toilscript 0.1.21 → 0.1.23

package/dist/importmap.json

@@ -1,7 +1,7 @@
 {
   "imports": {
-    "toilscript": "https://cdn.jsdelivr.net/npm/toilscript@0.1.21/dist/toilscript.js",
-    "toilscript/cli": "https://cdn.jsdelivr.net/npm/toilscript@0.1.21/dist/cli.js",
+    "toilscript": "https://cdn.jsdelivr.net/npm/toilscript@0.1.23/dist/toilscript.js",
+    "toilscript/cli": "https://cdn.jsdelivr.net/npm/toilscript@0.1.23/dist/cli.js",
     "binaryen": "https://cdn.jsdelivr.net/npm/binaryen@129.0.0-nightly.20260428/index.js",
     "long": "https://cdn.jsdelivr.net/npm/long@5.3.2/index.js"
   }

package/dist/toilscript.generated.d.ts

@@ -2954,6 +2954,10 @@ declare module "types:toilscript/src/parser" {
         dependees: Map<string, Dependee>;
         /** Normalized paths whose `@rest` runtime import has already been injected. */
         restImportedSources: Set<string>;
+        /** Monotonic id handed to each `@ratelimit` route so the edge can key one
+         *  shared limiter per route. Program-wide (one Parser per program), assigned
+         *  deterministically in route declaration order. */
+        ratelimitRouteCounter: number;
         /** An array of parsed sources. */
         sources: Source[];
         /** Current overridden module name. */
@@ -3014,6 +3018,18 @@ declare module "types:toilscript/src/parser" {
          * return; plus a module-level self-registration into the runtime `Rest` router.
          */
         private injectRestController;
+        /**
+         * Bind a `@user` class to `AuthService.getUser()` typing. The lib declares
+         * `getUser(): AuthUser | null`; here we inject a `@global` `AuthUser` that
+         * extends the user's class, so `AuthService.getUser()` is auto-typed with the
+         * user's fields and NO type argument. `AuthUser` is a no-field subclass, so
+         * the decode bridge's `changetype` is an identity. There is exactly one
+         * authenticated-user type per program; a second `@user` produces a duplicate
+         * `AuthUser` (a natural compile error).
+         */
+        private injectUserBinding;
+        /** True if `decorators` carries a decorator of `kind` (e.g. `@auth`). */
+        private hasDecoratorKind;
         /** The mount prefix from `@rest("api")` -> "/api"; "" for the bare/object form (root). */
         private restPrefixOf;
         /** The class-default stream from `@rest({ stream: DataStream.Binary })`, else "JSON". */
@@ -3022,6 +3038,34 @@ declare module "types:toilscript/src/parser" {
         private routeDecoratorOf;
         /** Generate one `if (method && path-match) { decode; call; encode }` route block. */
         private buildRouteBlock;
+        /**
+         * The `.cache(...)` suffix to append to a route's `Response` when the
+         * handler method carries `@cache(...)`, else `""`. Only integer and
+         * boolean literal arguments are accepted (the parameters of
+         * `Response.cache(edgeTtlMinutes, browserTtlSeconds?, privateScope?,
+         * allowAuth?)`); any other argument shape yields `""` so a malformed
+         * decorator degrades to "not cached" rather than miscompiling. Each arg
+         * is emitted from its verbatim source text.
+         */
+        private cacheSuffixOf;
+        /**
+         * The rate-limit guard to prepend to a route block when the handler carries
+         * `@ratelimit(strategy, limit, window)`, else `""`. `strategy` is a member of
+         * the `RateLimit` enum (`FixedWindow`/`SlidingWindow`/`TokenBucket`) or a bare
+         * integer tag; `limit` and `window` must be integer literals (mirrors
+         * `@cache`). Lowers to a single ambient `RateLimitService.guard(...)` call that
+         * returns a `429` `Response` when over the limit, or `null` to proceed. A
+         * malformed decorator yields `""` (no guard) rather than miscompiling.
+         */
+        private ratelimitGuardOf;
+        /**
+         * The integer strategy tag to emit for a `@ratelimit` strategy argument:
+         * `RateLimit.SlidingWindow` -> "1", `RateLimit.TokenBucket` -> "2", any other
+         * member (incl. `FixedWindow`) -> "0", an explicit integer literal passes
+         * through verbatim (the host clamps an unknown tag to FixedWindow). Returns
+         * "" when the argument is neither, so the caller emits no guard.
+         */
+        private ratelimitStrategyTag;
         /** Find an object-literal field value by name, or null. */
         private objectField;
         /** The member of an enum access expression (`Methods.GET` -> "GET"), or null. */
@@ -7769,7 +7813,11 @@ declare module "types:toilscript/src/ast" {
         Delete = 23,
         Patch = 24,
         Head = 25,
-        Options = 26
+        Options = 26,
+        Cache = 27,
+        Auth = 28,
+        User = 29,
+        Ratelimit = 30
     }
     export namespace DecoratorKind {
         /** Returns the kind of the specified decorator name node. Defaults to {@link DecoratorKind.CUSTOM}. */