ratelimit-flex 1.0.0

package/dist/strategies/rate-limit-engine.js

@@ -0,0 +1,122 @@
+import { MemoryStore } from '../stores/memory-store.js';
+import { RateLimitStrategy } from '../types/index.js';
+/**
+ * Default key extractor: uses `req.ip`, then `socket.remoteAddress`, else `"unknown"`.
+ * Strings are returned as-is so you can pass a precomputed key.
+ */
+export function defaultKeyGenerator(req) {
+    if (typeof req === 'string') {
+        return req;
+    }
+    if (req !== null && typeof req === 'object') {
+        const r = req;
+        if (typeof r.ip === 'string' && r.ip.length > 0) {
+            return r.ip;
+        }
+        const socket = r.socket;
+        if (socket !== null && typeof socket === 'object' && 'remoteAddress' in socket) {
+            const addr = socket.remoteAddress;
+            if (typeof addr === 'string' && addr.length > 0) {
+                return addr;
+            }
+        }
+    }
+    return 'unknown';
+}
+function createDefaultMemoryStore(options) {
+    if (options.strategy === RateLimitStrategy.TOKEN_BUCKET) {
+        return new MemoryStore({
+            strategy: RateLimitStrategy.TOKEN_BUCKET,
+            tokensPerInterval: options.tokensPerInterval,
+            interval: options.interval,
+            bucketSize: options.bucketSize,
+        });
+    }
+    return new MemoryStore({
+        strategy: options.strategy ?? RateLimitStrategy.SLIDING_WINDOW,
+        windowMs: options.windowMs ?? 60000,
+        maxRequests: options.maxRequests ?? 100,
+    });
+}
+function resolveOptions(input) {
+    const store = input.store ?? createDefaultMemoryStore(input);
+    return { ...input, store };
+}
+/**
+ * Build a {@link RateLimitEngine} with optional in-memory store when `store` is omitted.
+ */
+export function createRateLimiter(options) {
+    return new RateLimitEngine(resolveOptions(options));
+}
+/**
+ * Orchestrates key extraction, store increments, header generation, and limit callbacks.
+ */
+export class RateLimitEngine {
+    constructor(options) {
+        this.options = options;
+    }
+    /**
+     * Applies rate limiting for an incoming request-like value.
+     * Uses {@link RateLimitOptionsBase.keyGenerator} (or {@link defaultKeyGenerator}) to derive the storage key.
+     */
+    async consume(req) {
+        const key = (this.options.keyGenerator ?? defaultKeyGenerator)(req);
+        return this.consumeWithKey(key, req);
+    }
+    /**
+     * Rate limit using a precomputed storage key (skips `keyGenerator`).
+     * Pass the same `req` for `onLimitReached` / `skip` callbacks when applicable.
+     */
+    async consumeWithKey(key, req = key) {
+        if (this.options.skip?.(req) === true) {
+            return this.buildPassthroughResult();
+        }
+        const result = await this.options.store.increment(key);
+        const headers = this.buildHeaders(result);
+        if (result.isBlocked && this.options.onLimitReached) {
+            await Promise.resolve(this.options.onLimitReached(req, result));
+        }
+        return { ...result, headers };
+    }
+    getLimit() {
+        if (this.options.strategy === RateLimitStrategy.TOKEN_BUCKET) {
+            return this.options.bucketSize;
+        }
+        return this.options.maxRequests ?? 100;
+    }
+    buildPassthroughResult() {
+        const limit = this.getLimit();
+        const resetTime = new Date(Date.now() + 60000);
+        const base = {
+            totalHits: 0,
+            remaining: limit,
+            resetTime,
+            isBlocked: false,
+        };
+        return {
+            ...base,
+            headers: this.composeHeaders(base),
+        };
+    }
+    buildHeaders(result) {
+        return this.composeHeaders(result);
+    }
+    composeHeaders(result) {
+        if (this.options.headers === false) {
+            return {};
+        }
+        const limit = this.getLimit();
+        const resetSec = Math.ceil(result.resetTime.getTime() / 1000);
+        const headers = {
+            'X-RateLimit-Limit': String(limit),
+            'X-RateLimit-Remaining': String(Math.max(0, result.remaining)),
+            'X-RateLimit-Reset': String(resetSec),
+        };
+        if (result.isBlocked) {
+            const retryAfterSec = Math.max(1, Math.ceil((result.resetTime.getTime() - Date.now()) / 1000));
+            headers['Retry-After'] = String(retryAfterSec);
+        }
+        return headers;
+    }
+}
+//# sourceMappingURL=rate-limit-engine.js.map

package/dist/strategies/rate-limit-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-engine.js","sourceRoot":"","sources":["../../src/strategies/rate-limit-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAQxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAYtD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,GAA8B,CAAC;QACzC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,CAAC,EAAE,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACxB,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,eAAe,IAAI,MAAM,EAAE,CAAC;YAC/E,MAAM,IAAI,GAAI,MAAqC,CAAC,aAAa,CAAC;YAClE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,wBAAwB,CAAC,OAA+B;IAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,iBAAiB,CAAC,YAAY,EAAE,CAAC;QACxD,OAAO,IAAI,WAAW,CAAC;YACrB,QAAQ,EAAE,iBAAiB,CAAC,YAAY;YACxC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,WAAW,CAAC;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC,cAAc;QAC9D,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAM;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG;KACxC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAA6B;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAsB,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA+B;IAC/D,OAAO,IAAI,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,eAAe;IAG1B,YAAY,OAAyB;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,GAAY;QACxB,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,GAAW,EAAE,MAAe,GAAG;QAClD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YACpD,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;IAChC,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,iBAAiB,CAAC,YAAY,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC;IACzC,CAAC;IAEO,sBAAsB;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAM,CAAC,CAAC;QAChD,MAAM,IAAI,GAAoB;YAC5B,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,KAAK;YAChB,SAAS;YACT,SAAS,EAAE,KAAK;SACjB,CAAC;QACF,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;SACnC,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAuB;QAC1C,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAEO,cAAc,CAAC,MAAuB;QAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACnC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9D,MAAM,OAAO,GAA2B;YACtC,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC;YAClC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9D,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC;SACtC,CAAC;QAEF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAC5B,CAAC,EACD,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAC5D,CAAC;YACF,OAAO,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/types/index.d.ts

@@ -0,0 +1,93 @@
+/** Shared types for rate limiting */
+/**
+ * Built-in rate limiting algorithms.
+ */
+export declare enum RateLimitStrategy {
+    SLIDING_WINDOW = "SLIDING_WINDOW",
+    TOKEN_BUCKET = "TOKEN_BUCKET",
+    FIXED_WINDOW = "FIXED_WINDOW"
+}
+/**
+ * Result of incrementing a counter in the backing store.
+ */
+export interface RateLimitResult {
+    totalHits: number;
+    remaining: number;
+    resetTime: Date;
+    isBlocked: boolean;
+}
+/**
+ * Pluggable persistence for rate limit state.
+ */
+export interface RateLimitStore {
+    increment(key: string): Promise<RateLimitResult>;
+    decrement(key: string): Promise<void>;
+    reset(key: string): Promise<void>;
+    shutdown(): Promise<void>;
+}
+/**
+ * Per-request rate limit snapshot (e.g. for headers or `req` augmentation).
+ */
+export interface RateLimitInfo {
+    limit: number;
+    current: number;
+    remaining: number;
+    resetTime: Date;
+}
+/**
+ * Options shared by all strategies.
+ */
+export interface RateLimitOptionsBase {
+    /**
+     * Function to extract a stable identifier for the client (e.g. IP).
+     * Default in implementations is typically `req.ip` when present.
+     */
+    keyGenerator?: (req: unknown) => string;
+    /** Invoked when the limit is exceeded. */
+    onLimitReached?: (req: unknown, result: RateLimitResult) => void | Promise<void>;
+    /** When true, failed responses do not count toward the limit. @default false */
+    skipFailedRequests?: boolean;
+    /** When true, successful responses do not count toward the limit. @default false */
+    skipSuccessfulRequests?: boolean;
+    /** When true, send `X-RateLimit-*` headers. @default true */
+    headers?: boolean;
+    /** HTTP status when blocked. @default 429 */
+    statusCode?: number;
+    /** Body or payload when blocked. @default "Too many requests" */
+    message?: string | object;
+    /** When true, rate limiting is skipped for this request. */
+    skip?: (req: unknown) => boolean;
+    /** Backing store for counters / bucket state. */
+    store: RateLimitStore;
+}
+/**
+ * Options for sliding-window and fixed-window strategies.
+ * @default strategy SLIDING_WINDOW, windowMs 60000, maxRequests 100
+ */
+export interface WindowRateLimitOptions extends RateLimitOptionsBase {
+    strategy?: RateLimitStrategy.SLIDING_WINDOW | RateLimitStrategy.FIXED_WINDOW;
+    /** Time window in milliseconds. @default 60000 */
+    windowMs?: number;
+    /** Max requests allowed per window. @default 100 */
+    maxRequests?: number;
+}
+/**
+ * Options when using {@link RateLimitStrategy.TOKEN_BUCKET}.
+ */
+export interface TokenBucketRateLimitOptions extends RateLimitOptionsBase {
+    strategy: RateLimitStrategy.TOKEN_BUCKET;
+    /** Tokens added per {@link TokenBucketRateLimitOptions.interval}. */
+    tokensPerInterval: number;
+    /** Interval length in milliseconds. */
+    interval: number;
+    /** Maximum tokens (burst capacity). */
+    bucketSize: number;
+}
+/**
+ * Configuration for the rate limiter.
+ *
+ * Use {@link WindowRateLimitOptions} for sliding/fixed window, or
+ * {@link TokenBucketRateLimitOptions} for token bucket (extra fields required).
+ */
+export type RateLimitOptions = WindowRateLimitOptions | TokenBucketRateLimitOptions;
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,qCAAqC;AAErC;;GAEG;AACH,oBAAY,iBAAiB;IAC3B,cAAc,mBAAmB;IACjC,YAAY,iBAAiB;IAC7B,YAAY,iBAAiB;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACjD,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;IAExC,0CAA0C;IAC1C,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjF,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,oFAAoF;IACpF,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAEjC,6DAA6D;IAC7D,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAE1B,4DAA4D;IAC5D,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC;IAEjC,iDAAiD;IACjD,KAAK,EAAE,cAAc,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAuB,SAAQ,oBAAoB;IAClE,QAAQ,CAAC,EAAE,iBAAiB,CAAC,cAAc,GAAG,iBAAiB,CAAC,YAAY,CAAC;IAE7E,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA4B,SAAQ,oBAAoB;IACvE,QAAQ,EAAE,iBAAiB,CAAC,YAAY,CAAC;IAEzC,qEAAqE;IACrE,iBAAiB,EAAE,MAAM,CAAC;IAE1B,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IAEjB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,sBAAsB,GAAG,2BAA2B,CAAC"}

package/dist/types/index.js

@@ -0,0 +1,11 @@
+/** Shared types for rate limiting */
+/**
+ * Built-in rate limiting algorithms.
+ */
+export var RateLimitStrategy;
+(function (RateLimitStrategy) {
+    RateLimitStrategy["SLIDING_WINDOW"] = "SLIDING_WINDOW";
+    RateLimitStrategy["TOKEN_BUCKET"] = "TOKEN_BUCKET";
+    RateLimitStrategy["FIXED_WINDOW"] = "FIXED_WINDOW";
+})(RateLimitStrategy || (RateLimitStrategy = {}));
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,qCAAqC;AAErC;;GAEG;AACH,MAAM,CAAN,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,kDAA6B,CAAA;AAC/B,CAAC,EAJW,iBAAiB,KAAjB,iBAAiB,QAI5B"}

package/dist/utils/index.d.ts

@@ -0,0 +1,3 @@
+/** Internal utilities */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,yBAAyB;AAEzB,OAAO,EAAE,CAAC"}

package/dist/utils/index.js

@@ -0,0 +1,3 @@
+/** Internal utilities */
+export {};
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,yBAAyB"}

package/package.json

@@ -0,0 +1,90 @@
+{
+  "name": "ratelimit-flex",
+  "version": "1.0.0",
+  "description": "Flexible rate limiting for Node.js (Express, Fastify, sliding window, token bucket)",
+  "license": "MIT",
+  "keywords": [
+    "rate-limiter",
+    "express",
+    "fastify",
+    "sliding-window",
+    "token-bucket",
+    "middleware",
+    "rate-limiting"
+  ],
+  "author": "",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/cjs/index.d.ts",
+        "default": "./dist/cjs/index.js"
+      },
+      "default": "./dist/index.js"
+    }
+  },
+  "peerDependencies": {
+    "@types/express": "*",
+    "express": "^4.18.0 || ^5.0.0",
+    "fastify": "^4.28.0 || ^5.0.0",
+    "fastify-plugin": "^4.5.1 || ^5.0.0",
+    "ioredis": "^5.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@types/express": {
+      "optional": true
+    },
+    "express": {
+      "optional": true
+    },
+    "fastify": {
+      "optional": true
+    },
+    "fastify-plugin": {
+      "optional": true
+    },
+    "ioredis": {
+      "optional": true
+    }
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json && tsc -p tsconfig.cjs.json && echo '{\"type\":\"commonjs\"}' > dist/cjs/package.json",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "prepublishOnly": "npm run lint && npm run test && npm run build"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/express": "^5.0.0",
+    "@types/node": "^25.5.0",
+    "@types/supertest": "^7.2.0",
+    "@vitest/coverage-v8": "^4.1.2",
+    "eslint": "^10.1.0",
+    "express": "^5.2.1",
+    "fastify": "^5.8.4",
+    "fastify-plugin": "^5.0.0",
+    "prettier": "^3.8.1",
+    "supertest": "^7.2.2",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.57.2",
+    "vitest": "^4.1.2"
+  }
+}