@xopcai/xopc 0.0.373 → 0.0.375

package/dist/src/gateway/security/audit.js

@@ -1,12 +1,13 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled } from "../rate-limit/env-flags.js";
+import { init_rate_limit } from "../rate-limit/index.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../auth.js";
 import { resolveGatewayListenPlan } from "../listen.js";
 import { collectExposureConflicts, isRemoteGatewayInsecure, isTailnetBindUnavailable } from "../../remote-access/exposure-guards.js";
-import { isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled } from "../rate-limit/env-flags.js";
-import "../rate-limit/index.js";
 import { assertGatewayRuntimeConfig } from "../runtime-config.js";
 //#region src/gateway/security/audit.ts
+init_rate_limit();
 init_logger();
 const log = createLogger("SecurityAudit");
 /** Minimum token length to resist brute-force even with rate limiting. */

package/dist/src/gateway/security/browser-session.js

@@ -1,6 +1,7 @@
-import { isLoopbackHost } from "../host.js";
+import { init_host, isLoopbackHost } from "../host.js";
 import { deleteCookie, getCookie, setCookie } from "hono/cookie";
 //#region src/gateway/security/browser-session.ts
+init_host();
 function origin(c) {
 	return new URL(`http://${c.req.header("host") ?? new URL(c.req.url).host}`);
 }

package/dist/src/gateway/security/device-request-proof.d.ts

@@ -0,0 +1,28 @@
+import crypto from 'node:crypto';
+import type { DeviceRecord } from '../../storage/sqlite/device-access-repository.js';
+export declare const REQUEST_PROOF_WINDOW_MS = 120000;
+export declare const PROOF_HEADER = "X-Xopc-Proof";
+export declare const SIGNED_REQUEST_HEADERS: readonly ["content-type", "idempotency-key", "x-xopc-expected-session-key", "x-endpoint-id", "x-endpoint-upload-token"];
+/** Bounds buffered uploads through route completion, after signature verification. */
+export declare function acquireProofBodyBudget(deviceId: string): (() => void) | undefined;
+export declare function proofDigest(bytes: crypto.BinaryLike): string;
+export interface RequestProof {
+    timestamp: number;
+    nonce: string;
+    digest: string;
+    signature: string;
+}
+export declare function parseRequestProof(header: string | undefined): RequestProof | undefined;
+export declare function requestProofMessage(input: {
+    gatewayId: string;
+    credential: string;
+    method: string;
+    target: string;
+    headers: (name: string) => string | undefined;
+    proof: Pick<RequestProof, 'timestamp' | 'nonce' | 'digest'>;
+}): string;
+export declare function verifyRequestProofSignature(device: DeviceRecord, proof: RequestProof, message: string): boolean;
+/** The unique insert happens before business effects; expiry includes future-dated proofs. */
+export declare function consumeRequestNonce(deviceId: string, proof: RequestProof, now?: number): boolean;
+/** Native WebSocket upgrades bind the first ticket to the device key without another round trip. */
+export declare function verifyDeviceConnectionProof(principalId: string, ticket: string, path: string, header: string | undefined): boolean;

package/dist/src/gateway/security/device-request-proof.js

@@ -0,0 +1,122 @@
+import { init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
+import { getDevice, init_device_access_repository } from "../../storage/sqlite/device-access-repository.js";
+import { getOrCreateGatewayIdentity, init_gateway_identity_repository } from "../../storage/sqlite/gateway-identity-repository.js";
+import crypto from "node:crypto";
+//#region src/gateway/security/device-request-proof.ts
+init_device_access_repository();
+init_gateway_identity_repository();
+init_transaction();
+const REQUEST_PROOF_WINDOW_MS = 12e4;
+const PROOF_HEADER = "X-Xopc-Proof";
+const SIGNED_REQUEST_HEADERS = [
+	"content-type",
+	"idempotency-key",
+	"x-xopc-expected-session-key",
+	"x-endpoint-id",
+	"x-endpoint-upload-token"
+];
+const MAX_PENDING_NONCES = 1e5;
+const nonceBudgets = /* @__PURE__ */ new WeakMap();
+let activeProofBodies = 0;
+const activeDeviceBodies = /* @__PURE__ */ new Map();
+/** Bounds buffered uploads through route completion, after signature verification. */
+function acquireProofBodyBudget(deviceId) {
+	const count = activeDeviceBodies.get(deviceId) ?? 0;
+	if (activeProofBodies >= 16 || count >= 8) return void 0;
+	activeProofBodies++;
+	activeDeviceBodies.set(deviceId, count + 1);
+	let held = true;
+	return () => {
+		if (!held) return;
+		held = false;
+		activeProofBodies--;
+		const remaining = (activeDeviceBodies.get(deviceId) ?? 1) - 1;
+		if (remaining) activeDeviceBodies.set(deviceId, remaining);
+		else activeDeviceBodies.delete(deviceId);
+	};
+}
+function proofDigest(bytes) {
+	return crypto.createHash("sha256").update(bytes).digest("hex");
+}
+function parseRequestProof(header) {
+	if (!header || header.length > 256) return void 0;
+	const parts = header.split(".");
+	if (parts.length !== 4 || !/^\d{13}$/.test(parts[0]) || !/^[A-Za-z0-9_-]{22,64}$/.test(parts[1]) || !/^[a-f0-9]{64}$/.test(parts[2]) || !/^[A-Za-z0-9_-]{86}$/.test(parts[3])) return void 0;
+	return {
+		timestamp: Number(parts[0]),
+		nonce: parts[1],
+		digest: parts[2],
+		signature: parts[3]
+	};
+}
+function requestProofMessage(input) {
+	return [
+		"xopc-request-v1",
+		input.gatewayId,
+		proofDigest(input.credential),
+		input.method,
+		input.target,
+		input.proof.digest,
+		...SIGNED_REQUEST_HEADERS.map((name) => input.headers(name) ?? ""),
+		String(input.proof.timestamp),
+		input.proof.nonce
+	].join("\n");
+}
+function verifyRequestProofSignature(device, proof, message) {
+	try {
+		const key = crypto.createPublicKey({
+			key: device.publicKeyJwk,
+			format: "jwk"
+		});
+		return crypto.verify("sha256", Buffer.from(message), {
+			key,
+			dsaEncoding: "ieee-p1363"
+		}, Buffer.from(proof.signature, "base64url"));
+	} catch {
+		return false;
+	}
+}
+/** The unique insert happens before business effects; expiry includes future-dated proofs. */
+function consumeRequestNonce(deviceId, proof, now = Date.now()) {
+	return runSqliteWriteTransaction((db) => {
+		let budget = nonceBudgets.get(db);
+		if (!budget || now >= budget.cleanupAt) {
+			db.prepare("DELETE FROM device_request_nonces WHERE expires_at < ?").run(now);
+			const count = db.prepare("SELECT count(*) AS total FROM device_request_nonces").get();
+			budget = {
+				cleanupAt: now + 3e4,
+				total: count.total
+			};
+			nonceBudgets.set(db, budget);
+		}
+		if (Math.abs(now - proof.timestamp) > 12e4 || budget.total >= MAX_PENDING_NONCES) return false;
+		const inserted = db.prepare("INSERT OR IGNORE INTO device_request_nonces (device_id, nonce, expires_at) VALUES (?, ?, ?)").run(deviceId, proof.nonce, proof.timestamp + REQUEST_PROOF_WINDOW_MS).changes === 1;
+		if (inserted) budget.total++;
+		return inserted;
+	});
+}
+/** Native WebSocket upgrades bind the first ticket to the device key without another round trip. */
+function verifyDeviceConnectionProof(principalId, ticket, path, header) {
+	let device;
+	try {
+		device = getDevice(principalId);
+	} catch {
+		return false;
+	}
+	if (!device) return !header;
+	if (device.revokedAt !== void 0) return false;
+	if (!device.requestProofVersion && !header) return true;
+	const proof = parseRequestProof(header);
+	if (!proof || Math.abs(Date.now() - proof.timestamp) > 12e4 || proof.digest !== proofDigest("")) return false;
+	const message = requestProofMessage({
+		gatewayId: getOrCreateGatewayIdentity().id,
+		credential: ticket,
+		method: "CONNECT",
+		target: path,
+		headers: () => void 0,
+		proof
+	});
+	return verifyRequestProofSignature(device, proof, message) && consumeRequestNonce(device.id, proof);
+}
+//#endregion
+export { PROOF_HEADER, REQUEST_PROOF_WINDOW_MS, SIGNED_REQUEST_HEADERS, acquireProofBodyBudget, consumeRequestNonce, parseRequestProof, proofDigest, requestProofMessage, verifyDeviceConnectionProof, verifyRequestProofSignature };

package/dist/src/gateway/security/loopback.js

@@ -1,9 +1,6 @@
-import { isLoopbackHost } from "../host.js";
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
+import { init_host, isLoopbackHost } from "../host.js";
 //#region src/gateway/security/loopback.ts
-/**
-* Loopback / browser-origin classification helpers used by rate-limit policy
-* and other security middleware. Pure functions, no I/O.
-*/
 function isLoopbackClientIp(clientIp) {
 	if (!clientIp || clientIp === "unknown") return false;
 	const trimmed = clientIp.trim();
@@ -39,5 +36,9 @@ function getClientIpFromHeaders(headers) {
 	if (cf) return cf;
 	return "unknown";
 }
+var init_loopback = __esmMin((() => {
+	init_host();
+}));
 //#endregion
-export { getClientIpFromHeaders, isLoopbackBrowserOrigin, isLoopbackClientIp, isLoopbackEmbeddedBrowserClient };
+init_loopback();
+export { getClientIpFromHeaders, init_loopback, isLoopbackBrowserOrigin, isLoopbackClientIp, isLoopbackEmbeddedBrowserClient };

package/dist/src/gateway/service/session-command-service.js

@@ -1,7 +1,7 @@
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../../storage/sqlite/session-repository.js";
-import { init_providers, resolveModel } from "../../providers/index.js";
 import { resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
+import { init_providers, resolveModel } from "../../providers/index.js";
 import { getPersonalAgentByConversation } from "../../personal-agent/repository.js";
 import { resolveProjectAgentId } from "../../projects/project-agent.js";
 import "../../projects/index.js";

package/dist/src/gateway/service.js

@@ -8,6 +8,10 @@ import { init_logger } from "../utils/logger.js";
 import { closeXopcDatabase } from "../storage/sqlite/connection.js";
 import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
 import { getBrowserTabBindingById, init_browser_tab_binding_repository } from "../storage/sqlite/browser-tab-binding-repository.js";
+import { buckets } from "./rate-limit/buckets.js";
+import { init_host, resolveEffectiveGatewayPort } from "./host.js";
+import { isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
+import { init_rate_limit } from "./rate-limit/index.js";
 import { bumpSessionInputRevision, findSessionInput, init_session_input_repository, insertSessionInput } from "../storage/sqlite/session-input-repository.js";
 import { TaskRepository } from "../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../tasks/task-run-repository.js";
@@ -16,21 +20,22 @@ import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js
 import { init_session_repository, listSessionMetadata, patchSessionMetadata } from "../storage/sqlite/session-repository.js";
 import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
 import { init_sqlite } from "../storage/sqlite/index.js";
+import { listKnowledgeItems } from "../knowledge-memory/repository.js";
+import { init_config, resolveKnowledgeReadPolicy } from "../user-context/config.js";
+import { init_agent_session_key, resolveAgentMainConversationId } from "../routing/agent-session-key.js";
+import { init_session_key, resolveConversationId, sanitizeSegment } from "../routing/session-key.js";
+import "../knowledge-memory/index.js";
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { init_agent_scope, listAgentEntries, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
-import { init_config, resolveKnowledgeReadPolicy } from "../user-context/config.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
+import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { init_paths, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
 import { prewarmModelRegistry } from "../providers/model-registry.js";
-import { init_agent_session_key, resolveAgentMainConversationId } from "../routing/agent-session-key.js";
-import { init_session_key, resolveConversationId, sanitizeSegment } from "../routing/session-key.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_providers, providers_exports } from "../providers/index.js";
 import { flushTracing } from "../observability/runtime.js";
 import { AI_USAGE_RETENTION_MS, markStaleAiUsageEventsUnknown, pruneAiUsageEvents } from "../storage/sqlite/ai-usage-repository.js";
-import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
-import { listKnowledgeItems } from "../knowledge-memory/repository.js";
-import "../knowledge-memory/index.js";
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { getPersonalAgentByConversation } from "../personal-agent/repository.js";
 import { TaskConversationRepository } from "../tasks/task-conversation-repository.js";
 import { getEmbeddedExecutionSession } from "../agent/embedded/execution-context.js";
@@ -38,7 +43,6 @@ import { DomainOutboxDispatcher } from "../infra/domain-outbox-dispatcher.js";
 import { ProjectService } from "../projects/project-service.js";
 import { resolveProjectAgentId } from "../projects/project-agent.js";
 import "../projects/index.js";
-import { resolveEffectiveGatewayPort } from "./host.js";
 import { runMemoryMaintenance } from "../memory-maintenance/service.js";
 import "../memory-maintenance/index.js";
 import { RealtimeExtensionBrowserProvider } from "../browser/providers/realtime-extension.js";
@@ -74,7 +78,6 @@ import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
 import { ChannelManager } from "../channels/manager.js";
 import { ChatPreviewService } from "../chat-previews/service.js";
 import "../chat-previews/index.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
 import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
 import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
@@ -91,10 +94,6 @@ import { DiscussionSealer } from "../discussions/sealer.js";
 import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
-import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
-import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
-import { HomeIntelligenceHost } from "../home-intelligence/host.js";
-import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
@@ -124,9 +123,6 @@ import { wireTunnelEventsToGateway } from "../tunnel/gateway-lifecycle.js";
 import { getExposureManager } from "../remote-access/exposure-manager.js";
 import { sanitizeTunnelConfig } from "../tunnel/tunnel-config.js";
 import { assertGatewayAuthNotKnownWeak } from "./security/known-weak-secrets.js";
-import { buckets } from "./rate-limit/buckets.js";
-import { isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
-import "./rate-limit/index.js";
 import { assertGatewayRuntimeConfig } from "./runtime-config.js";
 import { auditGatewayConfig } from "./security/audit.js";
 import { getXopcCloudCatalogCoordinator } from "../providers/xopc-cloud-catalog-coordinator.js";
@@ -159,6 +155,10 @@ import { TaskMainUpdateDecisionService } from "../tasks/task-main-update-decisio
 import { selectTaskMainUpdateAttempt, submitAndConfirmTaskMainUpdate } from "../tasks/task-main-update-input.js";
 import { checkAppContextAccess, prepareAppContext } from "./service/app-context-access.js";
 import { applyAutomaticVoiceLanguage, inferProductLanguageFromEnvironment, initializeVoiceDefaults } from "../voice/language-profile.js";
+import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
+import { HomeIntelligenceHost } from "../home-intelligence/host.js";
+import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
+import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
 import crypto from "node:crypto";
 //#region src/gateway/service.ts
 init_session_repository();
@@ -169,6 +169,8 @@ init_config_repository();
 init_changes();
 init_agent_scope();
 init_schema();
+init_host();
+init_rate_limit();
 init_providers();
 init_logger();
 init_log_stream();

package/dist/src/gateway/tailscale-auth.js

@@ -1,6 +1,7 @@
+import { init_host, isLoopbackHost } from "./host.js";
 import { readTailscaleWhoisIdentity } from "../infra/tailscale.js";
-import { isLoopbackHost } from "./host.js";
 //#region src/gateway/tailscale-auth.ts
+init_host();
 function parseTailscaleAuthHeaders(headers) {
 	return {
 		forwardedFor: headers["x-forwarded-for"]?.split(",")[0]?.trim(),

package/dist/src/gateway/ws-security.js

@@ -1,9 +1,10 @@
-import { isLoopbackHost } from "./host.js";
+import { init_host, isLoopbackHost } from "./host.js";
 import net from "node:net";
 //#region src/gateway/ws-security.ts
 /**
 * WebSocket / gateway URL transport security (OpenClaw-aligned).
 */
+init_host();
 function isPrivateOrLoopbackHost(hostname) {
 	const host = hostname.trim().toLowerCase();
 	if (isLoopbackHost(host)) return true;

package/dist/src/gateway/xopc-cloud-capability-setup.js

@@ -1,8 +1,8 @@
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../providers/model-catalog-store.js";
 import { getAvailableModels, init_providers } from "../providers/index.js";
 import { compareCatalogModels } from "../providers/model-catalog-ranking.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "./global-defaults-admin.js";
 //#region src/gateway/xopc-cloud-capability-setup.ts
 init_repository();

package/dist/src/home-intelligence/generator.js

@@ -1,8 +1,8 @@
 import { init_agent_scope, resolveDefaultAgentId } from "../agent/agent-scope.js";
-import { extractAssistantText, getAssistantMessageErrorReason } from "../providers/model-response.js";
+import { resolveModelSelector } from "../config/agent-model-intents.js";
 import { init_providers, resolveModel } from "../providers/index.js";
 import { completeWithResolvedCredentials, isLocalModelBaseUrl } from "../providers/model-call.js";
-import { resolveModelSelector } from "../config/agent-model-intents.js";
+import { extractAssistantText, getAssistantMessageErrorReason } from "../providers/model-response.js";
 import { z } from "zod";
 //#region src/home-intelligence/generator.ts
 init_agent_scope();

package/dist/src/home-intelligence/host.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { homePatternKey } from "./strategy.js";
+import { HomeAdvicePolicy } from "./policy.js";
 import { HomeIntelligenceRepository } from "./repository.js";
 import { HomeOpportunityApplicationService } from "./application-service.js";
-import { HomeAdvicePolicy } from "./policy.js";
-import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { buildHomeOpportunityNotification } from "./notification.js";
 import { createHash } from "node:crypto";
 //#region src/home-intelligence/host.ts

package/dist/src/imports/inventory.js

@@ -1,6 +1,6 @@
-import { init_paths, resolveSkillsDir } from "../config/paths.js";
 import { listKnowledgeItems } from "../knowledge-memory/repository.js";
 import "../knowledge-memory/index.js";
+import { init_paths, resolveSkillsDir } from "../config/paths.js";
 import { ProjectService } from "../projects/project-service.js";
 import { resolveWorkspaceSkillsDir } from "../agent/skills/workspace-skills-dir.js";
 import { ImportError } from "./types.js";

package/dist/src/infra/rate-limit/failure-limiter.js

@@ -1,98 +1,86 @@
-import { KeyedStore } from "./keyed-store.js";
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
+import { KeyedStore, init_keyed_store } from "./keyed-store.js";
 //#region src/infra/rate-limit/failure-limiter.ts
-/**
-* Per-key brute-force protection limiter.
-*
-* Semantics:
-*   - `fail(key)` records a failed attempt; reaching `maxFailures` within
-*     `windowMs` triggers a `blockDurationMs` lockout.
-*   - `succeed(key)` clears all state for the key (a successful auth wipes the
-*     bucket so legitimate users aren't punished for prior typos).
-*   - `check(key)` is read-only — returns the current block status.
-*   - Failures from the same key within `burstCoalesceMs` collapse to a single
-*     attempt. This absorbs SPA fan-out / SDK auto-retry storms without
-*     weakening protection: a deliberate attacker is rate-limited to ~1
-*     attempt/s per key, still astronomically slow against any token of
-*     meaningful entropy.
-*
-* Pure counter — no policy knowledge (loopback exemption, key formatting,
-* etc. all live in the policy layer that calls into this limiter).
-*/
-const DEFAULT_BURST_COALESCE_MS = 1e3;
-var FailureLimiter = class {
-	store;
-	clock;
-	maxFailures;
-	windowMs;
-	blockDurationMs;
-	burstCoalesceMs;
-	constructor(cfg) {
-		this.maxFailures = Math.max(1, Math.floor(cfg.maxFailures));
-		this.windowMs = Math.max(1e3, Math.floor(cfg.windowMs));
-		this.blockDurationMs = Math.max(1e3, Math.floor(cfg.blockDurationMs));
-		this.burstCoalesceMs = Math.max(0, Math.floor(cfg.burstCoalesceMs ?? DEFAULT_BURST_COALESCE_MS));
-		this.clock = cfg.clock ?? Date.now;
-		this.store = new KeyedStore({
-			staleAfterMs: cfg.staleAfterMs ?? this.windowMs + this.blockDurationMs,
-			clock: this.clock
-		});
-	}
-	check(key) {
-		const now = this.clock();
-		const state = this.store.get(key);
-		if (!state?.blockedUntil) return { blocked: false };
-		if (now >= state.blockedUntil) {
-			state.blockedUntil = void 0;
-			state.count = 0;
-			state.windowStart = now;
-			state.lastTouchedMs = now;
-			return { blocked: false };
+var DEFAULT_BURST_COALESCE_MS, FailureLimiter;
+var init_failure_limiter = __esmMin((() => {
+	init_keyed_store();
+	DEFAULT_BURST_COALESCE_MS = 1e3;
+	FailureLimiter = class {
+		store;
+		clock;
+		maxFailures;
+		windowMs;
+		blockDurationMs;
+		burstCoalesceMs;
+		constructor(cfg) {
+			this.maxFailures = Math.max(1, Math.floor(cfg.maxFailures));
+			this.windowMs = Math.max(1e3, Math.floor(cfg.windowMs));
+			this.blockDurationMs = Math.max(1e3, Math.floor(cfg.blockDurationMs));
+			this.burstCoalesceMs = Math.max(0, Math.floor(cfg.burstCoalesceMs ?? DEFAULT_BURST_COALESCE_MS));
+			this.clock = cfg.clock ?? Date.now;
+			this.store = new KeyedStore({
+				staleAfterMs: cfg.staleAfterMs ?? this.windowMs + this.blockDurationMs,
+				clock: this.clock
+			});
 		}
-		return {
-			blocked: true,
-			retryAfterSec: Math.max(1, Math.ceil((state.blockedUntil - now) / 1e3))
-		};
-	}
-	fail(key) {
-		const now = this.clock();
-		let state = this.store.get(key);
-		if (!state) {
-			state = {
-				windowStart: now,
-				count: 0,
-				lastTouchedMs: now
+		check(key) {
+			const now = this.clock();
+			const state = this.store.get(key);
+			if (!state?.blockedUntil) return { blocked: false };
+			if (now >= state.blockedUntil) {
+				state.blockedUntil = void 0;
+				state.count = 0;
+				state.windowStart = now;
+				state.lastTouchedMs = now;
+				return { blocked: false };
+			}
+			return {
+				blocked: true,
+				retryAfterSec: Math.max(1, Math.ceil((state.blockedUntil - now) / 1e3))
 			};
-			this.store.set(key, state);
 		}
-		state.lastTouchedMs = now;
-		if (state.blockedUntil && now < state.blockedUntil) return;
-		if (state.blockedUntil && now >= state.blockedUntil) {
-			state.blockedUntil = void 0;
-			state.count = 0;
-			state.windowStart = now;
+		fail(key) {
+			const now = this.clock();
+			let state = this.store.get(key);
+			if (!state) {
+				state = {
+					windowStart: now,
+					count: 0,
+					lastTouchedMs: now
+				};
+				this.store.set(key, state);
+			}
+			state.lastTouchedMs = now;
+			if (state.blockedUntil && now < state.blockedUntil) return;
+			if (state.blockedUntil && now >= state.blockedUntil) {
+				state.blockedUntil = void 0;
+				state.count = 0;
+				state.windowStart = now;
+			}
+			if (now - state.windowStart > this.windowMs) {
+				state.count = 0;
+				state.windowStart = now;
+			}
+			if (state.lastFailureAtMs !== void 0 && now - state.lastFailureAtMs < this.burstCoalesceMs) {
+				state.lastFailureAtMs = now;
+				return;
+			}
+			state.lastFailureAtMs = now;
+			state.count += 1;
+			if (state.count >= this.maxFailures) state.blockedUntil = now + this.blockDurationMs;
 		}
-		if (now - state.windowStart > this.windowMs) {
-			state.count = 0;
-			state.windowStart = now;
+		succeed(key) {
+			this.store.delete(key);
 		}
-		if (state.lastFailureAtMs !== void 0 && now - state.lastFailureAtMs < this.burstCoalesceMs) {
-			state.lastFailureAtMs = now;
-			return;
+		/** @internal Test hook. */
+		resetForTests() {
+			this.store.clear();
+		}
+		destroy() {
+			this.store.destroy();
 		}
-		state.lastFailureAtMs = now;
-		state.count += 1;
-		if (state.count >= this.maxFailures) state.blockedUntil = now + this.blockDurationMs;
-	}
-	succeed(key) {
-		this.store.delete(key);
-	}
-	/** @internal Test hook. */
-	resetForTests() {
-		this.store.clear();
-	}
-	destroy() {
-		this.store.destroy();
-	}
-};
+	};
+}));
 //#endregion
-export { FailureLimiter };
+init_failure_limiter();
+export { FailureLimiter, init_failure_limiter };

package/dist/src/infra/rate-limit/index.js

@@ -1,3 +1,11 @@
-import { RateLimiter } from "./rate-limiter.js";
-import { FailureLimiter } from "./failure-limiter.js";
-export { FailureLimiter, RateLimiter };
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
+import { RateLimiter, init_rate_limiter } from "./rate-limiter.js";
+import { FailureLimiter, init_failure_limiter } from "./failure-limiter.js";
+//#region src/infra/rate-limit/index.ts
+var init_rate_limit = __esmMin((() => {
+	init_rate_limiter();
+	init_failure_limiter();
+}));
+//#endregion
+init_rate_limit();
+export { FailureLimiter, RateLimiter, init_rate_limit };