@scriptdb/cli 1.0.9 → 1.1.0

package/README.md

@@ -191,7 +191,7 @@ bun run dev
 
 ## Changelog
 
-### 1.0.9 (2025-01-16)
+### 1.1.0 (2025-01-16)
 
 **Added**
 - Native `scriptdb logs` command to view real-time logs

package/dist/index.js

@@ -93810,6 +93810,7 @@ class Protocal {
   IP_FAIL_WINDOW_MS;
   MAX_LOGIN_ATTEMPTS;
   LOCK_DURATION_MS;
+  ENABLE_IP_LOCKOUT;
   MAX_MESSAGE_BYTES;
   MAX_MESSAGES_PER_CONNECTION;
   CONNECTION_TIMEOUT_MS;
@@ -93923,9 +93924,10 @@ class Protocal {
     });
     this.loginAttemptCache = new Map;
     this.ipAttemptCache = new Map;
-    this.IP_FAIL_WINDOW_MS = options2.ipFailWindowMs || 15 * 60 * 1000;
-    this.MAX_LOGIN_ATTEMPTS = options2.maxLoginAttempts || 5;
-    this.LOCK_DURATION_MS = options2.lockDurationMs || 15 * 60 * 1000;
+    this.IP_FAIL_WINDOW_MS = options2.ipFailWindowMs || fileConfig.ipFailWindowMs || 15 * 60 * 1000;
+    this.MAX_LOGIN_ATTEMPTS = options2.maxLoginAttempts || fileConfig.maxLoginAttempts || 5;
+    this.LOCK_DURATION_MS = options2.lockDurationMs || fileConfig.lockDurationMs || 15 * 60 * 1000;
+    this.ENABLE_IP_LOCKOUT = options2.enableIpLockout !== undefined ? options2.enableIpLockout : fileConfig.enableIpLockout !== undefined ? fileConfig.enableIpLockout : true;
     this.MAX_MESSAGE_BYTES = options2.maxMessageBytes || 64 * 1024;
     this.MAX_MESSAGES_PER_CONNECTION = options2.maxMessagesPerConnection || 1000;
     this.CONNECTION_TIMEOUT_MS = typeof options2.connectionTimeoutMs === "number" ? options2.connectionTimeoutMs : typeof fileConfig.connectionTimeoutMs === "number" ? fileConfig.connectionTimeoutMs : 0;
@@ -94371,32 +94373,34 @@ class Protocal {
                   err: e && e.message || String(e)
                 });
               }
-              const nowTs = Date.now();
-              const ipRec = this.ipAttemptCache.get(remoteIP) || {
-                attempts: 0,
-                lockedUntil: 0,
-                expiresAt: nowTs + this._attemptCacheTTL
-              };
-              ipRec.attempts = (ipRec.attempts || 0) + 1;
-              ipRec.expiresAt = nowTs + this._attemptCacheTTL;
-              if (ipRec.attempts >= this.MAX_LOGIN_ATTEMPTS) {
-                ipRec.lockedUntil = nowTs + this.LOCK_DURATION_MS;
-                this.audit("ip.lockout", {
-                  ip: remoteIP,
-                  attempts: ipRec.attempts
-                });
-              }
-              this.ipAttemptCache.set(remoteIP, ipRec);
-              if (ipRec.lockedUntil && ipRec.lockedUntil > nowTs) {
-                this.audit("ip.locked", { ip: remoteIP });
-                try {
-                  sendWithBackpressure({
-                    command: "login",
-                    message: "LOCKED_IP",
-                    data: null
+              if (this.ENABLE_IP_LOCKOUT) {
+                const nowTs = Date.now();
+                const ipRec = this.ipAttemptCache.get(remoteIP) || {
+                  attempts: 0,
+                  lockedUntil: 0,
+                  expiresAt: nowTs + this._attemptCacheTTL
+                };
+                ipRec.attempts = (ipRec.attempts || 0) + 1;
+                ipRec.expiresAt = nowTs + this._attemptCacheTTL;
+                if (ipRec.attempts >= this.MAX_LOGIN_ATTEMPTS) {
+                  ipRec.lockedUntil = nowTs + this.LOCK_DURATION_MS;
+                  this.audit("ip.lockout", {
+                    ip: remoteIP,
+                    attempts: ipRec.attempts
                   });
-                } catch (e) {}
-                break;
+                }
+                this.ipAttemptCache.set(remoteIP, ipRec);
+                if (ipRec.lockedUntil && ipRec.lockedUntil > nowTs) {
+                  this.audit("ip.locked", { ip: remoteIP });
+                  try {
+                    sendWithBackpressure({
+                      command: "login",
+                      message: "LOCKED_IP",
+                      data: null
+                    });
+                  } catch (e) {}
+                  break;
+                }
               }
               const now = Date.now();
               const record = this.loginAttemptCache.get(username) || {
@@ -95253,7 +95257,7 @@ import { spawn } from "node:child_process";
 import Storage from "@scriptdb/storage";
 var pkgData = `{
   "name": "scriptdb-workspace",
-  "version": "1.0.9",
+  "version": "1.1.0",
   "description": "ScriptDB workspace for custom scripts, services, and databases",
   "private": true,
   "devDependencies": {
@@ -95340,6 +95344,10 @@ var configDefault = {
   GITHUB_URL: "",
   GITHUB_TOKEN: "",
   GITHUB_BRANCH: "main",
+  enableIpLockout: true,
+  ipFailWindowMs: 900000,
+  maxLoginAttempts: 5,
+  lockDurationMs: 900000,
   users: [
     {
       username: "admin",
@@ -97295,7 +97303,7 @@ function ensureScriptDBDir() {
   if (!existsSync3(PACKAGE_JSON)) {
     const packageJsonContent = {
       name: "scriptdb-workspace",
-      version: "1.0.9",
+      version: "1.1.0",
       description: "ScriptDB workspace for custom scripts, services, and databases",
       private: true,
       devDependencies: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scriptdb/cli",
-  "version": "1.0.9",
+  "version": "1.1.0",
   "description": "CLI tool to start and manage ScriptDB server",
   "type": "module",
   "bin": {
@@ -38,8 +38,8 @@
     "typescript": "^5.0.0"
   },
   "dependencies": {
-    "@scriptdb/client": "^1.0.9",
-    "@scriptdb/server": "^1.0.9",
+    "@scriptdb/client": "^1.1.0",
+    "@scriptdb/server": "^1.1.0",
     "bcryptjs": "^3.0.3",
     "bottleneck": "^2.19.5",
     "jsonwebtoken": "^9.0.3",