@moxon/api 6.0.0-pre

package/dist/types/storage.d.ts

@@ -0,0 +1,52 @@
+export interface LogEntry {
+    timestamp: string;
+    method: string;
+    url: string;
+    status: number;
+    duration: string;
+    platform: string | undefined;
+}
+export interface ChatMessage {
+    username: string;
+    message: string;
+    timestamp: string;
+}
+export interface ChatStorage {
+    messages: ChatMessage[];
+    privateChats: Record<string, ChatMessage[]>;
+    sessions: Record<string, {
+        user: string;
+        last: number;
+    }>;
+    rateLimits: Record<string, number[]>;
+}
+export interface TicTacToeMove {
+    username: string;
+    move: string;
+    session: string;
+}
+export interface TicTacToeGame {
+    moves: TicTacToeMove[];
+    players: string[];
+    private: boolean;
+    creation: number;
+    last?: number;
+}
+export interface TicTacToeStorage {
+    games: Record<string, TicTacToeGame>;
+    sessions: Record<string, {
+        user: string;
+        last: number;
+    }>;
+    rateLimits: Record<string, number[]>;
+}
+export interface ChallengeStorage {
+    usedNonces: Map<string, number>;
+}
+export interface IpLimits {
+    [ip: string]: {
+        [hour: string]: {
+            [minute: string]: number;
+        };
+    };
+}

package/dist/types/storage.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=storage.js.map

package/dist/types/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/types/storage.ts"],"names":[],"mappings":""}

package/dist/utils/challenge.d.ts

@@ -0,0 +1,40 @@
+import type { ChallengeStorage } from '../types/storage.js';
+export interface ChallengeVerification {
+    valid: boolean;
+    reason?: 'wrong' | 'expired' | 'used' | 'invalid';
+}
+export interface TokenPayload {
+    type: 'img' | 'pow';
+    nonce: string;
+    exp: number;
+    salt?: string;
+    difficulty?: number;
+    sig: string;
+}
+/**
+ * Signs a challenge into a stateless token. The expected answer never appears in
+ * the token itself, only in the HMAC, so it cannot be read back by the client.
+ *
+ * @param type - Challenge kind: img for a captcha, pow for a proof-of-work
+ * @param payload - Secret material bound to the token: the answer, or the salt and difficulty
+ * @param extra - Public fields to carry along, such as salt and difficulty
+ * @returns Base64url token carrying the nonce, expiry and signature
+ */
+export declare function signToken(type: 'img' | 'pow', payload: string, extra?: Record<string, unknown>): string;
+/**
+ * Verifies a token against the payload it was signed with, then consumes its
+ * nonce so the same token cannot be replayed.
+ *
+ * @param token - Token issued by signToken
+ * @param payload - Payload to check the signature against
+ * @param storage - Store of already consumed nonces
+ * @returns Verification result, with a reason when it fails
+ */
+export declare function verifyToken(token: string, payload: string, storage: ChallengeStorage): ChallengeVerification;
+/**
+ * Reads the public fields of a token without verifying its signature.
+ *
+ * @param token - Token issued by signToken
+ * @returns Decoded payload, or null if the token is malformed
+ */
+export declare function readToken(token: string): TokenPayload | null;

package/dist/utils/challenge.js

@@ -0,0 +1,75 @@
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { env } from '../config/env.js';
+import { CHALLENGE_TTL } from '../constants.js';
+const secret = env.CHALLENGE_SECRET || randomBytes(32).toString('hex');
+const sign = (type, nonce, exp, payload) => createHmac('sha256', secret).update(`${type}.${nonce}.${exp}.${payload}`).digest('hex');
+function decode(token) {
+    try {
+        const parsed = JSON.parse(Buffer.from(token, 'base64url').toString('utf8'));
+        if (typeof parsed.nonce !== 'string' || typeof parsed.exp !== 'number' || typeof parsed.sig !== 'string') {
+            return null;
+        }
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+function prune(storage, now) {
+    for (const [nonce, exp] of storage.usedNonces) {
+        if (exp <= now)
+            storage.usedNonces.delete(nonce);
+    }
+}
+/**
+ * Signs a challenge into a stateless token. The expected answer never appears in
+ * the token itself, only in the HMAC, so it cannot be read back by the client.
+ *
+ * @param type - Challenge kind: img for a captcha, pow for a proof-of-work
+ * @param payload - Secret material bound to the token: the answer, or the salt and difficulty
+ * @param extra - Public fields to carry along, such as salt and difficulty
+ * @returns Base64url token carrying the nonce, expiry and signature
+ */
+export function signToken(type, payload, extra = {}) {
+    const nonce = randomBytes(16).toString('hex');
+    const exp = Date.now() + CHALLENGE_TTL;
+    const body = { type, nonce, exp, ...extra, sig: sign(type, nonce, exp, payload) };
+    return Buffer.from(JSON.stringify(body)).toString('base64url');
+}
+/**
+ * Verifies a token against the payload it was signed with, then consumes its
+ * nonce so the same token cannot be replayed.
+ *
+ * @param token - Token issued by signToken
+ * @param payload - Payload to check the signature against
+ * @param storage - Store of already consumed nonces
+ * @returns Verification result, with a reason when it fails
+ */
+export function verifyToken(token, payload, storage) {
+    const decoded = decode(token);
+    if (!decoded)
+        return { valid: false, reason: 'invalid' };
+    const now = Date.now();
+    prune(storage, now);
+    if (decoded.exp <= now)
+        return { valid: false, reason: 'expired' };
+    if (storage.usedNonces.has(decoded.nonce))
+        return { valid: false, reason: 'used' };
+    const expected = Buffer.from(sign(decoded.type, decoded.nonce, decoded.exp, payload), 'hex');
+    const actual = Buffer.from(decoded.sig, 'hex');
+    if (expected.length !== actual.length || !timingSafeEqual(expected, actual)) {
+        return { valid: false, reason: 'wrong' };
+    }
+    storage.usedNonces.set(decoded.nonce, decoded.exp);
+    return { valid: true };
+}
+/**
+ * Reads the public fields of a token without verifying its signature.
+ *
+ * @param token - Token issued by signToken
+ * @returns Decoded payload, or null if the token is malformed
+ */
+export function readToken(token) {
+    return decode(token);
+}
+//# sourceMappingURL=challenge.js.map

package/dist/utils/challenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.js","sourceRoot":"","sources":["../../src/utils/challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAiBhD,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAEvE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW,EAAE,OAAe,EAAU,EAAE,CAC/E,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE5F,SAAS,MAAM,CAAC,KAAa;IACzB,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB,CAAC;QAC5F,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACvG,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,OAAyB,EAAE,GAAW;IACjD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC5C,IAAI,GAAG,IAAI,GAAG;YAAE,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,IAAmB,EAAE,OAAe,EAAE,QAAiC,EAAE;IAC/F,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;IACvC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;IAClF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,OAAe,EAAE,OAAyB;IACjF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAEzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAEpB,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAEnF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC;IAED,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACnC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC"}

package/dist/utils/colors.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Parses a hex color string into an RGB tuple.
+ *
+ * @param hex - Hex color string (#RRGGBB or RRGGBB)
+ * @returns RGB tuple [r, g, b] with values 0-255
+ * @throws Error if the hex string is invalid
+ */
+export declare function hexToRgb(hex: string): [number, number, number];
+/**
+ * Converts HSL values to an RGB tuple.
+ *
+ * @param h - Hue in degrees (0-360)
+ * @param s - Saturation (0-1)
+ * @param l - Lightness (0-1)
+ * @returns RGB tuple [r, g, b] with values 0-255
+ */
+export declare function hslToRgb(h: number, s: number, l: number): [number, number, number];
+/**
+ * Validates and normalizes a hex color string, adding # if missing.
+ *
+ * @param value - Raw color value (with or without #)
+ * @param def - Default color if value is empty
+ * @returns Normalized hex color string with #
+ * @throws Error if the color format is invalid
+ */
+export declare function normalizeColor(value: string | undefined, def: string): string;
+/**
+ * Formats an RGB tuple as a hex color string.
+ *
+ * @param r - Red channel (0-255)
+ * @param g - Green channel (0-255)
+ * @param b - Blue channel (0-255)
+ * @returns Hex color string (#rrggbb)
+ */
+export declare function rgbToHex(r: number, g: number, b: number): string;
+/**
+ * Converts RGB values to an HSL tuple.
+ *
+ * @param r - Red channel (0-255)
+ * @param g - Green channel (0-255)
+ * @param b - Blue channel (0-255)
+ * @returns HSL tuple [h (0-360), s (0-1), l (0-1)]
+ */
+export declare function rgbToHsl(r: number, g: number, b: number): [number, number, number];

package/dist/utils/colors.js

@@ -0,0 +1,93 @@
+/**
+ * Parses a hex color string into an RGB tuple.
+ *
+ * @param hex - Hex color string (#RRGGBB or RRGGBB)
+ * @returns RGB tuple [r, g, b] with values 0-255
+ * @throws Error if the hex string is invalid
+ */
+export function hexToRgb(hex) {
+    const clean = hex.replace('#', '');
+    if (!/^[0-9a-fA-F]{6}$/.test(clean))
+        throw new Error('Invalid HEX color (use #RRGGBB)');
+    return [parseInt(clean.slice(0, 2), 16), parseInt(clean.slice(2, 4), 16), parseInt(clean.slice(4, 6), 16)];
+}
+/**
+ * Converts HSL values to an RGB tuple.
+ *
+ * @param h - Hue in degrees (0-360)
+ * @param s - Saturation (0-1)
+ * @param l - Lightness (0-1)
+ * @returns RGB tuple [r, g, b] with values 0-255
+ */
+export function hslToRgb(h, s, l) {
+    const c = (1 - Math.abs(2 * l - 1)) * s;
+    const x = c * (1 - Math.abs(((h / 60) % 2) - 1));
+    const m = l - c / 2;
+    let r1 = 0, g1 = 0, b1 = 0;
+    if (h < 60)
+        [r1, g1, b1] = [c, x, 0];
+    else if (h < 120)
+        [r1, g1, b1] = [x, c, 0];
+    else if (h < 180)
+        [r1, g1, b1] = [0, c, x];
+    else if (h < 240)
+        [r1, g1, b1] = [0, x, c];
+    else if (h < 300)
+        [r1, g1, b1] = [x, 0, c];
+    else
+        [r1, g1, b1] = [c, 0, x];
+    return [Math.round((r1 + m) * 255), Math.round((g1 + m) * 255), Math.round((b1 + m) * 255)];
+}
+/**
+ * Validates and normalizes a hex color string, adding # if missing.
+ *
+ * @param value - Raw color value (with or without #)
+ * @param def - Default color if value is empty
+ * @returns Normalized hex color string with #
+ * @throws Error if the color format is invalid
+ */
+export function normalizeColor(value, def) {
+    if (!value)
+        return def;
+    const clean = value.startsWith('#') ? value : `#${value}`;
+    if (!/^#([0-9a-fA-F]{3}){1,2}$/.test(clean))
+        throw new Error('Invalid color (use hex like ff6600)');
+    return clean;
+}
+/**
+ * Formats an RGB tuple as a hex color string.
+ *
+ * @param r - Red channel (0-255)
+ * @param g - Green channel (0-255)
+ * @param b - Blue channel (0-255)
+ * @returns Hex color string (#rrggbb)
+ */
+export function rgbToHex(r, g, b) {
+    return `#${[r, g, b].map((x) => x.toString(16).padStart(2, '0')).join('')}`;
+}
+/**
+ * Converts RGB values to an HSL tuple.
+ *
+ * @param r - Red channel (0-255)
+ * @param g - Green channel (0-255)
+ * @param b - Blue channel (0-255)
+ * @returns HSL tuple [h (0-360), s (0-1), l (0-1)]
+ */
+export function rgbToHsl(r, g, b) {
+    const r1 = r / 255, g1 = g / 255, b1 = b / 255;
+    const max = Math.max(r1, g1, b1), min = Math.min(r1, g1, b1);
+    const l = (max + min) / 2;
+    if (max === min)
+        return [0, 0, l];
+    const d = max - min;
+    const s = l > 0.5 ? d / (2 - max - min) : d / (max + min);
+    let h = 0;
+    if (max === r1)
+        h = (g1 - b1) / d + (g1 < b1 ? 6 : 0);
+    else if (max === g1)
+        h = (b1 - r1) / d + 2;
+    else
+        h = (r1 - g1) / d + 4;
+    return [(h * 60 + 360) % 360, s, l];
+}
+//# sourceMappingURL=colors.js.map

package/dist/utils/colors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"colors.js","sourceRoot":"","sources":["../../src/utils/colors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACxF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,CAAS,EAAE,CAAS,EAAE,CAAS;IACpD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,EAAE,GAAG,CAAC,EACN,EAAE,GAAG,CAAC,EACN,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,CAAC,GAAG,EAAE;QAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;SAChC,IAAI,CAAC,GAAG,GAAG;QAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;SACtC,IAAI,CAAC,GAAG,GAAG;QAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;SACtC,IAAI,CAAC,GAAG,GAAG;QAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;SACtC,IAAI,CAAC,GAAG,GAAG;QAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;;QACtC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAChG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB,EAAE,GAAW;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;IAC1D,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACpG,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,CAAS,EAAE,CAAS,EAAE,CAAS;IACpD,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,CAAS,EAAE,CAAS,EAAE,CAAS;IACpD,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,EACd,EAAE,GAAG,CAAC,GAAG,GAAG,EACZ,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;IACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAC5B,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IAE1B,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAElC,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC;IACpB,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,GAAG,KAAK,EAAE;QAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACjD,IAAI,GAAG,KAAK,EAAE;QAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;QACtC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE3B,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/utils/helpers.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Tracks requests per user and throws if the rate limit is exceeded.
+ *
+ * @param rateLimits - Store of timestamps per user
+ * @param userId - Identifier of the requesting user
+ * @param timestamp - Current timestamp in milliseconds
+ * @param window - Time window in milliseconds
+ * @param limit - Maximum requests allowed in the window
+ * @returns false if within limits
+ * @throws Error if rate limit is exceeded
+ */
+export declare function checkRateLimit(rateLimits: Record<string, number[]>, userId: string, timestamp: number, window?: number, limit?: number): boolean;
+/**
+ * Parses a space-separated environment variable into an array.
+ *
+ * @param key - The environment variable name
+ * @returns The parsed array, or null if not set
+ */
+export declare function envList(key: string): string[] | null;
+/**
+ * Formats a Date to ISO string without timezone suffix.
+ *
+ * @param date - The date to format
+ * @returns ISO-formatted string without trailing Z
+ */
+export declare function formatDate(date: Date): string;
+/**
+ * Generates a random IPv4 address.
+ *
+ * @returns A string in the format "X.X.X.X"
+ */
+export declare function genIP(): string;
+/**
+ * Returns a random element from an array.
+ *
+ * @param arr - The source array
+ * @returns A random element
+ */
+export declare function random<T>(arr: T[]): T;
+/**
+ * Returns a random integer between min and max (inclusive).
+ *
+ * @param min - Lower bound
+ * @param max - Upper bound
+ * @returns A random integer in [min, max]
+ */
+export declare function randomNumber(min: number, max: number): number;
+/**
+ * Checks if a version string is at least the given minimum.
+ *
+ * @param version - Version string (e.g. "v4")
+ * @param min - Minimum version number
+ * @returns true if the version is >= min
+ */
+export declare function since(version: string, min: number): boolean;

package/dist/utils/helpers.js

@@ -0,0 +1,82 @@
+/**
+ * Tracks requests per user and throws if the rate limit is exceeded.
+ *
+ * @param rateLimits - Store of timestamps per user
+ * @param userId - Identifier of the requesting user
+ * @param timestamp - Current timestamp in milliseconds
+ * @param window - Time window in milliseconds
+ * @param limit - Maximum requests allowed in the window
+ * @returns false if within limits
+ * @throws Error if rate limit is exceeded
+ */
+export function checkRateLimit(rateLimits, userId, timestamp, window = 10000, limit = 50) {
+    for (const key of Object.keys(rateLimits)) {
+        if (key !== userId && !rateLimits[key].some((ts) => timestamp - ts < window)) {
+            delete rateLimits[key];
+        }
+    }
+    rateLimits[userId] = (rateLimits[userId] ?? []).filter((ts) => timestamp - ts < window);
+    if (rateLimits[userId].length >= limit) {
+        const remainingTime = Math.ceil((rateLimits[userId][0] + window - timestamp) / 1000);
+        throw new Error(`Rate limit exceeded. Try again in ${remainingTime} seconds.`);
+    }
+    rateLimits[userId].push(timestamp);
+    return false;
+}
+/**
+ * Parses a space-separated environment variable into an array.
+ *
+ * @param key - The environment variable name
+ * @returns The parsed array, or null if not set
+ */
+export function envList(key) {
+    const v = process.env[key];
+    return v && v !== 'undefined' ? v.split(' ') : null;
+}
+/**
+ * Formats a Date to ISO string without timezone suffix.
+ *
+ * @param date - The date to format
+ * @returns ISO-formatted string without trailing Z
+ */
+export function formatDate(date) {
+    return new Date(date.getTime() - date.getTimezoneOffset() * 60000).toISOString().replace('Z', '');
+}
+/**
+ * Generates a random IPv4 address.
+ *
+ * @returns A string in the format "X.X.X.X"
+ */
+export function genIP() {
+    return `${randomNumber(0, 255)}.${randomNumber(0, 255)}.${randomNumber(0, 255)}.${randomNumber(0, 255)}`;
+}
+/**
+ * Returns a random element from an array.
+ *
+ * @param arr - The source array
+ * @returns A random element
+ */
+export function random(arr) {
+    return arr[Math.floor(Math.random() * arr.length)];
+}
+/**
+ * Returns a random integer between min and max (inclusive).
+ *
+ * @param min - Lower bound
+ * @param max - Upper bound
+ * @returns A random integer in [min, max]
+ */
+export function randomNumber(min, max) {
+    return Math.floor(Math.random() * (max - min + 1)) + min;
+}
+/**
+ * Checks if a version string is at least the given minimum.
+ *
+ * @param version - Version string (e.g. "v4")
+ * @param min - Minimum version number
+ * @returns true if the version is >= min
+ */
+export function since(version, min) {
+    return parseInt(version.replace('v', '')) >= min;
+}
+//# sourceMappingURL=helpers.js.map

package/dist/utils/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../src/utils/helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC1B,UAAoC,EACpC,MAAc,EACd,SAAiB,EACjB,MAAM,GAAG,KAAK,EACd,KAAK,GAAG,EAAE;IAEV,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;YAC5E,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;IAExF,IAAI,UAAU,CAAC,MAAM,CAAE,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAE,CAAC,CAAC,CAAE,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,qCAAqC,aAAa,WAAW,CAAC,CAAC;IACnF,CAAC;IAED,UAAU,CAAC,MAAM,CAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW;IAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAU;IACjC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK;IACjB,OAAO,GAAG,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAI,GAAQ;IAC9B,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAAE,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,GAAW;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,KAAK,CAAC,OAAe,EAAE,GAAW;IAC9C,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC;AACrD,CAAC"}

package/dist/utils/response.d.ts

@@ -0,0 +1,9 @@
+import type { Response } from 'express';
+/**
+ * Sends a standardized JSON error response.
+ *
+ * @param res - Express response object
+ * @param status - HTTP status code
+ * @param message - Error description
+ */
+export declare function error(res: Response, status: number, message: string): void;

package/dist/utils/response.js

@@ -0,0 +1,24 @@
+import { STATUS_MESSAGES } from '../constants.js';
+/**
+ * Sends a standardized JSON error response.
+ *
+ * @param res - Express response object
+ * @param status - HTTP status code
+ * @param message - Error description
+ */
+export function error(res, status, message) {
+    const body = {
+        message: STATUS_MESSAGES[status] ?? 'Error',
+        error: message,
+        status,
+    };
+    if (typeof res.jsonResponse === 'function') {
+        res.status(status).jsonResponse(body);
+    }
+    else {
+        res.status(status)
+            .setHeader('Content-Type', 'application/json')
+            .send(JSON.stringify(body, null, 2));
+    }
+}
+//# sourceMappingURL=response.js.map

package/dist/utils/response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.js","sourceRoot":"","sources":["../../src/utils/response.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,UAAU,KAAK,CAAC,GAAa,EAAE,MAAc,EAAE,OAAe;IAChE,MAAM,IAAI,GAAG;QACT,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,IAAI,OAAO;QAC3C,KAAK,EAAE,OAAO;QACd,MAAM;KACT,CAAC;IAEF,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACJ,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;aACb,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC;aAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;AACL,CAAC"}

package/package.json

@@ -0,0 +1,90 @@
+{
+    "version": "6.0.0-pre",
+    "name": "@moxon/api",
+    "description": "Node.js API with multiple features. Check the documentation at https://docs.sylvain.sh",
+    "main": "./dist/modules/v6.js",
+    "types": "./dist/modules/v6.d.ts",
+    "type": "module",
+    "scripts": {
+        "prepare": "npm run clean && tsc",
+        "clean": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
+        "dev": "tsx watch src/app.ts",
+        "build": "npm run clean && tsc",
+        "start": "node dist/app.js",
+        "check": "tsc --noEmit -p tsconfig.test.json && eslint src/ tests/ && prettier --check .",
+        "format": "prettier --write . && eslint --fix src/ tests/",
+        "test": "NODE_ENV=test DOCS_URL=https://docs.example.test node --import tsx --test tests/unit/*.test.ts tests/integration/*.test.ts"
+    },
+    "engines": {
+        "node": ">=22.12.0"
+    },
+    "exports": {
+        ".": {
+            "types": "./dist/modules/v6.d.ts",
+            "default": "./dist/modules/v6.js"
+        },
+        "./server": {
+            "types": "./dist/app.d.ts",
+            "default": "./dist/app.js"
+        },
+        "./v4": {
+            "types": "./dist/modules/v4.d.ts",
+            "default": "./dist/modules/v4.js"
+        },
+        "./v5": {
+            "types": "./dist/modules/v5.d.ts",
+            "default": "./dist/modules/v5.js"
+        },
+        "./v6": {
+            "types": "./dist/modules/v6.d.ts",
+            "default": "./dist/modules/v6.js"
+        },
+        "./package.json": "./package.json"
+    },
+    "dependencies": {
+        "@20syldev/logger.ts": "^1.0.2",
+        "@types/express": "^5.0.0",
+        "@types/node": "^22.19.17",
+        "canvas": "^3.1.0",
+        "cors": "^2.8.5",
+        "dotenv": "^16.4.7",
+        "express": "^5.1.0",
+        "ical.js": "^2.1.0",
+        "qrcode": "^1.5.4",
+        "random": "^5.3.0",
+        "uuid": "^14.0.0"
+    },
+    "devDependencies": {
+        "@eslint/js": "^9.24.0",
+        "@types/cors": "^2.8.17",
+        "@types/qrcode": "^1.5.6",
+        "@types/uuid": "^10.0.0",
+        "eslint": "^9.24.0",
+        "eslint-config-prettier": "^10.1.1",
+        "eslint-plugin-simple-import-sort": "^13.0.0",
+        "prettier": "^3.5.3",
+        "tsx": "^4.19.0",
+        "typescript": "^5.7.0",
+        "typescript-eslint": "^8.29.0"
+    },
+    "publishConfig": {
+        "access": "public"
+    },
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/20syldev/moxon.git"
+    },
+    "keywords": [
+        "api",
+        "express",
+        "utility",
+        "math",
+        "typescript"
+    ],
+    "author": "Sylvain L.",
+    "license": "BSD 3-Clause",
+    "bugs": {
+        "url": "https://github.com/20syldev/moxon/issues"
+    },
+    "homepage": "https://api.sylvain.sh"
+}