@moxon/api 6.0.0-pre

package/dist/config/versions.js

@@ -0,0 +1,248 @@
+import * as apiv4 from '../modules/v4.js';
+import * as apiv5 from '../modules/v5.js';
+import * as apiv6 from '../modules/v6.js';
+/**
+ * Merges a base list of endpoints with additions, deduplicating by `name`.
+ * If an addition has the same name as a base entry, it overrides it.
+ *
+ * @param base - Endpoints inherited from the previous API version
+ * @param additions - New or overriding endpoints for this version
+ * @returns Merged endpoint list, sorted as base entries first then new additions
+ */
+const merge = (base, additions) => {
+    const map = new Map(base.map((e) => [e.name, e]));
+    for (const e of additions)
+        map.set(e.name, e);
+    return [...map.values()];
+};
+const v4 = {
+    get: [
+        {
+            name: 'algorithms',
+            path: '/algorithms?method={algorithm}&value={value}(&value2={value2})',
+        },
+        {
+            name: 'captcha',
+            path: '/captcha(&text={text}&length={n}&width={px}&height={px}&noise={low|medium|high}&bg={hex}&color={hex})',
+        },
+        {
+            name: 'color',
+            path: '/color(&hex={hex})',
+        },
+        {
+            name: 'convert',
+            path: '/convert?value={value}&from={unit}&to={unit}',
+        },
+        {
+            name: 'domain',
+            path: '/domain',
+        },
+        {
+            name: 'infos',
+            path: '/infos',
+        },
+        {
+            name: 'personal',
+            path: '/personal',
+        },
+        {
+            name: 'qrcode',
+            path: '/qrcode?url={URL}(&size={px}&margin={n}&correction={L|M|Q|H}&dark={hex}&light={hex}&icon={URL}&iconSize={px}&iconPadding={px}&iconRadius={px}&format={png|base64})',
+        },
+        {
+            name: 'username',
+            path: '/username',
+        },
+        {
+            name: 'chat',
+            path: '/chat',
+        },
+        {
+            name: 'levenshtein',
+            path: '/levenshtein?str1={string}&str2={string}',
+        },
+        {
+            name: 'time',
+            path: '/time(?type={live|random|countdown}&target={date}&start={timestamp}&end={timestamp}&format={format}&timezone={timezone})',
+        },
+        {
+            name: 'address',
+            path: '/address(&country={code}&count={n})',
+        },
+        {
+            name: 'agent',
+            path: '/agent(&ua={string})',
+        },
+        {
+            name: 'avatar',
+            path: '/avatar(&seed={string}&size={50-2000}&type={identicon|pixel}&bg={hex}&format={png|svg})',
+        },
+        {
+            name: 'barcode',
+            path: '/barcode?data={string}(&type={type}&width={px}&height={px}&format={svg|png}&color={hex}&bg={hex})',
+        },
+        {
+            name: 'credit',
+            path: '/credit(&brand={visa|mastercard|amex|discover}&count={n}&format={full|masked})',
+        },
+        {
+            name: 'cron',
+            path: '/cron?expr={expression}(&count={n}&from={date}&timezone={timezone})',
+        },
+        {
+            name: 'dice',
+            path: '/dice?roll={NdX+M}',
+        },
+        {
+            name: 'encode',
+            path: '/encode?method={method}&text={text}(&shift={shift})',
+        },
+        {
+            name: 'geo',
+            path: '/geo?lat1={lat}&lon1={lon}&lat2={lat}&lon2={lon}',
+        },
+        {
+            name: 'headers',
+            path: '/headers(&filter={header1,header2})',
+        },
+        {
+            name: 'ip',
+            path: '/ip(&address={ip})',
+        },
+        {
+            name: 'palette',
+            path: '/palette?color={#hex}&type={type}',
+        },
+        {
+            name: 'password',
+            path: '/password(&type={random|passphrase}&length={n}&uppercase={bool}&lowercase={bool}&digits={bool}&symbols={bool}&exclude={chars}&count={n}&separator={char})',
+        },
+        {
+            name: 'placeholder',
+            path: '/placeholder?type={image|skeleton}&width={w}&height={h}(&bg={hex}&color={hex}&text={text}&rows={n}&avatar={bool})',
+        },
+        {
+            name: 'regex',
+            path: '/regex?pattern={regex}&text={string}(&flags={flags})',
+        },
+        {
+            name: 'statistics',
+            path: '/statistics?values={n1,n2,n3,...}',
+        },
+        {
+            name: 'text',
+            path: '/text?method={method}(&value={value}&type={type}&count={count}&lang={lang})',
+        },
+        {
+            name: 'validate',
+            path: '/validate?type={type}&value={value}',
+        },
+    ],
+    post: [
+        {
+            name: 'token',
+            path: '/token',
+        },
+        {
+            name: 'chat',
+            children: {
+                chat: '/chat',
+                private: '/chat/private',
+            },
+        },
+        {
+            name: 'hash',
+            path: '/hash',
+        },
+        {
+            name: 'tic_tac_toe',
+            children: {
+                tic_tac_toe: '/tic-tac-toe',
+                fetch: '/tic-tac-toe/fetch',
+                list: '/tic-tac-toe/list',
+            },
+        },
+        {
+            name: 'hyperplanning',
+            path: '/hyperplanning',
+        },
+    ],
+    patch: [
+        {
+            name: 'tic-tac-toe',
+            path: '/tic-tac-toe/:game',
+        },
+    ],
+    delete: [
+        {
+            name: 'chat',
+            path: '/chat/:token',
+        },
+        {
+            name: 'tic-tac-toe',
+            path: '/tic-tac-toe/:game',
+        },
+    ],
+};
+const v5 = {
+    get: merge(v4.get, [
+        { name: 'base', path: '/base?value={value}(&from={from})(&to={to})' },
+        {
+            name: 'captcha',
+            path: '/captcha(&mode={image|challenge}&text={text}&length={n}&width={px}&height={px}&noise={low|medium|high}&bg={hex}&color={hex})',
+        },
+        { name: 'case', path: '/case?text={text}(&to={target})' },
+        { name: 'evaluate', path: '/evaluate?expr={expression}(&precision={0-15})' },
+        { name: 'pow', path: '/pow(?difficulty={n})' },
+        { name: 'semver', path: '/semver?version={version}(&action={action})(&part={part})(&other={other})' },
+        { name: 'url', path: '/url?url={URL}' },
+        { name: 'uuid', path: '/uuid(?uuid={uuid})(&count={count})' },
+    ]),
+    post: merge(v4.post, [
+        { name: 'asymmetric', path: '/asymmetric' },
+        { name: 'captcha', path: '/captcha' },
+        { name: 'chart', path: '/chart' },
+        { name: 'csv', path: '/csv' },
+        { name: 'diff', path: '/diff' },
+        { name: 'jwt', path: '/jwt' },
+        { name: 'matrix', path: '/matrix' },
+        { name: 'otp', path: '/otp' },
+        { name: 'pow', path: '/pow' },
+        { name: 'read', path: '/read' },
+        { name: 'symmetric', path: '/symmetric' },
+    ]),
+    patch: [...v4.patch],
+    delete: [...v4.delete],
+};
+const v6 = {
+    get: merge(v5.get.filter((e) => e.name !== 'levenshtein'), [
+        {
+            name: 'captcha',
+            path: '/captcha(&mode={challenge|image}&text={text}&length={n}&width={px}&height={px}&noise={low|medium|high}&bg={hex}&color={hex})',
+        },
+    ]),
+    post: merge(v5.post.filter((e) => e.name !== 'hyperplanning'), [
+        { name: 'levenshtein', path: '/levenshtein' },
+        {
+            name: 'chat',
+            path: '/chat',
+            children: { clear: '/chat/clear', message: '/chat', private: '/chat/private' },
+        },
+        {
+            name: 'tic_tac_toe',
+            path: '/tic-tac-toe',
+            children: {
+                fetch: '/tic-tac-toe/fetch',
+                forfeit: '/tic-tac-toe/forfeit',
+                list: '/tic-tac-toe/list',
+                play: '/tic-tac-toe/play',
+            },
+        },
+    ]),
+};
+export const versions = {
+    v4: { endpoints: v4, modules: apiv4 },
+    v5: { endpoints: v5, modules: apiv5 },
+    v6: { endpoints: v6, modules: apiv6 },
+};
+//# sourceMappingURL=versions.js.map

package/dist/config/versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"versions.js","sourceRoot":"","sources":["../../src/config/versions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAC1C,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAC1C,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAkB1C;;;;;;;GAOG;AACH,MAAM,KAAK,GAAG,CAAC,IAAgB,EAAE,SAAqB,EAAc,EAAE;IAClE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,EAAE,GAAiF;IACrF,GAAG,EAAE;QACD;YACI,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,gEAAgE;SACzE;QACD;YACI,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,uGAAuG;SAChH;QACD;YACI,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,oBAAoB;SAC7B;QACD;YACI,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,8CAA8C;SACvD;QACD;YACI,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,SAAS;SAClB;QACD;YACI,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,QAAQ;SACjB;QACD;YACI,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,WAAW;SACpB;QACD;YACI,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,oKAAoK;SAC7K;QACD;YACI,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,WAAW;SACpB;QACD;YACI,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,OAAO;SAChB;QACD;YACI,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,0CAA0C;SACnD;QACD;YACI,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,0HAA0H;SACnI;QACD;YACI,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,qCAAqC;SAC9C;QACD;YACI,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,sBAAsB;SAC/B;QACD;YACI,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,yFAAyF;SAClG;QACD;YACI,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,mGAAmG;SAC5G;QACD;YACI,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,gFAAgF;SACzF;QACD;YACI,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,qEAAqE;SAC9E;QACD;YACI,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,oBAAoB;SAC7B;QACD;YACI,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,qDAAqD;SAC9D;QACD;YACI,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,kDAAkD;SAC3D;QACD;YACI,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,qCAAqC;SAC9C;QACD;YACI,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,oBAAoB;SAC7B;QACD;YACI,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,mCAAmC;SAC5C;QACD;YACI,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,2JAA2J;SACpK;QACD;YACI,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,mHAAmH;SAC5H;QACD;YACI,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,sDAAsD;SAC/D;QACD;YACI,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,mCAAmC;SAC5C;QACD;YACI,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,6EAA6E;SACtF;QACD;YACI,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,qCAAqC;SAC9C;KACJ;IACD,IAAI,EAAE;QACF;YACI,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,QAAQ;SACjB;QACD;YACI,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE;gBACN,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,eAAe;aAC3B;SACJ;QACD;YACI,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,OAAO;SAChB;QACD;YACI,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE;gBACN,WAAW,EAAE,cAAc;gBAC3B,KAAK,EAAE,oBAAoB;gBAC3B,IAAI,EAAE,mBAAmB;aAC5B;SACJ;QACD;YACI,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,gBAAgB;SACzB;KACJ;IACD,KAAK,EAAE;QACH;YACI,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,oBAAoB;SAC7B;KACJ;IACD,MAAM,EAAE;QACJ;YACI,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,cAAc;SACvB;QACD;YACI,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,oBAAoB;SAC7B;KACJ;CACJ,CAAC;AAEF,MAAM,EAAE,GAAG;IACP,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE;QACf,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,6CAA6C,EAAE;QACrE;YACI,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,8HAA8H;SACvI;QACD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,EAAE;QACzD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,gDAAgD,EAAE;QAC5E,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE;QAC9C,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,2EAA2E,EAAE;QACrG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE;QACvC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,EAAE;KAChE,CAAC;IACF,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE;QACjB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE;QAC3C,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;QACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;QAC/B,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;QACnC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7B,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;QAC/B,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE;KAC5C,CAAC;IACF,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC,KAAM,CAAC;IACrB,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,MAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,EAAE,GAAG;IACP,GAAG,EAAE,KAAK,CACN,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,EAC9C;QACI;YACI,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,8HAA8H;SACvI;KACJ,CACJ;IACD,IAAI,EAAE,KAAK,CACP,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,EACjD;QACI,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE;QAC7C;YACI,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE;SACjF;QACD;YACI,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE;gBACN,KAAK,EAAE,oBAAoB;gBAC3B,OAAO,EAAE,sBAAsB;gBAC/B,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,mBAAmB;aAC5B;SACJ;KACJ,CACJ;CACJ,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAkC;IACnD,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;IACrC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;IACrC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;CACxC,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,48 @@
+export declare const APP_VERSION: string;
+export declare const DEFAULT_PORT = 3000;
+export declare const START_TIME: number;
+export declare const CHALLENGE_TTL = 300000;
+export declare const GAME_CLEANUP_TTL = 600000;
+export declare const MAX_LOG_ENTRIES = 1000;
+export declare const RATE_LIMIT_WINDOW = 10000;
+export declare const RATE_LIMIT_MAX = 50;
+export declare const SESSION_TTL = 3600000;
+export declare const STATUS_MESSAGES: Record<number, string>;
+export declare const EARTH_RADIUS_KM = 6371;
+export declare const MAX_ADDRESS_COUNT = 10;
+export declare const MAX_BASE_VALUE_LENGTH = 100;
+export declare const MAX_CHART_DATASETS = 5;
+export declare const MAX_CHART_LABELS = 20;
+export declare const MAX_CSV_LENGTH = 50000;
+export declare const MAX_CSV_ROWS = 1000;
+export declare const MAX_CREDIT_COUNT = 10;
+export declare const MAX_COUNTDOWN_YEARS = 100;
+export declare const MAX_CRON_ITERATIONS: number;
+export declare const MAX_CRON_RESULTS = 20;
+export declare const MAX_DIFF_LENGTH = 10000;
+export declare const MAX_DIFF_PARTS = 2000;
+export declare const MAX_EXPR_DEPTH = 100;
+export declare const MAX_EXPR_LENGTH = 500;
+export declare const MAX_FACTORIAL = 170;
+export declare const MAX_GCD_VALUE = 100000;
+export declare const MAX_JWT_LENGTH = 8192;
+export declare const MAX_LEVENSHTEIN_LENGTH = 1000;
+export declare const MIN_PASSWORD_LENGTH = 8;
+export declare const MAX_PASSWORD_LENGTH = 128;
+export declare const MAX_PASSWORD_COUNT = 20;
+export declare const MAX_MATRIX_SIZE = 20;
+export declare const MAX_PATTERN_LENGTH = 200;
+export declare const MAX_POW_DIFFICULTY = 6;
+export declare const MAX_PRIME_LIST = 10000;
+export declare const POW_DEFAULT_DIFFICULTY = 4;
+export declare const MAX_QRCODE_LOGO_BYTES: number;
+export declare const MAX_READ_LENGTH = 50000;
+export declare const MAX_REGEX_MATCHES = 100;
+export declare const MAX_RSA_MODULUS = 4096;
+export declare const MAX_SEMVER_LENGTH = 256;
+export declare const MAX_STRING_LENGTH = 1000;
+export declare const MIN_TOKEN_LENGTH = 12;
+export declare const MAX_TOKEN_LENGTH = 4096;
+export declare const MAX_URL_LENGTH = 2048;
+export declare const MAX_UUID_COUNT = 50;
+export declare const ROMAN_VALUES: [number, string][];

package/dist/constants.js

@@ -0,0 +1,75 @@
+import pkg from '../package.json' with { type: 'json' };
+// App
+export const APP_VERSION = pkg.version;
+export const DEFAULT_PORT = 3000;
+export const START_TIME = Date.now();
+// Server
+export const CHALLENGE_TTL = 300_000;
+export const GAME_CLEANUP_TTL = 600_000;
+export const MAX_LOG_ENTRIES = 1000;
+export const RATE_LIMIT_WINDOW = 10_000;
+export const RATE_LIMIT_MAX = 50;
+export const SESSION_TTL = 3_600_000;
+export const STATUS_MESSAGES = {
+    400: 'Bad Request',
+    401: 'Unauthorized',
+    404: 'Not Found',
+    405: 'Method Not Allowed',
+    413: 'Payload Too Large',
+    429: 'Too Many Requests',
+    500: 'Internal Server Error',
+};
+// Modules
+export const EARTH_RADIUS_KM = 6371;
+export const MAX_ADDRESS_COUNT = 10;
+export const MAX_BASE_VALUE_LENGTH = 100;
+export const MAX_CHART_DATASETS = 5;
+export const MAX_CHART_LABELS = 20;
+export const MAX_CSV_LENGTH = 50_000;
+export const MAX_CSV_ROWS = 1000;
+export const MAX_CREDIT_COUNT = 10;
+export const MAX_COUNTDOWN_YEARS = 100;
+export const MAX_CRON_ITERATIONS = 365 * 24 * 60;
+export const MAX_CRON_RESULTS = 20;
+export const MAX_DIFF_LENGTH = 10_000;
+export const MAX_DIFF_PARTS = 2000;
+export const MAX_EXPR_DEPTH = 100;
+export const MAX_EXPR_LENGTH = 500;
+export const MAX_FACTORIAL = 170;
+export const MAX_GCD_VALUE = 100_000;
+export const MAX_JWT_LENGTH = 8192;
+export const MAX_LEVENSHTEIN_LENGTH = 1000;
+export const MIN_PASSWORD_LENGTH = 8;
+export const MAX_PASSWORD_LENGTH = 128;
+export const MAX_PASSWORD_COUNT = 20;
+export const MAX_MATRIX_SIZE = 20;
+export const MAX_PATTERN_LENGTH = 200;
+export const MAX_POW_DIFFICULTY = 6;
+export const MAX_PRIME_LIST = 10_000;
+export const POW_DEFAULT_DIFFICULTY = 4;
+export const MAX_QRCODE_LOGO_BYTES = 2 * 1024 * 1024;
+export const MAX_READ_LENGTH = 50_000;
+export const MAX_REGEX_MATCHES = 100;
+export const MAX_RSA_MODULUS = 4096;
+export const MAX_SEMVER_LENGTH = 256;
+export const MAX_STRING_LENGTH = 1000;
+export const MIN_TOKEN_LENGTH = 12;
+export const MAX_TOKEN_LENGTH = 4096;
+export const MAX_URL_LENGTH = 2048;
+export const MAX_UUID_COUNT = 50;
+export const ROMAN_VALUES = [
+    [1000, 'M'],
+    [900, 'CM'],
+    [500, 'D'],
+    [400, 'CD'],
+    [100, 'C'],
+    [90, 'XC'],
+    [50, 'L'],
+    [40, 'XL'],
+    [10, 'X'],
+    [9, 'IX'],
+    [5, 'V'],
+    [4, 'IV'],
+    [1, 'I'],
+];
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAExD,MAAM;AACN,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAErC,SAAS;AACT,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACxC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AACjC,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC;AAErC,MAAM,CAAC,MAAM,eAAe,GAA2B;IACnD,GAAG,EAAE,aAAa;IAClB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,oBAAoB;IACzB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,uBAAuB;CAC/B,CAAC;AAEF,UAAU;AACV,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AACrC,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC;AACjD,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AACtC,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AACnC,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AAClC,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AACnC,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AACnC,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AACrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACrD,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AACnC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAEjC,MAAM,CAAC,MAAM,YAAY,GAAuB;IAC5C,CAAC,IAAI,EAAE,GAAG,CAAC;IACX,CAAC,GAAG,EAAE,IAAI,CAAC;IACX,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,IAAI,CAAC;IACX,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,EAAE,EAAE,IAAI,CAAC;IACV,CAAC,EAAE,EAAE,GAAG,CAAC;IACT,CAAC,EAAE,EAAE,IAAI,CAAC;IACV,CAAC,EAAE,EAAE,GAAG,CAAC;IACT,CAAC,CAAC,EAAE,IAAI,CAAC;IACT,CAAC,CAAC,EAAE,GAAG,CAAC;IACR,CAAC,CAAC,EAAE,IAAI,CAAC;IACT,CAAC,CAAC,EAAE,GAAG,CAAC;CACX,CAAC"}

package/dist/middleware/cors.d.ts

@@ -0,0 +1,2 @@
+import { type Express } from 'express';
+export declare function setupCors(app: Express): void;

package/dist/middleware/cors.js

@@ -0,0 +1,31 @@
+import cors from 'cors';
+import express from 'express';
+import { dirname, join } from 'path';
+import { fileURLToPath } from 'url';
+import { env } from '../config/env.js';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+export function setupCors(app) {
+    app.set('trust proxy', env.TRUSTED_PROXIES ?? 1);
+    app.use(cors({
+        methods: ['GET', 'POST', 'PATCH', 'DELETE', 'OPTIONS'],
+        exposedHeaders: [
+            'X-Captcha-Text',
+            'X-Captcha-Token',
+            'X-RateLimit-Limit',
+            'X-RateLimit-Remaining',
+            'X-RateLimit-Reset',
+            'Retry-After',
+        ],
+    }));
+    app.use(express.urlencoded({ extended: true, limit: '10kb' }));
+    app.use(express.json({ limit: '10kb' }));
+    app.use((_req, res, next) => {
+        res.setHeader('X-Content-Type-Options', 'nosniff');
+        res.setHeader('X-Frame-Options', 'DENY');
+        next();
+    });
+    app.use('/favicon.ico', express.static(join(__dirname, '..', '..', 'src', 'favicon.ico')));
+    app.use('/robots.txt', express.static(join(__dirname, '..', '..', 'robots.txt')));
+}
+//# sourceMappingURL=cors.js.map

package/dist/middleware/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../src/middleware/cors.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,OAAyB,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAEvC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,MAAM,UAAU,SAAS,CAAC,GAAY;IAClC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC;IAEjD,GAAG,CAAC,GAAG,CACH,IAAI,CAAC;QACD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;QACtD,cAAc,EAAE;YACZ,gBAAgB;YAChB,iBAAiB;YACjB,mBAAmB;YACnB,uBAAuB;YACvB,mBAAmB;YACnB,aAAa;SAChB;KACJ,CAAC,CACL,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/D,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAEzC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3F,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC"}

package/dist/middleware/error.d.ts

@@ -0,0 +1,4 @@
+import type { NextFunction, Request, Response } from 'express';
+export declare function errorHandler(err: Error & {
+    status?: number;
+}, _req: Request, res: Response, _next: NextFunction): void;

package/dist/middleware/error.js

@@ -0,0 +1,8 @@
+import { error } from '../utils/response.js';
+export function errorHandler(err, _req, res, _next) {
+    console.error(err.stack);
+    const status = err.status && err.status >= 400 && err.status < 600 ? err.status : 500;
+    const sensitive = status === 500 && /\/[a-z]|\\[a-z]|ECONNREFUSED|ENOENT|EPERM|at\s+\w/i.test(err.message);
+    error(res, status, sensitive ? 'An unexpected error occurred.' : err.message);
+}
+//# sourceMappingURL=error.js.map

package/dist/middleware/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../src/middleware/error.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE7C,MAAM,UAAU,YAAY,CACxB,GAAgC,EAChC,IAAa,EACb,GAAa,EACb,KAAmB;IAEnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEzB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,IAAI,oDAAoD,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3G,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClF,CAAC"}

package/dist/middleware/json.d.ts

@@ -0,0 +1,2 @@
+import type { NextFunction, Request, Response } from 'express';
+export declare function jsonResponseMiddleware(_req: Request, res: Response, next: NextFunction): void;

package/dist/middleware/json.js

@@ -0,0 +1,8 @@
+export function jsonResponseMiddleware(_req, res, next) {
+    res.setHeader('Content-Type', 'application/json');
+    res.jsonResponse = (data) => {
+        res.send(JSON.stringify(data, null, 2));
+    };
+    next();
+}
+//# sourceMappingURL=json.js.map

package/dist/middleware/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/middleware/json.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,sBAAsB,CAAC,IAAa,EAAE,GAAa,EAAE,IAAkB;IACnF,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,GAAG,CAAC,IAAa,EAAE,EAAE;QACjC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,IAAI,EAAE,CAAC;AACX,CAAC"}

package/dist/middleware/logger.d.ts

@@ -0,0 +1,26 @@
+import type { NextFunction, Request, Response } from 'express';
+export declare const logger: import("@20syldev/logger.ts").Logger;
+/**
+ * Masks an identifier carried in the path, leaving the named sub-routes visible.
+ *
+ * @param path - Request path, without its query string
+ * @returns The path, with a trailing identifier segment masked
+ */
+export declare function redactPath(path: string): string;
+/**
+ * Strips query string values from a URL, keeping the path and parameter names.
+ *
+ * GET endpoints carry user input in the query string — text passed to /encode,
+ * card numbers and IBANs passed to /validate, URLs passed to /qrcode — and the
+ * log buffer is readable over /logs. Names alone keep the trace useful for
+ * debugging without retaining anybody's payload.
+ *
+ * Names are kept percent-encoded on purpose. Decoding them would let a caller
+ * write raw newlines and ANSI escapes into the operator's terminal and into the
+ * /logs buffer, and would expose the theme's {placeholder} syntax.
+ *
+ * @param originalUrl - Request URL, with or without a query string
+ * @returns The path, followed by the parameter names when the URL had any
+ */
+export declare function redactQuery(originalUrl: string): string;
+export declare function loggerMiddleware(req: Request, res: Response, next: NextFunction): void;

package/dist/middleware/logger.js

@@ -0,0 +1,65 @@
+import { createLogger } from '@20syldev/logger.ts';
+import { MAX_LOG_ENTRIES } from '../constants.js';
+export const logger = createLogger({
+    maxEntries: MAX_LOG_ENTRIES,
+    console: true,
+    theme: 'colored',
+});
+const SECRET_PATH = /^(\/v\d+\/(?:chat|tic-tac-toe))\/(?!clear$|fetch$|forfeit$|list$|play$|private$)[^/]+/;
+/**
+ * Masks an identifier carried in the path, leaving the named sub-routes visible.
+ *
+ * @param path - Request path, without its query string
+ * @returns The path, with a trailing identifier segment masked
+ */
+export function redactPath(path) {
+    return path.replace(SECRET_PATH, '$1/[redacted]');
+}
+/**
+ * Strips query string values from a URL, keeping the path and parameter names.
+ *
+ * GET endpoints carry user input in the query string — text passed to /encode,
+ * card numbers and IBANs passed to /validate, URLs passed to /qrcode — and the
+ * log buffer is readable over /logs. Names alone keep the trace useful for
+ * debugging without retaining anybody's payload.
+ *
+ * Names are kept percent-encoded on purpose. Decoding them would let a caller
+ * write raw newlines and ANSI escapes into the operator's terminal and into the
+ * /logs buffer, and would expose the theme's {placeholder} syntax.
+ *
+ * @param originalUrl - Request URL, with or without a query string
+ * @returns The path, followed by the parameter names when the URL had any
+ */
+export function redactQuery(originalUrl) {
+    const [path = '', ...rest] = originalUrl.split('?');
+    const query = rest.join('?');
+    if (!query)
+        return redactPath(path);
+    const names = [...new Set(query.split('&').map((pair) => pair.split('=')[0] ?? ''))].filter(Boolean);
+    return names.length ? `${redactPath(path)}?${names.join('&')}` : redactPath(path);
+}
+export function loggerMiddleware(req, res, next) {
+    if (req.method === 'HEAD') {
+        next();
+        return;
+    }
+    if (req.originalUrl === '/logs') {
+        next();
+        return;
+    }
+    const startTime = Date.now();
+    const platform = req.headers['sec-ch-ua-platform']?.replace(/"/g, '');
+    res.on('finish', () => {
+        const status = res.statusCode === 304 ? 200 : res.statusCode;
+        const duration = `${Date.now() - startTime}ms`;
+        const entry = { method: req.method, url: redactQuery(req.originalUrl), status, duration, platform };
+        if (status >= 500)
+            logger.error(entry);
+        else if (status >= 400)
+            logger.warn(entry);
+        else
+            logger.info(entry);
+    });
+    next();
+}
+//# sourceMappingURL=logger.js.map

package/dist/middleware/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/middleware/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGnD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,CAAC,MAAM,MAAM,GAAG,YAAY,CAAC;IAC/B,UAAU,EAAE,eAAe;IAC3B,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,SAAS;CACnB,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,uFAAuF,CAAC;AAE5G;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC3C,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAEpC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrG,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACxB,IAAI,EAAE,CAAC;QACP,OAAO;IACX,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;QAC9B,IAAI,EAAE,CAAC;QACP,OAAO;IACX,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAI,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAY,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAElF,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QAC7D,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,CAAC;QAE/C,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAEpG,IAAI,MAAM,IAAI,GAAG;YAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;aAClC,IAAI,MAAM,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YACtC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,IAAI,EAAE,CAAC;AACX,CAAC"}

package/dist/middleware/ratelimit.d.ts

@@ -0,0 +1,2 @@
+import type { NextFunction, Request, Response } from 'express';
+export declare function rateLimitMiddleware(req: Request, res: Response, next: NextFunction): void;

package/dist/middleware/ratelimit.js

@@ -0,0 +1,83 @@
+import { getPlan, globalLimit } from '../config/plans.js';
+import { RATE_LIMIT_WINDOW, SESSION_TTL } from '../constants.js';
+import { ipLimits } from '../storage/index.js';
+import { error } from '../utils/response.js';
+let requests = 0;
+let resetTime = Date.now() + SESSION_TTL;
+const burstTracker = {};
+// Cleanup stale IPs every hour
+setInterval(() => {
+    const currentHour = String(Math.floor(Date.now() / 3600000) % 24);
+    for (const ip of Object.keys(ipLimits)) {
+        const hours = Object.keys(ipLimits[ip]);
+        if (hours.length === 0 || (hours.length === 1 && hours[0] !== currentHour)) {
+            delete ipLimits[ip];
+        }
+    }
+    const now = Date.now();
+    for (const ip of Object.keys(burstTracker)) {
+        burstTracker[ip] = burstTracker[ip].filter((t) => now - t < RATE_LIMIT_WINDOW);
+        if (burstTracker[ip].length === 0)
+            delete burstTracker[ip];
+    }
+}, SESSION_TTL).unref();
+export function rateLimitMiddleware(req, res, next) {
+    const ip = req.ip || req.socket.remoteAddress || '';
+    const token = req.headers.authorization?.split(' ')[1] || '';
+    const now = Date.now();
+    const minute = String(Math.floor(now / 60000) % 60);
+    const hour = String(Math.floor(now / 3600000) % 24);
+    const match = getPlan(token);
+    if (!match) {
+        error(res, 401, 'Invalid token.');
+        return;
+    }
+    const { plan } = match;
+    if (now > resetTime) {
+        requests = 0;
+        resetTime = now + SESSION_TTL;
+    }
+    if (++requests > Math.max(globalLimit, plan.hourly)) {
+        res.setHeader('Retry-After', Math.ceil((resetTime - now) / 1000));
+        error(res, 429, 'Global rate limit exceeded.');
+        return;
+    }
+    if (['__proto__', 'constructor', 'prototype'].includes(ip)) {
+        error(res, 400, 'Invalid IP address.');
+        return;
+    }
+    // Burst protection per tier
+    if (process.env.NODE_ENV !== 'test') {
+        if (!burstTracker[ip])
+            burstTracker[ip] = [];
+        burstTracker[ip] = burstTracker[ip].filter((t) => now - t < RATE_LIMIT_WINDOW);
+        burstTracker[ip].push(now);
+        if (burstTracker[ip].length > plan.burst) {
+            res.setHeader('Retry-After', Math.ceil(RATE_LIMIT_WINDOW / 1000));
+            error(res, 429, 'Too many requests, please slow down.');
+            return;
+        }
+    }
+    // Hourly rate limit per IP
+    if (!ipLimits[ip])
+        ipLimits[ip] = {};
+    if (!ipLimits[ip][hour])
+        ipLimits[ip][hour] = {};
+    ipLimits[ip][hour][minute] = (ipLimits[ip][hour][minute] ?? 0) + 1;
+    const hourTotal = Object.values(ipLimits[ip][hour]).reduce((sum, count) => sum + count, 0);
+    const hourEnds = Math.ceil(now / 3600000) * 3600000;
+    res.setHeader('X-RateLimit-Limit', plan.hourly);
+    res.setHeader('X-RateLimit-Remaining', Math.max(0, plan.hourly - hourTotal));
+    res.setHeader('X-RateLimit-Reset', Math.floor(hourEnds / 1000));
+    if (hourTotal > plan.hourly) {
+        res.setHeader('Retry-After', Math.ceil((hourEnds - now) / 1000));
+        error(res, 429, `You have exceeded the limit of ${plan.hourly} requests per hour.`);
+        return;
+    }
+    Object.keys(ipLimits[ip]).forEach((h) => {
+        if (h != hour)
+            delete ipLimits[ip][h];
+    });
+    next();
+}
+//# sourceMappingURL=ratelimit.js.map