stratal 0.0.22 → 0.0.23

package/dist/queue.module-nddvxzCB.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.module-nddvxzCB.mjs","names":[],"sources":["../src/queue/queue.error.ts","../src/queue/queue-manager.ts","../src/queue/consumer-registry.ts","../src/queue/queue-sender.ts","../src/queue/queue-registry.ts","../src/queue/queue-store.ts","../src/queue/providers/cloudflare-queue.provider.ts","../src/queue/providers/sync-queue.provider.ts","../src/queue/services/queue-provider-factory.ts","../src/queue/queue.module.ts"],"sourcesContent":["import { ApplicationError } from '../errors'\n\nexport class QueueError extends ApplicationError {}\n","import { inject } from '../di'\nimport { getContainer } from '../di/container-storage'\nimport { Transient } from '../di/decorators'\nimport { DI_TOKENS } from '../di/tokens'\nimport { LOGGER_TOKENS, type LoggerService } from '../logger'\nimport { type ConsumerRegistry } from './consumer-registry'\nimport type { FailedJob } from './failed-job'\nimport type { IQueueConsumer, QueueMessage } from './queue-consumer'\nimport { QueueError } from './queue.error'\nimport type { QueueModuleOptions } from './queue.module'\nimport type { QueueStore } from './queue-store'\nimport { QUEUE_TOKENS } from './queue.tokens'\n\nconst DEFAULT_MAX_RETRIES = 3\n\n@Transient(DI_TOKENS.Queue)\nexport class QueueManager {\n  private readonly maxRetries: number\n\n  constructor(\n    @inject(DI_TOKENS.ConsumerRegistry) private readonly registry: ConsumerRegistry,\n    @inject(LOGGER_TOKENS.LoggerService) private readonly logger: LoggerService,\n    @inject(QUEUE_TOKENS.QueueStore) private readonly store: QueueStore,\n    @inject(QUEUE_TOKENS.QueueModuleOptions) options: QueueModuleOptions,\n  ) {\n    this.maxRetries = options.maxRetries ?? DEFAULT_MAX_RETRIES\n  }\n\n  async processBatch(queueName: string, batch: MessageBatch): Promise<void> {\n    for (const message of batch.messages) {\n      const queueMessage = message.body as QueueMessage\n      const idempotencyKey = queueMessage.metadata?.idempotencyKey ?? queueMessage.id\n\n      if (await this.store.isProcessed(idempotencyKey)) {\n        message.ack()\n        continue\n      }\n\n      // Resolve a fresh consumer instance per message from the active request\n      // scope (handleQueue runs processBatch inside runInRequestScope), so\n      // request-scoped consumer dependencies bind to this message's scope.\n      const container = getContainer()\n      const consumers = this.registry\n        .getConsumerClasses(queueMessage.type)\n        .map((ConsumerClass) => container.resolve<IQueueConsumer>(ConsumerClass))\n\n      const results = await Promise.allSettled(\n        consumers.map((consumer) => consumer.handle(queueMessage)),\n      )\n\n      let lastError: Error | undefined\n      let failedConsumer: string | undefined\n\n      for (let i = 0; i < results.length; i++) {\n        const result = results[i]\n        if (result.status === 'rejected') {\n          const consumer = consumers[i]\n          const errorInstance = result.reason instanceof Error\n            ? result.reason\n            : new Error(String(result.reason))\n\n          this.logger.error('Queue message processing failed', errorInstance, {\n            type: queueMessage.type,\n            queue: queueName,\n            messageId: queueMessage.id,\n            idempotencyKey,\n          })\n\n          if (consumer.onError) {\n            await consumer.onError(errorInstance, queueMessage)\n          }\n\n          lastError = errorInstance\n          failedConsumer = consumer.constructor.name\n        }\n      }\n\n      const failed = lastError !== undefined\n\n      if (failed) {\n        // `message.attempts` is 1-based (the first delivery is attempt 1), so a\n        // message is only out of retries once it has been delivered more than\n        // `maxRetries` times. `maxRetries: 3` therefore means 3 retries after the\n        // initial delivery (4 total attempts). This must be <= the consumer's\n        // `max_retries` in wrangler.jsonc, otherwise Cloudflare dead-letters the\n        // message before this branch ever runs and it never reaches the store.\n        if (message.attempts > this.maxRetries) {\n          // A KV failure (or a message dispatched outside Stratal, with no\n          // binding to retry through) while persisting the failed job must not\n          // abort the rest of the batch — log and ack so the message isn't\n          // redelivered forever.\n          try {\n            const binding = queueMessage.metadata?.binding\n            if (!binding) {\n              throw new QueueError(\n                `Queue message ${queueMessage.id} has no binding metadata and cannot be recorded for retry. ` +\n                  `Messages must be dispatched through a Stratal queue sender (@InjectQueue).`,\n              )\n            }\n\n            const failedJob: FailedJob = {\n              id: queueMessage.id,\n              queue: queueName,\n              binding,\n              type: queueMessage.type,\n              message: queueMessage,\n              error: {\n                name: lastError!.name,\n                message: lastError!.message,\n                stack: lastError!.stack,\n              },\n              consumer: failedConsumer!,\n              attempts: message.attempts,\n              failedAt: new Date().toISOString(),\n            }\n\n            await this.store.storeFailedJob(failedJob)\n          } catch (error) {\n            this.logger.error(\n              'Failed to persist failed queue job',\n              error instanceof Error ? error : new Error(String(error)),\n              { queue: queueName, messageId: queueMessage.id, type: queueMessage.type },\n            )\n          }\n          message.ack()\n        } else {\n          message.retry()\n        }\n      } else {\n        await this.store.markProcessed(idempotencyKey)\n        message.ack()\n      }\n    }\n  }\n}\n","import { Singleton } from '../di/decorators'\nimport { DI_TOKENS } from '../di/tokens'\nimport type { Constructor } from '../types'\nimport type { IQueueConsumer } from './queue-consumer'\n\n/** A registered consumer class together with the message types it handles. */\nexport interface ConsumerRegistration {\n  consumerClass: Constructor<IQueueConsumer>\n  messageTypes: string[]\n}\n\n/**\n * Consumer Registry\n *\n * Singleton service that holds all registered queue consumers indexed by message type.\n * Consumers declare the message types they handle, and this registry routes messages\n * to the appropriate consumers based on their types.\n *\n * **Message-Type Routing:**\n * - Consumers declare `messageTypes` array (e.g., `['email.send', 'email.batch.send']`)\n * - When a message arrives, consumers matching the message type are invoked\n * - A consumer can handle messages from ANY queue (routing is by type, not queue)\n * - Use `'*'` as a wildcard to handle all message types\n *\n * @example Consumer registration\n * ```typescript\n * // In consumer.ts\n * @Transient()\n * export class EmailConsumer implements IQueueConsumer {\n *   readonly messageTypes = ['email.send', 'email.batch.send']\n *   // ...\n * }\n *\n * // In module.ts\n * @Module({\n *   consumers: [EmailConsumer]\n * })\n *\n * // Application auto-registers via ConsumerRegistry\n * this.consumerRegistry.register(consumer)\n * ```\n */\n@Singleton(DI_TOKENS.ConsumerRegistry)\nexport class ConsumerRegistry {\n  /** Map from message type to consumer classes handling that type */\n  private classesByType = new Map<string, Constructor<IQueueConsumer>[]>()\n\n  /** All registrations (for iteration / listing) */\n  private registrations: ConsumerRegistration[] = []\n\n  /** Registered consumer classes (dedupe) */\n  private registeredClasses = new Set<Constructor<IQueueConsumer>>()\n\n  /**\n   * Register a queue consumer class.\n   *\n   * Indexes the class by each of its declared message types. A fresh instance\n   * is resolved per message from the request-scoped container at dispatch time —\n   * consumers are never held as long-lived singletons, so they may safely inject\n   * request-scoped providers (`@InjectQueue`, i18n, auth context, …).\n   *\n   * @param consumerClass - Queue consumer class to register\n   * @param messageTypes - Message types the consumer handles\n   */\n  register(consumerClass: Constructor<IQueueConsumer>, messageTypes: string[]): void {\n    if (this.registeredClasses.has(consumerClass)) {\n      return // Already registered\n    }\n\n    this.registeredClasses.add(consumerClass)\n    this.registrations.push({ consumerClass, messageTypes })\n\n    for (const messageType of messageTypes) {\n      const existing = this.classesByType.get(messageType) ?? []\n      existing.push(consumerClass)\n      this.classesByType.set(messageType, existing)\n    }\n  }\n\n  /**\n   * Get all consumer classes that can handle a specific message type.\n   *\n   * Returns classes that either declare the message type explicitly or use the\n   * `'*'` wildcard. Callers resolve a fresh instance per message from the\n   * request-scoped container.\n   *\n   * @param messageType - The message type to find consumers for\n   * @returns Array of consumer classes that can handle this message type\n   */\n  getConsumerClasses(messageType: string): Constructor<IQueueConsumer>[] {\n    const exactMatch = this.classesByType.get(messageType) ?? []\n    const wildcardMatch = this.classesByType.get('*') ?? []\n\n    // Combine and dedupe\n    return Array.from(new Set([...exactMatch, ...wildcardMatch]))\n  }\n\n  /**\n   * Check if any consumers can handle a message type\n   *\n   * @param messageType - The message type to check\n   * @returns true if at least one consumer can handle this type\n   */\n  hasConsumers(messageType: string): boolean {\n    return this.getConsumerClasses(messageType).length > 0\n  }\n\n  /**\n   * Get all registered message types\n   *\n   * @returns Array of message types with registered consumers\n   */\n  getMessageTypes(): string[] {\n    return Array.from(this.classesByType.keys())\n  }\n\n  /**\n   * Get all consumer registrations (class + message types) for listing.\n   */\n  getRegistrations(): readonly ConsumerRegistration[] {\n    return this.registrations\n  }\n}\n","import type { II18nService } from '../i18n/i18n.types';\nimport type { IQueueProvider } from './providers';\nimport type { QueueMessage } from './queue-consumer';\nimport type { DispatchMessage, IQueueSender } from './queue-sender.interface';\n\n/**\n * Queue Sender\n *\n * Implementation of IQueueSender bound to a specific queue binding.\n * Created by QueueRegistry for each registered binding.\n *\n * Automatically enriches messages with:\n * - `id`: UUID generated via crypto.randomUUID()\n * - `metadata.locale`: Current locale from I18n context\n * - `metadata.idempotencyKey`: Deterministic SHA-256 hash of type + payload (if not provided)\n *\n * @example\n * ```typescript\n * // Created by QueueRegistry, not directly instantiated\n * const sender = registry.getQueue('NOTIFICATIONS_QUEUE')\n *\n * await sender.dispatch({\n *   type: 'email.send',\n *   payload: { to: 'user@example.com', subject: 'Hello' }\n * })\n * ```\n */\nexport class QueueSender implements IQueueSender {\n  constructor(\n    private readonly binding: string,\n    private readonly provider: IQueueProvider,\n    private readonly i18n: II18nService\n  ) {}\n\n  /**\n   * Dispatch a message to this queue.\n   *\n   * @param message - Message to dispatch (without id)\n   */\n  async dispatch<T>(message: DispatchMessage<T>): Promise<void> {\n    const metadata = { ...message.metadata }\n\n    if (!metadata.locale) {\n      const locale = this.i18n.getLocale()\n      if (locale) {\n        metadata.locale = locale\n      }\n    }\n\n    metadata.idempotencyKey ??= await this.generateIdempotencyKey(message.type, message.payload);\n\n    // Stamp the producer binding so a failed job can be retried to the right\n    // Cloudflare binding. Consumers only see the queue *name*, which is not a\n    // valid producer binding key.\n    metadata.binding = this.binding\n\n    const fullMessage: QueueMessage<T> = {\n      id: crypto.randomUUID(),\n      ...message,\n      metadata,\n    }\n\n    await this.provider.send(this.binding, fullMessage)\n  }\n\n  private async generateIdempotencyKey(type: string, payload: unknown): Promise<string> {\n    // Use a stable, key-sorted serialization: `JSON.stringify` preserves\n    // insertion order, so two semantically identical payloads with differently\n    // ordered keys would otherwise hash differently and defeat deduplication.\n    const data = new TextEncoder().encode(stableStringify({ type, payload }))\n    const hash = await crypto.subtle.digest('SHA-256', data)\n    return `queue:${Array.from(new Uint8Array(hash)).map(b => b.toString(16).padStart(2, '0')).join('')}`\n  }\n}\n\n/**\n * Deterministic JSON serialization: object keys are emitted in sorted order at\n * every level so the output depends only on the data, not on key insertion\n * order. Arrays keep their order (order is significant). Used to derive a stable\n * idempotency hash from a message's `type` + `payload`.\n */\nfunction stableStringify(value: unknown): string {\n  if (value === null || typeof value !== 'object') {\n    return JSON.stringify(value) ?? 'null'\n  }\n  if (Array.isArray(value)) {\n    return `[${value.map(stableStringify).join(',')}]`\n  }\n  const entries = Object.keys(value as Record<string, unknown>)\n    .sort()\n    .map((key) => {\n      const v = (value as Record<string, unknown>)[key]\n      if (v === undefined) return undefined\n      return `${JSON.stringify(key)}:${stableStringify(v)}`\n    })\n    .filter((entry): entry is string => entry !== undefined)\n  return `{${entries.join(',')}}`\n}\n","import { inject } from '../di'\nimport { Request } from '../di/decorators'\nimport { I18N_TOKENS } from '../i18n/i18n.tokens'\nimport type { II18nService } from '../i18n/i18n.types'\nimport type { IQueueProvider } from './providers'\nimport type { IQueueSender } from './queue-sender.interface'\nimport { QueueSender } from './queue-sender'\nimport { QUEUE_TOKENS } from './queue.tokens'\nimport { type QueueProviderFactory } from './services'\n\n/**\n * Queue Registry\n *\n * Request-scoped factory service for creating QueueSender instances.\n * Caches senders per binding within the request scope.\n *\n * This service is used internally by QueueModule.registerQueue() to provide\n * IQueueSender instances for each registered binding.\n *\n * **Why request-scoped?**\n * - Needs access to I18nService for locale-aware message metadata\n * - Provider is created once per request for consistency\n * - Queue senders are cached per request to avoid recreating them\n *\n * @example\n * ```typescript\n * // Used internally by QueueModule.registerQueue()\n * QueueModule.registerQueue('NOTIFICATIONS_QUEUE')\n *\n * // The module creates a factory provider:\n * {\n *   provide: 'NOTIFICATIONS_QUEUE',\n *   useFactory: (registry: QueueRegistry) => registry.getQueue('NOTIFICATIONS_QUEUE'),\n *   inject: [QUEUE_TOKENS.QueueRegistry],\n * }\n * ```\n */\n@Request(QUEUE_TOKENS.QueueRegistry)\nexport class QueueRegistry {\n  private readonly provider: IQueueProvider\n  private readonly senders = new Map<string, IQueueSender>()\n\n  constructor(\n    @inject(QUEUE_TOKENS.QueueProviderFactory) providerFactory: QueueProviderFactory,\n    @inject(I18N_TOKENS.I18nService) private readonly i18n: II18nService\n  ) {\n    this.provider = providerFactory.create()\n  }\n\n  /**\n   * Get or create a QueueSender for the specified binding.\n   *\n   * Senders are cached per binding within the request scope.\n   *\n   * @param binding - The queue binding to get a sender for\n   * @returns QueueSender bound to the specified binding\n   */\n  getQueue(binding: string): IQueueSender {\n    let sender = this.senders.get(binding)\n\n    if (!sender) {\n      sender = new QueueSender(binding, this.provider, this.i18n)\n      this.senders.set(binding, sender)\n    }\n\n    return sender\n  }\n}\n","import { inject } from '../di';\nimport { Transient } from '../di/decorators';\nimport { CACHE_TOKENS } from '../cache/cache.tokens';\nimport type { TieredCacheService } from '../cache/services/tiered-cache.service';\nimport type { FailedJob, FailedJobMetadata } from './failed-job';\nimport type { QueueModuleOptions } from './queue.module';\nimport { QUEUE_TOKENS } from './queue.tokens';\n\nconst IDEM_PREFIX = 'queue:idem:'\nconst FAILED_PREFIX = 'queue:failed:'\nconst DEFAULT_IDEMPOTENCY_TTL = 86400\n\n/** Default KV binding name used for queue state when none is configured. */\nexport const DEFAULT_STORE_BINDING = 'CACHE'\n\n/**\n * Persists queue idempotency claims and failed jobs.\n *\n * Backed by {@link TieredCacheService} (isolate-local L1 + KV). The L1 is what\n * makes `markProcessed` → `isProcessed` reliable within an isolate: a claim\n * written on this isolate is read back from memory, so a message redelivered to\n * the same warm isolate is de-duplicated even inside KV's eventual-consistency\n * window. Idempotency markers are set-once, the pattern the L1 tier is designed\n * for. Cross-isolate duplicates still rely on KV (eventually consistent) —\n * delivery remains at-least-once with best-effort de-duplication, not\n * exactly-once.\n */\n@Transient(QUEUE_TOKENS.QueueStore)\nexport class QueueStore {\n  private readonly cache: TieredCacheService\n  private readonly idempotencyTtl: number\n\n  constructor(\n    @inject(CACHE_TOKENS.TieredCacheService) cache: TieredCacheService,\n    @inject(QUEUE_TOKENS.QueueModuleOptions) options: QueueModuleOptions,\n  ) {\n    // Bind to the configured KV namespace via the tiered cache so the L1 lives\n    // on its singleton (one per isolate) and persists across messages. The\n    // binding is validated at module init (QueueModule.onInitialize);\n    // `binding()` also throws if it is somehow absent here.\n    this.cache = cache.binding(options.store?.binding ?? DEFAULT_STORE_BINDING)\n    this.idempotencyTtl = options.idempotency?.ttl ?? DEFAULT_IDEMPOTENCY_TTL\n  }\n\n  async isProcessed(key: string): Promise<boolean> {\n    return (await this.cache.get(`${IDEM_PREFIX}${key}`)) !== null\n  }\n\n  async markProcessed(key: string): Promise<void> {\n    await this.cache.put(`${IDEM_PREFIX}${key}`, '1', {\n      expirationTtl: this.idempotencyTtl,\n    })\n  }\n\n  async storeFailedJob(job: FailedJob): Promise<void> {\n    const metadata: FailedJobMetadata = {\n      queue: job.queue,\n      binding: job.binding,\n      type: job.type,\n      consumer: job.consumer,\n      attempts: job.attempts,\n      failedAt: job.failedAt,\n    }\n\n    await this.cache.put(`${FAILED_PREFIX}${job.id}`, JSON.stringify(job), {\n      metadata,\n    })\n  }\n\n  async getFailedJob(messageId: string): Promise<FailedJob | null> {\n    return this.cache.get<FailedJob>(`${FAILED_PREFIX}${messageId}`, 'json')\n  }\n\n  async removeFailedJob(messageId: string): Promise<void> {\n    await this.cache.delete(`${FAILED_PREFIX}${messageId}`)\n  }\n\n  async listFailedJobs(options?: {\n    limit?: number\n    cursor?: string\n  }): Promise<{ keys: { id: string; metadata: FailedJobMetadata }[]; cursor?: string }> {\n    const result = await this.cache.list<FailedJobMetadata>({\n      prefix: FAILED_PREFIX,\n      limit: options?.limit ?? 50,\n      cursor: options?.cursor,\n    })\n\n    // Skip keys without metadata: a partially-written entry (or one written by\n    // an older code path) is unusable for listing and must not crash the page.\n    const keys = result.keys\n      .filter((key): key is typeof key & { metadata: FailedJobMetadata } => key.metadata != null)\n      .map((key) => ({\n        id: key.name.slice(FAILED_PREFIX.length),\n        metadata: key.metadata,\n      }))\n\n    return {\n      keys,\n      cursor: result.list_complete ? undefined : result.cursor,\n    }\n  }\n\n  async purgeFailedJobs(): Promise<void> {\n    let cursor: string | undefined\n\n    do {\n      const result = await this.cache.list({ prefix: FAILED_PREFIX, cursor })\n      await Promise.all(result.keys.map((key) => this.cache.delete(key.name)))\n      cursor = result.list_complete ? undefined : result.cursor\n    } while (cursor)\n  }\n\n  /**\n   * Delete failed jobs older than `retentionSeconds` (by their `failedAt`\n   * timestamp). Returns the number removed. Backs the opt-in\n   * {@link FailedJobCleanupJob} cron — failed jobs otherwise persist\n   * indefinitely until retried or purged.\n   */\n  async purgeFailedJobsOlderThan(retentionSeconds: number): Promise<number> {\n    const cutoff = Date.now() - retentionSeconds * 1000\n    let cursor: string | undefined\n    let removed = 0\n\n    do {\n      const result = await this.cache.list<FailedJobMetadata>({ prefix: FAILED_PREFIX, cursor })\n      const expired = result.keys.filter((key) => {\n        const failedAt = key.metadata?.failedAt\n        return failedAt !== undefined && Date.parse(failedAt) < cutoff\n      })\n      await Promise.all(expired.map((key) => this.cache.delete(key.name)))\n      removed += expired.length\n      cursor = result.list_complete ? undefined : result.cursor\n    } while (cursor)\n\n    return removed\n  }\n}\n","import { inject } from '../../di'\nimport { type StratalEnv } from '../../env'\nimport { Transient } from '../../di/decorators'\nimport { DI_TOKENS } from '../../di/tokens'\nimport { QueueError } from '../queue.error'\nimport type { QueueMessage } from '../queue-consumer'\nimport type { IQueueProvider } from './queue-provider.interface'\n\n/**\n * Cloudflare Queue Provider\n *\n * Sends messages to Cloudflare Queues by resolving the binding directly on\n * the worker's `env`. Used in production environments where Cloudflare Workers\n * handle queue processing.\n *\n * @example\n * ```typescript\n * const provider = new CloudflareQueueProvider(env)\n * await provider.send('NOTIFICATIONS_QUEUE', message)\n * ```\n */\n@Transient()\nexport class CloudflareQueueProvider implements IQueueProvider {\n  constructor(\n    @inject(DI_TOKENS.CloudflareEnv) private readonly env: StratalEnv\n  ) { }\n\n  /**\n   * Send a message to a Cloudflare Queue\n   *\n   * @param binding - Queue binding identifier (e.g., 'NOTIFICATIONS_QUEUE')\n   * @param message - Complete message with id and payload\n   * @throws {QueueError} If the binding is not configured on env\n   */\n  async send<T>(binding: string, message: QueueMessage<T>): Promise<void> {\n    const queue = (this.env as unknown as Record<string, unknown>)[binding] as Queue | undefined\n\n    if (!queue) {\n      throw new QueueError(`Queue binding \"${binding}\" was not found in the environment`)\n    }\n\n    await queue.send(message)\n  }\n}\n","import type { Container } from '../../di/container'\nimport { containerStorage } from '../../di/container-storage'\nimport { inject } from '../../di'\nimport { Transient } from '../../di/decorators'\nimport { DI_TOKENS } from '../../di/tokens'\nimport type { RouterContext } from '../../router/router-context'\nimport { type ConsumerRegistry } from '../consumer-registry'\nimport type { IQueueConsumer, QueueMessage } from '../queue-consumer'\nimport type { IQueueProvider } from './queue-provider.interface'\n\n/**\n * Sync Queue Provider\n *\n * Processes messages immediately by finding matching consumers and calling\n * their handle() method directly. Used for testing and development where\n * real queue infrastructure is not available.\n *\n * **Behavior:**\n * - Messages are processed synchronously when send() is called\n * - Matching consumers are found via ConsumerRegistry by message type\n * - All matching consumers are called sequentially\n * - Errors are re-thrown after onError() is called (fail-fast for testing)\n *\n * **Consumer Matching:**\n * - Consumers are matched by message type, not queue name\n * - Wildcard ('*') matches all message types\n */\n@Transient()\nexport class SyncQueueProvider implements IQueueProvider {\n  constructor(\n    @inject(DI_TOKENS.ConsumerRegistry) private readonly registry: ConsumerRegistry,\n    @inject(DI_TOKENS.Container) private readonly root: Container,\n  ) {}\n\n  /**\n   * Process a message synchronously.\n   *\n   * Runs inside the active request scope when dispatch happens within one (an\n   * HTTP request, or `runInScope` for queues/cron/commands). When dispatched\n   * with no ambient scope — e.g. a service invoked directly in a test — it\n   * establishes its own request scope (mirroring the production queue handler)\n   * so consumers and their request-scoped dependencies resolve correctly.\n   *\n   * @param _binding - Queue binding (not used for routing, consumers match by message type)\n   * @param message - Complete message with id and payload\n   * @throws Re-throws any error from consumer.handle() after calling onError()\n   */\n  async send<T>(_binding: string, message: QueueMessage<T>): Promise<void> {\n    const ambient = containerStorage.getStore()\n    if (ambient) {\n      await this.process(ambient, message)\n      return\n    }\n\n    const locale = message.metadata?.locale ?? 'en'\n    const context = {\n      getLocale: () => locale,\n      setLocale: () => { /* no-op */ },\n      getContainer: () => containerStorage.getStore() ?? this.root,\n    } as unknown as RouterContext\n\n    await this.root.runInRequestScope(context, (container) => this.process(container, message))\n  }\n\n  /**\n   * Resolve a fresh consumer per message from `container` (matched by type) and\n   * invoke each sequentially, fail-fast on the first error after `onError`.\n   */\n  private async process<T>(container: Container, message: QueueMessage<T>): Promise<void> {\n    const consumers = this.registry\n      .getConsumerClasses(message.type)\n      .map((ConsumerClass) => container.resolve<IQueueConsumer>(ConsumerClass))\n\n    for (const consumer of consumers) {\n      try {\n        await consumer.handle(message)\n      } catch (error) {\n        const errorInstance = error instanceof Error ? error : new Error(String(error))\n\n        // Call onError hook if defined\n        if (consumer.onError) {\n          await consumer.onError(errorInstance, message)\n        }\n\n        // Re-throw for fail-fast behavior in tests\n        throw errorInstance\n      }\n    }\n  }\n}\n","import { inject } from '../../di'\nimport type { Container } from '../../di/container'\nimport { type StratalEnv } from '../../env'\nimport { Transient } from '../../di/decorators'\nimport { DI_TOKENS } from '../../di/tokens'\nimport { type ConsumerRegistry } from '../consumer-registry'\nimport { QueueError } from '../queue.error'\nimport { CloudflareQueueProvider, SyncQueueProvider, type IQueueProvider } from '../providers'\nimport type { QueueModuleOptions } from '../queue.module'\nimport { QUEUE_TOKENS } from '../queue.tokens'\n\n/**\n * Queue Provider Factory\n *\n * Creates the appropriate queue provider based on configuration provided\n * via QueueModule.forRootAsync().\n *\n * **Provider Selection:**\n * - `cloudflare`: Production provider using Cloudflare Queue bindings\n * - `sync`: Testing provider that processes messages immediately\n *\n * @example\n * ```typescript\n * // Configuration via QueueModule.forRootAsync()\n * QueueModule.forRootAsync({\n *   inject: [CONFIG_TOKENS.ConfigService],\n *   useFactory: (config) => ({ provider: config.get('queue').provider })\n * })\n *\n * // Factory usage (internal)\n * const factory = container.resolve(QueueProviderFactory)\n * const provider = factory.create()\n * ```\n */\n@Transient(QUEUE_TOKENS.QueueProviderFactory)\nexport class QueueProviderFactory {\n  constructor(\n    @inject(DI_TOKENS.CloudflareEnv) private readonly env: StratalEnv,\n    @inject(DI_TOKENS.ConsumerRegistry) private readonly registry: ConsumerRegistry,\n    @inject(DI_TOKENS.Container) private readonly container: Container,\n    @inject(QUEUE_TOKENS.QueueModuleOptions, { isOptional: true }) private readonly options?: QueueModuleOptions,\n  ) { }\n\n  /**\n   * Create a queue provider based on module configuration\n   *\n   * @returns Queue provider instance\n   * @throws {QueueError} If provider type is not supported\n   */\n  create(): IQueueProvider {\n    const providerType = this.options?.provider ?? 'cloudflare'\n\n    switch (providerType) {\n      case 'cloudflare':\n        return new CloudflareQueueProvider(this.env)\n\n      case 'sync':\n        return new SyncQueueProvider(this.registry, this.container)\n\n      default:\n        throw new QueueError(`Queue provider \"${String(providerType)}\" is not supported`)\n    }\n  }\n}\n","/**\n * Queue Module\n *\n * Provides declarative queue infrastructure with provider abstraction.\n *\n * **Usage:**\n * ```typescript\n * // 1. Configure provider (once, in app root)\n * QueueModule.forRootAsync({\n *   inject: [CONFIG_TOKENS.ConfigService],\n *   useFactory: (config) => ({ provider: config.get('queue').provider })\n * })\n *\n * // 2. Register queue bindings (the binding IS the injection token)\n * QueueModule.registerQueue('NOTIFICATIONS_QUEUE')\n * QueueModule.registerQueue('BACKGROUND_QUEUE')\n *\n * // 3. Inject and use\n * constructor(@InjectQueue('NOTIFICATIONS_QUEUE') private queue: IQueueSender) {}\n * await this.queue.dispatch({ type: 'email.send', payload: {...} })\n * ```\n *\n * **Providers:**\n * - `cloudflare`: Production provider using Cloudflare Queue bindings\n * - `sync`: Testing provider that processes messages immediately\n */\n\nimport { CacheModule } from '../cache';\nimport { DI_TOKENS } from '../di/tokens';\nimport { type StratalEnv } from '../env';\nimport { Module } from '../module';\nimport type {\n  AsyncModuleOptions,\n  DynamicModule,\n  InjectionToken,\n  ModuleContext,\n  OnInitialize,\n} from '../module/types';\nimport { ConsumerRegistry } from './consumer-registry';\nimport type { QueueBinding } from './queue-binding';\nimport { QueueManager } from './queue-manager';\nimport { QueueRegistry } from './queue-registry';\nimport type { IQueueSender } from './queue-sender.interface';\nimport { QueueError } from './queue.error';\nimport { DEFAULT_STORE_BINDING, QueueStore } from './queue-store';\nimport { QUEUE_TOKENS } from './queue.tokens';\nimport { QueueProviderFactory } from './services';\n\n/**\n * Queue module configuration options\n */\nexport interface QueueModuleOptions {\n  /**\n   * Queue provider type\n   * - 'cloudflare': Production provider using Cloudflare Queue bindings\n   * - 'sync': Testing provider that processes messages immediately\n   */\n  provider: 'cloudflare' | 'sync'\n\n  /**\n   * KV binding for queue state (idempotency keys + failed jobs).\n   * Defaults to the `CACHE` binding if omitted.\n   */\n  store?: {\n    /**\n     * KV namespace binding name.\n     * @default CACHE\n     */\n    binding?: string\n  }\n\n  /**\n   * Idempotency configuration.\n   *\n   * Delivery is **at-least-once with best-effort de-duplication**, not\n   * exactly-once. Every dispatch carries an idempotency key (an explicit\n   * `metadata.idempotencyKey`, otherwise a deterministic SHA-256 hash of `type`\n   * + `payload`), and a message already recorded as processed is skipped. The\n   * processed marker is written only after a handler succeeds, and KV `get`/`put`\n   * are eventually consistent — so a message redelivered concurrently (or after\n   * a crash before the marker was durable) can still run more than once. Make\n   * handlers idempotent; don't rely on this as a hard exactly-once guarantee.\n   * `ttl` bounds how long processed keys are remembered.\n   */\n  idempotency?: {\n    /** TTL in seconds for processed idempotency keys. Default: 86400 (24h) */\n    ttl?: number\n  }\n\n  /**\n   * Failed-job configuration.\n   *\n   * Failed jobs persist indefinitely until retried or purged. To bound growth,\n   * register the opt-in `FailedJobCleanupJob` cron in a module's `jobs` array;\n   * it deletes failed jobs older than `retention`.\n   */\n  failedJobs?: {\n    /**\n     * Age in seconds beyond which `FailedJobCleanupJob` deletes a failed job.\n     * Default: 604800 (7d). Has no effect unless the cron is registered.\n     */\n    retention?: number\n  }\n\n  /** Max retry attempts before storing as failed job. Default: 3 */\n  maxRetries?: number\n}\n\n@Module({\n  // QueueStore persists idempotency claims and failed jobs through CacheService\n  // (isolate-local L1 + KV), so the cache must be available wherever queues are.\n  imports: [CacheModule],\n  providers: [\n    { provide: DI_TOKENS.ConsumerRegistry, useClass: ConsumerRegistry },\n    QueueManager,\n    { provide: QUEUE_TOKENS.QueueProviderFactory, useClass: QueueProviderFactory },\n    { provide: QUEUE_TOKENS.QueueRegistry, useClass: QueueRegistry },\n    { provide: QUEUE_TOKENS.QueueStore, useClass: QueueStore },\n  ],\n})\nexport class QueueModule implements OnInitialize {\n  /**\n   * Fail fast at boot if the configured KV store binding is missing, rather\n   * than letting every queue invocation hard-fail lazily. The binding backs\n   * idempotency claims and failed-job storage, so without it the queue\n   * subsystem cannot function.\n   */\n  onInitialize({ container }: ModuleContext): void {\n    const options = container.resolve<QueueModuleOptions>(QUEUE_TOKENS.QueueModuleOptions)\n\n    // Only the `cloudflare` provider persists idempotency claims and failed jobs\n    // to KV. The `sync` provider (dev/CLI) processes inline and never touches the\n    // store, so it must not require the binding.\n    if (options.provider !== 'cloudflare') return\n\n    const binding = options.store?.binding ?? DEFAULT_STORE_BINDING\n    const env = container.resolve<StratalEnv>(DI_TOKENS.CloudflareEnv)\n    const kv = (env as unknown as Record<string, unknown>)[binding]\n\n    if (!kv) {\n      throw new QueueError(\n        `Queue KV store binding \"${binding}\" was not found in the environment. ` +\n          `The queue subsystem persists idempotency claims and failed jobs to KV. ` +\n          `Add a kv_namespaces entry for \"${binding}\" in wrangler.jsonc, or set ` +\n          `QueueModule.forRootAsync({ ..., store: { binding: 'YOUR_KV' } }) to point at an existing namespace.`,\n      )\n    }\n  }\n\n  /**\n   * Configure queue infrastructure with async factory.\n   *\n   * Use when provider configuration depends on other services like ConfigService.\n   *\n   * @param options - Async configuration with factory and inject tokens\n   * @returns Dynamic module with queue infrastructure\n   *\n   * @example\n   * ```typescript\n   * QueueModule.forRootAsync({\n   *   inject: [CONFIG_TOKENS.ConfigService],\n   *   useFactory: (config: IConfigService) => ({\n   *     provider: config.get('queue').provider\n   *   })\n   * })\n   * ```\n   */\n  static forRootAsync(options: AsyncModuleOptions<QueueModuleOptions>): DynamicModule {\n    return {\n      module: QueueModule,\n      providers: [\n        {\n          provide: QUEUE_TOKENS.QueueModuleOptions,\n          useFactory: options.useFactory,\n          inject: options.inject,\n        },\n      ],\n    }\n  }\n\n  /**\n   * Register a queue binding for injection.\n   *\n   * The binding name doubles as the DI injection token and the\n   * `env`-lookup key. Binding names are typed against `StratalEnv`\n   * (autocomplete works once an app augments `StratalEnv` with its\n   * Cloudflare bindings).\n   *\n   * @param binding - Queue binding identifier (e.g. `NOTIFICATIONS_QUEUE`).\n   * @returns Dynamic module that provides the queue sender\n   *\n   * @example\n   * ```typescript\n   * // In AppModule imports\n   * QueueModule.registerQueue('NOTIFICATIONS_QUEUE')\n   *\n   * // Then inject using the binding name\n   * constructor(@InjectQueue('NOTIFICATIONS_QUEUE') private queue: IQueueSender) {}\n   * ```\n   */\n  static registerQueue(binding: QueueBinding): DynamicModule {\n    return {\n      module: QueueModule,\n      providers: [\n        {\n          provide: binding as InjectionToken<IQueueSender>,\n          useFactory: (registry: QueueRegistry) => registry.getQueue(binding),\n          inject: [QUEUE_TOKENS.QueueRegistry],\n        },\n      ],\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAEA,IAAa,aAAb,cAAgC,iBAAiB,CAAC;;;ACWlD,MAAM,sBAAsB;AAGrB,IAAA,eAAA,MAAM,aAAa;CAI+B;CACC;CACJ;CALpD;CAEA,YACE,UACA,QACA,OACA,SACA;EAJqD,KAAA,WAAA;EACC,KAAA,SAAA;EACJ,KAAA,QAAA;EAGlD,KAAK,aAAa,QAAQ,cAAc;CAC1C;CAEA,MAAM,aAAa,WAAmB,OAAoC;EACxE,KAAK,MAAM,WAAW,MAAM,UAAU;GACpC,MAAM,eAAe,QAAQ;GAC7B,MAAM,iBAAiB,aAAa,UAAU,kBAAkB,aAAa;GAE7E,IAAI,MAAM,KAAK,MAAM,YAAY,cAAc,GAAG;IAChD,QAAQ,IAAI;IACZ;GACF;GAKA,MAAM,YAAY,aAAa;GAC/B,MAAM,YAAY,KAAK,SACpB,mBAAmB,aAAa,IAAI,EACpC,KAAK,kBAAkB,UAAU,QAAwB,aAAa,CAAC;GAE1E,MAAM,UAAU,MAAM,QAAQ,WAC5B,UAAU,KAAK,aAAa,SAAS,OAAO,YAAY,CAAC,CAC3D;GAEA,IAAI;GACJ,IAAI;GAEJ,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;IACvC,MAAM,SAAS,QAAQ;IACvB,IAAI,OAAO,WAAW,YAAY;KAChC,MAAM,WAAW,UAAU;KAC3B,MAAM,gBAAgB,OAAO,kBAAkB,QAC3C,OAAO,SACP,IAAI,MAAM,OAAO,OAAO,MAAM,CAAC;KAEnC,KAAK,OAAO,MAAM,mCAAmC,eAAe;MAClE,MAAM,aAAa;MACnB,OAAO;MACP,WAAW,aAAa;MACxB;KACF,CAAC;KAED,IAAI,SAAS,SACX,MAAM,SAAS,QAAQ,eAAe,YAAY;KAGpD,YAAY;KACZ,iBAAiB,SAAS,YAAY;IACxC;GACF;GAIA,IAFe,cAAc,KAAA,GAS3B,IAAI,QAAQ,WAAW,KAAK,YAAY;IAKtC,IAAI;KACF,MAAM,UAAU,aAAa,UAAU;KACvC,IAAI,CAAC,SACH,MAAM,IAAI,WACR,iBAAiB,aAAa,GAAG,sIAEnC;KAGF,MAAM,YAAuB;MAC3B,IAAI,aAAa;MACjB,OAAO;MACP;MACA,MAAM,aAAa;MACnB,SAAS;MACT,OAAO;OACL,MAAM,UAAW;OACjB,SAAS,UAAW;OACpB,OAAO,UAAW;MACpB;MACA,UAAU;MACV,UAAU,QAAQ;MAClB,2BAAU,IAAI,KAAK,GAAE,YAAY;KACnC;KAEA,MAAM,KAAK,MAAM,eAAe,SAAS;IAC3C,SAAS,OAAO;KACd,KAAK,OAAO,MACV,sCACA,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,GACxD;MAAE,OAAO;MAAW,WAAW,aAAa;MAAI,MAAM,aAAa;KAAK,CAC1E;IACF;IACA,QAAQ,IAAI;GACd,OACE,QAAQ,MAAM;QAEX;IACL,MAAM,KAAK,MAAM,cAAc,cAAc;IAC7C,QAAQ,IAAI;GACd;EACF;CACF;AACF;;CAvHC,UAAU,UAAU,KAAK;oBAKrB,OAAO,UAAU,gBAAgB,CAAA;oBACjC,OAAO,cAAc,aAAa,CAAA;oBAClC,OAAO,aAAa,UAAU,CAAA;oBAC9B,OAAO,aAAa,kBAAkB,CAAA;;;;ACoBpC,IAAA,mBAAA,MAAM,iBAAiB;;CAE5B,gCAAwB,IAAI,IAA2C;;CAGvE,gBAAgD,CAAC;;CAGjD,oCAA4B,IAAI,IAAiC;;;;;;;;;;;;CAajE,SAAS,eAA4C,cAA8B;EACjF,IAAI,KAAK,kBAAkB,IAAI,aAAa,GAC1C;EAGF,KAAK,kBAAkB,IAAI,aAAa;EACxC,KAAK,cAAc,KAAK;GAAE;GAAe;EAAa,CAAC;EAEvD,KAAK,MAAM,eAAe,cAAc;GACtC,MAAM,WAAW,KAAK,cAAc,IAAI,WAAW,KAAK,CAAC;GACzD,SAAS,KAAK,aAAa;GAC3B,KAAK,cAAc,IAAI,aAAa,QAAQ;EAC9C;CACF;;;;;;;;;;;CAYA,mBAAmB,aAAoD;EACrE,MAAM,aAAa,KAAK,cAAc,IAAI,WAAW,KAAK,CAAC;EAC3D,MAAM,gBAAgB,KAAK,cAAc,IAAI,GAAG,KAAK,CAAC;EAGtD,OAAO,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,YAAY,GAAG,aAAa,CAAC,CAAC;CAC9D;;;;;;;CAQA,aAAa,aAA8B;EACzC,OAAO,KAAK,mBAAmB,WAAW,EAAE,SAAS;CACvD;;;;;;CAOA,kBAA4B;EAC1B,OAAO,MAAM,KAAK,KAAK,cAAc,KAAK,CAAC;CAC7C;;;;CAKA,mBAAoD;EAClD,OAAO,KAAK;CACd;AACF;+BAhFC,UAAU,UAAU,gBAAgB,CAAA,GAAA,gBAAA;;;;;;;;;;;;;;;;;;;;;;;;;ACfrC,IAAa,cAAb,MAAiD;CAE5B;CACA;CACA;CAHnB,YACE,SACA,UACA,MACA;EAHiB,KAAA,UAAA;EACA,KAAA,WAAA;EACA,KAAA,OAAA;CAChB;;;;;;CAOH,MAAM,SAAY,SAA4C;EAC5D,MAAM,WAAW,EAAE,GAAG,QAAQ,SAAS;EAEvC,IAAI,CAAC,SAAS,QAAQ;GACpB,MAAM,SAAS,KAAK,KAAK,UAAU;GACnC,IAAI,QACF,SAAS,SAAS;EAEtB;EAEA,SAAS,mBAAmB,MAAM,KAAK,uBAAuB,QAAQ,MAAM,QAAQ,OAAO;EAK3F,SAAS,UAAU,KAAK;EAExB,MAAM,cAA+B;GACnC,IAAI,OAAO,WAAW;GACtB,GAAG;GACH;EACF;EAEA,MAAM,KAAK,SAAS,KAAK,KAAK,SAAS,WAAW;CACpD;CAEA,MAAc,uBAAuB,MAAc,SAAmC;EAIpF,MAAM,OAAO,IAAI,YAAY,EAAE,OAAO,gBAAgB;GAAE;GAAM;EAAQ,CAAC,CAAC;EACxE,MAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI;EACvD,OAAO,SAAS,MAAM,KAAK,IAAI,WAAW,IAAI,CAAC,EAAE,KAAI,MAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;CACpG;AACF;;;;;;;AAQA,SAAS,gBAAgB,OAAwB;CAC/C,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,OAAO,KAAK,UAAU,KAAK,KAAK;CAElC,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,IAAI,MAAM,IAAI,eAAe,EAAE,KAAK,GAAG,EAAE;CAUlD,OAAO,IARS,OAAO,KAAK,KAAgC,EACzD,KAAK,EACL,KAAK,QAAQ;EACZ,MAAM,IAAK,MAAkC;EAC7C,IAAI,MAAM,KAAA,GAAW,OAAO,KAAA;EAC5B,OAAO,GAAG,KAAK,UAAU,GAAG,EAAE,GAAG,gBAAgB,CAAC;CACpD,CAAC,EACA,QAAQ,UAA2B,UAAU,KAAA,CAC/B,EAAE,KAAK,GAAG,EAAE;AAC/B;;;AC3DO,IAAA,gBAAA,MAAM,cAAc;CAM2B;CALpD;CACA,0BAA2B,IAAI,IAA0B;CAEzD,YACE,iBACA,MACA;EADkD,KAAA,OAAA;EAElD,KAAK,WAAW,gBAAgB,OAAO;CACzC;;;;;;;;;CAUA,SAAS,SAA+B;EACtC,IAAI,SAAS,KAAK,QAAQ,IAAI,OAAO;EAErC,IAAI,CAAC,QAAQ;GACX,SAAS,IAAI,YAAY,SAAS,KAAK,UAAU,KAAK,IAAI;GAC1D,KAAK,QAAQ,IAAI,SAAS,MAAM;EAClC;EAEA,OAAO;CACT;AACF;;CA9BC,QAAQ,aAAa,aAAa;oBAM9B,OAAO,aAAa,oBAAoB,CAAA;oBACxC,OAAO,YAAY,WAAW,CAAA;;;;ACpCnC,MAAM,cAAc;AACpB,MAAM,gBAAgB;AACtB,MAAM,0BAA0B;;AAGhC,MAAa,wBAAwB;AAe9B,IAAA,aAAA,MAAM,WAAW;CACtB;CACA;CAEA,YACE,OACA,SACA;EAKA,KAAK,QAAQ,MAAM,QAAQ,QAAQ,OAAO,WAAA,OAAgC;EAC1E,KAAK,iBAAiB,QAAQ,aAAa,OAAO;CACpD;CAEA,MAAM,YAAY,KAA+B;EAC/C,OAAQ,MAAM,KAAK,MAAM,IAAI,GAAG,cAAc,KAAK,MAAO;CAC5D;CAEA,MAAM,cAAc,KAA4B;EAC9C,MAAM,KAAK,MAAM,IAAI,GAAG,cAAc,OAAO,KAAK,EAChD,eAAe,KAAK,eACtB,CAAC;CACH;CAEA,MAAM,eAAe,KAA+B;EAClD,MAAM,WAA8B;GAClC,OAAO,IAAI;GACX,SAAS,IAAI;GACb,MAAM,IAAI;GACV,UAAU,IAAI;GACd,UAAU,IAAI;GACd,UAAU,IAAI;EAChB;EAEA,MAAM,KAAK,MAAM,IAAI,GAAG,gBAAgB,IAAI,MAAM,KAAK,UAAU,GAAG,GAAG,EACrE,SACF,CAAC;CACH;CAEA,MAAM,aAAa,WAA8C;EAC/D,OAAO,KAAK,MAAM,IAAe,GAAG,gBAAgB,aAAa,MAAM;CACzE;CAEA,MAAM,gBAAgB,WAAkC;EACtD,MAAM,KAAK,MAAM,OAAO,GAAG,gBAAgB,WAAW;CACxD;CAEA,MAAM,eAAe,SAGiE;EACpF,MAAM,SAAS,MAAM,KAAK,MAAM,KAAwB;GACtD,QAAQ;GACR,OAAO,SAAS,SAAS;GACzB,QAAQ,SAAS;EACnB,CAAC;EAWD,OAAO;GACL,MARW,OAAO,KACjB,QAAQ,QAA6D,IAAI,YAAY,IAAI,EACzF,KAAK,SAAS;IACb,IAAI,IAAI,KAAK,MAAM,EAAoB;IACvC,UAAU,IAAI;GAChB,EAGG;GACH,QAAQ,OAAO,gBAAgB,KAAA,IAAY,OAAO;EACpD;CACF;CAEA,MAAM,kBAAiC;EACrC,IAAI;EAEJ,GAAG;GACD,MAAM,SAAS,MAAM,KAAK,MAAM,KAAK;IAAE,QAAQ;IAAe;GAAO,CAAC;GACtE,MAAM,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,CAAC;GACvE,SAAS,OAAO,gBAAgB,KAAA,IAAY,OAAO;EACrD,SAAS;CACX;;;;;;;CAQA,MAAM,yBAAyB,kBAA2C;EACxE,MAAM,SAAS,KAAK,IAAI,IAAI,mBAAmB;EAC/C,IAAI;EACJ,IAAI,UAAU;EAEd,GAAG;GACD,MAAM,SAAS,MAAM,KAAK,MAAM,KAAwB;IAAE,QAAQ;IAAe;GAAO,CAAC;GACzF,MAAM,UAAU,OAAO,KAAK,QAAQ,QAAQ;IAC1C,MAAM,WAAW,IAAI,UAAU;IAC/B,OAAO,aAAa,KAAA,KAAa,KAAK,MAAM,QAAQ,IAAI;GAC1D,CAAC;GACD,MAAM,QAAQ,IAAI,QAAQ,KAAK,QAAQ,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,CAAC;GACnE,WAAW,QAAQ;GACnB,SAAS,OAAO,gBAAgB,KAAA,IAAY,OAAO;EACrD,SAAS;EAET,OAAO;CACT;AACF;;CA7GC,UAAU,aAAa,UAAU;oBAM7B,OAAO,aAAa,kBAAkB,CAAA;oBACtC,OAAO,aAAa,kBAAkB,CAAA;;;;ACZpC,IAAA,0BAAA,MAAM,wBAAkD;CAET;CADpD,YACE,KACA;EADkD,KAAA,MAAA;CAChD;;;;;;;;CASJ,MAAM,KAAQ,SAAiB,SAAyC;EACtE,MAAM,QAAS,KAAK,IAA2C;EAE/D,IAAI,CAAC,OACH,MAAM,IAAI,WAAW,kBAAkB,QAAQ,mCAAmC;EAGpF,MAAM,MAAM,KAAK,OAAO;CAC1B;AACF;sCAtBC,UAAU,GAAA,gBAAA,GAGN,OAAO,UAAU,aAAa,CAAA,CAAA,GAAA,uBAAA;;;ACI5B,IAAA,oBAAA,MAAM,kBAA4C;CAEA;CACP;CAFhD,YACE,UACA,MACA;EAFqD,KAAA,WAAA;EACP,KAAA,OAAA;CAC7C;;;;;;;;;;;;;;CAeH,MAAM,KAAQ,UAAkB,SAAyC;EACvE,MAAM,UAAU,iBAAiB,SAAS;EAC1C,IAAI,SAAS;GACX,MAAM,KAAK,QAAQ,SAAS,OAAO;GACnC;EACF;EAEA,MAAM,SAAS,QAAQ,UAAU,UAAU;EAO3C,MAAM,KAAK,KAAK,kBAAkB;GALhC,iBAAiB;GACjB,iBAAiB,CAAc;GAC/B,oBAAoB,iBAAiB,SAAS,KAAK,KAAK;EAGlB,IAAI,cAAc,KAAK,QAAQ,WAAW,OAAO,CAAC;CAC5F;;;;;CAMA,MAAc,QAAW,WAAsB,SAAyC;EACtF,MAAM,YAAY,KAAK,SACpB,mBAAmB,QAAQ,IAAI,EAC/B,KAAK,kBAAkB,UAAU,QAAwB,aAAa,CAAC;EAE1E,KAAK,MAAM,YAAY,WACrB,IAAI;GACF,MAAM,SAAS,OAAO,OAAO;EAC/B,SAAS,OAAO;GACd,MAAM,gBAAgB,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;GAG9E,IAAI,SAAS,SACX,MAAM,SAAS,QAAQ,eAAe,OAAO;GAI/C,MAAM;EACR;CAEJ;AACF;;CA9DC,UAAU;oBAGN,OAAO,UAAU,gBAAgB,CAAA;oBACjC,OAAO,UAAU,SAAS,CAAA;;;;ACIxB,IAAA,uBAAA,MAAM,qBAAqB;CAEoB;CACG;CACP;CACkC;CAJlF,YACE,KACA,UACA,WACA,SACA;EAJkD,KAAA,MAAA;EACG,KAAA,WAAA;EACP,KAAA,YAAA;EACkC,KAAA,UAAA;CAC9E;;;;;;;CAQJ,SAAyB;EACvB,MAAM,eAAe,KAAK,SAAS,YAAY;EAE/C,QAAQ,cAAR;GACE,KAAK,cACH,OAAO,IAAI,wBAAwB,KAAK,GAAG;GAE7C,KAAK,QACH,OAAO,IAAI,kBAAkB,KAAK,UAAU,KAAK,SAAS;GAE5D,SACE,MAAM,IAAI,WAAW,mBAAmB,OAAO,YAAY,EAAE,mBAAmB;EACpF;CACF;AACF;;CA7BC,UAAU,aAAa,oBAAoB;oBAGvC,OAAO,UAAU,aAAa,CAAA;oBAC9B,OAAO,UAAU,gBAAgB,CAAA;oBACjC,OAAO,UAAU,SAAS,CAAA;oBAC1B,OAAO,aAAa,oBAAoB,EAAE,YAAY,KAAK,CAAC,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACgF1D,IAAA,cAAA,eAAA,MAAM,YAAoC;;;;;;;CAO/C,aAAa,EAAE,aAAkC;EAC/C,MAAM,UAAU,UAAU,QAA4B,aAAa,kBAAkB;EAKrF,IAAI,QAAQ,aAAa,cAAc;EAEvC,MAAM,UAAU,QAAQ,OAAO,WAAA;EAI/B,IAAI,CAHQ,UAAU,QAAoB,UAAU,aACtC,EAAyC,UAGrD,MAAM,IAAI,WACR,2BAA2B,QAAQ,4IAEC,QAAQ,gIAE9C;CAEJ;;;;;;;;;;;;;;;;;;;CAoBA,OAAO,aAAa,SAAgE;EAClF,OAAO;GACL,QAAA;GACA,WAAW,CACT;IACE,SAAS,aAAa;IACtB,YAAY,QAAQ;IACpB,QAAQ,QAAQ;GAClB,CACF;EACF;CACF;;;;;;;;;;;;;;;;;;;;;CAsBA,OAAO,cAAc,SAAsC;EACzD,OAAO;GACL,QAAA;GACA,WAAW,CACT;IACE,SAAS;IACT,aAAa,aAA4B,SAAS,SAAS,OAAO;IAClE,QAAQ,CAAC,aAAa,aAAa;GACrC,CACF;EACF;CACF;AACF;yCAxGC,OAAO;CAGN,SAAS,CAAC,WAAW;CACrB,WAAW;EACT;GAAE,SAAS,UAAU;GAAkB,UAAU;EAAiB;EAClE;EACA;GAAE,SAAS,aAAa;GAAsB,UAAU;EAAqB;EAC7E;GAAE,SAAS,aAAa;GAAe,UAAU;EAAc;EAC/D;GAAE,SAAS,aAAa;GAAY,UAAU;EAAW;CAC3D;AACF,CAAC,CAAA,GAAA,WAAA"}

package/dist/queue.tokens-DjHnFmre.mjs

@@ -0,0 +1,11 @@
+//#region src/queue/queue.tokens.ts
+const QUEUE_TOKENS = {
+	QueueProviderFactory: Symbol.for("stratal:queue:provider:factory"),
+	QueueRegistry: Symbol.for("stratal:queue:registry"),
+	QueueModuleOptions: Symbol.for("stratal:queue:options"),
+	QueueStore: Symbol.for("stratal:queue:store")
+};
+//#endregion
+export { QUEUE_TOKENS as t };
+
+//# sourceMappingURL=queue.tokens-DjHnFmre.mjs.map

package/dist/queue.tokens-DjHnFmre.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.tokens-DjHnFmre.mjs","names":[],"sources":["../src/queue/queue.tokens.ts"],"sourcesContent":["export const QUEUE_TOKENS = {\n  QueueProviderFactory: Symbol.for('stratal:queue:provider:factory'),\n  QueueRegistry: Symbol.for('stratal:queue:registry'),\n  QueueModuleOptions: Symbol.for('stratal:queue:options'),\n  QueueStore: Symbol.for('stratal:queue:store'),\n} as const\n\nexport type QueueToken = (typeof QUEUE_TOKENS)[keyof typeof QUEUE_TOKENS]\n"],"mappings":";AAAA,MAAa,eAAe;CAC1B,sBAAsB,OAAO,IAAI,gCAAgC;CACjE,eAAe,OAAO,IAAI,wBAAwB;CAClD,oBAAoB,OAAO,IAAI,uBAAuB;CACtD,YAAY,OAAO,IAAI,qBAAqB;AAC9C"}

package/dist/{r2-storage.provider-Hfm6LdZQ.mjs → r2-storage.provider-DCxQt9dD.mjs}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./chunk-D1SwGrFN.mjs";
-import { t as signUrl } from "./signed-url-BqUqt5dF.mjs";
-import { t as StorageError } from "./storage.error-C6FY037a.mjs";
+import { t as __exportAll } from "./chunk-BBjsoOtd.mjs";
+import { t as StorageError } from "./storage.error-Dnib4VHc.mjs";
+import { t as signUrl } from "./signed-url-DIU0sK_6.mjs";
 //#region src/storage/providers/r2-storage.provider.ts
 var r2_storage_provider_exports = /* @__PURE__ */ __exportAll({ R2StorageProvider: () => R2StorageProvider });
 const MIN_PART_SIZE = 5 * 1024 * 1024;
@@ -244,4 +244,4 @@ var R2StorageProvider = class {
 //#endregion
 export { r2_storage_provider_exports as n, R2StorageProvider as t };
 
-//# sourceMappingURL=r2-storage.provider-Hfm6LdZQ.mjs.map
+//# sourceMappingURL=r2-storage.provider-DCxQt9dD.mjs.map

package/dist/{r2-storage.provider-Hfm6LdZQ.mjs.map → r2-storage.provider-DCxQt9dD.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"r2-storage.provider-Hfm6LdZQ.mjs","names":[],"sources":["../src/storage/providers/r2-storage.provider.ts"],"sourcesContent":["import { type StratalEnv } from '../../env'\nimport { signUrl } from '../../router/signed-url'\nimport type { DownloadResult, PresignedUrlResult, UploadOptions, UploadResult } from '../contracts'\nimport { StorageError } from '../storage.error'\nimport type { StorageEntry, StorageRouteConfig } from '../types'\nimport type {\n  CompletedPart,\n  CompleteMultipartResult,\n  CreateMultipartOptions,\n  CreateMultipartResult,\n  DeleteObjectsResult,\n  HeadObjectResult,\n  IMultipartProvider,\n  ListMultipartUploadsResult,\n  ListPartsResult,\n  UploadPartResult,\n} from './multipart-provider.interface'\nimport type { StreamingBlobPayloadInputTypes } from './storage-provider.interface'\n\nconst MIN_PART_SIZE = 5 * 1024 * 1024 // 5MB\nconst MULTIPART_PREFIX = '__multipart/'\nconst PARTS_PREFIX = '__parts/'\n\n/**\n * R2 Storage Provider\n * Implements storage operations using native Cloudflare R2 bindings\n *\n * Implements IMultipartProvider for multipart upload support needed by TUS.\n * Tracks multipart upload metadata using companion R2 objects so that\n * listParts/listMultipartUploads work in all environments (local, test, prod).\n */\nexport class R2StorageProvider implements IMultipartProvider {\n  private readonly routeBasePath: string\n\n  constructor(\n    private readonly config: StorageEntry,\n    private readonly bucket: R2Bucket,\n    private readonly env: StratalEnv,\n    routeConfig?: StorageRouteConfig\n  ) {\n    this.routeBasePath = routeConfig?.basePath ?? '/storage'\n  }\n\n  async upload(\n    body: StreamingBlobPayloadInputTypes,\n    path: string,\n    options: UploadOptions\n  ): Promise<UploadResult> {\n    const customMetadata: Record<string, string> = { ...options.metadata }\n    if (options.tagging) {\n      customMetadata['x-tags'] = options.tagging\n    }\n\n    await this.bucket.put(path, body as ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, {\n      httpMetadata: {\n        contentType: options.mimeType,\n      },\n      customMetadata,\n    })\n\n    return {\n      path,\n      disk: this.config.disk,\n      fullPath: path,\n      size: options.size,\n      mimeType: options.mimeType ?? 'application/octet-stream',\n      uploadedAt: new Date(),\n    }\n  }\n\n  async download(path: string): Promise<DownloadResult> {\n    const obj = await this.bucket.get(path)\n\n    if (!obj) {\n      throw new StorageError(`Storage object not found at path \"${path}\"`)\n    }\n\n    // R2ObjectBody has body, text(), arrayBuffer(), etc.\n    const objBody = obj\n\n    return {\n      toStream: () => objBody.body as ReadableStream<Uint8Array>,\n      contentType: obj.httpMetadata?.contentType ?? 'application/octet-stream',\n      size: obj.size,\n      metadata: obj.customMetadata,\n      toString: () => objBody.text(),\n      toArrayBuffer: () => objBody.bytes(),\n    }\n  }\n\n  async delete(path: string): Promise<void> {\n    await this.bucket.delete(path)\n  }\n\n  async exists(path: string): Promise<boolean> {\n    const head = await this.bucket.head(path)\n    return head !== null\n  }\n\n  async getPresignedUrl(\n    path: string,\n    method: 'GET' | 'PUT' | 'DELETE' | 'HEAD',\n    expiresIn: number\n  ): Promise<PresignedUrlResult> {\n    const secret = this.env.APP_SECRET;\n    if (!secret) {\n      throw new StorageError('APP_SECRET is required for generating presigned URLs')\n    }\n\n    // Build a relative URL pointing to the StorageController route\n    const routePath = `${this.routeBasePath}/${this.config.disk}/${path}`\n    const urlWithMethod = `${routePath}?method=${method}`\n    const url = await signUrl(urlWithMethod, secret, { expiresIn })\n\n    return {\n      url,\n      expiresIn,\n      expiresAt: new Date(Date.now() + expiresIn * 1000),\n      method,\n    }\n  }\n\n  async chunkedUpload(\n    body: StreamingBlobPayloadInputTypes,\n    path: string,\n    options: Omit<UploadOptions, 'size'> & { size?: number }\n  ): Promise<UploadResult> {\n    const multipartUpload = await this.bucket.createMultipartUpload(path, {\n      httpMetadata: {\n        contentType: options.mimeType,\n      },\n      customMetadata: options.metadata,\n    })\n\n    const parts: R2UploadedPart[] = []\n\n    try {\n      if (body instanceof ReadableStream) {\n        const reader = (body as ReadableStream<Uint8Array>).getReader()\n        let buffer = new Uint8Array(0)\n        let partNumber = 1\n\n        while (true) {\n          const { done, value } = await reader.read()\n\n          if (value) {\n            const newBuffer = new Uint8Array(buffer.length + value.length)\n            newBuffer.set(buffer, 0)\n            newBuffer.set(value, buffer.length)\n            buffer = newBuffer\n          }\n\n          while (buffer.length >= MIN_PART_SIZE) {\n            const partData = buffer.slice(0, MIN_PART_SIZE)\n            buffer = buffer.slice(MIN_PART_SIZE)\n            const part = await multipartUpload.uploadPart(partNumber, partData)\n            parts.push(part)\n            partNumber++\n          }\n\n          if (done) {\n            // Upload remaining buffer as final part\n            if (buffer.length > 0) {\n              const part = await multipartUpload.uploadPart(partNumber, buffer)\n              parts.push(part)\n            }\n            break\n          }\n        }\n      } else if (body !== null && body !== undefined) {\n        // Non-stream body: upload as single part\n        const part = await multipartUpload.uploadPart(1, body as ArrayBuffer | ArrayBufferView | string | Blob)\n        parts.push(part)\n      }\n\n      await multipartUpload.complete(parts)\n    } catch (error) {\n      await multipartUpload.abort()\n      throw error\n    }\n\n    // Get actual size via head\n    const headResult = await this.bucket.head(path)\n\n    return {\n      path,\n      disk: this.config.disk,\n      fullPath: path,\n      size: headResult?.size ?? options.size ?? 0,\n      mimeType: options.mimeType ?? 'application/octet-stream',\n      uploadedAt: new Date(),\n    }\n  }\n\n  // ============================================\n  // IMultipartProvider - Multipart upload methods\n  // ============================================\n\n  getBucket(): string {\n    return this.config.binding\n  }\n\n  async headObject(key: string): Promise<HeadObjectResult | null> {\n    const obj = await this.bucket.head(key)\n    if (!obj) {\n      return null\n    }\n    return {\n      size: obj.size,\n      contentType: obj.httpMetadata?.contentType,\n      metadata: obj.customMetadata,\n    }\n  }\n\n  async deleteObjects(keys: string[]): Promise<DeleteObjectsResult> {\n    if (keys.length === 0) {\n      return { deleted: 0, errors: [] }\n    }\n\n    await this.bucket.delete(keys)\n\n    return {\n      deleted: keys.length,\n      errors: [],\n    }\n  }\n\n  async createMultipartUpload(\n    key: string,\n    options?: CreateMultipartOptions\n  ): Promise<CreateMultipartResult> {\n    const upload = await this.bucket.createMultipartUpload(key, {\n      httpMetadata: {\n        contentType: options?.contentType,\n        cacheControl: options?.cacheControl,\n      },\n      customMetadata: options?.metadata,\n    })\n\n    // Track upload for listMultipartUploads\n    await this.bucket.put(\n      `${MULTIPART_PREFIX}${upload.uploadId}.json`,\n      JSON.stringify({ key: upload.key, uploadId: upload.uploadId, initiated: new Date().toISOString() }),\n      { httpMetadata: { contentType: 'application/json' } }\n    )\n\n    return {\n      uploadId: upload.uploadId,\n      key: upload.key,\n    }\n  }\n\n  async uploadPart(\n    key: string,\n    uploadId: string,\n    partNumber: number,\n    body: Uint8Array\n  ): Promise<UploadPartResult> {\n    const upload = this.bucket.resumeMultipartUpload(key, uploadId)\n    const part = await upload.uploadPart(partNumber, body)\n\n    // Track part for listParts\n    await this.bucket.put(\n      `${PARTS_PREFIX}${uploadId}/${partNumber}`,\n      JSON.stringify({ partNumber: part.partNumber, etag: part.etag, size: body.length }),\n      { httpMetadata: { contentType: 'application/json' } }\n    )\n\n    return {\n      etag: part.etag,\n      partNumber: part.partNumber,\n    }\n  }\n\n  async completeMultipartUpload(\n    key: string,\n    uploadId: string,\n    parts: CompletedPart[]\n  ): Promise<CompleteMultipartResult> {\n    const upload = this.bucket.resumeMultipartUpload(key, uploadId)\n    const result = await upload.complete(\n      parts.map((p) => ({\n        partNumber: p.partNumber,\n        etag: p.etag,\n      }))\n    )\n\n    await this.cleanupTrackingObjects(uploadId)\n\n    return {\n      key: result.key,\n    }\n  }\n\n  async abortMultipartUpload(key: string, uploadId: string): Promise<void> {\n    const upload = this.bucket.resumeMultipartUpload(key, uploadId)\n    await upload.abort()\n\n    await this.cleanupTrackingObjects(uploadId)\n  }\n\n  async listParts(\n    _key: string,\n    uploadId: string,\n    partNumberMarker?: string\n  ): Promise<ListPartsResult> {\n    const prefix = `${PARTS_PREFIX}${uploadId}/`\n    const listed = await this.bucket.list({\n      prefix,\n      cursor: partNumberMarker,\n    })\n\n    const parts = await Promise.all(\n      listed.objects.map(async (obj) => {\n        const data = await this.bucket.get(obj.key)\n        if (!data) {\n          return null\n        }\n        return JSON.parse(await data.text()) as { partNumber: number; etag: string; size: number }\n      })\n    )\n\n    const validParts = parts\n      .filter((p): p is NonNullable<typeof p> => p !== null)\n      .sort((a, b) => a.partNumber - b.partNumber)\n\n    return {\n      parts: validParts,\n      isTruncated: listed.truncated,\n      nextPartNumberMarker: listed.truncated ? listed.cursor : undefined,\n    }\n  }\n\n  async listMultipartUploads(\n    keyMarker?: string,\n    _uploadIdMarker?: string\n  ): Promise<ListMultipartUploadsResult> {\n    const listed = await this.bucket.list({\n      prefix: MULTIPART_PREFIX,\n      cursor: keyMarker,\n    })\n\n    const uploads = await Promise.all(\n      listed.objects.map(async (obj) => {\n        const data = await this.bucket.get(obj.key)\n        if (!data) {\n          return null\n        }\n        const parsed = JSON.parse(await data.text()) as { key: string; uploadId: string; initiated: string }\n        return {\n          key: parsed.key,\n          uploadId: parsed.uploadId,\n          initiated: new Date(parsed.initiated),\n        }\n      })\n    )\n\n    return {\n      uploads: uploads.filter((u): u is NonNullable<typeof u> => u !== null),\n      isTruncated: listed.truncated,\n      nextKeyMarker: listed.truncated ? listed.cursor : undefined,\n      nextUploadIdMarker: undefined,\n    }\n  }\n\n  // ============================================\n  // Private helpers\n  // ============================================\n\n  private async cleanupTrackingObjects(uploadId: string): Promise<void> {\n    // Delete part tracking objects\n    const partsPrefix = `${PARTS_PREFIX}${uploadId}/`\n    let cursor: string | undefined\n    const keysToDelete: string[] = []\n\n    do {\n      const listed = await this.bucket.list({ prefix: partsPrefix, cursor })\n      for (const obj of listed.objects) {\n        keysToDelete.push(obj.key)\n      }\n      cursor = listed.truncated ? listed.cursor : undefined\n    } while (cursor)\n\n    // Delete multipart tracking object\n    keysToDelete.push(`${MULTIPART_PREFIX}${uploadId}.json`)\n\n    if (keysToDelete.length > 0) {\n      await this.bucket.delete(keysToDelete)\n    }\n  }\n}\n"],"mappings":";;;;;AAmBA,MAAM,gBAAgB,IAAI,OAAO;AACjC,MAAM,mBAAmB;AACzB,MAAM,eAAe;;;;;;;;;AAUrB,IAAa,oBAAb,MAA6D;CAIxC;CACA;CACA;CALnB;CAEA,YACE,QACA,QACA,KACA,aACA;EAJiB,KAAA,SAAA;EACA,KAAA,SAAA;EACA,KAAA,MAAA;EAGjB,KAAK,gBAAgB,aAAa,YAAY;;CAGhD,MAAM,OACJ,MACA,MACA,SACuB;EACvB,MAAM,iBAAyC,EAAE,GAAG,QAAQ,UAAU;EACtE,IAAI,QAAQ,SACV,eAAe,YAAY,QAAQ;EAGrC,MAAM,KAAK,OAAO,IAAI,MAAM,MAA+E;GACzG,cAAc,EACZ,aAAa,QAAQ,UACtB;GACD;GACD,CAAC;EAEF,OAAO;GACL;GACA,MAAM,KAAK,OAAO;GAClB,UAAU;GACV,MAAM,QAAQ;GACd,UAAU,QAAQ,YAAY;GAC9B,4BAAY,IAAI,MAAM;GACvB;;CAGH,MAAM,SAAS,MAAuC;EACpD,MAAM,MAAM,MAAM,KAAK,OAAO,IAAI,KAAK;EAEvC,IAAI,CAAC,KACH,MAAM,IAAI,aAAa,qCAAqC,KAAK,GAAG;EAItE,MAAM,UAAU;EAEhB,OAAO;GACL,gBAAgB,QAAQ;GACxB,aAAa,IAAI,cAAc,eAAe;GAC9C,MAAM,IAAI;GACV,UAAU,IAAI;GACd,gBAAgB,QAAQ,MAAM;GAC9B,qBAAqB,QAAQ,OAAO;GACrC;;CAGH,MAAM,OAAO,MAA6B;EACxC,MAAM,KAAK,OAAO,OAAO,KAAK;;CAGhC,MAAM,OAAO,MAAgC;EAE3C,OAAO,MADY,KAAK,OAAO,KAAK,KAAK,KACzB;;CAGlB,MAAM,gBACJ,MACA,QACA,WAC6B;EAC7B,MAAM,SAAS,KAAK,IAAI;EACxB,IAAI,CAAC,QACH,MAAM,IAAI,aAAa,uDAAuD;EAQhF,OAAO;GACL,KAAA,MAHgB,QAAQ,GADD,GADJ,KAAK,cAAc,GAAG,KAAK,OAAO,KAAK,GAAG,OAC5B,UAAU,UACJ,QAAQ,EAAE,WAAW,CAAC;GAI7D;GACA,WAAW,IAAI,KAAK,KAAK,KAAK,GAAG,YAAY,IAAK;GAClD;GACD;;CAGH,MAAM,cACJ,MACA,MACA,SACuB;EACvB,MAAM,kBAAkB,MAAM,KAAK,OAAO,sBAAsB,MAAM;GACpE,cAAc,EACZ,aAAa,QAAQ,UACtB;GACD,gBAAgB,QAAQ;GACzB,CAAC;EAEF,MAAM,QAA0B,EAAE;EAElC,IAAI;GACF,IAAI,gBAAgB,gBAAgB;IAClC,MAAM,SAAU,KAAoC,WAAW;IAC/D,IAAI,SAAS,IAAI,WAAW,EAAE;IAC9B,IAAI,aAAa;IAEjB,OAAO,MAAM;KACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;KAE3C,IAAI,OAAO;MACT,MAAM,YAAY,IAAI,WAAW,OAAO,SAAS,MAAM,OAAO;MAC9D,UAAU,IAAI,QAAQ,EAAE;MACxB,UAAU,IAAI,OAAO,OAAO,OAAO;MACnC,SAAS;;KAGX,OAAO,OAAO,UAAU,eAAe;MACrC,MAAM,WAAW,OAAO,MAAM,GAAG,cAAc;MAC/C,SAAS,OAAO,MAAM,cAAc;MACpC,MAAM,OAAO,MAAM,gBAAgB,WAAW,YAAY,SAAS;MACnE,MAAM,KAAK,KAAK;MAChB;;KAGF,IAAI,MAAM;MAER,IAAI,OAAO,SAAS,GAAG;OACrB,MAAM,OAAO,MAAM,gBAAgB,WAAW,YAAY,OAAO;OACjE,MAAM,KAAK,KAAK;;MAElB;;;UAGC,IAAI,SAAS,QAAQ,SAAS,KAAA,GAAW;IAE9C,MAAM,OAAO,MAAM,gBAAgB,WAAW,GAAG,KAAsD;IACvG,MAAM,KAAK,KAAK;;GAGlB,MAAM,gBAAgB,SAAS,MAAM;WAC9B,OAAO;GACd,MAAM,gBAAgB,OAAO;GAC7B,MAAM;;EAIR,MAAM,aAAa,MAAM,KAAK,OAAO,KAAK,KAAK;EAE/C,OAAO;GACL;GACA,MAAM,KAAK,OAAO;GAClB,UAAU;GACV,MAAM,YAAY,QAAQ,QAAQ,QAAQ;GAC1C,UAAU,QAAQ,YAAY;GAC9B,4BAAY,IAAI,MAAM;GACvB;;CAOH,YAAoB;EAClB,OAAO,KAAK,OAAO;;CAGrB,MAAM,WAAW,KAA+C;EAC9D,MAAM,MAAM,MAAM,KAAK,OAAO,KAAK,IAAI;EACvC,IAAI,CAAC,KACH,OAAO;EAET,OAAO;GACL,MAAM,IAAI;GACV,aAAa,IAAI,cAAc;GAC/B,UAAU,IAAI;GACf;;CAGH,MAAM,cAAc,MAA8C;EAChE,IAAI,KAAK,WAAW,GAClB,OAAO;GAAE,SAAS;GAAG,QAAQ,EAAE;GAAE;EAGnC,MAAM,KAAK,OAAO,OAAO,KAAK;EAE9B,OAAO;GACL,SAAS,KAAK;GACd,QAAQ,EAAE;GACX;;CAGH,MAAM,sBACJ,KACA,SACgC;EAChC,MAAM,SAAS,MAAM,KAAK,OAAO,sBAAsB,KAAK;GAC1D,cAAc;IACZ,aAAa,SAAS;IACtB,cAAc,SAAS;IACxB;GACD,gBAAgB,SAAS;GAC1B,CAAC;EAGF,MAAM,KAAK,OAAO,IAChB,GAAG,mBAAmB,OAAO,SAAS,QACtC,KAAK,UAAU;GAAE,KAAK,OAAO;GAAK,UAAU,OAAO;GAAU,4BAAW,IAAI,MAAM,EAAC,aAAa;GAAE,CAAC,EACnG,EAAE,cAAc,EAAE,aAAa,oBAAoB,EAAE,CACtD;EAED,OAAO;GACL,UAAU,OAAO;GACjB,KAAK,OAAO;GACb;;CAGH,MAAM,WACJ,KACA,UACA,YACA,MAC2B;EAE3B,MAAM,OAAO,MADE,KAAK,OAAO,sBAAsB,KAAK,SAC7B,CAAC,WAAW,YAAY,KAAK;EAGtD,MAAM,KAAK,OAAO,IAChB,GAAG,eAAe,SAAS,GAAG,cAC9B,KAAK,UAAU;GAAE,YAAY,KAAK;GAAY,MAAM,KAAK;GAAM,MAAM,KAAK;GAAQ,CAAC,EACnF,EAAE,cAAc,EAAE,aAAa,oBAAoB,EAAE,CACtD;EAED,OAAO;GACL,MAAM,KAAK;GACX,YAAY,KAAK;GAClB;;CAGH,MAAM,wBACJ,KACA,UACA,OACkC;EAElC,MAAM,SAAS,MADA,KAAK,OAAO,sBAAsB,KAAK,SAC3B,CAAC,SAC1B,MAAM,KAAK,OAAO;GAChB,YAAY,EAAE;GACd,MAAM,EAAE;GACT,EAAE,CACJ;EAED,MAAM,KAAK,uBAAuB,SAAS;EAE3C,OAAO,EACL,KAAK,OAAO,KACb;;CAGH,MAAM,qBAAqB,KAAa,UAAiC;EAEvE,MADe,KAAK,OAAO,sBAAsB,KAAK,SAC1C,CAAC,OAAO;EAEpB,MAAM,KAAK,uBAAuB,SAAS;;CAG7C,MAAM,UACJ,MACA,UACA,kBAC0B;EAC1B,MAAM,SAAS,GAAG,eAAe,SAAS;EAC1C,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK;GACpC;GACA,QAAQ;GACT,CAAC;EAgBF,OAAO;GACL,QALiB,MAVC,QAAQ,IAC1B,OAAO,QAAQ,IAAI,OAAO,QAAQ;IAChC,MAAM,OAAO,MAAM,KAAK,OAAO,IAAI,IAAI,IAAI;IAC3C,IAAI,CAAC,MACH,OAAO;IAET,OAAO,KAAK,MAAM,MAAM,KAAK,MAAM,CAAC;KACpC,CACH,EAGE,QAAQ,MAAkC,MAAM,KAAK,CACrD,MAAM,GAAG,MAAM,EAAE,aAAa,EAAE,WAGhB;GACjB,aAAa,OAAO;GACpB,sBAAsB,OAAO,YAAY,OAAO,SAAS,KAAA;GAC1D;;CAGH,MAAM,qBACJ,WACA,iBACqC;EACrC,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK;GACpC,QAAQ;GACR,QAAQ;GACT,CAAC;EAiBF,OAAO;GACL,UAAS,MAhBW,QAAQ,IAC5B,OAAO,QAAQ,IAAI,OAAO,QAAQ;IAChC,MAAM,OAAO,MAAM,KAAK,OAAO,IAAI,IAAI,IAAI;IAC3C,IAAI,CAAC,MACH,OAAO;IAET,MAAM,SAAS,KAAK,MAAM,MAAM,KAAK,MAAM,CAAC;IAC5C,OAAO;KACL,KAAK,OAAO;KACZ,UAAU,OAAO;KACjB,WAAW,IAAI,KAAK,OAAO,UAAU;KACtC;KACD,CACH,EAGkB,QAAQ,MAAkC,MAAM,KAAK;GACtE,aAAa,OAAO;GACpB,eAAe,OAAO,YAAY,OAAO,SAAS,KAAA;GAClD,oBAAoB,KAAA;GACrB;;CAOH,MAAc,uBAAuB,UAAiC;EAEpE,MAAM,cAAc,GAAG,eAAe,SAAS;EAC/C,IAAI;EACJ,MAAM,eAAyB,EAAE;EAEjC,GAAG;GACD,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK;IAAE,QAAQ;IAAa;IAAQ,CAAC;GACtE,KAAK,MAAM,OAAO,OAAO,SACvB,aAAa,KAAK,IAAI,IAAI;GAE5B,SAAS,OAAO,YAAY,OAAO,SAAS,KAAA;WACrC;EAGT,aAAa,KAAK,GAAG,mBAAmB,SAAS,OAAO;EAExD,IAAI,aAAa,SAAS,GACxB,MAAM,KAAK,OAAO,OAAO,aAAa"}
+{"version":3,"file":"r2-storage.provider-DCxQt9dD.mjs","names":[],"sources":["../src/storage/providers/r2-storage.provider.ts"],"sourcesContent":["import { type StratalEnv } from '../../env'\nimport { signUrl } from '../../router/signed-url'\nimport type { DownloadResult, PresignedUrlResult, UploadOptions, UploadResult } from '../contracts'\nimport { StorageError } from '../storage.error'\nimport type { StorageEntry, StorageRouteConfig } from '../types'\nimport type {\n  CompletedPart,\n  CompleteMultipartResult,\n  CreateMultipartOptions,\n  CreateMultipartResult,\n  DeleteObjectsResult,\n  HeadObjectResult,\n  IMultipartProvider,\n  ListMultipartUploadsResult,\n  ListPartsResult,\n  UploadPartResult,\n} from './multipart-provider.interface'\nimport type { StreamingBlobPayloadInputTypes } from './storage-provider.interface'\n\nconst MIN_PART_SIZE = 5 * 1024 * 1024 // 5MB\nconst MULTIPART_PREFIX = '__multipart/'\nconst PARTS_PREFIX = '__parts/'\n\n/**\n * R2 Storage Provider\n * Implements storage operations using native Cloudflare R2 bindings\n *\n * Implements IMultipartProvider for multipart upload support needed by TUS.\n * Tracks multipart upload metadata using companion R2 objects so that\n * listParts/listMultipartUploads work in all environments (local, test, prod).\n */\nexport class R2StorageProvider implements IMultipartProvider {\n  private readonly routeBasePath: string\n\n  constructor(\n    private readonly config: StorageEntry,\n    private readonly bucket: R2Bucket,\n    private readonly env: StratalEnv,\n    routeConfig?: StorageRouteConfig\n  ) {\n    this.routeBasePath = routeConfig?.basePath ?? '/storage'\n  }\n\n  async upload(\n    body: StreamingBlobPayloadInputTypes,\n    path: string,\n    options: UploadOptions\n  ): Promise<UploadResult> {\n    const customMetadata: Record<string, string> = { ...options.metadata }\n    if (options.tagging) {\n      customMetadata['x-tags'] = options.tagging\n    }\n\n    await this.bucket.put(path, body as ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, {\n      httpMetadata: {\n        contentType: options.mimeType,\n      },\n      customMetadata,\n    })\n\n    return {\n      path,\n      disk: this.config.disk,\n      fullPath: path,\n      size: options.size,\n      mimeType: options.mimeType ?? 'application/octet-stream',\n      uploadedAt: new Date(),\n    }\n  }\n\n  async download(path: string): Promise<DownloadResult> {\n    const obj = await this.bucket.get(path)\n\n    if (!obj) {\n      throw new StorageError(`Storage object not found at path \"${path}\"`)\n    }\n\n    // R2ObjectBody has body, text(), arrayBuffer(), etc.\n    const objBody = obj\n\n    return {\n      toStream: () => objBody.body as ReadableStream<Uint8Array>,\n      contentType: obj.httpMetadata?.contentType ?? 'application/octet-stream',\n      size: obj.size,\n      metadata: obj.customMetadata,\n      toString: () => objBody.text(),\n      toArrayBuffer: () => objBody.bytes(),\n    }\n  }\n\n  async delete(path: string): Promise<void> {\n    await this.bucket.delete(path)\n  }\n\n  async exists(path: string): Promise<boolean> {\n    const head = await this.bucket.head(path)\n    return head !== null\n  }\n\n  async getPresignedUrl(\n    path: string,\n    method: 'GET' | 'PUT' | 'DELETE' | 'HEAD',\n    expiresIn: number\n  ): Promise<PresignedUrlResult> {\n    const secret = this.env.APP_SECRET;\n    if (!secret) {\n      throw new StorageError('APP_SECRET is required for generating presigned URLs')\n    }\n\n    // Build a relative URL pointing to the StorageController route\n    const routePath = `${this.routeBasePath}/${this.config.disk}/${path}`\n    const urlWithMethod = `${routePath}?method=${method}`\n    const url = await signUrl(urlWithMethod, secret, { expiresIn })\n\n    return {\n      url,\n      expiresIn,\n      expiresAt: new Date(Date.now() + expiresIn * 1000),\n      method,\n    }\n  }\n\n  async chunkedUpload(\n    body: StreamingBlobPayloadInputTypes,\n    path: string,\n    options: Omit<UploadOptions, 'size'> & { size?: number }\n  ): Promise<UploadResult> {\n    const multipartUpload = await this.bucket.createMultipartUpload(path, {\n      httpMetadata: {\n        contentType: options.mimeType,\n      },\n      customMetadata: options.metadata,\n    })\n\n    const parts: R2UploadedPart[] = []\n\n    try {\n      if (body instanceof ReadableStream) {\n        const reader = (body as ReadableStream<Uint8Array>).getReader()\n        let buffer = new Uint8Array(0)\n        let partNumber = 1\n\n        while (true) {\n          const { done, value } = await reader.read()\n\n          if (value) {\n            const newBuffer = new Uint8Array(buffer.length + value.length)\n            newBuffer.set(buffer, 0)\n            newBuffer.set(value, buffer.length)\n            buffer = newBuffer\n          }\n\n          while (buffer.length >= MIN_PART_SIZE) {\n            const partData = buffer.slice(0, MIN_PART_SIZE)\n            buffer = buffer.slice(MIN_PART_SIZE)\n            const part = await multipartUpload.uploadPart(partNumber, partData)\n            parts.push(part)\n            partNumber++\n          }\n\n          if (done) {\n            // Upload remaining buffer as final part\n            if (buffer.length > 0) {\n              const part = await multipartUpload.uploadPart(partNumber, buffer)\n              parts.push(part)\n            }\n            break\n          }\n        }\n      } else if (body !== null && body !== undefined) {\n        // Non-stream body: upload as single part\n        const part = await multipartUpload.uploadPart(1, body as ArrayBuffer | ArrayBufferView | string | Blob)\n        parts.push(part)\n      }\n\n      await multipartUpload.complete(parts)\n    } catch (error) {\n      await multipartUpload.abort()\n      throw error\n    }\n\n    // Get actual size via head\n    const headResult = await this.bucket.head(path)\n\n    return {\n      path,\n      disk: this.config.disk,\n      fullPath: path,\n      size: headResult?.size ?? options.size ?? 0,\n      mimeType: options.mimeType ?? 'application/octet-stream',\n      uploadedAt: new Date(),\n    }\n  }\n\n  // ============================================\n  // IMultipartProvider - Multipart upload methods\n  // ============================================\n\n  getBucket(): string {\n    return this.config.binding\n  }\n\n  async headObject(key: string): Promise<HeadObjectResult | null> {\n    const obj = await this.bucket.head(key)\n    if (!obj) {\n      return null\n    }\n    return {\n      size: obj.size,\n      contentType: obj.httpMetadata?.contentType,\n      metadata: obj.customMetadata,\n    }\n  }\n\n  async deleteObjects(keys: string[]): Promise<DeleteObjectsResult> {\n    if (keys.length === 0) {\n      return { deleted: 0, errors: [] }\n    }\n\n    await this.bucket.delete(keys)\n\n    return {\n      deleted: keys.length,\n      errors: [],\n    }\n  }\n\n  async createMultipartUpload(\n    key: string,\n    options?: CreateMultipartOptions\n  ): Promise<CreateMultipartResult> {\n    const upload = await this.bucket.createMultipartUpload(key, {\n      httpMetadata: {\n        contentType: options?.contentType,\n        cacheControl: options?.cacheControl,\n      },\n      customMetadata: options?.metadata,\n    })\n\n    // Track upload for listMultipartUploads\n    await this.bucket.put(\n      `${MULTIPART_PREFIX}${upload.uploadId}.json`,\n      JSON.stringify({ key: upload.key, uploadId: upload.uploadId, initiated: new Date().toISOString() }),\n      { httpMetadata: { contentType: 'application/json' } }\n    )\n\n    return {\n      uploadId: upload.uploadId,\n      key: upload.key,\n    }\n  }\n\n  async uploadPart(\n    key: string,\n    uploadId: string,\n    partNumber: number,\n    body: Uint8Array\n  ): Promise<UploadPartResult> {\n    const upload = this.bucket.resumeMultipartUpload(key, uploadId)\n    const part = await upload.uploadPart(partNumber, body)\n\n    // Track part for listParts\n    await this.bucket.put(\n      `${PARTS_PREFIX}${uploadId}/${partNumber}`,\n      JSON.stringify({ partNumber: part.partNumber, etag: part.etag, size: body.length }),\n      { httpMetadata: { contentType: 'application/json' } }\n    )\n\n    return {\n      etag: part.etag,\n      partNumber: part.partNumber,\n    }\n  }\n\n  async completeMultipartUpload(\n    key: string,\n    uploadId: string,\n    parts: CompletedPart[]\n  ): Promise<CompleteMultipartResult> {\n    const upload = this.bucket.resumeMultipartUpload(key, uploadId)\n    const result = await upload.complete(\n      parts.map((p) => ({\n        partNumber: p.partNumber,\n        etag: p.etag,\n      }))\n    )\n\n    await this.cleanupTrackingObjects(uploadId)\n\n    return {\n      key: result.key,\n    }\n  }\n\n  async abortMultipartUpload(key: string, uploadId: string): Promise<void> {\n    const upload = this.bucket.resumeMultipartUpload(key, uploadId)\n    await upload.abort()\n\n    await this.cleanupTrackingObjects(uploadId)\n  }\n\n  async listParts(\n    _key: string,\n    uploadId: string,\n    partNumberMarker?: string\n  ): Promise<ListPartsResult> {\n    const prefix = `${PARTS_PREFIX}${uploadId}/`\n    const listed = await this.bucket.list({\n      prefix,\n      cursor: partNumberMarker,\n    })\n\n    const parts = await Promise.all(\n      listed.objects.map(async (obj) => {\n        const data = await this.bucket.get(obj.key)\n        if (!data) {\n          return null\n        }\n        return JSON.parse(await data.text()) as { partNumber: number; etag: string; size: number }\n      })\n    )\n\n    const validParts = parts\n      .filter((p): p is NonNullable<typeof p> => p !== null)\n      .sort((a, b) => a.partNumber - b.partNumber)\n\n    return {\n      parts: validParts,\n      isTruncated: listed.truncated,\n      nextPartNumberMarker: listed.truncated ? listed.cursor : undefined,\n    }\n  }\n\n  async listMultipartUploads(\n    keyMarker?: string,\n    _uploadIdMarker?: string\n  ): Promise<ListMultipartUploadsResult> {\n    const listed = await this.bucket.list({\n      prefix: MULTIPART_PREFIX,\n      cursor: keyMarker,\n    })\n\n    const uploads = await Promise.all(\n      listed.objects.map(async (obj) => {\n        const data = await this.bucket.get(obj.key)\n        if (!data) {\n          return null\n        }\n        const parsed = JSON.parse(await data.text()) as { key: string; uploadId: string; initiated: string }\n        return {\n          key: parsed.key,\n          uploadId: parsed.uploadId,\n          initiated: new Date(parsed.initiated),\n        }\n      })\n    )\n\n    return {\n      uploads: uploads.filter((u): u is NonNullable<typeof u> => u !== null),\n      isTruncated: listed.truncated,\n      nextKeyMarker: listed.truncated ? listed.cursor : undefined,\n      nextUploadIdMarker: undefined,\n    }\n  }\n\n  // ============================================\n  // Private helpers\n  // ============================================\n\n  private async cleanupTrackingObjects(uploadId: string): Promise<void> {\n    // Delete part tracking objects\n    const partsPrefix = `${PARTS_PREFIX}${uploadId}/`\n    let cursor: string | undefined\n    const keysToDelete: string[] = []\n\n    do {\n      const listed = await this.bucket.list({ prefix: partsPrefix, cursor })\n      for (const obj of listed.objects) {\n        keysToDelete.push(obj.key)\n      }\n      cursor = listed.truncated ? listed.cursor : undefined\n    } while (cursor)\n\n    // Delete multipart tracking object\n    keysToDelete.push(`${MULTIPART_PREFIX}${uploadId}.json`)\n\n    if (keysToDelete.length > 0) {\n      await this.bucket.delete(keysToDelete)\n    }\n  }\n}\n"],"mappings":";;;;;AAmBA,MAAM,gBAAgB,IAAI,OAAO;AACjC,MAAM,mBAAmB;AACzB,MAAM,eAAe;;;;;;;;;AAUrB,IAAa,oBAAb,MAA6D;CAIxC;CACA;CACA;CALnB;CAEA,YACE,QACA,QACA,KACA,aACA;EAJiB,KAAA,SAAA;EACA,KAAA,SAAA;EACA,KAAA,MAAA;EAGjB,KAAK,gBAAgB,aAAa,YAAY;CAChD;CAEA,MAAM,OACJ,MACA,MACA,SACuB;EACvB,MAAM,iBAAyC,EAAE,GAAG,QAAQ,SAAS;EACrE,IAAI,QAAQ,SACV,eAAe,YAAY,QAAQ;EAGrC,MAAM,KAAK,OAAO,IAAI,MAAM,MAA+E;GACzG,cAAc,EACZ,aAAa,QAAQ,SACvB;GACA;EACF,CAAC;EAED,OAAO;GACL;GACA,MAAM,KAAK,OAAO;GAClB,UAAU;GACV,MAAM,QAAQ;GACd,UAAU,QAAQ,YAAY;GAC9B,4BAAY,IAAI,KAAK;EACvB;CACF;CAEA,MAAM,SAAS,MAAuC;EACpD,MAAM,MAAM,MAAM,KAAK,OAAO,IAAI,IAAI;EAEtC,IAAI,CAAC,KACH,MAAM,IAAI,aAAa,qCAAqC,KAAK,EAAE;EAIrE,MAAM,UAAU;EAEhB,OAAO;GACL,gBAAgB,QAAQ;GACxB,aAAa,IAAI,cAAc,eAAe;GAC9C,MAAM,IAAI;GACV,UAAU,IAAI;GACd,gBAAgB,QAAQ,KAAK;GAC7B,qBAAqB,QAAQ,MAAM;EACrC;CACF;CAEA,MAAM,OAAO,MAA6B;EACxC,MAAM,KAAK,OAAO,OAAO,IAAI;CAC/B;CAEA,MAAM,OAAO,MAAgC;EAE3C,OAAO,MADY,KAAK,OAAO,KAAK,IAAI,MACxB;CAClB;CAEA,MAAM,gBACJ,MACA,QACA,WAC6B;EAC7B,MAAM,SAAS,KAAK,IAAI;EACxB,IAAI,CAAC,QACH,MAAM,IAAI,aAAa,sDAAsD;EAQ/E,OAAO;GACL,KAAA,MAHgB,QAAQ,GADD,GADJ,KAAK,cAAc,GAAG,KAAK,OAAO,KAAK,GAAG,OAC5B,UAAU,UACJ,QAAQ,EAAE,UAAU,CAAC;GAI5D;GACA,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,YAAY,GAAI;GACjD;EACF;CACF;CAEA,MAAM,cACJ,MACA,MACA,SACuB;EACvB,MAAM,kBAAkB,MAAM,KAAK,OAAO,sBAAsB,MAAM;GACpE,cAAc,EACZ,aAAa,QAAQ,SACvB;GACA,gBAAgB,QAAQ;EAC1B,CAAC;EAED,MAAM,QAA0B,CAAC;EAEjC,IAAI;GACF,IAAI,gBAAgB,gBAAgB;IAClC,MAAM,SAAU,KAAoC,UAAU;IAC9D,IAAI,SAAS,IAAI,WAAW,CAAC;IAC7B,IAAI,aAAa;IAEjB,OAAO,MAAM;KACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;KAE1C,IAAI,OAAO;MACT,MAAM,YAAY,IAAI,WAAW,OAAO,SAAS,MAAM,MAAM;MAC7D,UAAU,IAAI,QAAQ,CAAC;MACvB,UAAU,IAAI,OAAO,OAAO,MAAM;MAClC,SAAS;KACX;KAEA,OAAO,OAAO,UAAU,eAAe;MACrC,MAAM,WAAW,OAAO,MAAM,GAAG,aAAa;MAC9C,SAAS,OAAO,MAAM,aAAa;MACnC,MAAM,OAAO,MAAM,gBAAgB,WAAW,YAAY,QAAQ;MAClE,MAAM,KAAK,IAAI;MACf;KACF;KAEA,IAAI,MAAM;MAER,IAAI,OAAO,SAAS,GAAG;OACrB,MAAM,OAAO,MAAM,gBAAgB,WAAW,YAAY,MAAM;OAChE,MAAM,KAAK,IAAI;MACjB;MACA;KACF;IACF;GACF,OAAO,IAAI,SAAS,QAAQ,SAAS,KAAA,GAAW;IAE9C,MAAM,OAAO,MAAM,gBAAgB,WAAW,GAAG,IAAqD;IACtG,MAAM,KAAK,IAAI;GACjB;GAEA,MAAM,gBAAgB,SAAS,KAAK;EACtC,SAAS,OAAO;GACd,MAAM,gBAAgB,MAAM;GAC5B,MAAM;EACR;EAGA,MAAM,aAAa,MAAM,KAAK,OAAO,KAAK,IAAI;EAE9C,OAAO;GACL;GACA,MAAM,KAAK,OAAO;GAClB,UAAU;GACV,MAAM,YAAY,QAAQ,QAAQ,QAAQ;GAC1C,UAAU,QAAQ,YAAY;GAC9B,4BAAY,IAAI,KAAK;EACvB;CACF;CAMA,YAAoB;EAClB,OAAO,KAAK,OAAO;CACrB;CAEA,MAAM,WAAW,KAA+C;EAC9D,MAAM,MAAM,MAAM,KAAK,OAAO,KAAK,GAAG;EACtC,IAAI,CAAC,KACH,OAAO;EAET,OAAO;GACL,MAAM,IAAI;GACV,aAAa,IAAI,cAAc;GAC/B,UAAU,IAAI;EAChB;CACF;CAEA,MAAM,cAAc,MAA8C;EAChE,IAAI,KAAK,WAAW,GAClB,OAAO;GAAE,SAAS;GAAG,QAAQ,CAAC;EAAE;EAGlC,MAAM,KAAK,OAAO,OAAO,IAAI;EAE7B,OAAO;GACL,SAAS,KAAK;GACd,QAAQ,CAAC;EACX;CACF;CAEA,MAAM,sBACJ,KACA,SACgC;EAChC,MAAM,SAAS,MAAM,KAAK,OAAO,sBAAsB,KAAK;GAC1D,cAAc;IACZ,aAAa,SAAS;IACtB,cAAc,SAAS;GACzB;GACA,gBAAgB,SAAS;EAC3B,CAAC;EAGD,MAAM,KAAK,OAAO,IAChB,GAAG,mBAAmB,OAAO,SAAS,QACtC,KAAK,UAAU;GAAE,KAAK,OAAO;GAAK,UAAU,OAAO;GAAU,4BAAW,IAAI,KAAK,GAAE,YAAY;EAAE,CAAC,GAClG,EAAE,cAAc,EAAE,aAAa,mBAAmB,EAAE,CACtD;EAEA,OAAO;GACL,UAAU,OAAO;GACjB,KAAK,OAAO;EACd;CACF;CAEA,MAAM,WACJ,KACA,UACA,YACA,MAC2B;EAE3B,MAAM,OAAO,MADE,KAAK,OAAO,sBAAsB,KAAK,QAC9B,EAAE,WAAW,YAAY,IAAI;EAGrD,MAAM,KAAK,OAAO,IAChB,GAAG,eAAe,SAAS,GAAG,cAC9B,KAAK,UAAU;GAAE,YAAY,KAAK;GAAY,MAAM,KAAK;GAAM,MAAM,KAAK;EAAO,CAAC,GAClF,EAAE,cAAc,EAAE,aAAa,mBAAmB,EAAE,CACtD;EAEA,OAAO;GACL,MAAM,KAAK;GACX,YAAY,KAAK;EACnB;CACF;CAEA,MAAM,wBACJ,KACA,UACA,OACkC;EAElC,MAAM,SAAS,MADA,KAAK,OAAO,sBAAsB,KAAK,QAC5B,EAAE,SAC1B,MAAM,KAAK,OAAO;GAChB,YAAY,EAAE;GACd,MAAM,EAAE;EACV,EAAE,CACJ;EAEA,MAAM,KAAK,uBAAuB,QAAQ;EAE1C,OAAO,EACL,KAAK,OAAO,IACd;CACF;CAEA,MAAM,qBAAqB,KAAa,UAAiC;EAEvE,MADe,KAAK,OAAO,sBAAsB,KAAK,QAC3C,EAAE,MAAM;EAEnB,MAAM,KAAK,uBAAuB,QAAQ;CAC5C;CAEA,MAAM,UACJ,MACA,UACA,kBAC0B;EAC1B,MAAM,SAAS,GAAG,eAAe,SAAS;EAC1C,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK;GACpC;GACA,QAAQ;EACV,CAAC;EAgBD,OAAO;GACL,QALiB,MAVC,QAAQ,IAC1B,OAAO,QAAQ,IAAI,OAAO,QAAQ;IAChC,MAAM,OAAO,MAAM,KAAK,OAAO,IAAI,IAAI,GAAG;IAC1C,IAAI,CAAC,MACH,OAAO;IAET,OAAO,KAAK,MAAM,MAAM,KAAK,KAAK,CAAC;GACrC,CAAC,CACH,GAGG,QAAQ,MAAkC,MAAM,IAAI,EACpD,MAAM,GAAG,MAAM,EAAE,aAAa,EAAE,UAGjB;GAChB,aAAa,OAAO;GACpB,sBAAsB,OAAO,YAAY,OAAO,SAAS,KAAA;EAC3D;CACF;CAEA,MAAM,qBACJ,WACA,iBACqC;EACrC,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK;GACpC,QAAQ;GACR,QAAQ;EACV,CAAC;EAiBD,OAAO;GACL,UAAS,MAhBW,QAAQ,IAC5B,OAAO,QAAQ,IAAI,OAAO,QAAQ;IAChC,MAAM,OAAO,MAAM,KAAK,OAAO,IAAI,IAAI,GAAG;IAC1C,IAAI,CAAC,MACH,OAAO;IAET,MAAM,SAAS,KAAK,MAAM,MAAM,KAAK,KAAK,CAAC;IAC3C,OAAO;KACL,KAAK,OAAO;KACZ,UAAU,OAAO;KACjB,WAAW,IAAI,KAAK,OAAO,SAAS;IACtC;GACF,CAAC,CACH,GAGmB,QAAQ,MAAkC,MAAM,IAAI;GACrE,aAAa,OAAO;GACpB,eAAe,OAAO,YAAY,OAAO,SAAS,KAAA;GAClD,oBAAoB,KAAA;EACtB;CACF;CAMA,MAAc,uBAAuB,UAAiC;EAEpE,MAAM,cAAc,GAAG,eAAe,SAAS;EAC/C,IAAI;EACJ,MAAM,eAAyB,CAAC;EAEhC,GAAG;GACD,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK;IAAE,QAAQ;IAAa;GAAO,CAAC;GACrE,KAAK,MAAM,OAAO,OAAO,SACvB,aAAa,KAAK,IAAI,GAAG;GAE3B,SAAS,OAAO,YAAY,OAAO,SAAS,KAAA;EAC9C,SAAS;EAGT,aAAa,KAAK,GAAG,mBAAmB,SAAS,MAAM;EAEvD,IAAI,aAAa,SAAS,GACxB,MAAM,KAAK,OAAO,OAAO,YAAY;CAEzC;AACF"}

package/dist/{rate-limit.decorator-D69zdZbp.mjs → rate-limit.decorator-BPAie_p3.mjs}

@@ -1,5 +1,5 @@
-import { n as getMetadata, t as defineMetadata } from "./metadata-BVkc4aUu.mjs";
-import { u as ROUTE_METADATA_KEYS } from "./exception-context-B4kM-M53.mjs";
+import { n as getMetadata, t as defineMetadata } from "./metadata-DzzprcID.mjs";
+import { u as ROUTE_METADATA_KEYS } from "./exception-context-kEoMFwze.mjs";
 //#region src/rate-limiter/decorators/rate-limit.decorator.ts
 const KEY = ROUTE_METADATA_KEYS.RATE_LIMIT;
 /**
@@ -47,4 +47,4 @@ function getRateLimits(target, propertyKey) {
 //#endregion
 export { getRateLimits as n, RateLimit as t };
 
-//# sourceMappingURL=rate-limit.decorator-D69zdZbp.mjs.map
+//# sourceMappingURL=rate-limit.decorator-BPAie_p3.mjs.map

package/dist/{rate-limit.decorator-D69zdZbp.mjs.map → rate-limit.decorator-BPAie_p3.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.decorator-D69zdZbp.mjs","names":[],"sources":["../src/rate-limiter/decorators/rate-limit.decorator.ts"],"sourcesContent":["import { defineMetadata, getMetadata } from '../../di/metadata'\nimport { ROUTE_METADATA_KEYS } from '../../router/constants'\n\nconst KEY = ROUTE_METADATA_KEYS.RATE_LIMIT\n\n/**\n * Apply a named rate limiter to a controller class or a single route method.\n *\n * Stacks: multiple `@RateLimit` decorators on the same target push onto\n * the metadata array — every named limiter is enforced. Class-level limits\n * run before method-level limits in the resulting middleware chain.\n *\n * The named limiter must be registered separately via\n * `RateLimiterRegistry.for('name', resolver)` (typically inside a\n * module's `onInitialize` hook) and the user must import\n * `RateLimiterModule.forRoot({ store: ... })` in their AppModule.\n *\n * @example\n * ```typescript\n * @Controller('/api/v1/users')\n * @RateLimit('api')\n * export class UsersController {\n *   @Get('/')\n *   list(ctx: RouterContext) { ... }\n *\n *   @Post('/')\n *   @RateLimit('writes')           // stacks with class-level 'api'\n *   create(ctx: RouterContext) { ... }\n * }\n * ```\n */\nexport function RateLimit(name: string): ClassDecorator & MethodDecorator {\n  return (target: object, propertyKey?: string | symbol) => {\n    if (propertyKey === undefined) {\n      const existing = getMetadata<string[]>(KEY, target) ?? []\n      defineMetadata(KEY, [...existing, name], target)\n    } else {\n      const existing = getMetadata<string[]>(KEY, target, propertyKey as string) ?? []\n      defineMetadata(KEY, [...existing, name], target, propertyKey as string)\n    }\n  }\n}\n\n/**\n * Read the rate-limit names attached to a class or method via `@RateLimit`.\n * Returns an empty array when no decorator was applied.\n *\n * @param target - For class metadata, pass the controller constructor.\n *   For method metadata, pass `Controller.prototype` and the method name.\n */\nexport function getRateLimits(target: object, propertyKey?: string): string[] {\n  const meta = propertyKey === undefined\n    ? getMetadata<string[]>(KEY, target)\n    : getMetadata<string[]>(KEY, target, propertyKey)\n  return meta ?? []\n}\n"],"mappings":";;;AAGA,MAAM,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BhC,SAAgB,UAAU,MAAgD;CACxE,QAAQ,QAAgB,gBAAkC;EACxD,IAAI,gBAAgB,KAAA,GAElB,eAAe,KAAK,CAAC,GADJ,YAAsB,KAAK,OAAO,IAAI,EAAE,EACvB,KAAK,EAAE,OAAO;OAGhD,eAAe,KAAK,CAAC,GADJ,YAAsB,KAAK,QAAQ,YAAsB,IAAI,EAAE,EAC9C,KAAK,EAAE,QAAQ,YAAsB;;;;;;;;;;AAY7E,SAAgB,cAAc,QAAgB,aAAgC;CAI5E,QAHa,gBAAgB,KAAA,IACzB,YAAsB,KAAK,OAAO,GAClC,YAAsB,KAAK,QAAQ,YAAY,KACpC,EAAE"}
+{"version":3,"file":"rate-limit.decorator-BPAie_p3.mjs","names":[],"sources":["../src/rate-limiter/decorators/rate-limit.decorator.ts"],"sourcesContent":["import { defineMetadata, getMetadata } from '../../di/metadata'\nimport { ROUTE_METADATA_KEYS } from '../../router/constants'\n\nconst KEY = ROUTE_METADATA_KEYS.RATE_LIMIT\n\n/**\n * Apply a named rate limiter to a controller class or a single route method.\n *\n * Stacks: multiple `@RateLimit` decorators on the same target push onto\n * the metadata array — every named limiter is enforced. Class-level limits\n * run before method-level limits in the resulting middleware chain.\n *\n * The named limiter must be registered separately via\n * `RateLimiterRegistry.for('name', resolver)` (typically inside a\n * module's `onInitialize` hook) and the user must import\n * `RateLimiterModule.forRoot({ store: ... })` in their AppModule.\n *\n * @example\n * ```typescript\n * @Controller('/api/v1/users')\n * @RateLimit('api')\n * export class UsersController {\n *   @Get('/')\n *   list(ctx: RouterContext) { ... }\n *\n *   @Post('/')\n *   @RateLimit('writes')           // stacks with class-level 'api'\n *   create(ctx: RouterContext) { ... }\n * }\n * ```\n */\nexport function RateLimit(name: string): ClassDecorator & MethodDecorator {\n  return (target: object, propertyKey?: string | symbol) => {\n    if (propertyKey === undefined) {\n      const existing = getMetadata<string[]>(KEY, target) ?? []\n      defineMetadata(KEY, [...existing, name], target)\n    } else {\n      const existing = getMetadata<string[]>(KEY, target, propertyKey as string) ?? []\n      defineMetadata(KEY, [...existing, name], target, propertyKey as string)\n    }\n  }\n}\n\n/**\n * Read the rate-limit names attached to a class or method via `@RateLimit`.\n * Returns an empty array when no decorator was applied.\n *\n * @param target - For class metadata, pass the controller constructor.\n *   For method metadata, pass `Controller.prototype` and the method name.\n */\nexport function getRateLimits(target: object, propertyKey?: string): string[] {\n  const meta = propertyKey === undefined\n    ? getMetadata<string[]>(KEY, target)\n    : getMetadata<string[]>(KEY, target, propertyKey)\n  return meta ?? []\n}\n"],"mappings":";;;AAGA,MAAM,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BhC,SAAgB,UAAU,MAAgD;CACxE,QAAQ,QAAgB,gBAAkC;EACxD,IAAI,gBAAgB,KAAA,GAElB,eAAe,KAAK,CAAC,GADJ,YAAsB,KAAK,MAAM,KAAK,CAAC,GACtB,IAAI,GAAG,MAAM;OAG/C,eAAe,KAAK,CAAC,GADJ,YAAsB,KAAK,QAAQ,WAAqB,KAAK,CAAC,GAC7C,IAAI,GAAG,QAAQ,WAAqB;CAE1E;AACF;;;;;;;;AASA,SAAgB,cAAc,QAAgB,aAAgC;CAI5E,QAHa,gBAAgB,KAAA,IACzB,YAAsB,KAAK,MAAM,IACjC,YAAsB,KAAK,QAAQ,WAAW,MACnC,CAAC;AAClB"}

package/dist/rate-limiter/index.d.mts

@@ -1,8 +1,8 @@
-import { An as OnException, On as ModuleContext, Sn as AsyncModuleOptions, Y as Container, c as HttpException, d as ExceptionHandler, fn as Middleware, jn as OnInitialize, pn as Next, rt as RouterContext, wn as DynamicModule, xr as ApplicationError } from "../index-DEncMcC6.mjs";
-import { t as Macroable } from "../index-B4UBK-2T.mjs";
-import { t as StratalEnv } from "../env-DKSbuBi5.mjs";
-import { t as Constructor } from "../types-BaeHi67f.mjs";
-import { t as CacheService } from "../cache.service-e34gV6tz.mjs";
+import { Dn as AsyncModuleOptions, Dr as ApplicationError, Fn as OnException, In as OnInitialize, Nn as ModuleContext, Y as Container, _n as Middleware, c as HttpException, d as ExceptionHandler, kn as DynamicModule, rt as RouterContext, vn as Next } from "../index-B_JoEl3V.mjs";
+import { t as Macroable } from "../index-0ItCjaqw.mjs";
+import { t as StratalEnv } from "../env-ug22bJj7.mjs";
+import { t as Constructor } from "../types-CmV_9xBD.mjs";
+import { t as CacheService } from "../cache.service-uElmBtdS.mjs";
 
 //#region src/rate-limiter/errors.d.ts
 /**

package/dist/rate-limiter/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/rate-limiter/errors.ts","../../src/rate-limiter/limit.ts","../../src/rate-limiter/stores/rate-limiter-store.interface.ts","../../src/rate-limiter/rate-limiter-registry.ts","../../src/rate-limiter/stores/store-factory.ts","../../src/rate-limiter/rate-limiter.module.ts","../../src/rate-limiter/rate-limiter.tokens.ts","../../src/rate-limiter/throttle.middleware.ts","../../src/rate-limiter/decorators/rate-limit.decorator.ts","../../src/rate-limiter/stores/kv-store.ts","../../src/rate-limiter/stores/memory-store.ts"],"mappings":";;;;;;;;;;;;;AAYA;;;;cAAa,oBAAA,SAA6B,aAAA;EAAA,SAEtB,IAAA;IAAQ,UAAA;IAAoB,KAAA;IAAe,OAAA;EAAA;cAA3C,IAAA;IAAQ,UAAA;IAAoB,KAAA;IAAe,OAAA;EAAA;AAAA;AAAA,cAMlD,gBAAA,SAAyB,gBAAA;;;;;;;UCdrB,gBAAA;EACf,aAAA;EACA,mBAAA;EACA,uBAAA;EACA,mBAAA;AAAA;;;;;;;KASU,wBAAA,IACV,GAAA,EAAK,aAAA,EACL,OAAA,EAAS,gBAAA,KACN,QAAA,GAAW,OAAA,CAAQ,QAAA;;;;;;ADFxB;;;;;;;;ACdA;;;;cAmCa,KAAA;EAAA,SAKO,aAAA;EAAA,SACA,GAAA;EAAA,SACA,QAAA;EAAA,QANV,IAAA;EAAA,QACA,eAAA;EAAA,QAED,WAAA,CAAA;EAAA,OAMA,SAAA,CAAU,GAAA,WAAc,KAAA;EAAA,OAIxB,UAAA,CAAW,OAAA,UAAiB,GAAA,WAAc,KAAA;EAAA,OAI1C,SAAA,CAAU,GAAA,WAAc,KAAA;EAAA,OAIxB,UAAA,CAAW,OAAA,UAAiB,GAAA,WAAc,KAAA;EAAA,OAI1C,OAAA,CAAQ,GAAA,WAAc,KAAA;EAAA,OAItB,MAAA,CAAO,GAAA,WAAc,KAAA;EAjDd;EAAA,OAsDP,IAAA,CAAA,GAAQ,KAAA;EAtDM;EA2DrB,EAAA,CAAG,GAAA;EA7DH;;;;;EAuEA,QAAA,CAAS,OAAA,EAAS,wBAAA;EAAA,IAKd,GAAA,CAAA;EAAA,IAIA,cAAA,CAAA,GAAkB,wBAAA;AAAA;;;;;;;;;;UC7FP,YAAA;EFKiB;EEHhC,KAAA;EFGqD;EEDrD,OAAA;AAAA;;;;;;;;;;;AFSF;;UEMiB,iBAAA;EFNqB;;;;EEWpC,GAAA,cAAiB,GAAA,WAAc,OAAA,CAAQ,CAAA;EDzBxB;;;;;ECgCf,GAAA,cAAiB,GAAA,UAAa,KAAA,EAAO,CAAA,EAAG,UAAA,WAAqB,OAAA;ED7B7D;;;ECkCA,MAAA,CAAO,GAAA,WAAc,OAAA;AAAA;;;;;AF/BvB;;;KGGY,aAAA,IACV,GAAA,EAAK,aAAA,KACF,KAAA,GAAQ,KAAA,KAAU,OAAA,CAAQ,KAAA,GAAQ,KAAA;;;;;;;;;;;;;AHGvC;;;;;;;cG8Ba,mBAAA,SAA4B,SAAA;EAAA,iBAIe,KAAA;EAAA,iBAHrC,SAAA;cAGqC,KAAA,EAAO,iBAAA;EFhD9B;;;;;EE0D/B,GAAA,CAAI,IAAA,UAAc,QAAA,EAAU,aAAA;EAI5B,GAAA,CAAI,IAAA;EFjDM;;;;;;;;EE6DJ,MAAA,CAAO,IAAA,UAAc,GAAA,EAAK,aAAA,EAAe,IAAA,EAAM,IAAA,GAAO,OAAA,CAAQ,QAAA;EF1D/C;;;;EAAA,QE4HP,GAAA;EAAA,QAgBN,OAAA;EAAA,QAKA,WAAA;AAAA;;;;;AH3JV;;;;;;;KIWY,wBAAA;EACN,KAAA;EAAa,OAAA,QAAe,UAAA;AAAA;EAC5B,KAAA;AAAA;EACA,KAAA;IAAS,QAAA,EAAU,WAAA,CAAY,iBAAA;EAAA;AAAA;AAAA,cAOxB,uBAAA;EAAA,iBAEyC,GAAA;EAAA,iBACE,KAAA;EAAA,iBACV,SAAA;EAAA,iBAEzB,OAAA;cAJiC,GAAA,EAAK,UAAA,EACH,KAAA,EAAO,YAAA,EACjB,SAAA,EAAW,SAAA,EAEpC,OAAA,GAAU,wBAAA;EAG7B,MAAA,CAAA,GAAU,iBAAA;AAAA;;;;;;;AJ9BZ;;;;;;;;;;;;;;;;AAQA;;;;cKwBa,iBAAA,YAA6B,YAAA,EAAc,WAAA;;;;AJtCxD;;SI4CS,OAAA,CAAQ,OAAA,EAAS,wBAAA,GAA2B,aAAA;EJ5CpB;;;;EAAA,OIyDxB,YAAA,CAAa,OAAA,EAAS,kBAAA,CAAmB,wBAAA,IAA4B,aAAA;EJrDzD;;AASrB;;;;;;EIiEE,YAAA,CAAA;IAAe;EAAA,GAAa,aAAA;EJ9Dd;;;;;;EIyEd,WAAA,CAAY,OAAA,EAAS,gBAAA;AAAA;;;cC/FV,mBAAA;EAAA;;;;;;ANYb;;;;KMAY,gBAAA,WAA2B,mBAAA,eAAkC,mBAAA;;;;;;;;ANAzE;;;;iBOSgB,wBAAA,CAAyB,IAAA,WAAe,WAAA,CAAY,UAAA;;;;;;;;;;APTpE;;;;;;;;;;;;;;;;AAQA;;;iBQWgB,SAAA,CAAU,IAAA,WAAe,cAAA,GAAiB,eAAA;;;;;APzB1D;;;iBO4CgB,aAAA,CAAc,MAAA,UAAgB,WAAA;;;;;;;;ARtC9C;;;;;;;cSGa,kBAAA,YAA8B,iBAAA;EAAA,iBACZ,KAAA;cAAA,KAAA,EAAO,YAAA;EAE9B,GAAA,GAAA,CAAO,GAAA,WAAc,OAAA,CAAQ,CAAA;EAI7B,GAAA,GAAA,CAAO,GAAA,UAAa,KAAA,EAAO,CAAA,EAAG,UAAA,WAAqB,OAAA;EAKnD,MAAA,CAAO,GAAA,WAAc,OAAA;AAAA;;;;;;;;;ATf7B;;;cUIa,wBAAA,YAAoC,iBAAA;EAAA,iBAC9B,OAAA;EAEjB,GAAA,GAAA,CAAO,GAAA,WAAc,OAAA,CAAQ,CAAA;EAU7B,GAAA,GAAA,CAAO,GAAA,UAAa,KAAA,EAAO,CAAA,EAAG,UAAA,WAAqB,OAAA;EAKnD,MAAA,CAAO,GAAA,WAAc,OAAA;AAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/rate-limiter/errors.ts","../../src/rate-limiter/limit.ts","../../src/rate-limiter/stores/rate-limiter-store.interface.ts","../../src/rate-limiter/rate-limiter-registry.ts","../../src/rate-limiter/stores/store-factory.ts","../../src/rate-limiter/rate-limiter.module.ts","../../src/rate-limiter/rate-limiter.tokens.ts","../../src/rate-limiter/throttle.middleware.ts","../../src/rate-limiter/decorators/rate-limit.decorator.ts","../../src/rate-limiter/stores/kv-store.ts","../../src/rate-limiter/stores/memory-store.ts"],"mappings":";;;;;;;;;;;;;AAYA;;;;cAAa,oBAAA,SAA6B,aAAa;EAAA,SAEnC,IAAA;IAAQ,UAAA;IAAoB,KAAA;IAAe,OAAA;EAAA;cAA3C,IAAA;IAAQ,UAAA;IAAoB,KAAA;IAAe,OAAA;EAAA;AAAA;AAAA,cAMlD,gBAAA,SAAyB,gBAAgB;;;;;;;UCdrC,gBAAA;EACf,aAAA;EACA,mBAAA;EACA,uBAAA;EACA,mBAAA;AAAA;;;;;;;KASU,wBAAA,IACV,GAAA,EAAK,aAAA,EACL,OAAA,EAAS,gBAAA,KACN,QAAA,GAAW,OAAA,CAAQ,QAAA;;;;;ADRwD;AAMhF;;;;AAAsD;;;;ACdtD;;;;cAmCa,KAAA;EAAA,SAKO,aAAA;EAAA,SACA,GAAA;EAAA,SACA,QAAA;EAAA,QANV,IAAA;EAAA,QACA,eAAA;EAAA,QAED,WAAA;EAAA,OAMA,SAAA,CAAU,GAAA,WAAc,KAAA;EAAA,OAIxB,UAAA,CAAW,OAAA,UAAiB,GAAA,WAAc,KAAA;EAAA,OAI1C,SAAA,CAAU,GAAA,WAAc,KAAA;EAAA,OAIxB,UAAA,CAAW,OAAA,UAAiB,GAAA,WAAc,KAAA;EAAA,OAI1C,OAAA,CAAQ,GAAA,WAAc,KAAA;EAAA,OAItB,MAAA,CAAO,GAAA,WAAc,KAAA;EAjDd;EAAA,OAsDP,IAAA,IAAQ,KAAA;EAtDM;EA2DrB,EAAA,CAAG,GAAA;EA7DH;;;;;EAuEA,QAAA,CAAS,OAAA,EAAS,wBAAA;EAAA,IAKd,GAAA;EAAA,IAIA,cAAA,IAAkB,wBAAA;AAAA;;;;;;;;;;UC7FP,YAAA;EFKiB;EEHhC,KAAA;EFGqD;EEDrD,OAAO;AAAA;;;;;;;;;;AFGuE;AAMhF;;UEMiB,iBAAA;EFNqC;AAAA;;;EEWpD,GAAA,cAAiB,GAAA,WAAc,OAAA,CAAQ,CAAA;EDzBxB;;;;;ECgCf,GAAA,cAAiB,GAAA,UAAa,KAAA,EAAO,CAAA,EAAG,UAAA,WAAqB,OAAA;ED7B7D;;;ECkCA,MAAA,CAAO,GAAA,WAAc,OAAA;AAAA;;;;;AF/BvB;;;KGGY,aAAA,IACV,GAAA,EAAK,aAAA,KACF,KAAA,GAAQ,KAAA,KAAU,OAAA,CAAQ,KAAA,GAAQ,KAAA;;;;;;;;;;;;AHHyC;AAMhF;;;;AAAsD;;;cG8BzC,mBAAA,SAA4B,SAAA;EAAA,iBAIe,KAAA;EAAA,iBAHrC,SAAA;cAGqC,KAAA,EAAO,iBAAA;EFhD9B;;;;;EE0D/B,GAAA,CAAI,IAAA,UAAc,QAAA,EAAU,aAAA;EAI5B,GAAA,CAAI,IAAA;EFjDM;;;;;;;;EE6DJ,MAAA,CAAO,IAAA,UAAc,GAAA,EAAK,aAAA,EAAe,IAAA,EAAM,IAAA,GAAO,OAAA,CAAQ,QAAA;EF1D/C;;;;EAAA,QE4HP,GAAA;EAAA,QAgBN,OAAA;EAAA,QAKA,WAAA;AAAA;;;;;AH3JV;;;;;;;KIWY,wBAAA;EACN,KAAA;EAAa,OAAA,QAAe,UAAA;AAAA;EAC5B,KAAA;AAAA;EACA,KAAA;IAAS,QAAA,EAAU,WAAA,CAAY,iBAAA;EAAA;AAAA;AAAA,cAOxB,uBAAA;EAAA,iBAEyC,GAAA;EAAA,iBACE,KAAA;EAAA,iBACV,SAAA;EAAA,iBAEzB,OAAA;cAJiC,GAAA,EAAK,UAAA,EACH,KAAA,EAAO,YAAA,EACjB,SAAA,EAAW,SAAA,EAEpC,OAAA,GAAU,wBAAA;EAG7B,MAAA,IAAU,iBAAA;AAAA;;;;;;;AJ9BZ;;;;;;;;;;;;;;;AAEgF;AAMhF;;;;cK0Ba,iBAAA,YAA6B,YAAA,EAAc,WAAA;;;;AJxCxD;;SI8CS,OAAA,CAAQ,OAAA,EAAS,wBAAA,GAA2B,aAAA;EJ9CpB;;;;EAAA,OI2DxB,YAAA,CAAa,OAAA,EAAS,kBAAA,CAAmB,wBAAA,IAA4B,aAAA;EJvDzD;AAAA;AASrB;;;;;;EImEE,YAAA;IAAe;EAAA,GAAa,aAAA;EJhEd;;;;;;EI2Ed,WAAA,CAAY,OAAA,EAAS,gBAAA;AAAA;;;cCjGV,mBAAA;EAAA;;;;;;ANYb;;;;KMAY,gBAAA,WAA2B,mBAAA,eAAkC,mBAAmB;;;;;;;;ANA5F;;;;iBOSgB,wBAAA,CAAyB,IAAA,WAAe,WAAW,CAAC,UAAA;;;;;;;;;;APTpE;;;;;;;;;;;;;;;AAEgF;AAMhF;;;iBQWgB,SAAA,CAAU,IAAA,WAAe,cAAA,GAAiB,eAAe;ARXnB;;;;ACdtD;;;ADcsD,iBQ8BtC,aAAA,CAAc,MAAA,UAAgB,WAAoB;;;;;;;;ARtClE;;;;;;;cSGa,kBAAA,YAA8B,iBAAA;EAAA,iBACZ,KAAA;cAAA,KAAA,EAAO,YAAA;EAE9B,GAAA,IAAO,GAAA,WAAc,OAAA,CAAQ,CAAA;EAI7B,GAAA,IAAO,GAAA,UAAa,KAAA,EAAO,CAAA,EAAG,UAAA,WAAqB,OAAA;EAKnD,MAAA,CAAO,GAAA,WAAc,OAAA;AAAA;;;;;;;;;ATf7B;;;cUIa,wBAAA,YAAoC,iBAAA;EAAA,iBAC9B,OAAA;EAEjB,GAAA,IAAO,GAAA,WAAc,OAAA,CAAQ,CAAA;EAU7B,GAAA,IAAO,GAAA,UAAa,KAAA,EAAO,CAAA,EAAG,UAAA,WAAqB,OAAA;EAKnD,MAAA,CAAO,GAAA,WAAc,OAAA;AAAA"}

package/dist/rate-limiter/index.mjs

@@ -1,9 +1,11 @@
-import { c as DI_TOKENS, m as inject, s as CONTAINER_TOKEN, u as Singleton } from "../di-BO1QIb5H.mjs";
-import { n as __decorateParam, t as __decorate } from "../decorate-HgTKAYK8.mjs";
-import { t as Macroable } from "../macroable-DzlfzT50.mjs";
-import { c as RATE_LIMITER_TOKENS, f as Module, l as RateLimiterError, s as createThrottleMiddleware, u as TooManyRequestsError } from "../module-xYoHba6B.mjs";
-import { t as CACHE_TOKENS } from "../cache.tokens-ovi_c52J.mjs";
-import { n as getRateLimits, t as RateLimit } from "../rate-limit.decorator-D69zdZbp.mjs";
+import { d as inject, n as CONTAINER_TOKEN, r as DI_TOKENS, s as Singleton } from "../di-DseMn-z9.mjs";
+import { n as __decorateParam, t as __decorate } from "../decorate-CuAoSZvs.mjs";
+import { t as Macroable } from "../macroable-cvDTFZ_A.mjs";
+import { n as Module } from "../module.decorator-CYHY6pG5.mjs";
+import { c as RATE_LIMITER_TOKENS, l as RateLimiterError, s as createThrottleMiddleware, u as TooManyRequestsError } from "../module-registry-Dm-pqHd3.mjs";
+import "../module/index.mjs";
+import { CACHE_TOKENS, CacheModule } from "../cache/index.mjs";
+import { n as getRateLimits, t as RateLimit } from "../rate-limit.decorator-BPAie_p3.mjs";
 //#region src/rate-limiter/limit.ts
 /**
 * A single rate limit window.
@@ -339,21 +341,24 @@ let RateLimiterModule = _RateLimiterModule = class RateLimiterModule {
 		});
 	}
 };
-RateLimiterModule = _RateLimiterModule = __decorate([Module({ providers: [
-	{
-		provide: RATE_LIMITER_TOKENS.Registry,
-		useClass: RateLimiterRegistry
-	},
-	{
-		provide: RATE_LIMITER_TOKENS.StoreFactory,
-		useClass: RateLimiterStoreFactory
-	},
-	{
-		provide: RATE_LIMITER_TOKENS.Store,
-		useFactory: (factory) => factory.create(),
-		inject: [RATE_LIMITER_TOKENS.StoreFactory]
-	}
-] })], RateLimiterModule);
+RateLimiterModule = _RateLimiterModule = __decorate([Module({
+	imports: [CacheModule],
+	providers: [
+		{
+			provide: RATE_LIMITER_TOKENS.Registry,
+			useClass: RateLimiterRegistry
+		},
+		{
+			provide: RATE_LIMITER_TOKENS.StoreFactory,
+			useClass: RateLimiterStoreFactory
+		},
+		{
+			provide: RATE_LIMITER_TOKENS.Store,
+			useFactory: (factory) => factory.create(),
+			inject: [RATE_LIMITER_TOKENS.StoreFactory]
+		}
+	]
+})], RateLimiterModule);
 //#endregion
 export { InMemoryRateLimiterStore, KvRateLimiterStore, Limit, RATE_LIMITER_TOKENS, RateLimit, RateLimiterError, RateLimiterModule, RateLimiterRegistry, RateLimiterStoreFactory, TooManyRequestsError, createThrottleMiddleware, getRateLimits };
 

package/dist/rate-limiter/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../src/rate-limiter/limit.ts","../../src/rate-limiter/rate-limiter-registry.ts","../../src/rate-limiter/stores/kv-store.ts","../../src/rate-limiter/stores/memory-store.ts","../../src/rate-limiter/stores/store-factory.ts","../../src/rate-limiter/rate-limiter.module.ts"],"sourcesContent":["import type { RouterContext } from '../router/router-context'\n\n/**\n * Standard rate-limit response headers passed to custom response handlers.\n * Keys are canonical HTTP header names; values are the stringified counts.\n */\nexport interface RateLimitHeaders {\n  'Retry-After': string\n  'X-RateLimit-Limit': string\n  'X-RateLimit-Remaining': string\n  'X-RateLimit-Reset': string\n}\n\n/**\n * Custom response handler invoked when a limit is exceeded and the user\n * supplied `.response()` on the {@link Limit}. Receives the request context\n * and the precomputed standard headers (which the handler can spread, drop,\n * or override).\n */\nexport type RateLimitResponseHandler = (\n  ctx: RouterContext,\n  headers: RateLimitHeaders,\n) => Response | Promise<Response>\n\n/**\n * A single rate limit window.\n *\n * Build via the static factories (`perSecond`, `perMinute`, `perMinutes`,\n * `perHour`, `perDay`, `none`). Chain `.by(key)` to scope per-actor and\n * `.response(handler)` to override the default 429 response.\n *\n * Returned (singly or as an array) by limiter resolvers registered via\n * `RateLimiterRegistry.for()`.\n *\n * @example\n * ```typescript\n * Limit.perMinute(60).by(ctx.header('cf-connecting-ip') ?? 'global')\n * Limit.perHour(100).by(userId)\n * Limit.none()                                // bypass\n * ```\n */\nexport class Limit {\n  private _key?: string\n  private _customResponse?: RateLimitResponseHandler\n\n  private constructor(\n    public readonly windowSeconds: number,\n    public readonly max: number,\n    public readonly disabled = false,\n  ) {}\n\n  static perSecond(max: number): Limit {\n    return new Limit(1, max)\n  }\n\n  static perSeconds(seconds: number, max: number): Limit {\n    return new Limit(seconds, max)\n  }\n\n  static perMinute(max: number): Limit {\n    return new Limit(60, max)\n  }\n\n  static perMinutes(minutes: number, max: number): Limit {\n    return new Limit(minutes * 60, max)\n  }\n\n  static perHour(max: number): Limit {\n    return new Limit(60 * 60, max)\n  }\n\n  static perDay(max: number): Limit {\n    return new Limit(24 * 60 * 60, max)\n  }\n\n  /** Bypass the limiter entirely for this request. */\n  static none(): Limit {\n    return new Limit(0, 0, true)\n  }\n\n  /** Scope this limit to a specific actor (user id, IP, tenant, etc.). */\n  by(key: string | number): this {\n    this._key = String(key)\n    return this\n  }\n\n  /**\n   * Override the default 429 response. The handler receives the standard\n   * `RateLimitHeaders` so it can spread them onto its own Response or omit\n   * them as it sees fit.\n   */\n  response(handler: RateLimitResponseHandler): this {\n    this._customResponse = handler\n    return this\n  }\n\n  get key(): string | undefined {\n    return this._key\n  }\n\n  get customResponse(): RateLimitResponseHandler | undefined {\n    return this._customResponse\n  }\n}\n","import { inject } from '../di'\nimport { Singleton } from '../di/decorators'\nimport { Macroable } from '../macroable'\nimport type { Next } from '../router/middleware.interface'\nimport type { RouterContext } from '../router/router-context'\nimport { RateLimiterError, TooManyRequestsError } from './errors'\nimport type { Limit, RateLimitHeaders } from './limit'\nimport { RATE_LIMITER_TOKENS } from './rate-limiter.tokens'\nimport type { IRateLimiterStore, RateLimitHit } from './stores/rate-limiter-store.interface'\n\n/**\n * Resolver function registered via {@link RateLimiterRegistry.for}. Receives\n * the request context and returns the limit (or limits) that apply to this\n * request. Return `Limit.none()` to bypass for the current request.\n */\nexport type LimitResolver = (\n  ctx: RouterContext,\n) => Limit | Limit[] | Promise<Limit | Limit[]>\n\ninterface StoredHit {\n  count: number\n  resetAt: number\n}\n\n/**\n * Central registry of named rate limiters and the request-time enforcement\n * pipeline. Resolved as a singleton; consumed by `ThrottleMiddleware`.\n *\n * Register limiters in a module's `onInitialize` hook:\n * ```typescript\n * @Module({})\n * export class RateLimitsModule implements OnInitialize {\n *   onInitialize({ container }: ModuleContext): void {\n *     const limiter = container.resolve<RateLimiterRegistry>(RATE_LIMITER_TOKENS.Registry)\n *     limiter.for('api', (ctx) => Limit.perMinute(60).by(ctx.header('cf-connecting-ip') ?? '*'))\n *   }\n * }\n * ```\n *\n * Extensible via `Macroable`: adapter packages (e.g. `@stratal/framework/auth`)\n * can attach extra registration methods such as `forPath()` for better-auth\n * `customRules` interop.\n */\n// IMPORTANT: do not pass a token to @Singleton — that would self-register\n// the class globally at module-load time, making the Registry resolvable\n// even when the user never imported RateLimiterModule. We rely on\n// RateLimiterModule providers being the only binding source, so\n// `{ isOptional: true }` in ThrottleMiddleware correctly returns undefined\n// when the module is missing.\n@Singleton()\nexport class RateLimiterRegistry extends Macroable {\n  private readonly resolvers = new Map<string, LimitResolver>()\n\n  constructor(\n    @inject(RATE_LIMITER_TOKENS.Store) private readonly store: IRateLimiterStore,\n  ) {\n    super()\n  }\n\n  /**\n   * Register a named limiter. Names must be unique; calling `for()` again\n   * with the same name overwrites the previous resolver (matches Laravel\n   * `RateLimiter::for` semantics — last definition wins).\n   */\n  for(name: string, resolver: LimitResolver): void {\n    this.resolvers.set(name, resolver)\n  }\n\n  has(name: string): boolean {\n    return this.resolvers.has(name)\n  }\n\n  /**\n   * Enforce the named limiter for the current request. Called by\n   * `ThrottleMiddleware` (the per-name class produced by\n   * `createThrottleMiddleware`). Resolves the limiter, increments the store\n   * for each non-bypassed limit, sets `X-RateLimit-*` headers on success, and\n   * either invokes the limit's custom `.response()` or throws\n   * {@link TooManyRequestsError} when a limit is exceeded.\n   */\n  async handle(name: string, ctx: RouterContext, next: Next): Promise<Response | void> {\n    const resolver = this.resolvers.get(name)\n    if (!resolver) {\n      throw new RateLimiterError(`Rate limiter \"${name}\" is not defined. Register it with limiter.for(\"${name}\", ...) in a module's onInitialize hook.`)\n    }\n\n    const resolved = await resolver(ctx)\n    const limits = Array.isArray(resolved) ? resolved : [resolved]\n    const active = limits.filter((l) => !l.disabled)\n\n    if (active.length === 0) {\n      return next()\n    }\n\n    let mostRestrictive: { limit: Limit; remaining: number; resetAt: number } | undefined\n    let exceeded: { limit: Limit; resetAt: number } | undefined\n\n    for (const limit of active) {\n      const key = this.makeKey(name, limit.windowSeconds, limit.key)\n      const hit = await this.hit(key, limit.windowSeconds)\n\n      if (hit.count > limit.max) {\n        if (!exceeded || hit.resetAt > exceeded.resetAt) {\n          exceeded = { limit, resetAt: hit.resetAt }\n        }\n        continue\n      }\n\n      const remaining = limit.max - hit.count\n      if (!mostRestrictive || remaining < mostRestrictive.remaining) {\n        mostRestrictive = { limit, remaining, resetAt: hit.resetAt }\n      }\n    }\n\n    if (exceeded) {\n      const headers = this.makeHeaders(exceeded.limit.max, 0, exceeded.resetAt)\n      if (exceeded.limit.customResponse) {\n        return exceeded.limit.customResponse(ctx, headers)\n      }\n      throw new TooManyRequestsError({\n        retryAfter: Number(headers['Retry-After']),\n        limit: exceeded.limit.max,\n        resetAt: exceeded.resetAt,\n      })\n    }\n\n    await next()\n\n    if (mostRestrictive) {\n      const headers = this.makeHeaders(\n        mostRestrictive.limit.max,\n        mostRestrictive.remaining,\n        mostRestrictive.resetAt,\n      )\n      // Hono populates ctx.c.res after next() — same pattern as logger.middleware.ts.\n      const downstream = ctx.c.res\n      downstream.headers.set('X-RateLimit-Limit', headers['X-RateLimit-Limit'])\n      downstream.headers.set('X-RateLimit-Remaining', headers['X-RateLimit-Remaining'])\n      downstream.headers.set('X-RateLimit-Reset', headers['X-RateLimit-Reset'])\n    }\n  }\n\n  /**\n   * Get-modify-set increment over the typed KV store. Not atomic across\n   * concurrent edge requests on KV — see `KvRateLimiterStore`'s caveat.\n   */\n  private async hit(key: string, windowSeconds: number): Promise<RateLimitHit> {\n    const now = Date.now()\n    const existing = await this.store.get<StoredHit>(key)\n\n    let next: StoredHit\n    if (!existing || existing.resetAt <= now) {\n      next = { count: 1, resetAt: now + windowSeconds * 1000 }\n    } else {\n      next = { count: existing.count + 1, resetAt: existing.resetAt }\n    }\n\n    const ttlSeconds = Math.max(1, Math.ceil((next.resetAt - now) / 1000))\n    await this.store.set(key, next, ttlSeconds)\n    return next\n  }\n\n  private makeKey(name: string, windowSeconds: number, by: string | undefined): string {\n    const actor = by ?? '*'\n    return `rl:${name}:${windowSeconds}:${actor}`\n  }\n\n  private makeHeaders(limit: number, remaining: number, resetAt: number): RateLimitHeaders {\n    const retryAfter = Math.max(1, Math.ceil((resetAt - Date.now()) / 1000))\n    return {\n      'Retry-After': String(retryAfter),\n      'X-RateLimit-Limit': String(limit),\n      'X-RateLimit-Remaining': String(Math.max(0, remaining)),\n      'X-RateLimit-Reset': String(Math.ceil(resetAt / 1000)),\n    }\n  }\n}\n","import type { CacheService } from '../../cache/services/cache.service'\nimport type { IRateLimiterStore } from './rate-limiter-store.interface'\n\n/**\n * Cloudflare KV-backed typed KV store.\n *\n * KV's minimum `expirationTtl` is 60 seconds; sub-60s windows are still\n * enforced by the registry's algorithm via the persisted `resetAt`, but\n * the key itself may live in KV longer than the logical window.\n *\n * KV has no native atomic increment, so concurrent writes from different\n * edge locations may undercount under high contention. That's an inherent\n * KV tradeoff — pick `{ useClass: MyDurableObjectStore }` for strict\n * accuracy across edges.\n */\nexport class KvRateLimiterStore implements IRateLimiterStore {\n  constructor(private readonly cache: CacheService) {}\n\n  async get<T>(key: string): Promise<T | null> {\n    return (await this.cache.get<T>(key, 'json')) ?? null\n  }\n\n  async set<T>(key: string, value: T, ttlSeconds: number): Promise<void> {\n    const ttl = Math.max(60, Math.ceil(ttlSeconds))\n    await this.cache.put(key, JSON.stringify(value), { expirationTtl: ttl })\n  }\n\n  async delete(key: string): Promise<void> {\n    await this.cache.delete(key)\n  }\n}\n","import type { IRateLimiterStore } from './rate-limiter-store.interface'\n\ninterface Entry {\n  value: unknown\n  expiresAt: number\n}\n\n/**\n * In-process Map-backed typed KV store.\n *\n * Suitable for tests and single-isolate scenarios. Not safe across\n * Cloudflare Worker isolates — entries reset whenever a fresh isolate\n * spins up. Use `KvRateLimiterStore` (or a custom Durable Object store)\n * for production. Expiry is lazy: stale entries are dropped on the next\n * `get`.\n */\nexport class InMemoryRateLimiterStore implements IRateLimiterStore {\n  private readonly entries = new Map<string, Entry>()\n\n  get<T>(key: string): Promise<T | null> {\n    const entry = this.entries.get(key)\n    if (!entry) return Promise.resolve(null)\n    if (entry.expiresAt <= Date.now()) {\n      this.entries.delete(key)\n      return Promise.resolve(null)\n    }\n    return Promise.resolve(entry.value as T)\n  }\n\n  set<T>(key: string, value: T, ttlSeconds: number): Promise<void> {\n    this.entries.set(key, { value, expiresAt: Date.now() + ttlSeconds * 1000 })\n    return Promise.resolve()\n  }\n\n  delete(key: string): Promise<void> {\n    this.entries.delete(key)\n    return Promise.resolve()\n  }\n}\n","import { inject } from '../../di'\nimport { CACHE_TOKENS } from '../../cache/cache.tokens'\nimport type { CacheService } from '../../cache/services/cache.service'\nimport { CONTAINER_TOKEN, type Container } from '../../di'\nimport { Singleton } from '../../di/decorators'\nimport { DI_TOKENS } from '../../di/tokens'\nimport type { StratalEnv } from '../../env'\nimport type { Constructor } from '../../types'\nimport { RateLimiterError } from '../errors'\nimport { RATE_LIMITER_TOKENS } from '../rate-limiter.tokens'\nimport { KvRateLimiterStore } from './kv-store'\nimport { InMemoryRateLimiterStore } from './memory-store'\nimport type { IRateLimiterStore } from './rate-limiter-store.interface'\n\n/**\n * Configuration for `RateLimiterModule.forRoot()`. Picks the backing store.\n *\n * - `'kv'`: Cloudflare KV. `binding` names the KVNamespace on `StratalEnv`.\n * - `'memory'`: in-process Map. Tests / single-isolate only.\n * - `{ useClass }`: any class implementing `IRateLimiterStore`. Resolved\n *   from the DI container (so the class can declare its own `@inject` deps,\n *   e.g. a Durable Object namespace from `StratalEnv`).\n */\nexport type RateLimiterModuleOptions =\n  | { store: 'kv'; binding: keyof StratalEnv }\n  | { store: 'memory' }\n  | { store: { useClass: Constructor<IRateLimiterStore> } }\n\n// IMPORTANT: see RateLimiterRegistry — no token on @Singleton so the\n// factory isn't globally bound at class-load time. Module providers are\n// the sole binding source, which keeps the \"module not imported\" detection\n// in ThrottleMiddleware working.\n@Singleton()\nexport class RateLimiterStoreFactory {\n  constructor(\n    @inject(DI_TOKENS.CloudflareEnv) private readonly env: StratalEnv,\n    @inject(CACHE_TOKENS.CacheService) private readonly cache: CacheService,\n    @inject(CONTAINER_TOKEN) private readonly container: Container,\n    @inject(RATE_LIMITER_TOKENS.Options, { isOptional: true })\n    private readonly options?: RateLimiterModuleOptions,\n  ) {}\n\n  create(): IRateLimiterStore {\n    if (!this.options) {\n      throw new RateLimiterError('RateLimiterModule is not configured. Call RateLimiterModule.forRoot({ store: ... }) to configure a backing store.')\n    }\n\n    const { store } = this.options\n\n    if (store === 'memory') {\n      return new InMemoryRateLimiterStore()\n    }\n\n    if (store === 'kv') {\n      const binding = this.env[this.options.binding] as KVNamespace | undefined\n      if (!binding) {\n        throw new RateLimiterError(`KV binding \"${String(this.options.binding)}\" is not available in the environment.`)\n      }\n      return new KvRateLimiterStore(this.cache.withBinding(binding))\n    }\n\n    return this.container.resolve<IRateLimiterStore>(store.useClass)\n  }\n}\n","import type { ExceptionHandler } from '../errors/exception-handler'\nimport { Module } from '../module'\nimport type { AsyncModuleOptions, DynamicModule, ModuleContext, OnException, OnInitialize } from '../module/types'\nimport { TooManyRequestsError } from './errors'\nimport { RateLimiterRegistry } from './rate-limiter-registry'\nimport { RATE_LIMITER_TOKENS } from './rate-limiter.tokens'\nimport { RateLimiterStoreFactory, type RateLimiterModuleOptions } from './stores/store-factory'\nimport type { IRateLimiterStore } from './stores/rate-limiter-store.interface'\n\n/**\n * Rate limiter module — opt-in, NOT registered automatically by Application.\n *\n * Usage:\n * ```typescript\n * @Module({\n *   imports: [RateLimiterModule.forRoot({ store: 'kv', binding: 'RATE_LIMITS' })],\n * })\n * export class AppModule {}\n * ```\n *\n * Define limiters in any module's `onInitialize` hook by resolving\n * `RATE_LIMITER_TOKENS.Registry` from the container. Apply them with\n * `router.throttle('name')` or `@RateLimit('name')`.\n *\n * The module:\n *  - eagerly validates the store at app boot (`onInitialize` resolves the\n *    factory and calls `create()`); a missing `forRoot` surfaces\n *    `RateLimiterError` before any request is served.\n *  - registers a `respond()` callback on the `ExceptionHandler` (via\n *    `onException`) that injects `Retry-After` and `X-RateLimit-*` headers\n *    on every {@link TooManyRequestsError} response, regardless of whether\n *    the body was rendered as JSON, HTML, or via Inertia.\n */\n@Module({\n  providers: [\n    { provide: RATE_LIMITER_TOKENS.Registry, useClass: RateLimiterRegistry },\n    { provide: RATE_LIMITER_TOKENS.StoreFactory, useClass: RateLimiterStoreFactory },\n    {\n      provide: RATE_LIMITER_TOKENS.Store,\n      useFactory: (factory: RateLimiterStoreFactory) => factory.create(),\n      inject: [RATE_LIMITER_TOKENS.StoreFactory],\n    },\n  ],\n})\nexport class RateLimiterModule implements OnInitialize, OnException {\n  /**\n   * Configure the rate limiter with a store choice.\n   *\n   * @param options - `{ store: 'kv', binding }` | `{ store: 'memory' }` | `{ store: { useClass } }`\n   */\n  static forRoot(options: RateLimiterModuleOptions): DynamicModule {\n    return {\n      module: RateLimiterModule,\n      providers: [\n        { provide: RATE_LIMITER_TOKENS.Options, useValue: options },\n      ],\n    }\n  }\n\n  /**\n   * Async configuration. Use when store options depend on other services\n   * (e.g. ConfigService).\n   */\n  static forRootAsync(options: AsyncModuleOptions<RateLimiterModuleOptions>): DynamicModule {\n    return {\n      module: RateLimiterModule,\n      providers: [\n        {\n          provide: RATE_LIMITER_TOKENS.Options,\n          useFactory: options.useFactory,\n          inject: options.inject,\n        },\n      ],\n    }\n  }\n\n  /**\n   * Eagerly resolve the store so a missing `forRoot()` fails at boot,\n   * not on the first throttled request. Also registers a per-app marker\n   * value so ThrottleMiddleware can distinguish \"module imported into this\n   * app\" from \"module class loaded somewhere in the process\" (the latter is\n   * indistinguishable at the DI layer because @Module's `registry()` call\n   * binds providers globally at decoration time).\n   */\n  onInitialize({ container }: ModuleContext): void {\n    container.resolve<IRateLimiterStore>(RATE_LIMITER_TOKENS.Store)\n    container.registerValue(RATE_LIMITER_TOKENS.ModuleMarker, { imported: true })\n  }\n\n  /**\n   * Inject `Retry-After` + `X-RateLimit-*` headers on every 429 response.\n   * The body itself is rendered by `ExceptionHandler.defaultRender` —\n   * content-negotiated, so HTML clients (browsers, Inertia) and JSON\n   * clients both get the right shape.\n   */\n  onException(handler: ExceptionHandler): void {\n    handler.dontReport([TooManyRequestsError])\n    handler.respond((response, error) => {\n      if (!(error instanceof TooManyRequestsError)) return response\n      response.headers.set('Retry-After', String(error.info.retryAfter))\n      response.headers.set('X-RateLimit-Limit', String(error.info.limit))\n      response.headers.set('X-RateLimit-Remaining', '0')\n      response.headers.set('X-RateLimit-Reset', String(Math.ceil(error.info.resetAt / 1000)))\n      return response\n    })\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAyCA,IAAa,QAAb,MAAa,MAAM;CAKC;CACA;CACA;CANlB;CACA;CAEA,YACE,eACA,KACA,WAA2B,OAC3B;EAHgB,KAAA,gBAAA;EACA,KAAA,MAAA;EACA,KAAA,WAAA;;CAGlB,OAAO,UAAU,KAAoB;EACnC,OAAO,IAAI,MAAM,GAAG,IAAI;;CAG1B,OAAO,WAAW,SAAiB,KAAoB;EACrD,OAAO,IAAI,MAAM,SAAS,IAAI;;CAGhC,OAAO,UAAU,KAAoB;EACnC,OAAO,IAAI,MAAM,IAAI,IAAI;;CAG3B,OAAO,WAAW,SAAiB,KAAoB;EACrD,OAAO,IAAI,MAAM,UAAU,IAAI,IAAI;;CAGrC,OAAO,QAAQ,KAAoB;EACjC,OAAO,IAAI,MAAM,MAAS,IAAI;;CAGhC,OAAO,OAAO,KAAoB;EAChC,OAAO,IAAI,MAAM,OAAU,IAAI,IAAI;;;CAIrC,OAAO,OAAc;EACnB,OAAO,IAAI,MAAM,GAAG,GAAG,KAAK;;;CAI9B,GAAG,KAA4B;EAC7B,KAAK,OAAO,OAAO,IAAI;EACvB,OAAO;;;;;;;CAQT,SAAS,SAAyC;EAChD,KAAK,kBAAkB;EACvB,OAAO;;CAGT,IAAI,MAA0B;EAC5B,OAAO,KAAK;;CAGd,IAAI,iBAAuD;EACzD,OAAO,KAAK;;;;;ACnDT,IAAA,sBAAA,MAAM,4BAA4B,UAAU;CAIK;CAHtD,4BAA6B,IAAI,KAA4B;CAE7D,YACE,OACA;EACA,OAAO;EAF6C,KAAA,QAAA;;;;;;;CAUtD,IAAI,MAAc,UAA+B;EAC/C,KAAK,UAAU,IAAI,MAAM,SAAS;;CAGpC,IAAI,MAAuB;EACzB,OAAO,KAAK,UAAU,IAAI,KAAK;;;;;;;;;;CAWjC,MAAM,OAAO,MAAc,KAAoB,MAAsC;EACnF,MAAM,WAAW,KAAK,UAAU,IAAI,KAAK;EACzC,IAAI,CAAC,UACH,MAAM,IAAI,iBAAiB,iBAAiB,KAAK,kDAAkD,KAAK,0CAA0C;EAGpJ,MAAM,WAAW,MAAM,SAAS,IAAI;EAEpC,MAAM,UADS,MAAM,QAAQ,SAAS,GAAG,WAAW,CAAC,SAAS,EACxC,QAAQ,MAAM,CAAC,EAAE,SAAS;EAEhD,IAAI,OAAO,WAAW,GACpB,OAAO,MAAM;EAGf,IAAI;EACJ,IAAI;EAEJ,KAAK,MAAM,SAAS,QAAQ;GAC1B,MAAM,MAAM,KAAK,QAAQ,MAAM,MAAM,eAAe,MAAM,IAAI;GAC9D,MAAM,MAAM,MAAM,KAAK,IAAI,KAAK,MAAM,cAAc;GAEpD,IAAI,IAAI,QAAQ,MAAM,KAAK;IACzB,IAAI,CAAC,YAAY,IAAI,UAAU,SAAS,SACtC,WAAW;KAAE;KAAO,SAAS,IAAI;KAAS;IAE5C;;GAGF,MAAM,YAAY,MAAM,MAAM,IAAI;GAClC,IAAI,CAAC,mBAAmB,YAAY,gBAAgB,WAClD,kBAAkB;IAAE;IAAO;IAAW,SAAS,IAAI;IAAS;;EAIhE,IAAI,UAAU;GACZ,MAAM,UAAU,KAAK,YAAY,SAAS,MAAM,KAAK,GAAG,SAAS,QAAQ;GACzE,IAAI,SAAS,MAAM,gBACjB,OAAO,SAAS,MAAM,eAAe,KAAK,QAAQ;GAEpD,MAAM,IAAI,qBAAqB;IAC7B,YAAY,OAAO,QAAQ,eAAe;IAC1C,OAAO,SAAS,MAAM;IACtB,SAAS,SAAS;IACnB,CAAC;;EAGJ,MAAM,MAAM;EAEZ,IAAI,iBAAiB;GACnB,MAAM,UAAU,KAAK,YACnB,gBAAgB,MAAM,KACtB,gBAAgB,WAChB,gBAAgB,QACjB;GAED,MAAM,aAAa,IAAI,EAAE;GACzB,WAAW,QAAQ,IAAI,qBAAqB,QAAQ,qBAAqB;GACzE,WAAW,QAAQ,IAAI,yBAAyB,QAAQ,yBAAyB;GACjF,WAAW,QAAQ,IAAI,qBAAqB,QAAQ,qBAAqB;;;;;;;CAQ7E,MAAc,IAAI,KAAa,eAA8C;EAC3E,MAAM,MAAM,KAAK,KAAK;EACtB,MAAM,WAAW,MAAM,KAAK,MAAM,IAAe,IAAI;EAErD,IAAI;EACJ,IAAI,CAAC,YAAY,SAAS,WAAW,KACnC,OAAO;GAAE,OAAO;GAAG,SAAS,MAAM,gBAAgB;GAAM;OAExD,OAAO;GAAE,OAAO,SAAS,QAAQ;GAAG,SAAS,SAAS;GAAS;EAGjE,MAAM,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,UAAU,OAAO,IAAK,CAAC;EACtE,MAAM,KAAK,MAAM,IAAI,KAAK,MAAM,WAAW;EAC3C,OAAO;;CAGT,QAAgB,MAAc,eAAuB,IAAgC;EAEnF,OAAO,MAAM,KAAK,GAAG,cAAc,GADrB,MAAM;;CAItB,YAAoB,OAAe,WAAmB,SAAmC;EACvF,MAAM,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,UAAU,KAAK,KAAK,IAAI,IAAK,CAAC;EACxE,OAAO;GACL,eAAe,OAAO,WAAW;GACjC,qBAAqB,OAAO,MAAM;GAClC,yBAAyB,OAAO,KAAK,IAAI,GAAG,UAAU,CAAC;GACvD,qBAAqB,OAAO,KAAK,KAAK,UAAU,IAAK,CAAC;GACvD;;;kCA7HJ,WAAW,EAAA,gBAAA,GAKP,OAAO,oBAAoB,MAAM,CAAA,CAAA,EAAA,oBAAA;;;;;;;;;;;;;;;ACvCtC,IAAa,qBAAb,MAA6D;CAC9B;CAA7B,YAAY,OAAsC;EAArB,KAAA,QAAA;;CAE7B,MAAM,IAAO,KAAgC;EAC3C,OAAQ,MAAM,KAAK,MAAM,IAAO,KAAK,OAAO,IAAK;;CAGnD,MAAM,IAAO,KAAa,OAAU,YAAmC;EACrE,MAAM,MAAM,KAAK,IAAI,IAAI,KAAK,KAAK,WAAW,CAAC;EAC/C,MAAM,KAAK,MAAM,IAAI,KAAK,KAAK,UAAU,MAAM,EAAE,EAAE,eAAe,KAAK,CAAC;;CAG1E,MAAM,OAAO,KAA4B;EACvC,MAAM,KAAK,MAAM,OAAO,IAAI;;;;;;;;;;;;;;ACZhC,IAAa,2BAAb,MAAmE;CACjE,0BAA2B,IAAI,KAAoB;CAEnD,IAAO,KAAgC;EACrC,MAAM,QAAQ,KAAK,QAAQ,IAAI,IAAI;EACnC,IAAI,CAAC,OAAO,OAAO,QAAQ,QAAQ,KAAK;EACxC,IAAI,MAAM,aAAa,KAAK,KAAK,EAAE;GACjC,KAAK,QAAQ,OAAO,IAAI;GACxB,OAAO,QAAQ,QAAQ,KAAK;;EAE9B,OAAO,QAAQ,QAAQ,MAAM,MAAW;;CAG1C,IAAO,KAAa,OAAU,YAAmC;EAC/D,KAAK,QAAQ,IAAI,KAAK;GAAE;GAAO,WAAW,KAAK,KAAK,GAAG,aAAa;GAAM,CAAC;EAC3E,OAAO,QAAQ,SAAS;;CAG1B,OAAO,KAA4B;EACjC,KAAK,QAAQ,OAAO,IAAI;EACxB,OAAO,QAAQ,SAAS;;;;;ACHrB,IAAA,0BAAA,MAAM,wBAAwB;CAEiB;CACE;CACV;CAEzB;CALnB,YACE,KACA,OACA,WACA,SAEA;EALkD,KAAA,MAAA;EACE,KAAA,QAAA;EACV,KAAA,YAAA;EAEzB,KAAA,UAAA;;CAGnB,SAA4B;EAC1B,IAAI,CAAC,KAAK,SACR,MAAM,IAAI,iBAAiB,oHAAoH;EAGjJ,MAAM,EAAE,UAAU,KAAK;EAEvB,IAAI,UAAU,UACZ,OAAO,IAAI,0BAA0B;EAGvC,IAAI,UAAU,MAAM;GAClB,MAAM,UAAU,KAAK,IAAI,KAAK,QAAQ;GACtC,IAAI,CAAC,SACH,MAAM,IAAI,iBAAiB,eAAe,OAAO,KAAK,QAAQ,QAAQ,CAAC,wCAAwC;GAEjH,OAAO,IAAI,mBAAmB,KAAK,MAAM,YAAY,QAAQ,CAAC;;EAGhE,OAAO,KAAK,UAAU,QAA2B,MAAM,SAAS;;;;CA7BnE,WAAW;oBAGP,OAAO,UAAU,cAAc,CAAA;oBAC/B,OAAO,aAAa,aAAa,CAAA;oBACjC,OAAO,gBAAgB,CAAA;oBACvB,OAAO,oBAAoB,SAAS,EAAE,YAAY,MAAM,CAAC,CAAA;;;;;ACMvD,IAAA,oBAAA,qBAAA,MAAM,kBAAuD;;;;;;CAMlE,OAAO,QAAQ,SAAkD;EAC/D,OAAO;GACL,QAAA;GACA,WAAW,CACT;IAAE,SAAS,oBAAoB;IAAS,UAAU;IAAS,CAC5D;GACF;;;;;;CAOH,OAAO,aAAa,SAAsE;EACxF,OAAO;GACL,QAAA;GACA,WAAW,CACT;IACE,SAAS,oBAAoB;IAC7B,YAAY,QAAQ;IACpB,QAAQ,QAAQ;IACjB,CACF;GACF;;;;;;;;;;CAWH,aAAa,EAAE,aAAkC;EAC/C,UAAU,QAA2B,oBAAoB,MAAM;EAC/D,UAAU,cAAc,oBAAoB,cAAc,EAAE,UAAU,MAAM,CAAC;;;;;;;;CAS/E,YAAY,SAAiC;EAC3C,QAAQ,WAAW,CAAC,qBAAqB,CAAC;EAC1C,QAAQ,SAAS,UAAU,UAAU;GACnC,IAAI,EAAE,iBAAiB,uBAAuB,OAAO;GACrD,SAAS,QAAQ,IAAI,eAAe,OAAO,MAAM,KAAK,WAAW,CAAC;GAClE,SAAS,QAAQ,IAAI,qBAAqB,OAAO,MAAM,KAAK,MAAM,CAAC;GACnE,SAAS,QAAQ,IAAI,yBAAyB,IAAI;GAClD,SAAS,QAAQ,IAAI,qBAAqB,OAAO,KAAK,KAAK,MAAM,KAAK,UAAU,IAAK,CAAC,CAAC;GACvF,OAAO;IACP;;;qDAvEL,OAAO,EACN,WAAW;CACT;EAAE,SAAS,oBAAoB;EAAU,UAAU;EAAqB;CACxE;EAAE,SAAS,oBAAoB;EAAc,UAAU;EAAyB;CAChF;EACE,SAAS,oBAAoB;EAC7B,aAAa,YAAqC,QAAQ,QAAQ;EAClE,QAAQ,CAAC,oBAAoB,aAAa;EAC3C;CACF,EACF,CAAC,CAAA,EAAA,kBAAA"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/rate-limiter/limit.ts","../../src/rate-limiter/rate-limiter-registry.ts","../../src/rate-limiter/stores/kv-store.ts","../../src/rate-limiter/stores/memory-store.ts","../../src/rate-limiter/stores/store-factory.ts","../../src/rate-limiter/rate-limiter.module.ts"],"sourcesContent":["import type { RouterContext } from '../router/router-context'\n\n/**\n * Standard rate-limit response headers passed to custom response handlers.\n * Keys are canonical HTTP header names; values are the stringified counts.\n */\nexport interface RateLimitHeaders {\n  'Retry-After': string\n  'X-RateLimit-Limit': string\n  'X-RateLimit-Remaining': string\n  'X-RateLimit-Reset': string\n}\n\n/**\n * Custom response handler invoked when a limit is exceeded and the user\n * supplied `.response()` on the {@link Limit}. Receives the request context\n * and the precomputed standard headers (which the handler can spread, drop,\n * or override).\n */\nexport type RateLimitResponseHandler = (\n  ctx: RouterContext,\n  headers: RateLimitHeaders,\n) => Response | Promise<Response>\n\n/**\n * A single rate limit window.\n *\n * Build via the static factories (`perSecond`, `perMinute`, `perMinutes`,\n * `perHour`, `perDay`, `none`). Chain `.by(key)` to scope per-actor and\n * `.response(handler)` to override the default 429 response.\n *\n * Returned (singly or as an array) by limiter resolvers registered via\n * `RateLimiterRegistry.for()`.\n *\n * @example\n * ```typescript\n * Limit.perMinute(60).by(ctx.header('cf-connecting-ip') ?? 'global')\n * Limit.perHour(100).by(userId)\n * Limit.none()                                // bypass\n * ```\n */\nexport class Limit {\n  private _key?: string\n  private _customResponse?: RateLimitResponseHandler\n\n  private constructor(\n    public readonly windowSeconds: number,\n    public readonly max: number,\n    public readonly disabled = false,\n  ) {}\n\n  static perSecond(max: number): Limit {\n    return new Limit(1, max)\n  }\n\n  static perSeconds(seconds: number, max: number): Limit {\n    return new Limit(seconds, max)\n  }\n\n  static perMinute(max: number): Limit {\n    return new Limit(60, max)\n  }\n\n  static perMinutes(minutes: number, max: number): Limit {\n    return new Limit(minutes * 60, max)\n  }\n\n  static perHour(max: number): Limit {\n    return new Limit(60 * 60, max)\n  }\n\n  static perDay(max: number): Limit {\n    return new Limit(24 * 60 * 60, max)\n  }\n\n  /** Bypass the limiter entirely for this request. */\n  static none(): Limit {\n    return new Limit(0, 0, true)\n  }\n\n  /** Scope this limit to a specific actor (user id, IP, tenant, etc.). */\n  by(key: string | number): this {\n    this._key = String(key)\n    return this\n  }\n\n  /**\n   * Override the default 429 response. The handler receives the standard\n   * `RateLimitHeaders` so it can spread them onto its own Response or omit\n   * them as it sees fit.\n   */\n  response(handler: RateLimitResponseHandler): this {\n    this._customResponse = handler\n    return this\n  }\n\n  get key(): string | undefined {\n    return this._key\n  }\n\n  get customResponse(): RateLimitResponseHandler | undefined {\n    return this._customResponse\n  }\n}\n","import { inject } from '../di'\nimport { Singleton } from '../di/decorators'\nimport { Macroable } from '../macroable'\nimport type { Next } from '../router/middleware.interface'\nimport type { RouterContext } from '../router/router-context'\nimport { RateLimiterError, TooManyRequestsError } from './errors'\nimport type { Limit, RateLimitHeaders } from './limit'\nimport { RATE_LIMITER_TOKENS } from './rate-limiter.tokens'\nimport type { IRateLimiterStore, RateLimitHit } from './stores/rate-limiter-store.interface'\n\n/**\n * Resolver function registered via {@link RateLimiterRegistry.for}. Receives\n * the request context and returns the limit (or limits) that apply to this\n * request. Return `Limit.none()` to bypass for the current request.\n */\nexport type LimitResolver = (\n  ctx: RouterContext,\n) => Limit | Limit[] | Promise<Limit | Limit[]>\n\ninterface StoredHit {\n  count: number\n  resetAt: number\n}\n\n/**\n * Central registry of named rate limiters and the request-time enforcement\n * pipeline. Resolved as a singleton; consumed by `ThrottleMiddleware`.\n *\n * Register limiters in a module's `onInitialize` hook:\n * ```typescript\n * @Module({})\n * export class RateLimitsModule implements OnInitialize {\n *   onInitialize({ container }: ModuleContext): void {\n *     const limiter = container.resolve<RateLimiterRegistry>(RATE_LIMITER_TOKENS.Registry)\n *     limiter.for('api', (ctx) => Limit.perMinute(60).by(ctx.header('cf-connecting-ip') ?? '*'))\n *   }\n * }\n * ```\n *\n * Extensible via `Macroable`: adapter packages (e.g. `@stratal/framework/auth`)\n * can attach extra registration methods such as `forPath()` for better-auth\n * `customRules` interop.\n */\n// IMPORTANT: do not pass a token to @Singleton — that would self-register\n// the class globally at module-load time, making the Registry resolvable\n// even when the user never imported RateLimiterModule. We rely on\n// RateLimiterModule providers being the only binding source, so\n// `{ isOptional: true }` in ThrottleMiddleware correctly returns undefined\n// when the module is missing.\n@Singleton()\nexport class RateLimiterRegistry extends Macroable {\n  private readonly resolvers = new Map<string, LimitResolver>()\n\n  constructor(\n    @inject(RATE_LIMITER_TOKENS.Store) private readonly store: IRateLimiterStore,\n  ) {\n    super()\n  }\n\n  /**\n   * Register a named limiter. Names must be unique; calling `for()` again\n   * with the same name overwrites the previous resolver (matches Laravel\n   * `RateLimiter::for` semantics — last definition wins).\n   */\n  for(name: string, resolver: LimitResolver): void {\n    this.resolvers.set(name, resolver)\n  }\n\n  has(name: string): boolean {\n    return this.resolvers.has(name)\n  }\n\n  /**\n   * Enforce the named limiter for the current request. Called by\n   * `ThrottleMiddleware` (the per-name class produced by\n   * `createThrottleMiddleware`). Resolves the limiter, increments the store\n   * for each non-bypassed limit, sets `X-RateLimit-*` headers on success, and\n   * either invokes the limit's custom `.response()` or throws\n   * {@link TooManyRequestsError} when a limit is exceeded.\n   */\n  async handle(name: string, ctx: RouterContext, next: Next): Promise<Response | void> {\n    const resolver = this.resolvers.get(name)\n    if (!resolver) {\n      throw new RateLimiterError(`Rate limiter \"${name}\" is not defined. Register it with limiter.for(\"${name}\", ...) in a module's onInitialize hook.`)\n    }\n\n    const resolved = await resolver(ctx)\n    const limits = Array.isArray(resolved) ? resolved : [resolved]\n    const active = limits.filter((l) => !l.disabled)\n\n    if (active.length === 0) {\n      return next()\n    }\n\n    let mostRestrictive: { limit: Limit; remaining: number; resetAt: number } | undefined\n    let exceeded: { limit: Limit; resetAt: number } | undefined\n\n    for (const limit of active) {\n      const key = this.makeKey(name, limit.windowSeconds, limit.key)\n      const hit = await this.hit(key, limit.windowSeconds)\n\n      if (hit.count > limit.max) {\n        if (!exceeded || hit.resetAt > exceeded.resetAt) {\n          exceeded = { limit, resetAt: hit.resetAt }\n        }\n        continue\n      }\n\n      const remaining = limit.max - hit.count\n      if (!mostRestrictive || remaining < mostRestrictive.remaining) {\n        mostRestrictive = { limit, remaining, resetAt: hit.resetAt }\n      }\n    }\n\n    if (exceeded) {\n      const headers = this.makeHeaders(exceeded.limit.max, 0, exceeded.resetAt)\n      if (exceeded.limit.customResponse) {\n        return exceeded.limit.customResponse(ctx, headers)\n      }\n      throw new TooManyRequestsError({\n        retryAfter: Number(headers['Retry-After']),\n        limit: exceeded.limit.max,\n        resetAt: exceeded.resetAt,\n      })\n    }\n\n    await next()\n\n    if (mostRestrictive) {\n      const headers = this.makeHeaders(\n        mostRestrictive.limit.max,\n        mostRestrictive.remaining,\n        mostRestrictive.resetAt,\n      )\n      // Hono populates ctx.c.res after next() — same pattern as logger.middleware.ts.\n      const downstream = ctx.c.res\n      downstream.headers.set('X-RateLimit-Limit', headers['X-RateLimit-Limit'])\n      downstream.headers.set('X-RateLimit-Remaining', headers['X-RateLimit-Remaining'])\n      downstream.headers.set('X-RateLimit-Reset', headers['X-RateLimit-Reset'])\n    }\n  }\n\n  /**\n   * Get-modify-set increment over the typed KV store. Not atomic across\n   * concurrent edge requests on KV — see `KvRateLimiterStore`'s caveat.\n   */\n  private async hit(key: string, windowSeconds: number): Promise<RateLimitHit> {\n    const now = Date.now()\n    const existing = await this.store.get<StoredHit>(key)\n\n    let next: StoredHit\n    if (!existing || existing.resetAt <= now) {\n      next = { count: 1, resetAt: now + windowSeconds * 1000 }\n    } else {\n      next = { count: existing.count + 1, resetAt: existing.resetAt }\n    }\n\n    const ttlSeconds = Math.max(1, Math.ceil((next.resetAt - now) / 1000))\n    await this.store.set(key, next, ttlSeconds)\n    return next\n  }\n\n  private makeKey(name: string, windowSeconds: number, by: string | undefined): string {\n    const actor = by ?? '*'\n    return `rl:${name}:${windowSeconds}:${actor}`\n  }\n\n  private makeHeaders(limit: number, remaining: number, resetAt: number): RateLimitHeaders {\n    const retryAfter = Math.max(1, Math.ceil((resetAt - Date.now()) / 1000))\n    return {\n      'Retry-After': String(retryAfter),\n      'X-RateLimit-Limit': String(limit),\n      'X-RateLimit-Remaining': String(Math.max(0, remaining)),\n      'X-RateLimit-Reset': String(Math.ceil(resetAt / 1000)),\n    }\n  }\n}\n","import type { CacheService } from '../../cache/services/cache.service'\nimport type { IRateLimiterStore } from './rate-limiter-store.interface'\n\n/**\n * Cloudflare KV-backed typed KV store.\n *\n * KV's minimum `expirationTtl` is 60 seconds; sub-60s windows are still\n * enforced by the registry's algorithm via the persisted `resetAt`, but\n * the key itself may live in KV longer than the logical window.\n *\n * KV has no native atomic increment, so concurrent writes from different\n * edge locations may undercount under high contention. That's an inherent\n * KV tradeoff — pick `{ useClass: MyDurableObjectStore }` for strict\n * accuracy across edges.\n */\nexport class KvRateLimiterStore implements IRateLimiterStore {\n  constructor(private readonly cache: CacheService) {}\n\n  async get<T>(key: string): Promise<T | null> {\n    return (await this.cache.get<T>(key, 'json')) ?? null\n  }\n\n  async set<T>(key: string, value: T, ttlSeconds: number): Promise<void> {\n    const ttl = Math.max(60, Math.ceil(ttlSeconds))\n    await this.cache.put(key, JSON.stringify(value), { expirationTtl: ttl })\n  }\n\n  async delete(key: string): Promise<void> {\n    await this.cache.delete(key)\n  }\n}\n","import type { IRateLimiterStore } from './rate-limiter-store.interface'\n\ninterface Entry {\n  value: unknown\n  expiresAt: number\n}\n\n/**\n * In-process Map-backed typed KV store.\n *\n * Suitable for tests and single-isolate scenarios. Not safe across\n * Cloudflare Worker isolates — entries reset whenever a fresh isolate\n * spins up. Use `KvRateLimiterStore` (or a custom Durable Object store)\n * for production. Expiry is lazy: stale entries are dropped on the next\n * `get`.\n */\nexport class InMemoryRateLimiterStore implements IRateLimiterStore {\n  private readonly entries = new Map<string, Entry>()\n\n  get<T>(key: string): Promise<T | null> {\n    const entry = this.entries.get(key)\n    if (!entry) return Promise.resolve(null)\n    if (entry.expiresAt <= Date.now()) {\n      this.entries.delete(key)\n      return Promise.resolve(null)\n    }\n    return Promise.resolve(entry.value as T)\n  }\n\n  set<T>(key: string, value: T, ttlSeconds: number): Promise<void> {\n    this.entries.set(key, { value, expiresAt: Date.now() + ttlSeconds * 1000 })\n    return Promise.resolve()\n  }\n\n  delete(key: string): Promise<void> {\n    this.entries.delete(key)\n    return Promise.resolve()\n  }\n}\n","import { inject } from '../../di'\nimport { CACHE_TOKENS } from '../../cache/cache.tokens'\nimport type { CacheService } from '../../cache/services/cache.service'\nimport { CONTAINER_TOKEN, type Container } from '../../di'\nimport { Singleton } from '../../di/decorators'\nimport { DI_TOKENS } from '../../di/tokens'\nimport type { StratalEnv } from '../../env'\nimport type { Constructor } from '../../types'\nimport { RateLimiterError } from '../errors'\nimport { RATE_LIMITER_TOKENS } from '../rate-limiter.tokens'\nimport { KvRateLimiterStore } from './kv-store'\nimport { InMemoryRateLimiterStore } from './memory-store'\nimport type { IRateLimiterStore } from './rate-limiter-store.interface'\n\n/**\n * Configuration for `RateLimiterModule.forRoot()`. Picks the backing store.\n *\n * - `'kv'`: Cloudflare KV. `binding` names the KVNamespace on `StratalEnv`.\n * - `'memory'`: in-process Map. Tests / single-isolate only.\n * - `{ useClass }`: any class implementing `IRateLimiterStore`. Resolved\n *   from the DI container (so the class can declare its own `@inject` deps,\n *   e.g. a Durable Object namespace from `StratalEnv`).\n */\nexport type RateLimiterModuleOptions =\n  | { store: 'kv'; binding: keyof StratalEnv }\n  | { store: 'memory' }\n  | { store: { useClass: Constructor<IRateLimiterStore> } }\n\n// IMPORTANT: see RateLimiterRegistry — no token on @Singleton so the\n// factory isn't globally bound at class-load time. Module providers are\n// the sole binding source, which keeps the \"module not imported\" detection\n// in ThrottleMiddleware working.\n@Singleton()\nexport class RateLimiterStoreFactory {\n  constructor(\n    @inject(DI_TOKENS.CloudflareEnv) private readonly env: StratalEnv,\n    @inject(CACHE_TOKENS.CacheService) private readonly cache: CacheService,\n    @inject(CONTAINER_TOKEN) private readonly container: Container,\n    @inject(RATE_LIMITER_TOKENS.Options, { isOptional: true })\n    private readonly options?: RateLimiterModuleOptions,\n  ) {}\n\n  create(): IRateLimiterStore {\n    if (!this.options) {\n      throw new RateLimiterError('RateLimiterModule is not configured. Call RateLimiterModule.forRoot({ store: ... }) to configure a backing store.')\n    }\n\n    const { store } = this.options\n\n    if (store === 'memory') {\n      return new InMemoryRateLimiterStore()\n    }\n\n    if (store === 'kv') {\n      const binding = this.env[this.options.binding] as KVNamespace | undefined\n      if (!binding) {\n        throw new RateLimiterError(`KV binding \"${String(this.options.binding)}\" is not available in the environment.`)\n      }\n      return new KvRateLimiterStore(this.cache.withBinding(binding))\n    }\n\n    return this.container.resolve<IRateLimiterStore>(store.useClass)\n  }\n}\n","import { CacheModule } from '../cache'\nimport type { ExceptionHandler } from '../errors/exception-handler'\nimport { Module } from '../module'\nimport type { AsyncModuleOptions, DynamicModule, ModuleContext, OnException, OnInitialize } from '../module/types'\nimport { TooManyRequestsError } from './errors'\nimport { RateLimiterRegistry } from './rate-limiter-registry'\nimport { RATE_LIMITER_TOKENS } from './rate-limiter.tokens'\nimport { RateLimiterStoreFactory, type RateLimiterModuleOptions } from './stores/store-factory'\nimport type { IRateLimiterStore } from './stores/rate-limiter-store.interface'\n\n/**\n * Rate limiter module — opt-in, NOT registered automatically by Application.\n *\n * Usage:\n * ```typescript\n * @Module({\n *   imports: [RateLimiterModule.forRoot({ store: 'kv', binding: 'RATE_LIMITS' })],\n * })\n * export class AppModule {}\n * ```\n *\n * Define limiters in any module's `onInitialize` hook by resolving\n * `RATE_LIMITER_TOKENS.Registry` from the container. Apply them with\n * `router.throttle('name')` or `@RateLimit('name')`.\n *\n * The module:\n *  - eagerly validates the store at app boot (`onInitialize` resolves the\n *    factory and calls `create()`); a missing `forRoot` surfaces\n *    `RateLimiterError` before any request is served.\n *  - registers a `respond()` callback on the `ExceptionHandler` (via\n *    `onException`) that injects `Retry-After` and `X-RateLimit-*` headers\n *    on every {@link TooManyRequestsError} response, regardless of whether\n *    the body was rendered as JSON, HTML, or via Inertia.\n */\n@Module({\n  imports: [CacheModule],\n  providers: [\n    { provide: RATE_LIMITER_TOKENS.Registry, useClass: RateLimiterRegistry },\n    { provide: RATE_LIMITER_TOKENS.StoreFactory, useClass: RateLimiterStoreFactory },\n    {\n      provide: RATE_LIMITER_TOKENS.Store,\n      useFactory: (factory: RateLimiterStoreFactory) => factory.create(),\n      inject: [RATE_LIMITER_TOKENS.StoreFactory],\n    },\n  ],\n})\nexport class RateLimiterModule implements OnInitialize, OnException {\n  /**\n   * Configure the rate limiter with a store choice.\n   *\n   * @param options - `{ store: 'kv', binding }` | `{ store: 'memory' }` | `{ store: { useClass } }`\n   */\n  static forRoot(options: RateLimiterModuleOptions): DynamicModule {\n    return {\n      module: RateLimiterModule,\n      providers: [\n        { provide: RATE_LIMITER_TOKENS.Options, useValue: options },\n      ],\n    }\n  }\n\n  /**\n   * Async configuration. Use when store options depend on other services\n   * (e.g. ConfigService).\n   */\n  static forRootAsync(options: AsyncModuleOptions<RateLimiterModuleOptions>): DynamicModule {\n    return {\n      module: RateLimiterModule,\n      providers: [\n        {\n          provide: RATE_LIMITER_TOKENS.Options,\n          useFactory: options.useFactory,\n          inject: options.inject,\n        },\n      ],\n    }\n  }\n\n  /**\n   * Eagerly resolve the store so a missing `forRoot()` fails at boot,\n   * not on the first throttled request. Also registers a per-app marker\n   * value so ThrottleMiddleware can distinguish \"module imported into this\n   * app\" from \"module class loaded somewhere in the process\" (the latter is\n   * indistinguishable at the DI layer because @Module's `registry()` call\n   * binds providers globally at decoration time).\n   */\n  onInitialize({ container }: ModuleContext): void {\n    container.resolve<IRateLimiterStore>(RATE_LIMITER_TOKENS.Store)\n    container.registerValue(RATE_LIMITER_TOKENS.ModuleMarker, { imported: true })\n  }\n\n  /**\n   * Inject `Retry-After` + `X-RateLimit-*` headers on every 429 response.\n   * The body itself is rendered by `ExceptionHandler.defaultRender` —\n   * content-negotiated, so HTML clients (browsers, Inertia) and JSON\n   * clients both get the right shape.\n   */\n  onException(handler: ExceptionHandler): void {\n    handler.dontReport([TooManyRequestsError])\n    handler.respond((response, error) => {\n      if (!(error instanceof TooManyRequestsError)) return response\n      response.headers.set('Retry-After', String(error.info.retryAfter))\n      response.headers.set('X-RateLimit-Limit', String(error.info.limit))\n      response.headers.set('X-RateLimit-Remaining', '0')\n      response.headers.set('X-RateLimit-Reset', String(Math.ceil(error.info.resetAt / 1000)))\n      return response\n    })\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,IAAa,QAAb,MAAa,MAAM;CAKC;CACA;CACA;CANlB;CACA;CAEA,YACE,eACA,KACA,WAA2B,OAC3B;EAHgB,KAAA,gBAAA;EACA,KAAA,MAAA;EACA,KAAA,WAAA;CACf;CAEH,OAAO,UAAU,KAAoB;EACnC,OAAO,IAAI,MAAM,GAAG,GAAG;CACzB;CAEA,OAAO,WAAW,SAAiB,KAAoB;EACrD,OAAO,IAAI,MAAM,SAAS,GAAG;CAC/B;CAEA,OAAO,UAAU,KAAoB;EACnC,OAAO,IAAI,MAAM,IAAI,GAAG;CAC1B;CAEA,OAAO,WAAW,SAAiB,KAAoB;EACrD,OAAO,IAAI,MAAM,UAAU,IAAI,GAAG;CACpC;CAEA,OAAO,QAAQ,KAAoB;EACjC,OAAO,IAAI,MAAM,MAAS,GAAG;CAC/B;CAEA,OAAO,OAAO,KAAoB;EAChC,OAAO,IAAI,MAAM,OAAU,IAAI,GAAG;CACpC;;CAGA,OAAO,OAAc;EACnB,OAAO,IAAI,MAAM,GAAG,GAAG,IAAI;CAC7B;;CAGA,GAAG,KAA4B;EAC7B,KAAK,OAAO,OAAO,GAAG;EACtB,OAAO;CACT;;;;;;CAOA,SAAS,SAAyC;EAChD,KAAK,kBAAkB;EACvB,OAAO;CACT;CAEA,IAAI,MAA0B;EAC5B,OAAO,KAAK;CACd;CAEA,IAAI,iBAAuD;EACzD,OAAO,KAAK;CACd;AACF;;;ACrDO,IAAA,sBAAA,MAAM,4BAA4B,UAAU;CAIK;CAHtD,4BAA6B,IAAI,IAA2B;CAE5D,YACE,OACA;EACA,MAAM;EAF8C,KAAA,QAAA;CAGtD;;;;;;CAOA,IAAI,MAAc,UAA+B;EAC/C,KAAK,UAAU,IAAI,MAAM,QAAQ;CACnC;CAEA,IAAI,MAAuB;EACzB,OAAO,KAAK,UAAU,IAAI,IAAI;CAChC;;;;;;;;;CAUA,MAAM,OAAO,MAAc,KAAoB,MAAsC;EACnF,MAAM,WAAW,KAAK,UAAU,IAAI,IAAI;EACxC,IAAI,CAAC,UACH,MAAM,IAAI,iBAAiB,iBAAiB,KAAK,kDAAkD,KAAK,yCAAyC;EAGnJ,MAAM,WAAW,MAAM,SAAS,GAAG;EAEnC,MAAM,UADS,MAAM,QAAQ,QAAQ,IAAI,WAAW,CAAC,QAAQ,GACvC,QAAQ,MAAM,CAAC,EAAE,QAAQ;EAE/C,IAAI,OAAO,WAAW,GACpB,OAAO,KAAK;EAGd,IAAI;EACJ,IAAI;EAEJ,KAAK,MAAM,SAAS,QAAQ;GAC1B,MAAM,MAAM,KAAK,QAAQ,MAAM,MAAM,eAAe,MAAM,GAAG;GAC7D,MAAM,MAAM,MAAM,KAAK,IAAI,KAAK,MAAM,aAAa;GAEnD,IAAI,IAAI,QAAQ,MAAM,KAAK;IACzB,IAAI,CAAC,YAAY,IAAI,UAAU,SAAS,SACtC,WAAW;KAAE;KAAO,SAAS,IAAI;IAAQ;IAE3C;GACF;GAEA,MAAM,YAAY,MAAM,MAAM,IAAI;GAClC,IAAI,CAAC,mBAAmB,YAAY,gBAAgB,WAClD,kBAAkB;IAAE;IAAO;IAAW,SAAS,IAAI;GAAQ;EAE/D;EAEA,IAAI,UAAU;GACZ,MAAM,UAAU,KAAK,YAAY,SAAS,MAAM,KAAK,GAAG,SAAS,OAAO;GACxE,IAAI,SAAS,MAAM,gBACjB,OAAO,SAAS,MAAM,eAAe,KAAK,OAAO;GAEnD,MAAM,IAAI,qBAAqB;IAC7B,YAAY,OAAO,QAAQ,cAAc;IACzC,OAAO,SAAS,MAAM;IACtB,SAAS,SAAS;GACpB,CAAC;EACH;EAEA,MAAM,KAAK;EAEX,IAAI,iBAAiB;GACnB,MAAM,UAAU,KAAK,YACnB,gBAAgB,MAAM,KACtB,gBAAgB,WAChB,gBAAgB,OAClB;GAEA,MAAM,aAAa,IAAI,EAAE;GACzB,WAAW,QAAQ,IAAI,qBAAqB,QAAQ,oBAAoB;GACxE,WAAW,QAAQ,IAAI,yBAAyB,QAAQ,wBAAwB;GAChF,WAAW,QAAQ,IAAI,qBAAqB,QAAQ,oBAAoB;EAC1E;CACF;;;;;CAMA,MAAc,IAAI,KAAa,eAA8C;EAC3E,MAAM,MAAM,KAAK,IAAI;EACrB,MAAM,WAAW,MAAM,KAAK,MAAM,IAAe,GAAG;EAEpD,IAAI;EACJ,IAAI,CAAC,YAAY,SAAS,WAAW,KACnC,OAAO;GAAE,OAAO;GAAG,SAAS,MAAM,gBAAgB;EAAK;OAEvD,OAAO;GAAE,OAAO,SAAS,QAAQ;GAAG,SAAS,SAAS;EAAQ;EAGhE,MAAM,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,UAAU,OAAO,GAAI,CAAC;EACrE,MAAM,KAAK,MAAM,IAAI,KAAK,MAAM,UAAU;EAC1C,OAAO;CACT;CAEA,QAAgB,MAAc,eAAuB,IAAgC;EAEnF,OAAO,MAAM,KAAK,GAAG,cAAc,GADrB,MAAM;CAEtB;CAEA,YAAoB,OAAe,WAAmB,SAAmC;EACvF,MAAM,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,UAAU,KAAK,IAAI,KAAK,GAAI,CAAC;EACvE,OAAO;GACL,eAAe,OAAO,UAAU;GAChC,qBAAqB,OAAO,KAAK;GACjC,yBAAyB,OAAO,KAAK,IAAI,GAAG,SAAS,CAAC;GACtD,qBAAqB,OAAO,KAAK,KAAK,UAAU,GAAI,CAAC;EACvD;CACF;AACF;kCA/HC,UAAU,GAAA,gBAAA,GAKN,OAAO,oBAAoB,KAAK,CAAA,CAAA,GAAA,mBAAA;;;;;;;;;;;;;;;ACvCrC,IAAa,qBAAb,MAA6D;CAC9B;CAA7B,YAAY,OAAsC;EAArB,KAAA,QAAA;CAAsB;CAEnD,MAAM,IAAO,KAAgC;EAC3C,OAAQ,MAAM,KAAK,MAAM,IAAO,KAAK,MAAM,KAAM;CACnD;CAEA,MAAM,IAAO,KAAa,OAAU,YAAmC;EACrE,MAAM,MAAM,KAAK,IAAI,IAAI,KAAK,KAAK,UAAU,CAAC;EAC9C,MAAM,KAAK,MAAM,IAAI,KAAK,KAAK,UAAU,KAAK,GAAG,EAAE,eAAe,IAAI,CAAC;CACzE;CAEA,MAAM,OAAO,KAA4B;EACvC,MAAM,KAAK,MAAM,OAAO,GAAG;CAC7B;AACF;;;;;;;;;;;;ACdA,IAAa,2BAAb,MAAmE;CACjE,0BAA2B,IAAI,IAAmB;CAElD,IAAO,KAAgC;EACrC,MAAM,QAAQ,KAAK,QAAQ,IAAI,GAAG;EAClC,IAAI,CAAC,OAAO,OAAO,QAAQ,QAAQ,IAAI;EACvC,IAAI,MAAM,aAAa,KAAK,IAAI,GAAG;GACjC,KAAK,QAAQ,OAAO,GAAG;GACvB,OAAO,QAAQ,QAAQ,IAAI;EAC7B;EACA,OAAO,QAAQ,QAAQ,MAAM,KAAU;CACzC;CAEA,IAAO,KAAa,OAAU,YAAmC;EAC/D,KAAK,QAAQ,IAAI,KAAK;GAAE;GAAO,WAAW,KAAK,IAAI,IAAI,aAAa;EAAK,CAAC;EAC1E,OAAO,QAAQ,QAAQ;CACzB;CAEA,OAAO,KAA4B;EACjC,KAAK,QAAQ,OAAO,GAAG;EACvB,OAAO,QAAQ,QAAQ;CACzB;AACF;;;ACLO,IAAA,0BAAA,MAAM,wBAAwB;CAEiB;CACE;CACV;CAEzB;CALnB,YACE,KACA,OACA,WACA,SAEA;EALkD,KAAA,MAAA;EACE,KAAA,QAAA;EACV,KAAA,YAAA;EAEzB,KAAA,UAAA;CAChB;CAEH,SAA4B;EAC1B,IAAI,CAAC,KAAK,SACR,MAAM,IAAI,iBAAiB,mHAAmH;EAGhJ,MAAM,EAAE,UAAU,KAAK;EAEvB,IAAI,UAAU,UACZ,OAAO,IAAI,yBAAyB;EAGtC,IAAI,UAAU,MAAM;GAClB,MAAM,UAAU,KAAK,IAAI,KAAK,QAAQ;GACtC,IAAI,CAAC,SACH,MAAM,IAAI,iBAAiB,eAAe,OAAO,KAAK,QAAQ,OAAO,EAAE,uCAAuC;GAEhH,OAAO,IAAI,mBAAmB,KAAK,MAAM,YAAY,OAAO,CAAC;EAC/D;EAEA,OAAO,KAAK,UAAU,QAA2B,MAAM,QAAQ;CACjE;AACF;;CA/BC,UAAU;oBAGN,OAAO,UAAU,aAAa,CAAA;oBAC9B,OAAO,aAAa,YAAY,CAAA;oBAChC,OAAO,eAAe,CAAA;oBACtB,OAAO,oBAAoB,SAAS,EAAE,YAAY,KAAK,CAAC,CAAA;;;;;ACQtD,IAAA,oBAAA,qBAAA,MAAM,kBAAuD;;;;;;CAMlE,OAAO,QAAQ,SAAkD;EAC/D,OAAO;GACL,QAAA;GACA,WAAW,CACT;IAAE,SAAS,oBAAoB;IAAS,UAAU;GAAQ,CAC5D;EACF;CACF;;;;;CAMA,OAAO,aAAa,SAAsE;EACxF,OAAO;GACL,QAAA;GACA,WAAW,CACT;IACE,SAAS,oBAAoB;IAC7B,YAAY,QAAQ;IACpB,QAAQ,QAAQ;GAClB,CACF;EACF;CACF;;;;;;;;;CAUA,aAAa,EAAE,aAAkC;EAC/C,UAAU,QAA2B,oBAAoB,KAAK;EAC9D,UAAU,cAAc,oBAAoB,cAAc,EAAE,UAAU,KAAK,CAAC;CAC9E;;;;;;;CAQA,YAAY,SAAiC;EAC3C,QAAQ,WAAW,CAAC,oBAAoB,CAAC;EACzC,QAAQ,SAAS,UAAU,UAAU;GACnC,IAAI,EAAE,iBAAiB,uBAAuB,OAAO;GACrD,SAAS,QAAQ,IAAI,eAAe,OAAO,MAAM,KAAK,UAAU,CAAC;GACjE,SAAS,QAAQ,IAAI,qBAAqB,OAAO,MAAM,KAAK,KAAK,CAAC;GAClE,SAAS,QAAQ,IAAI,yBAAyB,GAAG;GACjD,SAAS,QAAQ,IAAI,qBAAqB,OAAO,KAAK,KAAK,MAAM,KAAK,UAAU,GAAI,CAAC,CAAC;GACtF,OAAO;EACT,CAAC;CACH;AACF;qDA1EC,OAAO;CACN,SAAS,CAAC,WAAW;CACrB,WAAW;EACT;GAAE,SAAS,oBAAoB;GAAU,UAAU;EAAoB;EACvE;GAAE,SAAS,oBAAoB;GAAc,UAAU;EAAwB;EAC/E;GACE,SAAS,oBAAoB;GAC7B,aAAa,YAAqC,QAAQ,OAAO;GACjE,QAAQ,CAAC,oBAAoB,YAAY;EAC3C;CACF;AACF,CAAC,CAAA,GAAA,iBAAA"}