iobroker.time-tracker 0.2.0

package/build/lib/web/events.js

@@ -0,0 +1,50 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var events_exports = {};
+__export(events_exports, {
+  createEventBus: () => createEventBus
+});
+module.exports = __toCommonJS(events_exports);
+function createEventBus() {
+  const listeners = /* @__PURE__ */ new Set();
+  return {
+    publish(event) {
+      for (const listener of [...listeners]) {
+        try {
+          listener(event);
+        } catch {
+        }
+      }
+    },
+    subscribe(listener) {
+      listeners.add(listener);
+      return () => {
+        listeners.delete(listener);
+      };
+    },
+    listenerCount() {
+      return listeners.size;
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createEventBus
+});
+//# sourceMappingURL=events.js.map

package/build/lib/web/events.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/web/events.ts"],
+  "sourcesContent": ["/**\n * Live events of the adapter.\n *\n * Everything that changes data publishes one event here: a punch, a correction, an import, a closed month. The\n * WebSocket endpoint (`/api/stream`) forwards them to connected clients, and the adapter uses the same bus to\n * refresh its own states. The bus is deliberately tiny: an in-memory fan-out without history, because a client\n * that missed an event reloads the data it cares about anyway.\n */\n\n/** Type of a live event. */\nexport type EventType =\n\t| \"punch\"\n\t| \"entry.update\"\n\t| \"entry.delete\"\n\t| \"entries.import\"\n\t| \"absence.change\"\n\t| \"month.close\"\n\t| \"terminal.punch\"\n\t| \"rfid.scan\"\n\t| \"backup.create\"\n\t| \"automation.clockIn\"\n\t| \"automation.clockOut\"\n\t| \"automation.missingPunch\"\n\t| \"automation.breakReminder\";\n\n/** One live event. */\nexport interface ApiEvent {\n\t/** Kind of the change */\n\ttype: EventType;\n\t/** Instant of the change, UTC epoch seconds */\n\tatUtc: number;\n\t/** Employee the change belongs to, `null` for instance wide events */\n\tuserId: number | null;\n\t/** Short, client readable summary (never personal data beyond the id) */\n\tdata?: Record<string, unknown>;\n}\n\n/** A subscriber of the bus. */\nexport type EventListener = (event: ApiEvent) => void;\n\n/** The event bus. */\nexport interface EventBus {\n\t/** Publishes an event to every listener */\n\tpublish(event: ApiEvent): void;\n\t/** Registers a listener and returns the function that removes it again */\n\tsubscribe(listener: EventListener): () => void;\n\t/** Number of connected listeners */\n\tlistenerCount(): number;\n}\n\n/**\n * Creates an event bus.\n *\n * @returns the bus\n */\nexport function createEventBus(): EventBus {\n\tconst listeners = new Set<EventListener>();\n\n\treturn {\n\t\tpublish(event: ApiEvent): void {\n\t\t\t// a listener that throws must not break the others (or the request that published)\n\t\t\tfor (const listener of [...listeners]) {\n\t\t\t\ttry {\n\t\t\t\t\tlistener(event);\n\t\t\t\t} catch {\n\t\t\t\t\t// ignored on purpose: the event is a notification, not a transaction\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\n\t\tsubscribe(listener: EventListener): () => void {\n\t\t\tlisteners.add(listener);\n\t\t\treturn () => {\n\t\t\t\tlisteners.delete(listener);\n\t\t\t};\n\t\t},\n\n\t\tlistenerCount(): number {\n\t\t\treturn listeners.size;\n\t\t},\n\t};\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAuDO,SAAS,iBAA2B;AAC1C,QAAM,YAAY,oBAAI,IAAmB;AAEzC,SAAO;AAAA,IACN,QAAQ,OAAuB;AAE9B,iBAAW,YAAY,CAAC,GAAG,SAAS,GAAG;AACtC,YAAI;AACH,mBAAS,KAAK;AAAA,QACf,QAAQ;AAAA,QAER;AAAA,MACD;AAAA,IACD;AAAA,IAEA,UAAU,UAAqC;AAC9C,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACZ,kBAAU,OAAO,QAAQ;AAAA,MAC1B;AAAA,IACD;AAAA,IAEA,gBAAwB;AACvB,aAAO,UAAU;AAAA,IAClB;AAAA,EACD;AACD;",
+  "names": []
+}

package/build/lib/web/pin-guard.js

@@ -0,0 +1,86 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var pin_guard_exports = {};
+__export(pin_guard_exports, {
+  createPinGuard: () => createPinGuard
+});
+module.exports = __toCommonJS(pin_guard_exports);
+function createPinGuard(options = {}) {
+  var _a, _b;
+  const maxFailures = Math.max(1, (_a = options.maxFailures) != null ? _a : 5);
+  const lockSeconds = Math.max(1, (_b = options.lockSeconds) != null ? _b : 15 * 60);
+  const entries = /* @__PURE__ */ new Map();
+  const prune = (now) => {
+    for (const [userId, entry] of entries) {
+      const over = now >= entry.lockedUntil && now - entry.windowStartedAt >= lockSeconds;
+      if (over) {
+        entries.delete(userId);
+      }
+    }
+  };
+  const state = (userId, now) => {
+    const entry = entries.get(userId);
+    if (!entry) {
+      return { locked: false, retryAfterSeconds: 0, failures: 0 };
+    }
+    if (now < entry.lockedUntil) {
+      return { locked: true, retryAfterSeconds: entry.lockedUntil - now, failures: entry.failures };
+    }
+    if (now - entry.windowStartedAt >= lockSeconds) {
+      entries.delete(userId);
+      return { locked: false, retryAfterSeconds: 0, failures: 0 };
+    }
+    return {
+      locked: false,
+      retryAfterSeconds: lockSeconds - (now - entry.windowStartedAt),
+      failures: entry.failures
+    };
+  };
+  return {
+    state: ({ userId, now = Math.floor(Date.now() / 1e3) }) => state(userId, now),
+    fail: ({ userId, now = Math.floor(Date.now() / 1e3) }) => {
+      var _a2, _b2;
+      const current = state(userId, now);
+      if (current.locked) {
+        return current;
+      }
+      if (entries.size > 1e3) {
+        prune(now);
+      }
+      const entry = entries.get(userId);
+      const failures = ((_a2 = entry == null ? void 0 : entry.failures) != null ? _a2 : 0) + 1;
+      const windowStartedAt = (_b2 = entry == null ? void 0 : entry.windowStartedAt) != null ? _b2 : now;
+      if (failures >= maxFailures) {
+        entries.set(userId, { failures, windowStartedAt, lockedUntil: now + lockSeconds });
+        return { locked: true, retryAfterSeconds: lockSeconds, failures };
+      }
+      entries.set(userId, { failures, windowStartedAt, lockedUntil: 0 });
+      return { locked: false, retryAfterSeconds: 0, failures };
+    },
+    reset: (userId) => {
+      entries.delete(userId);
+    },
+    size: () => entries.size
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createPinGuard
+});
+//# sourceMappingURL=pin-guard.js.map

package/build/lib/web/pin-guard.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/web/pin-guard.ts"],
+  "sourcesContent": ["/**\n * Failure counter for the badge PIN at the kiosk terminal (specification 4.10).\n *\n * A four digit PIN is guessed in a few hundred attempts, and a terminal stands in a shared room: the IP rate\n * limit of the route alone is not enough, because everybody uses the same device. This guard therefore counts\n * the wrong PINs **per account** and blocks that account for a while after too many of them \u2014 exactly like the\n * login lockout, only much shorter, since a fat finger is more likely than an attack.\n *\n * The counters live in memory: a restart of the adapter clears them, which is documented and acceptable because\n * the block is a short lived brake, not a permanent lock. (The login lockout, which must survive a restart, is\n * kept in the database instead.)\n */\n\n/** Options of the guard. */\nexport interface PinGuardOptions {\n\t/** Wrong PINs that are allowed inside one window (default 5) */\n\tmaxFailures?: number;\n\t/** Length of the window and of the block in seconds (default 900 = 15 minutes) */\n\tlockSeconds?: number;\n}\n\n/** Result of a check. */\nexport interface PinGuardState {\n\t/** True while the account is blocked */\n\tlocked: boolean;\n\t/** Seconds until the block ends or the window starts over */\n\tretryAfterSeconds: number;\n\t/** Wrong PINs inside the current window */\n\tfailures: number;\n}\n\n/** The guard. */\nexport interface PinGuard {\n\t/** Reads the state of an account without changing it */\n\tstate(input: { userId: number; now?: number }): PinGuardState;\n\t/** Counts a wrong PIN and returns the state afterwards */\n\tfail(input: { userId: number; now?: number }): PinGuardState;\n\t/** Forgets the wrong PINs of an account (called after a successful punch) */\n\treset(userId: number): void;\n\t/** Number of accounts with a recorded failure (for diagnostics) */\n\tsize(): number;\n}\n\n/** What is remembered per account. */\ninterface Entry {\n\t/** Wrong PINs since the window started */\n\tfailures: number;\n\t/** Instant the window started, UTC epoch seconds */\n\twindowStartedAt: number;\n\t/** Instant the block ends, `0` while the account is not blocked */\n\tlockedUntil: number;\n}\n\n/**\n * Creates the guard.\n *\n * @param options - threshold and window\n * @returns the guard\n */\nexport function createPinGuard(options: PinGuardOptions = {}): PinGuard {\n\tconst maxFailures = Math.max(1, options.maxFailures ?? 5);\n\tconst lockSeconds = Math.max(1, options.lockSeconds ?? 15 * 60);\n\tconst entries = new Map<number, Entry>();\n\n\t/**\n\t * Drops entries whose window and block are over.\n\t *\n\t * @param now - current instant\n\t */\n\tconst prune = (now: number): void => {\n\t\tfor (const [userId, entry] of entries) {\n\t\t\tconst over = now >= entry.lockedUntil && now - entry.windowStartedAt >= lockSeconds;\n\t\t\tif (over) {\n\t\t\t\tentries.delete(userId);\n\t\t\t}\n\t\t}\n\t};\n\n\t/**\n\t * Reads the state, resetting an expired window on the way.\n\t *\n\t * @param userId - account\n\t * @param now - current instant\n\t * @returns the state\n\t */\n\tconst state = (userId: number, now: number): PinGuardState => {\n\t\tconst entry = entries.get(userId);\n\t\tif (!entry) {\n\t\t\treturn { locked: false, retryAfterSeconds: 0, failures: 0 };\n\t\t}\n\t\tif (now < entry.lockedUntil) {\n\t\t\treturn { locked: true, retryAfterSeconds: entry.lockedUntil - now, failures: entry.failures };\n\t\t}\n\t\tif (now - entry.windowStartedAt >= lockSeconds) {\n\t\t\t// the window is over: the next attempt starts from zero\n\t\t\tentries.delete(userId);\n\t\t\treturn { locked: false, retryAfterSeconds: 0, failures: 0 };\n\t\t}\n\t\treturn {\n\t\t\tlocked: false,\n\t\t\tretryAfterSeconds: lockSeconds - (now - entry.windowStartedAt),\n\t\t\tfailures: entry.failures,\n\t\t};\n\t};\n\n\treturn {\n\t\tstate: ({ userId, now = Math.floor(Date.now() / 1000) }) => state(userId, now),\n\n\t\tfail: ({ userId, now = Math.floor(Date.now() / 1000) }) => {\n\t\t\tconst current = state(userId, now);\n\t\t\tif (current.locked) {\n\t\t\t\treturn current;\n\t\t\t}\n\t\t\tif (entries.size > 1000) {\n\t\t\t\tprune(now);\n\t\t\t}\n\t\t\tconst entry = entries.get(userId);\n\t\t\tconst failures = (entry?.failures ?? 0) + 1;\n\t\t\tconst windowStartedAt = entry?.windowStartedAt ?? now;\n\t\t\tif (failures >= maxFailures) {\n\t\t\t\tentries.set(userId, { failures, windowStartedAt, lockedUntil: now + lockSeconds });\n\t\t\t\treturn { locked: true, retryAfterSeconds: lockSeconds, failures };\n\t\t\t}\n\t\t\tentries.set(userId, { failures, windowStartedAt, lockedUntil: 0 });\n\t\t\treturn { locked: false, retryAfterSeconds: 0, failures };\n\t\t},\n\n\t\treset: (userId: number) => {\n\t\t\tentries.delete(userId);\n\t\t},\n\n\t\tsize: () => entries.size,\n\t};\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AA2DO,SAAS,eAAe,UAA2B,CAAC,GAAa;AA3DxE;AA4DC,QAAM,cAAc,KAAK,IAAI,IAAG,aAAQ,gBAAR,YAAuB,CAAC;AACxD,QAAM,cAAc,KAAK,IAAI,IAAG,aAAQ,gBAAR,YAAuB,KAAK,EAAE;AAC9D,QAAM,UAAU,oBAAI,IAAmB;AAOvC,QAAM,QAAQ,CAAC,QAAsB;AACpC,eAAW,CAAC,QAAQ,KAAK,KAAK,SAAS;AACtC,YAAM,OAAO,OAAO,MAAM,eAAe,MAAM,MAAM,mBAAmB;AACxE,UAAI,MAAM;AACT,gBAAQ,OAAO,MAAM;AAAA,MACtB;AAAA,IACD;AAAA,EACD;AASA,QAAM,QAAQ,CAAC,QAAgB,QAA+B;AAC7D,UAAM,QAAQ,QAAQ,IAAI,MAAM;AAChC,QAAI,CAAC,OAAO;AACX,aAAO,EAAE,QAAQ,OAAO,mBAAmB,GAAG,UAAU,EAAE;AAAA,IAC3D;AACA,QAAI,MAAM,MAAM,aAAa;AAC5B,aAAO,EAAE,QAAQ,MAAM,mBAAmB,MAAM,cAAc,KAAK,UAAU,MAAM,SAAS;AAAA,IAC7F;AACA,QAAI,MAAM,MAAM,mBAAmB,aAAa;AAE/C,cAAQ,OAAO,MAAM;AACrB,aAAO,EAAE,QAAQ,OAAO,mBAAmB,GAAG,UAAU,EAAE;AAAA,IAC3D;AACA,WAAO;AAAA,MACN,QAAQ;AAAA,MACR,mBAAmB,eAAe,MAAM,MAAM;AAAA,MAC9C,UAAU,MAAM;AAAA,IACjB;AAAA,EACD;AAEA,SAAO;AAAA,IACN,OAAO,CAAC,EAAE,QAAQ,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,EAAE,MAAM,MAAM,QAAQ,GAAG;AAAA,IAE7E,MAAM,CAAC,EAAE,QAAQ,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,EAAE,MAAM;AA5G7D,UAAAA,KAAAC;AA6GG,YAAM,UAAU,MAAM,QAAQ,GAAG;AACjC,UAAI,QAAQ,QAAQ;AACnB,eAAO;AAAA,MACR;AACA,UAAI,QAAQ,OAAO,KAAM;AACxB,cAAM,GAAG;AAAA,MACV;AACA,YAAM,QAAQ,QAAQ,IAAI,MAAM;AAChC,YAAM,aAAYD,MAAA,+BAAO,aAAP,OAAAA,MAAmB,KAAK;AAC1C,YAAM,mBAAkBC,MAAA,+BAAO,oBAAP,OAAAA,MAA0B;AAClD,UAAI,YAAY,aAAa;AAC5B,gBAAQ,IAAI,QAAQ,EAAE,UAAU,iBAAiB,aAAa,MAAM,YAAY,CAAC;AACjF,eAAO,EAAE,QAAQ,MAAM,mBAAmB,aAAa,SAAS;AAAA,MACjE;AACA,cAAQ,IAAI,QAAQ,EAAE,UAAU,iBAAiB,aAAa,EAAE,CAAC;AACjE,aAAO,EAAE,QAAQ,OAAO,mBAAmB,GAAG,SAAS;AAAA,IACxD;AAAA,IAEA,OAAO,CAAC,WAAmB;AAC1B,cAAQ,OAAO,MAAM;AAAA,IACtB;AAAA,IAEA,MAAM,MAAM,QAAQ;AAAA,EACrB;AACD;",
+  "names": ["_a", "_b"]
+}

package/build/lib/web/problem.js

@@ -0,0 +1,129 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var problem_exports = {};
+__export(problem_exports, {
+  HttpProblem: () => HttpProblem,
+  PROBLEM_CONTENT_TYPE: () => PROBLEM_CONTENT_TYPE,
+  problem: () => problem,
+  toProblem: () => toProblem
+});
+module.exports = __toCommonJS(problem_exports);
+var import_entries = require("../db/repositories/entries");
+var import_users = require("../db/repositories/users");
+var import_absences = require("../db/repositories/absences");
+var import_errors = require("../errors");
+const PROBLEM_CONTENT_TYPE = "application/problem+json; charset=utf-8";
+const TITLES = {
+  400: "Bad Request",
+  401: "Unauthorized",
+  403: "Forbidden",
+  404: "Not Found",
+  405: "Method Not Allowed",
+  409: "Conflict",
+  413: "Payload Too Large",
+  415: "Unsupported Media Type",
+  423: "Locked",
+  429: "Too Many Requests",
+  500: "Internal Server Error"
+};
+class HttpProblem extends Error {
+  /**
+   * Creates the error.
+   *
+   * @param status - HTTP status code
+   * @param code - stable error code
+   * @param detail - optional explanation
+   * @param title - optional title (defaults to the reason phrase of the status)
+   * @param fields - optional list of invalid fields
+   */
+  constructor(status, code, detail, title, fields = []) {
+    var _a;
+    super(`${status} ${code}${detail ? `: ${detail}` : ""}`);
+    this.status = status;
+    this.code = code;
+    this.detail = detail;
+    this.fields = fields;
+    this.name = "HttpProblem";
+    this.problemTitle = (_a = title != null ? title : TITLES[status]) != null ? _a : "Error";
+  }
+  /** Title used in the problem document. */
+  problemTitle;
+  /**
+   * Converts the error into a problem document.
+   *
+   * @param instance - request path the problem occurred on
+   * @returns problem document
+   */
+  toProblem(instance) {
+    return {
+      type: "about:blank",
+      title: this.problemTitle,
+      status: this.status,
+      code: this.code,
+      ...this.detail ? { detail: this.detail } : {},
+      ...this.fields.length > 0 ? { errors: this.fields.map((field) => ({ path: field.path, message: field.message })) } : {},
+      ...instance ? { instance } : {}
+    };
+  }
+}
+function problem(status, code, detail) {
+  return new HttpProblem(status, code, detail);
+}
+function toProblem(error, instance) {
+  if (error instanceof HttpProblem) {
+    return { problem: error.toProblem(instance), unexpected: false };
+  }
+  if (error instanceof import_errors.ValidationError) {
+    return {
+      problem: new HttpProblem(400, "bad_request", error.message, void 0, error.fields).toProblem(instance),
+      unexpected: false
+    };
+  }
+  if (error instanceof import_errors.NotFoundError) {
+    return { problem: new HttpProblem(404, "not_found", error.message).toProblem(instance), unexpected: false };
+  }
+  if (error instanceof import_entries.RevisionConflictError) {
+    return {
+      problem: new HttpProblem(
+        409,
+        "revision_conflict",
+        `the record was changed by someone else (current revision ${error.current.revision})`
+      ).toProblem(instance),
+      unexpected: false
+    };
+  }
+  if (error instanceof import_users.LoginExistsError || error instanceof import_users.UnknownRoleError) {
+    return { problem: new HttpProblem(409, "conflict", error.message).toProblem(instance), unexpected: false };
+  }
+  if (error instanceof import_absences.UnknownAbsenceTypeError) {
+    return { problem: new HttpProblem(400, "bad_request", error.message).toProblem(instance), unexpected: false };
+  }
+  return {
+    problem: new HttpProblem(500, "internal_error", "the request could not be processed").toProblem(instance),
+    unexpected: true
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  HttpProblem,
+  PROBLEM_CONTENT_TYPE,
+  problem,
+  toProblem
+});
+//# sourceMappingURL=problem.js.map

package/build/lib/web/problem.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/web/problem.ts"],
+  "sourcesContent": ["/**\n * `application/problem+json` responses (RFC 7807) with stable machine readable codes.\n *\n * Expected failures are raised as `HttpProblem` by the route handlers. Errors from the domain and storage\n * layers are mapped here, so a client always receives the same shape:\n *\n * ```\n * { \"type\": \"about:blank\", \"title\": \"Not Found\", \"status\": 404, \"code\": \"not_found\", \"detail\": \"\u2026\" }\n * ```\n *\n * Messages of unknown errors are **not** exposed (they may contain internals); they are logged by the caller.\n */\n\nimport { RevisionConflictError } from \"../db/repositories/entries\";\nimport { LoginExistsError, UnknownRoleError } from \"../db/repositories/users\";\nimport { UnknownAbsenceTypeError } from \"../db/repositories/absences\";\nimport { NotFoundError, ValidationError, type FieldIssue } from \"../errors\";\n\n/** The content type every problem document is sent with (RFC 9457). */\nexport const PROBLEM_CONTENT_TYPE = \"application/problem+json; charset=utf-8\";\n\n/** Stable error codes of the API. */\nexport type ProblemCode =\n\t| \"bad_request\"\n\t| \"invalid_credentials\"\n\t| \"locked_out\"\n\t| \"no_session\"\n\t| \"session_expired\"\n\t| \"user_inactive\"\n\t| \"permission_denied\"\n\t| \"csrf_rejected\"\n\t| \"not_found\"\n\t| \"method_not_allowed\"\n\t| \"conflict\"\n\t| \"revision_conflict\"\n\t| \"payload_too_large\"\n\t| \"unsupported_media_type\"\n\t| \"kiosk_disabled\"\n\t| \"not_configured\"\n\t| \"report_font_missing\"\n\t| \"backup_invalid\"\n\t| \"import_mismatch\"\n\t| \"rate_limited\"\n\t// an employee may only change own punches inside the edit window of the instance\n\t| \"edit_window_closed\"\n\t| \"internal_error\";\n\n/** A problem document. */\nexport interface ProblemDetails {\n\t/** URI reference identifying the problem type (always `about:blank` here) */\n\ttype: string;\n\t/** Short, human readable summary */\n\ttitle: string;\n\t/** HTTP status code */\n\tstatus: number;\n\t/** Stable machine readable code */\n\tcode: ProblemCode;\n\t/** Explanation of this occurrence */\n\tdetail?: string;\n\t/** Request path the problem occurred on */\n\tinstance?: string;\n\t/** Invalid fields of a validation failure (RFC 9457) */\n\terrors?: { path: string; message: string }[];\n}\n\nconst TITLES: Record<number, string> = {\n\t400: \"Bad Request\",\n\t401: \"Unauthorized\",\n\t403: \"Forbidden\",\n\t404: \"Not Found\",\n\t405: \"Method Not Allowed\",\n\t409: \"Conflict\",\n\t413: \"Payload Too Large\",\n\t415: \"Unsupported Media Type\",\n\t423: \"Locked\",\n\t429: \"Too Many Requests\",\n\t500: \"Internal Server Error\",\n};\n\n/** An error that is returned to the client as `application/problem+json`. */\nexport class HttpProblem extends Error {\n\t/** Title used in the problem document. */\n\tpublic readonly problemTitle: string;\n\n\t/**\n\t * Creates the error.\n\t *\n\t * @param status - HTTP status code\n\t * @param code - stable error code\n\t * @param detail - optional explanation\n\t * @param title - optional title (defaults to the reason phrase of the status)\n\t * @param fields - optional list of invalid fields\n\t */\n\tconstructor(\n\t\tpublic readonly status: number,\n\t\tpublic readonly code: ProblemCode,\n\t\tpublic readonly detail?: string,\n\t\ttitle?: string,\n\t\tpublic readonly fields: FieldIssue[] = [],\n\t) {\n\t\tsuper(`${status} ${code}${detail ? `: ${detail}` : \"\"}`);\n\t\tthis.name = \"HttpProblem\";\n\t\tthis.problemTitle = title ?? TITLES[status] ?? \"Error\";\n\t}\n\n\t/**\n\t * Converts the error into a problem document.\n\t *\n\t * @param instance - request path the problem occurred on\n\t * @returns problem document\n\t */\n\tpublic toProblem(instance?: string): ProblemDetails {\n\t\treturn {\n\t\t\ttype: \"about:blank\",\n\t\t\ttitle: this.problemTitle,\n\t\t\tstatus: this.status,\n\t\t\tcode: this.code,\n\t\t\t...(this.detail ? { detail: this.detail } : {}),\n\t\t\t...(this.fields.length > 0\n\t\t\t\t? { errors: this.fields.map(field => ({ path: field.path, message: field.message })) }\n\t\t\t\t: {}),\n\t\t\t...(instance ? { instance } : {}),\n\t\t};\n\t}\n}\n\n/**\n * Short helper for the common cases.\n *\n * @param status - HTTP status code\n * @param code - stable error code\n * @param detail - optional explanation\n * @returns the problem error\n */\nexport function problem(status: number, code: ProblemCode, detail?: string): HttpProblem {\n\treturn new HttpProblem(status, code, detail);\n}\n\n/**\n * Maps an arbitrary error onto a problem document.\n *\n * Known domain errors keep their meaning (a stale revision is a `409`, a duplicate login a `409`); messages of\n * unknown errors are replaced by a generic text, so no internals leak into the response.\n *\n * @param error - error thrown by a handler or a service\n * @param instance - request path\n * @returns problem document and a flag telling whether this is an unexpected (server side) failure\n */\nexport function toProblem(error: unknown, instance?: string): { problem: ProblemDetails; unexpected: boolean } {\n\tif (error instanceof HttpProblem) {\n\t\treturn { problem: error.toProblem(instance), unexpected: false };\n\t}\n\tif (error instanceof ValidationError) {\n\t\treturn {\n\t\t\tproblem: new HttpProblem(400, \"bad_request\", error.message, undefined, error.fields).toProblem(instance),\n\t\t\tunexpected: false,\n\t\t};\n\t}\n\tif (error instanceof NotFoundError) {\n\t\treturn { problem: new HttpProblem(404, \"not_found\", error.message).toProblem(instance), unexpected: false };\n\t}\n\tif (error instanceof RevisionConflictError) {\n\t\treturn {\n\t\t\tproblem: new HttpProblem(\n\t\t\t\t409,\n\t\t\t\t\"revision_conflict\",\n\t\t\t\t`the record was changed by someone else (current revision ${error.current.revision})`,\n\t\t\t).toProblem(instance),\n\t\t\tunexpected: false,\n\t\t};\n\t}\n\tif (error instanceof LoginExistsError || error instanceof UnknownRoleError) {\n\t\treturn { problem: new HttpProblem(409, \"conflict\", error.message).toProblem(instance), unexpected: false };\n\t}\n\tif (error instanceof UnknownAbsenceTypeError) {\n\t\treturn { problem: new HttpProblem(400, \"bad_request\", error.message).toProblem(instance), unexpected: false };\n\t}\n\n\treturn {\n\t\tproblem: new HttpProblem(500, \"internal_error\", \"the request could not be processed\").toProblem(instance),\n\t\tunexpected: true,\n\t};\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAaA,qBAAsC;AACtC,mBAAmD;AACnD,sBAAwC;AACxC,oBAAgE;AAGzD,MAAM,uBAAuB;AA8CpC,MAAM,SAAiC;AAAA,EACtC,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AACN;AAGO,MAAM,oBAAoB,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAatC,YACiB,QACA,MACA,QAChB,OACgB,SAAuB,CAAC,GACvC;AAnGH;AAoGE,UAAM,GAAG,MAAM,IAAI,IAAI,GAAG,SAAS,KAAK,MAAM,KAAK,EAAE,EAAE;AANvC;AACA;AACA;AAEA;AAGhB,SAAK,OAAO;AACZ,SAAK,gBAAe,6BAAS,OAAO,MAAM,MAAtB,YAA2B;AAAA,EAChD;AAAA;AAAA,EArBgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA6BT,UAAU,UAAmC;AACnD,WAAO;AAAA,MACN,MAAM;AAAA,MACN,OAAO,KAAK;AAAA,MACZ,QAAQ,KAAK;AAAA,MACb,MAAM,KAAK;AAAA,MACX,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;AAAA,MAC7C,GAAI,KAAK,OAAO,SAAS,IACtB,EAAE,QAAQ,KAAK,OAAO,IAAI,YAAU,EAAE,MAAM,MAAM,MAAM,SAAS,MAAM,QAAQ,EAAE,EAAE,IACnF,CAAC;AAAA,MACJ,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,IAChC;AAAA,EACD;AACD;AAUO,SAAS,QAAQ,QAAgB,MAAmB,QAA8B;AACxF,SAAO,IAAI,YAAY,QAAQ,MAAM,MAAM;AAC5C;AAYO,SAAS,UAAU,OAAgB,UAAqE;AAC9G,MAAI,iBAAiB,aAAa;AACjC,WAAO,EAAE,SAAS,MAAM,UAAU,QAAQ,GAAG,YAAY,MAAM;AAAA,EAChE;AACA,MAAI,iBAAiB,+BAAiB;AACrC,WAAO;AAAA,MACN,SAAS,IAAI,YAAY,KAAK,eAAe,MAAM,SAAS,QAAW,MAAM,MAAM,EAAE,UAAU,QAAQ;AAAA,MACvG,YAAY;AAAA,IACb;AAAA,EACD;AACA,MAAI,iBAAiB,6BAAe;AACnC,WAAO,EAAE,SAAS,IAAI,YAAY,KAAK,aAAa,MAAM,OAAO,EAAE,UAAU,QAAQ,GAAG,YAAY,MAAM;AAAA,EAC3G;AACA,MAAI,iBAAiB,sCAAuB;AAC3C,WAAO;AAAA,MACN,SAAS,IAAI;AAAA,QACZ;AAAA,QACA;AAAA,QACA,4DAA4D,MAAM,QAAQ,QAAQ;AAAA,MACnF,EAAE,UAAU,QAAQ;AAAA,MACpB,YAAY;AAAA,IACb;AAAA,EACD;AACA,MAAI,iBAAiB,iCAAoB,iBAAiB,+BAAkB;AAC3E,WAAO,EAAE,SAAS,IAAI,YAAY,KAAK,YAAY,MAAM,OAAO,EAAE,UAAU,QAAQ,GAAG,YAAY,MAAM;AAAA,EAC1G;AACA,MAAI,iBAAiB,yCAAyB;AAC7C,WAAO,EAAE,SAAS,IAAI,YAAY,KAAK,eAAe,MAAM,OAAO,EAAE,UAAU,QAAQ,GAAG,YAAY,MAAM;AAAA,EAC7G;AAEA,SAAO;AAAA,IACN,SAAS,IAAI,YAAY,KAAK,kBAAkB,oCAAoC,EAAE,UAAU,QAAQ;AAAA,IACxG,YAAY;AAAA,EACb;AACD;",
+  "names": []
+}

package/build/lib/web/rate-limit.js

@@ -0,0 +1,65 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var rate_limit_exports = {};
+__export(rate_limit_exports, {
+  createRateLimiter: () => createRateLimiter
+});
+module.exports = __toCommonJS(rate_limit_exports);
+function createRateLimiter() {
+  const hits = /* @__PURE__ */ new Map();
+  return {
+    check(options, key, now) {
+      var _a;
+      const timestamp = now != null ? now : Math.floor(Date.now() / 1e3);
+      const windowStart = timestamp - options.windowSeconds;
+      const id = `${options.name}:${key}`;
+      const recent = ((_a = hits.get(id)) != null ? _a : []).filter((at) => at > windowStart);
+      if (recent.length >= options.limit) {
+        const oldest = recent[0];
+        hits.set(id, recent);
+        return {
+          allowed: false,
+          remaining: 0,
+          retryAfterSeconds: Math.max(1, oldest + options.windowSeconds - timestamp)
+        };
+      }
+      recent.push(timestamp);
+      hits.set(id, recent);
+      if (hits.size > 1e3) {
+        for (const [candidate, stamps] of hits) {
+          if (stamps.every((at) => at <= windowStart)) {
+            hits.delete(candidate);
+          }
+        }
+      }
+      return { allowed: true, remaining: options.limit - recent.length, retryAfterSeconds: 0 };
+    },
+    reset() {
+      hits.clear();
+    },
+    size() {
+      return hits.size;
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createRateLimiter
+});
+//# sourceMappingURL=rate-limit.js.map

package/build/lib/web/rate-limit.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/web/rate-limit.ts"],
+  "sourcesContent": ["/**\n * Rate limiting for the API.\n *\n * A simple sliding window per key (route + client address) is enough here: the endpoints that matter are the\n * login, the punches, the synchronisation, the terminal and the RFID scan, and all of them are cheap to count.\n * The limiter lives in memory \u2014 a restart clears the counters, which is acceptable for a single instance and\n * avoids a table that would grow forever.\n *\n * The answer for a limited request is a `429` problem document with a `retry-after` header, so a client knows\n * when to try again.\n */\n\n/** A limit of one route class. */\nexport interface RateLimitOptions {\n\t/** Name of the class, used in the counter key (e.g. `login`) */\n\tname: string;\n\t/** Allowed requests inside the window */\n\tlimit: number;\n\t/** Length of the window in seconds */\n\twindowSeconds: number;\n}\n\n/** Result of a check. */\nexport interface RateLimitResult {\n\t/** False when the caller has to wait */\n\tallowed: boolean;\n\t/** Requests left in the current window */\n\tremaining: number;\n\t/** Seconds until the oldest request of the window leaves it */\n\tretryAfterSeconds: number;\n}\n\n/** The limiter. */\nexport interface RateLimiter {\n\t/** Counts a request and reports whether it may pass */\n\tcheck(options: RateLimitOptions, key: string, now?: number): RateLimitResult;\n\t/** Removes all counters (for tests) */\n\treset(): void;\n\t/** Number of tracked keys (diagnostics) */\n\tsize(): number;\n}\n\n/**\n * Creates a rate limiter.\n *\n * @returns the limiter\n */\nexport function createRateLimiter(): RateLimiter {\n\t/** Timestamps of the requests per key, oldest first. */\n\tconst hits = new Map<string, number[]>();\n\n\treturn {\n\t\tcheck(options: RateLimitOptions, key: string, now?: number): RateLimitResult {\n\t\t\tconst timestamp = now ?? Math.floor(Date.now() / 1000);\n\t\t\tconst windowStart = timestamp - options.windowSeconds;\n\t\t\tconst id = `${options.name}:${key}`;\n\n\t\t\t// everything older than the window is irrelevant (and would only waste memory)\n\t\t\tconst recent = (hits.get(id) ?? []).filter(at => at > windowStart);\n\t\t\tif (recent.length >= options.limit) {\n\t\t\t\tconst oldest = recent[0];\n\t\t\t\thits.set(id, recent);\n\t\t\t\treturn {\n\t\t\t\t\tallowed: false,\n\t\t\t\t\tremaining: 0,\n\t\t\t\t\tretryAfterSeconds: Math.max(1, oldest + options.windowSeconds - timestamp),\n\t\t\t\t};\n\t\t\t}\n\n\t\t\trecent.push(timestamp);\n\t\t\thits.set(id, recent);\n\t\t\t// a cheap guard against unbounded growth: prune the map when it gets large\n\t\t\tif (hits.size > 1000) {\n\t\t\t\tfor (const [candidate, stamps] of hits) {\n\t\t\t\t\tif (stamps.every(at => at <= windowStart)) {\n\t\t\t\t\t\thits.delete(candidate);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn { allowed: true, remaining: options.limit - recent.length, retryAfterSeconds: 0 };\n\t\t},\n\n\t\treset(): void {\n\t\t\thits.clear();\n\t\t},\n\n\t\tsize(): number {\n\t\t\treturn hits.size;\n\t\t},\n\t};\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AA+CO,SAAS,oBAAiC;AAEhD,QAAM,OAAO,oBAAI,IAAsB;AAEvC,SAAO;AAAA,IACN,MAAM,SAA2B,KAAa,KAA+B;AApD/E;AAqDG,YAAM,YAAY,oBAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACrD,YAAM,cAAc,YAAY,QAAQ;AACxC,YAAM,KAAK,GAAG,QAAQ,IAAI,IAAI,GAAG;AAGjC,YAAM,WAAU,UAAK,IAAI,EAAE,MAAX,YAAgB,CAAC,GAAG,OAAO,QAAM,KAAK,WAAW;AACjE,UAAI,OAAO,UAAU,QAAQ,OAAO;AACnC,cAAM,SAAS,OAAO,CAAC;AACvB,aAAK,IAAI,IAAI,MAAM;AACnB,eAAO;AAAA,UACN,SAAS;AAAA,UACT,WAAW;AAAA,UACX,mBAAmB,KAAK,IAAI,GAAG,SAAS,QAAQ,gBAAgB,SAAS;AAAA,QAC1E;AAAA,MACD;AAEA,aAAO,KAAK,SAAS;AACrB,WAAK,IAAI,IAAI,MAAM;AAEnB,UAAI,KAAK,OAAO,KAAM;AACrB,mBAAW,CAAC,WAAW,MAAM,KAAK,MAAM;AACvC,cAAI,OAAO,MAAM,QAAM,MAAM,WAAW,GAAG;AAC1C,iBAAK,OAAO,SAAS;AAAA,UACtB;AAAA,QACD;AAAA,MACD;AAEA,aAAO,EAAE,SAAS,MAAM,WAAW,QAAQ,QAAQ,OAAO,QAAQ,mBAAmB,EAAE;AAAA,IACxF;AAAA,IAEA,QAAc;AACb,WAAK,MAAM;AAAA,IACZ;AAAA,IAEA,OAAe;AACd,aAAO,KAAK;AAAA,IACb;AAAA,EACD;AACD;",
+  "names": []
+}