raffel 1.0.6 → 1.0.7

package/dist/ui/middleware/types.d.ts

@@ -0,0 +1,396 @@
+/**
+ * Middleware Types
+ *
+ * Configuration types for all Raffel middleware.
+ */
+import type { Envelope, Context } from '../types/index.js';
+import type { RateLimitDriver, RateLimitDriverConfig, RateLimitDriverType } from '../rate-limit/types.js';
+/**
+ * Rate limit rule for path-based configuration
+ */
+export interface RateLimitRule {
+    /** Rule identifier */
+    id: string;
+    /** Glob pattern to match (e.g., 'admin.*', 'users.**') */
+    pattern: string;
+    /** Window size in milliseconds */
+    windowMs?: number;
+    /** Maximum requests per window */
+    maxRequests?: number;
+    /** Key type: 'ip', 'user', 'apikey', or custom */
+    key?: 'ip' | 'user' | 'apikey' | string;
+    /** Custom key generator */
+    keyGenerator?: (envelope: Envelope, ctx: Context) => string;
+}
+/**
+ * Rate limit configuration
+ */
+export interface RateLimitConfig {
+    /** Window size in milliseconds (default: 60000) */
+    windowMs?: number;
+    /** Maximum requests per window (default: 100) */
+    maxRequests?: number;
+    /** Maximum unique keys to track (default: 10000) */
+    maxUniqueKeys?: number;
+    /** Skip successful requests (useful for auth) */
+    skipSuccessfulRequests?: boolean;
+    /** Custom key generator */
+    keyGenerator?: (envelope: Envelope, ctx: Context) => string;
+    /** Rate limit driver configuration */
+    driver?: RateLimitDriverConfig | RateLimitDriverType | RateLimitDriver;
+    /** Path-specific rules */
+    rules?: RateLimitRule[];
+}
+/**
+ * Rate limit info returned when limit is exceeded
+ */
+export interface RateLimitInfo {
+    /** Limit for the window */
+    limit: number;
+    /** Remaining requests */
+    remaining: number;
+    /** Reset timestamp (ms since epoch) */
+    resetAt: number;
+    /** Seconds until reset */
+    retryAfter: number;
+}
+/**
+ * Request ID configuration
+ */
+export interface RequestIdConfig {
+    /** Custom ID generator (default: nanoid) */
+    generator?: () => string;
+    /** Whether to propagate from incoming metadata (default: true) */
+    propagate?: boolean;
+    /** Metadata key to read/write (default: 'x-request-id') */
+    metadataKey?: string;
+}
+/**
+ * Log level
+ */
+export type LogLevel = 'trace' | 'debug' | 'info' | 'warn' | 'error' | 'fatal';
+/**
+ * Logging filter context
+ */
+export interface LogFilterContext {
+    envelope: Envelope;
+    ctx: Context;
+    duration: number;
+    error?: Error;
+}
+/**
+ * Logging configuration
+ */
+export interface LoggingConfig {
+    /** Minimum log level (default: 'info') */
+    level?: LogLevel;
+    /** Log format: 'json' or 'pretty' (default: 'pretty' in dev) */
+    format?: 'json' | 'pretty';
+    /** Include request payload in logs (default: false) */
+    includePayload?: boolean;
+    /** Include response payload in logs (default: false) */
+    includeResponse?: boolean;
+    /**
+     * Include request metadata in logs (default: false)
+     * Sensitive headers are automatically redacted
+     */
+    includeMetadata?: boolean;
+    /**
+     * Headers to redact when logging metadata (case-insensitive)
+     * Default: authorization, cookie, set-cookie, x-api-key, x-auth-token,
+     *          x-access-token, x-refresh-token, x-csrf-token, x-xsrf-token,
+     *          proxy-authorization, www-authenticate
+     */
+    sensitiveHeaders?: string[];
+    /** Filter function to skip logging */
+    filter?: (ctx: LogFilterContext) => boolean;
+    /** Procedure patterns to exclude (e.g., ['health.*']) */
+    excludeProcedures?: string[];
+    /** Custom logger instance */
+    logger?: {
+        trace: (obj: object, msg?: string) => void;
+        debug: (obj: object, msg?: string) => void;
+        info: (obj: object, msg?: string) => void;
+        warn: (obj: object, msg?: string) => void;
+        error: (obj: object, msg?: string) => void;
+    };
+}
+/**
+ * Timeout configuration
+ */
+export interface TimeoutConfig {
+    /** Default timeout in milliseconds (default: 30000) */
+    defaultMs?: number;
+    /** Per-procedure timeouts */
+    procedures?: Record<string, number>;
+    /** Pattern-based timeouts (e.g., { 'reports.*': 60000 }) */
+    patterns?: Record<string, number>;
+}
+/**
+ * Backoff strategy for retry delays
+ *
+ * - `linear`: delay = baseDelay * attempt (100, 200, 300...)
+ * - `exponential`: delay = baseDelay * 2^(attempt-1) (100, 200, 400...)
+ * - `decorrelated`: AWS-style jitter, random(baseDelay, prevDelay * 3)
+ */
+export type BackoffStrategy = 'linear' | 'exponential' | 'decorrelated';
+/**
+ * Retry event context passed to onRetry hook
+ */
+export interface RetryEventContext {
+    /** Current attempt number (1-based) */
+    attempt: number;
+    /** Total max attempts configured */
+    maxAttempts: number;
+    /** The error that triggered the retry */
+    error: Error;
+    /** Delay before next attempt (ms) */
+    delayMs: number;
+    /** Procedure being retried */
+    procedure: string;
+    /** Request ID if available */
+    requestId?: string;
+}
+/**
+ * Retry configuration
+ */
+export interface RetryConfig {
+    /** Maximum retry attempts (default: 3) */
+    maxAttempts?: number;
+    /** Initial delay in milliseconds (default: 100) */
+    initialDelayMs?: number;
+    /** Maximum delay in milliseconds (default: 10000) */
+    maxDelayMs?: number;
+    /** Backoff multiplier for exponential/linear (default: 2) */
+    backoffMultiplier?: number;
+    /**
+     * Backoff strategy (default: 'exponential')
+     *
+     * - `linear`: delay grows linearly
+     * - `exponential`: delay doubles each attempt
+     * - `decorrelated`: AWS-style randomized jitter (best for preventing thundering herd)
+     */
+    backoffStrategy?: BackoffStrategy;
+    /** Add jitter to delays - ±25% randomness (default: true) */
+    jitter?: boolean;
+    /** Error codes that should trigger retry */
+    retryableCodes?: string[];
+    /** Custom retry predicate */
+    shouldRetry?: (error: Error, attempt: number) => boolean;
+    /**
+     * Respect Retry-After header/field from errors (default: true)
+     * When enabled, uses the server-suggested delay if present
+     */
+    respectRetryAfter?: boolean;
+    /**
+     * Callback invoked before each retry attempt
+     * Useful for logging, metrics, or custom delay logic
+     */
+    onRetry?: (ctx: RetryEventContext) => void | Promise<void>;
+}
+/**
+ * Circuit breaker state
+ */
+export type CircuitState = 'closed' | 'open' | 'half-open';
+/**
+ * Circuit breaker configuration
+ */
+export interface CircuitBreakerConfig {
+    /** Failure threshold to open circuit (default: 5) */
+    failureThreshold?: number;
+    /** Success threshold to close circuit (default: 3) */
+    successThreshold?: number;
+    /** Time in ms before attempting recovery (default: 30000) */
+    resetTimeoutMs?: number;
+    /** Time window for failure counting (default: 60000) */
+    windowMs?: number;
+    /** Error codes that count as failures */
+    failureCodes?: string[];
+    /** Callback when circuit state changes */
+    onStateChange?: (state: CircuitState, procedure: string) => void;
+}
+/**
+ * Cache configuration
+ */
+export interface CacheConfig {
+    /** Default TTL in milliseconds (default: 60000) */
+    ttlMs?: number;
+    /** Maximum cache entries (default: 1000) */
+    maxEntries?: number;
+    /** Procedures to cache (patterns supported) */
+    procedures?: string[];
+    /** Custom cache key generator */
+    keyGenerator?: (envelope: Envelope) => string;
+    /** Stale-while-revalidate support */
+    staleWhileRevalidate?: boolean;
+    /** Custom cache store */
+    store?: CacheStore;
+}
+/**
+ * Cache store interface
+ */
+export interface CacheStore {
+    get(key: string): Promise<{
+        value: unknown;
+        expiresAt: number;
+    } | undefined>;
+    set(key: string, value: unknown, ttlMs: number): Promise<void>;
+    delete(key: string): Promise<void>;
+    clear(): Promise<void>;
+}
+/**
+ * HSTS (HTTP Strict Transport Security) configuration
+ */
+export interface HstsConfig {
+    /** Max age in seconds (default: 31536000 = 1 year) */
+    maxAge?: number;
+    /** Include subdomains (default: true) */
+    includeSubDomains?: boolean;
+    /** Enable preload (default: false) */
+    preload?: boolean;
+}
+/**
+ * Content Security Policy directive
+ */
+export type CspDirective = 'default-src' | 'script-src' | 'style-src' | 'img-src' | 'font-src' | 'connect-src' | 'frame-src' | 'object-src' | 'media-src' | 'worker-src' | 'child-src' | 'form-action' | 'frame-ancestors' | 'base-uri' | 'report-uri' | 'report-to' | 'upgrade-insecure-requests' | 'block-all-mixed-content';
+/**
+ * Content Security Policy configuration
+ */
+export interface CspConfig {
+    /** Enable CSP (default: true) */
+    enabled?: boolean;
+    /** CSP directives */
+    directives?: Partial<Record<CspDirective, string | string[]>>;
+    /** Report-only mode (default: false) */
+    reportOnly?: boolean;
+    /** Report URI for violations */
+    reportUri?: string;
+}
+/**
+ * Permissions Policy configuration
+ */
+export interface PermissionsPolicyConfig {
+    /** Feature policies (e.g., { 'geolocation': [], 'camera': ['self'] }) */
+    features?: Record<string, string[]>;
+}
+/**
+ * Security headers configuration
+ */
+export interface SecurityConfig {
+    /** X-Content-Type-Options: nosniff (default: true) */
+    noSniff?: boolean;
+    /** X-Frame-Options (default: 'DENY') */
+    frameOptions?: 'DENY' | 'SAMEORIGIN' | false;
+    /** HSTS configuration */
+    hsts?: HstsConfig | false;
+    /** Referrer-Policy (default: 'strict-origin-when-cross-origin') */
+    referrerPolicy?: string | false;
+    /** X-DNS-Prefetch-Control (default: 'off') */
+    dnsPrefetchControl?: boolean;
+    /** X-XSS-Protection (default: '1; mode=block') */
+    xssProtection?: boolean | false;
+    /** Content Security Policy */
+    csp?: CspConfig | false;
+    /** Permissions Policy */
+    permissionsPolicy?: PermissionsPolicyConfig | false;
+    /** X-Permitted-Cross-Domain-Policies (default: 'none') */
+    crossDomainPolicy?: 'none' | 'master-only' | 'by-content-type' | 'all' | false;
+}
+/**
+ * Compression encoding
+ */
+export type CompressionEncoding = 'gzip' | 'deflate' | 'br';
+/**
+ * Compression configuration
+ */
+export interface CompressionConfig {
+    /** Minimum size to compress in bytes (default: 1024) */
+    threshold?: number;
+    /** Preferred encoding order (default: ['br', 'gzip', 'deflate']) */
+    encodings?: CompressionEncoding[];
+    /** Content types to compress (default: text/*, application/json, etc.) */
+    contentTypes?: string[];
+    /** Compression level (1-9, default: 6) */
+    level?: number;
+}
+/**
+ * Enhanced CORS configuration
+ */
+export interface EnhancedCorsConfig {
+    /** Allowed origins (string, array, or function) */
+    origin?: string | string[] | ((origin: string) => boolean | string);
+    /** Allowed methods (default: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS']) */
+    methods?: string[];
+    /** Allowed headers */
+    allowedHeaders?: string[];
+    /** Exposed headers */
+    exposedHeaders?: string[];
+    /** Allow credentials (default: false) */
+    credentials?: boolean;
+    /** Preflight cache max age in seconds (default: 86400) */
+    maxAge?: number;
+    /** Handle OPTIONS requests (default: true) */
+    preflightContinue?: boolean;
+}
+/**
+ * Bulkhead configuration for concurrency limiting
+ */
+export interface BulkheadConfig {
+    /** Maximum concurrent executions (required) */
+    concurrency: number;
+    /** Maximum queue size. 0 = no queue, reject immediately (default: 0) */
+    maxQueueSize?: number;
+    /** Queue timeout in ms. 0 = no timeout (default: 0) */
+    queueTimeout?: number;
+    /** Callback when a request is rejected */
+    onReject?: (procedure: string) => void;
+    /** Callback when a request is queued */
+    onQueued?: () => void;
+    /** Callback when a request is dequeued */
+    onDequeued?: () => void;
+}
+/**
+ * Fallback configuration for graceful degradation
+ */
+export interface FallbackConfig<TOutput = unknown> {
+    /** Static fallback response */
+    response?: TOutput;
+    /** Dynamic fallback handler */
+    handler?: (ctx: Context, error: Error) => TOutput | Promise<TOutput>;
+    /** Condition to apply fallback (default: always) */
+    when?: (error: Error) => boolean;
+}
+/**
+ * Response envelope configuration
+ *
+ * Wraps all responses in a standardized format:
+ * - Success: { success: true, data: ..., meta: { ... } }
+ * - Error: { success: false, error: { message, code, details }, meta: { ... } }
+ */
+export interface EnvelopeConfig {
+    /** Include requestId in meta (default: true) */
+    includeRequestId?: boolean;
+    /** Include duration in meta (default: true) */
+    includeDuration?: boolean;
+    /** Include timestamp in meta (default: true) */
+    includeTimestamp?: boolean;
+    /** Include error details in error response (default: true) */
+    includeErrorDetails?: boolean;
+    /** Include stack trace in error response (default: true in development) */
+    includeErrorStack?: boolean;
+    /**
+     * Custom error code mapper
+     * Extracts an error code string from an error object.
+     * Default behavior checks error.code, error.status, and error.name.
+     */
+    errorCodeMapper?: (error: Error) => string;
+}
+/**
+ * Security preset level
+ */
+export type SecurityPreset = 'strict' | 'recommended' | 'relaxed';
+/**
+ * Performance preset level
+ */
+export type PerformancePreset = 'aggressive' | 'balanced' | 'conservative';
+//# sourceMappingURL=types.d.ts.map

package/dist/ui/middleware/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/middleware/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAMzG;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAA;IAEV,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAA;IAEf,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,kDAAkD;IAClD,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAA;IAEvC,2BAA2B;IAC3B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,KAAK,MAAM,CAAA;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB,iDAAiD;IACjD,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAEhC,2BAA2B;IAC3B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,KAAK,MAAM,CAAA;IAE3D,sCAAsC;IACtC,MAAM,CAAC,EAAE,qBAAqB,GAAG,mBAAmB,GAAG,eAAe,CAAA;IAEtE,0BAA0B;IAC1B,KAAK,CAAC,EAAE,aAAa,EAAE,CAAA;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAA;IAEb,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAA;IAEjB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAA;IAEf,0BAA0B;IAC1B,UAAU,EAAE,MAAM,CAAA;CACnB;AAMD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,MAAM,CAAA;IAExB,kEAAkE;IAClE,SAAS,CAAC,EAAE,OAAO,CAAA;IAEnB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAMD;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAA;AAE9E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,QAAQ,CAAA;IAClB,GAAG,EAAE,OAAO,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,KAAK,CAAA;CACd;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,0CAA0C;IAC1C,KAAK,CAAC,EAAE,QAAQ,CAAA;IAEhB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAA;IAE1B,uDAAuD;IACvD,cAAc,CAAC,EAAE,OAAO,CAAA;IAExB,wDAAwD;IACxD,eAAe,CAAC,EAAE,OAAO,CAAA;IAEzB;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IAEzB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE3B,sCAAsC;IACtC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAA;IAE3C,yDAAyD;IACzD,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE5B,6BAA6B;IAC7B,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QAC1C,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QAC1C,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QACzC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QACzC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;KAC3C,CAAA;CACF;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEnC,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAMD;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,aAAa,GAAG,cAAc,CAAA;AAEvE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAA;IACf,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,yCAAyC;IACzC,KAAK,EAAE,KAAK,CAAA;IACZ,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,6DAA6D;IAC7D,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAE1B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,eAAe,CAAA;IAEjC,6DAA6D;IAC7D,MAAM,CAAC,EAAE,OAAO,CAAA;IAEhB,4CAA4C;IAC5C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IAEzB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAA;IAExD;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAE3B;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3D;AAMD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAA;AAE1D;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAEzB,sDAAsD;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAEzB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IAEvB,0CAA0C;IAC1C,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAA;CACjE;AAMD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IAErB,iCAAiC;IACjC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,MAAM,CAAA;IAE7C,qCAAqC;IACrC,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAE9B,yBAAyB;IACzB,KAAK,CAAC,EAAE,UAAU,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAA;IAC5E,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAMD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf,yCAAyC;IACzC,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAE3B,sCAAsC;IACtC,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,YAAY,GACZ,WAAW,GACX,SAAS,GACT,UAAU,GACV,aAAa,GACb,WAAW,GACX,YAAY,GACZ,WAAW,GACX,YAAY,GACZ,WAAW,GACX,aAAa,GACb,iBAAiB,GACjB,UAAU,GACV,YAAY,GACZ,WAAW,GACX,2BAA2B,GAC3B,yBAAyB,CAAA;AAE7B;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAA;IAEjB,qBAAqB;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAA;IAE7D,wCAAwC;IACxC,UAAU,CAAC,EAAE,OAAO,CAAA;IAEpB,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,CAAA;IAEjB,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,KAAK,CAAA;IAE5C,yBAAyB;IACzB,IAAI,CAAC,EAAE,UAAU,GAAG,KAAK,CAAA;IAEzB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,GAAG,KAAK,CAAA;IAE/B,8CAA8C;IAC9C,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAE5B,kDAAkD;IAClD,aAAa,CAAC,EAAE,OAAO,GAAG,KAAK,CAAA;IAE/B,8BAA8B;IAC9B,GAAG,CAAC,EAAE,SAAS,GAAG,KAAK,CAAA;IAEvB,yBAAyB;IACzB,iBAAiB,CAAC,EAAE,uBAAuB,GAAG,KAAK,CAAA;IAEnD,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,iBAAiB,GAAG,KAAK,GAAG,KAAK,CAAA;CAC/E;AAMD;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;AAE3D;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,oEAAoE;IACpE,SAAS,CAAC,EAAE,mBAAmB,EAAE,CAAA;IAEjC,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IAEvB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAMD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,GAAG,MAAM,CAAC,CAAA;IAEnE,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAElB,sBAAsB;IACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IAEzB,sBAAsB;IACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IAEzB,yCAAyC;IACzC,WAAW,CAAC,EAAE,OAAO,CAAA;IAErB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf,8CAA8C;IAC9C,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IAEnB,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAA;IAEtC,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IAErB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,IAAI,CAAA;CACxB;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc,CAAC,OAAO,GAAG,OAAO;IAC/C,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAElB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEpE,oDAAoD;IACpD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAA;CACjC;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAE1B,+CAA+C;IAC/C,eAAe,CAAC,EAAE,OAAO,CAAA;IAEzB,gDAAgD;IAChD,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAE1B,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAE7B,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAE3B;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAA;CAC3C;AAMD;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,aAAa,GAAG,SAAS,CAAA;AAEjE;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,UAAU,GAAG,cAAc,CAAA"}

package/dist/ui/policy/runtime.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Runtime helpers for contract-bound policy metadata.
+ */
+import type { Interceptor } from '../types/index.js';
+import type { ContractPolicies } from '../types/policies.js';
+export declare function createPolicyInterceptors(policies?: ContractPolicies): Interceptor[];
+//# sourceMappingURL=runtime.d.ts.map

package/dist/ui/policy/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/policy/runtime.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAqB,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEvE,OAAO,KAAK,EAEV,gBAAgB,EAEjB,MAAM,sBAAsB,CAAA;AAgE7B,wBAAgB,wBAAwB,CACtC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,WAAW,EAAE,CA2Bf"}

package/dist/ui/rate-limit/drivers/filesystem.d.ts

@@ -0,0 +1,19 @@
+import type { RateLimitDriver, RateLimitRecord, FilesystemRateLimitDriverOptions } from '../types.js';
+export declare class FilesystemRateLimitDriver implements RateLimitDriver {
+    readonly name = "filesystem";
+    private readonly directory;
+    private readonly cleanupInterval;
+    private cleanupHandle;
+    constructor(options?: FilesystemRateLimitDriverOptions);
+    increment(key: string, windowMs: number): Promise<RateLimitRecord>;
+    get(key: string): Promise<RateLimitRecord | null>;
+    decrement(key: string): Promise<void>;
+    reset(key: string): Promise<void>;
+    clear(): Promise<void>;
+    shutdown(): Promise<void>;
+    private ensureDirectory;
+    private getFilePath;
+    private readRecord;
+    private cleanupExpired;
+}
+//# sourceMappingURL=filesystem.d.ts.map

package/dist/ui/rate-limit/drivers/filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../../../src/rate-limit/drivers/filesystem.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,gCAAgC,EACjC,MAAM,aAAa,CAAA;AAEpB,qBAAa,yBAA0B,YAAW,eAAe;IAC/D,QAAQ,CAAC,IAAI,gBAAe;IAE5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,aAAa,CAA8C;gBAEvD,OAAO,GAAE,gCAAqC;IAYpD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAelE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAcjD,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQrC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAYtB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAO/B,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,WAAW;YAKL,UAAU;YASV,cAAc;CAiB7B"}

package/dist/ui/rate-limit/drivers/memory.d.ts

@@ -0,0 +1,17 @@
+import type { RateLimitDriver, RateLimitRecord, MemoryRateLimitDriverOptions } from '../types.js';
+export declare class MemoryRateLimitDriver implements RateLimitDriver {
+    readonly name = "memory";
+    private readonly maxKeys;
+    private readonly cleanupInterval;
+    private readonly store;
+    private cleanupHandle;
+    constructor(options?: MemoryRateLimitDriverOptions);
+    increment(key: string, windowMs: number): Promise<RateLimitRecord>;
+    get(key: string): Promise<RateLimitRecord | null>;
+    decrement(key: string): Promise<void>;
+    reset(key: string): Promise<void>;
+    shutdown(): Promise<void>;
+    clear(): Promise<void>;
+    private cleanupExpired;
+}
+//# sourceMappingURL=memory.d.ts.map

package/dist/ui/rate-limit/drivers/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../../src/rate-limit/drivers/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAA;AAEjG,qBAAa,qBAAsB,YAAW,eAAe;IAC3D,QAAQ,CAAC,IAAI,YAAW;IAExB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,aAAa,CAA8C;gBAEvD,OAAO,GAAE,4BAAiC;IAUhD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAqBlE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAgBjD,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMrC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAOzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,OAAO,CAAC,cAAc;CAQvB"}

package/dist/ui/rate-limit/drivers/redis.d.ts

@@ -0,0 +1,14 @@
+import type { RateLimitDriver, RateLimitRecord, RedisRateLimitDriverOptions } from '../types.js';
+export declare class RedisRateLimitDriver implements RateLimitDriver {
+    readonly name = "redis";
+    private readonly client;
+    private readonly prefix;
+    constructor(options: RedisRateLimitDriverOptions);
+    increment(key: string, windowMs: number): Promise<RateLimitRecord>;
+    get(key: string): Promise<RateLimitRecord | null>;
+    decrement(key: string): Promise<void>;
+    reset(key: string): Promise<void>;
+    clear(): Promise<void>;
+    private getFullKey;
+}
+//# sourceMappingURL=redis.d.ts.map

package/dist/ui/rate-limit/drivers/redis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.d.ts","sourceRoot":"","sources":["../../../../src/rate-limit/drivers/redis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAA;AAEhG,qBAAa,oBAAqB,YAAW,eAAe;IAC1D,QAAQ,CAAC,IAAI,WAAU;IAEvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;gBAEnB,OAAO,EAAE,2BAA2B;IAS1C,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAsBlE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA+BjD,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMrC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,OAAO,CAAC,UAAU;CAGnB"}

package/dist/ui/rate-limit/drivers/s3db.d.ts

@@ -0,0 +1,31 @@
+/**
+ * S3DB-like Rate Limit Driver
+ *
+ * Stores rate limit counters in a key/value S3DB-like resource.
+ * Useful for serverless/object storage scenarios where Redis/memory
+ * is not a good fit.
+ *
+ * Works with any resource adapter that exposes:
+ * - get(id)
+ * - upsert(id, data)
+ * - delete(id)
+ */
+import type { RateLimitDriver, RateLimitRecord, S3dbRateLimitDriverOptions } from '../types.js';
+export declare class S3dbRateLimitDriver implements RateLimitDriver {
+    readonly name = "s3db";
+    private readonly resource;
+    private readonly namespace;
+    private readonly countField;
+    private readonly resetAtField;
+    constructor(options: S3dbRateLimitDriverOptions);
+    increment(key: string, windowMs: number): Promise<RateLimitRecord>;
+    get(key: string): Promise<RateLimitRecord | null>;
+    decrement(key: string): Promise<void>;
+    reset(key: string): Promise<void>;
+    clear(): Promise<void>;
+    shutdown(): Promise<void>;
+    private makeKey;
+    private parseRateLimitRecord;
+    private writeRecord;
+}
+//# sourceMappingURL=s3db.d.ts.map

package/dist/ui/rate-limit/drivers/s3db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3db.d.ts","sourceRoot":"","sources":["../../../../src/rate-limit/drivers/s3db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AAM/F,qBAAa,mBAAoB,YAAW,eAAe;IACzD,QAAQ,CAAC,IAAI,UAAS;IAEtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;gBAEzB,OAAO,EAAE,0BAA0B;IAczC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAwBlE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAkBjD,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAYtB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAM/B,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,oBAAoB;YAoBd,WAAW;CAM1B"}

package/dist/ui/rate-limit/factory.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Rate Limit Driver Factory
+ *
+ * Creates rate-limit drivers with a cache-like configuration.
+ */
+import type { RateLimitDriver, RateLimitDriverConfig, MemoryRateLimitDriverOptions, FilesystemRateLimitDriverOptions, RedisRateLimitDriverOptions, S3dbRateLimitDriverOptions } from './types.js';
+export declare function createDriver(type: 'memory', options?: MemoryRateLimitDriverOptions): RateLimitDriver;
+export declare function createDriver(type: 'filesystem', options?: FilesystemRateLimitDriverOptions): RateLimitDriver;
+export declare function createDriver(type: 'redis', options: RedisRateLimitDriverOptions): RateLimitDriver;
+export declare function createDriver(type: 's3db', options: S3dbRateLimitDriverOptions): RateLimitDriver;
+export declare function createDriverFromConfig(config: RateLimitDriverConfig): RateLimitDriver;
+//# sourceMappingURL=factory.d.ts.map

package/dist/ui/rate-limit/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/rate-limit/factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,eAAe,EAEf,qBAAqB,EACrB,4BAA4B,EAC5B,gCAAgC,EAChC,2BAA2B,EAC3B,0BAA0B,EAC3B,MAAM,YAAY,CAAA;AAMnB,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,4BAA4B,GAAG,eAAe,CAAA;AACrG,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,gCAAgC,GAAG,eAAe,CAAA;AAC7G,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,GAAG,eAAe,CAAA;AAClG,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,GAAG,eAAe,CAAA;AAsBhG,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAarF"}

package/dist/ui/rate-limit/types.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Rate Limit Driver Types
+ *
+ * Driver abstraction for pluggable rate limiting backends.
+ */
+export interface RateLimitRecord {
+    count: number;
+    resetAt: number;
+}
+export interface RateLimitDriver {
+    readonly name: string;
+    increment(key: string, windowMs: number): Promise<RateLimitRecord>;
+    get(key: string): Promise<RateLimitRecord | null>;
+    decrement?(key: string): Promise<void>;
+    reset?(key: string): Promise<void>;
+    clear?(): Promise<void>;
+    shutdown?(): Promise<void>;
+}
+export interface MemoryRateLimitDriverOptions {
+    /** Maximum number of keys to keep (default: 10000) */
+    maxKeys?: number;
+    /** Cleanup interval in ms (default: 60000) */
+    cleanupInterval?: number;
+}
+export interface FilesystemRateLimitDriverOptions {
+    /** Directory for storing rate limit state (default: '.rate-limit') */
+    directory?: string;
+    /** Cleanup interval in ms (default: 300000) */
+    cleanupInterval?: number;
+}
+export interface RedisRateLimitDriverOptions {
+    client: RedisLikeClient;
+    prefix?: string;
+}
+export interface RedisLikeClient {
+    get(key: string): Promise<string | number | null>;
+    incr(key: string): Promise<number>;
+    decr?(key: string): Promise<number>;
+    pexpire?(key: string, ttlMs: number): Promise<number>;
+    pttl?(key: string): Promise<number>;
+    del?(...keys: string[]): Promise<number>;
+    keys?(pattern: string): Promise<string[]>;
+}
+export interface S3dbRateLimitResource {
+    /** Read a record by key */
+    get(key: string): Promise<Record<string, unknown> | null | undefined>;
+    /** Write/rewrite a record by key */
+    upsert(key: string, data: Record<string, unknown>): Promise<unknown>;
+    /** Delete a key */
+    delete(key: string): Promise<unknown>;
+    /** Optional namespace-based key listing for cleanup */
+    listKeys?(namespace: string): Promise<string[]>;
+    keys?(namespace: string): Promise<string[]>;
+    /** Optional connection shutdown */
+    close?(): Promise<void>;
+}
+export interface S3dbRateLimitDriverOptions {
+    /** s3db-like resource instance */
+    resource: S3dbRateLimitResource;
+    /** Namespace used to isolate rate-limit keys */
+    namespace?: string;
+    /** Field for counter value */
+    countField?: string;
+    /** Field for window reset timestamp (ms since epoch) */
+    resetAtField?: string;
+}
+export type RateLimitDriverType = 'memory' | 'filesystem' | 'redis' | 's3db';
+export type RateLimitDriverConfig = {
+    driver: 'memory';
+    options?: MemoryRateLimitDriverOptions;
+} | {
+    driver: 'filesystem';
+    options?: FilesystemRateLimitDriverOptions;
+} | {
+    driver: 'redis';
+    options: RedisRateLimitDriverOptions;
+} | {
+    driver: 's3db';
+    options: S3dbRateLimitDriverOptions;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/ui/rate-limit/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/rate-limit/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAClE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAA;IACjD,SAAS,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,KAAK,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B;AAED,MAAM,WAAW,4BAA4B;IAC3C,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,8CAA8C;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,gCAAgC;IAC/C,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,+CAA+C;IAC/C,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,eAAe,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,CAAA;IACjD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAClC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACrD,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACxC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CAC1C;AAED,MAAM,WAAW,qBAAqB;IACpC,2BAA2B;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAErE,oCAAoC;IACpC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEpE,mBAAmB;IACnB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAErC,uDAAuD;IACvD,QAAQ,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/C,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAE3C,mCAAmC;IACnC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,kCAAkC;IAClC,QAAQ,EAAE,qBAAqB,CAAA;IAE/B,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAA;AAE5E,MAAM,MAAM,qBAAqB,GAC7B;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,CAAC,EAAE,4BAA4B,CAAA;CAAE,GAC5D;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,CAAC,EAAE,gCAAgC,CAAA;CAAE,GACpE;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,2BAA2B,CAAA;CAAE,GACzD;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,0BAA0B,CAAA;CAAE,CAAA"}

package/dist/ui/server/fs-routes/middleware-processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware-processor.d.ts","sourceRoot":"","sources":["../../../../src/server/fs-routes/middleware-processor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAY,MAAM,sBAAsB,CAAA;AAG1E,OAAO,KAAK,EACV,WAAW,EAEX,UAAU,EAEX,MAAM,YAAY,CAAA;AAInB;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,WAAW,GAAG,WAAW,EAAE,CA6BzE;AAuMD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,CAAC,EAAE,UAAU,EACvB,WAAW,GAAE,UAAU,GAAG,UAAU,GAAG,MAAe,GACrD,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CA2B/F"}
+{"version":3,"file":"middleware-processor.d.ts","sourceRoot":"","sources":["../../../../src/server/fs-routes/middleware-processor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAY,MAAM,sBAAsB,CAAA;AAI1E,OAAO,KAAK,EACV,WAAW,EAEX,UAAU,EAEX,MAAM,YAAY,CAAA;AAInB;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,WAAW,GAAG,WAAW,EAAE,CA6BzE;AAuMD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,CAAC,EAAE,UAAU,EACvB,WAAW,GAAE,UAAU,GAAG,UAAU,GAAG,MAAe,GACrD,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CA2B/F"}