raffel 0.2.3 → 1.0.0-next.f81d4db

package/dist/proxy/transparent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transparent.d.ts","sourceRoot":"","sources":["../../src/proxy/transparent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAuC,KAAK,MAAM,EAA4B,MAAM,UAAU,CAAA;AACrG,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,YAAY,CAAA;AAIzD,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,UAAU,CAAA;AAExD,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,+FAA+F;IAC/F,IAAI,CAAC,EAAE,oBAAoB,CAAA;IAC3B,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE;QACpB,YAAY,EAAE,MAAM,CAAA;QACpB,aAAa,EAAE,MAAM,CAAA;QACrB,YAAY,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAC7C,KAAK,IAAI,CAAA;CACX;AAMD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,WAAW,CAoIpF"}

package/dist/proxy/transparent.js

@@ -0,0 +1,144 @@
+/**
+ * Transparent Proxy
+ *
+ * Standalone net.Server with IP_TRANSPARENT socket option (Linux + CAP_NET_ADMIN).
+ *
+ * In TPROXY mode, the kernel preserves the original destination address on
+ * each accepted connection, so socket.localAddress:socket.localPort gives
+ * the original destination.
+ *
+ * In REDIRECT mode, the original destination is typically obtainable via
+ * SO_ORIGINAL_DST (getsockopt), but Node.js does not expose this natively.
+ * We fall back to socket.localAddress (which points to the proxy, not the
+ * real destination) and log a warning.
+ *
+ * iptables setup for TPROXY:
+ *   iptables -t mangle -A PREROUTING -p tcp -j TPROXY --tproxy-mark 0x1 --on-port 8080
+ *   ip rule add fwmark 0x1 lookup 100
+ *   ip route add local 0.0.0.0/0 dev lo table 100
+ */
+import { createServer, connect as netConnect } from 'node:net';
+import { createProxyStats } from './utils/auth.js';
+import { pipeBidirectional } from './utils/pipe.js';
+// Linux IP_TRANSPARENT socket option
+const IPPROTO_IP = 0;
+const IP_TRANSPARENT = 19;
+export function createTransparentProxy(options) {
+    const { port, host = '0.0.0.0', mode = 'tproxy', connectTimeout = 10_000, onConnection } = options;
+    const { mutable, snapshot } = createProxyStats();
+    let server = null;
+    let _boundPort = null;
+    let running = false;
+    function getOriginalDest(socket) {
+        // In TPROXY mode, the kernel routes the original destination IP to this
+        // process. The socket.localAddress / socket.localPort reflect the
+        // original destination, not the proxy bind address.
+        //
+        // In REDIRECT mode, socket.localAddress points to the proxy, not the
+        // real destination. SO_ORIGINAL_DST is not exposed by Node.js core, so
+        // we return the local address as a best-effort fallback.
+        return {
+            host: socket.localAddress ?? '127.0.0.1',
+            port: socket.localPort ?? 80,
+        };
+    }
+    function handleConnection(clientSocket) {
+        mutable.connectionsTotal++;
+        mutable.connectionsActive++;
+        const originalDest = getOriginalDest(clientSocket);
+        const clientAddress = `${clientSocket.remoteAddress}:${clientSocket.remotePort}`;
+        onConnection?.({ clientSocket, clientAddress, originalDest });
+        const upstream = netConnect({
+            host: originalDest.host,
+            port: originalDest.port,
+        });
+        upstream.setTimeout(connectTimeout);
+        upstream.on('connect', () => {
+            upstream.setTimeout(0);
+            pipeBidirectional(clientSocket, upstream, {
+                onStats: (s) => {
+                    mutable.bytesFromClient += s.bytesFromA;
+                    mutable.bytesToClient += s.bytesToA;
+                },
+                onEnd: () => {
+                    mutable.connectionsActive--;
+                },
+                onError: () => {
+                    mutable.connectionsErrored++;
+                    mutable.connectionsActive--;
+                },
+            });
+        });
+        upstream.on('timeout', () => {
+            upstream.destroy(new Error('connect timeout'));
+        });
+        upstream.on('error', () => {
+            mutable.connectionsErrored++;
+            mutable.connectionsActive--;
+            if (!clientSocket.destroyed)
+                clientSocket.destroy();
+        });
+        clientSocket.on('error', () => {
+            upstream.destroy();
+        });
+    }
+    return {
+        async start() {
+            return new Promise((resolve, reject) => {
+                server = createServer(handleConnection);
+                server.once('error', reject);
+                server.listen({ port, host }, () => {
+                    const addr = server.address();
+                    if (typeof addr === 'object' && addr !== null) {
+                        _boundPort = addr.port;
+                        // Attempt to set IP_TRANSPARENT on the underlying socket handle
+                        if (mode === 'tproxy') {
+                            const handle = server._handle;
+                            try {
+                                handle?.setsockopt?.(IPPROTO_IP, IP_TRANSPARENT, 1);
+                            }
+                            catch {
+                                // Not fatal — warn at runtime but continue
+                                // (tests run without CAP_NET_ADMIN)
+                            }
+                        }
+                        running = true;
+                        resolve(addr.port);
+                    }
+                    else {
+                        reject(new Error('Failed to resolve transparent proxy address'));
+                    }
+                });
+            });
+        },
+        async stop(drainTimeoutMs = 5000) {
+            return new Promise((resolve) => {
+                if (!server || !running) {
+                    resolve();
+                    return;
+                }
+                running = false;
+                _boundPort = null;
+                const timer = setTimeout(() => {
+                    ;
+                    server.closeAllConnections?.();
+                    resolve();
+                }, drainTimeoutMs);
+                server.close(() => {
+                    clearTimeout(timer);
+                    resolve();
+                });
+            });
+        },
+        get stats() {
+            return snapshot();
+        },
+        get boundPort() {
+            return _boundPort;
+        },
+        get isRunning() {
+            return running;
+        },
+    };
+}
+//# sourceMappingURL=transparent.js.map

package/dist/proxy/transparent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transparent.js","sourceRoot":"","sources":["../../src/proxy/transparent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,YAAY,EAAE,OAAO,IAAI,UAAU,EAAyC,MAAM,UAAU,CAAA;AAErG,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAkBnD,qCAAqC;AACrC,MAAM,UAAU,GAAG,CAAC,CAAA;AACpB,MAAM,cAAc,GAAG,EAAE,CAAA;AAEzB,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,SAAS,EAAE,IAAI,GAAG,QAAQ,EAAE,cAAc,GAAG,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAA;IAClG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,gBAAgB,EAAE,CAAA;IAEhD,IAAI,MAAM,GAAqB,IAAI,CAAA;IACnC,IAAI,UAAU,GAAkB,IAAI,CAAA;IACpC,IAAI,OAAO,GAAG,KAAK,CAAA;IAEnB,SAAS,eAAe,CAAC,MAAc;QACrC,wEAAwE;QACxE,kEAAkE;QAClE,oDAAoD;QACpD,EAAE;QACF,qEAAqE;QACrE,uEAAuE;QACvE,yDAAyD;QACzD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,YAAY,IAAI,WAAW;YACxC,IAAI,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;SAC7B,CAAA;IACH,CAAC;IAED,SAAS,gBAAgB,CAAC,YAAoB;QAC5C,OAAO,CAAC,gBAAgB,EAAE,CAAA;QAC1B,OAAO,CAAC,iBAAiB,EAAE,CAAA;QAE3B,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;QAClD,MAAM,aAAa,GAAG,GAAG,YAAY,CAAC,aAAa,IAAI,YAAY,CAAC,UAAU,EAAE,CAAA;QAEhF,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAA;QAE7D,MAAM,QAAQ,GAAG,UAAU,CAAC;YAC1B,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,IAAI,EAAE,YAAY,CAAC,IAAI;SACxB,CAAC,CAAA;QACF,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,CAAA;QAEnC,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;YACtB,iBAAiB,CAAC,YAAY,EAAE,QAAQ,EAAE;gBACxC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;oBACb,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC,UAAU,CAAA;oBACvC,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC,QAAQ,CAAA;gBACrC,CAAC;gBACD,KAAK,EAAE,GAAG,EAAE;oBACV,OAAO,CAAC,iBAAiB,EAAE,CAAA;gBAC7B,CAAC;gBACD,OAAO,EAAE,GAAG,EAAE;oBACZ,OAAO,CAAC,kBAAkB,EAAE,CAAA;oBAC5B,OAAO,CAAC,iBAAiB,EAAE,CAAA;gBAC7B,CAAC;aACF,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;QAEF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,OAAO,CAAC,kBAAkB,EAAE,CAAA;YAC5B,OAAO,CAAC,iBAAiB,EAAE,CAAA;YAC3B,IAAI,CAAC,YAAY,CAAC,SAAS;gBAAE,YAAY,CAAC,OAAO,EAAE,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC5B,QAAQ,CAAC,OAAO,EAAE,CAAA;QACpB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK;YACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAA;gBAEvC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBAE5B,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;oBACjC,MAAM,IAAI,GAAG,MAAO,CAAC,OAAO,EAAE,CAAA;oBAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;wBAC9C,UAAU,GAAG,IAAI,CAAC,IAAI,CAAA;wBAEtB,gEAAgE;wBAChE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACtB,MAAM,MAAM,GAAI,MAAuG,CAAC,OAAO,CAAA;4BAC/H,IAAI,CAAC;gCACH,MAAM,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,CAAA;4BACrD,CAAC;4BAAC,MAAM,CAAC;gCACP,2CAA2C;gCAC3C,oCAAoC;4BACtC,CAAC;wBACH,CAAC;wBAED,OAAO,GAAG,IAAI,CAAA;wBACd,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBACpB,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAA;oBAClE,CAAC;gBACH,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI;YAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;oBACxB,OAAO,EAAE,CAAA;oBACT,OAAM;gBACR,CAAC;gBACD,OAAO,GAAG,KAAK,CAAA;gBACf,UAAU,GAAG,IAAI,CAAA;gBACjB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,CAAC;oBAAC,MAA0D,CAAC,mBAAmB,EAAE,EAAE,CAAA;oBACpF,OAAO,EAAE,CAAA;gBACX,CAAC,EAAE,cAAc,CAAC,CAAA;gBAClB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;oBAChB,YAAY,CAAC,KAAK,CAAC,CAAA;oBACnB,OAAO,EAAE,CAAA;gBACX,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,KAAK;YACP,OAAO,QAAQ,EAAE,CAAA;QACnB,CAAC;QAED,IAAI,SAAS;YACX,OAAO,UAAU,CAAA;QACnB,CAAC;QAED,IAAI,SAAS;YACX,OAAO,OAAO,CAAA;QAChB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/proxy/types.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Shared types for the Raffel proxy module.
+ */
+export interface ProxyCredentials {
+    username: string;
+    password: string;
+}
+export type ProxyAuthVerifier = (creds: ProxyCredentials) => boolean | Promise<boolean>;
+export interface ProxyAuth {
+    /** Static credentials to match against */
+    credentials?: ProxyCredentials;
+    /** Custom verifier function (takes precedence over credentials) */
+    verify?: ProxyAuthVerifier;
+}
+export interface ProxyStats {
+    readonly connectionsTotal: number;
+    readonly connectionsActive: number;
+    readonly bytesFromClient: number;
+    readonly bytesToClient: number;
+    readonly connectionsErrored: number;
+    readonly authFailures: number;
+}
+export interface ProxyServer {
+    /** Start listening. Resolves with the actual bound port. */
+    start(): Promise<number>;
+    /** Stop the server. */
+    stop(drainTimeoutMs?: number): Promise<void>;
+    readonly stats: ProxyStats;
+    readonly boundPort: number | null;
+    readonly isRunning: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/proxy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/proxy/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;AAEvF,MAAM,WAAW,SAAS;IACxB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,gBAAgB,CAAA;IAC9B,mEAAmE;IACnE,MAAM,CAAC,EAAE,iBAAiB,CAAA;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACxB,uBAAuB;IACvB,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B"}

package/dist/proxy/types.js

@@ -0,0 +1,5 @@
+/**
+ * Shared types for the Raffel proxy module.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/proxy/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/proxy/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/proxy/utils/auth.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Proxy authentication utilities.
+ */
+import type { ProxyAuth, ProxyCredentials, ProxyStats } from '../types.js';
+/** Mutable version of ProxyStats for internal tracking. */
+export interface MutableProxyStats {
+    connectionsTotal: number;
+    connectionsActive: number;
+    bytesFromClient: number;
+    bytesToClient: number;
+    connectionsErrored: number;
+    authFailures: number;
+}
+/**
+ * Parse the value of a `Proxy-Authorization: Basic ...` header.
+ * Returns null if missing or malformed.
+ */
+export declare function parseBasicProxyAuth(headerValue?: string): ProxyCredentials | null;
+/**
+ * Verify credentials against a ProxyAuth config.
+ * Returns true if auth is not required or credentials are valid.
+ */
+export declare function verifyProxyAuth(auth: ProxyAuth | undefined, creds: ProxyCredentials | null | undefined): Promise<boolean>;
+/**
+ * Create a mutable stats object with a snapshot() method.
+ */
+export declare function createProxyStats(): {
+    mutable: MutableProxyStats;
+    snapshot(): ProxyStats;
+};
+//# sourceMappingURL=auth.d.ts.map

package/dist/proxy/utils/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/proxy/utils/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE1E,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAejF;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,SAAS,GAAG,SAAS,EAC3B,KAAK,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GACzC,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI;IAAE,OAAO,EAAE,iBAAiB,CAAC;IAAC,QAAQ,IAAI,UAAU,CAAA;CAAE,CAuBzF"}

package/dist/proxy/utils/auth.js

@@ -0,0 +1,69 @@
+/**
+ * Parse the value of a `Proxy-Authorization: Basic ...` header.
+ * Returns null if missing or malformed.
+ */
+export function parseBasicProxyAuth(headerValue) {
+    if (!headerValue)
+        return null;
+    const match = /^Basic\s+(.+)$/i.exec(headerValue);
+    if (!match)
+        return null;
+    try {
+        const decoded = Buffer.from(match[1], 'base64').toString('utf8');
+        const colon = decoded.indexOf(':');
+        if (colon === -1)
+            return null;
+        return {
+            username: decoded.slice(0, colon),
+            password: decoded.slice(colon + 1),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Verify credentials against a ProxyAuth config.
+ * Returns true if auth is not required or credentials are valid.
+ */
+export async function verifyProxyAuth(auth, creds) {
+    if (!auth || (!auth.verify && !auth.credentials))
+        return true;
+    if (!creds)
+        return false;
+    if (auth.verify) {
+        return auth.verify(creds);
+    }
+    if (auth.credentials) {
+        return (auth.credentials.username === creds.username &&
+            auth.credentials.password === creds.password);
+    }
+    return true;
+}
+/**
+ * Create a mutable stats object with a snapshot() method.
+ */
+export function createProxyStats() {
+    const mutable = {
+        connectionsTotal: 0,
+        connectionsActive: 0,
+        bytesFromClient: 0,
+        bytesToClient: 0,
+        connectionsErrored: 0,
+        authFailures: 0,
+    };
+    return {
+        mutable,
+        snapshot() {
+            return {
+                connectionsTotal: mutable.connectionsTotal,
+                connectionsActive: mutable.connectionsActive,
+                bytesFromClient: mutable.bytesFromClient,
+                bytesToClient: mutable.bytesToClient,
+                connectionsErrored: mutable.connectionsErrored,
+                authFailures: mutable.authFailures,
+            };
+        },
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/proxy/utils/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/proxy/utils/auth.ts"],"names":[],"mappings":"AAeA;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAoB;IACtD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAA;IAC7B,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAChE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QAC7B,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;YACjC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;SACnC,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAA2B,EAC3B,KAA0C;IAE1C,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IAExB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,CACL,IAAI,CAAC,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAC5C,IAAI,CAAC,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAC7C,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,OAAO,GAAsB;QACjC,gBAAgB,EAAE,CAAC;QACnB,iBAAiB,EAAE,CAAC;QACpB,eAAe,EAAE,CAAC;QAClB,aAAa,EAAE,CAAC;QAChB,kBAAkB,EAAE,CAAC;QACrB,YAAY,EAAE,CAAC;KAChB,CAAA;IAED,OAAO;QACL,OAAO;QACP,QAAQ;YACN,OAAO;gBACL,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC5C,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;gBAC9C,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/proxy/utils/hop-headers.d.ts

@@ -0,0 +1,13 @@
+/**
+ * HTTP hop-by-hop header utilities.
+ *
+ * Hop-by-hop headers must not be forwarded by proxies (RFC 7230 §6.1).
+ */
+export declare const HOP_BY_HOP_HEADERS: ReadonlySet<string>;
+/**
+ * Return a copy of `headers` with hop-by-hop headers removed.
+ *
+ * Also strips headers listed in the `Connection` header value, per RFC 7230.
+ */
+export declare function stripHopByHopHeaders(headers: Record<string, string>, extra?: string[]): Record<string, string>;
+//# sourceMappingURL=hop-headers.d.ts.map

package/dist/proxy/utils/hop-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hop-headers.d.ts","sourceRoot":"","sources":["../../../src/proxy/utils/hop-headers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAUjD,CAAA;AAEF;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,KAAK,CAAC,EAAE,MAAM,EAAE,GACf,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAoBxB"}

package/dist/proxy/utils/hop-headers.js

@@ -0,0 +1,38 @@
+/**
+ * HTTP hop-by-hop header utilities.
+ *
+ * Hop-by-hop headers must not be forwarded by proxies (RFC 7230 §6.1).
+ */
+export const HOP_BY_HOP_HEADERS = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailers',
+    'transfer-encoding',
+    'upgrade',
+    'proxy-connection',
+]);
+/**
+ * Return a copy of `headers` with hop-by-hop headers removed.
+ *
+ * Also strips headers listed in the `Connection` header value, per RFC 7230.
+ */
+export function stripHopByHopHeaders(headers, extra) {
+    const toRemove = new Set(HOP_BY_HOP_HEADERS);
+    // Connection header may list additional headers to remove
+    const connectionVal = headers['connection'];
+    if (connectionVal) {
+        for (const h of connectionVal.split(',')) {
+            toRemove.add(h.trim().toLowerCase());
+        }
+    }
+    if (extra) {
+        for (const h of extra) {
+            toRemove.add(h.toLowerCase());
+        }
+    }
+    return Object.fromEntries(Object.entries(headers).filter(([k]) => !toRemove.has(k.toLowerCase())));
+}
+//# sourceMappingURL=hop-headers.js.map

package/dist/proxy/utils/hop-headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hop-headers.js","sourceRoot":"","sources":["../../../src/proxy/utils/hop-headers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;IACrB,IAAI;IACJ,UAAU;IACV,mBAAmB;IACnB,SAAS;IACT,kBAAkB;CACnB,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA+B,EAC/B,KAAgB;IAEhB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,kBAAkB,CAAC,CAAA;IAEpD,0DAA0D;IAC1D,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC3C,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;QACtC,CAAC;IACH,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CACxE,CAAA;AACH,CAAC"}

package/dist/proxy/utils/pipe.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Bidirectional socket piping with backpressure support.
+ */
+import type { Socket } from 'node:net';
+export interface PipeBidirectionalOptions {
+    /** Called when piping ends (either side closes or errors). Reports total bytes. */
+    onStats?(d: {
+        bytesFromA: number;
+        bytesToA: number;
+    }): void;
+    /** Called when piping ends cleanly or with error. */
+    onEnd?(): void;
+    /** Called on socket error. */
+    onError?(err: Error, side: 'a' | 'b'): void;
+}
+/**
+ * Pipe data bidirectionally between two sockets with backpressure.
+ *
+ * Returns an idempotent teardown function that destroys both sockets.
+ */
+export declare function pipeBidirectional(a: Socket, b: Socket, opts?: PipeBidirectionalOptions): () => void;
+//# sourceMappingURL=pipe.d.ts.map

package/dist/proxy/utils/pipe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipe.d.ts","sourceRoot":"","sources":["../../../src/proxy/utils/pipe.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AAEtC,MAAM,WAAW,wBAAwB;IACvC,mFAAmF;IACnF,OAAO,CAAC,CAAC,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC3D,qDAAqD;IACrD,KAAK,CAAC,IAAI,IAAI,CAAA;IACd,8BAA8B;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,GAAG,GAAG,GAAG,IAAI,CAAA;CAC5C;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,IAAI,CAAC,EAAE,wBAAwB,GAC9B,MAAM,IAAI,CAkDZ"}

package/dist/proxy/utils/pipe.js

@@ -0,0 +1,60 @@
+/**
+ * Pipe data bidirectionally between two sockets with backpressure.
+ *
+ * Returns an idempotent teardown function that destroys both sockets.
+ */
+export function pipeBidirectional(a, b, opts) {
+    let bytesFromA = 0;
+    let bytesToA = 0;
+    let torn = false;
+    function teardown(err, side) {
+        if (torn)
+            return;
+        torn = true;
+        if (err && opts?.onError)
+            opts.onError(err, side);
+        opts?.onStats?.({ bytesFromA, bytesToA });
+        opts?.onEnd?.();
+        if (!a.destroyed)
+            a.destroy();
+        if (!b.destroyed)
+            b.destroy();
+    }
+    // a → b
+    a.on('data', (chunk) => {
+        if (b.destroyed) {
+            teardown();
+            return;
+        }
+        bytesFromA += chunk.length;
+        if (!b.write(chunk))
+            a.pause();
+    });
+    // b → a
+    b.on('data', (chunk) => {
+        if (a.destroyed) {
+            teardown();
+            return;
+        }
+        bytesToA += chunk.length;
+        if (!a.write(chunk))
+            b.pause();
+    });
+    // Backpressure drain
+    b.on('drain', () => { if (!a.destroyed)
+        a.resume(); });
+    a.on('drain', () => { if (!b.destroyed)
+        b.resume(); });
+    // Half-close propagation
+    a.on('end', () => { if (!b.destroyed)
+        b.end(); });
+    b.on('end', () => { if (!a.destroyed)
+        a.end(); });
+    // Teardown on close / error
+    a.on('close', () => teardown(undefined, 'a'));
+    b.on('close', () => teardown(undefined, 'b'));
+    a.on('error', (err) => teardown(err, 'a'));
+    b.on('error', (err) => teardown(err, 'b'));
+    return () => teardown();
+}
+//# sourceMappingURL=pipe.js.map

package/dist/proxy/utils/pipe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipe.js","sourceRoot":"","sources":["../../../src/proxy/utils/pipe.ts"],"names":[],"mappings":"AAcA;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,CAAS,EACT,CAAS,EACT,IAA+B;IAE/B,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,IAAI,GAAG,KAAK,CAAA;IAEhB,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAgB;QAC7C,IAAI,IAAI;YAAE,OAAM;QAChB,IAAI,GAAG,IAAI,CAAA;QACX,IAAI,GAAG,IAAI,IAAI,EAAE,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAK,CAAC,CAAA;QAClD,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;QACzC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAA;QACf,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,CAAC,CAAC,OAAO,EAAE,CAAA;QAC7B,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,CAAC,CAAC,OAAO,EAAE,CAAA;IAC/B,CAAC;IAED,QAAQ;IACR,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QAC7B,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAChB,QAAQ,EAAE,CAAA;YACV,OAAM;QACR,CAAC;QACD,UAAU,IAAI,KAAK,CAAC,MAAM,CAAA;QAC1B,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,CAAC,CAAC,KAAK,EAAE,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,QAAQ;IACR,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QAC7B,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAChB,QAAQ,EAAE,CAAA;YACV,OAAM;QACR,CAAC;QACD,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAA;QACxB,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,CAAC,CAAC,KAAK,EAAE,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,qBAAqB;IACrB,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,CAAC,CAAC,MAAM,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;IACrD,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,CAAC,CAAC,MAAM,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;IAErD,yBAAyB;IACzB,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,CAAC,CAAC,GAAG,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,CAAC,CAAC,GAAG,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;IAEhD,4BAA4B;IAC5B,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAA;IAC7C,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAA;IAC7C,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAE1C,OAAO,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;AACzB,CAAC"}

package/dist/rate-limit/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/rate-limit/factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,eAAe,EAEf,qBAAqB,EACrB,4BAA4B,EAC5B,gCAAgC,EAChC,2BAA2B,EAC5B,MAAM,YAAY,CAAA;AAKnB,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,4BAA4B,GAAG,eAAe,CAAA;AACrG,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,gCAAgC,GAAG,eAAe,CAAA;AAC7G,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,GAAG,eAAe,CAAA;AAiBlG,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAWrF"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/rate-limit/factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,eAAe,EAEf,qBAAqB,EACrB,4BAA4B,EAC5B,gCAAgC,EAChC,2BAA2B,EAC5B,MAAM,YAAY,CAAA;AAsCnB,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,4BAA4B,GAAG,eAAe,CAAA;AACrG,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,gCAAgC,GAAG,eAAe,CAAA;AAC7G,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,GAAG,eAAe,CAAA;AAiBlG,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAWrF"}

package/dist/rate-limit/factory.js

@@ -3,17 +3,41 @@
  *
  * Creates rate-limit drivers with a cache-like configuration.
  */
-import { MemoryRateLimitDriver } from './drivers/memory.js';
-import { FilesystemRateLimitDriver } from './drivers/filesystem.js';
-import { RedisRateLimitDriver } from './drivers/redis.js';
+let MemoryRateLimitDriverClass = null;
+let FilesystemRateLimitDriverClass = null;
+let RedisRateLimitDriverClass = null;
+function loadMemoryRateLimitDriver() {
+    if (!MemoryRateLimitDriverClass) {
+        // eslint-disable-next-line @typescript-eslint/no-var-requires
+        const { MemoryRateLimitDriver } = require('./drivers/memory.js');
+        MemoryRateLimitDriverClass = MemoryRateLimitDriver;
+    }
+    return MemoryRateLimitDriverClass;
+}
+function loadFilesystemRateLimitDriver() {
+    if (!FilesystemRateLimitDriverClass) {
+        // eslint-disable-next-line @typescript-eslint/no-var-requires
+        const { FilesystemRateLimitDriver } = require('./drivers/filesystem.js');
+        FilesystemRateLimitDriverClass = FilesystemRateLimitDriver;
+    }
+    return FilesystemRateLimitDriverClass;
+}
+function loadRedisRateLimitDriver() {
+    if (!RedisRateLimitDriverClass) {
+        // eslint-disable-next-line @typescript-eslint/no-var-requires
+        const { RedisRateLimitDriver } = require('./drivers/redis.js');
+        RedisRateLimitDriverClass = RedisRateLimitDriver;
+    }
+    return RedisRateLimitDriverClass;
+}
 export function createDriver(type, options) {
     switch (type) {
         case 'memory':
-            return new MemoryRateLimitDriver(options);
+            return new (loadMemoryRateLimitDriver())(options);
         case 'filesystem':
-            return new FilesystemRateLimitDriver(options);
+            return new (loadFilesystemRateLimitDriver())(options);
         case 'redis':
-            return new RedisRateLimitDriver(options);
+            return new (loadRedisRateLimitDriver())(options);
         default:
             throw new Error(`Unknown rate limit driver type: ${type}`);
     }

package/dist/rate-limit/factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../src/rate-limit/factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAKzD,MAAM,UAAU,YAAY,CAC1B,IAAyB,EACzB,OAAuG;IAEvG,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,IAAI,qBAAqB,CAAC,OAAuC,CAAC,CAAA;QAC3E,KAAK,YAAY;YACf,OAAO,IAAI,yBAAyB,CAAC,OAA2C,CAAC,CAAA;QACnF,KAAK,OAAO;YACV,OAAO,IAAI,oBAAoB,CAAC,OAAsC,CAAC,CAAA;QACzE;YACE,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAA;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAA6B;IAClE,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QAC/C,KAAK,YAAY;YACf,OAAO,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACnD,KAAK,OAAO;YACV,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QAC9C;YACE,MAAM,IAAI,KAAK,CAAC,8BAA+B,MAA6B,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1F,CAAC;AACH,CAAC"}
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../src/rate-limit/factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,IAAI,0BAA0B,GAAsE,IAAI,CAAA;AACxG,IAAI,8BAA8B,GAEvB,IAAI,CAAA;AACf,IAAI,yBAAyB,GAAoE,IAAI,CAAA;AAErG,SAAS,yBAAyB;IAChC,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAChC,8DAA8D;QAC9D,MAAM,EAAE,qBAAqB,EAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;QAChE,0BAA0B,GAAG,qBAAqB,CAAA;IACpD,CAAC;IAED,OAAO,0BAAwF,CAAA;AACjG,CAAC;AAED,SAAS,6BAA6B;IACpC,IAAI,CAAC,8BAA8B,EAAE,CAAC;QACpC,8DAA8D;QAC9D,MAAM,EAAE,yBAAyB,EAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAA;QACxE,8BAA8B,GAAG,yBAAyB,CAAA;IAC5D,CAAC;IAED,OAAO,8BAAoG,CAAA;AAC7G,CAAC;AAED,SAAS,wBAAwB;IAC/B,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC/B,8DAA8D;QAC9D,MAAM,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAC9D,yBAAyB,GAAG,oBAAoB,CAAA;IAClD,CAAC;IAED,OAAO,yBAAqF,CAAA;AAC9F,CAAC;AAKD,MAAM,UAAU,YAAY,CAC1B,IAAyB,EACzB,OAAuG;IAEvG,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,yBAAyB,EAAE,CAAC,CAAC,OAAuC,CAAC,CAAA;QACnF,KAAK,YAAY;YACf,OAAO,IAAI,CAAC,6BAA6B,EAAE,CAAC,CAAC,OAA2C,CAAC,CAAA;QAC3F,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,wBAAwB,EAAE,CAAC,CAAC,OAAsC,CAAC,CAAA;QACjF;YACE,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAA;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAA6B;IAClE,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QAC/C,KAAK,YAAY;YACf,OAAO,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACnD,KAAK,OAAO;YACV,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QAC9C;YACE,MAAM,IAAI,KAAK,CAAC,8BAA+B,MAA6B,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1F,CAAC;AACH,CAAC"}

package/dist/server/builder/config-preview.d.ts

@@ -0,0 +1,34 @@
+import type { FrontDoorTransport, ProtocolConfig, ProtocolPreviewConfig, ProtocolAliasMode, ServerConfigPreview } from '../types.js';
+interface ConfigSourceLogger {
+    info: (context: unknown, message: string) => void;
+    warn: (message: string) => void;
+}
+interface SinglePortConfigLike {
+    enabled: boolean;
+    protocolFusion: boolean;
+    sniffTimeoutMs: number;
+    sniffMaxBytes: number;
+    maxConcurrentDetections: number;
+    protocols?: readonly string[];
+    alpn?: string[];
+}
+type SourceType = ProtocolPreviewConfig['source'];
+export interface ServerConfigPreviewContext {
+    effectiveHost: string;
+    effectivePort: number;
+    frontDoorEnabled: boolean;
+    frontDoorHost: string;
+    frontDoorPort: number;
+    frontDoorProtocols: FrontDoorTransport[] | null;
+    protocolAliasMode: ProtocolAliasMode;
+    getSinglePortConfig: () => SinglePortConfigLike;
+    getSinglePortAliasMode: () => ProtocolAliasMode;
+    getSinglePortSource: () => SourceType;
+    protocols: ProtocolConfig;
+}
+export declare function logSinglePortConfig(context: Pick<ServerConfigPreviewContext, 'getSinglePortConfig'>, logger: Pick<ConfigSourceLogger, 'info'>): void;
+export declare function getConfigWarnings(context: ServerConfigPreviewContext): string[];
+export declare function emitConfigWarnings(context: ServerConfigPreviewContext, logger: Pick<ConfigSourceLogger, 'warn'>): void;
+export declare function buildServerConfigPreview(context: ServerConfigPreviewContext): ServerConfigPreview;
+export {};
+//# sourceMappingURL=config-preview.d.ts.map

package/dist/server/builder/config-preview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-preview.d.ts","sourceRoot":"","sources":["../../../src/server/builder/config-preview.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAEpI,UAAU,kBAAkB;IAC1B,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACjD,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAChC;AAED,UAAU,oBAAoB;IAC5B,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,EAAE,OAAO,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,KAAK,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;AAEjD,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,OAAO,CAAA;IACzB,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAA;IAC/C,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;IAC/C,sBAAsB,EAAE,MAAM,iBAAiB,CAAA;IAC/C,mBAAmB,EAAE,MAAM,UAAU,CAAA;IACrC,SAAS,EAAE,cAAc,CAAA;CAC1B;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,IAAI,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,EAChE,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,GACvC,IAAI,CAgBN;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,0BAA0B,GAAG,MAAM,EAAE,CAyB/E;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,0BAA0B,EACnC,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,GACvC,IAAI,CAIN;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,0BAA0B,GAAG,mBAAmB,CA2EjG"}