@toa.io/extensions.exposition 1.0.0-alpha.27 → 1.0.0-alpha.271

package/transpiled/directives/io/Throttle.d.ts

@@ -0,0 +1,11 @@
+import { type Declaration, type Sync } from './lib/throttle';
+import type * as http from '../../HTTP';
+import type { Parameter } from '../../RTD';
+import type { Directive } from './Directive';
+export declare class Throttle implements Directive {
+    private readonly quotas;
+    constructor(declaration: Declaration, sync: Sync, route: string);
+    static validate(declaration: unknown): asserts declaration is Declaration;
+    preflight(context: http.Context, parameters: Parameter[]): void;
+    settle(context: http.Context, output: http.OutgoingMessage): void;
+}

package/transpiled/directives/io/Throttle.js

@@ -0,0 +1,49 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Throttle = void 0;
+const HTTP_1 = require("../../HTTP");
+const schemas = __importStar(require("./schemas"));
+const throttle_1 = require("./lib/throttle");
+class Throttle {
+    quotas;
+    constructor(declaration, sync, route) {
+        this.quotas = throttle_1.Quotas.create((0, throttle_1.parse)(declaration), route);
+        sync.register(this.quotas);
+    }
+    static validate(declaration) {
+        schemas.throttle.validate(declaration, 'Incorrect \'io:throttle\' format');
+    }
+    preflight(context, parameters) {
+        const retry = this.quotas.check(context, parameters);
+        if (retry > 0)
+            throw new HTTP_1.TooManyRequests(retry);
+    }
+    settle(context, output) {
+        this.quotas.use(context, output);
+    }
+}
+exports.Throttle = Throttle;
+//# sourceMappingURL=Throttle.js.map

package/transpiled/directives/io/Throttle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Throttle.js","sourceRoot":"","sources":["../../../source/directives/io/Throttle.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,qCAA4C;AAC5C,mDAAoC;AACpC,6CAA2E;AAK3E,MAAa,QAAQ;IACF,MAAM,CAAQ;IAE/B,YAAoB,WAAwB,EAAE,IAAU,EAAE,KAAa;QACrE,IAAI,CAAC,MAAM,GAAG,iBAAM,CAAC,MAAM,CAAC,IAAA,gBAAK,EAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAA;QAEtD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC5B,CAAC;IAEM,MAAM,CAAC,QAAQ,CAAE,WAAoB;QAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAA;IAC5E,CAAC;IAEM,SAAS,CAAE,OAAqB,EAAE,UAAuB;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QAEpD,IAAI,KAAK,GAAG,CAAC;YACX,MAAM,IAAI,sBAAe,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC;IAEM,MAAM,CAAE,OAAqB,EAAE,MAA4B;QAChE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;CACF;AAvBD,4BAuBC"}

package/transpiled/directives/io/lib/throttle/Configuration.d.ts

@@ -0,0 +1,26 @@
+export interface Configuration {
+    key: KeyComponent[];
+    condition?: KeyCondition[];
+    requests: number;
+    interval: number;
+}
+interface Rule<T, K = unknown> {
+    method: T;
+    options?: K;
+}
+export type KeyComponentMethod = 'ip' | 'path' | 'route' | 'identity' | 'segment';
+export type KeyConditionMethod = 'status';
+export type KeyComponent = Rule<KeyComponentMethod>;
+export type KeyCondition = Rule<KeyConditionMethod>;
+/** A bare component, or the one that takes an argument. */
+type KeyEntry = KeyComponentMethod | {
+    segment: string;
+};
+type KeyDeclaration = KeyEntry | KeyEntry[];
+type ConditionDeclaration = Record<KeyConditionMethod, unknown> | Array<Record<KeyConditionMethod, unknown>>;
+export interface Declaration extends Omit<Configuration, 'key' | 'condition'> {
+    key: KeyDeclaration;
+    condition?: ConditionDeclaration;
+}
+export declare function parse(declaration: Declaration): Configuration;
+export {};

package/transpiled/directives/io/lib/throttle/Configuration.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parse = void 0;
+function parse(declaration) {
+    const { key, condition, requests, interval } = declaration;
+    return {
+        key: mapKey(key),
+        condition: mapCondition(condition),
+        requests,
+        interval: interval * 1000
+    };
+}
+exports.parse = parse;
+function mapKey(declaration) {
+    const entries = Array.isArray(declaration) ? declaration : [declaration];
+    // a bare `path`, or `segment: id` for the ones that take an argument
+    return entries.flatMap((entry) => typeof entry === 'string'
+        ? [{ method: entry }]
+        : Object.entries(entry).map(([method, options]) => ({ method: method, options })));
+}
+function mapCondition(declaration) {
+    if (declaration === undefined)
+        return;
+    // reduce to a single object, then map entries to rules
+    const conditions = Array.isArray(declaration) ? declaration : [declaration];
+    const single = conditions.reduce((acc, condition) => ({ ...acc, ...condition }), {});
+    return Object.entries(single).map(([method, options]) => ({ method, options }));
+}
+//# sourceMappingURL=Configuration.js.map

package/transpiled/directives/io/lib/throttle/Configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Configuration.js","sourceRoot":"","sources":["../../../../../source/directives/io/lib/throttle/Configuration.ts"],"names":[],"mappings":";;;AA+BA,SAAgB,KAAK,CAAE,WAAwB;IAC7C,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAA;IAE1D,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;QAChB,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;QAClC,QAAQ;QACR,QAAQ,EAAE,QAAQ,GAAG,IAAI;KAC1B,CAAA;AACH,CAAC;AATD,sBASC;AAED,SAAS,MAAM,CAAE,WAA2B;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAExE,qEAAqE;IACrE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAkB,EAAE,CAC/C,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACrB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAChD,CAAC,EAAE,MAAM,EAAE,MAA4B,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;AAC7D,CAAC;AAED,SAAS,YAAY,CAAE,WAAkC;IACvD,IAAI,WAAW,KAAK,SAAS;QAC3B,OAAM;IAER,uDAAuD;IACvD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;IAEpF,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAmB,CAAA;AACnG,CAAC"}

package/transpiled/directives/io/lib/throttle/Keys.d.ts

@@ -0,0 +1,13 @@
+import { type Component } from './components';
+import { type Condition } from './conditions';
+import type { KeyComponent, KeyCondition } from './Configuration';
+import type { Parameter } from '../../../../RTD';
+import type { Input as Context, Output } from '../../../../io';
+export declare class Keys {
+    private readonly components;
+    private readonly conditions?;
+    constructor(components: Component[], conditions?: Condition[]);
+    static create(componentRules: KeyComponent[], conditionRules?: KeyCondition[], route?: string): Keys;
+    get(context: Context, parameters?: Parameter[]): string;
+    matches(input: Context, output: Output): boolean;
+}

package/transpiled/directives/io/lib/throttle/Keys.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Keys = void 0;
+const node_crypto_1 = require("node:crypto");
+const components_1 = require("./components");
+const conditions_1 = require("./conditions");
+const NONE = [];
+class Keys {
+    components;
+    conditions;
+    constructor(components, conditions) {
+        this.components = components;
+        this.conditions = conditions;
+    }
+    static create(componentRules, conditionRules, route = '') {
+        const components = componentRules.map((rule) => new components_1.Components[rule.method](rule.options, route));
+        const conditions = conditionRules?.map((rule) => new conditions_1.Conditions[rule.method](rule.options));
+        return new this(components, conditions);
+    }
+    get(context, parameters = NONE) {
+        const hash = (0, node_crypto_1.createHash)('sha256');
+        for (const component of this.components)
+            hash.update(component.get(context, parameters));
+        return hash.digest('hex');
+    }
+    matches(input, output) {
+        return this.conditions?.some((condition) => !condition.match(input, output)) !== true;
+    }
+}
+exports.Keys = Keys;
+//# sourceMappingURL=Keys.js.map

package/transpiled/directives/io/lib/throttle/Keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Keys.js","sourceRoot":"","sources":["../../../../../source/directives/io/lib/throttle/Keys.ts"],"names":[],"mappings":";;;AAAA,6CAAwC;AACxC,6CAAyD;AACzD,6CAAyD;AAKzD,MAAM,IAAI,GAAgB,EAAE,CAAA;AAE5B,MAAa,IAAI;IACE,UAAU,CAAa;IACvB,UAAU,CAAc;IAEzC,YAAoB,UAAuB,EAAE,UAAwB;QACnE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;IAC9B,CAAC;IAEM,MAAM,CAAC,MAAM,CAAE,cAA8B,EAAE,cAA+B,EACnF,QAAgB,EAAE;QAClB,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC7C,IAAI,uBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QAEnD,MAAM,UAAU,GAAG,cAAc,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,uBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QAE3F,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;IACzC,CAAC;IAEM,GAAG,CAAE,OAAgB,EAAE,aAA0B,IAAI;QAC1D,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAA;QAEjC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU;YACrC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAA;QAEjD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC;IAEM,OAAO,CAAE,KAAc,EAAE,MAAc;QAC5C,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,IAAI,CAAA;IACvF,CAAC;CACF;AA/BD,oBA+BC"}

package/transpiled/directives/io/lib/throttle/Quotas.d.ts

@@ -0,0 +1,69 @@
+import { Keys } from './Keys';
+import type { Batch } from './Sync';
+import type { Configuration } from './Configuration';
+import type { Parameter } from '../../../../RTD';
+import type { Input as Context, Output } from '../../../../io';
+/**
+ * A quota per key, metered by GCRA, decided in this process and shared with the others.
+ *
+ * The state of a key is one theoretical arrival time: the moment the key would be back
+ * at zero if nothing more arrived. An admitted request pushes it `emission` further out,
+ * time drags it back, and a request is admitted while it stays within `capacity` of now.
+ * So `requests` is what a key may spend at once, and `requests / interval` what it earns
+ * back — no window to burst across the edge of, and no lockout to time out of.
+ *
+ * Deciding needs nothing but the local map, which is what keeps the request path free of
+ * I/O. What the other gateways have spent arrives on {@link Sync}'s tick, as a debt in
+ * milliseconds — a duration, so it carries across processes without their clocks having
+ * to agree, and additive, which is what lets each process report only its own increments.
+ */
+export declare class Quotas {
+    /** How often the debt is worth reconciling with the other gateways, in milliseconds. */
+    readonly period: number;
+    /** Milliseconds of debt an admitted request adds, `interval / requests`. */
+    private readonly emission;
+    /** Debt a key may carry before it is refused, `interval` — a burst of `requests`. */
+    private readonly capacity;
+    private readonly keys;
+    private readonly prefix;
+    private readonly conditional;
+    private readonly entries;
+    /**
+     * The key computed at preflight, for settle to charge against.
+     *
+     * `segment` reads the route parameters, which settle is not given, and `identity`
+     * can be refreshed between the two — so recomputing there would key a request
+     * differently than it was checked, and throttling would quietly stop working.
+     */
+    private readonly keyed;
+    constructor(options: Options);
+    static create(configuration: Configuration, route?: string): Quotas;
+    /**
+     * Seconds to wait before the request would be admitted, or zero when it is.
+     *
+     * Charges here when nothing conditions the count, so that the request is metered by
+     * the same call that admits it; otherwise only the response can tell whether it counts,
+     * and {@link use} charges once it can.
+     */
+    check(context: Context, parameters: Parameter[]): number;
+    /** Charges what the condition accepts, once the response can be matched against it. */
+    use(input: Context, output: Output): void;
+    /**
+     * Adds what is worth reporting to the batch, and drops what has gone quiet.
+     *
+     * The debt is not cleared here but in {@link settled}, so a tick that fails to reach
+     * Redis leaves it to be reported by the next one instead of losing it.
+     */
+    flush(now: number, batch: Batch[]): void;
+    /** Takes the group's debt back, and clears what this process contributed to it. */
+    settled(reported: Batch, debt: number, now: number): void;
+    name(key: string): string;
+    private charge;
+}
+interface Options {
+    keys: Keys;
+    requests: number;
+    interval: number;
+    conditional: boolean;
+}
+export {};

package/transpiled/directives/io/lib/throttle/Quotas.js

@@ -0,0 +1,138 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Quotas = void 0;
+const Keys_1 = require("./Keys");
+/**
+ * A quota per key, metered by GCRA, decided in this process and shared with the others.
+ *
+ * The state of a key is one theoretical arrival time: the moment the key would be back
+ * at zero if nothing more arrived. An admitted request pushes it `emission` further out,
+ * time drags it back, and a request is admitted while it stays within `capacity` of now.
+ * So `requests` is what a key may spend at once, and `requests / interval` what it earns
+ * back — no window to burst across the edge of, and no lockout to time out of.
+ *
+ * Deciding needs nothing but the local map, which is what keeps the request path free of
+ * I/O. What the other gateways have spent arrives on {@link Sync}'s tick, as a debt in
+ * milliseconds — a duration, so it carries across processes without their clocks having
+ * to agree, and additive, which is what lets each process report only its own increments.
+ */
+class Quotas {
+    /** How often the debt is worth reconciling with the other gateways, in milliseconds. */
+    period;
+    /** Milliseconds of debt an admitted request adds, `interval / requests`. */
+    emission;
+    /** Debt a key may carry before it is refused, `interval` — a burst of `requests`. */
+    capacity;
+    keys;
+    prefix;
+    conditional;
+    entries = new Map();
+    /**
+     * The key computed at preflight, for settle to charge against.
+     *
+     * `segment` reads the route parameters, which settle is not given, and `identity`
+     * can be refreshed between the two — so recomputing there would key a request
+     * differently than it was checked, and throttling would quietly stop working.
+     */
+    keyed = new WeakMap();
+    constructor(options) {
+        this.keys = options.keys;
+        this.conditional = options.conditional;
+        this.emission = options.interval / options.requests;
+        this.capacity = options.interval;
+        this.period = period(options.interval);
+        // a key means one budget, so quotas that do not share one must not share a key
+        this.prefix = `t:${options.requests}:${options.interval}:`;
+    }
+    static create(configuration, route = '') {
+        const { requests, interval, condition } = configuration;
+        const keys = Keys_1.Keys.create(configuration.key, condition, route);
+        return new this({ keys, requests, interval, conditional: condition !== undefined });
+    }
+    /**
+     * Seconds to wait before the request would be admitted, or zero when it is.
+     *
+     * Charges here when nothing conditions the count, so that the request is metered by
+     * the same call that admits it; otherwise only the response can tell whether it counts,
+     * and {@link use} charges once it can.
+     */
+    check(context, parameters) {
+        const key = this.keys.get(context, parameters);
+        this.keyed.set(context, key);
+        const now = Date.now();
+        const entry = this.entries.get(key);
+        const tat = Math.max(entry?.tat ?? now, now);
+        const admit = tat + this.emission - this.capacity;
+        if (admit > now)
+            return Math.ceil((admit - now) / 1000);
+        if (!this.conditional)
+            this.charge(key, entry, tat);
+        return 0;
+    }
+    /** Charges what the condition accepts, once the response can be matched against it. */
+    use(input, output) {
+        if (!this.conditional || !this.keys.matches(input, output))
+            return;
+        // preflight always runs first, and a request it refuses never reaches settle
+        const key = this.keyed.get(input) ?? this.keys.get(input);
+        const now = Date.now();
+        const entry = this.entries.get(key);
+        const tat = Math.max(entry?.tat ?? now, now);
+        this.charge(key, entry, tat);
+    }
+    /**
+     * Adds what is worth reporting to the batch, and drops what has gone quiet.
+     *
+     * The debt is not cleared here but in {@link settled}, so a tick that fails to reach
+     * Redis leaves it to be reported by the next one instead of losing it.
+     */
+    flush(now, batch) {
+        for (const [key, entry] of this.entries) {
+            const delta = Math.round(entry.debt);
+            if (delta > 0) {
+                batch.push({ quotas: this, key, delta });
+                continue;
+            }
+            // out of debt and with nothing left to report, a key says no more than an absent one
+            if (entry.tat <= now)
+                this.entries.delete(key);
+        }
+    }
+    /** Takes the group's debt back, and clears what this process contributed to it. */
+    settled(reported, debt, now) {
+        const entry = this.entries.get(reported.key);
+        if (entry === undefined) {
+            if (debt > 0)
+                this.entries.set(reported.key, { tat: now + debt, debt: 0 });
+            return;
+        }
+        entry.debt -= reported.delta;
+        // the group has spent at least what this process has, so its debt is the one to keep
+        entry.tat = Math.max(entry.tat, now + debt);
+    }
+    name(key) {
+        return this.prefix + key;
+    }
+    charge(key, entry, tat) {
+        if (entry === undefined)
+            this.entries.set(key, { tat: tat + this.emission, debt: this.emission });
+        else {
+            entry.tat = tat + this.emission;
+            entry.debt += this.emission;
+        }
+    }
+}
+exports.Quotas = Quotas;
+/**
+ * How often to reconcile, in milliseconds.
+ *
+ * Reconciling is what bounds the overshoot — between two ticks a gateway is going on
+ * what it alone has spent — so it is worth doing an order of magnitude more often than
+ * the interval, within reason on either end.
+ */
+function period(interval) {
+    return Math.min(Math.max(interval / 10, MIN_PERIOD), MAX_PERIOD);
+}
+const MIN_PERIOD = 250;
+const MAX_PERIOD = 2000;
+//# sourceMappingURL=Quotas.js.map

package/transpiled/directives/io/lib/throttle/Quotas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Quotas.js","sourceRoot":"","sources":["../../../../../source/directives/io/lib/throttle/Quotas.ts"],"names":[],"mappings":";;;AAAA,iCAA6B;AAM7B;;;;;;;;;;;;;GAaG;AACH,MAAa,MAAM;IACjB,wFAAwF;IACxE,MAAM,CAAQ;IAE9B,4EAA4E;IAC3D,QAAQ,CAAQ;IAEjC,qFAAqF;IACpE,QAAQ,CAAQ;IAEhB,IAAI,CAAM;IACV,MAAM,CAAQ;IACd,WAAW,CAAS;IACpB,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAA;IAEnD;;;;;;OAMG;IACc,KAAK,GAAG,IAAI,OAAO,EAAmB,CAAA;IAEvD,YAAoB,OAAgB;QAClC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;QACxB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QACtC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QACnD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAEtC,+EAA+E;QAC/E,IAAI,CAAC,MAAM,GAAG,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAA;IAC5D,CAAC;IAEM,MAAM,CAAC,MAAM,CAAE,aAA4B,EAAE,QAAgB,EAAE;QACpE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,aAAa,CAAA;QACvD,MAAM,IAAI,GAAG,WAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;QAE7D,OAAO,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC,CAAA;IACrF,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAE,OAAgB,EAAE,UAAuB;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QAE9C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAEjD,IAAI,KAAK,GAAG,GAAG;YACb,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;QAExC,IAAI,CAAC,IAAI,CAAC,WAAW;YACnB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;QAE9B,OAAO,CAAC,CAAA;IACV,CAAC;IAED,uFAAuF;IAChF,GAAG,CAAE,KAAc,EAAE,MAAc;QACxC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;YACxD,OAAM;QAER,6EAA6E;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,CAAC,CAAA;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAE,GAAW,EAAE,KAAc;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAEpC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;gBAExC,SAAQ;YACV,CAAC;YAED,qFAAqF;YACrF,IAAI,KAAK,CAAC,GAAG,IAAI,GAAG;gBAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC5B,CAAC;IACH,CAAC;IAED,mFAAmF;IAC5E,OAAO,CAAE,QAAe,EAAE,IAAY,EAAE,GAAW;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QAE5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,IAAI,GAAG,CAAC;gBACV,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;YAE9D,OAAM;QACR,CAAC;QAED,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAA;QAE5B,qFAAqF;QACrF,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,CAAA;IAC7C,CAAC;IAEM,IAAI,CAAE,GAAW;QACtB,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAA;IAC1B,CAAC;IAEO,MAAM,CAAE,GAAW,EAAE,KAAwB,EAAE,GAAW;QAChE,IAAI,KAAK,KAAK,SAAS;YACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;aACrE,CAAC;YACJ,KAAK,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAA;YAC/B,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAA;QAC7B,CAAC;IACH,CAAC;CACF;AArID,wBAqIC;AAED;;;;;;GAMG;AACH,SAAS,MAAM,CAAE,QAAgB;IAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,EAAE,EAAE,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,GAAG,GAAG,CAAA;AACtB,MAAM,UAAU,GAAG,IAAI,CAAA"}

package/transpiled/directives/io/lib/throttle/Sync.d.ts

@@ -0,0 +1,30 @@
+import type { Quotas } from './Quotas';
+import type { Remote } from '@toa.io/core';
+/**
+ * Reconciles every quota of the process with the other gateways, on one tick.
+ *
+ * Nothing here is on the request path. Each tick takes what the quotas have spent since
+ * the last one and sends all of it as a single call, so the cost of staying in step is
+ * one round trip a tick — not one per key, and not one per directive. What comes back is
+ * the debt the whole group has reached, which the quotas then decide on locally.
+ */
+export declare class Sync {
+    private readonly stash;
+    private readonly quotas;
+    private remote;
+    private timer;
+    private period;
+    /** Ticks do not overlap: a slow round trip delays reconciling, it does not double it. */
+    private reconciling;
+    constructor(stash: Promise<Remote>);
+    register(quotas: Quotas): void;
+    dispose(): void;
+    private start;
+    private readonly tick;
+    private reconcile;
+}
+export interface Batch {
+    quotas: Quotas;
+    key: string;
+    delta: number;
+}

package/transpiled/directives/io/lib/throttle/Sync.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Sync = void 0;
+const openspan_1 = require("openspan");
+/**
+ * Reconciles every quota of the process with the other gateways, on one tick.
+ *
+ * Nothing here is on the request path. Each tick takes what the quotas have spent since
+ * the last one and sends all of it as a single call, so the cost of staying in step is
+ * one round trip a tick — not one per key, and not one per directive. What comes back is
+ * the debt the whole group has reached, which the quotas then decide on locally.
+ */
+class Sync {
+    stash;
+    quotas = [];
+    remote = null;
+    timer = null;
+    period = Infinity;
+    /** Ticks do not overlap: a slow round trip delays reconciling, it does not double it. */
+    reconciling = false;
+    constructor(stash) {
+        this.stash = stash;
+    }
+    register(quotas) {
+        this.quotas.push(quotas);
+        // the shortest interval sets the pace, and reconciling the others more often than
+        // they asked for only makes them more accurate — an idle quota contributes nothing
+        if (quotas.period < this.period) {
+            this.period = quotas.period;
+            this.start();
+        }
+    }
+    dispose() {
+        if (this.timer !== null) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+    start() {
+        this.dispose();
+        this.timer = setInterval(this.tick, this.period);
+        this.timer.unref();
+    }
+    tick = () => {
+        if (this.reconciling)
+            return;
+        const now = Date.now();
+        const batch = [];
+        for (const quotas of this.quotas)
+            quotas.flush(now, batch);
+        if (batch.length === 0)
+            return;
+        this.reconciling = true;
+        void this.reconcile(batch).finally(() => {
+            this.reconciling = false;
+        });
+    };
+    async reconcile(batch) {
+        try {
+            this.remote ??= await this.stash;
+            const keys = batch.map((entry) => entry.quotas.name(entry.key));
+            const deltas = batch.map((entry) => entry.delta);
+            const debts = await this.remote.invoke('meter', { input: { keys, deltas } });
+            const now = Date.now();
+            for (let i = 0; i < batch.length; i++)
+                batch[i].quotas.settled(batch[i], debts[i], now);
+        }
+        catch (error) {
+            // what was not reported stays to be reported by the next tick, and until then
+            // this gateway keeps throttling on what it alone has seen, and keeps serving
+            openspan_1.console.warn('Throttling could not reconcile with the group', error);
+        }
+    }
+}
+exports.Sync = Sync;
+//# sourceMappingURL=Sync.js.map

package/transpiled/directives/io/lib/throttle/Sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sync.js","sourceRoot":"","sources":["../../../../../source/directives/io/lib/throttle/Sync.ts"],"names":[],"mappings":";;;AAAA,uCAAkC;AAIlC;;;;;;;GAOG;AACH,MAAa,IAAI;IACE,KAAK,CAAiB;IACtB,MAAM,GAAa,EAAE,CAAA;IAC9B,MAAM,GAAkB,IAAI,CAAA;IAC5B,KAAK,GAA0B,IAAI,CAAA;IACnC,MAAM,GAAG,QAAQ,CAAA;IAEzB,yFAAyF;IACjF,WAAW,GAAG,KAAK,CAAA;IAE3B,YAAoB,KAAsB;QACxC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,QAAQ,CAAE,MAAc;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAExB,kFAAkF;QAClF,mFAAmF;QACnF,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAE3B,IAAI,CAAC,KAAK,EAAE,CAAA;QACd,CAAC;IACH,CAAC;IAEM,OAAO;QACZ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAEzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACnB,CAAC;IACH,CAAC;IAEO,KAAK;QACX,IAAI,CAAC,OAAO,EAAE,CAAA;QAEd,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAEhD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IAEgB,IAAI,GAAG,GAAS,EAAE;QACjC,IAAI,IAAI,CAAC,WAAW;YAClB,OAAM;QAER,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,KAAK,GAAY,EAAE,CAAA;QAEzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM;YAC9B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAE1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YACpB,OAAM;QAER,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QAEvB,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACtC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA;QAC1B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IAEO,KAAK,CAAC,SAAS,CAAE,KAAc;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,KAAK,CAAA;YAEhC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;YAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAEhD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAW,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;YACtF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAEtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;gBACnC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,8EAA8E;YAC9E,6EAA6E;YAC7E,kBAAO,CAAC,IAAI,CAAC,+CAA+C,EAAE,KAAc,CAAC,CAAA;QAC/E,CAAC;IACH,CAAC;CACF;AAhFD,oBAgFC"}

package/transpiled/directives/io/lib/throttle/components/Component.d.ts

@@ -0,0 +1,5 @@
+import type { Parameter } from '../../../../../RTD';
+import type { Input as Context } from '../../../../../io';
+export interface Component {
+    get: (context: Context, parameters: Parameter[]) => string;
+}

package/transpiled/directives/io/lib/throttle/components/Component.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=Component.js.map

package/transpiled/directives/io/lib/throttle/components/Component.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Component.js","sourceRoot":"","sources":["../../../../../../source/directives/io/lib/throttle/components/Component.ts"],"names":[],"mappings":""}

package/transpiled/directives/io/lib/throttle/components/IP.d.ts

@@ -0,0 +1,6 @@
+import type { Context } from '../../../../../HTTP';
+import type { Component } from './Component';
+export declare class IP implements Component {
+    get(context: Context): string;
+    private xff;
+}

package/transpiled/directives/io/lib/throttle/components/IP.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IP = void 0;
+class IP {
+    get(context) {
+        return this.xff(context) ?? context.request.socket.remoteAddress ?? '';
+    }
+    xff(context) {
+        const xff = context.request.headers['x-forwarded-for'];
+        if (xff === undefined || typeof xff === 'string')
+            return xff;
+        let ip;
+        for (const value of xff) {
+            ip = value.trim();
+            if (!local(ip))
+                return ip;
+        }
+        return ip; // last otherwise
+    }
+}
+exports.IP = IP;
+function local(ip) {
+    return (ip === 'unknown' ||
+        ip === '' ||
+        ip === '127.0.0.1' ||
+        ip === '::1' ||
+        ip.startsWith('10.') ||
+        ip.startsWith('192.168.') ||
+        ip.match(/^172\.(1[6-9]|2[0-9]|3[0-1])\./) !== null ||
+        ip.startsWith('fd') ||
+        ip.startsWith('fe80:'));
+}
+//# sourceMappingURL=IP.js.map

package/transpiled/directives/io/lib/throttle/components/IP.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IP.js","sourceRoot":"","sources":["../../../../../../source/directives/io/lib/throttle/components/IP.ts"],"names":[],"mappings":";;;AAGA,MAAa,EAAE;IACN,GAAG,CAAE,OAAgB;QAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAA;IACxE,CAAC;IAEO,GAAG,CAAE,OAAgB;QAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAEtD,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ;YAC9C,OAAO,GAAG,CAAA;QAEZ,IAAI,EAAE,CAAA;QAEN,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;YACxB,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;YAEjB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,OAAO,EAAE,CAAA;QACb,CAAC;QAED,OAAO,EAAE,CAAA,CAAC,iBAAiB;IAC7B,CAAC;CACF;AAtBD,gBAsBC;AAED,SAAS,KAAK,CAAE,EAAU;IACxB,OAAO,CACL,EAAE,KAAK,SAAS;QAChB,EAAE,KAAK,EAAE;QACT,EAAE,KAAK,WAAW;QAClB,EAAE,KAAK,KAAK;QACZ,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;QACpB,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QACzB,EAAE,CAAC,KAAK,CAAC,gCAAgC,CAAC,KAAK,IAAI;QACnD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QACnB,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CACvB,CAAA;AACH,CAAC"}

package/transpiled/directives/io/lib/throttle/components/Identity.d.ts

@@ -0,0 +1,11 @@
+import type { Input } from '../../../../../io';
+import type { Component } from './Component';
+/**
+ * The authenticated identity, or nothing when the request carries none.
+ *
+ * Anonymous requests therefore share one quota between them; `ip` is the component
+ * that tells them apart.
+ */
+export declare class Identity implements Component {
+    get(context: Input): string;
+}

package/transpiled/directives/io/lib/throttle/components/Identity.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Identity = void 0;
+/**
+ * The authenticated identity, or nothing when the request carries none.
+ *
+ * Anonymous requests therefore share one quota between them; `ip` is the component
+ * that tells them apart.
+ */
+class Identity {
+    get(context) {
+        return context.identity?.id ?? '';
+    }
+}
+exports.Identity = Identity;
+//# sourceMappingURL=Identity.js.map

package/transpiled/directives/io/lib/throttle/components/Identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Identity.js","sourceRoot":"","sources":["../../../../../../source/directives/io/lib/throttle/components/Identity.ts"],"names":[],"mappings":";;;AAGA;;;;;GAKG;AACH,MAAa,QAAQ;IACZ,GAAG,CAAE,OAAc;QACxB,OAAQ,OAAgC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAA;IAC7D,CAAC;CACF;AAJD,4BAIC"}

package/transpiled/directives/io/lib/throttle/components/Path.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from '../../../../../HTTP';
+import type { Component } from './Component';
+export declare class Path implements Component {
+    get(context: Context): string;
+}

package/transpiled/directives/io/lib/throttle/components/Path.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Path = void 0;
+class Path {
+    get(context) {
+        return context.url.pathname;
+    }
+}
+exports.Path = Path;
+//# sourceMappingURL=Path.js.map

package/transpiled/directives/io/lib/throttle/components/Path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Path.js","sourceRoot":"","sources":["../../../../../../source/directives/io/lib/throttle/components/Path.ts"],"names":[],"mappings":";;;AAGA,MAAa,IAAI;IACR,GAAG,CAAE,OAAgB;QAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAA;IAC7B,CAAC;CACF;AAJD,oBAIC"}

package/transpiled/directives/io/lib/throttle/components/Route.d.ts

@@ -0,0 +1,12 @@
+import type { Component } from './Component';
+/**
+ * The route as declared — `/users/:id` — rather than the path a request came in on.
+ *
+ * A constant per method, resolved when the tree is built, so every request to one
+ * route shares a quota however many concrete paths match it.
+ */
+export declare class Route implements Component {
+    private readonly route;
+    constructor(_: unknown, route: string);
+    get(): string;
+}