@prosopo/ipinfo 0.4.20 → 0.4.22

package/.turbo/turbo-build$colon$cjs.log

@@ -19,15 +19,16 @@ ViteCommonJSConfig: .
   ]
 }
 The plugin "vite-tsconfig-paths" is detected. Vite now supports tsconfig paths resolution natively via the resolve.tsconfigPaths option. You can remove the plugin and set resolve.tsconfigPaths: true in your Vite config instead.
-vite v8.1.5 building ssr environment for production...
+vite v8.1.6 building ssr environment for production...
 Bundle build started
 
-✓ 5 modules transformed.
+✓ 6 modules transformed.
 rendering chunks...
 computing gzip size...
-dist/cjs/index.cjs             0.47 kB │ gzip: 0.21 kB
-dist/cjs/IpInfoService.cjs     3.72 kB │ gzip: 1.39 kB
+dist/cjs/index.cjs             0.66 kB │ gzip: 0.26 kB
+dist/cjs/lookupCache.cjs       1.64 kB │ gzip: 0.78 kB
+dist/cjs/IpInfoService.cjs     4.03 kB │ gzip: 1.47 kB
 dist/cjs/backends/ipapi.cjs    4.11 kB │ gzip: 1.75 kB
 dist/cjs/backends/maxmind.cjs  5.92 kB │ gzip: 1.89 kB
 
-✓ built in 47ms
+✓ built in 58ms

package/.turbo/turbo-build$colon$tsc.log

@@ -1,5 +1,5 @@
 $ tsc --build --verbose
-10:01:20 AM - Projects in this build: 
+5:07:53 PM - Projects in this build: 
     * ../../dev/config/tsconfig.json
     * ../util/tsconfig.json
     * ../logger/tsconfig.json
@@ -8,19 +8,19 @@ $ tsc --build --verbose
     * ../types/tsconfig.json
     * tsconfig.json
 
-10:01:20 AM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
+5:07:53 PM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
 
-10:01:20 AM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
+5:07:53 PM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
 
-10:01:20 AM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/index.ts' is older than output '../logger/tsconfig.tsbuildinfo'
+5:07:53 PM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/index.ts' is older than output '../logger/tsconfig.tsbuildinfo'
 
-10:01:20 AM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/process.ts' is older than output '../locale/tsconfig.tsbuildinfo'
+5:07:54 PM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
 
-10:01:20 AM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
+5:07:54 PM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
 
-10:01:20 AM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/types.test-d.ts' is older than output '../types/tsconfig.tsbuildinfo'
+5:07:54 PM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/types.test-d.ts' is older than output '../types/tsconfig.tsbuildinfo'
 
-10:01:20 AM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
+5:07:54 PM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
 
-10:01:20 AM - Building project '/home/runner/work/captcha/captcha/packages/ipinfo/tsconfig.json'...
+5:07:54 PM - Building project '/home/runner/work/captcha/captcha/packages/ipinfo/tsconfig.json'...
 

package/.turbo/turbo-build.log

@@ -20,16 +20,17 @@ ViteEsmConfig: .
   ]
 }
 The plugin "vite-tsconfig-paths" is detected. Vite now supports tsconfig paths resolution natively via the resolve.tsconfigPaths option. You can remove the plugin and set resolve.tsconfigPaths: true in your Vite config instead.
-vite v8.1.5 building ssr environment for production...
+vite v8.1.6 building ssr environment for production...
 Bundle build started
 
-✓ 5 modules transformed.
+✓ 6 modules transformed.
 rendering chunks...
 computing gzip size...
 dist/_virtual/_rolldown/runtime.js  0.04 kB │ gzip: 0.06 kB
-dist/index.js                       0.28 kB │ gzip: 0.15 kB
-dist/IpInfoService.js               3.65 kB │ gzip: 1.38 kB
+dist/index.js                       0.39 kB │ gzip: 0.19 kB
+dist/lookupCache.js                 1.60 kB │ gzip: 0.77 kB
+dist/IpInfoService.js               3.93 kB │ gzip: 1.46 kB
 dist/backends/ipapi.js              4.07 kB │ gzip: 1.75 kB
 dist/backends/maxmind.js            5.91 kB │ gzip: 1.89 kB
 
-✓ built in 41ms
+✓ built in 50ms

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # @prosopo/ipinfo
 
+## 0.4.22
+### Patch Changes
+
+- 46b97b7: Roll up the open Dependabot updates: express 5 (with `@types/express` 5), dotenv 18, undici 8, geolib 4, vitest 5, vite 8.1.6 everywhere, 17 minor and patch bumps (Babel, mongoose, i18next, ip-address, turbo and others), `@angular/router` in the Angular demo, and a GitHub Actions bump.
+  
+  The whole vitest family moves to 5.0.4, including `@vitest/coverage-v8`, because `@vitest/browser-playwright` 5 only works with vitest 5. The `@types/express-serve-static-core` override moves to 5.1.3 to match `@types/express` 5.
+  
+  `@prosopo/dotenv` now loads env files with `quiet: true`. Since dotenv 17, every load prints an "injected env" line to stderr unless told not to.
+- 860948c: Server-side verify (what siteverify calls) now does far less waiting. A PoW verify used to make about 19 database and ip-lookup calls one after another; it now makes about 6, and a rejected verify fewer. Changes:
+  
+  - The ip lookup that runs on every request is skipped on verify routes. Nothing on verify used it, and the caller there is the site's server, not the user.
+  - The session record is read once instead of twice, and the client record once instead of twice.
+  - DNS enrichment and the user's ip lookup run alongside the access-rule check instead of after it. The ip lookup is skipped once a check has already failed.
+  - The verify answers without waiting for its two bookkeeping writes, unless 500 are already waiting, so a slow database cannot pile them up in memory. The single-use claim is still made before anything else, so a token still verifies only once.
+  - Decision-machine artifacts are cached per process. They were cached per request, so every verify read them from Mongo. Saving or deleting a machine clears the cache.
+  - Client records are cached for 30 seconds and the cache is cleared by every client-record write in the process.
+  - Successful ip lookups are cached for 10 minutes, so an address is not looked up twice in one verify, or again at verify after the challenge looked it up.
+- Updated dependencies [46b97b7]
+- Updated dependencies [d2148c8]
+- Updated dependencies [2bcf2fe]
+  - @prosopo/logger@2.1.5
+  - @prosopo/types@5.17.0
+
+## 0.4.21
+### Patch Changes
+
+  - @prosopo/types@5.16.3
+  - @prosopo/logger@2.1.4
+
 ## 0.4.20
 ### Patch Changes
 

package/dist/IpInfoService.d.ts

@@ -11,10 +11,12 @@ export declare class IpInfoService implements IIpInfoService {
     private maxmindBackend;
     private ipapiBackend;
     private config;
+    private readonly cache;
     constructor(config: IpInfoServiceConfig, backends?: IpInfoBackends);
     initialize(): Promise<void>;
     isAvailable(): boolean;
     country(ip: string): string | undefined;
     lookup(ip: string): Promise<IPInfoResponse>;
+    private lookupUncached;
 }
 //# sourceMappingURL=IpInfoService.d.ts.map

package/dist/IpInfoService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IpInfoService.d.ts","sourceRoot":"","sources":["../src/IpInfoService.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAMtE,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CA+BjD;AAQD,MAAM,WAAW,cAAc;IAC9B,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CAC5B;AAED,qBAAa,aAAc,YAAW,cAAc;IACnD,OAAO,CAAC,cAAc,CAA+B;IACrD,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,MAAM,CAAsB;gBAExB,MAAM,EAAE,mBAAmB,EAAE,QAAQ,CAAC,EAAE,cAAc;IA0B5D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAcjC,WAAW,IAAI,OAAO;IAsBtB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAMjC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;CA4CjD"}
+{"version":3,"file":"IpInfoService.d.ts","sourceRoot":"","sources":["../src/IpInfoService.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAMtE,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CA+BjD;AAQD,MAAM,WAAW,cAAc;IAC9B,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CAC5B;AAED,qBAAa,aAAc,YAAW,cAAc;IACnD,OAAO,CAAC,cAAc,CAA+B;IACrD,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;gBAEpC,MAAM,EAAE,mBAAmB,EAAE,QAAQ,CAAC,EAAE,cAAc;IA6B5D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAcjC,WAAW,IAAI,OAAO;IAsBtB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAMjC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;YAMnC,cAAc;CA4C5B"}

package/dist/IpInfoService.js

@@ -1,5 +1,6 @@
 import { IpapiBackend } from "./backends/ipapi.js";
 import { MaxMindBackend } from "./backends/maxmind.js";
+import { LookupCache } from "./lookupCache.js";
 //#region src/IpInfoService.ts
 /**
 * Returns true for loopback, link-local, and private-range IPs that will
@@ -22,6 +23,7 @@ var IpInfoService = class {
 		this.maxmindBackend = null;
 		this.ipapiBackend = null;
 		this.config = config;
+		this.cache = config.lookupCache ? new LookupCache(config.lookupCache) : void 0;
 		if (backends) {
 			this.maxmindBackend = backends.maxmind ?? null;
 			this.ipapiBackend = backends.ipapi ?? null;
@@ -72,6 +74,9 @@ var IpInfoService = class {
 		return this.maxmindBackend.countryCode(ip);
 	}
 	async lookup(ip) {
+		return this.cache ? this.cache.getOrLookup(ip, (address) => this.lookupUncached(address)) : this.lookupUncached(ip);
+	}
+	async lookupUncached(ip) {
 		if (isNonRoutable(ip)) return {
 			isValid: false,
 			error: "Non-routable IP address",

package/dist/IpInfoService.js.map

@@ -1 +1 @@
-{"version":3,"file":"IpInfoService.js","sourceRoot":"","sources":["../src/IpInfoService.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAOvD,MAAM,UAAU,aAAa,CAAC,EAAU;IAEvC,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAG/C,IACC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;QAC7B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QACjC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QACjC,UAAU,KAAK,SAAS,EACvB,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAGD,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;IAC/C,CAAC;IAGD,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAG7D,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAG5C,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/C,OAAO,KAAK,CAAC;AACd,CAAC;AAaD,MAAM,OAAO,aAAa;IAKzB,YAAY,MAA2B,EAAE,QAAyB;QAJ1D,mBAAc,GAA0B,IAAI,CAAC;QAC7C,iBAAY,GAAwB,IAAI,CAAC;QAIhD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC;YAC/C,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC;YAC3C,OAAO;QACR,CAAC;QAED,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACzD,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC;gBACxC,UAAU,EAAE,MAAM,CAAC,iBAAiB;gBACpC,SAAS,EAAE,MAAM,CAAC,gBAAgB;gBAClC,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC;gBACpC,OAAO,EAAE,MAAM,CAAC,QAAQ;gBACxB,MAAM,EAAE,MAAM,CAAC,QAAQ;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU;QACf,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/B,GAAG,EAAE,2BAA2B;YAChC,IAAI,EAAE;gBACL,gBAAgB,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,KAAK;gBAC7D,cAAc,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,KAAK;aACzD;SACD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,WAAW;QACV,OAAO,CACN,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;YAC7C,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC,CAC3C,CAAC;IACH,CAAC;IAiBD,OAAO,CAAC,EAAU;QACjB,IAAI,aAAa,CAAC,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACtB,IAAI,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,yBAAyB;gBAChC,EAAE;aACF,CAAC;QACH,CAAC;QAGD,IAAI,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,MAAM,CAAC;YACf,CAAC;YAGD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBAChC,GAAG,EAAE,iDAAiD;gBACtD,IAAI,EAAE;oBACL,EAAE;oBACF,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBACnD;aACD,CAAC,CAAC,CAAC;YAEJ,IAAI,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvC,CAAC;YAGD,OAAO,MAAM,CAAC;QACf,CAAC;QAGD,IAAI,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,OAAO;YACN,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,8BAA8B;YACrC,EAAE;SACF,CAAC;IACH,CAAC;CACD"}
+{"version":3,"file":"IpInfoService.js","sourceRoot":"","sources":["../src/IpInfoService.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAO/C,MAAM,UAAU,aAAa,CAAC,EAAU;IAEvC,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAG/C,IACC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;QAC7B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QACjC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QACjC,UAAU,KAAK,SAAS,EACvB,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAGD,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;IAC/C,CAAC;IAGD,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAG7D,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAG5C,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/C,OAAO,KAAK,CAAC;AACd,CAAC;AAaD,MAAM,OAAO,aAAa;IAMzB,YAAY,MAA2B,EAAE,QAAyB;QAL1D,mBAAc,GAA0B,IAAI,CAAC;QAC7C,iBAAY,GAAwB,IAAI,CAAC;QAKhD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,WAAW;YAC9B,CAAC,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC;YACrC,CAAC,CAAC,SAAS,CAAC;QAEb,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC;YAC/C,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC;YAC3C,OAAO;QACR,CAAC;QAED,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACzD,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC;gBACxC,UAAU,EAAE,MAAM,CAAC,iBAAiB;gBACpC,SAAS,EAAE,MAAM,CAAC,gBAAgB;gBAClC,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC;gBACpC,OAAO,EAAE,MAAM,CAAC,QAAQ;gBACxB,MAAM,EAAE,MAAM,CAAC,QAAQ;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU;QACf,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/B,GAAG,EAAE,2BAA2B;YAChC,IAAI,EAAE;gBACL,gBAAgB,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,KAAK;gBAC7D,cAAc,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,KAAK;aACzD;SACD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,WAAW;QACV,OAAO,CACN,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;YAC7C,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC,CAC3C,CAAC;IACH,CAAC;IAiBD,OAAO,CAAC,EAAU;QACjB,IAAI,aAAa,CAAC,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1D,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACtB,OAAO,IAAI,CAAC,KAAK;YAChB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YACvE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,EAAU;QACtC,IAAI,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,yBAAyB;gBAChC,EAAE;aACF,CAAC;QACH,CAAC;QAGD,IAAI,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,MAAM,CAAC;YACf,CAAC;YAGD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBAChC,GAAG,EAAE,iDAAiD;gBACtD,IAAI,EAAE;oBACL,EAAE;oBACF,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBACnD;aACD,CAAC,CAAC,CAAC;YAEJ,IAAI,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvC,CAAC;YAGD,OAAO,MAAM,CAAC;QACf,CAAC;QAGD,IAAI,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,OAAO;YACN,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,8BAA8B;YACrC,EAAE;SACF,CAAC;IACH,CAAC;CACD"}

package/dist/cjs/IpInfoService.cjs

@@ -1,5 +1,6 @@
 const require_ipapi = require("./backends/ipapi.cjs");
 const require_maxmind = require("./backends/maxmind.cjs");
+const require_lookupCache = require("./lookupCache.cjs");
 //#region src/IpInfoService.ts
 /**
 * Returns true for loopback, link-local, and private-range IPs that will
@@ -22,6 +23,7 @@ var IpInfoService = class {
 		this.maxmindBackend = null;
 		this.ipapiBackend = null;
 		this.config = config;
+		this.cache = config.lookupCache ? new require_lookupCache.LookupCache(config.lookupCache) : void 0;
 		if (backends) {
 			this.maxmindBackend = backends.maxmind ?? null;
 			this.ipapiBackend = backends.ipapi ?? null;
@@ -72,6 +74,9 @@ var IpInfoService = class {
 		return this.maxmindBackend.countryCode(ip);
 	}
 	async lookup(ip) {
+		return this.cache ? this.cache.getOrLookup(ip, (address) => this.lookupUncached(address)) : this.lookupUncached(ip);
+	}
+	async lookupUncached(ip) {
 		if (isNonRoutable(ip)) return {
 			isValid: false,
 			error: "Non-routable IP address",

package/dist/cjs/index.cjs

@@ -1,8 +1,11 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_ipapi = require("./backends/ipapi.cjs");
 const require_maxmind = require("./backends/maxmind.cjs");
+const require_lookupCache = require("./lookupCache.cjs");
 const require_IpInfoService = require("./IpInfoService.cjs");
+exports.DEFAULT_LOOKUP_CACHE = require_lookupCache.DEFAULT_LOOKUP_CACHE;
 exports.IpInfoService = require_IpInfoService.IpInfoService;
 exports.IpapiBackend = require_ipapi.IpapiBackend;
+exports.LookupCache = require_lookupCache.LookupCache;
 exports.MaxMindBackend = require_maxmind.MaxMindBackend;
 exports.isNonRoutable = require_IpInfoService.isNonRoutable;

package/dist/cjs/lookupCache.cjs

@@ -0,0 +1,53 @@
+//#region src/lookupCache.ts
+/**
+* The sidecar answers from a database that only changes on redeploy, so a
+* few minutes of staleness costs nothing, while the same address is looked
+* up repeatedly: by the challenge request and then its verify, and up to
+* three times within one verify.
+*/
+var DEFAULT_LOOKUP_CACHE = {
+	ttlMs: 600 * 1e3,
+	maxEntries: 2e4
+};
+/**
+* Bounded LRU + TTL cache of successful lookups. Concurrent lookups of one
+* address share a single call. Failed lookups are never stored, so a sidecar
+* timeout is retried by the next caller rather than remembered.
+*/
+var LookupCache = class {
+	constructor(config) {
+		this.config = config;
+		this.entries = /* @__PURE__ */ new Map();
+		this.inflight = /* @__PURE__ */ new Map();
+	}
+	async getOrLookup(ip, lookup) {
+		const entry = this.entries.get(ip);
+		if (entry && entry.expiresAt > Date.now()) {
+			this.entries.delete(ip);
+			this.entries.set(ip, entry);
+			return entry.value;
+		}
+		if (entry) this.entries.delete(ip);
+		const pending = this.inflight.get(ip);
+		if (pending) return pending;
+		const promise = lookup(ip).then((value) => {
+			if (value.isValid) this.store(ip, value);
+			return value;
+		}).finally(() => this.inflight.delete(ip));
+		this.inflight.set(ip, promise);
+		return promise;
+	}
+	store(ip, value) {
+		if (this.entries.size >= this.config.maxEntries) {
+			const oldest = this.entries.keys().next().value;
+			if (oldest !== void 0) this.entries.delete(oldest);
+		}
+		this.entries.set(ip, {
+			value,
+			expiresAt: Date.now() + this.config.ttlMs
+		});
+	}
+};
+//#endregion
+exports.DEFAULT_LOOKUP_CACHE = DEFAULT_LOOKUP_CACHE;
+exports.LookupCache = LookupCache;

package/dist/index.d.ts

@@ -5,4 +5,6 @@ export type { FetchFn, IpapiBackendConfig } from "./backends/ipapi.js";
 export { MaxMindBackend } from "./backends/maxmind.js";
 export type { MaxMindBackendConfig, OpenReader } from "./backends/maxmind.js";
 export type { IIpInfoService, IpInfoServiceConfig } from "./types.js";
+export { DEFAULT_LOOKUP_CACHE, LookupCache } from "./lookupCache.js";
+export type { LookupCacheConfig } from "./lookupCache.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAClE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAIzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC9E,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAClE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAIzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC9E,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACrE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -1,5 +1,6 @@
 import "./_virtual/_rolldown/runtime.js";
 import { IpapiBackend } from "./backends/ipapi.js";
 import { MaxMindBackend } from "./backends/maxmind.js";
+import { DEFAULT_LOOKUP_CACHE, LookupCache } from "./lookupCache.js";
 import { IpInfoService, isNonRoutable } from "./IpInfoService.js";
-export { IpInfoService, IpapiBackend, MaxMindBackend, isNonRoutable };
+export { DEFAULT_LOOKUP_CACHE, IpInfoService, IpapiBackend, LookupCache, MaxMindBackend, isNonRoutable };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKlE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKlE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/lookupCache.d.ts

@@ -0,0 +1,15 @@
+import type { IPInfoResponse } from "@prosopo/types";
+export type LookupCacheConfig = {
+    ttlMs: number;
+    maxEntries: number;
+};
+export declare const DEFAULT_LOOKUP_CACHE: LookupCacheConfig;
+export declare class LookupCache {
+    private readonly config;
+    private readonly entries;
+    private readonly inflight;
+    constructor(config: LookupCacheConfig);
+    getOrLookup(ip: string, lookup: (ip: string) => Promise<IPInfoResponse>): Promise<IPInfoResponse>;
+    private store;
+}
+//# sourceMappingURL=lookupCache.d.ts.map

package/dist/lookupCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookupCache.d.ts","sourceRoot":"","sources":["../src/lookupCache.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,MAAM,iBAAiB,GAAG;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACnB,CAAC;AAQF,eAAO,MAAM,oBAAoB,EAAE,iBAGlC,CAAC;AASF,qBAAa,WAAW;IAIX,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8C;gBAE1C,MAAM,EAAE,iBAAiB;IAEhD,WAAW,CAChB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,GAC7C,OAAO,CAAC,cAAc,CAAC;IAsB1B,OAAO,CAAC,KAAK;CAOb"}

package/dist/lookupCache.js

@@ -0,0 +1,52 @@
+//#region src/lookupCache.ts
+/**
+* The sidecar answers from a database that only changes on redeploy, so a
+* few minutes of staleness costs nothing, while the same address is looked
+* up repeatedly: by the challenge request and then its verify, and up to
+* three times within one verify.
+*/
+var DEFAULT_LOOKUP_CACHE = {
+	ttlMs: 600 * 1e3,
+	maxEntries: 2e4
+};
+/**
+* Bounded LRU + TTL cache of successful lookups. Concurrent lookups of one
+* address share a single call. Failed lookups are never stored, so a sidecar
+* timeout is retried by the next caller rather than remembered.
+*/
+var LookupCache = class {
+	constructor(config) {
+		this.config = config;
+		this.entries = /* @__PURE__ */ new Map();
+		this.inflight = /* @__PURE__ */ new Map();
+	}
+	async getOrLookup(ip, lookup) {
+		const entry = this.entries.get(ip);
+		if (entry && entry.expiresAt > Date.now()) {
+			this.entries.delete(ip);
+			this.entries.set(ip, entry);
+			return entry.value;
+		}
+		if (entry) this.entries.delete(ip);
+		const pending = this.inflight.get(ip);
+		if (pending) return pending;
+		const promise = lookup(ip).then((value) => {
+			if (value.isValid) this.store(ip, value);
+			return value;
+		}).finally(() => this.inflight.delete(ip));
+		this.inflight.set(ip, promise);
+		return promise;
+	}
+	store(ip, value) {
+		if (this.entries.size >= this.config.maxEntries) {
+			const oldest = this.entries.keys().next().value;
+			if (oldest !== void 0) this.entries.delete(oldest);
+		}
+		this.entries.set(ip, {
+			value,
+			expiresAt: Date.now() + this.config.ttlMs
+		});
+	}
+};
+//#endregion
+export { DEFAULT_LOOKUP_CACHE, LookupCache };

package/dist/lookupCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookupCache.js","sourceRoot":"","sources":["../src/lookupCache.ts"],"names":[],"mappings":"AA2BA,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACtD,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACrB,UAAU,EAAE,MAAM;CAClB,CAAC;AASF,MAAM,OAAO,WAAW;IAIvB,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;QAHrC,YAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;QACnC,aAAQ,GAAG,IAAI,GAAG,EAAmC,CAAC;IAEd,CAAC;IAE1D,KAAK,CAAC,WAAW,CAChB,EAAU,EACV,MAA+C;QAE/C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC5B,OAAO,KAAK,CAAC,KAAK,CAAC;QACpB,CAAC;QACD,IAAI,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC;aACxB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,IAAI,KAAK,CAAC,OAAO;gBAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO,KAAK,CAAC;QACd,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,EAAU,EAAE,KAAqB;QAC9C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;CACD"}

package/dist/tests/lookupCache.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=lookupCache.unit.test.d.ts.map

package/dist/tests/lookupCache.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookupCache.unit.test.d.ts","sourceRoot":"","sources":["../../src/tests/lookupCache.unit.test.ts"],"names":[],"mappings":""}

package/dist/tests/lookupCache.unit.test.js

@@ -0,0 +1,99 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { IpInfoService } from "../IpInfoService.js";
+import { LookupCache } from "../lookupCache.js";
+const valid = (ip) => ({
+    isValid: true,
+    ip,
+    isVPN: false,
+    isTor: false,
+    isProxy: false,
+    isDatacenter: false,
+    isAbuser: false,
+    isMobile: false,
+    isSatellite: false,
+    isCrawler: false,
+});
+const failed = (ip) => ({
+    isValid: false,
+    error: "Request timed out after 700ms",
+    ip,
+});
+describe("LookupCache", () => {
+    beforeEach(() => {
+        vi.useFakeTimers();
+    });
+    afterEach(() => {
+        vi.useRealTimers();
+    });
+    it("answers a repeat lookup from the cache", async () => {
+        const cache = new LookupCache({ ttlMs: 1000, maxEntries: 10 });
+        const lookup = vi.fn((ip) => Promise.resolve(valid(ip)));
+        await cache.getOrLookup("8.8.8.8", lookup);
+        const second = await cache.getOrLookup("8.8.8.8", lookup);
+        expect(second).toEqual(valid("8.8.8.8"));
+        expect(lookup).toHaveBeenCalledTimes(1);
+    });
+    it("shares one call between concurrent lookups of the same address", async () => {
+        const cache = new LookupCache({ ttlMs: 1000, maxEntries: 10 });
+        const lookup = vi.fn((ip) => Promise.resolve(valid(ip)));
+        await Promise.all([
+            cache.getOrLookup("8.8.8.8", lookup),
+            cache.getOrLookup("8.8.8.8", lookup),
+            cache.getOrLookup("8.8.8.8", lookup),
+        ]);
+        expect(lookup).toHaveBeenCalledTimes(1);
+    });
+    it("looks up again once the entry has expired", async () => {
+        const cache = new LookupCache({ ttlMs: 1000, maxEntries: 10 });
+        const lookup = vi.fn((ip) => Promise.resolve(valid(ip)));
+        await cache.getOrLookup("8.8.8.8", lookup);
+        vi.advanceTimersByTime(1001);
+        await cache.getOrLookup("8.8.8.8", lookup);
+        expect(lookup).toHaveBeenCalledTimes(2);
+    });
+    it("does not remember a failed lookup", async () => {
+        const cache = new LookupCache({ ttlMs: 1000, maxEntries: 10 });
+        const lookup = vi
+            .fn()
+            .mockResolvedValueOnce(failed("8.8.8.8"))
+            .mockResolvedValueOnce(valid("8.8.8.8"));
+        const first = await cache.getOrLookup("8.8.8.8", lookup);
+        const second = await cache.getOrLookup("8.8.8.8", lookup);
+        expect(first.isValid).toBe(false);
+        expect(second.isValid).toBe(true);
+        expect(lookup).toHaveBeenCalledTimes(2);
+    });
+    it("evicts the least recently used address when full", async () => {
+        const cache = new LookupCache({ ttlMs: 1000, maxEntries: 2 });
+        const lookup = vi.fn((ip) => Promise.resolve(valid(ip)));
+        await cache.getOrLookup("1.1.1.1", lookup);
+        await cache.getOrLookup("2.2.2.2", lookup);
+        await cache.getOrLookup("1.1.1.1", lookup);
+        await cache.getOrLookup("3.3.3.3", lookup);
+        lookup.mockClear();
+        await cache.getOrLookup("1.1.1.1", lookup);
+        await cache.getOrLookup("2.2.2.2", lookup);
+        expect(lookup.mock.calls).toEqual([["2.2.2.2"]]);
+    });
+});
+describe("IpInfoService lookup cache", () => {
+    const ipapiReturning = (lookup) => ({
+        isAvailable: () => true,
+        lookup,
+    });
+    it("asks the sidecar once for an address looked up twice", async () => {
+        const lookup = vi.fn((ip) => Promise.resolve(valid(ip)));
+        const service = new IpInfoService({ lookupCache: { ttlMs: 60_000, maxEntries: 10 } }, { ipapi: ipapiReturning(lookup) });
+        await service.lookup("8.8.8.8");
+        await service.lookup("8.8.8.8");
+        expect(lookup).toHaveBeenCalledTimes(1);
+    });
+    it("asks the sidecar every time when no cache is configured", async () => {
+        const lookup = vi.fn((ip) => Promise.resolve(valid(ip)));
+        const service = new IpInfoService({}, { ipapi: ipapiReturning(lookup) });
+        await service.lookup("8.8.8.8");
+        await service.lookup("8.8.8.8");
+        expect(lookup).toHaveBeenCalledTimes(2);
+    });
+});
+//# sourceMappingURL=lookupCache.unit.test.js.map

package/dist/tests/lookupCache.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookupCache.unit.test.js","sourceRoot":"","sources":["../../src/tests/lookupCache.unit.test.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,KAAK,GAAG,CAAC,EAAU,EAAgB,EAAE,CAAC,CAAC;IAC5C,OAAO,EAAE,IAAI;IACb,EAAE;IACF,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,KAAK;IACd,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,KAAK;IAClB,SAAS,EAAE,KAAK;CAChB,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,EAAU,EAAe,EAAE,CAAC,CAAC;IAC5C,OAAO,EAAE,KAAK;IACd,KAAK,EAAE,+BAA+B;IACtC,EAAE;CACF,CAAC,CAAC;AAIH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC5B,UAAU,CAAC,GAAG,EAAE;QACf,EAAE,CAAC,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAS,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAE1D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAS,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,OAAO,CAAC,GAAG,CAAC;YACjB,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC;YACpC,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC;YACpC,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAS,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,EAAE;aACf,EAAE,EAAU;aACZ,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aACxC,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAE1C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAE1D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAS,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,EAAE,CAAC;QAEnB,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC3C,MAAM,cAAc,GAAG,CAAC,MAAc,EAAgB,EAAE,CACvD,CAAC;QACA,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;QACvB,MAAM;KACN,CAA4B,CAAC;IAE/B,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAS,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,aAAa,CAChC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAClD,EAAE,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CACjC,CAAC;QAEF,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEhC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAS,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAEzE,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEhC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/types.d.ts

@@ -1,5 +1,6 @@
 import type { Logger } from "@prosopo/logger";
 import type { IPInfoResponse } from "@prosopo/types";
+import type { LookupCacheConfig } from "./lookupCache.js";
 export interface IIpInfoService {
     initialize(): Promise<void>;
     lookup(ip: string): Promise<IPInfoResponse>;
@@ -12,5 +13,6 @@ export interface IpInfoServiceConfig {
     ipapiUrl?: string;
     ipapiKey?: string;
     logger?: Logger;
+    lookupCache?: LookupCacheConfig;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,WAAW,cAAc;IAC9B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAM5C,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACxC,WAAW,IAAI,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,WAAW,cAAc;IAC9B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAM5C,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACxC,WAAW,IAAI,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,iBAAiB,CAAC;CAChC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prosopo/ipinfo",
-  "version": "0.4.20",
+  "version": "0.4.22",
   "description": "IP information service with MaxMind and ipapi.is backends",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -17,18 +17,18 @@
   },
   "dependencies": {
     "@maxmind/geoip2-node": "7.1.0",
-    "@prosopo/logger": "2.1.4",
-    "@prosopo/types": "5.16.2"
+    "@prosopo/logger": "2.1.5",
+    "@prosopo/types": "5.17.0"
   },
   "devDependencies": {
-    "@prosopo/config": "3.4.4",
+    "@prosopo/config": "3.5.0",
     "@types/node": "22.10.2",
-    "@vitest/coverage-v8": "4.1.11",
+    "@vitest/coverage-v8": "5.0.4",
     "del-cli": "6.0.0",
     "tslib": "2.7.0",
     "typescript": "5.6.2",
-    "vite": "8.1.5",
-    "vitest": "4.1.11"
+    "vite": "8.1.6",
+    "vitest": "5.0.4"
   },
   "license": "Apache-2.0",
   "repository": {