modelence 0.8.0 → 0.9.0-dev.0

package/dist/migration/index.js

@@ -0,0 +1,85 @@
+import { acquireLock, releaseLock } from '../lock';
+import { Module } from '../app/module';
+import { dbMigrations } from './db';
+import { logInfo } from '../telemetry';
+export async function runMigrations(migrations) {
+    if (migrations.length === 0) {
+        return;
+    }
+    const hasLock = await acquireLock('migrations');
+    if (!hasLock) {
+        logInfo('Another instance is running migrations. Skipping migration run.', {
+            source: 'migrations',
+        });
+        return;
+    }
+    const versions = migrations.map(({ version }) => version);
+    const existingVersions = await dbMigrations.fetch({
+        version: { $in: versions },
+    });
+    const existingVersionSet = new Set(existingVersions.map(({ version }) => version));
+    const pendingMigrations = migrations.filter(({ version }) => !existingVersionSet.has(version));
+    if (pendingMigrations.length === 0) {
+        return;
+    }
+    logInfo(`Running migrations (${pendingMigrations.length})...`, {
+        source: 'migrations',
+    });
+    for (const { version, description, handler } of pendingMigrations) {
+        logInfo(`Running migration v${version}: ${description}`, {
+            source: 'migrations',
+        });
+        try {
+            const output = await handler();
+            const outputStr = (output || '').toString().trim();
+            const maxSize = 15 * 1024 * 1024; // 15MB (leaving 1MB buffer for other fields and MongoDB overhead)
+            const truncatedOutput = outputStr.length > maxSize
+                ? outputStr.slice(0, maxSize) + '\n[Output truncated - exceeded size limit]'
+                : outputStr;
+            await dbMigrations.upsertOne({
+                version,
+            }, {
+                $set: {
+                    version,
+                    status: 'completed',
+                    description,
+                    output: truncatedOutput,
+                    appliedAt: new Date(),
+                },
+            });
+            logInfo(`Migration v${version} complete`, {
+                source: 'migrations',
+            });
+        }
+        catch (e) {
+            if (e instanceof Error) {
+                await dbMigrations.upsertOne({
+                    version,
+                }, {
+                    $set: {
+                        version,
+                        status: 'failed',
+                        description,
+                        output: e.message || '',
+                        appliedAt: new Date(),
+                    },
+                });
+                logInfo(`Migration v${version} is failed: ${e.message}`, {
+                    source: 'migrations',
+                });
+            }
+        }
+    }
+    await releaseLock('migrations');
+}
+export function startMigrations(migrations) {
+    setTimeout(() => {
+        runMigrations(migrations).catch((err) => {
+            console.error('Error running migrations:', err);
+        });
+    }, 0);
+}
+export default new Module('_system.migration', {
+    stores: [dbMigrations],
+});
+//# sourceMappingURL=index.js.map

package/dist/migration/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/migration/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAQvC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAA6B;IAC/D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC;IAEhD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,iEAAiE,EAAE;YACzE,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IAE1D,MAAM,gBAAgB,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC;QAChD,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE;KAC3B,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,MAAM,iBAAiB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAE/F,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,uBAAuB,iBAAiB,CAAC,MAAM,MAAM,EAAE;QAC7D,MAAM,EAAE,YAAY;KACrB,CAAC,CAAC;IACH,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,iBAAiB,EAAE,CAAC;QAClE,OAAO,CAAC,sBAAsB,OAAO,KAAK,WAAW,EAAE,EAAE;YACvD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,kEAAkE;YACpG,MAAM,eAAe,GACnB,SAAS,CAAC,MAAM,GAAG,OAAO;gBACxB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,4CAA4C;gBAC5E,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,YAAY,CAAC,SAAS,CAC1B;gBACE,OAAO;aACR,EACD;gBACE,IAAI,EAAE;oBACJ,OAAO;oBACP,MAAM,EAAE,WAAW;oBACnB,WAAW;oBACX,MAAM,EAAE,eAAe;oBACvB,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB;aACF,CACF,CAAC;YACF,OAAO,CAAC,cAAc,OAAO,WAAW,EAAE;gBACxC,MAAM,EAAE,YAAY;aACrB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;gBACvB,MAAM,YAAY,CAAC,SAAS,CAC1B;oBACE,OAAO;iBACR,EACD;oBACE,IAAI,EAAE;wBACJ,OAAO;wBACP,MAAM,EAAE,QAAQ;wBAChB,WAAW;wBACX,MAAM,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;wBACvB,SAAS,EAAE,IAAI,IAAI,EAAE;qBACtB;iBACF,CACF,CAAC;gBACF,OAAO,CAAC,cAAc,OAAO,eAAe,CAAC,CAAC,OAAO,EAAE,EAAE;oBACvD,MAAM,EAAE,YAAY;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAA6B;IAC3D,UAAU,CAAC,GAAG,EAAE;QACd,aAAa,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACtC,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,CAAC,CAAC;AACR,CAAC;AAED,eAAe,IAAI,MAAM,CAAC,mBAAmB,EAAE;IAC7C,MAAM,EAAE,CAAC,YAAY,CAAC;CACvB,CAAC,CAAC"}

package/dist/mongo.d.ts

@@ -1,5 +1,4 @@
 export { ClientSession, ObjectId } from 'mongodb';
-
 declare const _default: {};
-
-export { _default as default };
+export default _default;
+//# sourceMappingURL=mongo.d.ts.map

package/dist/mongo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongo.d.ts","sourceRoot":"","sources":["../src/mongo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;;AAElD,wBAAkB"}

package/dist/mongo.js

@@ -1,2 +1,3 @@
-export{ClientSession,ObjectId}from'mongodb';var e={};export{e as default};//# sourceMappingURL=mongo.js.map
+export { ClientSession, ObjectId } from 'mongodb';
+export default {};
 //# sourceMappingURL=mongo.js.map

package/dist/mongo.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/mongo.ts"],"names":["mongo_default"],"mappings":"4CAEA,IAAOA,EAAQ","file":"mongo.js","sourcesContent":["export { ClientSession, ObjectId } from 'mongodb';\n\nexport default {};\n"]}
+{"version":3,"file":"mongo.js","sourceRoot":"","sources":["../src/mongo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAElD,eAAe,EAAE,CAAC"}

package/dist/rate-limit/db.d.ts

@@ -0,0 +1,29 @@
+import { Store } from '../data/store';
+/**
+ * Two-bucket sliding window approximation to track rate limits.
+ * This is a trade-off between storage and accuracy.
+ * We're not keeping exact event logs, so we can't track the exact number of events in a window.
+ * Instead, we're adding a weighted average from the previous window to the current window.
+ */
+export declare const dbRateLimits: Store<{
+    bucket: import("zod").ZodString;
+    type: import("zod").ZodEnum<["ip", "user"]>;
+    value: import("zod").ZodString;
+    windowMs: import("zod").ZodNumber;
+    windowStart: import("zod").ZodDate;
+    windowCount: import("zod").ZodNumber;
+    prevWindowCount: import("zod").ZodNumber;
+    expiresAt: import("zod").ZodDate;
+}, Record<string, (this: Pick<import("../types").InferDocumentType<{
+    bucket: import("zod").ZodString;
+    type: import("zod").ZodEnum<["ip", "user"]>;
+    value: import("zod").ZodString;
+    windowMs: import("zod").ZodNumber;
+    windowStart: import("zod").ZodDate;
+    windowCount: import("zod").ZodNumber;
+    prevWindowCount: import("zod").ZodNumber;
+    expiresAt: import("zod").ZodDate;
+}>, "value" | "type" | "expiresAt" | "bucket" | "windowMs" | "windowStart" | "windowCount" | "prevWindowCount"> & {
+    _id: import("bson").ObjectId;
+}, ...args: any[]) => any>>;
+//# sourceMappingURL=db.d.ts.map

package/dist/rate-limit/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/rate-limit/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAGtC;;;;;GAKG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;2BAiBvB,CAAC"}

package/dist/rate-limit/db.js

@@ -0,0 +1,25 @@
+import { Store } from '../data/store';
+import { schema } from '../data/types';
+/**
+ * Two-bucket sliding window approximation to track rate limits.
+ * This is a trade-off between storage and accuracy.
+ * We're not keeping exact event logs, so we can't track the exact number of events in a window.
+ * Instead, we're adding a weighted average from the previous window to the current window.
+ */
+export const dbRateLimits = new Store('_modelenceRateLimits', {
+    schema: {
+        bucket: schema.string(),
+        type: schema.enum(['ip', 'user']),
+        value: schema.string(),
+        windowMs: schema.number(),
+        windowStart: schema.date(),
+        windowCount: schema.number(),
+        prevWindowCount: schema.number(),
+        expiresAt: schema.date(),
+    },
+    indexes: [
+        { key: { bucket: 1, type: 1, value: 1, windowMs: 1 }, unique: true },
+        { key: { expiresAt: 1 }, expireAfterSeconds: 0 },
+    ],
+});
+//# sourceMappingURL=db.js.map

package/dist/rate-limit/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/rate-limit/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,KAAK,CAAC,sBAAsB,EAAE;IAC5D,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QACtB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;QAEzB,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE;QAC1B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;QAC5B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE;QAEhC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE;KACzB;IACD,OAAO,EAAE;QACP,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QACpE,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE;KACjD;CACF,CAAC,CAAC"}

package/dist/rate-limit/index.d.ts

@@ -0,0 +1,4 @@
+import { Module } from '../app/module';
+declare const _default: Module;
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/rate-limit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rate-limit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;;AAGvC,wBAEG"}

package/dist/rate-limit/index.js

@@ -0,0 +1,6 @@
+import { Module } from '../app/module';
+import { dbRateLimits } from './db';
+export default new Module('_system.rateLimit', {
+    stores: [dbRateLimits],
+});
+//# sourceMappingURL=index.js.map

package/dist/rate-limit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rate-limit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAEpC,eAAe,IAAI,MAAM,CAAC,mBAAmB,EAAE;IAC7C,MAAM,EAAE,CAAC,YAAY,CAAC;CACvB,CAAC,CAAC"}

package/dist/rate-limit/rules.d.ts

@@ -0,0 +1,22 @@
+import { RateLimitRule, RateLimitType } from './types';
+export declare function initRateLimits(rateLimits: RateLimitRule[]): void;
+/**
+ * This function will check all rate limit rules on the specified bucket and type,
+ * throw an error if any of them are exceeded and increase the count of the rate limit record.
+ *
+ * @category Rate Limits
+ *
+ * @example
+ * ```ts
+ * await consumeRateLimit({ bucket: 'api', type: 'ip', value: '127.0.0.1' });
+ * ```
+ * @param options.bucket - The bucket for the rate limit.
+ * @param options.type - The type of the rate limit.
+ * @param options.value - The value for the rate limit.
+ */
+export declare function consumeRateLimit(options: {
+    bucket: string;
+    type: RateLimitType;
+    value: string;
+}): Promise<void>;
+//# sourceMappingURL=rules.d.ts.map

package/dist/rate-limit/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/rate-limit/rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAMvD,wBAAgB,cAAc,CAAC,UAAU,EAAE,aAAa,EAAE,QAMzD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf,iBAOA"}

package/dist/rate-limit/rules.js

@@ -0,0 +1,112 @@
+import { dbRateLimits } from './db';
+import { RateLimitError } from '../error';
+let allRules = [];
+export function initRateLimits(rateLimits) {
+    if (allRules.length > 0) {
+        throw new Error('Duplicate call to initRateLimits - already initialized');
+    }
+    allRules = rateLimits;
+}
+/**
+ * This function will check all rate limit rules on the specified bucket and type,
+ * throw an error if any of them are exceeded and increase the count of the rate limit record.
+ *
+ * @category Rate Limits
+ *
+ * @example
+ * ```ts
+ * await consumeRateLimit({ bucket: 'api', type: 'ip', value: '127.0.0.1' });
+ * ```
+ * @param options.bucket - The bucket for the rate limit.
+ * @param options.type - The type of the rate limit.
+ * @param options.value - The value for the rate limit.
+ */
+export async function consumeRateLimit(options) {
+    const { bucket, type, value } = options;
+    const rules = allRules.filter((rule) => rule.bucket === bucket && rule.type === type);
+    for (const rule of rules) {
+        await checkRateLimitRule(rule, value);
+    }
+}
+// Two-bucket sliding window approximation to track rate limits.
+async function checkRateLimitRule(rule, value, createError) {
+    const createRateLimitError = () => {
+        return createError
+            ? createError()
+            : new RateLimitError(`Rate limit exceeded for ${rule.bucket}`);
+    };
+    const record = await dbRateLimits.findOne({
+        bucket: rule.bucket,
+        type: rule.type,
+        value,
+        windowMs: rule.window,
+    });
+    const now = Date.now();
+    const currentWindowStart = Math.floor(now / rule.window) * rule.window;
+    const { count, modifier } = record
+        ? getCount(record, currentWindowStart, now)
+        : {
+            count: 0,
+            modifier: {
+                $setOnInsert: {
+                    windowStart: new Date(currentWindowStart),
+                    windowCount: 1,
+                    prevWindowCount: 0,
+                    expiresAt: new Date(currentWindowStart + rule.window + rule.window),
+                },
+            },
+        };
+    if (count >= rule.limit) {
+        throw createRateLimitError();
+    }
+    /*
+      Always use upsert, because there is a small chance the document might be auto-removed
+      based on the expiration TTL index in between the check and the update
+    */
+    await dbRateLimits.upsertOne({ bucket: rule.bucket, type: rule.type, value, windowMs: rule.window }, modifier);
+}
+function getCount(record, currentWindowStart, now) {
+    const prevWindowStart = currentWindowStart - record.windowMs;
+    if (record.windowStart.getTime() === currentWindowStart) {
+        const currentWindowCount = record.windowCount;
+        const prevWindowCount = record.prevWindowCount;
+        const prevWindowWeight = 1 - (now - currentWindowStart) / record.windowMs;
+        return {
+            count: Math.round(currentWindowCount + prevWindowCount * prevWindowWeight),
+            modifier: {
+                $inc: { windowCount: 1 },
+                $setOnInsert: {
+                    windowStart: new Date(currentWindowStart),
+                    prevWindowCount: 0,
+                    expiresAt: new Date(currentWindowStart + record.windowMs + record.windowMs),
+                },
+            },
+        };
+    }
+    if (record.windowStart.getTime() === prevWindowStart) {
+        const weight = 1 - (now - currentWindowStart) / record.windowMs;
+        return {
+            count: Math.round(record.windowCount * weight),
+            modifier: {
+                $set: {
+                    windowStart: new Date(currentWindowStart),
+                    windowCount: 1,
+                    prevWindowCount: record.windowCount,
+                    expiresAt: new Date(currentWindowStart + record.windowMs + record.windowMs),
+                },
+            },
+        };
+    }
+    return {
+        count: 0,
+        modifier: {
+            $set: {
+                windowStart: new Date(currentWindowStart),
+                windowCount: 1,
+                prevWindowCount: 0,
+                expiresAt: new Date(currentWindowStart + record.windowMs + record.windowMs),
+            },
+        },
+    };
+}
+//# sourceMappingURL=rules.js.map

package/dist/rate-limit/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/rate-limit/rules.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,IAAI,QAAQ,GAAyB,EAAE,CAAC;AAExC,MAAM,UAAU,cAAc,CAAC,UAA2B;IACxD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,QAAQ,GAAG,UAAU,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAItC;IACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAEtF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,KAAK,UAAU,kBAAkB,CAAC,IAAmB,EAAE,KAAa,EAAE,WAAyB;IAC7F,MAAM,oBAAoB,GAAG,GAAG,EAAE;QAChC,OAAO,WAAW;YAChB,CAAC,CAAC,WAAW,EAAE;YACf,CAAC,CAAC,IAAI,cAAc,CAAC,2BAA2B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC;QACxC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK;QACL,QAAQ,EAAE,IAAI,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IAEvE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM;QAChC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,EAAE,GAAG,CAAC;QAC3C,CAAC,CAAC;YACE,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE;gBACR,YAAY,EAAE;oBACZ,WAAW,EAAE,IAAI,IAAI,CAAC,kBAAkB,CAAC;oBACzC,WAAW,EAAE,CAAC;oBACd,eAAe,EAAE,CAAC;oBAClB,SAAS,EAAE,IAAI,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;iBACpE;aACF;SACF,CAAC;IAEN,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,oBAAoB,EAAE,CAAC;IAC/B,CAAC;IAED;;;MAGE;IACF,MAAM,YAAY,CAAC,SAAS,CAC1B,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,EACtE,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,MAAoC,EAAE,kBAA0B,EAAE,GAAW;IAC7F,MAAM,eAAe,GAAG,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC;IAE7D,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,kBAAkB,EAAE,CAAC;QACxD,MAAM,kBAAkB,GAAG,MAAM,CAAC,WAAW,CAAC;QAC9C,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC/C,MAAM,gBAAgB,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,kBAAkB,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC1E,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,GAAG,eAAe,GAAG,gBAAgB,CAAC;YAC1E,QAAQ,EAAE;gBACR,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE;gBACxB,YAAY,EAAE;oBACZ,WAAW,EAAE,IAAI,IAAI,CAAC,kBAAkB,CAAC;oBACzC,eAAe,EAAE,CAAC;oBAClB,SAAS,EAAE,IAAI,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;iBAC5E;aACF;SACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,eAAe,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,kBAAkB,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChE,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC;YAC9C,QAAQ,EAAE;gBACR,IAAI,EAAE;oBACJ,WAAW,EAAE,IAAI,IAAI,CAAC,kBAAkB,CAAC;oBACzC,WAAW,EAAE,CAAC;oBACd,eAAe,EAAE,MAAM,CAAC,WAAW;oBACnC,SAAS,EAAE,IAAI,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;iBAC5E;aACF;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE;YACR,IAAI,EAAE;gBACJ,WAAW,EAAE,IAAI,IAAI,CAAC,kBAAkB,CAAC;gBACzC,WAAW,EAAE,CAAC;gBACd,eAAe,EAAE,CAAC;gBAClB,SAAS,EAAE,IAAI,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;aAC5E;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/rate-limit/types.d.ts

@@ -0,0 +1,12 @@
+export type RateLimitType = 'ip' | 'user';
+export type RateLimitRule = {
+    /** Logical action being limited, e.g. "signup" */
+    bucket: string;
+    /** Identifier type of the actor this rule applies to */
+    type: RateLimitType;
+    /** Time window size in milliseconds */
+    window: number;
+    /** Maximum allowed hits within the window */
+    limit: number;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/rate-limit/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/rate-limit/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,MAAM,CAAC;AAE1C,MAAM,MAAM,aAAa,GAAG;IAC1B,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IAEf,wDAAwD;IACxD,IAAI,EAAE,aAAa,CAAC;IAEpB,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IAEf,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/rate-limit/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/rate-limit/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/rate-limit/types.ts"],"names":[],"mappings":""}

package/dist/routes/handler.d.ts

@@ -0,0 +1,4 @@
+import { Request, Response, NextFunction } from 'express';
+import { RouteHandler } from './types';
+export declare function createRouteHandler(method: string, path: string, handler: RouteHandler): (req: Request, res: Response, next: NextFunction) => Promise<void>;
+//# sourceMappingURL=handler.d.ts.map

package/dist/routes/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/routes/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAQvC,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,IACtE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,mBAmE9D"}

package/dist/routes/handler.js

@@ -0,0 +1,66 @@
+import { ModelenceError } from '../error';
+import { authenticate } from '../auth';
+import { getMongodbUri } from '../db/client';
+import { startTransaction } from '../telemetry';
+// TODO: Use cookies for authentication and automatically add session/user to context if accessing from browser
+export function createRouteHandler(method, path, handler) {
+    return async (req, res, next) => {
+        const authToken = req.headers['x-modelence-auth-token'];
+        let context = { session: null, user: null };
+        if (typeof authToken === 'string' && getMongodbUri()) {
+            try {
+                const { session, user } = await authenticate(authToken);
+                context = { session, user };
+            }
+            catch {
+                // If authentication fails, context remains null
+            }
+        }
+        const transaction = startTransaction('route', `route:${method.toLowerCase()}:${path}`, {
+            method,
+            path,
+            query: req.query,
+            body: req.body,
+            params: req.params,
+        });
+        try {
+            const response = await handler({
+                query: req.query,
+                body: req.body,
+                params: req.params,
+                headers: req.headers,
+                cookies: req.cookies,
+                rawBody: Buffer.isBuffer(req.body) ? req.body : undefined,
+                req,
+                res,
+                next,
+            }, context);
+            transaction.end();
+            // If the handler returns null, we expect it to handle the response itself
+            if (response) {
+                res.status(response.status || 200);
+                if (response.redirect) {
+                    res.redirect(response.redirect);
+                }
+                if (response.headers) {
+                    Object.entries(response.headers).forEach(([key, value]) => {
+                        res.setHeader(key, value);
+                    });
+                }
+                res.send(response.data);
+            }
+        }
+        catch (error) {
+            transaction.end('error');
+            if (error instanceof ModelenceError) {
+                res.status(error.status).send(error.message);
+            }
+            else {
+                console.error(`Error in route handler: ${req.path}`);
+                console.error(error);
+                res.status(500).send(String(error));
+            }
+        }
+    };
+}
+//# sourceMappingURL=handler.js.map

package/dist/routes/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../src/routes/handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,+GAA+G;AAC/G,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAY,EAAE,OAAqB;IACpF,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACxD,IAAI,OAAO,GAAsC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAE/E,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,aAAa,EAAE,EAAE,CAAC;YACrD,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxD,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;YAClD,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,EAAE,SAAS,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,EAAE;YACrF,MAAM;YACN,IAAI;YACJ,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B;gBACE,KAAK,EAAE,GAAG,CAAC,KAA+B;gBAC1C,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO,EAAE,GAAG,CAAC,OAAiC;gBAC9C,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBACzD,GAAG;gBACH,GAAG;gBACH,IAAI;aACL,EACD,OAAO,CACR,CAAC;YAEF,WAAW,CAAC,GAAG,EAAE,CAAC;YAElB,0EAA0E;YAC1E,IAAI,QAAQ,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;gBAEnC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;oBACtB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAClC,CAAC;gBAED,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;wBACxD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC5B,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAEzB,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/routes/types.d.ts

@@ -0,0 +1,45 @@
+import { Request, Response, NextFunction } from 'express';
+import type { Context } from '../methods/types';
+export type HttpMethod = 'get' | 'post' | 'put' | 'delete' | 'patch' | 'options' | 'head' | 'all' | 'use';
+export type RouteParams<T = unknown> = {
+    query: Record<string, string>;
+    body: T;
+    params: Record<string, string>;
+    headers: Record<string, string>;
+    cookies: Record<string, string>;
+    rawBody?: Buffer;
+    req: Request;
+    res: Response;
+    next: NextFunction;
+};
+export type RouteResponse<T = unknown> = {
+    data?: T;
+    status?: number;
+    headers?: Record<string, string>;
+    redirect?: string;
+} | null;
+export type RouteHandler<T = unknown> = (params: RouteParams, context: Pick<Context, 'session' | 'user'>) => Promise<RouteResponse<T>> | RouteResponse<T>;
+export type RouteHandlers = {
+    [key in HttpMethod]?: RouteHandler;
+};
+export type BodyConfig = {
+    json?: boolean | {
+        limit?: string;
+    };
+    urlencoded?: boolean | {
+        limit?: string;
+        extended?: boolean;
+    };
+    raw?: boolean | {
+        limit?: string;
+        type?: string | string[];
+    };
+};
+export type RouteDefinition = {
+    path: string;
+    handlers: RouteHandlers;
+    errorHandler?: RouteHandler;
+    body?: BodyConfig;
+};
+export type ExpressHandler = (req: Request, res: Response) => Promise<void> | void;
+//# sourceMappingURL=types.d.ts.map

package/dist/routes/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/routes/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,MAAM,UAAU,GAClB,KAAK,GACL,MAAM,GACN,KAAK,GACL,QAAQ,GACR,OAAO,GACP,SAAS,GACT,MAAM,GACN,KAAK,GACL,KAAK,CAAC;AAEV,MAAM,MAAM,WAAW,CAAC,CAAC,GAAG,OAAO,IAAI;IACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,QAAQ,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,aAAa,CAAC,CAAC,GAAG,OAAO,IAAI;IACvC,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAGnB,GAAG,IAAI,CAAC;AAET,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,OAAO,IAAI,CACtC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAAC,KACvC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;AAElD,MAAM,MAAM,aAAa,GAAG;KACzB,GAAG,IAAI,UAAU,CAAC,CAAC,EAAE,YAAY;CACnC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,CAAC,EACD,OAAO,GACP;QACE,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACN,UAAU,CAAC,EACP,OAAO,GACP;QACE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IACN,GAAG,CAAC,EACA,OAAO,GACP;QACE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;KAC1B,CAAC;CACP,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC"}

package/dist/routes/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/routes/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/routes/types.ts"],"names":[],"mappings":""}