emdash 0.21.0 → 0.23.0

package/src/menus/index.ts

@@ -15,6 +15,7 @@ import type { Database } from "../database/types.js";
 import { validateIdentifier } from "../database/validate.js";
 import { resolveLocale, resolveLocaleChain } from "../i18n/resolve.js";
 import { getDb } from "../loader.js";
+import { cachedQuery, CacheNamespace } from "../object-cache/index.js";
 import { requestCached } from "../request-cache.js";
 import { sanitizeHref } from "../utils/url.js";
 import type { Menu, MenuItem, MenuItemRow } from "./types.js";
@@ -36,10 +37,16 @@ export interface MenuQueryOptions {
  */
 export function getMenu(name: string, options: MenuQueryOptions = {}): Promise<Menu | null> {
 	const locale = resolveLocale(options.locale);
-	return requestCached(`menu:${name}:${locale ?? "*"}`, async () => {
-		const db = await getDb();
-		return getMenuWithDb(name, db, { locale });
-	});
+	return requestCached(`menu:${name}:${locale ?? "*"}`, () =>
+		cachedQuery({
+			namespace: CacheNamespace.MENUS,
+			key: `${name}:${locale ?? "*"}`,
+			load: async () => {
+				const db = await getDb();
+				return getMenuWithDb(name, db, { locale });
+			},
+		}),
+	);
 }
 
 /**

package/src/object-cache/codec.ts

@@ -0,0 +1,73 @@
+/**
+ * Object-cache serialization codec.
+ *
+ * Cached values are JSON, with one extension: `Date` instances are preserved
+ * across the round-trip. EmDash content entries carry `Date` objects for the
+ * system timestamp columns (`createdAt`, `updatedAt`, `publishedAt`,
+ * `scheduledAt`) and on `cacheHint.lastModified`; plain `JSON.stringify` would
+ * silently flatten those to ISO strings, so a value read from cache would no
+ * longer be `=== instanceof Date` and downstream `value instanceof Date`
+ * branches (cursor encoding, scheduled-visibility checks) would diverge from a
+ * fresh database read.
+ *
+ * Functions and symbol-keyed properties are NOT preserved — callers that cache
+ * values carrying either (e.g. content entries with their `.edit` proxy and
+ * the non-enumerable `CURSOR_RAW_VALUES` symbol) must reduce to a serializable
+ * snapshot before caching and rebuild the non-serializable parts on read. See
+ * `query.ts` content snapshot helpers.
+ */
+
+/** Tag used to mark a serialized `Date`. Deliberately unlikely to collide. */
+const DATE_TAG = "$$emdashDate";
+
+interface TaggedDate {
+	[DATE_TAG]: string;
+}
+
+function isTaggedDate(value: unknown): value is TaggedDate {
+	if (typeof value !== "object" || value === null) return false;
+	// encode() always emits the tag as the object's *only* key, so requiring
+	// exactly one key keeps a user object that merely happens to carry a
+	// `$$emdashDate` string alongside other fields from being collapsed to a
+	// Date (which would silently drop those other fields).
+	const keys = Object.keys(value);
+	// eslint-disable-next-line typescript/no-unsafe-type-assertion -- narrowing a JSON-parsed value to read the date tag
+	return keys.length === 1 && typeof (value as Record<string, unknown>)[DATE_TAG] === "string";
+}
+
+/**
+ * Serialize a value to a cache string, preserving `Date` instances.
+ *
+ * Uses the JSON replacer's `this` binding to inspect the *original* property
+ * value: `JSON.stringify` invokes `Date.prototype.toJSON` before the replacer
+ * sees it, so by the time `value` arrives it is already an ISO string. Reading
+ * `this[key]` recovers the live `Date` so we can tag it.
+ */
+export function encode(value: unknown): string {
+	return JSON.stringify(value, function (this: Record<string, unknown>, key, val) {
+		const original = this[key];
+		if (original instanceof Date) {
+			return { [DATE_TAG]: original.toISOString() } satisfies TaggedDate;
+		}
+		return val;
+	});
+}
+
+/**
+ * Parse a cache string produced by {@link encode}, rehydrating tagged `Date`s.
+ *
+ * Returns `undefined` if the input is not valid JSON (treated as a cache miss
+ * by the read-through layer rather than throwing).
+ */
+export function decode(raw: string): unknown {
+	try {
+		return JSON.parse(raw, (_key, value) => {
+			if (isTaggedDate(value)) {
+				return new Date(value[DATE_TAG]);
+			}
+			return value;
+		});
+	} catch {
+		return undefined;
+	}
+}

package/src/object-cache/index.ts

@@ -0,0 +1,495 @@
+/**
+ * Object cache — distributed read-through query cache.
+ *
+ * Layering (per query):
+ *
+ *   requestCached   → in-request dedupe (per render, WeakMap on ALS context)
+ *   cachedQuery     → THIS layer: distributed L2 (KV / memory), epoch-keyed
+ *   database        → source of truth
+ *
+ * Optional and off by default: when no `objectCache` descriptor is configured,
+ * `virtual:emdash/object-cache` exports `createObjectCache = undefined`,
+ * {@link getBackend} resolves to `null`, and {@link cachedQuery} is a
+ * transparent passthrough to its `load` function. Configure with
+ * `memoryCache()` (Node) or `kvCache()` from `@emdash-cms/cloudflare`.
+ *
+ * Invalidation is epoch-based: each cache key embeds a per-namespace epoch
+ * ("last changed" marker) read from the backend. A write calls
+ * {@link invalidateObjectCache}, which stamps the namespace epoch to
+ * `Date.now()`; every previously-stored key for that namespace is instantly
+ * orphaned and reclaimed by its TTL. This is O(1) and needs no key
+ * enumeration (KV has no prefix delete).
+ *
+ * The singleton backend/config and the per-isolate epoch cache live on
+ * `globalThis` behind `Symbol.for` keys so Vite SSR chunk duplication can't
+ * fork them (same pattern as `request-context.ts`).
+ */
+
+import { after } from "../after.js";
+import { getRequestContext } from "../request-context.js";
+import { decode, encode } from "./codec.js";
+import type {
+	CreateObjectCacheBackendFn,
+	ObjectCacheBackend,
+	ObjectCacheRuntimeConfig,
+} from "./types.js";
+
+const DEFAULT_KEY_PREFIX = "em";
+const DEFAULT_TTL_SECONDS = 3600;
+const DEFAULT_REVALIDATE_MS = 1000;
+const DEFAULT_TIMEOUT_MS = 2000;
+
+interface BackendHolder {
+	/** Whether the virtual module has been loaded and the backend resolved. */
+	initialized: boolean;
+	/** Resolved backend, or `null` when no object cache is configured. */
+	backend: ObjectCacheBackend | null;
+	/** In-flight initialization promise (dedupes concurrent first calls). */
+	initPromise: Promise<ObjectCacheBackend | null> | null;
+	config: Required<Pick<ObjectCacheRuntimeConfig, "keyPrefix">> & {
+		defaultTtl: number;
+		revalidate: number;
+		timeout: number;
+	};
+}
+
+/**
+ * Race a backend operation against a timeout so a stalled call (e.g. a KV read
+ * that never resolves *and* never rejects — a cold cross-region read, or one
+ * queued behind the Workers simultaneous-connection limit) degrades to a
+ * rejection instead of hanging the isolate. A rejection is benign: callers
+ * already treat a failed read as a cache miss / last-known epoch.
+ */
+function withTimeout<T>(promise: Promise<T>, ms: number, label: string): Promise<T> {
+	if (!(ms > 0)) return promise;
+	let timer: ReturnType<typeof setTimeout>;
+	const timeout = new Promise<never>((_resolve, reject) => {
+		timer = setTimeout(() => {
+			reject(new Error(`object-cache ${label} timed out after ${ms}ms`));
+		}, ms);
+	});
+	return Promise.race([promise, timeout]).finally(() => clearTimeout(timer));
+}
+
+interface EpochEntry {
+	value: number;
+	/** `Date.now()` at which this epoch was read from the backend. */
+	at: number;
+	/** In-flight read, so concurrent callers share one backend round-trip. */
+	promise?: Promise<number>;
+}
+
+const BACKEND_KEY = Symbol.for("emdash:object-cache:backend");
+const EPOCH_KEY = Symbol.for("emdash:object-cache:epochs");
+const PENDING_KEY = Symbol.for("emdash:object-cache:pending-bumps");
+const g = globalThis as Record<symbol, unknown>;
+
+const holder: BackendHolder =
+	// eslint-disable-next-line typescript/no-unsafe-type-assertion -- globalThis singleton pattern (see request-context.ts)
+	(g[BACKEND_KEY] as BackendHolder | undefined) ??
+	(() => {
+		const h: BackendHolder = {
+			initialized: false,
+			backend: null,
+			initPromise: null,
+			config: {
+				keyPrefix: DEFAULT_KEY_PREFIX,
+				defaultTtl: DEFAULT_TTL_SECONDS,
+				revalidate: DEFAULT_REVALIDATE_MS,
+				timeout: DEFAULT_TIMEOUT_MS,
+			},
+		};
+		g[BACKEND_KEY] = h;
+		return h;
+	})();
+
+const epochCache: Map<string, EpochEntry> =
+	// eslint-disable-next-line typescript/no-unsafe-type-assertion -- globalThis singleton pattern (see request-context.ts)
+	(g[EPOCH_KEY] as Map<string, EpochEntry> | undefined) ??
+	(() => {
+		const m = new Map<string, EpochEntry>();
+		g[EPOCH_KEY] = m;
+		return m;
+	})();
+
+/** Namespaces with a backend epoch write already scheduled this tick. */
+const pendingBumps: Set<string> =
+	// eslint-disable-next-line typescript/no-unsafe-type-assertion -- globalThis singleton pattern (see request-context.ts)
+	(g[PENDING_KEY] as Set<string> | undefined) ??
+	(() => {
+		const s = new Set<string>();
+		g[PENDING_KEY] = s;
+		return s;
+	})();
+
+/**
+ * Resolve (once per isolate) the configured object-cache backend.
+ *
+ * Loads `virtual:emdash/object-cache`, which exports `createObjectCache`
+ * (`undefined` when no cache is configured) and the serialized
+ * `objectCacheConfig`. Returns `null` when the cache is disabled.
+ */
+async function getBackend(): Promise<ObjectCacheBackend | null> {
+	if (holder.initialized) return holder.backend;
+	if (holder.initPromise) return holder.initPromise;
+
+	holder.initPromise = (async () => {
+		try {
+			const mod: {
+				createObjectCache?: CreateObjectCacheBackendFn;
+				objectCacheConfig?: ObjectCacheRuntimeConfig;
+				// eslint-disable-next-line @typescript-eslint/ban-ts-comment
+				// @ts-ignore - virtual module
+			} = await import("virtual:emdash/object-cache");
+
+			const config = mod.objectCacheConfig ?? {};
+			holder.config = {
+				keyPrefix:
+					typeof config.keyPrefix === "string" && config.keyPrefix.length > 0
+						? config.keyPrefix
+						: DEFAULT_KEY_PREFIX,
+				defaultTtl:
+					typeof config.defaultTtl === "number" && config.defaultTtl > 0
+						? config.defaultTtl
+						: DEFAULT_TTL_SECONDS,
+				revalidate:
+					typeof config.revalidate === "number" && config.revalidate >= 0
+						? config.revalidate
+						: DEFAULT_REVALIDATE_MS,
+				timeout:
+					typeof config.timeout === "number" && config.timeout >= 0
+						? config.timeout
+						: DEFAULT_TIMEOUT_MS,
+			};
+
+			holder.backend =
+				typeof mod.createObjectCache === "function" ? mod.createObjectCache(config) : null;
+		} catch (error) {
+			// Importing the virtual module fails outside an Astro/Vite context
+			// (e.g. unit tests, CLI). Treat as "no cache configured".
+			if (import.meta.env.DEV) {
+				console.warn("[object-cache] backend unavailable:", error);
+			}
+			holder.backend = null;
+		}
+		holder.initialized = true;
+		holder.initPromise = null;
+		return holder.backend;
+	})();
+
+	return holder.initPromise;
+}
+
+/**
+ * Test-only override of the backend, bypassing the virtual module.
+ *
+ * Lets unit tests inject an in-memory backend (and optional config) without a
+ * full Astro/Vite build. Pass `null` to simulate "no cache configured".
+ *
+ * @internal
+ */
+export function __setObjectCacheBackendForTests(
+	backend: ObjectCacheBackend | null,
+	config?: Partial<BackendHolder["config"]>,
+): void {
+	holder.initialized = true;
+	holder.initPromise = null;
+	holder.backend = backend;
+	holder.config = { ...holder.config, ...config };
+	epochCache.clear();
+}
+
+/** Build the backend key for a namespace's epoch anchor. */
+function epochKey(namespace: string): string {
+	return `${holder.config.keyPrefix}:epoch:${namespace}`;
+}
+
+/**
+ * Build the (epoch-independent) backend key for a cached value.
+ *
+ * The key is stable across invalidations — the namespace epochs are stored
+ * *inside* the value envelope and validated on read, not baked into the key.
+ * This lets the value and the epochs be fetched in one parallel round-trip
+ * (instead of "read epoch, then read value"), and means an invalidated value
+ * is overwritten in place rather than orphaned under a dead epoch-keyed name.
+ */
+function valueKey(namespaces: readonly string[], key: string): string {
+	return `${holder.config.keyPrefix}:${namespaces.join(",")}:${key}`;
+}
+
+/**
+ * Stored cache envelope: the namespace epochs captured at write time alongside
+ * the cached value. A read is a HIT only when every stored epoch still matches
+ * the current epoch for its namespace.
+ */
+interface CacheEnvelope<T> {
+	/** Epoch per namespace, in the query's namespace order. */
+	e: number[];
+	/** The cached value. */
+	v: T;
+}
+
+function epochsMatch(stored: readonly number[], current: readonly number[]): boolean {
+	if (stored.length !== current.length) return false;
+	for (let i = 0; i < stored.length; i++) {
+		if (stored[i] !== current[i]) return false;
+	}
+	return true;
+}
+
+/**
+ * Requests that must always read live data and never populate the cache:
+ * visual edit mode, preview tokens, and isolated databases (playground / DO
+ * preview, whose schema and content diverge from the configured site).
+ */
+function shouldBypass(): boolean {
+	const ctx = getRequestContext();
+	if (!ctx) return false;
+	return ctx.editMode === true || ctx.preview !== undefined || ctx.dbIsIsolated === true;
+}
+
+/**
+ * Read the current epoch for `namespace`, reusing an isolate-cached value for
+ * up to `revalidate` ms. A missing epoch (never bumped) is treated as `0`.
+ *
+ * Backend errors and stalls are non-fatal: the read is bounded by a timeout,
+ * and on failure we fall back to the last known epoch (or `0`), so a flaky or
+ * hung cache degrades to "serve whatever's keyed" rather than throwing or
+ * hanging.
+ */
+async function getEpoch(namespace: string, backend: ObjectCacheBackend): Promise<number> {
+	const now = Date.now();
+	const cached = epochCache.get(namespace);
+	if (cached && now - cached.at < holder.config.revalidate) {
+		return cached.value;
+	}
+	if (cached?.promise) return cached.promise;
+
+	const promise = (async () => {
+		let value: number;
+		try {
+			const raw = await withTimeout(
+				backend.get(epochKey(namespace)),
+				holder.config.timeout,
+				"epoch read",
+			);
+			const parsed = raw === null ? 0 : Number(raw);
+			value = Number.isFinite(parsed) ? parsed : 0;
+		} catch {
+			value = cached?.value ?? 0;
+		}
+		// A concurrent invalidateObjectCache may have bumped the epoch while this
+		// read was in flight. Epochs are monotonic, so never let a stale backend
+		// read lower a freshly-bumped local epoch — that would resurrect the very
+		// values the bump just invalidated.
+		const merged = Math.max(value, epochCache.get(namespace)?.value ?? 0);
+		epochCache.set(namespace, { value: merged, at: Date.now() });
+		return merged;
+	})();
+
+	// Concurrent callers share this in-flight read (dedup). The timeout above
+	// guarantees `promise` settles — its success/catch handler then replaces
+	// this entry with a fresh, promise-free one — so a stalled backend can no
+	// longer pin the namespace to a never-settling promise (the bug that
+	// poisoned an isolate until it was recycled).
+	epochCache.set(namespace, { value: cached?.value ?? 0, at: cached?.at ?? 0, promise });
+	return promise;
+}
+
+/** Options for {@link cachedQuery}. */
+export interface CachedQueryOptions<T> {
+	/**
+	 * Invalidation namespace(s). A single string for self-contained data
+	 * (`settings`, `menus`), or several when the cached value depends on data
+	 * owned by other namespaces — e.g. a content entry hydrates bylines and
+	 * taxonomy terms, so it caches under
+	 * `[content:posts, "bylines", "taxonomies"]` and is invalidated when *any*
+	 * of them is bumped. Every namespace's epoch is folded into the key.
+	 */
+	namespace: string | readonly string[];
+	/** Stable, fully-qualifying cache key *within* the namespace. */
+	key: string;
+	/** Loader run on a miss (or when caching is disabled/bypassed). */
+	load: () => Promise<T>;
+	/** TTL override in seconds. Falls back to the configured `defaultTtl`. */
+	ttl?: number;
+	/**
+	 * Predicate gating whether a freshly-loaded value is stored. Defaults to
+	 * always-cache. Use it to skip caching error/empty sentinels.
+	 */
+	cacheable?: (value: T) => boolean;
+}
+
+/**
+ * Distributed read-through cache around `load`.
+ *
+ * `T` must be the value as it should be *stored* — i.e. JSON-serializable with
+ * the codec's `Date` support, carrying no functions or symbol-keyed props.
+ * Callers caching richer objects (content entries) reduce to a serializable
+ * snapshot here and rebuild on the way out; see `query.ts`.
+ *
+ * On a miss or when the cache is disabled/bypassed, this is equivalent to
+ * `await load()`. Backend errors never propagate: a failing `get` is a miss, a
+ * failing `set` is dropped.
+ */
+export async function cachedQuery<T>(options: CachedQueryOptions<T>): Promise<T> {
+	const backend = await getBackend();
+	if (!backend || shouldBypass()) {
+		return options.load();
+	}
+
+	const namespaces =
+		typeof options.namespace === "string" ? [options.namespace] : options.namespace;
+	const fullKey = valueKey(namespaces, options.key);
+
+	// Kick off the value read and every namespace epoch read concurrently — one
+	// round-trip instead of "read epochs, then read value". getEpoch never
+	// rejects, so awaiting the epochs separately from the value read guarantees
+	// we hold the pre-load epochs even when the value read errors or times out.
+	// Storing a value under an epoch read *after* load() would mask a write that
+	// landed during load(): the stale value would match and be served as a HIT.
+	const epochsPromise = Promise.all(namespaces.map((ns) => getEpoch(ns, backend)));
+	const rawPromise = withTimeout(backend.get(fullKey), holder.config.timeout, "read").catch(
+		() => null,
+	);
+	const currentEpochs = await epochsPromise;
+	const raw = await rawPromise;
+	if (raw !== null) {
+		const decoded = decode(raw);
+		if (decoded !== undefined) {
+			// eslint-disable-next-line typescript/no-unsafe-type-assertion -- value envelope written by this function
+			const envelope = decoded as CacheEnvelope<T>;
+			if (epochsMatch(envelope.e, currentEpochs)) {
+				return envelope.v;
+			}
+		}
+	}
+
+	const value = await options.load();
+
+	const cacheable = options.cacheable ? options.cacheable(value) : true;
+	if (cacheable) {
+		const ttl = options.ttl ?? holder.config.defaultTtl;
+		// Defer the write so it never adds to TTFB. The epochs were captured
+		// before load() ran, so a write that invalidated this namespace mid-load
+		// correctly orphans the value stored here.
+		after(async () => {
+			try {
+				const encoded = encode({ e: currentEpochs, v: value } satisfies CacheEnvelope<T>);
+				await backend.set(fullKey, encoded, ttl);
+			} catch (error) {
+				if (import.meta.env.DEV) {
+					console.warn("[object-cache] set failed:", error);
+				}
+			}
+		});
+	}
+
+	return value;
+}
+
+/**
+ * Invalidate every cached value in `namespace` by bumping its epoch.
+ *
+ * Sync and non-blocking: the local epoch is stamped immediately (so the
+ * writing isolate is instantly consistent) and the backend write is deferred
+ * via `after`. Other isolates pick up the new epoch within their `revalidate`
+ * window. No-ops when the cache is disabled.
+ */
+export function invalidateObjectCache(namespace: string): void {
+	// Monotonic so two writes in the same millisecond still produce distinct
+	// epochs — otherwise the second write reuses the first's stamp and its
+	// stale entries survive.
+	const prev = epochCache.get(namespace)?.value ?? 0;
+	const stamp = Math.max(prev + 1, Date.now());
+	// Optimistic local bump: keep this isolate consistent without a round-trip.
+	epochCache.set(namespace, { value: stamp, at: stamp });
+
+	// Coalesce repeated bumps of the same namespace within a tick (e.g. a bulk
+	// publish loop) into a single backend write that persists the latest epoch.
+	if (pendingBumps.has(namespace)) return;
+	pendingBumps.add(namespace);
+	after(async () => {
+		pendingBumps.delete(namespace);
+		try {
+			const backend = await getBackend();
+			if (!backend) return;
+			const latest = epochCache.get(namespace)?.value ?? stamp;
+			// Epoch anchors are persistent (no TTL) — they must outlive the
+			// value keys they invalidate.
+			await backend.set(epochKey(namespace), String(latest));
+		} catch (error) {
+			console.error("[object-cache] epoch bump failed for", namespace, error);
+		}
+	});
+}
+
+/**
+ * Fixed namespaces for data shared across collections. Content reads fold the
+ * `BYLINES` and `TAXONOMIES` epochs into their keys (via {@link cachedQuery})
+ * because entries hydrate byline and taxonomy-term data — so renaming an
+ * author or a category correctly invalidates every cached entry that displays
+ * it, without tracking which collections reference it.
+ */
+export const CacheNamespace = {
+	SETTINGS: "settings",
+	MENUS: "menus",
+	TAXONOMIES: "taxonomies",
+	BYLINES: "bylines",
+	/** Collection schema/metadata (label, supports, commentsEnabled, fields). */
+	SCHEMA: "schema",
+	/** Public (approved) comments. */
+	COMMENTS: "comments",
+} as const;
+
+/** Namespace for a content collection's cached queries. */
+export function contentNamespace(collection: string): string {
+	return `content:${collection}`;
+}
+
+/**
+ * Namespaces a content read depends on: the collection itself plus the shared
+ * byline/taxonomy data folded into each entry.
+ */
+export function contentNamespaces(collection: string): readonly string[] {
+	return [contentNamespace(collection), CacheNamespace.BYLINES, CacheNamespace.TAXONOMIES];
+}
+
+/**
+ * Invalidate all cached reads (list + entry) for a content collection.
+ * Call from every write path that mutates rows in `ec_<collection>`.
+ */
+export function invalidateCollectionCache(collection: string): void {
+	invalidateObjectCache(contentNamespace(collection));
+}
+
+/** Invalidate cached taxonomy definitions/terms and all content that hydrates them. */
+export function invalidateTaxonomyObjectCache(): void {
+	invalidateObjectCache(CacheNamespace.TAXONOMIES);
+}
+
+/** Invalidate cached bylines and all content that hydrates them. */
+export function invalidateBylineObjectCache(): void {
+	invalidateObjectCache(CacheNamespace.BYLINES);
+}
+
+/** Invalidate cached navigation menus. */
+export function invalidateMenuObjectCache(): void {
+	invalidateObjectCache(CacheNamespace.MENUS);
+}
+
+/** Invalidate cached collection schema/metadata reads (e.g. getCollectionInfo). */
+export function invalidateSchemaObjectCache(): void {
+	invalidateObjectCache(CacheNamespace.SCHEMA);
+}
+
+/** Invalidate cached public comment reads. */
+export function invalidateCommentObjectCache(): void {
+	invalidateObjectCache(CacheNamespace.COMMENTS);
+}
+
+export type {
+	ObjectCacheBackend,
+	ObjectCacheDescriptor,
+	ObjectCacheRuntimeConfig,
+} from "./types.js";

package/src/object-cache/memory.ts

@@ -0,0 +1,91 @@
+/**
+ * In-isolate memory object-cache backend — RUNTIME ENTRY
+ *
+ * The default backend for the Node runtime and a sensible local-dev option.
+ * Caches across requests within a single isolate/process; it is NOT shared
+ * across isolates, so on a multi-isolate platform (Cloudflare) you want the KV
+ * backend instead. Still useful on Node, where one long-lived process serves
+ * every request.
+ *
+ * Wire it up with `memoryCache()` from `emdash`:
+ *
+ * ```ts
+ * import { memoryCache } from "emdash";
+ * emdash({ objectCache: memoryCache() });
+ * ```
+ *
+ * The store lives on `globalThis` behind a `Symbol.for` key so Vite SSR chunk
+ * duplication doesn't create two independent caches (same pattern as
+ * `request-context.ts`).
+ */
+
+import type { CreateObjectCacheBackendFn, ObjectCacheBackend } from "./types.js";
+
+interface Entry {
+	value: string;
+	/** Absolute expiry in ms (`Date.now()` epoch), or `null` for none. */
+	expiresAt: number | null;
+}
+
+interface MemoryStore {
+	map: Map<string, Entry>;
+	maxEntries: number;
+}
+
+const STORE_KEY = Symbol.for("emdash:object-cache:memory");
+const g = globalThis as Record<symbol, unknown>;
+
+function getStore(maxEntries: number): MemoryStore {
+	// eslint-disable-next-line typescript/no-unsafe-type-assertion -- globalThis singleton pattern (see request-context.ts)
+	const existing = g[STORE_KEY] as MemoryStore | undefined;
+	if (existing) {
+		// First descriptor wins for sizing; later calls reuse the same map.
+		return existing;
+	}
+	const store: MemoryStore = { map: new Map(), maxEntries };
+	g[STORE_KEY] = store;
+	return store;
+}
+
+/**
+ * Create the in-isolate memory backend.
+ *
+ * Config keys (all optional):
+ * - `maxEntries` — soft cap on stored keys; oldest insertions are evicted
+ *   first when exceeded (FIFO, cheap and good enough for a backstop). Default
+ *   1000.
+ */
+export const createObjectCache: CreateObjectCacheBackendFn = (config): ObjectCacheBackend => {
+	const maxEntries = typeof config.maxEntries === "number" ? config.maxEntries : 1000;
+	const store = getStore(maxEntries);
+
+	return {
+		get(key: string): Promise<string | null> {
+			const entry = store.map.get(key);
+			if (!entry) return Promise.resolve(null);
+			if (entry.expiresAt !== null && entry.expiresAt <= Date.now()) {
+				store.map.delete(key);
+				return Promise.resolve(null);
+			}
+			return Promise.resolve(entry.value);
+		},
+		set(key: string, value: string, ttlSeconds?: number): Promise<void> {
+			// Refresh insertion order so recently-written keys survive eviction.
+			store.map.delete(key);
+			store.map.set(key, {
+				value,
+				expiresAt: ttlSeconds && ttlSeconds > 0 ? Date.now() + ttlSeconds * 1000 : null,
+			});
+			while (store.map.size > store.maxEntries) {
+				const oldest = store.map.keys().next().value;
+				if (oldest === undefined) break;
+				store.map.delete(oldest);
+			}
+			return Promise.resolve();
+		},
+		delete(key: string): Promise<void> {
+			store.map.delete(key);
+			return Promise.resolve();
+		},
+	};
+};