raffel 0.1.2

package/dist/middleware/types.d.ts

@@ -0,0 +1,371 @@
+/**
+ * Middleware Types
+ *
+ * Configuration types for all Raffel middleware.
+ */
+import type { Envelope, Context } from '../types/index.js';
+import type { RateLimitDriver, RateLimitDriverConfig, RateLimitDriverType } from '../rate-limit/types.js';
+/**
+ * Rate limit rule for path-based configuration
+ */
+export interface RateLimitRule {
+    /** Rule identifier */
+    id: string;
+    /** Glob pattern to match (e.g., 'admin.*', 'users.**') */
+    pattern: string;
+    /** Window size in milliseconds */
+    windowMs?: number;
+    /** Maximum requests per window */
+    maxRequests?: number;
+    /** Key type: 'ip', 'user', 'apikey', or custom */
+    key?: 'ip' | 'user' | 'apikey' | string;
+    /** Custom key generator */
+    keyGenerator?: (envelope: Envelope, ctx: Context) => string;
+}
+/**
+ * Rate limit configuration
+ */
+export interface RateLimitConfig {
+    /** Window size in milliseconds (default: 60000) */
+    windowMs?: number;
+    /** Maximum requests per window (default: 100) */
+    maxRequests?: number;
+    /** Maximum unique keys to track (default: 10000) */
+    maxUniqueKeys?: number;
+    /** Skip successful requests (useful for auth) */
+    skipSuccessfulRequests?: boolean;
+    /** Custom key generator */
+    keyGenerator?: (envelope: Envelope, ctx: Context) => string;
+    /** Rate limit driver configuration */
+    driver?: RateLimitDriverConfig | RateLimitDriverType | RateLimitDriver;
+    /** Path-specific rules */
+    rules?: RateLimitRule[];
+}
+/**
+ * Rate limit info returned when limit is exceeded
+ */
+export interface RateLimitInfo {
+    /** Limit for the window */
+    limit: number;
+    /** Remaining requests */
+    remaining: number;
+    /** Reset timestamp (ms since epoch) */
+    resetAt: number;
+    /** Seconds until reset */
+    retryAfter: number;
+}
+/**
+ * Request ID configuration
+ */
+export interface RequestIdConfig {
+    /** Custom ID generator (default: nanoid) */
+    generator?: () => string;
+    /** Whether to propagate from incoming metadata (default: true) */
+    propagate?: boolean;
+    /** Metadata key to read/write (default: 'x-request-id') */
+    metadataKey?: string;
+}
+/**
+ * Log level
+ */
+export type LogLevel = 'trace' | 'debug' | 'info' | 'warn' | 'error' | 'fatal';
+/**
+ * Logging filter context
+ */
+export interface LogFilterContext {
+    envelope: Envelope;
+    ctx: Context;
+    duration: number;
+    error?: Error;
+}
+/**
+ * Logging configuration
+ */
+export interface LoggingConfig {
+    /** Minimum log level (default: 'info') */
+    level?: LogLevel;
+    /** Log format: 'json' or 'pretty' (default: 'pretty' in dev) */
+    format?: 'json' | 'pretty';
+    /** Include request payload in logs (default: false) */
+    includePayload?: boolean;
+    /** Include response payload in logs (default: false) */
+    includeResponse?: boolean;
+    /**
+     * Include request metadata in logs (default: false)
+     * Sensitive headers are automatically redacted
+     */
+    includeMetadata?: boolean;
+    /**
+     * Headers to redact when logging metadata (case-insensitive)
+     * Default: authorization, cookie, set-cookie, x-api-key, x-auth-token,
+     *          x-access-token, x-refresh-token, x-csrf-token, x-xsrf-token,
+     *          proxy-authorization, www-authenticate
+     */
+    sensitiveHeaders?: string[];
+    /** Filter function to skip logging */
+    filter?: (ctx: LogFilterContext) => boolean;
+    /** Procedure patterns to exclude (e.g., ['health.*']) */
+    excludeProcedures?: string[];
+    /** Custom logger instance */
+    logger?: {
+        trace: (obj: object, msg?: string) => void;
+        debug: (obj: object, msg?: string) => void;
+        info: (obj: object, msg?: string) => void;
+        warn: (obj: object, msg?: string) => void;
+        error: (obj: object, msg?: string) => void;
+    };
+}
+/**
+ * Timeout configuration
+ */
+export interface TimeoutConfig {
+    /** Default timeout in milliseconds (default: 30000) */
+    defaultMs?: number;
+    /** Per-procedure timeouts */
+    procedures?: Record<string, number>;
+    /** Pattern-based timeouts (e.g., { 'reports.*': 60000 }) */
+    patterns?: Record<string, number>;
+}
+/**
+ * Backoff strategy for retry delays
+ *
+ * - `linear`: delay = baseDelay * attempt (100, 200, 300...)
+ * - `exponential`: delay = baseDelay * 2^(attempt-1) (100, 200, 400...)
+ * - `decorrelated`: AWS-style jitter, random(baseDelay, prevDelay * 3)
+ */
+export type BackoffStrategy = 'linear' | 'exponential' | 'decorrelated';
+/**
+ * Retry event context passed to onRetry hook
+ */
+export interface RetryEventContext {
+    /** Current attempt number (1-based) */
+    attempt: number;
+    /** Total max attempts configured */
+    maxAttempts: number;
+    /** The error that triggered the retry */
+    error: Error;
+    /** Delay before next attempt (ms) */
+    delayMs: number;
+    /** Procedure being retried */
+    procedure: string;
+    /** Request ID if available */
+    requestId?: string;
+}
+/**
+ * Retry configuration
+ */
+export interface RetryConfig {
+    /** Maximum retry attempts (default: 3) */
+    maxAttempts?: number;
+    /** Initial delay in milliseconds (default: 100) */
+    initialDelayMs?: number;
+    /** Maximum delay in milliseconds (default: 10000) */
+    maxDelayMs?: number;
+    /** Backoff multiplier for exponential/linear (default: 2) */
+    backoffMultiplier?: number;
+    /**
+     * Backoff strategy (default: 'exponential')
+     *
+     * - `linear`: delay grows linearly
+     * - `exponential`: delay doubles each attempt
+     * - `decorrelated`: AWS-style randomized jitter (best for preventing thundering herd)
+     */
+    backoffStrategy?: BackoffStrategy;
+    /** Add jitter to delays - ±25% randomness (default: true) */
+    jitter?: boolean;
+    /** Error codes that should trigger retry */
+    retryableCodes?: string[];
+    /** Custom retry predicate */
+    shouldRetry?: (error: Error, attempt: number) => boolean;
+    /**
+     * Respect Retry-After header/field from errors (default: true)
+     * When enabled, uses the server-suggested delay if present
+     */
+    respectRetryAfter?: boolean;
+    /**
+     * Callback invoked before each retry attempt
+     * Useful for logging, metrics, or custom delay logic
+     */
+    onRetry?: (ctx: RetryEventContext) => void | Promise<void>;
+}
+/**
+ * Circuit breaker state
+ */
+export type CircuitState = 'closed' | 'open' | 'half-open';
+/**
+ * Circuit breaker configuration
+ */
+export interface CircuitBreakerConfig {
+    /** Failure threshold to open circuit (default: 5) */
+    failureThreshold?: number;
+    /** Success threshold to close circuit (default: 3) */
+    successThreshold?: number;
+    /** Time in ms before attempting recovery (default: 30000) */
+    resetTimeoutMs?: number;
+    /** Time window for failure counting (default: 60000) */
+    windowMs?: number;
+    /** Error codes that count as failures */
+    failureCodes?: string[];
+    /** Callback when circuit state changes */
+    onStateChange?: (state: CircuitState, procedure: string) => void;
+}
+/**
+ * Cache configuration
+ */
+export interface CacheConfig {
+    /** Default TTL in milliseconds (default: 60000) */
+    ttlMs?: number;
+    /** Maximum cache entries (default: 1000) */
+    maxEntries?: number;
+    /** Procedures to cache (patterns supported) */
+    procedures?: string[];
+    /** Custom cache key generator */
+    keyGenerator?: (envelope: Envelope) => string;
+    /** Stale-while-revalidate support */
+    staleWhileRevalidate?: boolean;
+    /** Custom cache store */
+    store?: CacheStore;
+}
+/**
+ * Cache store interface
+ */
+export interface CacheStore {
+    get(key: string): Promise<{
+        value: unknown;
+        expiresAt: number;
+    } | undefined>;
+    set(key: string, value: unknown, ttlMs: number): Promise<void>;
+    delete(key: string): Promise<void>;
+    clear(): Promise<void>;
+}
+/**
+ * HSTS (HTTP Strict Transport Security) configuration
+ */
+export interface HstsConfig {
+    /** Max age in seconds (default: 31536000 = 1 year) */
+    maxAge?: number;
+    /** Include subdomains (default: true) */
+    includeSubDomains?: boolean;
+    /** Enable preload (default: false) */
+    preload?: boolean;
+}
+/**
+ * Content Security Policy directive
+ */
+export type CspDirective = 'default-src' | 'script-src' | 'style-src' | 'img-src' | 'font-src' | 'connect-src' | 'frame-src' | 'object-src' | 'media-src' | 'worker-src' | 'child-src' | 'form-action' | 'frame-ancestors' | 'base-uri' | 'report-uri' | 'report-to' | 'upgrade-insecure-requests' | 'block-all-mixed-content';
+/**
+ * Content Security Policy configuration
+ */
+export interface CspConfig {
+    /** Enable CSP (default: true) */
+    enabled?: boolean;
+    /** CSP directives */
+    directives?: Partial<Record<CspDirective, string | string[]>>;
+    /** Report-only mode (default: false) */
+    reportOnly?: boolean;
+    /** Report URI for violations */
+    reportUri?: string;
+}
+/**
+ * Permissions Policy configuration
+ */
+export interface PermissionsPolicyConfig {
+    /** Feature policies (e.g., { 'geolocation': [], 'camera': ['self'] }) */
+    features?: Record<string, string[]>;
+}
+/**
+ * Security headers configuration
+ */
+export interface SecurityConfig {
+    /** X-Content-Type-Options: nosniff (default: true) */
+    noSniff?: boolean;
+    /** X-Frame-Options (default: 'DENY') */
+    frameOptions?: 'DENY' | 'SAMEORIGIN' | false;
+    /** HSTS configuration */
+    hsts?: HstsConfig | false;
+    /** Referrer-Policy (default: 'strict-origin-when-cross-origin') */
+    referrerPolicy?: string | false;
+    /** X-DNS-Prefetch-Control (default: 'off') */
+    dnsPrefetchControl?: boolean;
+    /** X-XSS-Protection (default: '1; mode=block') */
+    xssProtection?: boolean | false;
+    /** Content Security Policy */
+    csp?: CspConfig | false;
+    /** Permissions Policy */
+    permissionsPolicy?: PermissionsPolicyConfig | false;
+    /** X-Permitted-Cross-Domain-Policies (default: 'none') */
+    crossDomainPolicy?: 'none' | 'master-only' | 'by-content-type' | 'all' | false;
+}
+/**
+ * Compression encoding
+ */
+export type CompressionEncoding = 'gzip' | 'deflate' | 'br';
+/**
+ * Compression configuration
+ */
+export interface CompressionConfig {
+    /** Minimum size to compress in bytes (default: 1024) */
+    threshold?: number;
+    /** Preferred encoding order (default: ['br', 'gzip', 'deflate']) */
+    encodings?: CompressionEncoding[];
+    /** Content types to compress (default: text/*, application/json, etc.) */
+    contentTypes?: string[];
+    /** Compression level (1-9, default: 6) */
+    level?: number;
+}
+/**
+ * Enhanced CORS configuration
+ */
+export interface EnhancedCorsConfig {
+    /** Allowed origins (string, array, or function) */
+    origin?: string | string[] | ((origin: string) => boolean | string);
+    /** Allowed methods (default: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS']) */
+    methods?: string[];
+    /** Allowed headers */
+    allowedHeaders?: string[];
+    /** Exposed headers */
+    exposedHeaders?: string[];
+    /** Allow credentials (default: false) */
+    credentials?: boolean;
+    /** Preflight cache max age in seconds (default: 86400) */
+    maxAge?: number;
+    /** Handle OPTIONS requests (default: true) */
+    preflightContinue?: boolean;
+}
+/**
+ * Bulkhead configuration for concurrency limiting
+ */
+export interface BulkheadConfig {
+    /** Maximum concurrent executions (required) */
+    concurrency: number;
+    /** Maximum queue size. 0 = no queue, reject immediately (default: 0) */
+    maxQueueSize?: number;
+    /** Queue timeout in ms. 0 = no timeout (default: 0) */
+    queueTimeout?: number;
+    /** Callback when a request is rejected */
+    onReject?: (procedure: string) => void;
+    /** Callback when a request is queued */
+    onQueued?: () => void;
+    /** Callback when a request is dequeued */
+    onDequeued?: () => void;
+}
+/**
+ * Fallback configuration for graceful degradation
+ */
+export interface FallbackConfig<TOutput = unknown> {
+    /** Static fallback response */
+    response?: TOutput;
+    /** Dynamic fallback handler */
+    handler?: (ctx: Context, error: Error) => TOutput | Promise<TOutput>;
+    /** Condition to apply fallback (default: always) */
+    when?: (error: Error) => boolean;
+}
+/**
+ * Security preset level
+ */
+export type SecurityPreset = 'strict' | 'recommended' | 'relaxed';
+/**
+ * Performance preset level
+ */
+export type PerformancePreset = 'aggressive' | 'balanced' | 'conservative';
+//# sourceMappingURL=types.d.ts.map

package/dist/middleware/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/middleware/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAMzG;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAA;IAEV,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAA;IAEf,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,kDAAkD;IAClD,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAA;IAEvC,2BAA2B;IAC3B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,KAAK,MAAM,CAAA;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB,iDAAiD;IACjD,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAEhC,2BAA2B;IAC3B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,KAAK,MAAM,CAAA;IAE3D,sCAAsC;IACtC,MAAM,CAAC,EAAE,qBAAqB,GAAG,mBAAmB,GAAG,eAAe,CAAA;IAEtE,0BAA0B;IAC1B,KAAK,CAAC,EAAE,aAAa,EAAE,CAAA;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAA;IAEb,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAA;IAEjB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAA;IAEf,0BAA0B;IAC1B,UAAU,EAAE,MAAM,CAAA;CACnB;AAMD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,MAAM,CAAA;IAExB,kEAAkE;IAClE,SAAS,CAAC,EAAE,OAAO,CAAA;IAEnB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAMD;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAA;AAE9E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,QAAQ,CAAA;IAClB,GAAG,EAAE,OAAO,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,KAAK,CAAA;CACd;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,0CAA0C;IAC1C,KAAK,CAAC,EAAE,QAAQ,CAAA;IAEhB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAA;IAE1B,uDAAuD;IACvD,cAAc,CAAC,EAAE,OAAO,CAAA;IAExB,wDAAwD;IACxD,eAAe,CAAC,EAAE,OAAO,CAAA;IAEzB;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IAEzB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE3B,sCAAsC;IACtC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAA;IAE3C,yDAAyD;IACzD,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE5B,6BAA6B;IAC7B,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QAC1C,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QAC1C,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QACzC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QACzC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;KAC3C,CAAA;CACF;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEnC,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAMD;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,aAAa,GAAG,cAAc,CAAA;AAEvE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAA;IACf,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,yCAAyC;IACzC,KAAK,EAAE,KAAK,CAAA;IACZ,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,6DAA6D;IAC7D,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAE1B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,eAAe,CAAA;IAEjC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,OAAO,CAAA;IAEhB,4CAA4C;IAC5C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IAEzB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAA;IAExD;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAE3B;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3D;AAMD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAA;AAE1D;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAEzB,sDAAsD;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAEzB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IAEvB,0CAA0C;IAC1C,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAA;CACjE;AAMD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IAErB,iCAAiC;IACjC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,MAAM,CAAA;IAE7C,qCAAqC;IACrC,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAE9B,yBAAyB;IACzB,KAAK,CAAC,EAAE,UAAU,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAA;IAC5E,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAMD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf,yCAAyC;IACzC,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAE3B,sCAAsC;IACtC,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,YAAY,GACZ,WAAW,GACX,SAAS,GACT,UAAU,GACV,aAAa,GACb,WAAW,GACX,YAAY,GACZ,WAAW,GACX,YAAY,GACZ,WAAW,GACX,aAAa,GACb,iBAAiB,GACjB,UAAU,GACV,YAAY,GACZ,WAAW,GACX,2BAA2B,GAC3B,yBAAyB,CAAA;AAE7B;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAA;IAEjB,qBAAqB;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAA;IAE7D,wCAAwC;IACxC,UAAU,CAAC,EAAE,OAAO,CAAA;IAEpB,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,CAAA;IAEjB,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,KAAK,CAAA;IAE5C,yBAAyB;IACzB,IAAI,CAAC,EAAE,UAAU,GAAG,KAAK,CAAA;IAEzB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,GAAG,KAAK,CAAA;IAE/B,8CAA8C;IAC9C,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAE5B,kDAAkD;IAClD,aAAa,CAAC,EAAE,OAAO,GAAG,KAAK,CAAA;IAE/B,8BAA8B;IAC9B,GAAG,CAAC,EAAE,SAAS,GAAG,KAAK,CAAA;IAEvB,yBAAyB;IACzB,iBAAiB,CAAC,EAAE,uBAAuB,GAAG,KAAK,CAAA;IAEnD,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,iBAAiB,GAAG,KAAK,GAAG,KAAK,CAAA;CAC/E;AAMD;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;AAE3D;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,oEAAoE;IACpE,SAAS,CAAC,EAAE,mBAAmB,EAAE,CAAA;IAEjC,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IAEvB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAMD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,GAAG,MAAM,CAAC,CAAA;IAEnE,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAElB,sBAAsB;IACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IAEzB,sBAAsB;IACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IAEzB,yCAAyC;IACzC,WAAW,CAAC,EAAE,OAAO,CAAA;IAErB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf,8CAA8C;IAC9C,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IAEnB,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAA;IAEtC,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IAErB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,IAAI,CAAA;CACxB;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc,CAAC,OAAO,GAAG,OAAO;IAC/C,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAElB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEpE,oDAAoD;IACpD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAA;CACjC;AAMD;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,aAAa,GAAG,SAAS,CAAA;AAEjE;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,UAAU,GAAG,cAAc,CAAA"}

package/dist/middleware/types.js

@@ -0,0 +1,7 @@
+/**
+ * Middleware Types
+ *
+ * Configuration types for all Raffel middleware.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/middleware/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/middleware/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/openapi/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * OpenAPI Module
+ *
+ * @deprecated Import from 'raffel/docs/openapi' instead
+ *
+ * This re-exports from the new location for backward compatibility.
+ */
+export * from '../docs/openapi/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/openapi/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/openapi/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,0BAA0B,CAAA"}

package/dist/openapi/index.js

@@ -0,0 +1,9 @@
+/**
+ * OpenAPI Module
+ *
+ * @deprecated Import from 'raffel/docs/openapi' instead
+ *
+ * This re-exports from the new location for backward compatibility.
+ */
+export * from '../docs/openapi/index.js';
+//# sourceMappingURL=index.js.map

package/dist/openapi/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/openapi/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,0BAA0B,CAAA"}

package/dist/rate-limit/drivers/filesystem.d.ts

@@ -0,0 +1,17 @@
+import type { RateLimitDriver, RateLimitRecord, FilesystemRateLimitDriverOptions } from '../types.js';
+export declare class FilesystemRateLimitDriver implements RateLimitDriver {
+    readonly name = "filesystem";
+    private readonly directory;
+    private readonly cleanupInterval;
+    private cleanupHandle;
+    constructor(options?: FilesystemRateLimitDriverOptions);
+    increment(key: string, windowMs: number): Promise<RateLimitRecord>;
+    decrement(key: string): Promise<void>;
+    reset(key: string): Promise<void>;
+    shutdown(): Promise<void>;
+    private ensureDirectory;
+    private getFilePath;
+    private readRecord;
+    private cleanupExpired;
+}
+//# sourceMappingURL=filesystem.d.ts.map

package/dist/rate-limit/drivers/filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../../src/rate-limit/drivers/filesystem.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,gCAAgC,EACjC,MAAM,aAAa,CAAA;AAEpB,qBAAa,yBAA0B,YAAW,eAAe;IAC/D,QAAQ,CAAC,IAAI,gBAAe;IAE5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,aAAa,CAA8C;gBAEvD,OAAO,GAAE,gCAAqC;IAYpD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAelE,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQrC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAO/B,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,WAAW;YAKL,UAAU;YASV,cAAc;CAiB7B"}

package/dist/rate-limit/drivers/filesystem.js

@@ -0,0 +1,85 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+export class FilesystemRateLimitDriver {
+    name = 'filesystem';
+    directory;
+    cleanupInterval;
+    cleanupHandle = null;
+    constructor(options = {}) {
+        this.directory = options.directory ?? '.rate-limit';
+        this.cleanupInterval = options.cleanupInterval ?? 300000;
+        this.ensureDirectory();
+        if (this.cleanupInterval > 0) {
+            this.cleanupHandle = setInterval(() => this.cleanupExpired(), this.cleanupInterval);
+            this.cleanupHandle.unref?.();
+        }
+    }
+    async increment(key, windowMs) {
+        this.ensureDirectory();
+        const now = Date.now();
+        const filePath = this.getFilePath(key);
+        let record = await this.readRecord(filePath);
+        if (!record || now > record.resetAt) {
+            record = { count: 0, resetAt: now + windowMs };
+        }
+        record.count += 1;
+        await fs.promises.writeFile(filePath, JSON.stringify(record), 'utf8');
+        return { ...record };
+    }
+    async decrement(key) {
+        const filePath = this.getFilePath(key);
+        const record = await this.readRecord(filePath);
+        if (!record)
+            return;
+        record.count = Math.max(0, record.count - 1);
+        await fs.promises.writeFile(filePath, JSON.stringify(record), 'utf8');
+    }
+    async reset(key) {
+        const filePath = this.getFilePath(key);
+        await fs.promises.rm(filePath, { force: true });
+    }
+    async shutdown() {
+        if (this.cleanupHandle) {
+            clearInterval(this.cleanupHandle);
+            this.cleanupHandle = null;
+        }
+    }
+    ensureDirectory() {
+        if (!fs.existsSync(this.directory)) {
+            fs.mkdirSync(this.directory, { recursive: true });
+        }
+    }
+    getFilePath(key) {
+        const hash = crypto.createHash('sha256').update(key).digest('hex');
+        return path.join(this.directory, `${hash}.json`);
+    }
+    async readRecord(filePath) {
+        try {
+            const content = await fs.promises.readFile(filePath, 'utf8');
+            return JSON.parse(content);
+        }
+        catch {
+            return null;
+        }
+    }
+    async cleanupExpired() {
+        try {
+            const files = await fs.promises.readdir(this.directory);
+            const now = Date.now();
+            for (const file of files) {
+                if (!file.endsWith('.json'))
+                    continue;
+                const filePath = path.join(this.directory, file);
+                const record = await this.readRecord(filePath);
+                if (!record || now > record.resetAt) {
+                    await fs.promises.rm(filePath, { force: true });
+                }
+            }
+        }
+        catch {
+            // ignore cleanup errors
+        }
+    }
+}
+//# sourceMappingURL=filesystem.js.map

package/dist/rate-limit/drivers/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../../src/rate-limit/drivers/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,MAAM,MAAM,aAAa,CAAA;AAOhC,MAAM,OAAO,yBAAyB;IAC3B,IAAI,GAAG,YAAY,CAAA;IAEX,SAAS,CAAQ;IACjB,eAAe,CAAQ;IAChC,aAAa,GAA0C,IAAI,CAAA;IAEnE,YAAY,UAA4C,EAAE;QACxD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAA;QACnD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,MAAM,CAAA;QAExD,IAAI,CAAC,eAAe,EAAE,CAAA;QAEtB,IAAI,IAAI,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;YACnF,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAA;QAC9B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,QAAgB;QAC3C,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QAEtC,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QAC5C,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAA;QAChD,CAAC;QAED,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;QACjB,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;QACrE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAC5C,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACtC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;YACjC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAA;QAC3B,CAAC;IACH,CAAC;IAEO,eAAe;QACrB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACnD,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,GAAW;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAClE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,OAAO,CAAC,CAAA;IAClD,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,QAAgB;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAA;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAEtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,SAAQ;gBACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;gBAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;gBAC9C,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;CACF"}

package/dist/rate-limit/drivers/memory.d.ts

@@ -0,0 +1,15 @@
+import type { RateLimitDriver, RateLimitRecord, MemoryRateLimitDriverOptions } from '../types.js';
+export declare class MemoryRateLimitDriver implements RateLimitDriver {
+    readonly name = "memory";
+    private readonly maxKeys;
+    private readonly cleanupInterval;
+    private readonly store;
+    private cleanupHandle;
+    constructor(options?: MemoryRateLimitDriverOptions);
+    increment(key: string, windowMs: number): Promise<RateLimitRecord>;
+    decrement(key: string): Promise<void>;
+    reset(key: string): Promise<void>;
+    shutdown(): Promise<void>;
+    private cleanupExpired;
+}
+//# sourceMappingURL=memory.d.ts.map

package/dist/rate-limit/drivers/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/rate-limit/drivers/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAA;AAEjG,qBAAa,qBAAsB,YAAW,eAAe;IAC3D,QAAQ,CAAC,IAAI,YAAW;IAExB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,aAAa,CAA8C;gBAEvD,OAAO,GAAE,4BAAiC;IAUhD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAqBlE,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMrC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAO/B,OAAO,CAAC,cAAc;CAQvB"}

package/dist/rate-limit/drivers/memory.js

@@ -0,0 +1,55 @@
+export class MemoryRateLimitDriver {
+    name = 'memory';
+    maxKeys;
+    cleanupInterval;
+    store = new Map();
+    cleanupHandle = null;
+    constructor(options = {}) {
+        this.maxKeys = options.maxKeys ?? 10000;
+        this.cleanupInterval = options.cleanupInterval ?? 60000;
+        if (this.cleanupInterval > 0) {
+            this.cleanupHandle = setInterval(() => this.cleanupExpired(), this.cleanupInterval);
+            this.cleanupHandle.unref?.();
+        }
+    }
+    async increment(key, windowMs) {
+        const now = Date.now();
+        let record = this.store.get(key);
+        if (!record || now > record.resetAt) {
+            record = { count: 0, resetAt: now + windowMs };
+            this.store.set(key, record);
+        }
+        record.count += 1;
+        if (this.store.size > this.maxKeys) {
+            const oldestKey = this.store.keys().next().value;
+            if (oldestKey) {
+                this.store.delete(oldestKey);
+            }
+        }
+        return { ...record };
+    }
+    async decrement(key) {
+        const record = this.store.get(key);
+        if (!record)
+            return;
+        record.count = Math.max(0, record.count - 1);
+    }
+    async reset(key) {
+        this.store.delete(key);
+    }
+    async shutdown() {
+        if (this.cleanupHandle) {
+            clearInterval(this.cleanupHandle);
+            this.cleanupHandle = null;
+        }
+    }
+    cleanupExpired() {
+        const now = Date.now();
+        for (const [key, record] of this.store) {
+            if (now > record.resetAt) {
+                this.store.delete(key);
+            }
+        }
+    }
+}
+//# sourceMappingURL=memory.js.map

package/dist/rate-limit/drivers/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/rate-limit/drivers/memory.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,qBAAqB;IACvB,IAAI,GAAG,QAAQ,CAAA;IAEP,OAAO,CAAQ;IACf,eAAe,CAAQ;IACvB,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAA;IACnD,aAAa,GAA0C,IAAI,CAAA;IAEnE,YAAY,UAAwC,EAAE;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAA;QACvC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,KAAK,CAAA;QAEvD,IAAI,IAAI,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;YACnF,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAA;QAC9B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,QAAgB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAEhC,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAA;YAC9C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC7B,CAAC;QAED,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;QAEjB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;YAChD,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;QAED,OAAO,EAAE,GAAG,MAAM,EAAE,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;YACjC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAA;QAC3B,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/rate-limit/drivers/redis.d.ts

@@ -0,0 +1,12 @@
+import type { RateLimitDriver, RateLimitRecord, RedisRateLimitDriverOptions } from '../types.js';
+export declare class RedisRateLimitDriver implements RateLimitDriver {
+    readonly name = "redis";
+    private readonly client;
+    private readonly prefix;
+    constructor(options: RedisRateLimitDriverOptions);
+    increment(key: string, windowMs: number): Promise<RateLimitRecord>;
+    decrement(key: string): Promise<void>;
+    reset(key: string): Promise<void>;
+    private getFullKey;
+}
+//# sourceMappingURL=redis.d.ts.map

package/dist/rate-limit/drivers/redis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.d.ts","sourceRoot":"","sources":["../../../src/rate-limit/drivers/redis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AAEhG,qBAAa,oBAAqB,YAAW,eAAe;IAC1D,QAAQ,CAAC,IAAI,WAAU;IAEvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;gBAEnB,OAAO,EAAE,2BAA2B;IAS1C,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAsBlE,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMrC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvC,OAAO,CAAC,UAAU;CAGnB"}