@yiaany/ghostapi 0.1.7 → 0.1.8

package/dist/behavior/behaviorStore.js

@@ -1,50 +1,35 @@
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-import { dirname } from "node:path";
-const BEHAVIOR_FILE_PATH = ".ghostapi/behaviors.json";
-let writeLock = Promise.resolve();
+import { getDataPaths } from "../config/dataPaths.js";
+import { atomicWriteJson, mutateJsonFile, readJsonFile, withFileLock } from "../storage/fileStore.js";
+import { sanitizeSecrets } from "../security/secrets.js";
+import { sanitizeResponseHeaders } from "../security/headerSanitizer.js";
+export const MAX_API_BEHAVIORS = 500;
+const MAX_BEHAVIOR_BYTES = 256 * 1024;
+const MAX_BEHAVIOR_STORE_BYTES = 4 * 1024 * 1024;
 export async function setApiBehavior(behavior) {
-    return withWriteLock(async () => {
-        const behaviors = await getApiBehaviors();
+    let normalizedResult;
+    await mutateJsonFile(getDataPaths().behaviors, {}, sanitizeBehaviors, (behaviors) => {
         const normalized = normalizeBehavior(behavior);
+        normalizedResult = normalized;
         const key = behaviorKey(normalized.method, normalized.path);
-        behaviors[key] = normalized;
-        await writeBehaviors(behaviors);
-        return normalized;
+        const next = { ...behaviors, [key]: normalized };
+        if (Object.keys(next).length > MAX_API_BEHAVIORS)
+            throw new Error(`Behavior store is limited to ${MAX_API_BEHAVIORS} entries.`);
+        if (Buffer.byteLength(JSON.stringify(next), "utf8") > MAX_BEHAVIOR_STORE_BYTES)
+            throw new Error("Behavior store exceeds its aggregate size limit.");
+        return next;
     });
+    return normalizedResult;
 }
 export async function findApiBehavior(request) {
     const behaviors = await getApiBehaviors();
     return behaviors[behaviorKey(request.method, request.path)] ?? null;
 }
 export async function getApiBehaviors() {
-    try {
-        const parsed = JSON.parse(await readFile(BEHAVIOR_FILE_PATH, "utf8"));
-        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
-            return {};
-        return Object.fromEntries(Object.entries(parsed).filter((entry) => isApiBehavior(entry[1])));
-    }
-    catch (error) {
-        if (error instanceof Error && "code" in error && error.code === "ENOENT")
-            return {};
-        throw error;
-    }
+    return readJsonFile(getDataPaths().behaviors, {}, sanitizeBehaviors);
 }
 export async function clearApiBehaviorsForTests() {
-    await withWriteLock(async () => {
-        await writeBehaviors({});
-    });
-}
-async function withWriteLock(operation) {
-    const previous = writeLock;
-    let release;
-    writeLock = new Promise((resolve) => { release = resolve; });
-    await previous;
-    try {
-        return await operation();
-    }
-    finally {
-        release();
-    }
+    const behaviorPath = getDataPaths().behaviors;
+    await withFileLock(behaviorPath, () => atomicWriteJson(behaviorPath, {}));
 }
 function normalizeBehavior(behavior) {
     const path = behavior.path.startsWith("/") ? behavior.path : `/${behavior.path}`;
@@ -52,21 +37,40 @@ function normalizeBehavior(behavior) {
     if (!Number.isInteger(behavior.status) || behavior.status < 100 || behavior.status > 599) {
         throw new Error("Behavior status must be an integer between 100 and 599.");
     }
-    return { ...behavior, path, method };
+    if (behavior.delayMs !== undefined && (!Number.isInteger(behavior.delayMs) || behavior.delayMs < 0 || behavior.delayMs > 10_000)) {
+        throw new Error("Behavior delayMs must be an integer between 0 and 10000.");
+    }
+    if (path.length > 2048 || /[\r\n\0]/.test(path))
+        throw new Error("Behavior path is invalid.");
+    if (!/^(?:GET|POST|PUT|PATCH|DELETE|HEAD|OPTIONS)$/.test(method))
+        throw new Error("Behavior method is invalid.");
+    const headers = behavior.headers === undefined ? undefined : sanitizeResponseHeaders(behavior.headers);
+    if (behavior.headers !== undefined && (headers === undefined || Object.keys(headers).length !== Object.keys(behavior.headers).length))
+        throw new Error("Behavior response headers contain an unsafe or unsupported header.");
+    const normalized = sanitizeSecrets({ ...behavior, path, method, ...(headers === undefined ? {} : { headers }) });
+    if (Buffer.byteLength(JSON.stringify(normalized), "utf8") > MAX_BEHAVIOR_BYTES)
+        throw new Error("Behavior exceeds its size limit.");
+    return normalized;
 }
 function behaviorKey(method, path) {
     return `${method.toUpperCase()} ${path}`;
 }
-async function writeBehaviors(behaviors) {
-    await mkdir(dirname(BEHAVIOR_FILE_PATH), { recursive: true });
-    await writeFile(BEHAVIOR_FILE_PATH, JSON.stringify(behaviors, null, 2), "utf8");
-}
 function isApiBehavior(value) {
-    return value !== null
-        && typeof value === "object"
-        && !Array.isArray(value)
-        && typeof value.path === "string"
-        && typeof value.method === "string"
-        && typeof value.status === "number";
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const behavior = value;
+    return typeof behavior.path === "string"
+        && typeof behavior.method === "string"
+        && Number.isInteger(behavior.status)
+        && behavior.status >= 100
+        && behavior.status <= 599
+        && (behavior.delayMs === undefined || (Number.isInteger(behavior.delayMs) && behavior.delayMs >= 0 && behavior.delayMs <= 10_000));
+}
+function sanitizeBehaviors(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        return {};
+    return Object.fromEntries(Object.entries(value)
+        .map(([key, entryValue]) => [key, sanitizeSecrets(entryValue)])
+        .filter((entry) => isApiBehavior(entry[1])));
 }
 //# sourceMappingURL=behaviorStore.js.map

package/dist/behavior/behaviorStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"behaviorStore.js","sourceRoot":"","sources":["../../src/behavior/behaviorStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWpC,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AACtD,IAAI,SAAS,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAqB;IACxD,OAAO,aAAa,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,SAAS,GAAG,MAAM,eAAe,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC5D,SAAS,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;QAC5B,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA0B;IAC9D,MAAM,SAAS,GAAG,MAAM,eAAe,EAAE,CAAC;IAC1C,OAAO,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAY,CAAC;QACjF,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtF,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAkC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAC7H,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACpF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,aAAa,CAAC,KAAK,IAAI,EAAE;QAC7B,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAAI,SAA2B;IACzD,MAAM,QAAQ,GAAG,SAAS,CAAC;IAC3B,IAAI,OAAoB,CAAC;IACzB,SAAS,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,QAAQ,CAAC;IACf,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAqB;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,IAAY;IAC/C,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,SAAsC;IAClE,MAAM,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI;WAChB,OAAO,KAAK,KAAK,QAAQ;WACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACrB,OAAQ,KAAqB,CAAC,IAAI,KAAK,QAAQ;WAC/C,OAAQ,KAAqB,CAAC,MAAM,KAAK,QAAQ;WACjD,OAAQ,KAAqB,CAAC,MAAM,KAAK,QAAQ,CAAC;AACzD,CAAC"}
+{"version":3,"file":"behaviorStore.js","sourceRoot":"","sources":["../../src/behavior/behaviorStore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACtG,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC;AACtC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAWjD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAqB;IACxD,IAAI,gBAA8B,CAAC;IACnC,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC,SAAS,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,SAAS,EAAE,EAAE;QAClF,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC/C,gBAAgB,GAAG,UAAU,CAAC;QAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,iBAAiB;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,iBAAiB,WAAW,CAAC,CAAC;QAChI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,GAAG,wBAAwB;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACpJ,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA0B;IAC9D,MAAM,SAAS,GAAG,MAAM,eAAe,EAAE,CAAC;IAC1C,OAAO,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,OAAO,YAAY,CAAC,YAAY,EAAE,CAAC,SAAS,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,YAAY,GAAG,YAAY,EAAE,CAAC,SAAS,CAAC;IAC9C,MAAM,YAAY,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAqB;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC;QACjI,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC9F,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvG,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAC7N,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAgB,CAAC;IAChI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACpI,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,IAAY;IAC/C,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,QAAQ,GAAG,KAAoB,CAAC;IACtC,OAAO,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;WACnC,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ;WACnC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;WACjC,QAAQ,CAAC,MAAM,IAAI,GAAG;WACtB,QAAQ,CAAC,MAAM,IAAI,GAAG;WACtB,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,IAAI,CAAC,IAAI,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC;AACvI,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnF,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,eAAe,CAAC,UAAU,CAAC,CAAU,CAAC;SACvE,MAAM,CAAC,CAAC,KAAK,EAAkC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAC9E,CAAC;AACJ,CAAC"}

package/dist/cache/index.d.ts

@@ -1,3 +1,5 @@
+export declare const MAX_CACHE_ENTRIES = 100;
+export declare const MAX_CACHE_BYTES: number;
 export type CacheEntry = {
     status: number;
     headers: Record<string, string | string[]>;

package/dist/cache/index.js

@@ -1,15 +1,21 @@
-import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { readFile, readdir, rm, stat } from "node:fs/promises";
 import { join } from "node:path";
-import { randomUUID } from "node:crypto";
-const BASE_CACHE_DIR = ".ghostapi/cache";
+import { getDataPaths } from "../config/dataPaths.js";
+import { atomicWriteJson, ensurePrivateDirectory, withFileLock } from "../storage/fileStore.js";
+import { sanitizeResponseHeaders } from "../security/headerSanitizer.js";
+export const MAX_CACHE_ENTRIES = 100;
+export const MAX_CACHE_BYTES = 32 * 1024 * 1024;
+const MAX_CACHE_ENTRY_BYTES = 1024 * 1024;
 export async function initializeCacheDir() {
-    await mkdir(BASE_CACHE_DIR, { recursive: true });
+    await ensurePrivateDirectory(getDataPaths().cache);
 }
 export async function getCachedResponse(provider, hash) {
     try {
-        const filePath = join(BASE_CACHE_DIR, provider, `${hash}.json`);
+        const filePath = cacheFilePath(provider, hash);
         const content = await readFile(filePath, "utf8");
-        return JSON.parse(content);
+        if (Buffer.byteLength(content, "utf8") > MAX_CACHE_ENTRY_BYTES)
+            throw new Error("Cache entry exceeds its size limit.");
+        return validateCacheEntry(JSON.parse(content));
     }
     catch (error) {
         if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -19,16 +25,54 @@ export async function getCachedResponse(provider, hash) {
     }
 }
 export async function setCachedResponse(provider, hash, entry) {
-    const providerDir = join(BASE_CACHE_DIR, provider);
-    const filePath = join(providerDir, `${hash}.json`);
-    const tempFilePath = join(providerDir, `${hash}.tmp.${randomUUID()}`);
-    await mkdir(providerDir, { recursive: true });
-    const content = JSON.stringify(entry, null, 2);
-    await writeFile(tempFilePath, content, "utf8");
-    await rename(tempFilePath, filePath);
+    const filePath = cacheFilePath(provider, hash);
+    const validated = validateCacheEntry(entry);
+    if (Buffer.byteLength(JSON.stringify(validated), "utf8") > MAX_CACHE_ENTRY_BYTES)
+        throw new Error("Cache entry exceeds its size limit.");
+    const cacheRoot = getDataPaths().cache;
+    await withFileLock(join(cacheRoot, ".quota"), async () => {
+        await atomicWriteJson(filePath, validated);
+        await enforceCacheQuota(cacheRoot);
+    });
+}
+function validateCacheEntry(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        throw new Error("Cache entry is invalid.");
+    const entry = value;
+    if (!Number.isInteger(entry.status) || typeof entry.status !== "number" || entry.status < 100 || entry.status > 599)
+        throw new Error("Cache status is invalid.");
+    const headers = sanitizeResponseHeaders(entry.headers);
+    return { status: entry.status, headers, body: entry.body };
+}
+async function enforceCacheQuota(cacheRoot) {
+    const providers = await readdir(cacheRoot, { withFileTypes: true });
+    const entries = (await Promise.all(providers.filter((entry) => entry.isDirectory()).map(async (provider) => {
+        const directory = join(cacheRoot, provider.name);
+        const files = await readdir(directory, { withFileTypes: true });
+        return Promise.all(files.filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map(async (entry) => {
+            const path = join(directory, entry.name);
+            const info = await stat(path);
+            return { path, size: info.size, mtimeMs: info.mtimeMs };
+        }));
+    }))).flat().sort((left, right) => left.mtimeMs - right.mtimeMs || left.path.localeCompare(right.path));
+    let bytes = entries.reduce((total, entry) => total + entry.size, 0);
+    let count = entries.length;
+    for (const entry of entries) {
+        if (count <= MAX_CACHE_ENTRIES && bytes <= MAX_CACHE_BYTES)
+            break;
+        await rm(entry.path, { force: true });
+        count -= 1;
+        bytes -= entry.size;
+    }
 }
 export async function clearCache() {
-    await rm(BASE_CACHE_DIR, { recursive: true, force: true });
+    await rm(getDataPaths().cache, { recursive: true, force: true });
     await initializeCacheDir();
 }
+function cacheFilePath(provider, hash) {
+    if (!/^[a-z0-9_-]+$/i.test(provider) || !/^[a-z0-9_-]+$/i.test(hash)) {
+        throw new Error("Cache provider and hash must contain only letters, numbers, underscores, or hyphens.");
+    }
+    return join(getDataPaths().cache, provider, `${hash}.json`);
+}
 //# sourceMappingURL=index.js.map

package/dist/cache/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cache/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAW,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAY;IACpE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAY,EAAE,KAAiB;IACvF,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,QAAQ,UAAU,EAAE,EAAE,CAAC,CAAC;IAEtE,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE/C,MAAM,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,EAAE,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,kBAAkB,EAAE,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cache/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;AAQ1C,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,sBAAsB,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAY;IACpE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,qBAAqB;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACvH,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAY,EAAE,KAAiB;IACvF,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,GAAG,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzI,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC,KAAK,CAAC;IACvC,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpH,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACjK,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvD,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IAChD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QACzG,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC7G,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1D,CAAC,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACvG,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACpE,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,IAAI,iBAAiB,IAAI,KAAK,IAAI,eAAe;YAAE,MAAM;QAClE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,kBAAkB,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,IAAY;IACnD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AAC9D,CAAC"}