@zedtech/zedkit-server 0.0.0-stage → 0.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 zedtech-fr
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,51 @@
-# Temporary Holding Version
+# @zedtech/zedkit-server
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Server-side helpers with a stable public surface. Original work by the
+same author. Zero runtime dependencies.
+
+```sh
+pnpm add @zedtech/zedkit-server
+```
+
+```ts
+import { redactValue } from "@zedtech/zedkit-server";
+
+logger.info({ event: "login", user: redactValue(user) });
+```
+
+## API
+
+- `MemoryRateLimiter` — fixed-window, in-process rate limiting:
+  `allow(key, limitPerMinute)`. Correct for single-instance deployments;
+  multi-instance enforcement needs a shared store behind the same shape.
+- `redactValue(value, key?)` — recursively replace credential-looking
+  material with placeholders before logging. Secret-like keys become
+  `"[redacted]"`, bearer/basic tokens become `"<scheme> [redacted]"`,
+  cyclic references become `"[circular]"`. Scrubbing applies to every
+  field; truncation is volume control only, so `msg`/`message`/`stack`
+  are never truncated and everything else is bounded at 512 code points.
+  Dates pass through; Maps, Sets, prototypes, and symbol keys are
+  preserved.
+- `computeBackoffMs(attemptNo, random?)` — exponential retry backoff
+  (2s × 3^(n-1), ±20% jitter, 1s floor, 1h cap).
+- `webhookSignatureHeader(secret, body, timestamp)` /
+  `verifyWebhookSignatureHeader(secret, body, header, options?)` —
+  Stripe-style `t=…,v1=…` HMAC signatures over exact body bytes, with an
+  optional freshness check. Bring your own secret.
+- `pgErrorCode(error)` — read the Postgres error code (`23505`
+  unique, `23503` FK, ...) from a thrown value, or `null` when it
+  has none. Lets callers decide conflict-vs-bug.
+
+Find helpers by need in [CATALOG.md](CATALOG.md).
+
+## Install or copy?
+
+These modules are small and dependency-free: source-copying the files
+is a sane alternative to installing (MIT allows it). Install the package
+for versioned updates.
+
+## Verify
+
+```sh
+pnpm --filter @zedtech/zedkit-server typecheck && pnpm --filter @zedtech/zedkit-server lint && pnpm --filter @zedtech/zedkit-server build && pnpm --filter @zedtech/zedkit-server test
+```

package/package.json

@@ -1,6 +1,43 @@
 {
   "name": "@zedtech/zedkit-server",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.0.0",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "description": "Server helpers: in-process rate limiting, secret redaction. Original work by the same author.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/zedtech-fr/zedkit",
+    "directory": "packages/server"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "imports": {
+    "#*": "./src/*"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist"
+  ],
+  "devDependencies": {
+    "@types/node": "22.20.5",
+    "typescript": "5.9.3",
+    "vitest": "2.1.9"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit -p tsconfig.tests.json",
+    "lint": "eslint src tests"
+  }
 }