.headersSent) {
+            return;
+        }
+        const clientId = req.ip || req.connection?.remoteAddress || 'unknown';
+        const routeKey = `${req.method}:${req.path}`;
+        const allowed = this.check(clientId, routeKey, config.requests, config.window);
+        if (!allowed) {
+            const retryAfter = this.getRetryAfter(clientId, routeKey);
+            res.status(429).json({
+                success: false,
+                error: 'Rate limit exceeded',
+                retryAfter,
+            });
+            return;
+        }
+    }
+    /**
+     * Low-level check method
+     * Returns true if request is allowed, false if rate limit exceeded
+     */
+    check(clientId, routeKey, requests, window) {
+        const key = `${routeKey}:${clientId}`;
+        const now = Date.now();
+        if (!this.store.has(key)) {
+            this.store.set(key, { count: 1, resetTime: now + window });
+            return true;
+        }
+        const limitData = this.store.get(key);
+        if (!limitData) {
+            return true;
+        }
+        if (now > limitData.resetTime) {
+            limitData.count = 1;
+            limitData.resetTime = now + window;
+            return true;
+        }
+        limitData.count++;
+        if (limitData.count > requests) {
+            logger.warn('Rate limit exceeded', 'RateLimit', {
+                clientId,
+                route: routeKey,
+                count: limitData.count,
+                limit: requests,
+            });
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Get retry-after time in seconds for a rate-limited client
+     */
+    getRetryAfter(clientId, routeKey) {
+        const key = `${routeKey}:${clientId}`;
+        const limitData = this.store.get(key);
+        if (limitData) {
+            return Math.ceil((limitData.resetTime - Date.now()) / 1000);
+        }
+        return 0;
+    }
+    /**
+     * Clear all rate limit data
+     */
+    clear() {
+        this.store.clear();
+    }
+}
+// Shared instance for route-based rate limiting
+export const sharedRateLimitCore = new RateLimitCore();
+//# sourceMappingURL=core.js.map

package/dist/core/middleware/built-in/rate-limit/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/rate-limit/core.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,MAAM,MAAM,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC;AAetD,yBAAyB;AAEzB;;;;GAIG;AACH,MAAM,OAAO,aAAa;IAChB,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAElD;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,GAAgB,EAAE,GAAiB,EAAE,MAAuB;QAC3E,8CAA8C;QAC9C,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,IAAK,GAAG,CAAC,UAAkB,EAAE,aAAa,IAAI,SAAS,CAAC;QAC/E,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAE7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAE/E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,qBAAqB;gBAC5B,UAAU;aACX,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAgB,EAAE,QAAgB,EAAE,QAAgB,EAAE,MAAc;QACxE,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,GAAG,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;YAC9B,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC;YACpB,SAAS,CAAC,SAAS,GAAG,GAAG,GAAG,MAAM,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,SAAS,CAAC,KAAK,EAAE,CAAC;QAElB,IAAI,SAAS,CAAC,KAAK,GAAG,QAAQ,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,EAAE;gBAC9C,QAAQ;gBACR,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,QAAgB,EAAE,QAAgB;QAC9C,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,aAAa,EAAE,CAAC"}

package/dist/core/middleware/built-in/rate-limit/hook.d.ts

@@ -0,0 +1,20 @@
+import { MiddlewareInterface } from '../../../../types/hooks.js';
+/**
+ * Rate limit hook for global usage
+ * Registers with the hooks system for application-wide rate limiting
+ *
+ * @example
+ * ```ts
+ * import { rateLimit } from '@/middleware/built-in/rate-limit';
+ *
+ * app.use(rateLimit({
+ *   windowMs: 60000,  // 1 minute
+ *   max: 100          // 100 requests per window
+ * }));
+ * ```
+ */
+export declare const rateLimit: (options?: {
+    windowMs?: number;
+    max?: number;
+    message?: string;
+}) => MiddlewareInterface;

package/dist/core/middleware/built-in/{rate-limit.js → rate-limit/hook.js}

@@ -1,9 +1,21 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.rateLimit = void 0;
-const logger_1 = require("../../logger");
-const logger = (0, logger_1.createFrameworkLogger)('RateLimitMiddleware');
-const rateLimit = (options = {}) => ({
+import { createFrameworkLogger } from '../../../logger/index.js';
+import { RateLimitCore } from './core.js';
+const logger = createFrameworkLogger('RateLimitMiddleware');
+/**
+ * Rate limit hook for global usage
+ * Registers with the hooks system for application-wide rate limiting
+ *
+ * @example
+ * ```ts
+ * import { rateLimit } from '@/middleware/built-in/rate-limit';
+ *
+ * app.use(rateLimit({
+ *   windowMs: 60000,  // 1 minute
+ *   max: 100          // 100 requests per window
+ * }));
+ * ```
+ */
+export const rateLimit = (options = {}) => ({
     name: 'rate-limit',
     version: '1.0.0',
     metadata: {
@@ -12,30 +24,21 @@ const rateLimit = (options = {}) => ({
         description: 'Rate limiting middleware with configurable windows',
         author: 'MoroJS Team',
     },
-    install: async (hooks, options = {}) => {
+    install: async (hooks, _middlewareOptions = {}) => {
         logger.debug('Installing rate limit middleware', 'Installation', {
             options,
         });
         const windowMs = options.windowMs || 60000; // 1 minute default
         const max = options.max || 100; // 100 requests per window
-        const clientCounts = new Map();
+        const core = new RateLimitCore();
         hooks.before('request', async (context) => {
             const req = context.request;
             const clientId = req.connection?.remoteAddress || 'unknown';
-            const now = Date.now();
-            if (!clientCounts.has(clientId)) {
-                clientCounts.set(clientId, { count: 0, resetTime: now + windowMs });
-            }
-            const client = clientCounts.get(clientId);
-            if (now > client.resetTime) {
-                client.count = 0;
-                client.resetTime = now + windowMs;
-            }
-            client.count++;
-            if (client.count > max) {
+            const routeKey = `${req.method}:${req.path}`;
+            const allowed = core.check(clientId, routeKey, max, windowMs);
+            if (!allowed) {
                 logger.warn(`Rate limit exceeded for ${clientId}`, 'RateLimit', {
                     clientId,
-                    count: client.count,
                     max,
                 });
                 throw new Error(options.message || 'Too many requests');
@@ -43,5 +46,4 @@ const rateLimit = (options = {}) => ({
         });
     },
 });
-exports.rateLimit = rateLimit;
-//# sourceMappingURL=rate-limit.js.map
+//# sourceMappingURL=hook.js.map

package/dist/core/middleware/built-in/rate-limit/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/rate-limit/hook.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,MAAM,GAAG,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;AAE5D;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,UAII,EAAE,EACe,EAAE,CAAC,CAAC;IACzB,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE;QACR,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,oDAAoD;QACjE,MAAM,EAAE,aAAa;KACtB;IAED,OAAO,EAAE,KAAK,EAAE,KAAU,EAAE,qBAA0B,EAAE,EAAE,EAAE;QAC1D,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,cAAc,EAAE;YAC/D,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,mBAAmB;QAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,0BAA0B;QAC1D,MAAM,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;QAEjC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,OAAoB,EAAE,EAAE;YACrD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAc,CAAC;YACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,aAAa,IAAI,SAAS,CAAC;YAC5D,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAE7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAE9D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,2BAA2B,QAAQ,EAAE,EAAE,WAAW,EAAE;oBAC9D,QAAQ;oBACR,GAAG;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,mBAAmB,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/core/middleware/built-in/rate-limit/index.d.ts

@@ -0,0 +1,3 @@
+export { RateLimitCore, sharedRateLimitCore, type RateLimitConfig } from './core.js';
+export { createRateLimitMiddleware } from './middleware.js';
+export { rateLimit } from './hook.js';

package/dist/core/middleware/built-in/rate-limit/index.js

@@ -0,0 +1,9 @@
+// Rate Limit - Main entry point
+// Re-exports all public APIs for the rate limit built-in
+// Core (for direct use by router and custom implementations)
+export { RateLimitCore, sharedRateLimitCore } from './core.js';
+// Middleware (for middleware chains)
+export { createRateLimitMiddleware } from './middleware.js';
+// Hook (for global registration)
+export { rateLimit } from './hook.js';
+//# sourceMappingURL=index.js.map

package/dist/core/middleware/built-in/rate-limit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/rate-limit/index.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,yDAAyD;AAEzD,6DAA6D;AAC7D,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAwB,MAAM,WAAW,CAAC;AAErF,qCAAqC;AACrC,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,iCAAiC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC"}

package/dist/core/middleware/built-in/rate-limit/middleware.d.ts

@@ -0,0 +1,16 @@
+import { StandardMiddleware } from '../../../../types/hooks.js';
+import { type RateLimitConfig } from './core.js';
+/**
+ * Create rate limit middleware for use in middleware chains
+ *
+ * @example
+ * ```ts
+ * const rateLimitMw = createRateLimitMiddleware({
+ *   requests: 100,
+ *   window: 60000
+ * });
+ *
+ * app.use(rateLimitMw);
+ * ```
+ */
+export declare function createRateLimitMiddleware(config: RateLimitConfig): StandardMiddleware;

package/dist/core/middleware/built-in/rate-limit/middleware.js

@@ -0,0 +1,35 @@
+import { sharedRateLimitCore } from './core.js';
+/**
+ * Create rate limit middleware for use in middleware chains
+ *
+ * @example
+ * ```ts
+ * const rateLimitMw = createRateLimitMiddleware({
+ *   requests: 100,
+ *   window: 60000
+ * });
+ *
+ * app.use(rateLimitMw);
+ * ```
+ */
+export function createRateLimitMiddleware(config) {
+    if (!config || !config.requests || !config.window) {
+        return (_req, _res, next) => next();
+    }
+    return async (req, res, next) => {
+        const clientId = req.ip || req.connection?.remoteAddress || 'unknown';
+        const routeKey = `${req.method}:${req.path}`;
+        const allowed = sharedRateLimitCore.check(clientId, routeKey, config.requests, config.window);
+        if (!allowed) {
+            const retryAfter = sharedRateLimitCore.getRetryAfter(clientId, routeKey);
+            res.status(429).json({
+                success: false,
+                error: 'Rate limit exceeded',
+                retryAfter,
+            });
+            return;
+        }
+        next();
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/core/middleware/built-in/rate-limit/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../../../src/core/middleware/built-in/rate-limit/middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAwB,MAAM,WAAW,CAAC;AAEtE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAuB;IAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAClD,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAED,OAAO,KAAK,EAAE,GAAQ,EAAE,GAAQ,EAAE,IAAgB,EAAE,EAAE;QACpD,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,UAAU,EAAE,aAAa,IAAI,SAAS,CAAC;QACtE,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAE9F,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,mBAAmB,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACzE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,qBAAqB;gBAC5B,UAAU;aACX,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/middleware/built-in/request-logger/index.d.ts

@@ -0,0 +1 @@
+export { requestLogger } from './middleware.js';