layercache 1.3.0 → 1.3.1

package/README.md

@@ -15,7 +15,7 @@
   <a href="./LICENSE"><img src="https://img.shields.io/badge/license-Apache_2.0-green" alt="license"></a>
   <a href="https://www.typescriptlang.org/"><img src="https://img.shields.io/badge/TypeScript-first-3178C6?logo=typescript&logoColor=white" alt="TypeScript"></a>
   <img src="https://img.shields.io/badge/Node.js-%E2%89%A5_20-339933?logo=nodedotjs&logoColor=white" alt="Node.js >= 20">
-  <img src="https://img.shields.io/badge/tests-431_passing-brightgreen" alt="tests">
+  <img src="https://img.shields.io/badge/tests-467_passing-brightgreen" alt="tests">
   <a href="https://coveralls.io/github/flyingsquirrel0419/layercache?branch=main"><img src="https://coveralls.io/repos/github/flyingsquirrel0419/layercache/badge.svg?branch=main&t=20260410" alt="Coveralls"></a>
 </p>
 
@@ -326,18 +326,7 @@ const cache = new CacheStack(
 └─────────────────────┴────────┘
 ```
 
-Run benchmarks locally:
-
-```bash
-npm run bench:direct
-npm run bench:edge
-npm run bench:slow-redis
-npm run bench:queue-amplification
-npm run bench:http
-npm run bench:multi-process-fanout
-```
-
-The benchmark harness defaults to `/root/cache-test/data/users.json` so the in-repo scripts stay aligned with the external reproduction workspace. Set `LAYERCACHE_BENCH_FIXTURE_PATH` if you want to point at a different workload fixture.
+Benchmark commands, fixtures, and scenario notes live in [docs/benchmarking.md](./docs/benchmarking.md).
 
 ---
 

package/dist/cli.cjs

@@ -365,6 +365,18 @@ async function main(argv = process.argv.slice(2)) {
     process.exitCode = 1;
     return;
   }
+  if (isPlaintextRedisUrl(redisUrl)) {
+    if (args.requireTls) {
+      process.stderr.write(
+        "Error: --require-tls is set but the URL uses redis:// (plaintext). Use rediss:// for TLS-encrypted connections.\n"
+      );
+      process.exitCode = 1;
+      return;
+    }
+    process.stderr.write(
+      "Warning: connecting to Redis without TLS (redis://). All data including cached values and credentials will be transmitted in plaintext. Use rediss:// in production environments, or set --require-tls.\n"
+    );
+  }
   const redis = new import_ioredis.default(redisUrl, {
     connectTimeout: CONNECT_TIMEOUT_MS,
     lazyConnect: true,
@@ -484,6 +496,8 @@ function parseArgs(argv) {
     } else if (token === "--tag-index-prefix") {
       parsed.tagIndexPrefix = value;
       index += 1;
+    } else if (token === "--require-tls") {
+      parsed.requireTls = true;
     }
   }
   return parsed;
@@ -515,7 +529,7 @@ async function scanKeys(redis, pattern) {
 }
 function printUsage() {
   process.stdout.write(
-    "Usage:\n  layercache stats --redis <url> [--pattern <glob>]\n  layercache keys --redis <url> [--pattern <glob>]\n  layercache inspect --redis <url> --key <key>\n  layercache invalidate --redis <url> [--pattern <glob> | --tag <tag>] [--tag-index-prefix <prefix>]\n\nOptions:\n  --redis <url>               Redis connection URL (e.g. redis://localhost:6379)\n  --pattern <glob>            Glob pattern to filter keys (default: *)\n  --key <key>                 Exact cache key to inspect\n  --tag <tag>                 Invalidate by tag name\n  --tag-index-prefix <prefix> Redis key prefix for tag index (default: layercache:tag-index)\n"
+    "Usage:\n  layercache stats --redis <url> [--pattern <glob>]\n  layercache keys --redis <url> [--pattern <glob>]\n  layercache inspect --redis <url> --key <key>\n  layercache invalidate --redis <url> [--pattern <glob> | --tag <tag>] [--tag-index-prefix <prefix>]\n\nOptions:\n  --redis <url>               Redis connection URL (e.g. redis://localhost:6379)\n  --pattern <glob>            Glob pattern to filter keys (default: *)\n  --key <key>                 Exact cache key to inspect\n  --tag <tag>                 Invalidate by tag name\n  --tag-index-prefix <prefix> Redis key prefix for tag index (default: layercache:tag-index)\n  --require-tls               Reject non-TLS (redis://) connections\n"
   );
 }
 function decodeInspectablePayload(payload) {
@@ -541,6 +555,14 @@ function summarizeInspectableValue(value) {
   }
   return value;
 }
+function isPlaintextRedisUrl(url) {
+  try {
+    const parsed = new URL(url);
+    return parsed.protocol === "redis:";
+  } catch {
+    return true;
+  }
+}
 function maskRedisUrl(url) {
   try {
     const parsed = new URL(url);

package/dist/cli.js

@@ -23,6 +23,18 @@ async function main(argv = process.argv.slice(2)) {
     process.exitCode = 1;
     return;
   }
+  if (isPlaintextRedisUrl(redisUrl)) {
+    if (args.requireTls) {
+      process.stderr.write(
+        "Error: --require-tls is set but the URL uses redis:// (plaintext). Use rediss:// for TLS-encrypted connections.\n"
+      );
+      process.exitCode = 1;
+      return;
+    }
+    process.stderr.write(
+      "Warning: connecting to Redis without TLS (redis://). All data including cached values and credentials will be transmitted in plaintext. Use rediss:// in production environments, or set --require-tls.\n"
+    );
+  }
   const redis = new Redis(redisUrl, {
     connectTimeout: CONNECT_TIMEOUT_MS,
     lazyConnect: true,
@@ -142,6 +154,8 @@ function parseArgs(argv) {
     } else if (token === "--tag-index-prefix") {
       parsed.tagIndexPrefix = value;
       index += 1;
+    } else if (token === "--require-tls") {
+      parsed.requireTls = true;
     }
   }
   return parsed;
@@ -173,7 +187,7 @@ async function scanKeys(redis, pattern) {
 }
 function printUsage() {
   process.stdout.write(
-    "Usage:\n  layercache stats --redis <url> [--pattern <glob>]\n  layercache keys --redis <url> [--pattern <glob>]\n  layercache inspect --redis <url> --key <key>\n  layercache invalidate --redis <url> [--pattern <glob> | --tag <tag>] [--tag-index-prefix <prefix>]\n\nOptions:\n  --redis <url>               Redis connection URL (e.g. redis://localhost:6379)\n  --pattern <glob>            Glob pattern to filter keys (default: *)\n  --key <key>                 Exact cache key to inspect\n  --tag <tag>                 Invalidate by tag name\n  --tag-index-prefix <prefix> Redis key prefix for tag index (default: layercache:tag-index)\n"
+    "Usage:\n  layercache stats --redis <url> [--pattern <glob>]\n  layercache keys --redis <url> [--pattern <glob>]\n  layercache inspect --redis <url> --key <key>\n  layercache invalidate --redis <url> [--pattern <glob> | --tag <tag>] [--tag-index-prefix <prefix>]\n\nOptions:\n  --redis <url>               Redis connection URL (e.g. redis://localhost:6379)\n  --pattern <glob>            Glob pattern to filter keys (default: *)\n  --key <key>                 Exact cache key to inspect\n  --tag <tag>                 Invalidate by tag name\n  --tag-index-prefix <prefix> Redis key prefix for tag index (default: layercache:tag-index)\n  --require-tls               Reject non-TLS (redis://) connections\n"
   );
 }
 function decodeInspectablePayload(payload) {
@@ -199,6 +213,14 @@ function summarizeInspectableValue(value) {
   }
   return value;
 }
+function isPlaintextRedisUrl(url) {
+  try {
+    const parsed = new URL(url);
+    return parsed.protocol === "redis:";
+  } catch {
+    return true;
+  }
+}
 function maskRedisUrl(url) {
   try {
     const parsed = new URL(url);

package/dist/{edge-BXWTKlI1.d.cts → edge-CUHTP9Bc.d.cts}

@@ -178,6 +178,8 @@ interface CacheStackOptions {
     logger?: CacheLogger | boolean;
     metrics?: boolean;
     stampedePrevention?: boolean;
+    stampedeMaxInFlight?: number;
+    stampedeEntryTimeoutMs?: number;
     invalidationBus?: InvalidationBus;
     tagIndex?: CacheTagIndex;
     generation?: number;

package/dist/{edge-BXWTKlI1.d.ts → edge-CUHTP9Bc.d.ts}

@@ -178,6 +178,8 @@ interface CacheStackOptions {
     logger?: CacheLogger | boolean;
     metrics?: boolean;
     stampedePrevention?: boolean;
+    stampedeMaxInFlight?: number;
+    stampedeEntryTimeoutMs?: number;
     invalidationBus?: InvalidationBus;
     tagIndex?: CacheTagIndex;
     generation?: number;

package/dist/edge.d.cts

@@ -1,2 +1,2 @@
-export { e as CacheGetOptions, f as CacheLayer, h as CacheLayerSetManyEntry, t as CacheMetricsSnapshot, w as CacheRateLimitOptions, B as CacheTtlPolicy, D as CacheTtlPolicyContext, J as CacheWriteOptions, K as EvictionPolicy, M as MemoryLayer, N as MemoryLayerOptions, O as MemoryLayerSnapshotEntry, P as PatternMatcher, T as TagIndex, Q as createHonoCacheMiddleware } from './edge-BXWTKlI1.cjs';
+export { e as CacheGetOptions, f as CacheLayer, h as CacheLayerSetManyEntry, t as CacheMetricsSnapshot, w as CacheRateLimitOptions, B as CacheTtlPolicy, D as CacheTtlPolicyContext, J as CacheWriteOptions, K as EvictionPolicy, M as MemoryLayer, N as MemoryLayerOptions, O as MemoryLayerSnapshotEntry, P as PatternMatcher, T as TagIndex, Q as createHonoCacheMiddleware } from './edge-CUHTP9Bc.cjs';
 import 'node:events';

package/dist/edge.d.ts

@@ -1,2 +1,2 @@
-export { e as CacheGetOptions, f as CacheLayer, h as CacheLayerSetManyEntry, t as CacheMetricsSnapshot, w as CacheRateLimitOptions, B as CacheTtlPolicy, D as CacheTtlPolicyContext, J as CacheWriteOptions, K as EvictionPolicy, M as MemoryLayer, N as MemoryLayerOptions, O as MemoryLayerSnapshotEntry, P as PatternMatcher, T as TagIndex, Q as createHonoCacheMiddleware } from './edge-BXWTKlI1.js';
+export { e as CacheGetOptions, f as CacheLayer, h as CacheLayerSetManyEntry, t as CacheMetricsSnapshot, w as CacheRateLimitOptions, B as CacheTtlPolicy, D as CacheTtlPolicyContext, J as CacheWriteOptions, K as EvictionPolicy, M as MemoryLayer, N as MemoryLayerOptions, O as MemoryLayerSnapshotEntry, P as PatternMatcher, T as TagIndex, Q as createHonoCacheMiddleware } from './edge-CUHTP9Bc.js';
 import 'node:events';