@warlock.js/core 5.30.0 → 5.32.0

package/esm/http/middleware/utils/parse-size.mjs

@@ -13,8 +13,8 @@
 const UNITS = {
 	b: 1,
 	kb: 1024,
-	mb: 1024 * 1024,
-	gb: 1024 * 1024 * 1024
+	mb: 1048576,
+	gb: 1073741824
 };
 function parseSize(value) {
 	if (typeof value === "number") return value;

package/esm/http/middleware/utils/parse-size.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"parse-size.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/http/middleware/utils/parse-size.ts"],"sourcesContent":["/**\n * Parse a human-readable size string into bytes.\n *\n * Accepts `\"2mb\"`, `\"500kb\"`, `\"1.5gb\"`, `\"1024\"`, `\"1024b\"`, etc. Case-insensitive.\n * Numeric input is returned untouched (already bytes).\n *\n * @example\n * parseSize(\"2mb\");     // 2_097_152\n * parseSize(\"500kb\");   // 512_000\n * parseSize(4096);      // 4096\n */\nconst UNITS: Record<string, number> = {\n  b: 1,\n  kb: 1024,\n  mb: 1024 * 1024,\n  gb: 1024 * 1024 * 1024,\n};\n\nexport function parseSize(value: string | number): number {\n  if (typeof value === \"number\") {\n    return value;\n  }\n\n  const match = /^(\\d+(?:\\.\\d+)?)\\s*(b|kb|mb|gb)?$/i.exec(value.trim());\n\n  if (!match) {\n    throw new Error(`Invalid size value: ${value}`);\n  }\n\n  const [, amount, rawUnit = \"b\"] = match;\n  const unit = rawUnit.toLowerCase();\n  const multiplier = UNITS[unit];\n\n  if (!multiplier) {\n    throw new Error(`Unknown size unit: ${unit}`);\n  }\n\n  return Math.floor(Number(amount) * multiplier);\n}\n"],"mappings":";;;;;;;;;;;;AAWA,MAAM,QAAgC;CACpC,GAAG;CACH,IAAI;CACJ,IAAI,OAAO;CACX,IAAI,OAAO,OAAO;AACpB;AAEA,SAAgB,UAAU,OAAgC;CACxD,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,MAAM,QAAQ,qCAAqC,KAAK,MAAM,KAAK,CAAC;CAEpE,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,uBAAuB,OAAO;CAGhD,MAAM,GAAG,QAAQ,UAAU,OAAO;CAClC,MAAM,OAAO,QAAQ,YAAY;CACjC,MAAM,aAAa,MAAM;CAEzB,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,sBAAsB,MAAM;CAG9C,OAAO,KAAK,MAAM,OAAO,MAAM,IAAI,UAAU;AAC/C"}
+{"version":3,"file":"parse-size.mjs","names":[],"sources":["../../../../../../../../../../packages/core/src/http/middleware/utils/parse-size.ts"],"sourcesContent":["/**\n * Parse a human-readable size string into bytes.\n *\n * Accepts `\"2mb\"`, `\"500kb\"`, `\"1.5gb\"`, `\"1024\"`, `\"1024b\"`, etc. Case-insensitive.\n * Numeric input is returned untouched (already bytes).\n *\n * @example\n * parseSize(\"2mb\");     // 2_097_152\n * parseSize(\"500kb\");   // 512_000\n * parseSize(4096);      // 4096\n */\nconst UNITS: Record<string, number> = {\n  b: 1,\n  kb: 1024,\n  mb: 1024 * 1024,\n  gb: 1024 * 1024 * 1024,\n};\n\nexport function parseSize(value: string | number): number {\n  if (typeof value === \"number\") {\n    return value;\n  }\n\n  const match = /^(\\d+(?:\\.\\d+)?)\\s*(b|kb|mb|gb)?$/i.exec(value.trim());\n\n  if (!match) {\n    throw new Error(`Invalid size value: ${value}`);\n  }\n\n  const [, amount, rawUnit = \"b\"] = match;\n  const unit = rawUnit.toLowerCase();\n  const multiplier = UNITS[unit];\n\n  if (!multiplier) {\n    throw new Error(`Unknown size unit: ${unit}`);\n  }\n\n  return Math.floor(Number(amount) * multiplier);\n}\n"],"mappings":";;;;;;;;;;;;AAWA,MAAM,QAAgC;CACpC,GAAG;CACH,IAAI;CACJ,IAAI;CACJ,IAAI;AACN;AAEA,SAAgB,UAAU,OAAgC;CACxD,IAAI,OAAO,UAAU,UACnB,OAAO;CAGT,MAAM,QAAQ,qCAAqC,KAAK,MAAM,KAAK,CAAC;CAEpE,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,uBAAuB,OAAO;CAGhD,MAAM,GAAG,QAAQ,UAAU,OAAO;CAClC,MAAM,OAAO,QAAQ,YAAY;CACjC,MAAM,aAAa,MAAM;CAEzB,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,sBAAsB,MAAM;CAG9C,OAAO,KAAK,MAAM,OAAO,MAAM,IAAI,UAAU;AAC/C"}

package/esm/http/plugins.d.mts

@@ -1,14 +1,12 @@
 import { FastifyInstance } from "./server.mjs";
-
 //#region ../../packages/core/src/http/plugins.d.ts
-declare function registerHttpPlugins(server: FastifyInstance): Promise<void>;
+export declare function registerHttpPlugins(server: FastifyInstance): Promise<void>;
 /**
  * The public folder(s) worth handing to `@fastify/static`, or `undefined`
  * when there is nothing to serve: `false`, or a single path that does not
  * exist. An array is passed through unchanged; `@fastify/static` validates
  * each entry itself.
  */
-declare function resolvePublicRoot(publicRoot: unknown): string | string[] | undefined;
+export declare function resolvePublicRoot(publicRoot: unknown): string | string[] | undefined;
 //#endregion
-export { registerHttpPlugins, resolvePublicRoot };
 //# sourceMappingURL=plugins.d.mts.map

package/esm/http/plugins.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/plugins.ts"],"mappings":";;;iBAYsB,mBAAA,CAAoB,MAAA,EAAQ,eAAA,GAAe,OAAA;;AAAjE;;;;;iBA+EgB,iBAAA,CAAkB,UAAmB"}
+{"version":3,"file":"plugins.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/plugins.ts"],"mappings":";;wBAcsB,oBAAoB,QAAQ,kBAAe;;;;;;;wBAuFjD,kBAAkB"}

package/esm/http/plugins.mjs

@@ -1,28 +1,30 @@
 import { rootPath } from "../utils/paths.mjs";
 import "../utils/index.mjs";
+import { registerLazyStatic } from "./lazy-static.mjs";
 import { buildCorsOptions } from "./build-cors-options.mjs";
+import { resolveStaticRateLimit } from "../router/resolve-route-rate-limit.mjs";
 import { router } from "../router/router.mjs";
 import "../router/index.mjs";
 import { buildRateLimitOptions } from "./build-rate-limit-options.mjs";
 import { parseUrlencodedBody } from "./parse-urlencoded-body.mjs";
-import config from "@mongez/config";
+import baseConfig from "@mongez/config";
 import { log } from "@warlock.js/logger";
-import fastifyMultipart from "@fastify/multipart";
 import { existsSync } from "node:fs";
+import fastifyMultipart from "@fastify/multipart";
 
 //#region ../../packages/core/src/http/plugins.ts
 async function registerHttpPlugins(server) {
-	const rateLimitOptions = buildRateLimitOptions(config.get("http.rateLimit"));
+	const rateLimitOptions = buildRateLimitOptions(baseConfig.get("http.rateLimit"));
 	if (rateLimitOptions) server.register(import("@fastify/rate-limit"), rateLimitOptions);
-	else if (router.list().some((route) => route.rateLimit)) log.warn("http", "rateLimit", "Routes declare `rateLimit`, but `http.rateLimit.enabled` is false so the rate-limit plugin is not registered: route rate limits (and their errorMessage) are inactive.");
+	else if (router.list().some((route) => typeof route.rateLimit === "object")) log.warn("http", "rateLimit", "Routes declare `rateLimit`, but `http.rateLimit.enabled` is false so the rate-limit plugin is not registered: route rate limits (and their errorMessage) are inactive.");
 	server.register(import("@fastify/cors"), buildCorsOptions());
 	server.register(fastifyMultipart, {
 		attachFieldsToBody: true,
 		limits: {
-			fileSize: config.get("http.fileUploadLimit", 10 * 1024 * 1024),
-			files: config.get("http.multipart.files", 10),
-			fields: config.get("http.multipart.fields", 100),
-			fieldSize: config.get("http.multipart.fieldSize", 1024 * 1024)
+			fileSize: baseConfig.get("http.fileUploadLimit", 10485760),
+			files: baseConfig.get("http.multipart.files", 10),
+			fields: baseConfig.get("http.multipart.fields", 100),
+			fieldSize: baseConfig.get("http.multipart.fieldSize", 1048576)
 		}
 	});
 	server.addContentTypeParser("application/x-www-form-urlencoded", { parseAs: "string" }, (_request, body, done) => {
@@ -32,15 +34,16 @@ async function registerHttpPlugins(server) {
 			done(error, void 0);
 		}
 	});
-	const publicRoot = resolvePublicRoot(config.get("storage.publicRoot", rootPath("public")));
-	if (publicRoot !== void 0) server.register(import("@fastify/static"), {
+	const publicRoot = resolvePublicRoot(baseConfig.get("storage.publicRoot", rootPath("public")));
+	if (publicRoot !== void 0) registerLazyStatic(server, {
 		root: publicRoot,
-		prefix: config.get("storage.publicPrefix", "/public/")
-	});
+		prefix: baseConfig.get("storage.publicPrefix", "/public/")
+	}, { rateLimit: resolveStaticRateLimit(void 0) });
 	server.register(import("@fastify/cookie"), {
-		secret: config.get("http.cookies.secret"),
-		parseOptions: config.get("http.cookies.options", {})
+		secret: baseConfig.get("http.cookies.secret"),
+		parseOptions: baseConfig.get("http.cookies.options", {})
 	});
+	await server.after();
 }
 /**
 * The public folder(s) worth handing to `@fastify/static`, or `undefined`

package/esm/http/plugins.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/plugins.ts"],"sourcesContent":["import fastifyMultipart from \"@fastify/multipart\";\nimport config from \"@mongez/config\";\nimport { existsSync } from \"node:fs\";\nimport type { FastifyRequest } from \"fastify\";\nimport { log } from \"@warlock.js/logger\";\nimport { router } from \"../router\";\nimport { rootPath } from \"../utils\";\nimport { buildCorsOptions } from \"./build-cors-options\";\nimport { buildRateLimitOptions } from \"./build-rate-limit-options\";\nimport { parseUrlencodedBody } from \"./parse-urlencoded-body\";\nimport type { FastifyInstance } from \"./server\";\n\nexport async function registerHttpPlugins(server: FastifyInstance) {\n  // 👇🏻 register rate-limit plugin\n  const rateLimitOptions = buildRateLimitOptions(config.get(\"http.rateLimit\"));\n\n  if (rateLimitOptions) {\n    server.register(import(\"@fastify/rate-limit\"), rateLimitOptions);\n  } else if (router.list().some((route) => route.rateLimit)) {\n    log.warn(\n      \"http\",\n      \"rateLimit\",\n      \"Routes declare `rateLimit`, but `http.rateLimit.enabled` is false so the rate-limit plugin is not registered: route rate limits (and their errorMessage) are inactive.\",\n    );\n  }\n\n  // 👇🏻 register cors plugin\n  server.register(import(\"@fastify/cors\"), buildCorsOptions());\n\n  // 👇🏻 import multipart plugin\n  server.register(fastifyMultipart, {\n    attachFieldsToBody: true,\n    limits: {\n      // file size could be up to 10MB\n      fileSize: config.get(\"http.fileUploadLimit\", 10 * 1024 * 1024),\n      // every file part is buffered in memory (`attachFieldsToBody`), so cap the counts too;\n      // hitting any limit makes @fastify/multipart throw an error with statusCode 413\n      files: config.get(\"http.multipart.files\", 10),\n      fields: config.get(\"http.multipart.fields\", 100),\n      fieldSize: config.get(\"http.multipart.fieldSize\", 1024 * 1024),\n    },\n  });\n\n  // 👇🏻 parse application/x-www-form-urlencoded bodies (Apple's OAuth\n  // `form_post` callback, plain HTML forms). Fastify only parses JSON and\n  // text natively, so without this every urlencoded POST is rejected with\n  // FST_ERR_CTP_INVALID_MEDIA_TYPE before it reaches a route.\n  //\n  // No `bodyLimit` option here: Fastify falls back to the server's own\n  // `bodyLimit` (`server.ts`, from `http.bodyLimit`) whenever a content-type\n  // parser doesn't set one — the exact limit JSON bodies are already held to.\n  // Reading `http.bodyLimit` again here would duplicate that lookup and risk\n  // the two silently drifting.\n  server.addContentTypeParser(\n    \"application/x-www-form-urlencoded\",\n    { parseAs: \"string\" },\n    (_request: FastifyRequest, body: string, done: (err: Error | null, body?: any) => void) => {\n      try {\n        done(null, parseUrlencodedBody(body));\n      } catch (error) {\n        done(error as Error, undefined);\n      }\n    },\n  );\n\n  // 👇🏻 serve the public folder. Importing `@fastify/static` is not free (its\n  // directory-listing module calls `os.cpus()` at load), so it is only loaded\n  // when there is a folder to serve: `storage.publicRoot: false` turns public\n  // serving off, and a missing folder skips it (WR-027).\n  const publicRoot = resolvePublicRoot(config.get(\"storage.publicRoot\", rootPath(\"public\")));\n\n  if (publicRoot !== undefined) {\n    server.register(import(\"@fastify/static\"), {\n      root: publicRoot,\n      prefix: config.get(\"storage.publicPrefix\", \"/public/\"),\n    });\n  }\n\n  // 👇🏻 register cookie plugin\n  server.register(import(\"@fastify/cookie\"), {\n    secret: config.get(\"http.cookies.secret\"), // Optional: allow signed cookies\n    parseOptions: config.get(\"http.cookies.options\", {}),\n  });\n}\n\n/**\n * The public folder(s) worth handing to `@fastify/static`, or `undefined`\n * when there is nothing to serve: `false`, or a single path that does not\n * exist. An array is passed through unchanged; `@fastify/static` validates\n * each entry itself.\n */\nexport function resolvePublicRoot(publicRoot: unknown): string | string[] | undefined {\n  if (publicRoot === false || publicRoot === null || publicRoot === undefined) {\n    return undefined;\n  }\n\n  if (Array.isArray(publicRoot)) {\n    return publicRoot.length > 0 ? publicRoot : undefined;\n  }\n\n  if (typeof publicRoot === \"string\") {\n    return existsSync(publicRoot) ? publicRoot : undefined;\n  }\n\n  return publicRoot as string;\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,eAAsB,oBAAoB,QAAyB;CAEjE,MAAM,mBAAmB,sBAAsB,OAAO,IAAI,gBAAgB,CAAC;CAE3E,IAAI,kBACF,OAAO,SAAS,OAAO,wBAAwB,gBAAgB;MAC1D,IAAI,OAAO,KAAK,CAAC,CAAC,MAAM,UAAU,MAAM,SAAS,GACtD,IAAI,KACF,QACA,aACA,wKACF;CAIF,OAAO,SAAS,OAAO,kBAAkB,iBAAiB,CAAC;CAG3D,OAAO,SAAS,kBAAkB;EAChC,oBAAoB;EACpB,QAAQ;GAEN,UAAU,OAAO,IAAI,wBAAwB,KAAK,OAAO,IAAI;GAG7D,OAAO,OAAO,IAAI,wBAAwB,EAAE;GAC5C,QAAQ,OAAO,IAAI,yBAAyB,GAAG;GAC/C,WAAW,OAAO,IAAI,4BAA4B,OAAO,IAAI;EAC/D;CACF,CAAC;CAYD,OAAO,qBACL,qCACA,EAAE,SAAS,SAAS,IACnB,UAA0B,MAAc,SAAkD;EACzF,IAAI;GACF,KAAK,MAAM,oBAAoB,IAAI,CAAC;EACtC,SAAS,OAAO;GACd,KAAK,OAAgB,MAAS;EAChC;CACF,CACF;CAMA,MAAM,aAAa,kBAAkB,OAAO,IAAI,sBAAsB,SAAS,QAAQ,CAAC,CAAC;CAEzF,IAAI,eAAe,QACjB,OAAO,SAAS,OAAO,oBAAoB;EACzC,MAAM;EACN,QAAQ,OAAO,IAAI,wBAAwB,UAAU;CACvD,CAAC;CAIH,OAAO,SAAS,OAAO,oBAAoB;EACzC,QAAQ,OAAO,IAAI,qBAAqB;EACxC,cAAc,OAAO,IAAI,wBAAwB,CAAC,CAAC;CACrD,CAAC;AACH;;;;;;;AAQA,SAAgB,kBAAkB,YAAoD;CACpF,IAAI,eAAe,SAAS,eAAe,QAAQ,eAAe,QAChE;CAGF,IAAI,MAAM,QAAQ,UAAU,GAC1B,OAAO,WAAW,SAAS,IAAI,aAAa;CAG9C,IAAI,OAAO,eAAe,UACxB,OAAO,WAAW,UAAU,IAAI,aAAa;CAG/C,OAAO;AACT"}
+{"version":3,"file":"plugins.mjs","names":["config"],"sources":["../../../../../../../../packages/core/src/http/plugins.ts"],"sourcesContent":["import fastifyMultipart from \"@fastify/multipart\";\nimport config from \"@mongez/config\";\nimport { existsSync } from \"node:fs\";\nimport type { FastifyRequest } from \"fastify\";\nimport { log } from \"@warlock.js/logger\";\nimport { router } from \"../router\";\nimport { resolveStaticRateLimit } from \"../router/resolve-route-rate-limit\";\nimport { rootPath } from \"../utils\";\nimport { buildCorsOptions } from \"./build-cors-options\";\nimport { buildRateLimitOptions } from \"./build-rate-limit-options\";\nimport { registerLazyStatic } from \"./lazy-static\";\nimport { parseUrlencodedBody } from \"./parse-urlencoded-body\";\nimport type { FastifyInstance } from \"./server\";\n\nexport async function registerHttpPlugins(server: FastifyInstance) {\n  // 👇🏻 register rate-limit plugin\n  const rateLimitOptions = buildRateLimitOptions(config.get(\"http.rateLimit\"));\n\n  if (rateLimitOptions) {\n    server.register(import(\"@fastify/rate-limit\"), rateLimitOptions);\n  } else if (router.list().some((route) => typeof route.rateLimit === \"object\")) {\n    log.warn(\n      \"http\",\n      \"rateLimit\",\n      \"Routes declare `rateLimit`, but `http.rateLimit.enabled` is false so the rate-limit plugin is not registered: route rate limits (and their errorMessage) are inactive.\",\n    );\n  }\n\n  // 👇🏻 register cors plugin\n  server.register(import(\"@fastify/cors\"), buildCorsOptions());\n\n  // 👇🏻 import multipart plugin\n  server.register(fastifyMultipart, {\n    attachFieldsToBody: true,\n    limits: {\n      // file size could be up to 10MB\n      fileSize: config.get(\"http.fileUploadLimit\", 10 * 1024 * 1024),\n      // every file part is buffered in memory (`attachFieldsToBody`), so cap the counts too;\n      // hitting any limit makes @fastify/multipart throw an error with statusCode 413\n      files: config.get(\"http.multipart.files\", 10),\n      fields: config.get(\"http.multipart.fields\", 100),\n      fieldSize: config.get(\"http.multipart.fieldSize\", 1024 * 1024),\n    },\n  });\n\n  // 👇🏻 parse application/x-www-form-urlencoded bodies (Apple's OAuth\n  // `form_post` callback, plain HTML forms). Fastify only parses JSON and\n  // text natively, so without this every urlencoded POST is rejected with\n  // FST_ERR_CTP_INVALID_MEDIA_TYPE before it reaches a route.\n  //\n  // No `bodyLimit` option here: Fastify falls back to the server's own\n  // `bodyLimit` (`server.ts`, from `http.bodyLimit`) whenever a content-type\n  // parser doesn't set one — the exact limit JSON bodies are already held to.\n  // Reading `http.bodyLimit` again here would duplicate that lookup and risk\n  // the two silently drifting.\n  server.addContentTypeParser(\n    \"application/x-www-form-urlencoded\",\n    { parseAs: \"string\" },\n    (_request: FastifyRequest, body: string, done: (err: Error | null, body?: any) => void) => {\n      try {\n        done(null, parseUrlencodedBody(body));\n      } catch (error) {\n        done(error as Error, undefined);\n      }\n    },\n  );\n\n  // 👇🏻 serve the public folder. Importing `@fastify/static` is not free (its\n  // directory-listing module calls `os.cpus()` at load), so defer loading to\n  // the first file request even when the public folder already exists.\n  const publicRoot = resolvePublicRoot(config.get(\"storage.publicRoot\", rootPath(\"public\")));\n\n  if (publicRoot !== undefined) {\n    registerLazyStatic(\n      server,\n      {\n        root: publicRoot,\n        prefix: config.get(\"storage.publicPrefix\", \"/public/\"),\n      },\n      // Exempt from the global limiter unless `http.rateLimit.staticFiles`.\n      { rateLimit: resolveStaticRateLimit(undefined) },\n    );\n  }\n\n  // 👇🏻 register cookie plugin\n  server.register(import(\"@fastify/cookie\"), {\n    secret: config.get(\"http.cookies.secret\"), // Optional: allow signed cookies\n    parseOptions: config.get(\"http.cookies.options\", {}),\n  });\n\n  // Install plugin onRoute hooks before the connector registers health and app\n  // routes. after() waits for this queue without closing route registration.\n  await server.after();\n}\n\n/**\n * The public folder(s) worth handing to `@fastify/static`, or `undefined`\n * when there is nothing to serve: `false`, or a single path that does not\n * exist. An array is passed through unchanged; `@fastify/static` validates\n * each entry itself.\n */\nexport function resolvePublicRoot(publicRoot: unknown): string | string[] | undefined {\n  if (publicRoot === false || publicRoot === null || publicRoot === undefined) {\n    return undefined;\n  }\n\n  if (Array.isArray(publicRoot)) {\n    return publicRoot.length > 0 ? publicRoot : undefined;\n  }\n\n  if (typeof publicRoot === \"string\") {\n    return existsSync(publicRoot) ? publicRoot : undefined;\n  }\n\n  return publicRoot as string;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAcA,eAAsB,oBAAoB,QAAyB;CAEjE,MAAM,mBAAmB,sBAAsBA,WAAO,IAAI,gBAAgB,CAAC;CAE3E,IAAI,kBACF,OAAO,SAAS,OAAO,wBAAwB,gBAAgB;MAC1D,IAAI,OAAO,KAAK,CAAC,CAAC,MAAM,UAAU,OAAO,MAAM,cAAc,QAAQ,GAC1E,IAAI,KACF,QACA,aACA,wKACF;CAIF,OAAO,SAAS,OAAO,kBAAkB,iBAAiB,CAAC;CAG3D,OAAO,SAAS,kBAAkB;EAChC,oBAAoB;EACpB,QAAQ;GAEN,UAAUA,WAAO,IAAI,wBAAwB,QAAgB;GAG7D,OAAOA,WAAO,IAAI,wBAAwB,EAAE;GAC5C,QAAQA,WAAO,IAAI,yBAAyB,GAAG;GAC/C,WAAWA,WAAO,IAAI,4BAA4B,OAAW;EAC/D;CACF,CAAC;CAYD,OAAO,qBACL,qCACA,EAAE,SAAS,SAAS,IACnB,UAA0B,MAAc,SAAkD;EACzF,IAAI;GACF,KAAK,MAAM,oBAAoB,IAAI,CAAC;EACtC,SAAS,OAAO;GACd,KAAK,OAAgB,MAAS;EAChC;CACF,CACF;CAKA,MAAM,aAAa,kBAAkBA,WAAO,IAAI,sBAAsB,SAAS,QAAQ,CAAC,CAAC;CAEzF,IAAI,eAAe,QACjB,mBACE,QACA;EACE,MAAM;EACN,QAAQA,WAAO,IAAI,wBAAwB,UAAU;CACvD,GAEA,EAAE,WAAW,uBAAuB,MAAS,EAAE,CACjD;CAIF,OAAO,SAAS,OAAO,oBAAoB;EACzC,QAAQA,WAAO,IAAI,qBAAqB;EACxC,cAAcA,WAAO,IAAI,wBAAwB,CAAC,CAAC;CACrD,CAAC;CAID,MAAM,OAAO,MAAM;AACrB;;;;;;;AAQA,SAAgB,kBAAkB,YAAoD;CACpF,IAAI,eAAe,SAAS,eAAe,QAAQ,eAAe,QAChE;CAGF,IAAI,MAAM,QAAQ,UAAU,GAC1B,OAAO,WAAW,SAAS,IAAI,aAAa;CAG9C,IAAI,OAAO,eAAe,UACxB,OAAO,WAAW,UAAU,IAAI,aAAa;CAG/C,OAAO;AACT"}

package/esm/http/port-preflight.d.mts

@@ -12,7 +12,7 @@
  * `code` mirrors it as a property so a caller can branch on it without
  * parsing text, the same way `NodeJS.ErrnoException.code` works.
  */
-declare class PortInUseError extends Error {
+export declare class PortInUseError extends Error {
   readonly port: number;
   readonly host: string;
   /** Mirrors Node's own `ErrnoException.code` for this failure. */
@@ -26,7 +26,7 @@ declare class PortInUseError extends Error {
  * process is not allowed to bind it. Any other bind failure is re-thrown —
  * an unreadable network error must not be reported as "port in use".
  */
-declare function isPortAvailable(port: number, host?: string): Promise<boolean>;
+export declare function isPortAvailable(port: number, host?: string): Promise<boolean>;
 /**
  * Assert a port is free before something binds it.
  *
@@ -36,7 +36,6 @@ declare function isPortAvailable(port: number, host?: string): Promise<boolean>;
  *
  * @throws {PortInUseError} when the port is taken.
  */
-declare function assertPortIsAvailable(port: number, host?: string): Promise<void>;
+export declare function assertPortIsAvailable(port: number, host?: string): Promise<void>;
 //#endregion
-export { PortInUseError, assertPortIsAvailable, isPortAvailable };
 //# sourceMappingURL=port-preflight.d.mts.map

package/esm/http/port-preflight.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"port-preflight.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/port-preflight.ts"],"mappings":";;AAoBA;;;;;;;;;;;;cAAa,cAAA,SAAuB,KAAK;EAAA,SAKrB,IAAA;EAAA,SACA,IAAA;;WAJF,IAAA;cAGE,IAAA,UACA,IAAA;AAAA;;;AAiBqE;AAmCzF;;;;iBAnCgB,eAAA,CAAgB,IAAA,UAAc,IAAA,YAAoC,OAAO;;;;AAsC/E;;;;;;iBAHY,qBAAA,CACpB,IAAA,UACA,IAAA,YACC,OAAO"}
+{"version":3,"file":"port-preflight.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/port-preflight.ts"],"mappings":";;;;;;;;;;;;;;qBAoBa,uBAAuB;WAKhB;WACA;;WAJF;EAEhB,YACkB,cACA;;;;;;;;;wBAiBJ,gBAAgB,cAAc,gBAAoC;;;;;;;;;;wBAmC5D,sBACpB,cACA,gBACC"}

package/esm/http/rate-limit-cache-store.mjs

@@ -26,13 +26,14 @@ const KEY_PREFIX = "rate-limit";
 /**
 * Cache drivers that cannot back a shared limiter (see the module comment).
 */
-const UNSUPPORTED_DRIVERS = new Set(["null", "file"]);
+const UNSUPPORTED_DRIVERS = /* @__PURE__ */ new Set(["null", "file"]);
 /**
 * Thrown when `store: "cache"` runs on a cache driver that cannot count.
 */
 var UnsupportedRateLimitDriverError = class extends Error {
 	constructor(driverName) {
 		super(`Rate limiting with store: "cache" cannot use the "${driverName}" cache driver: ` + (driverName === "null" ? "it stores nothing, so the limit would never trip. " : "it never removes expired windows and its increment is not shared between processes. ") + "Use redis or pg (or a memory driver for a single process), or set store: \"memory\".");
+		this.code = "WL1003";
 		this.name = "UnsupportedRateLimitDriverError";
 	}
 };
@@ -57,7 +58,8 @@ function shortHash(value) {
 * prefix stays in front of the hash for debugging.
 */
 function windowKey(namespace, group, windowIndex) {
-	return `${KEY_PREFIX}.${namespace.replace(/[^A-Za-z0-9_-]+/g, "_").slice(0, 40)}-${shortHash(namespace).slice(0, 16)}.${shortHash(group)}.${windowIndex}`;
+	const readable = namespace.replace(/[^A-Za-z0-9_-]+/g, "_").slice(0, 40);
+	return `${KEY_PREFIX}.${readable}-${shortHash(namespace).slice(0, 16)}.${shortHash(group)}.${windowIndex}`;
 }
 /**
 * Count one request for `group` in the current window.
@@ -75,7 +77,7 @@ async function incrementSharedRateLimit(namespace, group, windowMs, now = Date.n
 		onConflict: "create"
 	});
 	return {
-		current: await cache.increment(key),
+		current: await cache.increment(key, 1, { ttl: ttlSeconds }),
 		resetAt: (windowIndex + 1) * windowMs
 	};
 }
@@ -151,5 +153,5 @@ var CacheRateLimitStore = class CacheRateLimitStore {
 };
 
 //#endregion
-export { CacheRateLimitStore, incrementSharedRateLimit, logSharedRateLimitError };
+export { CacheRateLimitStore, UnsupportedRateLimitDriverError, incrementSharedRateLimit, logSharedRateLimitError, readSharedRateLimit };
 //# sourceMappingURL=rate-limit-cache-store.mjs.map

package/esm/http/rate-limit-cache-store.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit-cache-store.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/rate-limit-cache-store.ts"],"sourcesContent":["import type { FastifyRateLimitOptions, FastifyRateLimitStore } from \"@fastify/rate-limit\";\nimport { cache } from \"@warlock.js/cache\";\nimport { log } from \"@warlock.js/logger\";\nimport { createHash } from \"node:crypto\";\n\n/**\n * Rate-limit counting shared through `@warlock.js/cache`, so every process\n * that uses the same cache driver (Redis, Postgres) counts into the same\n * buckets. With a memory driver (`memory`, `lru`, `memoryExtended`) the\n * counts stay in the process, like the in-memory limiter.\n *\n * Windows are fixed and aligned to the clock: a 60 s window resets on the\n * minute, whichever process saw the first request. Each window has its own\n * key, created atomically with a TTL of two windows and incremented with the\n * driver's atomic increment, so a key cannot expire while its window counts.\n *\n * Two drivers are refused, with {@link UnsupportedRateLimitDriverError}:\n *\n * - `null` stores nothing, so every request would count as the first and the\n *   limit would never trip.\n * - `file` has no expiry sweeper, so every past window would stay on disk\n *   forever, and its increment is only serialized within one process, so\n *   workers sharing the directory would lose counts.\n */\n\nconst KEY_PREFIX = \"rate-limit\";\n\n/**\n * Cache drivers that cannot back a shared limiter (see the module comment).\n */\nconst UNSUPPORTED_DRIVERS = new Set([\"null\", \"file\"]);\n\n/**\n * Thrown when `store: \"cache\"` runs on a cache driver that cannot count.\n */\nexport class UnsupportedRateLimitDriverError extends Error {\n  public constructor(driverName: string) {\n    super(\n      `Rate limiting with store: \"cache\" cannot use the \"${driverName}\" cache driver: ` +\n        (driverName === \"null\"\n          ? \"it stores nothing, so the limit would never trip. \"\n          : \"it never removes expired windows and its increment is not shared between processes. \") +\n        'Use redis or pg (or a memory driver for a single process), or set store: \"memory\".',\n    );\n\n    this.name = \"UnsupportedRateLimitDriverError\";\n  }\n}\n\nfunction assertSupportedDriver(): void {\n  const driverName = cache.currentDriver?.name;\n\n  if (driverName && UNSUPPORTED_DRIVERS.has(driverName)) {\n    throw new UnsupportedRateLimitDriverError(driverName);\n  }\n}\n\n/**\n * Hash used for group keys and route namespaces before they reach the cache.\n */\nfunction shortHash(value: string): string {\n  return createHash(\"sha256\").update(value).digest(\"hex\").slice(0, 32);\n}\n\n/**\n * The group key (an IP, a user id, whatever `keyGenerator` returned) is\n * hashed before it reaches the cache: cache drivers log their keys, and a raw\n * IP or email in a key is personal data in a log line.\n *\n * The namespace (it carries a route path) is hashed as well: flattening\n * `/users/:id` and `/users/id` to one safe string merged their counters, and\n * the file driver would turn `/` into directories. A readable, flattened\n * prefix stays in front of the hash for debugging.\n */\nfunction windowKey(namespace: string, group: string, windowIndex: number): string {\n  const readable = namespace.replace(/[^A-Za-z0-9_-]+/g, \"_\").slice(0, 40);\n\n  return `${KEY_PREFIX}.${readable}-${shortHash(namespace).slice(0, 16)}.${shortHash(group)}.${windowIndex}`;\n}\n\n/**\n * Count one request for `group` in the current window.\n *\n * @returns the count so far in this window and when the window resets (epoch ms)\n * @throws {UnsupportedRateLimitDriverError} on the `null` or `file` driver\n */\nexport async function incrementSharedRateLimit(\n  namespace: string,\n  group: string,\n  windowMs: number,\n  now: number = Date.now(),\n): Promise<{ current: number; resetAt: number }> {\n  assertSupportedDriver();\n\n  const windowIndex = Math.floor(now / windowMs);\n  const key = windowKey(namespace, group, windowIndex);\n  const ttlSeconds = Math.max(1, Math.ceil((2 * windowMs) / 1000));\n\n  await cache.set(key, 0, { ttl: ttlSeconds, onConflict: \"create\" });\n\n  const current = await cache.increment(key);\n\n  return { current, resetAt: (windowIndex + 1) * windowMs };\n}\n\n/**\n * Read the count for `group` in the current window without counting a request\n */\nexport async function readSharedRateLimit(\n  namespace: string,\n  group: string,\n  windowMs: number,\n  now: number = Date.now(),\n): Promise<{ current: number; resetAt: number }> {\n  assertSupportedDriver();\n\n  const windowIndex = Math.floor(now / windowMs);\n  const value = await cache.get(windowKey(namespace, group, windowIndex));\n\n  return {\n    current: typeof value === \"number\" ? value : 0,\n    resetAt: (windowIndex + 1) * windowMs,\n  };\n}\n\n/**\n * How often a failing shared store is reported. A cache outage fails every\n * request, so logging each one would flood the log.\n */\nconst ERROR_LOG_INTERVAL_MS = 60_000;\n\nlet lastErrorLogAt = 0;\n\n/**\n * Log a shared rate-limit store failure, at most once per minute.\n */\nexport function logSharedRateLimitError(error: unknown, now: number = Date.now()): void {\n  if (now - lastErrorLogAt < ERROR_LOG_INTERVAL_MS) return;\n\n  lastErrorLogAt = now;\n  log.error(\"http\", \"rate-limit\", error);\n}\n\n/**\n * Forget when the last store error was logged (tests).\n */\nexport function resetSharedRateLimitErrorLog(): void {\n  lastErrorLogAt = 0;\n}\n\n/**\n * Route data `@fastify/rate-limit` passes to `child()`: the route's options\n * under `routeInfo` (`fastify.rateLimit()` hooks pass an empty one).\n */\ntype ChildRouteOptions = {\n  routeInfo?: { method?: unknown; url?: string; path?: string };\n};\n\n/**\n * `fastify.rateLimit()` hooks have no route; told apart by creation order,\n * which matches across processes running the same code.\n */\nlet nextHookNamespace = 0;\n\n/**\n * `@fastify/rate-limit` store backed by `@warlock.js/cache`. Selected with\n * `http.rateLimit.store: \"cache\"`; each route with its own `rateLimit` gets\n * its own namespace through `child()`.\n *\n * A failure (cache outage, unsupported driver) is logged at most once a\n * minute and passed to the plugin, which lets the request through because\n * Warlock registers it with `skipOnError: true` for this store.\n */\nexport class CacheRateLimitStore implements FastifyRateLimitStore {\n  public constructor(\n    _options?: FastifyRateLimitOptions,\n    protected readonly namespace: string = \"global\",\n  ) {}\n\n  public incr(\n    key: string,\n    callback: (error: Error | null, result?: { current: number; ttl: number }) => void,\n    timeWindow: number,\n  ): void {\n    incrementSharedRateLimit(this.namespace, key, timeWindow).then(\n      ({ current, resetAt }) => callback(null, { current, ttl: Math.max(0, resetAt - Date.now()) }),\n      (error: unknown) => {\n        logSharedRateLimitError(error);\n        callback(error instanceof Error ? error : new Error(String(error)));\n      },\n    );\n  }\n\n  public read(\n    key: string,\n    callback: (error: Error | null, result?: { current: number; ttl: number }) => void,\n    timeWindow: number,\n  ): void {\n    readSharedRateLimit(this.namespace, key, timeWindow).then(\n      ({ current, resetAt }) =>\n        callback(null, { current, ttl: current === 0 ? 0 : Math.max(0, resetAt - Date.now()) }),\n      (error: unknown) => {\n        logSharedRateLimitError(error);\n        callback(error instanceof Error ? error : new Error(String(error)));\n      },\n    );\n  }\n\n  public child(routeOptions: Parameters<FastifyRateLimitStore[\"child\"]>[0]): FastifyRateLimitStore {\n    // The plugin's declared type names the route options directly, but at\n    // runtime (11.x) it passes them merged under `routeInfo`.\n    const routeInfo = (routeOptions as unknown as ChildRouteOptions).routeInfo ?? {};\n    const method = Array.isArray(routeInfo.method)\n      ? routeInfo.method.join(\",\")\n      : String(routeInfo.method ?? \"\");\n    const url = routeInfo.url ?? routeInfo.path ?? \"\";\n\n    if (!method && !url) {\n      return new CacheRateLimitStore(undefined, `hook.${nextHookNamespace++}`);\n    }\n\n    return new CacheRateLimitStore(undefined, `route.${method} ${url}`);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAM,aAAa;;;;AAKnB,MAAM,sBAAsB,IAAI,IAAI,CAAC,QAAQ,MAAM,CAAC;;;;AAKpD,IAAa,kCAAb,cAAqD,MAAM;CACzD,AAAO,YAAY,YAAoB;EACrC,MACE,qDAAqD,WAAW,qBAC7D,eAAe,SACZ,uDACA,0FACJ,sFACJ;EAEA,KAAK,OAAO;CACd;AACF;AAEA,SAAS,wBAA8B;CACrC,MAAM,aAAa,MAAM,eAAe;CAExC,IAAI,cAAc,oBAAoB,IAAI,UAAU,GAClD,MAAM,IAAI,gCAAgC,UAAU;AAExD;;;;AAKA,SAAS,UAAU,OAAuB;CACxC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AACrE;;;;;;;;;;;AAYA,SAAS,UAAU,WAAmB,OAAe,aAA6B;CAGhF,OAAO,GAAG,WAAW,GAFJ,UAAU,QAAQ,oBAAoB,GAAG,CAAC,CAAC,MAAM,GAAG,EAEtC,EAAE,GAAG,UAAU,SAAS,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,GAAG,UAAU,KAAK,EAAE,GAAG;AAC/F;;;;;;;AAQA,eAAsB,yBACpB,WACA,OACA,UACA,MAAc,KAAK,IAAI,GACwB;CAC/C,sBAAsB;CAEtB,MAAM,cAAc,KAAK,MAAM,MAAM,QAAQ;CAC7C,MAAM,MAAM,UAAU,WAAW,OAAO,WAAW;CACnD,MAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAM,IAAI,WAAY,GAAI,CAAC;CAE/D,MAAM,MAAM,IAAI,KAAK,GAAG;EAAE,KAAK;EAAY,YAAY;CAAS,CAAC;CAIjE,OAAO;EAAE,eAFa,MAAM,UAAU,GAAG;EAEvB,UAAU,cAAc,KAAK;CAAS;AAC1D;;;;AAKA,eAAsB,oBACpB,WACA,OACA,UACA,MAAc,KAAK,IAAI,GACwB;CAC/C,sBAAsB;CAEtB,MAAM,cAAc,KAAK,MAAM,MAAM,QAAQ;CAC7C,MAAM,QAAQ,MAAM,MAAM,IAAI,UAAU,WAAW,OAAO,WAAW,CAAC;CAEtE,OAAO;EACL,SAAS,OAAO,UAAU,WAAW,QAAQ;EAC7C,UAAU,cAAc,KAAK;CAC/B;AACF;;;;;AAMA,MAAM,wBAAwB;AAE9B,IAAI,iBAAiB;;;;AAKrB,SAAgB,wBAAwB,OAAgB,MAAc,KAAK,IAAI,GAAS;CACtF,IAAI,MAAM,iBAAiB,uBAAuB;CAElD,iBAAiB;CACjB,IAAI,MAAM,QAAQ,cAAc,KAAK;AACvC;;;;;AAqBA,IAAI,oBAAoB;;;;;;;;;;AAWxB,IAAa,sBAAb,MAAa,oBAAqD;CAChE,AAAO,YACL,UACA,AAAmB,YAAoB,UACvC;EADmB;CAClB;CAEH,AAAO,KACL,KACA,UACA,YACM;EACN,yBAAyB,KAAK,WAAW,KAAK,UAAU,CAAC,CAAC,MACvD,EAAE,SAAS,cAAc,SAAS,MAAM;GAAE;GAAS,KAAK,KAAK,IAAI,GAAG,UAAU,KAAK,IAAI,CAAC;EAAE,CAAC,IAC3F,UAAmB;GAClB,wBAAwB,KAAK;GAC7B,SAAS,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;EACpE,CACF;CACF;CAEA,AAAO,KACL,KACA,UACA,YACM;EACN,oBAAoB,KAAK,WAAW,KAAK,UAAU,CAAC,CAAC,MAClD,EAAE,SAAS,cACV,SAAS,MAAM;GAAE;GAAS,KAAK,YAAY,IAAI,IAAI,KAAK,IAAI,GAAG,UAAU,KAAK,IAAI,CAAC;EAAE,CAAC,IACvF,UAAmB;GAClB,wBAAwB,KAAK;GAC7B,SAAS,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;EACpE,CACF;CACF;CAEA,AAAO,MAAM,cAAoF;EAG/F,MAAM,YAAa,aAA8C,aAAa,CAAC;EAC/E,MAAM,SAAS,MAAM,QAAQ,UAAU,MAAM,IACzC,UAAU,OAAO,KAAK,GAAG,IACzB,OAAO,UAAU,UAAU,EAAE;EACjC,MAAM,MAAM,UAAU,OAAO,UAAU,QAAQ;EAE/C,IAAI,CAAC,UAAU,CAAC,KACd,OAAO,IAAI,oBAAoB,QAAW,QAAQ,qBAAqB;EAGzE,OAAO,IAAI,oBAAoB,QAAW,SAAS,OAAO,GAAG,KAAK;CACpE;AACF"}
+{"version":3,"file":"rate-limit-cache-store.mjs","names":[],"sources":["../../../../../../../../packages/core/src/http/rate-limit-cache-store.ts"],"sourcesContent":["import type { FastifyRateLimitOptions, FastifyRateLimitStore } from \"@fastify/rate-limit\";\nimport { cache } from \"@warlock.js/cache\";\nimport { log } from \"@warlock.js/logger\";\nimport { createHash } from \"node:crypto\";\n\n/**\n * Rate-limit counting shared through `@warlock.js/cache`, so every process\n * that uses the same cache driver (Redis, Postgres) counts into the same\n * buckets. With a memory driver (`memory`, `lru`, `memoryExtended`) the\n * counts stay in the process, like the in-memory limiter.\n *\n * Windows are fixed and aligned to the clock: a 60 s window resets on the\n * minute, whichever process saw the first request. Each window has its own\n * key, created atomically with a TTL of two windows and incremented with the\n * driver's atomic increment, so a key cannot expire while its window counts.\n *\n * Two drivers are refused, with {@link UnsupportedRateLimitDriverError}:\n *\n * - `null` stores nothing, so every request would count as the first and the\n *   limit would never trip.\n * - `file` has no expiry sweeper, so every past window would stay on disk\n *   forever, and its increment is only serialized within one process, so\n *   workers sharing the directory would lose counts.\n */\n\nconst KEY_PREFIX = \"rate-limit\";\n\n/**\n * Cache drivers that cannot back a shared limiter (see the module comment).\n */\nconst UNSUPPORTED_DRIVERS = new Set([\"null\", \"file\"]);\n\n/**\n * Thrown when `store: \"cache\"` runs on a cache driver that cannot count.\n */\nexport class UnsupportedRateLimitDriverError extends Error {\n  /** Stable Warlock error code; `warlock explain WL1003` prints the fix. */\n  public readonly code = \"WL1003\";\n\n  public constructor(driverName: string) {\n    super(\n      `Rate limiting with store: \"cache\" cannot use the \"${driverName}\" cache driver: ` +\n        (driverName === \"null\"\n          ? \"it stores nothing, so the limit would never trip. \"\n          : \"it never removes expired windows and its increment is not shared between processes. \") +\n        'Use redis or pg (or a memory driver for a single process), or set store: \"memory\".',\n    );\n\n    this.name = \"UnsupportedRateLimitDriverError\";\n  }\n}\n\nfunction assertSupportedDriver(): void {\n  const driverName = cache.currentDriver?.name;\n\n  if (driverName && UNSUPPORTED_DRIVERS.has(driverName)) {\n    throw new UnsupportedRateLimitDriverError(driverName);\n  }\n}\n\n/**\n * Hash used for group keys and route namespaces before they reach the cache.\n */\nfunction shortHash(value: string): string {\n  return createHash(\"sha256\").update(value).digest(\"hex\").slice(0, 32);\n}\n\n/**\n * The group key (an IP, a user id, whatever `keyGenerator` returned) is\n * hashed before it reaches the cache: cache drivers log their keys, and a raw\n * IP or email in a key is personal data in a log line.\n *\n * The namespace (it carries a route path) is hashed as well: flattening\n * `/users/:id` and `/users/id` to one safe string merged their counters, and\n * the file driver would turn `/` into directories. A readable, flattened\n * prefix stays in front of the hash for debugging.\n */\nfunction windowKey(namespace: string, group: string, windowIndex: number): string {\n  const readable = namespace.replace(/[^A-Za-z0-9_-]+/g, \"_\").slice(0, 40);\n\n  return `${KEY_PREFIX}.${readable}-${shortHash(namespace).slice(0, 16)}.${shortHash(group)}.${windowIndex}`;\n}\n\n/**\n * Count one request for `group` in the current window.\n *\n * @returns the count so far in this window and when the window resets (epoch ms)\n * @throws {UnsupportedRateLimitDriverError} on the `null` or `file` driver\n */\nexport async function incrementSharedRateLimit(\n  namespace: string,\n  group: string,\n  windowMs: number,\n  now: number = Date.now(),\n): Promise<{ current: number; resetAt: number }> {\n  assertSupportedDriver();\n\n  const windowIndex = Math.floor(now / windowMs);\n  const key = windowKey(namespace, group, windowIndex);\n  const ttlSeconds = Math.max(1, Math.ceil((2 * windowMs) / 1000));\n\n  await cache.set(key, 0, { ttl: ttlSeconds, onConflict: \"create\" });\n\n  const current = await cache.increment(key, 1, { ttl: ttlSeconds });\n\n  return { current, resetAt: (windowIndex + 1) * windowMs };\n}\n\n/**\n * Read the count for `group` in the current window without counting a request\n */\nexport async function readSharedRateLimit(\n  namespace: string,\n  group: string,\n  windowMs: number,\n  now: number = Date.now(),\n): Promise<{ current: number; resetAt: number }> {\n  assertSupportedDriver();\n\n  const windowIndex = Math.floor(now / windowMs);\n  const value = await cache.get(windowKey(namespace, group, windowIndex));\n\n  return {\n    current: typeof value === \"number\" ? value : 0,\n    resetAt: (windowIndex + 1) * windowMs,\n  };\n}\n\n/**\n * How often a failing shared store is reported. A cache outage fails every\n * request, so logging each one would flood the log.\n */\nconst ERROR_LOG_INTERVAL_MS = 60_000;\n\nlet lastErrorLogAt = 0;\n\n/**\n * Log a shared rate-limit store failure, at most once per minute.\n */\nexport function logSharedRateLimitError(error: unknown, now: number = Date.now()): void {\n  if (now - lastErrorLogAt < ERROR_LOG_INTERVAL_MS) return;\n\n  lastErrorLogAt = now;\n  log.error(\"http\", \"rate-limit\", error);\n}\n\n/**\n * Forget when the last store error was logged (tests).\n */\nexport function resetSharedRateLimitErrorLog(): void {\n  lastErrorLogAt = 0;\n}\n\n/**\n * Route data `@fastify/rate-limit` passes to `child()`: the route's options\n * under `routeInfo` (`fastify.rateLimit()` hooks pass an empty one).\n */\ntype ChildRouteOptions = {\n  routeInfo?: { method?: unknown; url?: string; path?: string };\n};\n\n/**\n * `fastify.rateLimit()` hooks have no route; told apart by creation order,\n * which matches across processes running the same code.\n */\nlet nextHookNamespace = 0;\n\n/**\n * `@fastify/rate-limit` store backed by `@warlock.js/cache`. Selected with\n * `http.rateLimit.store: \"cache\"`; each route with its own `rateLimit` gets\n * its own namespace through `child()`.\n *\n * A failure (cache outage, unsupported driver) is logged at most once a\n * minute and passed to the plugin, which lets the request through because\n * Warlock registers it with `skipOnError: true` for this store.\n */\nexport class CacheRateLimitStore implements FastifyRateLimitStore {\n  public constructor(\n    _options?: FastifyRateLimitOptions,\n    protected readonly namespace: string = \"global\",\n  ) {}\n\n  public incr(\n    key: string,\n    callback: (error: Error | null, result?: { current: number; ttl: number }) => void,\n    timeWindow: number,\n  ): void {\n    incrementSharedRateLimit(this.namespace, key, timeWindow).then(\n      ({ current, resetAt }) => callback(null, { current, ttl: Math.max(0, resetAt - Date.now()) }),\n      (error: unknown) => {\n        logSharedRateLimitError(error);\n        callback(error instanceof Error ? error : new Error(String(error)));\n      },\n    );\n  }\n\n  public read(\n    key: string,\n    callback: (error: Error | null, result?: { current: number; ttl: number }) => void,\n    timeWindow: number,\n  ): void {\n    readSharedRateLimit(this.namespace, key, timeWindow).then(\n      ({ current, resetAt }) =>\n        callback(null, { current, ttl: current === 0 ? 0 : Math.max(0, resetAt - Date.now()) }),\n      (error: unknown) => {\n        logSharedRateLimitError(error);\n        callback(error instanceof Error ? error : new Error(String(error)));\n      },\n    );\n  }\n\n  public child(routeOptions: Parameters<FastifyRateLimitStore[\"child\"]>[0]): FastifyRateLimitStore {\n    // The plugin's declared type names the route options directly, but at\n    // runtime (11.x) it passes them merged under `routeInfo`.\n    const routeInfo = (routeOptions as unknown as ChildRouteOptions).routeInfo ?? {};\n    const method = Array.isArray(routeInfo.method)\n      ? routeInfo.method.join(\",\")\n      : String(routeInfo.method ?? \"\");\n    const url = routeInfo.url ?? routeInfo.path ?? \"\";\n\n    if (!method && !url) {\n      return new CacheRateLimitStore(undefined, `hook.${nextHookNamespace++}`);\n    }\n\n    return new CacheRateLimitStore(undefined, `route.${method} ${url}`);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAM,aAAa;;;;AAKnB,MAAM,sCAAsB,IAAI,IAAI,CAAC,QAAQ,MAAM,CAAC;;;;AAKpD,IAAa,kCAAb,cAAqD,MAAM;CAIzD,AAAO,YAAY,YAAoB;EACrC,MACE,qDAAqD,WAAW,qBAC7D,eAAe,SACZ,uDACA,0FACJ,sFACJ;cATqB;EAWrB,KAAK,OAAO;CACd;AACF;AAEA,SAAS,wBAA8B;CACrC,MAAM,aAAa,MAAM,eAAe;CAExC,IAAI,cAAc,oBAAoB,IAAI,UAAU,GAClD,MAAM,IAAI,gCAAgC,UAAU;AAExD;;;;AAKA,SAAS,UAAU,OAAuB;CACxC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AACrE;;;;;;;;;;;AAYA,SAAS,UAAU,WAAmB,OAAe,aAA6B;CAChF,MAAM,WAAW,UAAU,QAAQ,oBAAoB,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE;CAEvE,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,SAAS,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,GAAG,UAAU,KAAK,EAAE,GAAG;AAC/F;;;;;;;AAQA,eAAsB,yBACpB,WACA,OACA,UACA,MAAc,KAAK,IAAI,GACwB;CAC/C,sBAAsB;CAEtB,MAAM,cAAc,KAAK,MAAM,MAAM,QAAQ;CAC7C,MAAM,MAAM,UAAU,WAAW,OAAO,WAAW;CACnD,MAAM,aAAa,KAAK,IAAI,GAAG,KAAK,KAAM,IAAI,WAAY,GAAI,CAAC;CAE/D,MAAM,MAAM,IAAI,KAAK,GAAG;EAAE,KAAK;EAAY,YAAY;CAAS,CAAC;CAIjE,OAAO;EAAE,eAFa,MAAM,UAAU,KAAK,GAAG,EAAE,KAAK,WAAW,CAAC;EAE/C,UAAU,cAAc,KAAK;CAAS;AAC1D;;;;AAKA,eAAsB,oBACpB,WACA,OACA,UACA,MAAc,KAAK,IAAI,GACwB;CAC/C,sBAAsB;CAEtB,MAAM,cAAc,KAAK,MAAM,MAAM,QAAQ;CAC7C,MAAM,QAAQ,MAAM,MAAM,IAAI,UAAU,WAAW,OAAO,WAAW,CAAC;CAEtE,OAAO;EACL,SAAS,OAAO,UAAU,WAAW,QAAQ;EAC7C,UAAU,cAAc,KAAK;CAC/B;AACF;;;;;AAMA,MAAM,wBAAwB;AAE9B,IAAI,iBAAiB;;;;AAKrB,SAAgB,wBAAwB,OAAgB,MAAc,KAAK,IAAI,GAAS;CACtF,IAAI,MAAM,iBAAiB,uBAAuB;CAElD,iBAAiB;CACjB,IAAI,MAAM,QAAQ,cAAc,KAAK;AACvC;;;;;AAqBA,IAAI,oBAAoB;;;;;;;;;;AAWxB,IAAa,sBAAb,MAAa,oBAAqD;CAChE,AAAO,YACL,UACA,AAAmB,YAAoB,UACvC;EADmB;CAClB;CAEH,AAAO,KACL,KACA,UACA,YACM;EACN,yBAAyB,KAAK,WAAW,KAAK,UAAU,CAAC,CAAC,MACvD,EAAE,SAAS,cAAc,SAAS,MAAM;GAAE;GAAS,KAAK,KAAK,IAAI,GAAG,UAAU,KAAK,IAAI,CAAC;EAAE,CAAC,IAC3F,UAAmB;GAClB,wBAAwB,KAAK;GAC7B,SAAS,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;EACpE,CACF;CACF;CAEA,AAAO,KACL,KACA,UACA,YACM;EACN,oBAAoB,KAAK,WAAW,KAAK,UAAU,CAAC,CAAC,MAClD,EAAE,SAAS,cACV,SAAS,MAAM;GAAE;GAAS,KAAK,YAAY,IAAI,IAAI,KAAK,IAAI,GAAG,UAAU,KAAK,IAAI,CAAC;EAAE,CAAC,IACvF,UAAmB;GAClB,wBAAwB,KAAK;GAC7B,SAAS,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;EACpE,CACF;CACF;CAEA,AAAO,MAAM,cAAoF;EAG/F,MAAM,YAAa,aAA8C,aAAa,CAAC;EAC/E,MAAM,SAAS,MAAM,QAAQ,UAAU,MAAM,IACzC,UAAU,OAAO,KAAK,GAAG,IACzB,OAAO,UAAU,UAAU,EAAE;EACjC,MAAM,MAAM,UAAU,OAAO,UAAU,QAAQ;EAE/C,IAAI,CAAC,UAAU,CAAC,KACd,OAAO,IAAI,oBAAoB,QAAW,QAAQ,qBAAqB;EAGzE,OAAO,IAAI,oBAAoB,QAAW,SAAS,OAAO,GAAG,KAAK;CACpE;AACF"}

package/esm/http/ready-report.d.mts

@@ -31,26 +31,31 @@
  * hands its stdout to a supervisor that greps for known lines, so the existing
  * per-fact log lines stay exactly as they are outside development.
  */
-type HttpReadyReport = {
-  /** Exactly what `listen()` returned — the bind, not its presentation. */boundAddress?: string; /** The address spelled for a human; safe to paste into a browser. */
-  url: string; /** Whether the bind covers more than loopback. */
-  wildcardBind: boolean; /** The port actually bound. */
-  port: number; /** Routes on the app router at the moment the server started listening. */
-  routeCount: number; /** `app.baseUrl`, when it is a deployment address rather than a local one. */
+export type HttpReadyReport = {
+  /** Exactly what `listen()` returned — the bind, not its presentation. */
+  boundAddress?: string;
+  /** The address spelled for a human; safe to paste into a browser. */
+  url: string;
+  /** Whether the bind covers more than loopback. */
+  wildcardBind: boolean;
+  /** The port actually bound. */
+  port: number;
+  /** Routes on the app router at the moment the server started listening. */
+  routeCount: number;
+  /** `app.baseUrl`, when it is a deployment address rather than a local one. */
   publicUrl?: string;
 };
 /**
  * @internal Called by `HttpConnector.start()` right after a successful listen.
  */
-declare function setHttpReadyReport(next: HttpReadyReport): void;
+export declare function setHttpReadyReport(next: HttpReadyReport): void;
 /**
  * The last recorded bind, or `undefined` for a process with no HTTP surface —
  * a queue worker still boots, and the ready block must render without an app
  * URL rather than invent one.
  */
-declare function getHttpReadyReport(): HttpReadyReport | undefined;
+export declare function getHttpReadyReport(): HttpReadyReport | undefined;
 /** @internal Test seam — a module-level singleton needs a way back to empty. */
-declare function resetHttpReadyReport(): void;
+export declare function resetHttpReadyReport(): void;
 //#endregion
-export { HttpReadyReport, getHttpReadyReport, resetHttpReadyReport, setHttpReadyReport };
 //# sourceMappingURL=ready-report.d.mts.map

package/esm/http/ready-report.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"ready-report.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/ready-report.ts"],"mappings":";;AAiCA;;;;;;;;;;;AAYW;AAQX;;;;AAAwD;AASxD;;;;AAAqD;AAKrD;;;;AAAoC;;;;;KAlCxB,eAAA;2EAEV,YAAA;EAEA,GAAA;EAEA,YAAA;EAEA,IAAA;EAEA,UAAA;EAEA,SAAA;AAAA;;;;iBAQc,kBAAA,CAAmB,IAAqB,EAAf,eAAe;;;;;;iBASxC,kBAAA,IAAsB,eAAe;;iBAKrC,oBAAA"}
+{"version":3,"file":"ready-report.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/ready-report.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAiCY;;EAEV;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;;;;wBAQc,mBAAmB,MAAM;;;;;;wBASzB,sBAAsB;;wBAKtB"}

package/esm/http/request-controller.d.mts

@@ -2,14 +2,12 @@ import { Response } from "./response.mjs";
 import { Request } from "./request.mjs";
 import { ReturnedResponse } from "./types.mjs";
 import { RequestControllerContract } from "../router/types.mjs";
-
 //#region ../../packages/core/src/http/request-controller.d.ts
-declare abstract class RequestController implements RequestControllerContract {
+export declare abstract class RequestController implements RequestControllerContract {
   readonly request: Request;
   readonly response: Response;
   constructor(request: Request, response: Response);
   abstract execute(): Promise<ReturnedResponse>;
 }
 //#endregion
-export { RequestController };
 //# sourceMappingURL=request-controller.d.mts.map

package/esm/http/request-controller.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"request-controller.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/request-controller.ts"],"mappings":";;;;;;uBAKsB,iBAAA,YAA6B,yBAAA;EAAA,SAE/B,OAAA,EAAS,OAAA;EAAA,SACT,QAAA,EAAU,QAAA;cADV,OAAA,EAAS,OAAA,EACT,QAAA,EAAU,QAAA;EAAA,SAKZ,OAAA,IAAW,OAAA,CAAQ,gBAAA;AAAA"}
+{"version":3,"file":"request-controller.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/request-controller.ts"],"mappings":";;;;;8BAKsB,6BAA6B;WAE/B,SAAS;WACT,UAAU;EAF5B,YACkB,SAAS,SACT,UAAU;WAKZ,WAAW,QAAQ"}

package/esm/http/request-log-snapshot.d.mts

@@ -2,7 +2,7 @@
 /**
  * What a request's log entries carry of its input. Set globally under
  * `http.logging` and per route with the route's `logging` option; the route
- * wins key by key.
+ * wins key by key, unless a private URL policy suppresses that field.
  *
  * @example
  * // never log the body or the query string of this route, not even redacted
@@ -10,7 +10,7 @@
  *   logging: { body: false, query: false },
  * });
  */
-type RequestLoggingOptions = {
+export type RequestLoggingOptions = {
   /**
    * Include the request body in log entries.
    *
@@ -29,28 +29,40 @@ type RequestLoggingOptions = {
    */
   query?: boolean;
 };
+/** A URL policy that can only remove input from snapshots, even on unmatched requests. */
+export type PrivateRequestLoggingRule = {
+  /** Path prefix at a segment boundary, or a regular expression over the normalized path. */
+  path: string | RegExp;
+  body?: false;
+  query?: false;
+};
 /**
  * `http.logging`: the app-wide defaults for {@link RequestLoggingOptions},
  * plus query parameter names whose values are masked in logged URLs.
  */
-type HttpLoggingConfig = RequestLoggingOptions & {
+export type HttpLoggingConfig = RequestLoggingOptions & {
   /**
    * Extra query parameter names to mask in logged URLs, on top of the
    * logger's default secret-key denylist and {@link URL_CREDENTIAL_PARAMS}.
    * Matched like the logger's keys: case, `-` and `_` are ignored.
    */
   redactQueryParams?: string[];
+  /** URL policies applied before route logging; matching rules cannot be overridden by a route. */
+  private?: PrivateRequestLoggingRule[];
 };
 /**
  * The bounded, plain-data view of a request that Core puts in log entries in
  * place of the `Request`/`Response` instances, whose native request, reply
  * and socket graphs reach every sink otherwise.
  */
-type RequestLogSnapshot = {
+export type RequestLogSnapshot = {
   id: string;
-  method: string; /** Path and query string, with credential-bearing parameter values masked. */
-  url: string; /** The matched route pattern, e.g. `/users/:id`. */
-  route?: string; /** The route name, when it has one. */
+  method: string;
+  /** Path and query string, with credential-bearing parameter values masked. */
+  url: string;
+  /** The matched route pattern, e.g. `/users/:id`. */
+  route?: string;
+  /** The route name, when it has one. */
   name?: string;
   ip?: string;
   userAgent?: string;
@@ -62,7 +74,7 @@ type RequestLogSnapshot = {
  * are too generic for the logger's key denylist: signed-URL signatures,
  * pre-signed cloud credentials and OAuth authorization codes.
  */
-declare const URL_CREDENTIAL_PARAMS: readonly string[];
+export declare const URL_CREDENTIAL_PARAMS: readonly string[];
 /**
  * Mask the values of credential-bearing query parameters in a URL (absolute,
  * or a path with a query string). A parameter is credential-bearing when its
@@ -74,7 +86,7 @@ declare const URL_CREDENTIAL_PARAMS: readonly string[];
  * @example
  * redactUrlCredentials("/hooks?secret=abc&page=2") // "/hooks?secret=[REDACTED]&page=2"
  */
-declare function redactUrlCredentials(url: string, extraParams?: readonly string[]): string;
+export declare function redactUrlCredentials(url: string, extraParams?: readonly string[]): string;
 /**
  * Mask the values of credential-bearing parameters in a parsed query object,
  * with the same names {@link redactUrlCredentials} masks in the URL. Nested
@@ -83,19 +95,19 @@ declare function redactUrlCredentials(url: string, extraParams?: readonly string
  * @example
  * redactQueryCredentials({ code: "abc", page: "2" }) // { code: "[REDACTED]", page: "2" }
  */
-declare function redactQueryCredentials(query: Record<string, unknown>, extraParams?: readonly string[]): Record<string, unknown>;
+export declare function redactQueryCredentials(query: Record<string, unknown>, extraParams?: readonly string[]): Record<string, unknown>;
 /**
  * The effective logging options for a request: `http.logging` overlaid by the
- * route's own `logging` option.
+ * route's own `logging` option, then restricted by matching private URL policies.
  */
-declare function resolveRequestLoggingOptions(routeOptions: RequestLoggingOptions | undefined): Required<RequestLoggingOptions> & {
+export declare function resolveRequestLoggingOptions(routeOptions: RequestLoggingOptions | undefined, url?: string, routePath?: string): Required<RequestLoggingOptions> & {
   redactQueryParams: string[];
 };
 /**
  * The fields of a request the snapshot reads. Structural, so the snapshot can
  * be built (and tested) without a live Fastify request.
  */
-type RequestLogSource = {
+export type RequestLogSource = {
   id: string;
   method: string;
   url: string;
@@ -117,7 +129,6 @@ type RequestLogSource = {
  *
  * Uploaded files are summarised (`{ file, mimeType }`) rather than walked.
  */
-declare function buildRequestLogSnapshot(source: RequestLogSource): RequestLogSnapshot;
+export declare function buildRequestLogSnapshot(source: RequestLogSource): RequestLogSnapshot;
 //#endregion
-export { HttpLoggingConfig, RequestLogSnapshot, RequestLogSource, RequestLoggingOptions, URL_CREDENTIAL_PARAMS, buildRequestLogSnapshot, redactQueryCredentials, redactUrlCredentials, resolveRequestLoggingOptions };
 //# sourceMappingURL=request-log-snapshot.d.mts.map

package/esm/http/request-log-snapshot.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"request-log-snapshot.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/request-log-snapshot.ts"],"mappings":";;AAeA;;;;AAiBO;AAOP;;;;AAMmB;KA9BP,qBAAA;EAsCkB;;;;;;;;;EA5B5B,IAAA;EAuCA;;;;;AACa;EAjCb,KAAK;AAAA;;;AAkDN;AAmBD;KA9DY,iBAAA,GAAoB,qBAAqB;;;AA8DgC;AA4DrF;;EApHE,iBAAiB;AAAA;;;;;;KAQP,kBAAA;EACV,EAAA;EACA,MAAA;EAEA,GAAA,UAgJU;EA9IV,KAAA,WA8IS;EA5IT,IAAA;EACA,EAAA;EACA,SAAA;EACA,KAAA,GAAQ,MAAA;EACR,IAAA,GAAO,MAAM;AAAA;;AAwIyC;AAcxD;;;cA9Ia,qBAAA;;;;;;;;;;;;iBA4BG,oBAAA,CAAqB,GAAA,UAAa,WAAmC;;;;;;;;AA0HZ;iBA9DzD,sBAAA,CACd,KAAA,EAAO,MAAA,mBACP,WAAA,uBACC,MAAM;;;;;iBAmCO,4BAAA,CACd,YAAA,EAAc,qBAAA,eACb,QAAA,CAAS,qBAAA;EAA2B,iBAAA;AAAA;AAiC8C;;;;AAAA,KAnBzE,gBAAA;EACV,EAAA;EACA,MAAA;EACA,GAAA;EACA,EAAA;EACA,SAAA;EACA,KAAA,GAAQ,MAAA;EACR,IAAA,GAAO,MAAA;EACP,KAAA;IAAU,IAAA;IAAe,IAAA;IAAe,OAAA,GAAU,qBAAA;EAAA;AAAA;;;;;;;;;iBAWpC,uBAAA,CAAwB,MAAA,EAAQ,gBAAA,GAAmB,kBAAkB"}
+{"version":3,"file":"request-log-snapshot.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/http/request-log-snapshot.ts"],"mappings":";;;;;;;;;;;;YAeY;;;;;;;;;;EAUV;;;;;;;EAOA;;;YAIU;;EAEV,eAAe;EACf;EACA;;;;;;YAOU,oBAAoB;;;;;;EAM9B;;EAEA,UAAU;;;;;;;YAQA;EACV;EACA;;EAEA;;EAEA;;EAEA;EACA;EACA;EACA,QAAQ;EACR,OAAO;;;;;;;qBAQI;;;;;;;;;;;;wBA4BG,qBAAqB,aAAa;;;;;;;;;wBA4DlC,uBACd,OAAO,yBACP,kCACC;;;;;wBAmCa,6BACd,cAAc,mCACd,cACA,qBACC,SAAS;EAA2B;;;;;;YAuG3B;EACV;EACA;EACA;EACA;EACA;EACA,QAAQ;EACR,OAAO;EACP;IAAU;IAAe;IAAe,UAAU;;;;;;;;;;;wBAWpC,wBAAwB,QAAQ,mBAAmB"}

package/esm/http/request-log-snapshot.mjs

@@ -1,5 +1,5 @@
 import { UploadedFile } from "./uploaded-file.mjs";
-import config from "@mongez/config";
+import baseConfig from "@mongez/config";
 import { DEFAULT_REDACT_KEY_SET, normalizeRedactKey } from "@warlock.js/logger";
 
 //#region ../../packages/core/src/http/request-log-snapshot.ts
@@ -84,15 +84,94 @@ function redactQueryValue(value, isCredential) {
 }
 /**
 * The effective logging options for a request: `http.logging` overlaid by the
-* route's own `logging` option.
+* route's own `logging` option, then restricted by matching private URL policies.
 */
-function resolveRequestLoggingOptions(routeOptions) {
-	const global = config.get("http.logging") ?? {};
-	return {
+function resolveRequestLoggingOptions(routeOptions, url, routePath) {
+	const global = baseConfig.get("http.logging") ?? {};
+	const options = {
 		body: routeOptions?.body ?? global.body ?? true,
 		query: routeOptions?.query ?? global.query ?? true,
 		redactQueryParams: global.redactQueryParams ?? []
 	};
+	if (!global.private?.length || url === void 0) return options;
+	const candidates = loggingPathCandidates(url);
+	if (candidates === void 0) return {
+		...options,
+		body: false,
+		query: false
+	};
+	if (routePath) {
+		const routeCandidates = loggingPathCandidates(routePath);
+		if (!routeCandidates) return {
+			...options,
+			body: false,
+			query: false
+		};
+		candidates.push(...routeCandidates);
+	}
+	for (const rule of compiledPrivateRules(global.private)) {
+		let matches;
+		if (rule.type === "regex") {
+			const { regex, needsClone } = rule;
+			matches = candidates.some((candidate) => (needsClone ? new RegExp(regex.source, regex.flags) : regex).test(candidate));
+		} else {
+			const { prefixes } = rule;
+			matches = prefixes === void 0 || prefixes.some((prefix) => candidates.some((candidate) => prefix === "/" || candidate === prefix || candidate.startsWith(`${prefix}/`)));
+		}
+		if (!matches) continue;
+		if (rule.body === false) options.body = false;
+		if (rule.query === false) options.query = false;
+	}
+	return options;
+}
+/**
+* Compiled rules per configured `http.logging.private` array. Snapshots are
+* built several times per request, so each array's prefixes are normalised
+* once; replacing the array (a new config value) compiles the new one.
+*/
+const compiledRulesCache = /* @__PURE__ */ new WeakMap();
+function compiledPrivateRules(rules) {
+	let compiled = compiledRulesCache.get(rules);
+	if (compiled) return compiled;
+	compiled = rules.map((rule) => {
+		const { path, body, query } = rule;
+		if (path instanceof RegExp) return {
+			type: "regex",
+			regex: path,
+			needsClone: path.global || path.sticky,
+			body,
+			query
+		};
+		return {
+			type: "prefix",
+			prefixes: loggingPathCandidates(path),
+			body,
+			query
+		};
+	});
+	compiledRulesCache.set(rules, compiled);
+	return compiled;
+}
+/** Backslashes to slashes, repeated slashes collapsed, no trailing slash. */
+function collapseLoggingPath(path) {
+	return path.replace(/\\/g, "/").replace(/\/+/g, "/").replace(/\/$/, "") || "/";
+}
+function loggingPathCandidates(url) {
+	try {
+		const pathname = url.replace(/^[a-z][a-z\d+.-]*:\/\/[^/?#]*/i, "").split(/[?#]/u)[0] || "/";
+		const raw = collapseLoggingPath(pathname);
+		const decoded = collapseLoggingPath(decodeURIComponent(pathname));
+		const segments = [];
+		for (const segment of decoded.split("/")) if (segment === "..") segments.pop();
+		else if (segment && segment !== ".") segments.push(segment);
+		return [.../* @__PURE__ */ new Set([
+			raw,
+			decoded,
+			`/${segments.join("/")}`
+		])];
+	} catch {
+		return;
+	}
 }
 /**
 * Build the {@link RequestLogSnapshot} for a request, applying the route's
@@ -103,7 +182,7 @@ function resolveRequestLoggingOptions(routeOptions) {
 * Uploaded files are summarised (`{ file, mimeType }`) rather than walked.
 */
 function buildRequestLogSnapshot(source) {
-	const options = resolveRequestLoggingOptions(source.route?.logging);
+	const options = resolveRequestLoggingOptions(source.route?.logging, source.url, source.route?.path);
 	const url = options.query ? source.url : stripQuery(source.url);
 	const snapshot = {
 		id: source.id,