layercache 1.3.0 → 1.3.2

package/README.md

@@ -15,7 +15,7 @@
   <a href="./LICENSE"><img src="https://img.shields.io/badge/license-Apache_2.0-green" alt="license"></a>
   <a href="https://www.typescriptlang.org/"><img src="https://img.shields.io/badge/TypeScript-first-3178C6?logo=typescript&logoColor=white" alt="TypeScript"></a>
   <img src="https://img.shields.io/badge/Node.js-%E2%89%A5_20-339933?logo=nodedotjs&logoColor=white" alt="Node.js >= 20">
-  <img src="https://img.shields.io/badge/tests-431_passing-brightgreen" alt="tests">
+  <img src="https://img.shields.io/badge/tests-467_passing-brightgreen" alt="tests">
   <a href="https://coveralls.io/github/flyingsquirrel0419/layercache?branch=main"><img src="https://coveralls.io/repos/github/flyingsquirrel0419/layercache/badge.svg?branch=main&t=20260410" alt="Coveralls"></a>
 </p>
 
@@ -182,7 +182,6 @@ layercache plugs into the frameworks you already use:
 | **Hono** | `createHonoCacheMiddleware(cache, opts)` - edge-compatible middleware |
 | **tRPC** | `createTrpcCacheMiddleware(cache, prefix, opts)` - procedure middleware |
 | **GraphQL** | `cacheGraphqlResolver(cache, prefix, resolver, opts)` - field resolver wrapper |
-| **NestJS** | `@cachestack/nestjs` - `CacheStackModule.forRoot()`, `@Cacheable()` decorator |
 | **Next.js** | Works natively with App Router and API routes |
 | **OpenTelemetry** | `createOpenTelemetryPlugin(cache, tracer)` - event-driven tracing spans without monkey-patching |
 
@@ -205,42 +204,6 @@ app.get('/api/users', createExpressCacheMiddleware(cache, {
 
 </details>
 
-<details>
-<summary><b>NestJS example</b></summary>
-
-```bash
-npm install @cachestack/nestjs
-```
-
-```ts
-// app.module.ts
-import { CacheStackModule } from '@cachestack/nestjs'
-
-@Module({
-  imports: [
-    CacheStackModule.forRoot({
-      layers: [
-        new MemoryLayer({ ttl: 20 }),
-        new RedisLayer({ client: redis, ttl: 300 })
-      ]
-    })
-  ]
-})
-export class AppModule {}
-
-// user.service.ts
-@Injectable()
-export class UserService {
-  constructor(@InjectCacheStack() private readonly cache: CacheStack) {}
-
-  async getUser(id: number) {
-    return this.cache.get(`user:${id}`, () => this.db.findUser(id))
-  }
-}
-```
-
-</details>
-
 <details>
 <summary><b>Next.js App Router example</b></summary>
 
@@ -326,18 +289,7 @@ const cache = new CacheStack(
 └─────────────────────┴────────┘
 ```
 
-Run benchmarks locally:
-
-```bash
-npm run bench:direct
-npm run bench:edge
-npm run bench:slow-redis
-npm run bench:queue-amplification
-npm run bench:http
-npm run bench:multi-process-fanout
-```
-
-The benchmark harness defaults to `/root/cache-test/data/users.json` so the in-repo scripts stay aligned with the external reproduction workspace. Set `LAYERCACHE_BENCH_FIXTURE_PATH` if you want to point at a different workload fixture.
+Benchmark commands, fixtures, and scenario notes live in [docs/benchmarking.md](./docs/benchmarking.md).
 
 ---
 
@@ -359,7 +311,6 @@ The benchmark harness defaults to `/root/cache-test/data/users.json` so the in-r
 | Persistence / snapshots | -- | -- | -- | **Yes** |
 | Compression | -- | -- | Yes | **Yes** |
 | Admin CLI | -- | -- | -- | **Yes** |
-| NestJS module | -- | -- | -- | **Yes** |
 | TypeScript-first | Partial | Yes | Yes | **Yes** |
 | Wrap / decorator API | Yes | -- | -- | **Yes** |
 | Namespaces | -- | Yes | Yes | **Yes** |
@@ -388,7 +339,6 @@ The benchmark harness defaults to `/root/cache-test/data/users.json` so the in-r
 The [`examples/`](./examples) directory contains ready-to-run projects:
 
 - [`express-api/`](./examples/express-api/) - Express REST API with layered caching
-- [`nestjs-module/`](./examples/nestjs-module/) - NestJS module integration
 - [`nextjs-api-routes/`](./examples/nextjs-api-routes/) - Next.js App Router with layercache
 
 ---

package/dist/cli.cjs

@@ -365,6 +365,18 @@ async function main(argv = process.argv.slice(2)) {
     process.exitCode = 1;
     return;
   }
+  if (isPlaintextRedisUrl(redisUrl)) {
+    if (args.requireTls) {
+      process.stderr.write(
+        "Error: --require-tls is set but the URL uses redis:// (plaintext). Use rediss:// for TLS-encrypted connections.\n"
+      );
+      process.exitCode = 1;
+      return;
+    }
+    process.stderr.write(
+      "Warning: connecting to Redis without TLS (redis://). All data including cached values and credentials will be transmitted in plaintext. Use rediss:// in production environments, or set --require-tls.\n"
+    );
+  }
   const redis = new import_ioredis.default(redisUrl, {
     connectTimeout: CONNECT_TIMEOUT_MS,
     lazyConnect: true,
@@ -484,6 +496,8 @@ function parseArgs(argv) {
     } else if (token === "--tag-index-prefix") {
       parsed.tagIndexPrefix = value;
       index += 1;
+    } else if (token === "--require-tls") {
+      parsed.requireTls = true;
     }
   }
   return parsed;
@@ -515,7 +529,7 @@ async function scanKeys(redis, pattern) {
 }
 function printUsage() {
   process.stdout.write(
-    "Usage:\n  layercache stats --redis <url> [--pattern <glob>]\n  layercache keys --redis <url> [--pattern <glob>]\n  layercache inspect --redis <url> --key <key>\n  layercache invalidate --redis <url> [--pattern <glob> | --tag <tag>] [--tag-index-prefix <prefix>]\n\nOptions:\n  --redis <url>               Redis connection URL (e.g. redis://localhost:6379)\n  --pattern <glob>            Glob pattern to filter keys (default: *)\n  --key <key>                 Exact cache key to inspect\n  --tag <tag>                 Invalidate by tag name\n  --tag-index-prefix <prefix> Redis key prefix for tag index (default: layercache:tag-index)\n"
+    "Usage:\n  layercache stats --redis <url> [--pattern <glob>]\n  layercache keys --redis <url> [--pattern <glob>]\n  layercache inspect --redis <url> --key <key>\n  layercache invalidate --redis <url> [--pattern <glob> | --tag <tag>] [--tag-index-prefix <prefix>]\n\nOptions:\n  --redis <url>               Redis connection URL (e.g. redis://localhost:6379)\n  --pattern <glob>            Glob pattern to filter keys (default: *)\n  --key <key>                 Exact cache key to inspect\n  --tag <tag>                 Invalidate by tag name\n  --tag-index-prefix <prefix> Redis key prefix for tag index (default: layercache:tag-index)\n  --require-tls               Reject non-TLS (redis://) connections\n"
   );
 }
 function decodeInspectablePayload(payload) {
@@ -541,6 +555,14 @@ function summarizeInspectableValue(value) {
   }
   return value;
 }
+function isPlaintextRedisUrl(url) {
+  try {
+    const parsed = new URL(url);
+    return parsed.protocol === "redis:";
+  } catch {
+    return true;
+  }
+}
 function maskRedisUrl(url) {
   try {
     const parsed = new URL(url);

package/dist/cli.js

@@ -23,6 +23,18 @@ async function main(argv = process.argv.slice(2)) {
     process.exitCode = 1;
     return;
   }
+  if (isPlaintextRedisUrl(redisUrl)) {
+    if (args.requireTls) {
+      process.stderr.write(
+        "Error: --require-tls is set but the URL uses redis:// (plaintext). Use rediss:// for TLS-encrypted connections.\n"
+      );
+      process.exitCode = 1;
+      return;
+    }
+    process.stderr.write(
+      "Warning: connecting to Redis without TLS (redis://). All data including cached values and credentials will be transmitted in plaintext. Use rediss:// in production environments, or set --require-tls.\n"
+    );
+  }
   const redis = new Redis(redisUrl, {
     connectTimeout: CONNECT_TIMEOUT_MS,
     lazyConnect: true,
@@ -142,6 +154,8 @@ function parseArgs(argv) {
     } else if (token === "--tag-index-prefix") {
       parsed.tagIndexPrefix = value;
       index += 1;
+    } else if (token === "--require-tls") {
+      parsed.requireTls = true;
     }
   }
   return parsed;
@@ -173,7 +187,7 @@ async function scanKeys(redis, pattern) {
 }
 function printUsage() {
   process.stdout.write(
-    "Usage:\n  layercache stats --redis <url> [--pattern <glob>]\n  layercache keys --redis <url> [--pattern <glob>]\n  layercache inspect --redis <url> --key <key>\n  layercache invalidate --redis <url> [--pattern <glob> | --tag <tag>] [--tag-index-prefix <prefix>]\n\nOptions:\n  --redis <url>               Redis connection URL (e.g. redis://localhost:6379)\n  --pattern <glob>            Glob pattern to filter keys (default: *)\n  --key <key>                 Exact cache key to inspect\n  --tag <tag>                 Invalidate by tag name\n  --tag-index-prefix <prefix> Redis key prefix for tag index (default: layercache:tag-index)\n"
+    "Usage:\n  layercache stats --redis <url> [--pattern <glob>]\n  layercache keys --redis <url> [--pattern <glob>]\n  layercache inspect --redis <url> --key <key>\n  layercache invalidate --redis <url> [--pattern <glob> | --tag <tag>] [--tag-index-prefix <prefix>]\n\nOptions:\n  --redis <url>               Redis connection URL (e.g. redis://localhost:6379)\n  --pattern <glob>            Glob pattern to filter keys (default: *)\n  --key <key>                 Exact cache key to inspect\n  --tag <tag>                 Invalidate by tag name\n  --tag-index-prefix <prefix> Redis key prefix for tag index (default: layercache:tag-index)\n  --require-tls               Reject non-TLS (redis://) connections\n"
   );
 }
 function decodeInspectablePayload(payload) {
@@ -199,6 +213,14 @@ function summarizeInspectableValue(value) {
   }
   return value;
 }
+function isPlaintextRedisUrl(url) {
+  try {
+    const parsed = new URL(url);
+    return parsed.protocol === "redis:";
+  } catch {
+    return true;
+  }
+}
 function maskRedisUrl(url) {
   try {
     const parsed = new URL(url);

package/dist/{edge-BXWTKlI1.d.cts → edge-CUHTP9Bc.d.cts}

@@ -178,6 +178,8 @@ interface CacheStackOptions {
     logger?: CacheLogger | boolean;
     metrics?: boolean;
     stampedePrevention?: boolean;
+    stampedeMaxInFlight?: number;
+    stampedeEntryTimeoutMs?: number;
     invalidationBus?: InvalidationBus;
     tagIndex?: CacheTagIndex;
     generation?: number;

package/dist/{edge-BXWTKlI1.d.ts → edge-CUHTP9Bc.d.ts}

@@ -178,6 +178,8 @@ interface CacheStackOptions {
     logger?: CacheLogger | boolean;
     metrics?: boolean;
     stampedePrevention?: boolean;
+    stampedeMaxInFlight?: number;
+    stampedeEntryTimeoutMs?: number;
     invalidationBus?: InvalidationBus;
     tagIndex?: CacheTagIndex;
     generation?: number;

package/dist/edge.d.cts

@@ -1,2 +1,2 @@
-export { e as CacheGetOptions, f as CacheLayer, h as CacheLayerSetManyEntry, t as CacheMetricsSnapshot, w as CacheRateLimitOptions, B as CacheTtlPolicy, D as CacheTtlPolicyContext, J as CacheWriteOptions, K as EvictionPolicy, M as MemoryLayer, N as MemoryLayerOptions, O as MemoryLayerSnapshotEntry, P as PatternMatcher, T as TagIndex, Q as createHonoCacheMiddleware } from './edge-BXWTKlI1.cjs';
+export { e as CacheGetOptions, f as CacheLayer, h as CacheLayerSetManyEntry, t as CacheMetricsSnapshot, w as CacheRateLimitOptions, B as CacheTtlPolicy, D as CacheTtlPolicyContext, J as CacheWriteOptions, K as EvictionPolicy, M as MemoryLayer, N as MemoryLayerOptions, O as MemoryLayerSnapshotEntry, P as PatternMatcher, T as TagIndex, Q as createHonoCacheMiddleware } from './edge-CUHTP9Bc.cjs';
 import 'node:events';

package/dist/edge.d.ts

@@ -1,2 +1,2 @@
-export { e as CacheGetOptions, f as CacheLayer, h as CacheLayerSetManyEntry, t as CacheMetricsSnapshot, w as CacheRateLimitOptions, B as CacheTtlPolicy, D as CacheTtlPolicyContext, J as CacheWriteOptions, K as EvictionPolicy, M as MemoryLayer, N as MemoryLayerOptions, O as MemoryLayerSnapshotEntry, P as PatternMatcher, T as TagIndex, Q as createHonoCacheMiddleware } from './edge-BXWTKlI1.js';
+export { e as CacheGetOptions, f as CacheLayer, h as CacheLayerSetManyEntry, t as CacheMetricsSnapshot, w as CacheRateLimitOptions, B as CacheTtlPolicy, D as CacheTtlPolicyContext, J as CacheWriteOptions, K as EvictionPolicy, M as MemoryLayer, N as MemoryLayerOptions, O as MemoryLayerSnapshotEntry, P as PatternMatcher, T as TagIndex, Q as createHonoCacheMiddleware } from './edge-CUHTP9Bc.js';
 import 'node:events';