@warlock.js/core 5.28.0 → 5.30.0

package/esm/http/middleware/rate-limit.middleware.mjs

@@ -1,8 +1,10 @@
 import { HttpErrorCodes } from "../error-codes.mjs";
 import { t } from "./inject-request-context.mjs";
+import { incrementSharedRateLimit, logSharedRateLimitError } from "../rate-limit-cache-store.mjs";
+import config from "@mongez/config";
 import { normalizeIP } from "@fastify/rate-limit";
 
-//#region ../core/src/http/middleware/rate-limit.middleware.ts
+//#region ../../packages/core/src/http/middleware/rate-limit.middleware.ts
 const buckets = /* @__PURE__ */ new Map();
 const defaultIpv6Subnet = 64;
 /**
@@ -21,16 +23,23 @@ let lastPruneAt = 0;
 function pruneExpired(now) {
 	for (const [key, bucket] of buckets) if (bucket.resetAt <= now) buckets.delete(key);
 }
+function resolveStore(options) {
+	if (options.store) return options.store;
+	return config.get("http.rateLimit.store") === "cache" ? "cache" : "memory";
+}
 /**
 * Per-route / per-group rate limit. Layers on top of `@fastify/rate-limit`'s
 * global cap (configured via `http.rateLimit`) — both run, and either can
 * 429. Use this for endpoints that need a tighter cap than the global default:
 * login, OTP request, password reset, expensive search, AI completions.
 *
-* The counter of THIS middleware always lives in-process. With `N` replicas
-* its effective cap is `N × max`. The global limit can be shared across
-* replicas by setting `http.rateLimit.redis` (an ioredis instance); that
-* does not affect this per-route middleware.
+* The counter lives in-process by default, so with `N` replicas the
+* effective cap is `N × max`. Set `store: "cache"` (or `http.rateLimit.store:
+* "cache"`, which this follows) to count in `@warlock.js/cache` instead, so
+* every process sharing the cache driver counts together. A cache outage
+* fails open: the request is let through and the error is logged (at most
+* once a minute). The `null` and `file` cache drivers are refused the same
+* way: they cannot count, so the limiter lets requests through and logs why.
 *
 * Sets `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset` on
 * every response; adds `Retry-After` (seconds) on a 429.
@@ -43,7 +52,7 @@ function pruneExpired(now) {
 */
 function rateLimitMiddleware(options) {
 	const limiterId = nextLimiterId++;
-	return ({ request, response }) => {
+	return async ({ request, response }) => {
 		const now = Date.now();
 		if (now - lastPruneAt > 6e4) {
 			pruneExpired(now);
@@ -59,15 +68,28 @@ function rateLimitMiddleware(options) {
 		const ipKey = ip ? normalizeIP(ip, defaultIpv6Subnet) : "unknown";
 		const groupKey = options.keyGenerator?.(request) || userKey || ipKey;
 		const cacheKey = `${limiterId}:${request.route.path}:${groupKey}`;
-		let bucket = buckets.get(cacheKey);
-		if (!bucket || bucket.resetAt <= now) {
+		let bucket;
+		if (resolveStore(options) === "cache") try {
+			const shared = await incrementSharedRateLimit(`route.${options.name ?? limiterId}.${request.route.path}`, groupKey, options.duration, now);
 			bucket = {
-				count: 0,
-				resetAt: now + options.duration
+				count: shared.current,
+				resetAt: shared.resetAt
 			};
-			buckets.set(cacheKey, bucket);
+		} catch (error) {
+			logSharedRateLimitError(error);
+			return;
+		}
+		else {
+			bucket = buckets.get(cacheKey);
+			if (!bucket || bucket.resetAt <= now) {
+				bucket = {
+					count: 0,
+					resetAt: now + options.duration
+				};
+				buckets.set(cacheKey, bucket);
+			}
+			bucket.count++;
 		}
-		bucket.count++;
 		const remaining = Math.max(0, options.max - bucket.count);
 		const retryAfter = Math.max(1, Math.ceil((bucket.resetAt - now) / 1e3));
 		response.header("X-RateLimit-Limit", options.max);

package/esm/http/middleware/rate-limit.middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.middleware.mjs","names":[],"sources":["../../../../../../../../core/src/http/middleware/rate-limit.middleware.ts"],"sourcesContent":["import { normalizeIP } from \"@fastify/rate-limit\";\nimport type { Middleware } from \"../../router\";\nimport { HttpErrorCodes } from \"../error-codes\";\nimport type { Request } from \"../request\";\nimport { t } from \"./inject-request-context\";\n\n/**\n * Options for the per-route rate limit middleware.\n */\nexport type RateLimitOptions = {\n  /**\n   * Max requests allowed within the time window.\n   */\n  max: number;\n  /**\n   * Time window in milliseconds.\n   */\n  duration: number;\n  /**\n   * Group key generator. Defaults to the client IP. Override to scope per-user,\n   * per-organization, per-tenant, etc.\n   *\n   * @example\n   * keyGenerator: (request) => request.locals.user?.id ?? request.ip,\n   */\n  keyGenerator?: (request: Request) => string;\n  /**\n   * Key the bucket to the signed-in user (`request.locals.user.id`). Works on\n   * routes and page actions alike. `keyGenerator` wins when both are set.\n   */\n  key?: \"user\";\n  /**\n   * With `key: \"user\"`, what to do for unauthenticated requests: bucket them\n   * by IP (default) or skip limiting entirely.\n   */\n  guests?: \"ip\" | \"skip\";\n  /**\n   * Override the default error message. Pass a function to build it per\n   * request, e.g. to translate it into the visitor's locale.\n   */\n  errorMessage?: string | ((request: Request) => string);\n};\n\ntype Bucket = {\n  count: number;\n  resetAt: number;\n};\n\nconst buckets = new Map<string, Bucket>();\nconst defaultIpv6Subnet = 64;\n\n/**\n * Each `rateLimitMiddleware()` call is its own limiter. Page actions share one\n * route, so without this two limits on the same page (say `like` and\n * `comment`) would count into one bucket.\n */\nlet nextLimiterId = 0;\n\n/**\n * Sweep expired buckets so the Map doesn't grow unbounded with one-shot keys\n * (rare per-user keys, dynamic path parameters in `keyGenerator`, etc.).\n * Called opportunistically, at most once per minute, not on a timer — keeps\n * the module side-effect-free for testing.\n */\nlet lastPruneAt = 0;\n\nfunction pruneExpired(now: number) {\n  for (const [key, bucket] of buckets) {\n    if (bucket.resetAt <= now) {\n      buckets.delete(key);\n    }\n  }\n}\n\n/**\n * Per-route / per-group rate limit. Layers on top of `@fastify/rate-limit`'s\n * global cap (configured via `http.rateLimit`) — both run, and either can\n * 429. Use this for endpoints that need a tighter cap than the global default:\n * login, OTP request, password reset, expensive search, AI completions.\n *\n * The counter of THIS middleware always lives in-process. With `N` replicas\n * its effective cap is `N × max`. The global limit can be shared across\n * replicas by setting `http.rateLimit.redis` (an ioredis instance); that\n * does not affect this per-route middleware.\n *\n * Sets `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset` on\n * every response; adds `Retry-After` (seconds) on a 429.\n *\n * @example\n * import { middleware } from \"@warlock.js/core\";\n * router.post(\"/auth/login\", loginController, {\n *   middleware: [middleware.rateLimit({ max: 5, duration: 60_000 })],\n * });\n */\nexport function rateLimitMiddleware(options: RateLimitOptions): Middleware {\n  const limiterId = nextLimiterId++;\n\n  return ({ request, response }) => {\n    const now = Date.now();\n\n    if (now - lastPruneAt > 60_000) {\n      pruneExpired(now);\n      lastPruneAt = now;\n    }\n\n    let userKey: string | undefined;\n\n    if (options.key === \"user\" && !options.keyGenerator) {\n      const id = (request.locals as { user?: { id?: unknown } } | undefined)?.user?.id;\n\n      if (id !== undefined && id !== null && id !== \"\") {\n        userKey = `user:${String(id)}`;\n      } else if (options.guests === \"skip\") {\n        return;\n      }\n    }\n\n    const ip = request.detectIp();\n    const ipKey = ip ? normalizeIP(ip, defaultIpv6Subnet) : \"unknown\";\n    const groupKey = options.keyGenerator?.(request) || userKey || ipKey;\n    const cacheKey = `${limiterId}:${request.route.path}:${groupKey}`;\n\n    let bucket = buckets.get(cacheKey);\n\n    if (!bucket || bucket.resetAt <= now) {\n      bucket = { count: 0, resetAt: now + options.duration };\n      buckets.set(cacheKey, bucket);\n    }\n\n    bucket.count++;\n\n    const remaining = Math.max(0, options.max - bucket.count);\n    const retryAfter = Math.max(1, Math.ceil((bucket.resetAt - now) / 1000));\n\n    response.header(\"X-RateLimit-Limit\", options.max);\n    response.header(\"X-RateLimit-Remaining\", remaining);\n    response.header(\"X-RateLimit-Reset\", Math.ceil(bucket.resetAt / 1000));\n\n    if (bucket.count > options.max) {\n      response.header(\"Retry-After\", retryAfter);\n\n      return response.tooManyRequests({\n        error:\n          (typeof options.errorMessage === \"function\"\n            ? options.errorMessage(request)\n            : options.errorMessage) || t(\"http.rateLimitExceeded\"),\n        errorCode: HttpErrorCodes.RateLimitExceeded,\n      });\n    }\n  };\n}\n"],"mappings":";;;;;AAgDA,MAAM,0BAAU,IAAI,IAAoB;AACxC,MAAM,oBAAoB;;;;;;AAO1B,IAAI,gBAAgB;;;;;;;AAQpB,IAAI,cAAc;AAElB,SAAS,aAAa,KAAa;CACjC,KAAK,MAAM,CAAC,KAAK,WAAW,SAC1B,IAAI,OAAO,WAAW,KACpB,QAAQ,OAAO,GAAG;AAGxB;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,oBAAoB,SAAuC;CACzE,MAAM,YAAY;CAElB,QAAQ,EAAE,SAAS,eAAe;EAChC,MAAM,MAAM,KAAK,IAAI;EAErB,IAAI,MAAM,cAAc,KAAQ;GAC9B,aAAa,GAAG;GAChB,cAAc;EAChB;EAEA,IAAI;EAEJ,IAAI,QAAQ,QAAQ,UAAU,CAAC,QAAQ,cAAc;GACnD,MAAM,KAAM,QAAQ,QAAoD,MAAM;GAE9E,IAAI,OAAO,UAAa,OAAO,QAAQ,OAAO,IAC5C,UAAU,QAAQ,OAAO,EAAE;QACtB,IAAI,QAAQ,WAAW,QAC5B;EAEJ;EAEA,MAAM,KAAK,QAAQ,SAAS;EAC5B,MAAM,QAAQ,KAAK,YAAY,IAAI,iBAAiB,IAAI;EACxD,MAAM,WAAW,QAAQ,eAAe,OAAO,KAAK,WAAW;EAC/D,MAAM,WAAW,GAAG,UAAU,GAAG,QAAQ,MAAM,KAAK,GAAG;EAEvD,IAAI,SAAS,QAAQ,IAAI,QAAQ;EAEjC,IAAI,CAAC,UAAU,OAAO,WAAW,KAAK;GACpC,SAAS;IAAE,OAAO;IAAG,SAAS,MAAM,QAAQ;GAAS;GACrD,QAAQ,IAAI,UAAU,MAAM;EAC9B;EAEA,OAAO;EAEP,MAAM,YAAY,KAAK,IAAI,GAAG,QAAQ,MAAM,OAAO,KAAK;EACxD,MAAM,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,OAAO,UAAU,OAAO,GAAI,CAAC;EAEvE,SAAS,OAAO,qBAAqB,QAAQ,GAAG;EAChD,SAAS,OAAO,yBAAyB,SAAS;EAClD,SAAS,OAAO,qBAAqB,KAAK,KAAK,OAAO,UAAU,GAAI,CAAC;EAErE,IAAI,OAAO,QAAQ,QAAQ,KAAK;GAC9B,SAAS,OAAO,eAAe,UAAU;GAEzC,OAAO,SAAS,gBAAgB;IAC9B,QACG,OAAO,QAAQ,iBAAiB,aAC7B,QAAQ,aAAa,OAAO,IAC5B,QAAQ,iBAAiB,EAAE,wBAAwB;IACzD;GACF,CAAC;EACH;CACF;AACF"}
+{"version":3,"file":"rate-limit.middleware.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/http/middleware/rate-limit.middleware.ts"],"sourcesContent":["import { normalizeIP } from \"@fastify/rate-limit\";\nimport config from \"@mongez/config\";\nimport type { Middleware } from \"../../router\";\nimport { HttpErrorCodes } from \"../error-codes\";\nimport { incrementSharedRateLimit, logSharedRateLimitError } from \"../rate-limit-cache-store\";\nimport type { Request } from \"../request\";\nimport { t } from \"./inject-request-context\";\n\n/**\n * Options for the per-route rate limit middleware.\n */\nexport type RateLimitOptions = {\n  /**\n   * Max requests allowed within the time window.\n   */\n  max: number;\n  /**\n   * Time window in milliseconds.\n   */\n  duration: number;\n  /**\n   * Group key generator. Defaults to the client IP. Override to scope per-user,\n   * per-organization, per-tenant, etc.\n   *\n   * @example\n   * keyGenerator: (request) => request.locals.user?.id ?? request.ip,\n   */\n  keyGenerator?: (request: Request) => string;\n  /**\n   * Key the bucket to the signed-in user (`request.locals.user.id`). Works on\n   * routes and page actions alike. `keyGenerator` wins when both are set.\n   */\n  key?: \"user\";\n  /**\n   * With `key: \"user\"`, what to do for unauthenticated requests: bucket them\n   * by IP (default) or skip limiting entirely.\n   */\n  guests?: \"ip\" | \"skip\";\n  /**\n   * Override the default error message. Pass a function to build it per\n   * request, e.g. to translate it into the visitor's locale.\n   */\n  errorMessage?: string | ((request: Request) => string);\n  /**\n   * Where this limiter counts: `\"memory\"` (this process) or `\"cache\"`\n   * (`@warlock.js/cache`, shared by every process using the same driver).\n   * Defaults to `http.rateLimit.store` when that is `\"cache\"`, else `\"memory\"`.\n   */\n  store?: \"memory\" | \"cache\";\n  /**\n   * Stable name for this limiter's shared counters. Without it, limiters are\n   * told apart by the order they were created, which matches across processes\n   * running the same code; set a name when limiters are created conditionally.\n   */\n  name?: string;\n};\n\ntype Bucket = {\n  count: number;\n  resetAt: number;\n};\n\nconst buckets = new Map<string, Bucket>();\nconst defaultIpv6Subnet = 64;\n\n/**\n * Each `rateLimitMiddleware()` call is its own limiter. Page actions share one\n * route, so without this two limits on the same page (say `like` and\n * `comment`) would count into one bucket.\n */\nlet nextLimiterId = 0;\n\n/**\n * Sweep expired buckets so the Map doesn't grow unbounded with one-shot keys\n * (rare per-user keys, dynamic path parameters in `keyGenerator`, etc.).\n * Called opportunistically, at most once per minute, not on a timer — keeps\n * the module side-effect-free for testing.\n */\nlet lastPruneAt = 0;\n\nfunction pruneExpired(now: number) {\n  for (const [key, bucket] of buckets) {\n    if (bucket.resetAt <= now) {\n      buckets.delete(key);\n    }\n  }\n}\n\nfunction resolveStore(options: RateLimitOptions): \"memory\" | \"cache\" {\n  if (options.store) return options.store;\n\n  return config.get(\"http.rateLimit.store\") === \"cache\" ? \"cache\" : \"memory\";\n}\n\n/**\n * Per-route / per-group rate limit. Layers on top of `@fastify/rate-limit`'s\n * global cap (configured via `http.rateLimit`) — both run, and either can\n * 429. Use this for endpoints that need a tighter cap than the global default:\n * login, OTP request, password reset, expensive search, AI completions.\n *\n * The counter lives in-process by default, so with `N` replicas the\n * effective cap is `N × max`. Set `store: \"cache\"` (or `http.rateLimit.store:\n * \"cache\"`, which this follows) to count in `@warlock.js/cache` instead, so\n * every process sharing the cache driver counts together. A cache outage\n * fails open: the request is let through and the error is logged (at most\n * once a minute). The `null` and `file` cache drivers are refused the same\n * way: they cannot count, so the limiter lets requests through and logs why.\n *\n * Sets `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset` on\n * every response; adds `Retry-After` (seconds) on a 429.\n *\n * @example\n * import { middleware } from \"@warlock.js/core\";\n * router.post(\"/auth/login\", loginController, {\n *   middleware: [middleware.rateLimit({ max: 5, duration: 60_000 })],\n * });\n */\nexport function rateLimitMiddleware(options: RateLimitOptions): Middleware {\n  const limiterId = nextLimiterId++;\n\n  return async ({ request, response }) => {\n    const now = Date.now();\n\n    if (now - lastPruneAt > 60_000) {\n      pruneExpired(now);\n      lastPruneAt = now;\n    }\n\n    let userKey: string | undefined;\n\n    if (options.key === \"user\" && !options.keyGenerator) {\n      const id = (request.locals as { user?: { id?: unknown } } | undefined)?.user?.id;\n\n      if (id !== undefined && id !== null && id !== \"\") {\n        userKey = `user:${String(id)}`;\n      } else if (options.guests === \"skip\") {\n        return undefined;\n      }\n    }\n\n    const ip = request.detectIp();\n    const ipKey = ip ? normalizeIP(ip, defaultIpv6Subnet) : \"unknown\";\n    const groupKey = options.keyGenerator?.(request) || userKey || ipKey;\n    const cacheKey = `${limiterId}:${request.route.path}:${groupKey}`;\n\n    let bucket: Bucket | undefined;\n\n    if (resolveStore(options) === \"cache\") {\n      try {\n        const shared = await incrementSharedRateLimit(\n          `route.${options.name ?? limiterId}.${request.route.path}`,\n          groupKey,\n          options.duration,\n          now,\n        );\n\n        bucket = { count: shared.current, resetAt: shared.resetAt };\n      } catch (error) {\n        // Fail open, and report the outage at most once a minute rather\n        // than once per request.\n        logSharedRateLimitError(error);\n\n        return undefined;\n      }\n    } else {\n      bucket = buckets.get(cacheKey);\n\n      if (!bucket || bucket.resetAt <= now) {\n        bucket = { count: 0, resetAt: now + options.duration };\n        buckets.set(cacheKey, bucket);\n      }\n\n      bucket.count++;\n    }\n\n    const remaining = Math.max(0, options.max - bucket.count);\n    const retryAfter = Math.max(1, Math.ceil((bucket.resetAt - now) / 1000));\n\n    response.header(\"X-RateLimit-Limit\", options.max);\n    response.header(\"X-RateLimit-Remaining\", remaining);\n    response.header(\"X-RateLimit-Reset\", Math.ceil(bucket.resetAt / 1000));\n\n    if (bucket.count > options.max) {\n      response.header(\"Retry-After\", retryAfter);\n\n      return response.tooManyRequests({\n        error:\n          (typeof options.errorMessage === \"function\"\n            ? options.errorMessage(request)\n            : options.errorMessage) || t(\"http.rateLimitExceeded\"),\n        errorCode: HttpErrorCodes.RateLimitExceeded,\n      });\n    }\n\n    return undefined;\n  };\n}\n"],"mappings":";;;;;;;AA8DA,MAAM,0BAAU,IAAI,IAAoB;AACxC,MAAM,oBAAoB;;;;;;AAO1B,IAAI,gBAAgB;;;;;;;AAQpB,IAAI,cAAc;AAElB,SAAS,aAAa,KAAa;CACjC,KAAK,MAAM,CAAC,KAAK,WAAW,SAC1B,IAAI,OAAO,WAAW,KACpB,QAAQ,OAAO,GAAG;AAGxB;AAEA,SAAS,aAAa,SAA+C;CACnE,IAAI,QAAQ,OAAO,OAAO,QAAQ;CAElC,OAAO,OAAO,IAAI,sBAAsB,MAAM,UAAU,UAAU;AACpE;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,SAAgB,oBAAoB,SAAuC;CACzE,MAAM,YAAY;CAElB,OAAO,OAAO,EAAE,SAAS,eAAe;EACtC,MAAM,MAAM,KAAK,IAAI;EAErB,IAAI,MAAM,cAAc,KAAQ;GAC9B,aAAa,GAAG;GAChB,cAAc;EAChB;EAEA,IAAI;EAEJ,IAAI,QAAQ,QAAQ,UAAU,CAAC,QAAQ,cAAc;GACnD,MAAM,KAAM,QAAQ,QAAoD,MAAM;GAE9E,IAAI,OAAO,UAAa,OAAO,QAAQ,OAAO,IAC5C,UAAU,QAAQ,OAAO,EAAE;QACtB,IAAI,QAAQ,WAAW,QAC5B;EAEJ;EAEA,MAAM,KAAK,QAAQ,SAAS;EAC5B,MAAM,QAAQ,KAAK,YAAY,IAAI,iBAAiB,IAAI;EACxD,MAAM,WAAW,QAAQ,eAAe,OAAO,KAAK,WAAW;EAC/D,MAAM,WAAW,GAAG,UAAU,GAAG,QAAQ,MAAM,KAAK,GAAG;EAEvD,IAAI;EAEJ,IAAI,aAAa,OAAO,MAAM,SAC5B,IAAI;GACF,MAAM,SAAS,MAAM,yBACnB,SAAS,QAAQ,QAAQ,UAAU,GAAG,QAAQ,MAAM,QACpD,UACA,QAAQ,UACR,GACF;GAEA,SAAS;IAAE,OAAO,OAAO;IAAS,SAAS,OAAO;GAAQ;EAC5D,SAAS,OAAO;GAGd,wBAAwB,KAAK;GAE7B;EACF;OACK;GACL,SAAS,QAAQ,IAAI,QAAQ;GAE7B,IAAI,CAAC,UAAU,OAAO,WAAW,KAAK;IACpC,SAAS;KAAE,OAAO;KAAG,SAAS,MAAM,QAAQ;IAAS;IACrD,QAAQ,IAAI,UAAU,MAAM;GAC9B;GAEA,OAAO;EACT;EAEA,MAAM,YAAY,KAAK,IAAI,GAAG,QAAQ,MAAM,OAAO,KAAK;EACxD,MAAM,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,OAAO,UAAU,OAAO,GAAI,CAAC;EAEvE,SAAS,OAAO,qBAAqB,QAAQ,GAAG;EAChD,SAAS,OAAO,yBAAyB,SAAS;EAClD,SAAS,OAAO,qBAAqB,KAAK,KAAK,OAAO,UAAU,GAAI,CAAC;EAErE,IAAI,OAAO,QAAQ,QAAQ,KAAK;GAC9B,SAAS,OAAO,eAAe,UAAU;GAEzC,OAAO,SAAS,gBAAgB;IAC9B,QACG,OAAO,QAAQ,iBAAiB,aAC7B,QAAQ,aAAa,OAAO,IAC5B,QAAQ,iBAAiB,EAAE,wBAAwB;IACzD;GACF,CAAC;EACH;CAGF;AACF"}

package/esm/http/middleware/utils/cidr-match.d.mts

@@ -1,4 +1,4 @@
-//#region ../core/src/http/middleware/utils/cidr-match.d.ts
+//#region ../../packages/core/src/http/middleware/utils/cidr-match.d.ts
 declare function ipMatches(rawIp: string, rawPattern: string): boolean;
 /**
  * Returns true if `ip` matches any pattern in the list.

package/esm/http/middleware/utils/cidr-match.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cidr-match.d.mts","names":[],"sources":["../../../../../../../../../core/src/http/middleware/utils/cidr-match.ts"],"mappings":";iBA2CgB,SAAA,CAAU,KAAA,UAAe,UAAkB;AAA3D;;;;AAA2D;AAkD3D;AAlDA,iBAkDgB,QAAA,CAAS,EAAA,UAAY,QAAkB"}
+{"version":3,"file":"cidr-match.d.mts","names":[],"sources":["../../../../../../../../../../packages/core/src/http/middleware/utils/cidr-match.ts"],"mappings":";iBA2CgB,SAAA,CAAU,KAAA,UAAe,UAAkB;AAA3D;;;;AAA2D;AAkD3D;AAlDA,iBAkDgB,QAAA,CAAS,EAAA,UAAY,QAAkB"}

package/esm/http/middleware/utils/cidr-match.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/http/middleware/utils/cidr-match.ts
+//#region ../../packages/core/src/http/middleware/utils/cidr-match.ts
 /**
 * Match an IPv4 address against an exact IP or a CIDR block.
 *

package/esm/http/middleware/utils/cidr-match.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cidr-match.mjs","names":[],"sources":["../../../../../../../../../core/src/http/middleware/utils/cidr-match.ts"],"sourcesContent":["/**\n * Match an IPv4 address against an exact IP or a CIDR block.\n *\n * IPv6 patterns are matched as exact-string only — full IPv6 CIDR support is\n * out of scope; ACLs in production almost always use IPv4 ranges. Add IPv6 CIDR\n * later if a real use-case appears.\n *\n * @example\n * ipMatches(\"10.0.0.5\", \"10.0.0.0/8\");      // true\n * ipMatches(\"10.0.0.5\", \"10.0.0.5\");        // true\n * ipMatches(\"192.168.1.1\", \"10.0.0.0/8\");   // false\n */\nfunction ipv4ToInt(ip: string): number | null {\n  const parts = ip.split(\".\");\n\n  if (parts.length !== 4) {\n    return null;\n  }\n\n  let result = 0;\n\n  for (const part of parts) {\n    const num = Number(part);\n\n    if (!Number.isInteger(num) || num < 0 || num > 255) {\n      return null;\n    }\n\n    result = (result << 8) + num;\n  }\n\n  return result >>> 0;\n}\n\nconst IPV4_MAPPED_PREFIX = /^::ffff:(?=\\d+\\.\\d+\\.\\d+\\.\\d+$)/i;\n\n/**\n * Normalize IPv4-mapped IPv6 (`::ffff:1.2.3.4`) to plain IPv4.\n */\nfunction normalizeIp(value: string): string {\n  return value.replace(IPV4_MAPPED_PREFIX, \"\");\n}\n\nexport function ipMatches(rawIp: string, rawPattern: string): boolean {\n  if (!rawIp || !rawPattern) {\n    return false;\n  }\n\n  const ip = normalizeIp(rawIp);\n  const pattern = normalizeIp(rawPattern);\n\n  if (pattern === ip) {\n    return true;\n  }\n\n  if (!pattern.includes(\"/\")) {\n    return false;\n  }\n\n  const [base, bitsRaw] = pattern.split(\"/\");\n\n  if (base === undefined || bitsRaw === undefined) {\n    return false;\n  }\n\n  const bits = Number(bitsRaw);\n\n  if (!Number.isInteger(bits) || bits < 0 || bits > 32) {\n    return false;\n  }\n\n  const ipInt = ipv4ToInt(ip);\n  const baseInt = ipv4ToInt(base);\n\n  if (ipInt === null || baseInt === null) {\n    return false;\n  }\n\n  if (bits === 0) {\n    return true;\n  }\n\n  const mask = (~0 << (32 - bits)) >>> 0;\n\n  return (ipInt & mask) === (baseInt & mask);\n}\n\n/**\n * Returns true if `ip` matches any pattern in the list.\n *\n * @example\n * anyMatch(\"10.0.0.5\", [\"192.168.0.0/16\", \"10.0.0.0/8\"]); // true\n */\nexport function anyMatch(ip: string, patterns: string[]): boolean {\n  return patterns.some((pattern) => ipMatches(ip, pattern));\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,SAAS,UAAU,IAA2B;CAC5C,MAAM,QAAQ,GAAG,MAAM,GAAG;CAE1B,IAAI,MAAM,WAAW,GACnB,OAAO;CAGT,IAAI,SAAS;CAEb,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,MAAM,OAAO,IAAI;EAEvB,IAAI,CAAC,OAAO,UAAU,GAAG,KAAK,MAAM,KAAK,MAAM,KAC7C,OAAO;EAGT,UAAU,UAAU,KAAK;CAC3B;CAEA,OAAO,WAAW;AACpB;AAEA,MAAM,qBAAqB;;;;AAK3B,SAAS,YAAY,OAAuB;CAC1C,OAAO,MAAM,QAAQ,oBAAoB,EAAE;AAC7C;AAEA,SAAgB,UAAU,OAAe,YAA6B;CACpE,IAAI,CAAC,SAAS,CAAC,YACb,OAAO;CAGT,MAAM,KAAK,YAAY,KAAK;CAC5B,MAAM,UAAU,YAAY,UAAU;CAEtC,IAAI,YAAY,IACd,OAAO;CAGT,IAAI,CAAC,QAAQ,SAAS,GAAG,GACvB,OAAO;CAGT,MAAM,CAAC,MAAM,WAAW,QAAQ,MAAM,GAAG;CAEzC,IAAI,SAAS,UAAa,YAAY,QACpC,OAAO;CAGT,MAAM,OAAO,OAAO,OAAO;CAE3B,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,IAChD,OAAO;CAGT,MAAM,QAAQ,UAAU,EAAE;CAC1B,MAAM,UAAU,UAAU,IAAI;CAE9B,IAAI,UAAU,QAAQ,YAAY,MAChC,OAAO;CAGT,IAAI,SAAS,GACX,OAAO;CAGT,MAAM,OAAQ,MAAO,KAAK,SAAW;CAErC,QAAQ,QAAQ,WAAW,UAAU;AACvC;;;;;;;AAQA,SAAgB,SAAS,IAAY,UAA6B;CAChE,OAAO,SAAS,MAAM,YAAY,UAAU,IAAI,OAAO,CAAC;AAC1D"}
+{"version":3,"file":"cidr-match.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/http/middleware/utils/cidr-match.ts"],"sourcesContent":["/**\n * Match an IPv4 address against an exact IP or a CIDR block.\n *\n * IPv6 patterns are matched as exact-string only — full IPv6 CIDR support is\n * out of scope; ACLs in production almost always use IPv4 ranges. Add IPv6 CIDR\n * later if a real use-case appears.\n *\n * @example\n * ipMatches(\"10.0.0.5\", \"10.0.0.0/8\");      // true\n * ipMatches(\"10.0.0.5\", \"10.0.0.5\");        // true\n * ipMatches(\"192.168.1.1\", \"10.0.0.0/8\");   // false\n */\nfunction ipv4ToInt(ip: string): number | null {\n  const parts = ip.split(\".\");\n\n  if (parts.length !== 4) {\n    return null;\n  }\n\n  let result = 0;\n\n  for (const part of parts) {\n    const num = Number(part);\n\n    if (!Number.isInteger(num) || num < 0 || num > 255) {\n      return null;\n    }\n\n    result = (result << 8) + num;\n  }\n\n  return result >>> 0;\n}\n\nconst IPV4_MAPPED_PREFIX = /^::ffff:(?=\\d+\\.\\d+\\.\\d+\\.\\d+$)/i;\n\n/**\n * Normalize IPv4-mapped IPv6 (`::ffff:1.2.3.4`) to plain IPv4.\n */\nfunction normalizeIp(value: string): string {\n  return value.replace(IPV4_MAPPED_PREFIX, \"\");\n}\n\nexport function ipMatches(rawIp: string, rawPattern: string): boolean {\n  if (!rawIp || !rawPattern) {\n    return false;\n  }\n\n  const ip = normalizeIp(rawIp);\n  const pattern = normalizeIp(rawPattern);\n\n  if (pattern === ip) {\n    return true;\n  }\n\n  if (!pattern.includes(\"/\")) {\n    return false;\n  }\n\n  const [base, bitsRaw] = pattern.split(\"/\");\n\n  if (base === undefined || bitsRaw === undefined) {\n    return false;\n  }\n\n  const bits = Number(bitsRaw);\n\n  if (!Number.isInteger(bits) || bits < 0 || bits > 32) {\n    return false;\n  }\n\n  const ipInt = ipv4ToInt(ip);\n  const baseInt = ipv4ToInt(base);\n\n  if (ipInt === null || baseInt === null) {\n    return false;\n  }\n\n  if (bits === 0) {\n    return true;\n  }\n\n  const mask = (~0 << (32 - bits)) >>> 0;\n\n  return (ipInt & mask) === (baseInt & mask);\n}\n\n/**\n * Returns true if `ip` matches any pattern in the list.\n *\n * @example\n * anyMatch(\"10.0.0.5\", [\"192.168.0.0/16\", \"10.0.0.0/8\"]); // true\n */\nexport function anyMatch(ip: string, patterns: string[]): boolean {\n  return patterns.some((pattern) => ipMatches(ip, pattern));\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,SAAS,UAAU,IAA2B;CAC5C,MAAM,QAAQ,GAAG,MAAM,GAAG;CAE1B,IAAI,MAAM,WAAW,GACnB,OAAO;CAGT,IAAI,SAAS;CAEb,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,MAAM,OAAO,IAAI;EAEvB,IAAI,CAAC,OAAO,UAAU,GAAG,KAAK,MAAM,KAAK,MAAM,KAC7C,OAAO;EAGT,UAAU,UAAU,KAAK;CAC3B;CAEA,OAAO,WAAW;AACpB;AAEA,MAAM,qBAAqB;;;;AAK3B,SAAS,YAAY,OAAuB;CAC1C,OAAO,MAAM,QAAQ,oBAAoB,EAAE;AAC7C;AAEA,SAAgB,UAAU,OAAe,YAA6B;CACpE,IAAI,CAAC,SAAS,CAAC,YACb,OAAO;CAGT,MAAM,KAAK,YAAY,KAAK;CAC5B,MAAM,UAAU,YAAY,UAAU;CAEtC,IAAI,YAAY,IACd,OAAO;CAGT,IAAI,CAAC,QAAQ,SAAS,GAAG,GACvB,OAAO;CAGT,MAAM,CAAC,MAAM,WAAW,QAAQ,MAAM,GAAG;CAEzC,IAAI,SAAS,UAAa,YAAY,QACpC,OAAO;CAGT,MAAM,OAAO,OAAO,OAAO;CAE3B,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,IAChD,OAAO;CAGT,MAAM,QAAQ,UAAU,EAAE;CAC1B,MAAM,UAAU,UAAU,IAAI;CAE9B,IAAI,UAAU,QAAQ,YAAY,MAChC,OAAO;CAGT,IAAI,SAAS,GACX,OAAO;CAGT,MAAM,OAAQ,MAAO,KAAK,SAAW;CAErC,QAAQ,QAAQ,WAAW,UAAU;AACvC;;;;;;;AAQA,SAAgB,SAAS,IAAY,UAA6B;CAChE,OAAO,SAAS,MAAM,YAAY,UAAU,IAAI,OAAO,CAAC;AAC1D"}

package/esm/http/middleware/utils/idempotency-key.d.mts

@@ -1,6 +1,6 @@
 import { Request } from "../../request.mjs";
 
-//#region ../core/src/http/middleware/utils/idempotency-key.d.ts
+//#region ../../packages/core/src/http/middleware/utils/idempotency-key.d.ts
 declare function isValidIdempotencyKey(value: unknown): value is string;
 /**
  * Hash a request body to a stable hex digest.

package/esm/http/middleware/utils/idempotency-key.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"idempotency-key.d.mts","names":[],"sources":["../../../../../../../../../core/src/http/middleware/utils/idempotency-key.ts"],"mappings":";;;iBAcgB,qBAAA,CAAsB,KAAA,YAAiB,KAAK;;AAA5D;;;;AAA4D;AAmB5D;;;;iBAAgB,QAAA,CAAS,IAAa;AAAA,iBAuCtB,wBAAA,CAAyB,OAAA,EAAS,OAAO,EAAE,cAAA"}
+{"version":3,"file":"idempotency-key.d.mts","names":[],"sources":["../../../../../../../../../../packages/core/src/http/middleware/utils/idempotency-key.ts"],"mappings":";;;iBAcgB,qBAAA,CAAsB,KAAA,YAAiB,KAAK;;AAA5D;;;;AAA4D;AAmB5D;;;;iBAAgB,QAAA,CAAS,IAAa;AAAA,iBAuCtB,wBAAA,CAAyB,OAAA,EAAS,OAAO,EAAE,cAAA"}

package/esm/http/middleware/utils/idempotency-key.mjs

@@ -1,6 +1,6 @@
 import { createHash } from "node:crypto";
 
-//#region ../core/src/http/middleware/utils/idempotency-key.ts
+//#region ../../packages/core/src/http/middleware/utils/idempotency-key.ts
 /**
 * Idempotency-key validation rules.
 *

package/esm/http/middleware/utils/idempotency-key.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"idempotency-key.mjs","names":[],"sources":["../../../../../../../../../core/src/http/middleware/utils/idempotency-key.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { Request } from \"../../request\";\n\n/**\n * Idempotency-key validation rules.\n *\n * RFC draft-ietf-httpapi-idempotency-key suggests UUIDs or ULIDs but doesn't\n * mandate a format. We accept any printable ASCII string up to 255 chars —\n * tight enough to reject log-injection (no control characters / newlines),\n * loose enough to accept whatever ID scheme the client picks.\n */\nconst MAX_KEY_LENGTH = 255;\nconst PRINTABLE_ASCII = /^[\\x21-\\x7e]+$/;\n\nexport function isValidIdempotencyKey(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    value.length > 0 &&\n    value.length <= MAX_KEY_LENGTH &&\n    PRINTABLE_ASCII.test(value)\n  );\n}\n\n/**\n * Hash a request body to a stable hex digest.\n *\n * Used to detect \"same key, different body\" — that's a client bug, not a retry.\n * sha256 is overkill for collision resistance here, but it's the dependency-free\n * choice and avoids importing a faster hasher.\n *\n * @example\n * hashBody({ amount: 100, currency: \"USD\" }); // \"a1b2c3...\"\n */\nexport function hashBody(body: unknown): string {\n  const serialized = typeof body === \"string\" ? body : JSON.stringify(body ?? {});\n\n  return createHash(\"sha256\").update(serialized).digest(\"hex\");\n}\n\n/**\n * Build the cache key for an idempotency record.\n *\n * Scope is `userType:userId` when authenticated, falling back to the client IP\n * when anonymous. This prevents user A from replaying user B's key — even if\n * user B used a guessable value — while still letting the primitive work on\n * public endpoints.\n *\n * Idempotency middleware must run **after** `authMiddleware` so\n * `request.locals.user` (written by `@warlock.js/auth`) and\n * `request.decodedAccessToken` are populated.\n *\n * @example\n * buildIdempotencyCacheKey(request, \"01J9XZQ-ABC\"); // \"idem:client:user_123:01J9XZQ-ABC\"\n */\n/**\n * Read `id` off `request.locals.user` without assuming any app's\n * `RequestUser` augmentation (declared by `@warlock.js/auth`, which core\n * cannot import) declares it, and without assuming `@warlock.js/auth` is\n * even installed — hence the untyped `unknown` read here rather than a\n * typed `RequestLocals[\"user\"]` access.\n *\n * A local, narrow runtime read survives any augmentation shape — no\n * `as any`.\n */\nfunction readUserId(user: unknown): string | number | undefined {\n  if (!user || typeof user !== \"object\" || !(\"id\" in user)) return undefined;\n\n  const id = (user as { id?: unknown }).id;\n\n  return typeof id === \"string\" || typeof id === \"number\" ? id : undefined;\n}\n\nexport function buildIdempotencyCacheKey(request: Request, idempotencyKey: string): string {\n  const userType = request.decodedAccessToken?.userType || \"anonymous\";\n  const locals = request.locals as Record<string, unknown>;\n  const userId = readUserId(locals.user) || request.detectIp() || \"unknown\";\n\n  // scope by endpoint so one key reused on another route/method never replays\n  // that other endpoint's response\n  const method = (request.route?.method || request.method || \"\").toUpperCase();\n  const routePath = request.route?.path || \"\";\n\n  return `idem:${userType}:${userId}:${method}:${routePath}:${idempotencyKey}`;\n}\n"],"mappings":";;;;;;;;;;;AAWA,MAAM,iBAAiB;AACvB,MAAM,kBAAkB;AAExB,SAAgB,sBAAsB,OAAiC;CACrE,OACE,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,MAAM,UAAU,kBAChB,gBAAgB,KAAK,KAAK;AAE9B;;;;;;;;;;;AAYA,SAAgB,SAAS,MAAuB;CAC9C,MAAM,aAAa,OAAO,SAAS,WAAW,OAAO,KAAK,UAAU,QAAQ,CAAC,CAAC;CAE9E,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,OAAO,KAAK;AAC7D;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,SAAS,WAAW,MAA4C;CAC9D,IAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,EAAE,QAAQ,OAAO,OAAO;CAEjE,MAAM,KAAM,KAA0B;CAEtC,OAAO,OAAO,OAAO,YAAY,OAAO,OAAO,WAAW,KAAK;AACjE;AAEA,SAAgB,yBAAyB,SAAkB,gBAAgC;CACzF,MAAM,WAAW,QAAQ,oBAAoB,YAAY;CACzD,MAAM,SAAS,QAAQ;CAQvB,OAAO,QAAQ,SAAS,GAPT,WAAW,OAAO,IAAI,KAAK,QAAQ,SAAS,KAAK,UAO9B,IAHlB,QAAQ,OAAO,UAAU,QAAQ,UAAU,GAAE,CAAE,YAGrB,EAAE,GAF1B,QAAQ,OAAO,QAAQ,GAEgB,GAAG;AAC9D"}
+{"version":3,"file":"idempotency-key.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/http/middleware/utils/idempotency-key.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { Request } from \"../../request\";\n\n/**\n * Idempotency-key validation rules.\n *\n * RFC draft-ietf-httpapi-idempotency-key suggests UUIDs or ULIDs but doesn't\n * mandate a format. We accept any printable ASCII string up to 255 chars —\n * tight enough to reject log-injection (no control characters / newlines),\n * loose enough to accept whatever ID scheme the client picks.\n */\nconst MAX_KEY_LENGTH = 255;\nconst PRINTABLE_ASCII = /^[\\x21-\\x7e]+$/;\n\nexport function isValidIdempotencyKey(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    value.length > 0 &&\n    value.length <= MAX_KEY_LENGTH &&\n    PRINTABLE_ASCII.test(value)\n  );\n}\n\n/**\n * Hash a request body to a stable hex digest.\n *\n * Used to detect \"same key, different body\" — that's a client bug, not a retry.\n * sha256 is overkill for collision resistance here, but it's the dependency-free\n * choice and avoids importing a faster hasher.\n *\n * @example\n * hashBody({ amount: 100, currency: \"USD\" }); // \"a1b2c3...\"\n */\nexport function hashBody(body: unknown): string {\n  const serialized = typeof body === \"string\" ? body : JSON.stringify(body ?? {});\n\n  return createHash(\"sha256\").update(serialized).digest(\"hex\");\n}\n\n/**\n * Build the cache key for an idempotency record.\n *\n * Scope is `userType:userId` when authenticated, falling back to the client IP\n * when anonymous. This prevents user A from replaying user B's key — even if\n * user B used a guessable value — while still letting the primitive work on\n * public endpoints.\n *\n * Idempotency middleware must run **after** `authMiddleware` so\n * `request.locals.user` (written by `@warlock.js/auth`) and\n * `request.decodedAccessToken` are populated.\n *\n * @example\n * buildIdempotencyCacheKey(request, \"01J9XZQ-ABC\"); // \"idem:client:user_123:01J9XZQ-ABC\"\n */\n/**\n * Read `id` off `request.locals.user` without assuming any app's\n * `RequestUser` augmentation (declared by `@warlock.js/auth`, which core\n * cannot import) declares it, and without assuming `@warlock.js/auth` is\n * even installed — hence the untyped `unknown` read here rather than a\n * typed `RequestLocals[\"user\"]` access.\n *\n * A local, narrow runtime read survives any augmentation shape — no\n * `as any`.\n */\nfunction readUserId(user: unknown): string | number | undefined {\n  if (!user || typeof user !== \"object\" || !(\"id\" in user)) return undefined;\n\n  const id = (user as { id?: unknown }).id;\n\n  return typeof id === \"string\" || typeof id === \"number\" ? id : undefined;\n}\n\nexport function buildIdempotencyCacheKey(request: Request, idempotencyKey: string): string {\n  const userType = request.decodedAccessToken?.userType || \"anonymous\";\n  const locals = request.locals as Record<string, unknown>;\n  const userId = readUserId(locals.user) || request.detectIp() || \"unknown\";\n\n  // scope by endpoint so one key reused on another route/method never replays\n  // that other endpoint's response\n  const method = (request.route?.method || request.method || \"\").toUpperCase();\n  const routePath = request.route?.path || \"\";\n\n  return `idem:${userType}:${userId}:${method}:${routePath}:${idempotencyKey}`;\n}\n"],"mappings":";;;;;;;;;;;AAWA,MAAM,iBAAiB;AACvB,MAAM,kBAAkB;AAExB,SAAgB,sBAAsB,OAAiC;CACrE,OACE,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,MAAM,UAAU,kBAChB,gBAAgB,KAAK,KAAK;AAE9B;;;;;;;;;;;AAYA,SAAgB,SAAS,MAAuB;CAC9C,MAAM,aAAa,OAAO,SAAS,WAAW,OAAO,KAAK,UAAU,QAAQ,CAAC,CAAC;CAE9E,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,OAAO,KAAK;AAC7D;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,SAAS,WAAW,MAA4C;CAC9D,IAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,EAAE,QAAQ,OAAO,OAAO;CAEjE,MAAM,KAAM,KAA0B;CAEtC,OAAO,OAAO,OAAO,YAAY,OAAO,OAAO,WAAW,KAAK;AACjE;AAEA,SAAgB,yBAAyB,SAAkB,gBAAgC;CACzF,MAAM,WAAW,QAAQ,oBAAoB,YAAY;CACzD,MAAM,SAAS,QAAQ;CAQvB,OAAO,QAAQ,SAAS,GAPT,WAAW,OAAO,IAAI,KAAK,QAAQ,SAAS,KAAK,UAO9B,IAHlB,QAAQ,OAAO,UAAU,QAAQ,UAAU,GAAE,CAAE,YAGrB,EAAE,GAF1B,QAAQ,OAAO,QAAQ,GAEgB,GAAG;AAC9D"}

package/esm/http/middleware/utils/parse-size.d.mts

@@ -1,4 +1,4 @@
-//#region ../core/src/http/middleware/utils/parse-size.d.ts
+//#region ../../packages/core/src/http/middleware/utils/parse-size.d.ts
 declare function parseSize(value: string | number): number;
 //#endregion
 export { parseSize };

package/esm/http/middleware/utils/parse-size.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"parse-size.d.mts","names":[],"sources":["../../../../../../../../../core/src/http/middleware/utils/parse-size.ts"],"mappings":";iBAkBgB,SAAA,CAAU,KAAsB"}
+{"version":3,"file":"parse-size.d.mts","names":[],"sources":["../../../../../../../../../../packages/core/src/http/middleware/utils/parse-size.ts"],"mappings":";iBAkBgB,SAAA,CAAU,KAAsB"}

package/esm/http/middleware/utils/parse-size.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/http/middleware/utils/parse-size.ts
+//#region ../../packages/core/src/http/middleware/utils/parse-size.ts
 /**
 * Parse a human-readable size string into bytes.
 *

package/esm/http/middleware/utils/parse-size.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"parse-size.mjs","names":[],"sources":["../../../../../../../../../core/src/http/middleware/utils/parse-size.ts"],"sourcesContent":["/**\n * Parse a human-readable size string into bytes.\n *\n * Accepts `\"2mb\"`, `\"500kb\"`, `\"1.5gb\"`, `\"1024\"`, `\"1024b\"`, etc. Case-insensitive.\n * Numeric input is returned untouched (already bytes).\n *\n * @example\n * parseSize(\"2mb\");     // 2_097_152\n * parseSize(\"500kb\");   // 512_000\n * parseSize(4096);      // 4096\n */\nconst UNITS: Record<string, number> = {\n  b: 1,\n  kb: 1024,\n  mb: 1024 * 1024,\n  gb: 1024 * 1024 * 1024,\n};\n\nexport function parseSize(value: string | number): number {\n  if (typeof value === \"number\") {\n    return value;\n  }\n\n  const match = /^(\\d+(?:\\.\\d+)?)\\s*(b|kb|mb|gb)?$/i.exec(value.trim());\n\n  if (!match) {\n    throw new Error(`Invalid size value: ${value}`);\n  }\n\n  const [, amount, rawUnit = \"b\"] = match;\n  const unit = rawUnit.toLowerCase();\n  const multiplier = UNITS[unit];\n\n  if (!multiplier) {\n    throw new Error(`Unknown size unit: ${unit}`);\n  }\n\n  return Math.floor(Number(amount) * multiplier);\n}\n"],"mappings":";;;;;;;;;;;;AAWA,MAAM,QAAgC;CACpC,GAAG;CACH,IAAI;CACJ,IAAI,OAAO;CACX,IAAI,OAAO,OAAO;AACpB;AAEA,SAAgB,UAAU,OAAgC;CACxD,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,MAAM,QAAQ,qCAAqC,KAAK,MAAM,KAAK,CAAC;CAEpE,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,uBAAuB,OAAO;CAGhD,MAAM,GAAG,QAAQ,UAAU,OAAO;CAClC,MAAM,OAAO,QAAQ,YAAY;CACjC,MAAM,aAAa,MAAM;CAEzB,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,sBAAsB,MAAM;CAG9C,OAAO,KAAK,MAAM,OAAO,MAAM,IAAI,UAAU;AAC/C"}
+{"version":3,"file":"parse-size.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/http/middleware/utils/parse-size.ts"],"sourcesContent":["/**\n * Parse a human-readable size string into bytes.\n *\n * Accepts `\"2mb\"`, `\"500kb\"`, `\"1.5gb\"`, `\"1024\"`, `\"1024b\"`, etc. Case-insensitive.\n * Numeric input is returned untouched (already bytes).\n *\n * @example\n * parseSize(\"2mb\");     // 2_097_152\n * parseSize(\"500kb\");   // 512_000\n * parseSize(4096);      // 4096\n */\nconst UNITS: Record<string, number> = {\n  b: 1,\n  kb: 1024,\n  mb: 1024 * 1024,\n  gb: 1024 * 1024 * 1024,\n};\n\nexport function parseSize(value: string | number): number {\n  if (typeof value === \"number\") {\n    return value;\n  }\n\n  const match = /^(\\d+(?:\\.\\d+)?)\\s*(b|kb|mb|gb)?$/i.exec(value.trim());\n\n  if (!match) {\n    throw new Error(`Invalid size value: ${value}`);\n  }\n\n  const [, amount, rawUnit = \"b\"] = match;\n  const unit = rawUnit.toLowerCase();\n  const multiplier = UNITS[unit];\n\n  if (!multiplier) {\n    throw new Error(`Unknown size unit: ${unit}`);\n  }\n\n  return Math.floor(Number(amount) * multiplier);\n}\n"],"mappings":";;;;;;;;;;;;AAWA,MAAM,QAAgC;CACpC,GAAG;CACH,IAAI;CACJ,IAAI,OAAO;CACX,IAAI,OAAO,OAAO;AACpB;AAEA,SAAgB,UAAU,OAAgC;CACxD,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,MAAM,QAAQ,qCAAqC,KAAK,MAAM,KAAK,CAAC;CAEpE,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,uBAAuB,OAAO;CAGhD,MAAM,GAAG,QAAQ,UAAU,OAAO;CAClC,MAAM,OAAO,QAAQ,YAAY;CACjC,MAAM,aAAa,MAAM;CAEzB,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,sBAAsB,MAAM;CAG9C,OAAO,KAAK,MAAM,OAAO,MAAM,IAAI,UAAU;AAC/C"}

package/esm/http/parse-urlencoded-body.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/http/parse-urlencoded-body.ts
+//#region ../../packages/core/src/http/parse-urlencoded-body.ts
 /**
 * Decode an `application/x-www-form-urlencoded` request body into a plain
 * object, the shape `request.ts`'s `parseBody` already expects from JSON and

package/esm/http/parse-urlencoded-body.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"parse-urlencoded-body.mjs","names":[],"sources":["../../../../../../../core/src/http/parse-urlencoded-body.ts"],"sourcesContent":["/**\n * Decode an `application/x-www-form-urlencoded` request body into a plain\n * object, the shape `request.ts`'s `parseBody` already expects from JSON and\n * multipart bodies.\n *\n * Repeated keys become arrays (`code=a&code=b` -> `{ code: [\"a\", \"b\"] }`);\n * every other key stays a single string. Bracket-notation keys (`a[b]=1`) are\n * NOT expanded here — they are handed through as literal keys and, like any\n * JSON or query-string key of that shape, are expanded later by the shared\n * `parseBody` nesting logic in `request.ts`. This function's only job is the\n * urlencoded -> flat-object step; it does not duplicate that logic.\n */\nexport function parseUrlencodedBody(raw: string): Record<string, string | string[]> {\n  const params = new URLSearchParams(raw);\n  const body: Record<string, string | string[]> = {};\n\n  for (const key of params.keys()) {\n    if (Object.prototype.hasOwnProperty.call(body, key)) continue;\n\n    const values = params.getAll(key);\n\n    body[key] = values.length > 1 ? values : (values[0] ?? \"\");\n  }\n\n  return body;\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,SAAgB,oBAAoB,KAAgD;CAClF,MAAM,SAAS,IAAI,gBAAgB,GAAG;CACtC,MAAM,OAA0C,CAAC;CAEjD,KAAK,MAAM,OAAO,OAAO,KAAK,GAAG;EAC/B,IAAI,OAAO,UAAU,eAAe,KAAK,MAAM,GAAG,GAAG;EAErD,MAAM,SAAS,OAAO,OAAO,GAAG;EAEhC,KAAK,OAAO,OAAO,SAAS,IAAI,SAAU,OAAO,MAAM;CACzD;CAEA,OAAO;AACT"}
+{"version":3,"file":"parse-urlencoded-body.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/parse-urlencoded-body.ts"],"sourcesContent":["/**\n * Decode an `application/x-www-form-urlencoded` request body into a plain\n * object, the shape `request.ts`'s `parseBody` already expects from JSON and\n * multipart bodies.\n *\n * Repeated keys become arrays (`code=a&code=b` -> `{ code: [\"a\", \"b\"] }`);\n * every other key stays a single string. Bracket-notation keys (`a[b]=1`) are\n * NOT expanded here — they are handed through as literal keys and, like any\n * JSON or query-string key of that shape, are expanded later by the shared\n * `parseBody` nesting logic in `request.ts`. This function's only job is the\n * urlencoded -> flat-object step; it does not duplicate that logic.\n */\nexport function parseUrlencodedBody(raw: string): Record<string, string | string[]> {\n  const params = new URLSearchParams(raw);\n  const body: Record<string, string | string[]> = {};\n\n  for (const key of params.keys()) {\n    if (Object.prototype.hasOwnProperty.call(body, key)) continue;\n\n    const values = params.getAll(key);\n\n    body[key] = values.length > 1 ? values : (values[0] ?? \"\");\n  }\n\n  return body;\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,SAAgB,oBAAoB,KAAgD;CAClF,MAAM,SAAS,IAAI,gBAAgB,GAAG;CACtC,MAAM,OAA0C,CAAC;CAEjD,KAAK,MAAM,OAAO,OAAO,KAAK,GAAG;EAC/B,IAAI,OAAO,UAAU,eAAe,KAAK,MAAM,GAAG,GAAG;EAErD,MAAM,SAAS,OAAO,OAAO,GAAG;EAEhC,KAAK,OAAO,OAAO,SAAS,IAAI,SAAU,OAAO,MAAM;CACzD;CAEA,OAAO;AACT"}

package/esm/http/plugins.d.mts

@@ -1,7 +1,14 @@
 import { FastifyInstance } from "./server.mjs";
 
-//#region ../core/src/http/plugins.d.ts
+//#region ../../packages/core/src/http/plugins.d.ts
 declare function registerHttpPlugins(server: FastifyInstance): Promise<void>;
+/**
+ * The public folder(s) worth handing to `@fastify/static`, or `undefined`
+ * when there is nothing to serve: `false`, or a single path that does not
+ * exist. An array is passed through unchanged; `@fastify/static` validates
+ * each entry itself.
+ */
+declare function resolvePublicRoot(publicRoot: unknown): string | string[] | undefined;
 //#endregion
-export { registerHttpPlugins };
+export { registerHttpPlugins, resolvePublicRoot };
 //# sourceMappingURL=plugins.d.mts.map

package/esm/http/plugins.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.d.mts","names":[],"sources":["../../../../../../../core/src/http/plugins.ts"],"mappings":";;;iBAWsB,mBAAA,CAAoB,MAAA,EAAQ,eAAA,GAAe,OAAA"}
+{"version":3,"file":"plugins.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/plugins.ts"],"mappings":";;;iBAYsB,mBAAA,CAAoB,MAAA,EAAQ,eAAA,GAAe,OAAA;;AAAjE;;;;;iBA+EgB,iBAAA,CAAkB,UAAmB"}

package/esm/http/plugins.mjs

@@ -8,8 +8,9 @@ import { parseUrlencodedBody } from "./parse-urlencoded-body.mjs";
 import config from "@mongez/config";
 import { log } from "@warlock.js/logger";
 import fastifyMultipart from "@fastify/multipart";
+import { existsSync } from "node:fs";
 
-//#region ../core/src/http/plugins.ts
+//#region ../../packages/core/src/http/plugins.ts
 async function registerHttpPlugins(server) {
 	const rateLimitOptions = buildRateLimitOptions(config.get("http.rateLimit"));
 	if (rateLimitOptions) server.register(import("@fastify/rate-limit"), rateLimitOptions);
@@ -31,8 +32,9 @@ async function registerHttpPlugins(server) {
 			done(error, void 0);
 		}
 	});
-	server.register(import("@fastify/static"), {
-		root: config.get("storage.publicRoot", rootPath("public")),
+	const publicRoot = resolvePublicRoot(config.get("storage.publicRoot", rootPath("public")));
+	if (publicRoot !== void 0) server.register(import("@fastify/static"), {
+		root: publicRoot,
 		prefix: config.get("storage.publicPrefix", "/public/")
 	});
 	server.register(import("@fastify/cookie"), {
@@ -40,7 +42,19 @@ async function registerHttpPlugins(server) {
 		parseOptions: config.get("http.cookies.options", {})
 	});
 }
+/**
+* The public folder(s) worth handing to `@fastify/static`, or `undefined`
+* when there is nothing to serve: `false`, or a single path that does not
+* exist. An array is passed through unchanged; `@fastify/static` validates
+* each entry itself.
+*/
+function resolvePublicRoot(publicRoot) {
+	if (publicRoot === false || publicRoot === null || publicRoot === void 0) return;
+	if (Array.isArray(publicRoot)) return publicRoot.length > 0 ? publicRoot : void 0;
+	if (typeof publicRoot === "string") return existsSync(publicRoot) ? publicRoot : void 0;
+	return publicRoot;
+}
 
 //#endregion
-export { registerHttpPlugins };
+export { registerHttpPlugins, resolvePublicRoot };
 //# sourceMappingURL=plugins.mjs.map

package/esm/http/plugins.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.mjs","names":[],"sources":["../../../../../../../core/src/http/plugins.ts"],"sourcesContent":["import fastifyMultipart from \"@fastify/multipart\";\nimport config from \"@mongez/config\";\nimport type { FastifyRequest } from \"fastify\";\nimport { log } from \"@warlock.js/logger\";\nimport { router } from \"../router\";\nimport { rootPath } from \"../utils\";\nimport { buildCorsOptions } from \"./build-cors-options\";\nimport { buildRateLimitOptions } from \"./build-rate-limit-options\";\nimport { parseUrlencodedBody } from \"./parse-urlencoded-body\";\nimport type { FastifyInstance } from \"./server\";\n\nexport async function registerHttpPlugins(server: FastifyInstance) {\n  // 👇🏻 register rate-limit plugin\n  const rateLimitOptions = buildRateLimitOptions(config.get(\"http.rateLimit\"));\n\n  if (rateLimitOptions) {\n    server.register(import(\"@fastify/rate-limit\"), rateLimitOptions);\n  } else if (router.list().some((route) => route.rateLimit)) {\n    log.warn(\n      \"http\",\n      \"rateLimit\",\n      \"Routes declare `rateLimit`, but `http.rateLimit.enabled` is false so the rate-limit plugin is not registered: route rate limits (and their errorMessage) are inactive.\",\n    );\n  }\n\n  // 👇🏻 register cors plugin\n  server.register(import(\"@fastify/cors\"), buildCorsOptions());\n\n  // 👇🏻 import multipart plugin\n  server.register(fastifyMultipart, {\n    attachFieldsToBody: true,\n    limits: {\n      // file size could be up to 10MB\n      fileSize: config.get(\"http.fileUploadLimit\", 10 * 1024 * 1024),\n      // every file part is buffered in memory (`attachFieldsToBody`), so cap the counts too;\n      // hitting any limit makes @fastify/multipart throw an error with statusCode 413\n      files: config.get(\"http.multipart.files\", 10),\n      fields: config.get(\"http.multipart.fields\", 100),\n      fieldSize: config.get(\"http.multipart.fieldSize\", 1024 * 1024),\n    },\n  });\n\n  // 👇🏻 parse application/x-www-form-urlencoded bodies (Apple's OAuth\n  // `form_post` callback, plain HTML forms). Fastify only parses JSON and\n  // text natively, so without this every urlencoded POST is rejected with\n  // FST_ERR_CTP_INVALID_MEDIA_TYPE before it reaches a route.\n  //\n  // No `bodyLimit` option here: Fastify falls back to the server's own\n  // `bodyLimit` (`server.ts`, from `http.bodyLimit`) whenever a content-type\n  // parser doesn't set one — the exact limit JSON bodies are already held to.\n  // Reading `http.bodyLimit` again here would duplicate that lookup and risk\n  // the two silently drifting.\n  server.addContentTypeParser(\n    \"application/x-www-form-urlencoded\",\n    { parseAs: \"string\" },\n    (_request: FastifyRequest, body: string, done: (err: Error | null, body?: any) => void) => {\n      try {\n        done(null, parseUrlencodedBody(body));\n      } catch (error) {\n        done(error as Error, undefined);\n      }\n    },\n  );\n\n  server.register(import(\"@fastify/static\"), {\n    root: config.get(\"storage.publicRoot\", rootPath(\"public\")),\n    prefix: config.get(\"storage.publicPrefix\", \"/public/\"),\n  });\n\n  // 👇🏻 register cookie plugin\n  server.register(import(\"@fastify/cookie\"), {\n    secret: config.get(\"http.cookies.secret\"), // Optional: allow signed cookies\n    parseOptions: config.get(\"http.cookies.options\", {}),\n  });\n}\n"],"mappings":";;;;;;;;;;;;AAWA,eAAsB,oBAAoB,QAAyB;CAEjE,MAAM,mBAAmB,sBAAsB,OAAO,IAAI,gBAAgB,CAAC;CAE3E,IAAI,kBACF,OAAO,SAAS,OAAO,wBAAwB,gBAAgB;MAC1D,IAAI,OAAO,KAAK,CAAC,CAAC,MAAM,UAAU,MAAM,SAAS,GACtD,IAAI,KACF,QACA,aACA,wKACF;CAIF,OAAO,SAAS,OAAO,kBAAkB,iBAAiB,CAAC;CAG3D,OAAO,SAAS,kBAAkB;EAChC,oBAAoB;EACpB,QAAQ;GAEN,UAAU,OAAO,IAAI,wBAAwB,KAAK,OAAO,IAAI;GAG7D,OAAO,OAAO,IAAI,wBAAwB,EAAE;GAC5C,QAAQ,OAAO,IAAI,yBAAyB,GAAG;GAC/C,WAAW,OAAO,IAAI,4BAA4B,OAAO,IAAI;EAC/D;CACF,CAAC;CAYD,OAAO,qBACL,qCACA,EAAE,SAAS,SAAS,IACnB,UAA0B,MAAc,SAAkD;EACzF,IAAI;GACF,KAAK,MAAM,oBAAoB,IAAI,CAAC;EACtC,SAAS,OAAO;GACd,KAAK,OAAgB,MAAS;EAChC;CACF,CACF;CAEA,OAAO,SAAS,OAAO,oBAAoB;EACzC,MAAM,OAAO,IAAI,sBAAsB,SAAS,QAAQ,CAAC;EACzD,QAAQ,OAAO,IAAI,wBAAwB,UAAU;CACvD,CAAC;CAGD,OAAO,SAAS,OAAO,oBAAoB;EACzC,QAAQ,OAAO,IAAI,qBAAqB;EACxC,cAAc,OAAO,IAAI,wBAAwB,CAAC,CAAC;CACrD,CAAC;AACH"}
+{"version":3,"file":"plugins.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/plugins.ts"],"sourcesContent":["import fastifyMultipart from \"@fastify/multipart\";\nimport config from \"@mongez/config\";\nimport { existsSync } from \"node:fs\";\nimport type { FastifyRequest } from \"fastify\";\nimport { log } from \"@warlock.js/logger\";\nimport { router } from \"../router\";\nimport { rootPath } from \"../utils\";\nimport { buildCorsOptions } from \"./build-cors-options\";\nimport { buildRateLimitOptions } from \"./build-rate-limit-options\";\nimport { parseUrlencodedBody } from \"./parse-urlencoded-body\";\nimport type { FastifyInstance } from \"./server\";\n\nexport async function registerHttpPlugins(server: FastifyInstance) {\n  // 👇🏻 register rate-limit plugin\n  const rateLimitOptions = buildRateLimitOptions(config.get(\"http.rateLimit\"));\n\n  if (rateLimitOptions) {\n    server.register(import(\"@fastify/rate-limit\"), rateLimitOptions);\n  } else if (router.list().some((route) => route.rateLimit)) {\n    log.warn(\n      \"http\",\n      \"rateLimit\",\n      \"Routes declare `rateLimit`, but `http.rateLimit.enabled` is false so the rate-limit plugin is not registered: route rate limits (and their errorMessage) are inactive.\",\n    );\n  }\n\n  // 👇🏻 register cors plugin\n  server.register(import(\"@fastify/cors\"), buildCorsOptions());\n\n  // 👇🏻 import multipart plugin\n  server.register(fastifyMultipart, {\n    attachFieldsToBody: true,\n    limits: {\n      // file size could be up to 10MB\n      fileSize: config.get(\"http.fileUploadLimit\", 10 * 1024 * 1024),\n      // every file part is buffered in memory (`attachFieldsToBody`), so cap the counts too;\n      // hitting any limit makes @fastify/multipart throw an error with statusCode 413\n      files: config.get(\"http.multipart.files\", 10),\n      fields: config.get(\"http.multipart.fields\", 100),\n      fieldSize: config.get(\"http.multipart.fieldSize\", 1024 * 1024),\n    },\n  });\n\n  // 👇🏻 parse application/x-www-form-urlencoded bodies (Apple's OAuth\n  // `form_post` callback, plain HTML forms). Fastify only parses JSON and\n  // text natively, so without this every urlencoded POST is rejected with\n  // FST_ERR_CTP_INVALID_MEDIA_TYPE before it reaches a route.\n  //\n  // No `bodyLimit` option here: Fastify falls back to the server's own\n  // `bodyLimit` (`server.ts`, from `http.bodyLimit`) whenever a content-type\n  // parser doesn't set one — the exact limit JSON bodies are already held to.\n  // Reading `http.bodyLimit` again here would duplicate that lookup and risk\n  // the two silently drifting.\n  server.addContentTypeParser(\n    \"application/x-www-form-urlencoded\",\n    { parseAs: \"string\" },\n    (_request: FastifyRequest, body: string, done: (err: Error | null, body?: any) => void) => {\n      try {\n        done(null, parseUrlencodedBody(body));\n      } catch (error) {\n        done(error as Error, undefined);\n      }\n    },\n  );\n\n  // 👇🏻 serve the public folder. Importing `@fastify/static` is not free (its\n  // directory-listing module calls `os.cpus()` at load), so it is only loaded\n  // when there is a folder to serve: `storage.publicRoot: false` turns public\n  // serving off, and a missing folder skips it (WR-027).\n  const publicRoot = resolvePublicRoot(config.get(\"storage.publicRoot\", rootPath(\"public\")));\n\n  if (publicRoot !== undefined) {\n    server.register(import(\"@fastify/static\"), {\n      root: publicRoot,\n      prefix: config.get(\"storage.publicPrefix\", \"/public/\"),\n    });\n  }\n\n  // 👇🏻 register cookie plugin\n  server.register(import(\"@fastify/cookie\"), {\n    secret: config.get(\"http.cookies.secret\"), // Optional: allow signed cookies\n    parseOptions: config.get(\"http.cookies.options\", {}),\n  });\n}\n\n/**\n * The public folder(s) worth handing to `@fastify/static`, or `undefined`\n * when there is nothing to serve: `false`, or a single path that does not\n * exist. An array is passed through unchanged; `@fastify/static` validates\n * each entry itself.\n */\nexport function resolvePublicRoot(publicRoot: unknown): string | string[] | undefined {\n  if (publicRoot === false || publicRoot === null || publicRoot === undefined) {\n    return undefined;\n  }\n\n  if (Array.isArray(publicRoot)) {\n    return publicRoot.length > 0 ? publicRoot : undefined;\n  }\n\n  if (typeof publicRoot === \"string\") {\n    return existsSync(publicRoot) ? publicRoot : undefined;\n  }\n\n  return publicRoot as string;\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,eAAsB,oBAAoB,QAAyB;CAEjE,MAAM,mBAAmB,sBAAsB,OAAO,IAAI,gBAAgB,CAAC;CAE3E,IAAI,kBACF,OAAO,SAAS,OAAO,wBAAwB,gBAAgB;MAC1D,IAAI,OAAO,KAAK,CAAC,CAAC,MAAM,UAAU,MAAM,SAAS,GACtD,IAAI,KACF,QACA,aACA,wKACF;CAIF,OAAO,SAAS,OAAO,kBAAkB,iBAAiB,CAAC;CAG3D,OAAO,SAAS,kBAAkB;EAChC,oBAAoB;EACpB,QAAQ;GAEN,UAAU,OAAO,IAAI,wBAAwB,KAAK,OAAO,IAAI;GAG7D,OAAO,OAAO,IAAI,wBAAwB,EAAE;GAC5C,QAAQ,OAAO,IAAI,yBAAyB,GAAG;GAC/C,WAAW,OAAO,IAAI,4BAA4B,OAAO,IAAI;EAC/D;CACF,CAAC;CAYD,OAAO,qBACL,qCACA,EAAE,SAAS,SAAS,IACnB,UAA0B,MAAc,SAAkD;EACzF,IAAI;GACF,KAAK,MAAM,oBAAoB,IAAI,CAAC;EACtC,SAAS,OAAO;GACd,KAAK,OAAgB,MAAS;EAChC;CACF,CACF;CAMA,MAAM,aAAa,kBAAkB,OAAO,IAAI,sBAAsB,SAAS,QAAQ,CAAC,CAAC;CAEzF,IAAI,eAAe,QACjB,OAAO,SAAS,OAAO,oBAAoB;EACzC,MAAM;EACN,QAAQ,OAAO,IAAI,wBAAwB,UAAU;CACvD,CAAC;CAIH,OAAO,SAAS,OAAO,oBAAoB;EACzC,QAAQ,OAAO,IAAI,qBAAqB;EACxC,cAAc,OAAO,IAAI,wBAAwB,CAAC,CAAC;CACrD,CAAC;AACH;;;;;;;AAQA,SAAgB,kBAAkB,YAAoD;CACpF,IAAI,eAAe,SAAS,eAAe,QAAQ,eAAe,QAChE;CAGF,IAAI,MAAM,QAAQ,UAAU,GAC1B,OAAO,WAAW,SAAS,IAAI,aAAa;CAG9C,IAAI,OAAO,eAAe,UACxB,OAAO,WAAW,UAAU,IAAI,aAAa;CAG/C,OAAO;AACT"}

package/esm/http/port-preflight.d.mts

@@ -1,4 +1,4 @@
-//#region ../core/src/http/port-preflight.d.ts
+//#region ../../packages/core/src/http/port-preflight.d.ts
 /**
  * Raised when a port the framework is about to bind is already taken.
  *

package/esm/http/port-preflight.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"port-preflight.d.mts","names":[],"sources":["../../../../../../../core/src/http/port-preflight.ts"],"mappings":";;AAoBA;;;;;;;;;;;;cAAa,cAAA,SAAuB,KAAK;EAAA,SAKrB,IAAA;EAAA,SACA,IAAA;;WAJF,IAAA;cAGE,IAAA,UACA,IAAA;AAAA;;;AAiBqE;AAmCzF;;;;iBAnCgB,eAAA,CAAgB,IAAA,UAAc,IAAA,YAAoC,OAAO;;;;AAsC/E;;;;;;iBAHY,qBAAA,CACpB,IAAA,UACA,IAAA,YACC,OAAO"}
+{"version":3,"file":"port-preflight.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/port-preflight.ts"],"mappings":";;AAoBA;;;;;;;;;;;;cAAa,cAAA,SAAuB,KAAK;EAAA,SAKrB,IAAA;EAAA,SACA,IAAA;;WAJF,IAAA;cAGE,IAAA,UACA,IAAA;AAAA;;;AAiBqE;AAmCzF;;;;iBAnCgB,eAAA,CAAgB,IAAA,UAAc,IAAA,YAAoC,OAAO;;;;AAsC/E;;;;;;iBAHY,qBAAA,CACpB,IAAA,UACA,IAAA,YACC,OAAO"}

package/esm/http/port-preflight.mjs

@@ -1,6 +1,6 @@
 import { createServer } from "node:net";
 
-//#region ../core/src/http/port-preflight.ts
+//#region ../../packages/core/src/http/port-preflight.ts
 /**
 * Host used when the caller has no configured bind host.
 */

package/esm/http/port-preflight.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"port-preflight.mjs","names":[],"sources":["../../../../../../../core/src/http/port-preflight.ts"],"sourcesContent":["import { createServer } from \"node:net\";\n\n/**\n * Host used when the caller has no configured bind host.\n */\nconst DEFAULT_PROBE_HOST = \"localhost\";\n\n/**\n * Raised when a port the framework is about to bind is already taken.\n *\n * Carries the port and host so a caller can report them without parsing the\n * message, and its message is the developer-facing instruction — the whole\n * point of preflighting is that nobody has to decode a raw `EADDRINUSE`.\n *\n * The message leads with `EADDRINUSE` on purpose: it is the string a\n * developer greps their terminal for, and the one every other Node tool\n * already trained them to recognize as \"something else is on this port\".\n * `code` mirrors it as a property so a caller can branch on it without\n * parsing text, the same way `NodeJS.ErrnoException.code` works.\n */\nexport class PortInUseError extends Error {\n  /** Mirrors Node's own `ErrnoException.code` for this failure. */\n  public readonly code = \"EADDRINUSE\";\n\n  public constructor(\n    public readonly port: number,\n    public readonly host: string,\n  ) {\n    super(\n      `EADDRINUSE: Port ${port} is already in use on ${host}. Stop the dev server (or whatever else is listening on port ${port}) and run again, or start on a free port — e.g. startHttpTestServer({ port: ${port + 1} }).`,\n    );\n\n    this.name = \"PortInUseError\";\n  }\n}\n\n/**\n * Probe a TCP port by attempting a bind and immediately releasing it.\n *\n * @returns `true` when the port is free, `false` when it is taken or the\n * process is not allowed to bind it. Any other bind failure is re-thrown —\n * an unreadable network error must not be reported as \"port in use\".\n */\nexport function isPortAvailable(port: number, host: string = DEFAULT_PROBE_HOST): Promise<boolean> {\n  return new Promise((resolve, reject) => {\n    const probe = createServer();\n\n    probe.unref();\n\n    probe.once(\"error\", (error: NodeJS.ErrnoException) => {\n      if (error.code === \"EADDRINUSE\" || error.code === \"EACCES\") {\n        resolve(false);\n\n        return;\n      }\n\n      reject(error);\n    });\n\n    probe.once(\"listening\", () => {\n      probe.close(() => resolve(true));\n    });\n\n    // `exclusive` refuses a shared bind, which is what makes the probe honest:\n    // with load balancing enabled a second bind on a served port can succeed.\n    probe.listen({ port, host, exclusive: true });\n  });\n}\n\n/**\n * Assert a port is free before something binds it.\n *\n * Run this ahead of the actual `listen()` so a collision surfaces as an\n * instruction the developer can act on, instead of a raw `EADDRINUSE` thrown\n * from deep inside the HTTP stack.\n *\n * @throws {PortInUseError} when the port is taken.\n */\nexport async function assertPortIsAvailable(\n  port: number,\n  host: string = DEFAULT_PROBE_HOST,\n): Promise<void> {\n  const available = await isPortAvailable(port, host);\n\n  if (!available) {\n    throw new PortInUseError(port, host);\n  }\n}\n"],"mappings":";;;;;;AAKA,MAAM,qBAAqB;;;;;;;;;;;;;;AAe3B,IAAa,iBAAb,cAAoC,MAAM;CAIxC,AAAO,YACL,AAAgB,MAChB,AAAgB,MAChB;EACA,MACE,oBAAoB,KAAK,wBAAwB,KAAK,+DAA+D,KAAK,8EAA8E,OAAO,EAAE,KACnN;EALgB;EACA;cAJK;EAUrB,KAAK,OAAO;CACd;AACF;;;;;;;;AASA,SAAgB,gBAAgB,MAAc,OAAe,oBAAsC;CACjG,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,QAAQ,aAAa;EAE3B,MAAM,MAAM;EAEZ,MAAM,KAAK,UAAU,UAAiC;GACpD,IAAI,MAAM,SAAS,gBAAgB,MAAM,SAAS,UAAU;IAC1D,QAAQ,KAAK;IAEb;GACF;GAEA,OAAO,KAAK;EACd,CAAC;EAED,MAAM,KAAK,mBAAmB;GAC5B,MAAM,YAAY,QAAQ,IAAI,CAAC;EACjC,CAAC;EAID,MAAM,OAAO;GAAE;GAAM;GAAM,WAAW;EAAK,CAAC;CAC9C,CAAC;AACH;;;;;;;;;;AAWA,eAAsB,sBACpB,MACA,OAAe,oBACA;CAGf,IAAI,CAAC,MAFmB,gBAAgB,MAAM,IAAI,GAGhD,MAAM,IAAI,eAAe,MAAM,IAAI;AAEvC"}
+{"version":3,"file":"port-preflight.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/port-preflight.ts"],"sourcesContent":["import { createServer } from \"node:net\";\n\n/**\n * Host used when the caller has no configured bind host.\n */\nconst DEFAULT_PROBE_HOST = \"localhost\";\n\n/**\n * Raised when a port the framework is about to bind is already taken.\n *\n * Carries the port and host so a caller can report them without parsing the\n * message, and its message is the developer-facing instruction — the whole\n * point of preflighting is that nobody has to decode a raw `EADDRINUSE`.\n *\n * The message leads with `EADDRINUSE` on purpose: it is the string a\n * developer greps their terminal for, and the one every other Node tool\n * already trained them to recognize as \"something else is on this port\".\n * `code` mirrors it as a property so a caller can branch on it without\n * parsing text, the same way `NodeJS.ErrnoException.code` works.\n */\nexport class PortInUseError extends Error {\n  /** Mirrors Node's own `ErrnoException.code` for this failure. */\n  public readonly code = \"EADDRINUSE\";\n\n  public constructor(\n    public readonly port: number,\n    public readonly host: string,\n  ) {\n    super(\n      `EADDRINUSE: Port ${port} is already in use on ${host}. Stop the dev server (or whatever else is listening on port ${port}) and run again, or start on a free port — e.g. startHttpTestServer({ port: ${port + 1} }).`,\n    );\n\n    this.name = \"PortInUseError\";\n  }\n}\n\n/**\n * Probe a TCP port by attempting a bind and immediately releasing it.\n *\n * @returns `true` when the port is free, `false` when it is taken or the\n * process is not allowed to bind it. Any other bind failure is re-thrown —\n * an unreadable network error must not be reported as \"port in use\".\n */\nexport function isPortAvailable(port: number, host: string = DEFAULT_PROBE_HOST): Promise<boolean> {\n  return new Promise((resolve, reject) => {\n    const probe = createServer();\n\n    probe.unref();\n\n    probe.once(\"error\", (error: NodeJS.ErrnoException) => {\n      if (error.code === \"EADDRINUSE\" || error.code === \"EACCES\") {\n        resolve(false);\n\n        return;\n      }\n\n      reject(error);\n    });\n\n    probe.once(\"listening\", () => {\n      probe.close(() => resolve(true));\n    });\n\n    // `exclusive` refuses a shared bind, which is what makes the probe honest:\n    // with load balancing enabled a second bind on a served port can succeed.\n    probe.listen({ port, host, exclusive: true });\n  });\n}\n\n/**\n * Assert a port is free before something binds it.\n *\n * Run this ahead of the actual `listen()` so a collision surfaces as an\n * instruction the developer can act on, instead of a raw `EADDRINUSE` thrown\n * from deep inside the HTTP stack.\n *\n * @throws {PortInUseError} when the port is taken.\n */\nexport async function assertPortIsAvailable(\n  port: number,\n  host: string = DEFAULT_PROBE_HOST,\n): Promise<void> {\n  const available = await isPortAvailable(port, host);\n\n  if (!available) {\n    throw new PortInUseError(port, host);\n  }\n}\n"],"mappings":";;;;;;AAKA,MAAM,qBAAqB;;;;;;;;;;;;;;AAe3B,IAAa,iBAAb,cAAoC,MAAM;CAIxC,AAAO,YACL,AAAgB,MAChB,AAAgB,MAChB;EACA,MACE,oBAAoB,KAAK,wBAAwB,KAAK,+DAA+D,KAAK,8EAA8E,OAAO,EAAE,KACnN;EALgB;EACA;cAJK;EAUrB,KAAK,OAAO;CACd;AACF;;;;;;;;AASA,SAAgB,gBAAgB,MAAc,OAAe,oBAAsC;CACjG,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,QAAQ,aAAa;EAE3B,MAAM,MAAM;EAEZ,MAAM,KAAK,UAAU,UAAiC;GACpD,IAAI,MAAM,SAAS,gBAAgB,MAAM,SAAS,UAAU;IAC1D,QAAQ,KAAK;IAEb;GACF;GAEA,OAAO,KAAK;EACd,CAAC;EAED,MAAM,KAAK,mBAAmB;GAC5B,MAAM,YAAY,QAAQ,IAAI,CAAC;EACjC,CAAC;EAID,MAAM,OAAO;GAAE;GAAM;GAAM,WAAW;EAAK,CAAC;CAC9C,CAAC;AACH;;;;;;;;;;AAWA,eAAsB,sBACpB,MACA,OAAe,oBACA;CAGf,IAAI,CAAC,MAFmB,gBAAgB,MAAM,IAAI,GAGhD,MAAM,IAAI,eAAe,MAAM,IAAI;AAEvC"}

package/esm/http/rate-limit-cache-store.mjs

@@ -0,0 +1,155 @@
+import { log } from "@warlock.js/logger";
+import { createHash } from "node:crypto";
+import { cache } from "@warlock.js/cache";
+
+//#region ../../packages/core/src/http/rate-limit-cache-store.ts
+/**
+* Rate-limit counting shared through `@warlock.js/cache`, so every process
+* that uses the same cache driver (Redis, Postgres) counts into the same
+* buckets. With a memory driver (`memory`, `lru`, `memoryExtended`) the
+* counts stay in the process, like the in-memory limiter.
+*
+* Windows are fixed and aligned to the clock: a 60 s window resets on the
+* minute, whichever process saw the first request. Each window has its own
+* key, created atomically with a TTL of two windows and incremented with the
+* driver's atomic increment, so a key cannot expire while its window counts.
+*
+* Two drivers are refused, with {@link UnsupportedRateLimitDriverError}:
+*
+* - `null` stores nothing, so every request would count as the first and the
+*   limit would never trip.
+* - `file` has no expiry sweeper, so every past window would stay on disk
+*   forever, and its increment is only serialized within one process, so
+*   workers sharing the directory would lose counts.
+*/
+const KEY_PREFIX = "rate-limit";
+/**
+* Cache drivers that cannot back a shared limiter (see the module comment).
+*/
+const UNSUPPORTED_DRIVERS = new Set(["null", "file"]);
+/**
+* Thrown when `store: "cache"` runs on a cache driver that cannot count.
+*/
+var UnsupportedRateLimitDriverError = class extends Error {
+	constructor(driverName) {
+		super(`Rate limiting with store: "cache" cannot use the "${driverName}" cache driver: ` + (driverName === "null" ? "it stores nothing, so the limit would never trip. " : "it never removes expired windows and its increment is not shared between processes. ") + "Use redis or pg (or a memory driver for a single process), or set store: \"memory\".");
+		this.name = "UnsupportedRateLimitDriverError";
+	}
+};
+function assertSupportedDriver() {
+	const driverName = cache.currentDriver?.name;
+	if (driverName && UNSUPPORTED_DRIVERS.has(driverName)) throw new UnsupportedRateLimitDriverError(driverName);
+}
+/**
+* Hash used for group keys and route namespaces before they reach the cache.
+*/
+function shortHash(value) {
+	return createHash("sha256").update(value).digest("hex").slice(0, 32);
+}
+/**
+* The group key (an IP, a user id, whatever `keyGenerator` returned) is
+* hashed before it reaches the cache: cache drivers log their keys, and a raw
+* IP or email in a key is personal data in a log line.
+*
+* The namespace (it carries a route path) is hashed as well: flattening
+* `/users/:id` and `/users/id` to one safe string merged their counters, and
+* the file driver would turn `/` into directories. A readable, flattened
+* prefix stays in front of the hash for debugging.
+*/
+function windowKey(namespace, group, windowIndex) {
+	return `${KEY_PREFIX}.${namespace.replace(/[^A-Za-z0-9_-]+/g, "_").slice(0, 40)}-${shortHash(namespace).slice(0, 16)}.${shortHash(group)}.${windowIndex}`;
+}
+/**
+* Count one request for `group` in the current window.
+*
+* @returns the count so far in this window and when the window resets (epoch ms)
+* @throws {UnsupportedRateLimitDriverError} on the `null` or `file` driver
+*/
+async function incrementSharedRateLimit(namespace, group, windowMs, now = Date.now()) {
+	assertSupportedDriver();
+	const windowIndex = Math.floor(now / windowMs);
+	const key = windowKey(namespace, group, windowIndex);
+	const ttlSeconds = Math.max(1, Math.ceil(2 * windowMs / 1e3));
+	await cache.set(key, 0, {
+		ttl: ttlSeconds,
+		onConflict: "create"
+	});
+	return {
+		current: await cache.increment(key),
+		resetAt: (windowIndex + 1) * windowMs
+	};
+}
+/**
+* Read the count for `group` in the current window without counting a request
+*/
+async function readSharedRateLimit(namespace, group, windowMs, now = Date.now()) {
+	assertSupportedDriver();
+	const windowIndex = Math.floor(now / windowMs);
+	const value = await cache.get(windowKey(namespace, group, windowIndex));
+	return {
+		current: typeof value === "number" ? value : 0,
+		resetAt: (windowIndex + 1) * windowMs
+	};
+}
+/**
+* How often a failing shared store is reported. A cache outage fails every
+* request, so logging each one would flood the log.
+*/
+const ERROR_LOG_INTERVAL_MS = 6e4;
+let lastErrorLogAt = 0;
+/**
+* Log a shared rate-limit store failure, at most once per minute.
+*/
+function logSharedRateLimitError(error, now = Date.now()) {
+	if (now - lastErrorLogAt < ERROR_LOG_INTERVAL_MS) return;
+	lastErrorLogAt = now;
+	log.error("http", "rate-limit", error);
+}
+/**
+* `fastify.rateLimit()` hooks have no route; told apart by creation order,
+* which matches across processes running the same code.
+*/
+let nextHookNamespace = 0;
+/**
+* `@fastify/rate-limit` store backed by `@warlock.js/cache`. Selected with
+* `http.rateLimit.store: "cache"`; each route with its own `rateLimit` gets
+* its own namespace through `child()`.
+*
+* A failure (cache outage, unsupported driver) is logged at most once a
+* minute and passed to the plugin, which lets the request through because
+* Warlock registers it with `skipOnError: true` for this store.
+*/
+var CacheRateLimitStore = class CacheRateLimitStore {
+	constructor(_options, namespace = "global") {
+		this.namespace = namespace;
+	}
+	incr(key, callback, timeWindow) {
+		incrementSharedRateLimit(this.namespace, key, timeWindow).then(({ current, resetAt }) => callback(null, {
+			current,
+			ttl: Math.max(0, resetAt - Date.now())
+		}), (error) => {
+			logSharedRateLimitError(error);
+			callback(error instanceof Error ? error : new Error(String(error)));
+		});
+	}
+	read(key, callback, timeWindow) {
+		readSharedRateLimit(this.namespace, key, timeWindow).then(({ current, resetAt }) => callback(null, {
+			current,
+			ttl: current === 0 ? 0 : Math.max(0, resetAt - Date.now())
+		}), (error) => {
+			logSharedRateLimitError(error);
+			callback(error instanceof Error ? error : new Error(String(error)));
+		});
+	}
+	child(routeOptions) {
+		const routeInfo = routeOptions.routeInfo ?? {};
+		const method = Array.isArray(routeInfo.method) ? routeInfo.method.join(",") : String(routeInfo.method ?? "");
+		const url = routeInfo.url ?? routeInfo.path ?? "";
+		if (!method && !url) return new CacheRateLimitStore(void 0, `hook.${nextHookNamespace++}`);
+		return new CacheRateLimitStore(void 0, `route.${method} ${url}`);
+	}
+};
+
+//#endregion
+export { CacheRateLimitStore, incrementSharedRateLimit, logSharedRateLimitError };
+//# sourceMappingURL=rate-limit-cache-store.mjs.map

package/esm/http/rate-limit-cache-store.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-cache-store.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/rate-limit-cache-store.ts"],"sourcesContent":["import type { FastifyRateLimitOptions, FastifyRateLimitStore } from \"@fastify/rate-limit\";\nimport { cache } from \"@warlock.js/cache\";\nimport { log } from \"@warlock.js/logger\";\nimport { createHash } from \"node:crypto\";\n\n/**\n * Rate-limit counting shared through `@warlock.js/cache`, so every process\n * that uses the same cache driver (Redis, Postgres) counts into the same\n * buckets. With a memory driver (`memory`, `lru`, `memoryExtended`) the\n * counts stay in the process, like the in-memory limiter.\n *\n * Windows are fixed and aligned to the clock: a 60 s window resets on the\n * minute, whichever process saw the first request. Each window has its own\n * key, created atomically with a TTL of two windows and incremented with the\n * driver's atomic increment, so a key cannot expire while its window counts.\n *\n * Two drivers are refused, with {@link UnsupportedRateLimitDriverError}:\n *\n * - `null` stores nothing, so every request would count as the first and the\n *   limit would never trip.\n * - `file` has no expiry sweeper, so every past window would stay on disk\n *   forever, and its increment is only serialized within one process, so\n *   workers sharing the directory would lose counts.\n */\n\nconst KEY_PREFIX = \"rate-limit\";\n\n/**\n * Cache drivers that cannot back a shared limiter (see the module comment).\n */\nconst UNSUPPORTED_DRIVERS = new Set([\"null\", \"file\"]);\n\n/**\n * Thrown when `store: \"cache\"` runs on a cache driver that cannot count.\n */\nexport class UnsupportedRateLimitDriverError extends Error {\n  public constructor(driverName: string) {\n    super(\n      `Rate limiting with store: \"cache\" cannot use the \"${driverName}\" cache driver: ` +\n        (driverName === \"null\"\n          ? \"it stores nothing, so the limit would never trip. \"\n          : \"it never removes expired windows and its increment is not shared between processes. \") +\n        'Use redis or pg (or a memory driver for a single process), or set store: \"memory\".',\n    );\n\n    this.name = \"UnsupportedRateLimitDriverError\";\n  }\n}\n\nfunction assertSupportedDriver(): void {\n  const driverName = cache.currentDriver?.name;\n\n  if (driverName && UNSUPPORTED_DRIVERS.has(driverName)) {\n    throw new UnsupportedRateLimitDriverError(driverName);\n  }\n}\n\n/**\n * Hash used for group keys and route namespaces before they reach the cache.\n */\nfunction shortHash(value: string): string {\n  return createHash(\"sha256\").update(value).digest(\"hex\").slice(0, 32);\n}\n\n/**\n * The group key (an IP, a user id, whatever `keyGenerator` returned) is\n * hashed before it reaches the cache: cache drivers log their keys, and a raw\n * IP or email in a key is personal data in a log line.\n *\n * The namespace (it carries a route path) is hashed as well: flattening\n * `/users/:id` and `/users/id` to one safe string merged their counters, and\n * the file driver would turn `/` into directories. A readable, flattened\n * prefix stays in front of the hash for debugging.\n */\nfunction windowKey(namespace: string, group: string, windowIndex: number): string {\n  const readable = namespace.replace(/[^A-Za-z0-9_-]+/g, \"_\").slice(0, 40);\n\n  return `${KEY_PREFIX}.${readable}-${shortHash(namespace).slice(0, 16)}.${shortHash(group)}.${windowIndex}`;\n}\n\n/**\n * Count one request for `group` in the current window.\n *\n * @returns the count so far in this window and when the window resets (epoch ms)\n * @throws {UnsupportedRateLimitDriverError} on the `null` or `file` driver\n */\nexport async function incrementSharedRateLimit(\n  namespace: string,\n  group: string,\n  windowMs: number,\n  now: number = Date.now(),\n): Promise<{ current: number; resetAt: number }> {\n  assertSupportedDriver();\n\n  const windowIndex = Math.floor(now / windowMs);\n  const key = windowKey(namespace, group, windowIndex);\n  const ttlSeconds = Math.max(1, Math.ceil((2 * windowMs) / 1000));\n\n  await cache.set(key, 0, { ttl: ttlSeconds, onConflict: \"create\" });\n\n  const current = await cache.increment(key);\n\n  return { current, resetAt: (windowIndex + 1) * windowMs };\n}\n\n/**\n * Read the count for `group` in the current window without counting a request\n */\nexport async function readSharedRateLimit(\n  namespace: string,\n  group: string,\n  windowMs: number,\n  now: number = Date.now(),\n): Promise<{ current: number; resetAt: number }> {\n  assertSupportedDriver();\n\n  const windowIndex = Math.floor(now / windowMs);\n  const value = await cache.get(windowKey(namespace, group, windowIndex));\n\n  return {\n    current: typeof value === \"number\" ? value : 0,\n    resetAt: (windowIndex + 1) * windowMs,\n  };\n}\n\n/**\n * How often a failing shared store is reported. A cache outage fails every\n * request, so logging each one would flood the log.\n */\nconst ERROR_LOG_INTERVAL_MS = 60_000;\n\nlet lastErrorLogAt = 0;\n\n/**\n * Log a shared rate-limit store failure, at most once per minute.\n */\nexport function logSharedRateLimitError(error: unknown, now: number = Date.now()): void {\n  if (now - lastErrorLogAt < ERROR_LOG_INTERVAL_MS) return;\n\n  lastErrorLogAt = now;\n  log.error(\"http\", \"rate-limit\", error);\n}\n\n/**\n * Forget when the last store error was logged (tests).\n */\nexport function resetSharedRateLimitErrorLog(): void {\n  lastErrorLogAt = 0;\n}\n\n/**\n * Route data `@fastify/rate-limit` passes to `child()`: the route's options\n * under `routeInfo` (`fastify.rateLimit()` hooks pass an empty one).\n */\ntype ChildRouteOptions = {\n  routeInfo?: { method?: unknown; url?: string; path?: string };\n};\n\n/**\n * `fastify.rateLimit()` hooks have no route; told apart by creation order,\n * which matches across processes running the same code.\n */\nlet nextHookNamespace = 0;\n\n/**\n * `@fastify/rate-limit` store backed by `@warlock.js/cache`. Selected with\n * `http.rateLimit.store: \"cache\"`; each route with its own `rateLimit` gets\n * its own namespace through `child()`.\n *\n * A failure (cache outage, unsupported driver) is logged at most once a\n * minute and passed to the plugin, which lets the request through because\n * Warlock registers it with `skipOnError: true` for this store.\n */\nexport class CacheRateLimitStore implements FastifyRateLimitStore {\n  public constructor(\n    _options?: FastifyRateLimitOptions,\n    protected readonly namespace: string = \"global\",\n  ) {}\n\n  public incr(\n    key: string,\n    callback: (error: Error | null, result?: { current: number; ttl: number }) => void,\n    timeWindow: number,\n  ): void {\n    incrementSharedRateLimit(this.namespace, key, timeWindow).then(\n      ({ current, resetAt }) => callback(null, { current, ttl: Math.max(0, resetAt - Date.now()) }),\n      (error: unknown) => {\n        logSharedRateLimitError(error);\n        callback(error instanceof Error ? error : new Error(String(error)));\n      },\n    );\n  }\n\n  public read(\n    key: string,\n    callback: (error: Error | null, result?: { current: number; ttl: number }) => void,\n    timeWindow: number,\n  ): void {\n    readSharedRateLimit(this.namespace, key, timeWindow).then(\n      ({ current, resetAt }) =>\n        callback(null, { current, ttl: current === 0 ? 0 : Math.max(0, resetAt - Date.now()) }),\n      (error: unknown) => {\n        logSharedRateLimitError(error);\n        callback(error instanceof Error ? error : new Error(String(error)));\n      },\n    );\n  }\n\n  public child(routeOptions: Parameters<FastifyRateLimitStore[\"child\"]>[0]): FastifyRateLimitStore {\n    // The plugin's declared type names the route options directly, but at\n    // runtime (11.x) it passes them merged under `routeInfo`.\n    const routeInfo = (routeOptions as unknown as ChildRouteOptions).routeInfo ?? {};\n    const method = Array.isArray(routeInfo.method)\n      ? routeInfo.method.join(\",\")\n      : String(routeInfo.method ?? \"\");\n    const url = routeInfo.url ?? routeInfo.path ?? \"\";\n\n    if (!method && !url) {\n      return new CacheRateLimitStore(undefined, `hook.${nextHookNamespace++}`);\n    }\n\n    return new CacheRateLimitStore(undefined, `route.${method} ${url}`);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAM,aAAa;;;;AAKnB,MAAM,sBAAsB,IAAI,IAAI,CAAC,QAAQ,MAAM,CAAC;;;;AAKpD,IAAa,kCAAb,cAAqD,MAAM;CACzD,AAAO,YAAY,YAAoB;EACrC,MACE,qDAAqD,WAAW,qBAC7D,eAAe,SACZ,uDACA,0FACJ,sFACJ;EAEA,KAAK,OAAO;CACd;AACF;AAEA,SAAS,wBAA8B;CACrC,MAAM,aAAa,MAAM,eAAe;CAExC,IAAI,cAAc,oBAAoB,IAAI,UAAU,GAClD,MAAM,IAAI,gCAAgC,UAAU;AAExD;;;;AAKA,SAAS,UAAU,OAAuB;CACxC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AACrE;;;;;;;;;;;AAYA,SAAS,UAAU,WAAmB,OAAe,aAA6B;CAGhF,OAAO,GAAG,WAAW,GAFJ,UAAU,QAAQ,oBAAoB,GAAG,CAAC,CAAC,MAAM,GAAG,EAEtC,EAAE,GAAG,UAAU,SAAS,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,GAAG,UAAU,KAAK,EAAE,GAAG;AAC/F;;;;;;;AAQA,eAAsB,yBACpB,WACA,OACA,UACA,MAAc,KAAK,IAAI,GACwB;CAC/C,sBAAsB;CAEtB,MAAM,cAAc,KAAK,MAAM,MAAM,QAAQ;CAC7C,MAAM,MAAM,UAAU,WAAW,OAAO,WAAW;CACnD,MAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAM,IAAI,WAAY,GAAI,CAAC;CAE/D,MAAM,MAAM,IAAI,KAAK,GAAG;EAAE,KAAK;EAAY,YAAY;CAAS,CAAC;CAIjE,OAAO;EAAE,eAFa,MAAM,UAAU,GAAG;EAEvB,UAAU,cAAc,KAAK;CAAS;AAC1D;;;;AAKA,eAAsB,oBACpB,WACA,OACA,UACA,MAAc,KAAK,IAAI,GACwB;CAC/C,sBAAsB;CAEtB,MAAM,cAAc,KAAK,MAAM,MAAM,QAAQ;CAC7C,MAAM,QAAQ,MAAM,MAAM,IAAI,UAAU,WAAW,OAAO,WAAW,CAAC;CAEtE,OAAO;EACL,SAAS,OAAO,UAAU,WAAW,QAAQ;EAC7C,UAAU,cAAc,KAAK;CAC/B;AACF;;;;;AAMA,MAAM,wBAAwB;AAE9B,IAAI,iBAAiB;;;;AAKrB,SAAgB,wBAAwB,OAAgB,MAAc,KAAK,IAAI,GAAS;CACtF,IAAI,MAAM,iBAAiB,uBAAuB;CAElD,iBAAiB;CACjB,IAAI,MAAM,QAAQ,cAAc,KAAK;AACvC;;;;;AAqBA,IAAI,oBAAoB;;;;;;;;;;AAWxB,IAAa,sBAAb,MAAa,oBAAqD;CAChE,AAAO,YACL,UACA,AAAmB,YAAoB,UACvC;EADmB;CAClB;CAEH,AAAO,KACL,KACA,UACA,YACM;EACN,yBAAyB,KAAK,WAAW,KAAK,UAAU,CAAC,CAAC,MACvD,EAAE,SAAS,cAAc,SAAS,MAAM;GAAE;GAAS,KAAK,KAAK,IAAI,GAAG,UAAU,KAAK,IAAI,CAAC;EAAE,CAAC,IAC3F,UAAmB;GAClB,wBAAwB,KAAK;GAC7B,SAAS,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;EACpE,CACF;CACF;CAEA,AAAO,KACL,KACA,UACA,YACM;EACN,oBAAoB,KAAK,WAAW,KAAK,UAAU,CAAC,CAAC,MAClD,EAAE,SAAS,cACV,SAAS,MAAM;GAAE;GAAS,KAAK,YAAY,IAAI,IAAI,KAAK,IAAI,GAAG,UAAU,KAAK,IAAI,CAAC;EAAE,CAAC,IACvF,UAAmB;GAClB,wBAAwB,KAAK;GAC7B,SAAS,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;EACpE,CACF;CACF;CAEA,AAAO,MAAM,cAAoF;EAG/F,MAAM,YAAa,aAA8C,aAAa,CAAC;EAC/E,MAAM,SAAS,MAAM,QAAQ,UAAU,MAAM,IACzC,UAAU,OAAO,KAAK,GAAG,IACzB,OAAO,UAAU,UAAU,EAAE;EACjC,MAAM,MAAM,UAAU,OAAO,UAAU,QAAQ;EAE/C,IAAI,CAAC,UAAU,CAAC,KACd,OAAO,IAAI,oBAAoB,QAAW,QAAQ,qBAAqB;EAGzE,OAAO,IAAI,oBAAoB,QAAW,SAAS,OAAO,GAAG,KAAK;CACpE;AACF"}

package/esm/http/ready-report.d.mts

@@ -1,4 +1,4 @@
-//#region ../core/src/http/ready-report.d.ts
+//#region ../../packages/core/src/http/ready-report.d.ts
 /**
  * What the HTTP connector learned at the moment it finished binding.
  *

package/esm/http/ready-report.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"ready-report.d.mts","names":[],"sources":["../../../../../../../core/src/http/ready-report.ts"],"mappings":";;AAiCA;;;;;;;;;;;AAYW;AAQX;;;;AAAwD;AASxD;;;;AAAqD;AAKrD;;;;AAAoC;;;;;KAlCxB,eAAA;2EAEV,YAAA;EAEA,GAAA;EAEA,YAAA;EAEA,IAAA;EAEA,UAAA;EAEA,SAAA;AAAA;;;;iBAQc,kBAAA,CAAmB,IAAqB,EAAf,eAAe;;;;;;iBASxC,kBAAA,IAAsB,eAAe;;iBAKrC,oBAAA"}
+{"version":3,"file":"ready-report.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/ready-report.ts"],"mappings":";;AAiCA;;;;;;;;;;;AAYW;AAQX;;;;AAAwD;AASxD;;;;AAAqD;AAKrD;;;;AAAoC;;;;;KAlCxB,eAAA;2EAEV,YAAA;EAEA,GAAA;EAEA,YAAA;EAEA,IAAA;EAEA,UAAA;EAEA,SAAA;AAAA;;;;iBAQc,kBAAA,CAAmB,IAAqB,EAAf,eAAe;;;;;;iBASxC,kBAAA,IAAsB,eAAe;;iBAKrC,oBAAA"}

package/esm/http/ready-report.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/http/ready-report.ts
+//#region ../../packages/core/src/http/ready-report.ts
 let report;
 /**
 * @internal Called by `HttpConnector.start()` right after a successful listen.