@spinajs/authn-orm 0.0.0-stage → 3.0.1

package/lib/cjs/secrets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/secrets/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC"}

package/lib/cjs/secrets/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DbSecretStore = void 0;
+var db_secret_store_js_1 = require("./db-secret-store.js");
+Object.defineProperty(exports, "DbSecretStore", { enumerable: true, get: function () { return db_secret_store_js_1.DbSecretStore; } });
+//# sourceMappingURL=index.js.map

package/lib/cjs/secrets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/secrets/index.ts"],"names":[],"mappings":";;;AAAA,2DAAqD;AAA5C,mHAAA,aAAa,OAAA"}

package/lib/cjs/support/sql.d.ts

@@ -0,0 +1,16 @@
+import { DateTime } from 'luxon';
+export declare const MIN_MS: number;
+export declare const MAX_MS: number;
+/** @internal The instant as a datetime column value, clamped to four-digit years. */
+export declare function instant(ms: number): DateTime;
+/** @internal A hydrated datetime column as a Date; an invalid or missing value is an invalid Date. */
+export declare function dateOf(value: DateTime | null | undefined): Date;
+/** @internal The time of a valid Date within four-digit years; anything else throws `InvalidArgument` naming `label`. */
+export declare function checkedMs(value: unknown, label: string): number;
+/** @internal Hex SHA-256 of the UTF-8 bytes. */
+export declare const sha256hex: (value: string) => string;
+/** @internal A string of at most `max` characters (code points), or `InvalidArgument`; never truncated. */
+export declare function checkedText(value: unknown, max: number, label: string, allowEmpty?: boolean): string;
+/** @internal Cuts to `max` code points, so no surrogate pair is split. */
+export declare function cutText(value: string | undefined | null, max: number): string | null;
+//# sourceMappingURL=sql.d.ts.map

package/lib/cjs/support/sql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.d.ts","sourceRoot":"","sources":["../../../src/support/sql.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAGjC,eAAO,MAAM,MAAM,QAAuB,CAAC;AAC3C,eAAO,MAAM,MAAM,QAA0C,CAAC;AAE9D,qFAAqF;AACrF,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,CAE5C;AAED,sGAAsG;AACtG,wBAAgB,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAE/D;AAED,yHAAyH;AACzH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAM/D;AAED,gDAAgD;AAChD,eAAO,MAAM,SAAS,UAAW,MAAM,KAAG,MAAkE,CAAC;AAE7G,2GAA2G;AAC3G,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,UAAQ,GAAG,MAAM,CAOlG;AAED,0EAA0E;AAC1E,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGpF"}

package/lib/cjs/support/sql.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sha256hex = exports.MAX_MS = exports.MIN_MS = void 0;
+exports.instant = instant;
+exports.dateOf = dateOf;
+exports.checkedMs = checkedMs;
+exports.checkedText = checkedText;
+exports.cutText = cutText;
+const node_crypto_1 = require("node:crypto");
+const exceptions_1 = require("@spinajs/exceptions");
+const util_1 = require("@spinajs/util");
+const luxon_1 = require("luxon");
+// Four-digit years keep the text form of a datetime ordered on sqlite, where the column holds text.
+exports.MIN_MS = Date.UTC(1000, 0, 1);
+exports.MAX_MS = Date.UTC(9999, 11, 31, 23, 59, 59, 999);
+/** @internal The instant as a datetime column value, clamped to four-digit years. */
+function instant(ms) {
+    return luxon_1.DateTime.fromMillis(Math.min(Math.max(ms, exports.MIN_MS), exports.MAX_MS), { zone: 'utc' });
+}
+/** @internal A hydrated datetime column as a Date; an invalid or missing value is an invalid Date. */
+function dateOf(value) {
+    return value ? value.toJSDate() : new Date(NaN);
+}
+/** @internal The time of a valid Date within four-digit years; anything else throws `InvalidArgument` naming `label`. */
+function checkedMs(value, label) {
+    const ms = value instanceof Date ? value.getTime() : NaN;
+    if (!Number.isFinite(ms) || ms < exports.MIN_MS || ms > exports.MAX_MS) {
+        throw new exceptions_1.InvalidArgument(`${label} must be a valid Date`);
+    }
+    return ms;
+}
+/** @internal Hex SHA-256 of the UTF-8 bytes. */
+const sha256hex = (value) => (0, node_crypto_1.createHash)('sha256').update(value, 'utf8').digest('hex');
+exports.sha256hex = sha256hex;
+/** @internal A string of at most `max` characters (code points), or `InvalidArgument`; never truncated. */
+function checkedText(value, max, label, allowEmpty = false) {
+    const text = (0, util_1._check_arg)((0, util_1._is_string)(...(allowEmpty ? [] : [(0, util_1._non_empty)()])))(value, label);
+    const length = [...text].length;
+    if (length > max) {
+        throw new exceptions_1.InvalidArgument(`${label} is ${length} characters long, the column holds ${max}`);
+    }
+    return text;
+}
+/** @internal Cuts to `max` code points, so no surrogate pair is split. */
+function cutText(value, max) {
+    if (value === undefined || value === null)
+        return null;
+    return (0, util_1.truncate)(String(value), max, '', { codePoints: true });
+}
+//# sourceMappingURL=sql.js.map

package/lib/cjs/support/sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.js","sourceRoot":"","sources":["../../../src/support/sql.ts"],"names":[],"mappings":";;;;;;;;AAAA,6CAAyC;AAEzC,oDAAsD;AACtD,wCAA6E;AAC7E,iCAAiC;AAEjC,oGAAoG;AACvF,QAAA,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,QAAA,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AAE9D,qFAAqF;AACrF,iBAAwB,EAAU;IAChC,OAAO,gBAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAA,MAAM,CAAC,EAAE,QAAA,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,sGAAsG;AACtG,gBAAuB,KAAkC;IACvD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,yHAAyH;AACzH,mBAA0B,KAAc,EAAE,KAAa;IACrD,MAAM,EAAE,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,QAAA,MAAM,IAAI,EAAE,GAAG,QAAA,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,4BAAe,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,gDAAgD;AACzC,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAhG,QAAA,SAAS,GAAT,SAAS,CAAuF;AAE7G,2GAA2G;AAC3G,qBAA4B,KAAc,EAAE,GAAW,EAAE,KAAa,EAAE,UAAU,GAAG,KAAK;IACxF,MAAM,IAAI,GAAW,IAAA,iBAAU,EAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAU,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,4BAAe,CAAC,GAAG,KAAK,OAAO,MAAM,sCAAsC,GAAG,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,iBAAwB,KAAgC,EAAE,GAAW;IACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,IAAA,eAAQ,EAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC"}

package/lib/cjs/support/values.d.ts

@@ -0,0 +1,7 @@
+/** @internal What a write passes for a model's columns: a nullable column takes `null`, which its property type leaves out. */
+export type ColumnValues<M> = {
+    [K in keyof M]?: M[K] | null;
+};
+/** @internal `values` typed as the ORM's write methods take them. */
+export declare function columnValues<M>(values: ColumnValues<M>): Partial<M>;
+//# sourceMappingURL=values.d.ts.map

package/lib/cjs/support/values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"values.d.ts","sourceRoot":"","sources":["../../../src/support/values.ts"],"names":[],"mappings":"AAAA,+HAA+H;AAC/H,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI;KAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;CAAE,CAAC;AAE/D,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEnE"}

package/lib/cjs/support/values.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.columnValues = columnValues;
+/** @internal `values` typed as the ORM's write methods take them. */
+function columnValues(values) {
+    return values;
+}
+//# sourceMappingURL=values.js.map

package/lib/cjs/support/values.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"values.js","sourceRoot":"","sources":["../../../src/support/values.ts"],"names":[],"mappings":";;;AAGA,qEAAqE;AACrE,sBAAgC,MAAuB;IACrD,OAAO,MAAoB,CAAC;AAC9B,CAAC"}

package/lib/cjs/throttle/db-throttle-store.d.ts

@@ -0,0 +1,79 @@
+import type { KeyedBackoffVerdict, ThrottleGate, ThrottleLower, ThrottleStore } from '@spinajs/util';
+import type { DateTime } from 'luxon';
+/** @internal "now" and the staleness cutoff of one call. */
+export interface StoreTimes {
+    readonly nowMs: number;
+    readonly now: DateTime;
+    readonly cutoff: DateTime;
+}
+/** @internal A live row as stored: its datetimes as read back, so a write can compare against them. */
+export interface ClaimState {
+    readonly attempts: number;
+    readonly last: DateTime;
+    readonly next: DateTime;
+}
+/** @internal What a claim wrote. `prev` is the live row it replaced; without one (insert or stale row) undo deletes the row. */
+export interface ClaimWrite {
+    readonly k: string;
+    readonly attempts: number;
+    readonly last: DateTime;
+    readonly next: DateTime;
+    readonly prev?: ClaimState;
+}
+/** @internal */
+export type Claimed = {
+    readonly ok: true;
+    readonly write: ClaimWrite;
+} | {
+    readonly ok: false;
+    readonly waitMs: number;
+};
+export interface DbThrottleStoreOptions {
+    /** A row idle this long that delays nobody counts as zero and may be purged. */
+    readonly resetAfterMs: number;
+}
+/**
+ * The rows of `DbAuthnThrottle` in `authn_throttle`, shared by every app instance. Each attempt claims its slot on
+ * every gating key with a compare-and-set; a later key that refuses undoes the earlier claims in reverse. No
+ * transactions: the sqlite driver shares one handle, so a transaction would take in the statements of concurrent
+ * attempts. `succeed` is several compare-and-set statements too, where a lost race only throttles more.
+ *
+ * Every time decision compares in SQL against the `nowMs` passed in, never SQL `now()`, and never against a datetime
+ * read back (lane note D10). Flows need no column: the ids already differ per flow.
+ */
+export declare class DbThrottleStore implements ThrottleStore {
+    private readonly resetAfterMs;
+    private readonly purgeDue;
+    constructor(options: DbThrottleStoreOptions);
+    attempt(_flow: string, gates: readonly ThrottleGate[], counted: readonly string[], nowMs: number): Promise<KeyedBackoffVerdict>;
+    peek(_flow: string, gates: readonly ThrottleGate[], nowMs: number): Promise<KeyedBackoffVerdict>;
+    /** Lowers by the largest count it consumed: rows carry no run, so a `by` row older than its target is taken off too. */
+    succeed(_flow: string, lower: readonly ThrottleLower[], clear: readonly string[], nowMs: number): Promise<void>;
+    /** Deletes up to one batch of stale rows (idle for resetAfterMs and delaying nobody); returns how many went. */
+    purge(nowMs: number): Promise<number>;
+    /**
+     * @internal Claims one gating key: counts attempt n + 1 and sets its next allowed time, or reports the wait. A miss
+     * re-reads this key and the keys still to claim (`rest`): an attempt that will be refused further on stops here,
+     * before it adds counts that its undo may no longer take back.
+     */
+    protected claimKey(k: string, delay: (n: number) => number, state: ClaimState | undefined, t: StoreTimes, rest?: readonly string[]): Promise<Claimed>;
+    /** @internal CAS on a live row that delays nobody now. */
+    protected writeLive(w: ClaimWrite, n: number, t: StoreTimes): Promise<boolean>;
+    /** @internal Inserts the first count; a row already there may be taken over only when stale (it counts as zero). */
+    protected insertOrTakeStale(w: ClaimWrite, t: StoreTimes): Promise<boolean>;
+    /** @internal Puts back what each claim replaced, only where the row still holds exactly what it wrote; a miss keeps the count. */
+    protected undo(claims: readonly ClaimWrite[], t: StoreTimes): Promise<void>;
+    /** A counted row gates nothing, so a lost race here only leaves less to subtract on success (more throttling). */
+    private countBook;
+    /** Deletes a live counted row; the caller that deleted it gets its count. */
+    private takeBook;
+    private subtract;
+    /** The longest wait any of `ks` imposes now, 0 when none delays. */
+    private blockedWait;
+    /** Rows of `ks` that are not stale; stale and missing rows both count as zero. */
+    private readLive;
+    private isLive;
+    private refuse;
+    private times;
+}
+//# sourceMappingURL=db-throttle-store.d.ts.map

package/lib/cjs/throttle/db-throttle-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-throttle-store.d.ts","sourceRoot":"","sources":["../../../src/throttle/db-throttle-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACrG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAWtC,4DAA4D;AAC5D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;CAC3B;AAED,uGAAuG;AACvG,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED,gIAAgI;AAChI,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;CAC5B;AAED,gBAAgB;AAChB,MAAM,MAAM,OAAO,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1H,MAAM,WAAW,sBAAsB;IACrC,gFAAgF;IAChF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,qBAAa,eAAgB,YAAW,aAAa;IACnD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IAEtD,YAAY,OAAO,EAAE,sBAAsB,EAE1C;IAEY,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,YAAY,EAAE,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6B3I;IAEY,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAK5G;IAED,wHAAwH;IAC3G,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,aAAa,EAAE,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB3H;IAED,gHAAgH;IACnG,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAajD;IAED;;;;OAIG;IACH,UAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,GAAE,SAAS,MAAM,EAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAY9J;IAED,0DAA0D;IAC1D,UAAgB,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAGnF;IAED,oHAAoH;IACpH,UAAgB,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAShF;IAED,kIAAkI;IAClI,UAAgB,IAAI,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhF;IAED,kHAAkH;YACpG,SAAS;IAQvB,6EAA6E;YAC/D,QAAQ;YAUR,QAAQ;IAkBtB,oEAAoE;YACtD,WAAW;IAczB,kFAAkF;YACpE,QAAQ;IActB,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,KAAK;CAGd"}

package/lib/cjs/throttle/db-throttle-store.js

@@ -0,0 +1,231 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DbThrottleStore = void 0;
+const contracts_1 = require("@spinajs/authn/contracts");
+const orm_1 = require("@spinajs/orm");
+const AuthnThrottle_js_1 = require("../models/AuthnThrottle.js");
+const sql_js_1 = require("../support/sql.js");
+/** Each miss means another attempt won that key, so this bounds the parallel attempts one call waits behind. */
+const MAX_TRIES = 64;
+const PURGE_EVERY = 64;
+const PURGE_BATCH = 500;
+const FAIL_CLOSED_MS = 1000;
+/**
+ * The rows of `DbAuthnThrottle` in `authn_throttle`, shared by every app instance. Each attempt claims its slot on
+ * every gating key with a compare-and-set; a later key that refuses undoes the earlier claims in reverse. No
+ * transactions: the sqlite driver shares one handle, so a transaction would take in the statements of concurrent
+ * attempts. `succeed` is several compare-and-set statements too, where a lost race only throttles more.
+ *
+ * Every time decision compares in SQL against the `nowMs` passed in, never SQL `now()`, and never against a datetime
+ * read back (lane note D10). Flows need no column: the ids already differ per flow.
+ */
+class DbThrottleStore {
+    constructor(options) {
+        this.purgeDue = (0, orm_1.everyNthCall)(PURGE_EVERY);
+        this.resetAfterMs = options.resetAfterMs;
+    }
+    async attempt(_flow, gates, counted, nowMs) {
+        await (0, orm_1.ormReady)();
+        if (this.purgeDue()) {
+            await this.purge(nowMs);
+        }
+        const t = this.times(nowMs);
+        const backoff = new Map(gates.map((g) => [g.id, g.backoff]));
+        const order = [...backoff.keys()].sort();
+        if (order.length > 0) {
+            const waitMs = await this.blockedWait(order, t);
+            if (waitMs > 0)
+                return this.refuse(waitMs);
+        }
+        const live = await this.readLive([...order, ...counted], t);
+        const claims = [];
+        for (const [i, k] of order.entries()) {
+            const p = backoff.get(k);
+            const r = await this.claimKey(k, (n) => (0, contracts_1.backoffDelayMs)(p, n), live.get(k), t, order.slice(i + 1));
+            if (!r.ok) {
+                await this.undo(claims, t);
+                return this.refuse(r.waitMs);
+            }
+            claims.push(r.write);
+        }
+        for (const k of counted) {
+            await this.countBook(k, live.get(k), t);
+        }
+        return { allowed: true };
+    }
+    async peek(_flow, gates, nowMs) {
+        if (gates.length === 0)
+            return { allowed: true };
+        await (0, orm_1.ormReady)();
+        const waitMs = await this.blockedWait(gates.map((g) => g.id).sort(), this.times(nowMs));
+        return waitMs > 0 ? this.refuse(waitMs) : { allowed: true };
+    }
+    /** Lowers by the largest count it consumed: rows carry no run, so a `by` row older than its target is taken off too. */
+    async succeed(_flow, lower, clear, nowMs) {
+        await (0, orm_1.ormReady)();
+        const t = this.times(nowMs);
+        const consumed = new Set();
+        for (const { targets, by } of lower) {
+            let spent = 0;
+            for (const k of by) {
+                consumed.add(k);
+                spent = Math.max(spent, await this.takeBook(k, t));
+            }
+            if (spent === 0)
+                continue;
+            for (const { id, backoff } of targets) {
+                await this.subtract(id, backoff, spent, t);
+            }
+        }
+        // A consumed row is not deleted again: a count an attempt added to it since stays for the next success.
+        for (const k of clear) {
+            if (!consumed.has(k))
+                await AuthnThrottle_js_1.AuthnThrottle.destroy().where('k', k);
+        }
+    }
+    /** Deletes up to one batch of stale rows (idle for resetAfterMs and delaying nobody); returns how many went. */
+    async purge(nowMs) {
+        await (0, orm_1.ormReady)();
+        const t = this.times(nowMs);
+        const stale = await AuthnThrottle_js_1.AuthnThrottle.query().columns(['k']).where('last_attempt_at', '<=', t.cutoff).where('next_allowed_at', '<=', t.now).orderBy('k').take(PURGE_BATCH);
+        if (stale.length === 0)
+            return 0;
+        const { RowsAffected } = await AuthnThrottle_js_1.AuthnThrottle.destroy()
+            .whereIn('k', stale.map((r) => r.k))
+            .where('last_attempt_at', '<=', t.cutoff)
+            .where('next_allowed_at', '<=', t.now);
+        return RowsAffected;
+    }
+    /**
+     * @internal Claims one gating key: counts attempt n + 1 and sets its next allowed time, or reports the wait. A miss
+     * re-reads this key and the keys still to claim (`rest`): an attempt that will be refused further on stops here,
+     * before it adds counts that its undo may no longer take back.
+     */
+    async claimKey(k, delay, state, t, rest = []) {
+        for (let i = 0; i < MAX_TRIES; i++) {
+            const attempts = (state?.attempts ?? 0) + 1;
+            const write = { k, attempts, last: t.now, next: (0, sql_js_1.instant)(t.nowMs + delay(attempts)), prev: state };
+            if (state ? await this.writeLive(write, state.attempts, t) : await this.insertOrTakeStale(write, t)) {
+                return { ok: true, write };
+            }
+            const waitMs = await this.blockedWait([k, ...rest], t);
+            if (waitMs > 0)
+                return { ok: false, waitMs };
+            state = (await this.readLive([k], t)).get(k);
+        }
+        return { ok: false, waitMs: FAIL_CLOSED_MS };
+    }
+    /** @internal CAS on a live row that delays nobody now. */
+    async writeLive(w, n, t) {
+        const r = await AuthnThrottle_js_1.AuthnThrottle.update({ attempts: w.attempts, last_attempt_at: w.last, next_allowed_at: w.next, updated_at: t.now }).where('k', w.k).where('attempts', n).where('next_allowed_at', '<=', t.now).where('last_attempt_at', '>', t.cutoff);
+        return r.RowsAffected === 1;
+    }
+    /** @internal Inserts the first count; a row already there may be taken over only when stale (it counts as zero). */
+    async insertOrTakeStale(w, t) {
+        try {
+            await AuthnThrottle_js_1.AuthnThrottle.insert({ k: w.k, attempts: w.attempts, last_attempt_at: w.last, next_allowed_at: w.next, updated_at: t.now });
+            return true;
+        }
+        catch (err) {
+            if (!(err instanceof orm_1.UniqueViolation))
+                throw err;
+        }
+        const r = await AuthnThrottle_js_1.AuthnThrottle.update({ attempts: w.attempts, last_attempt_at: w.last, next_allowed_at: w.next, updated_at: t.now }).where('k', w.k).where('next_allowed_at', '<=', t.now).where('last_attempt_at', '<=', t.cutoff);
+        return r.RowsAffected === 1;
+    }
+    /** @internal Puts back what each claim replaced, only where the row still holds exactly what it wrote; a miss keeps the count. */
+    async undo(claims, t) {
+        for (const w of [...claims].reverse()) {
+            if (w.prev) {
+                await AuthnThrottle_js_1.AuthnThrottle.update({ attempts: w.prev.attempts, last_attempt_at: w.prev.last, next_allowed_at: w.prev.next, updated_at: t.now }).where('k', w.k).where('attempts', w.attempts).where('last_attempt_at', w.last).where('next_allowed_at', w.next);
+            }
+            else {
+                await AuthnThrottle_js_1.AuthnThrottle.destroy().where('k', w.k).where('attempts', w.attempts).where('last_attempt_at', w.last).where('next_allowed_at', w.next);
+            }
+        }
+    }
+    /** A counted row gates nothing, so a lost race here only leaves less to subtract on success (more throttling). */
+    async countBook(k, state, t) {
+        for (let i = 0; i < MAX_TRIES; i++) {
+            const write = { k, attempts: (state?.attempts ?? 0) + 1, last: t.now, next: t.now };
+            if (state ? await this.writeLive(write, state.attempts, t) : await this.insertOrTakeStale(write, t))
+                return;
+            state = (await this.readLive([k], t)).get(k);
+        }
+    }
+    /** Deletes a live counted row; the caller that deleted it gets its count. */
+    async takeBook(k, t) {
+        for (let i = 0; i < MAX_TRIES; i++) {
+            const state = (await this.readLive([k], t)).get(k);
+            if (!state)
+                return 0;
+            const r = await AuthnThrottle_js_1.AuthnThrottle.destroy().where('k', k).where('attempts', state.attempts).where(this.isLive(t));
+            if (r.RowsAffected === 1)
+                return state.attempts;
+        }
+        return 0;
+    }
+    async subtract(k, p, spent, t) {
+        for (let i = 0; i < MAX_TRIES; i++) {
+            const state = (await this.readLive([k], t)).get(k);
+            if (!state)
+                return;
+            const attempts = Math.max(0, state.attempts - spent);
+            let r;
+            if (attempts === 0) {
+                r = await AuthnThrottle_js_1.AuthnThrottle.destroy().where('k', k).where('attempts', state.attempts).where(this.isLive(t));
+            }
+            else {
+                // The schedule runs from the row's last counted attempt.
+                const lastMs = state.last?.toMillis() ?? NaN;
+                const next = Number.isFinite(lastMs) ? (0, sql_js_1.instant)(lastMs + (0, contracts_1.backoffDelayMs)(p, attempts)) : state.next;
+                r = await AuthnThrottle_js_1.AuthnThrottle.update({ attempts, next_allowed_at: next, updated_at: t.now }).where('k', k).where('attempts', state.attempts).where(this.isLive(t));
+            }
+            if (r.RowsAffected === 1)
+                return;
+        }
+    }
+    /** The longest wait any of `ks` imposes now, 0 when none delays. */
+    async blockedWait(ks, t) {
+        const rows = await AuthnThrottle_js_1.AuthnThrottle.query()
+            .columns(['k', 'next_allowed_at'])
+            .whereIn('k', [...ks])
+            .where('next_allowed_at', '>', t.now);
+        let waitMs = 0;
+        for (const r of rows) {
+            const ms = (r.next_allowed_at?.toMillis() ?? NaN) - t.nowMs;
+            // A delaying row whose datetime does not read still delays.
+            waitMs = Math.max(waitMs, Number.isFinite(ms) && ms > 0 ? ms : FAIL_CLOSED_MS);
+        }
+        return waitMs;
+    }
+    /** Rows of `ks` that are not stale; stale and missing rows both count as zero. */
+    async readLive(ks, t) {
+        const out = new Map();
+        if (ks.length === 0)
+            return out;
+        const rows = await AuthnThrottle_js_1.AuthnThrottle.query()
+            .columns(['k', 'attempts', 'last_attempt_at', 'next_allowed_at'])
+            .whereIn('k', [...ks])
+            .where(this.isLive(t));
+        for (const r of rows) {
+            out.set(r.k, { attempts: Number(r.attempts), last: r.last_attempt_at, next: r.next_allowed_at });
+        }
+        return out;
+    }
+    // Stale: idle for resetAfterMs and delaying nobody; a delay longer than that still runs to its end.
+    isLive(t) {
+        return function () {
+            this.where('last_attempt_at', '>', t.cutoff);
+            this.orWhere('next_allowed_at', '>', t.now);
+        };
+    }
+    refuse(waitMs) {
+        return { allowed: false, retryAfterSeconds: Math.max(1, Math.ceil(waitMs / 1000)) };
+    }
+    times(nowMs) {
+        return { nowMs, now: (0, sql_js_1.instant)(nowMs), cutoff: (0, sql_js_1.instant)(nowMs - this.resetAfterMs) };
+    }
+}
+exports.DbThrottleStore = DbThrottleStore;
+//# sourceMappingURL=db-throttle-store.js.map

package/lib/cjs/throttle/db-throttle-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-throttle-store.js","sourceRoot":"","sources":["../../../src/throttle/db-throttle-store.ts"],"names":[],"mappings":";;;AAAA,wDAA0D;AAE1D,sCAAuE;AAKvE,iEAA2D;AAC3D,8CAA4C;AAE5C,gHAAgH;AAChH,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,cAAc,GAAG,IAAI,CAAC;AAiC5B;;;;;;;;GAQG;AACH;IAIE,YAAY,OAA+B;QAF1B,aAAQ,GAAG,IAAA,kBAAY,EAAC,WAAW,CAAC,CAAC;QAGpD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,KAA8B,EAAE,OAA0B,EAAE,KAAa;QAC3G,MAAM,IAAA,cAAQ,GAAE,CAAC;QACjB,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QAED,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChD,IAAI,MAAM,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,0BAAc,EAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAClG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACV,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,KAA8B,EAAE,KAAa;QAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACjD,MAAM,IAAA,cAAQ,GAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACxF,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9D,CAAC;IAED,wHAAwH;IACjH,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,KAA+B,EAAE,KAAwB,EAAE,KAAa;QAC1G,MAAM,IAAA,cAAQ,GAAE,CAAC;QACjB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,KAAK,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,KAAK,EAAE,CAAC;YACpC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAChB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,KAAK,KAAK,CAAC;gBAAE,SAAS;YAC1B,KAAK,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;gBACtC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,wGAAwG;QACxG,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,MAAM,gCAAa,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,gHAAgH;IACzG,KAAK,CAAC,KAAK,CAAC,KAAa;QAC9B,MAAM,IAAA,cAAQ,GAAE,CAAC;QACjB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,gCAAa,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACjC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,gCAAa,CAAC,OAAO,EAAE;aACnD,OAAO,CACN,GAAG,EACH,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CACtB;aACA,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;aACxC,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,QAAQ,CAAC,CAAS,EAAE,KAA4B,EAAE,KAA6B,EAAE,CAAa,EAAE,IAAI,GAAsB,EAAE;QAC1I,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAe,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAA,gBAAO,EAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC9G,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;gBACpG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC7B,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACvD,IAAI,MAAM,GAAG,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC7C,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,0DAA0D;IAChD,KAAK,CAAC,SAAS,CAAC,CAAa,EAAE,CAAS,EAAE,CAAa;QAC/D,MAAM,CAAC,GAAG,MAAM,gCAAa,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACvP,OAAO,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,oHAAoH;IAC1G,KAAK,CAAC,iBAAiB,CAAC,CAAa,EAAE,CAAa;QAC5D,IAAI,CAAC;YACH,MAAM,gCAAa,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAClI,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,qBAAe,CAAC;gBAAE,MAAM,GAAG,CAAC;QACnD,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,gCAAa,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACnO,OAAO,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,kIAAkI;IACxH,KAAK,CAAC,IAAI,CAAC,MAA6B,EAAE,CAAa;QAC/D,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACX,MAAM,gCAAa,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3P,CAAC;iBAAM,CAAC;gBACN,MAAM,gCAAa,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAChJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,kHAAkH;IAC1G,KAAK,CAAC,SAAS,CAAC,CAAS,EAAE,KAA6B,EAAE,CAAa;QAC7E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,KAAK,GAAe,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;YAChG,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;gBAAE,OAAO;YAC5G,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,6EAA6E;IACrE,KAAK,CAAC,QAAQ,CAAC,CAAS,EAAE,CAAa;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACnD,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,CAAC;YACrB,MAAM,CAAC,GAAG,MAAM,gCAAa,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9G,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAClD,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,CAAS,EAAE,CAAgB,EAAE,KAAa,EAAE,CAAa;QAC9E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACnD,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;YACrD,IAAI,CAA2B,CAAC;YAChC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,CAAC,GAAG,MAAM,gCAAa,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1G,CAAC;iBAAM,CAAC;gBACN,yDAAyD;gBACzD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC;gBAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAO,EAAC,MAAM,GAAG,IAAA,0BAAc,EAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBAClG,CAAC,GAAG,MAAM,gCAAa,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/J,CAAC;YACD,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC;gBAAE,OAAO;QACnC,CAAC;IACH,CAAC;IAED,oEAAoE;IAC5D,KAAK,CAAC,WAAW,CAAC,EAAqB,EAAE,CAAa;QAC5D,MAAM,IAAI,GAAG,MAAM,gCAAa,CAAC,KAAK,EAAE;aACrC,OAAO,CAAC,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;aACjC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;aACrB,KAAK,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;YAC5D,4DAA4D;YAC5D,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kFAAkF;IAC1E,KAAK,CAAC,QAAQ,CAAC,EAAqB,EAAE,CAAa;QACzD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC1C,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,gCAAa,CAAC,KAAK,EAAE;aACrC,OAAO,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;aAChE,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;aACrB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,oGAAoG;IAC5F,MAAM,CAAC,CAAa;QAC1B,OAAO;YACL,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,MAAc;QAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC;IAEO,KAAK,CAAC,KAAa;QACzB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAA,gBAAO,EAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAA,gBAAO,EAAC,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;IACpF,CAAC;CACF"}

package/lib/cjs/throttle/db-throttle.d.ts

@@ -0,0 +1,77 @@
+import type { AuthnConfigSource } from '@spinajs/authn/env';
+import { StoreAuthnThrottle } from '@spinajs/authn/store-throttle';
+import type { AuthnContext, ThrottleFlow, ThrottleKey, ThrottleParams } from '@spinajs/authn/contracts';
+import '@spinajs/authn/register-schema';
+import { IContainer } from '@spinajs/di';
+import { Log } from '@spinajs/log';
+import type { ThrottleStore } from '@spinajs/util';
+import { DbThrottleStore } from './db-throttle-store.js';
+import type { DbThrottleStoreOptions } from './db-throttle-store.js';
+export interface DbThrottleOptions {
+    /** Overrides `authn.audit.hashKey.secret`; null: a random key of this process. */
+    readonly hashKey?: string | null;
+}
+/**
+ * Backoff per key, never a lock (A05, A06, H31), in `authn_throttle`, shared by every app instance. The rows, their
+ * compare-and-set claims and the purge are a `DbThrottleStore`.
+ *
+ * Every time decision compares in SQL against values computed in Node (`ctx.now`, or the clock in `succeed`),
+ * never SQL `now()`, and never against a datetime read back (lane note D10).
+ *
+ * Tested on sqlite and postgres. On MySQL and MSSQL the migration's `datetime` keeps whole seconds (MySQL) or
+ * about 3 ms (MSSQL): undo may then miss, which keeps the extra count (more throttling), and a `baseDelayMs`
+ * below one second is not supported there.
+ *
+ * `last_attempt_at` takes the caller's now, not the later of the two: with clocks skewed across instances, an
+ * account-ip row can outlive the ip run it counted in by that skew, and a later success subtracts it from the new run.
+ *
+ * The hash key check (`checkConfiguration`) runs when AuthnService resolves. A process that resolves this throttle
+ * without it (a worker, a CLI command) keys rows with a random key of the process when the key is unset.
+ */
+export declare class DbAuthnThrottle extends StoreAuthnThrottle {
+    private readonly options;
+    protected ConfiguredParams: ThrottleParams;
+    protected ConfiguredHashSecret: string | null | undefined;
+    protected Log: Log;
+    protected Container: IContainer;
+    /** Complete params given to the constructor. */
+    private readonly fixedParams;
+    private loadedParams;
+    private readonly fromConfiguration;
+    private hmacKey;
+    private loading;
+    private rows;
+    /**
+     * DI passes nothing: `authn.throttle` and `authn.audit.hashKey.secret` come from the configuration of the resolving
+     * container on first use (`init`). With `params` nothing is read from the configuration: the hash key is
+     * `options.hashKey`. The rows live on the connection of the `AuthnThrottle` model.
+     */
+    constructor(params?: ThrottleParams, options?: DbThrottleOptions);
+    get params(): ThrottleParams;
+    protected get throttleName(): string;
+    /**
+     * The authn service calls it at boot with its Configuration. Without the hash key this throttle uses (`options.hashKey`
+     * or the `authn.audit.hashKey.secret` it reads) the rows are keyed with a random key of this process, which only a
+     * development or test env of the booting configuration accepts.
+     */
+    checkConfiguration(booting: AuthnConfigSource): Promise<void>;
+    /** Resolves the configuration; the first `attempt`, `peek` or `succeed` and every `purge` call it. */
+    init(): Promise<void>;
+    /** The row key: base64url(HMAC-SHA256(hash key, `flow|kind|value`)); logins and addresses are personal data (SR-19). */
+    rowKey(flow: ThrottleFlow, key: ThrottleKey): string;
+    /** Deletes up to one batch of stale rows (idle for resetAfterSeconds and delaying nobody); returns how many went. */
+    purge(now?: Date): Promise<number>;
+    protected store(): Promise<ThrottleStore>;
+    protected keyId(flow: ThrottleFlow, key: ThrottleKey): string;
+    protected checkKeys(keys: readonly ThrottleKey[]): void;
+    protected nowMs(ctx: AuthnContext, method: string): number;
+    /** Protected seam: override to wrap or replace the store (tests use it to interleave or fail statements). */
+    protected createStore(options: DbThrottleStoreOptions): DbThrottleStore;
+    private dbStore;
+    private snapshotConfigured;
+    /** The key `init` uses: `options.hashKey` when given, else the configured one when there is a configuration. */
+    private hashSecret;
+    private configurationContainer;
+    private load;
+}
+//# sourceMappingURL=db-throttle.d.ts.map

package/lib/cjs/throttle/db-throttle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-throttle.d.ts","sourceRoot":"","sources":["../../../src/throttle/db-throttle.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAExG,OAAO,gCAAgC,CAAC;AACxC,OAAO,EAAyB,UAAU,EAAgC,MAAM,aAAa,CAAC;AAE9F,OAAO,EAAE,GAAG,EAAU,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAKrE,MAAM,WAAW,iBAAiB;IAChC,kFAAkF;IAClF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAEa,eAAgB,SAAQ,kBAAkB;IA0BhB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAxB7D,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC;IAG3C,SAAS,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAG1D,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IAGnB,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC;IAEhC,gDAAgD;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAU;IAC5C,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,OAAO,CAA4B;IAC3C,OAAO,CAAC,IAAI,CAA8B;IAE1C;;;;OAIG;IACH,YAAY,MAAM,CAAC,EAAE,cAAc,EAAmB,OAAO,GAAE,iBAAsB,EASpF;IAED,IAAW,MAAM,IAAI,cAAc,CAGlC;IAED,cAAuB,YAAY,IAAI,MAAM,CAE5C;IAED;;;;OAIG;IACU,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQzE;IAED,sGAAsG;IACzF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAMjC;IAED,wHAAwH;IACjH,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,GAAG,MAAM,CAM1D;IAED,qHAAqH;IACxG,KAAK,CAAC,GAAG,GAAE,IAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAG1D;IAED,SAAS,CAAC,KAAK,IAAI,OAAO,CAAC,aAAa,CAAC,CAExC;IAED,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,GAAG,MAAM,CAE5D;IAGD,UAAmB,SAAS,CAAC,IAAI,EAAE,SAAS,WAAW,EAAE,GAAG,IAAI,CAE/D;IAGD,UAAmB,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAElE;IAED,6GAA6G;IAC7G,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,sBAAsB,GAAG,eAAe,CAEtE;YAEa,OAAO;IAOrB,OAAO,CAAC,kBAAkB;IAO1B,gHAAgH;IAChH,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,sBAAsB;YAKhB,IAAI;CAYnB"}