@sourceregistry/node-webserver 1.4.0 → 1.6.0

package/dist/middlewares/ratelimiter/SlidingWindow.d.ts

@@ -0,0 +1,16 @@
+import { RateLimitStore } from './storage';
+export declare class SlidingWindowStore implements RateLimitStore {
+    private readonly windowMs;
+    private data;
+    private cleanupInterval?;
+    constructor(opts: {
+        windowMs: number;
+    });
+    incr(key: string): Promise<{
+        current: number;
+        reset: number;
+    }>;
+    private startCleanup;
+    stop(): void;
+    resetAll(): Promise<void>;
+}

package/dist/middlewares/ratelimiter/index.d.ts

@@ -1,5 +1,7 @@
 import { RateLimitStore } from './storage';
 import { Middleware, RequestEvent } from '../../types';
+import { MemoryStore } from './InMemory';
+import { SlidingWindowStore } from './SlidingWindow';
 export type Options = {
     /**
      * Window duration in milliseconds
@@ -37,6 +39,9 @@ export type Options = {
         current: number;
         max: number;
         key: string;
+        reset: number;
+        remaining: number;
+        resetTimeMs: number;
     }) => void;
     /**
      * Storage backend
@@ -44,6 +49,16 @@ export type Options = {
      */
     store?: RateLimitStore;
 };
+export { MemoryStore };
+export { SlidingWindowStore };
+/**
+ * Sliding window rate limiter middleware
+ *
+ * More accurate than fixed window as it tracks individual request timestamps.
+ * Uses more memory but avoids the "cliff" effect where all requests at the end
+ * of one window and start of next are counted together.
+ */
+export declare function slidingWindowLimit(options: Options): Middleware;
 /**
  * Fixed window rate limiter middleware
  */

package/dist/middlewares/requestid/index.d.ts

@@ -10,6 +10,13 @@ export interface Options {
      * @default crypto.randomUUID
      */
     generate?: () => string;
+    /**
+     * Enable client request ID handling
+     * When enabled, checks for X-Client-Request-Id header, validates it contains only ASCII characters and is no more than 512 characters,
+     * and uses it if valid. Invalid headers result in a 400 error response.
+     * @default false
+     */
+    clientRequestId?: boolean;
 }
 export declare function assign(options?: Options): Middleware<string, {
     requestId: string;

package/dist/types/server.d.ts

@@ -98,6 +98,7 @@ export declare class WebServer<TServerConfig extends ServerConfig = ServerConfig
     private getTrustedForwardedHeader;
     private isTrustedProxy;
     private normalizeAddress;
+    private isValidIP;
     private parseForwardedHeader;
     private toHeaders;
     private isRequestBodyAllowed;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sourceregistry/node-webserver",
-  "version": "1.4.0",
+  "version": "1.6.0",
   "description": "TypeScript web server for Node.js with web-standard Request and Response APIs",
   "type": "module",
   "main": "./dist/index.cjs.js",