@cosmicdrift/kumiko-types 0.372.0 → 0.373.0

package/dist/handlers.d.ts

@@ -513,7 +513,8 @@ export type EntityRef = {
 export type HandlerRef = {
     readonly name: string;
 };
-export type RateLimitPer = "user" | "tenant" | "ip" | "user+handler" | "tenant+handler" | "ip+handler";
+export declare const RATE_LIMIT_PERS: readonly ["user", "tenant", "ip", "user+handler", "tenant+handler", "ip+handler"];
+export type RateLimitPer = (typeof RATE_LIMIT_PERS)[number];
 export type RateLimitOption = {
     readonly per: RateLimitPer;
     readonly limit: number;
@@ -531,11 +532,14 @@ export type PayloadRateLimitOption = {
     readonly cost?: number;
     readonly normalize?: PayloadBucketNormalization;
 };
+export declare function isRateLimitOption(value: unknown): value is RateLimitOption;
+export type RateLimitOptions = readonly [RateLimitOption, ...RateLimitOption[]];
 export type RateLimitDisabled = {
     readonly disabled: true;
     readonly reason: string;
 };
-export type RateLimitDeclaration = RateLimitOption | RateLimitDisabled;
+export type RateLimitDeclaration = RateLimitOption | RateLimitOptions | RateLimitDisabled;
+export declare function declaredRateLimitOptions(declaration: RateLimitDeclaration | undefined): readonly RateLimitOption[];
 export declare function isRateLimitDisabled(v: RateLimitDeclaration | undefined): v is RateLimitDisabled;
 export type AgentRisk = "low" | "mid" | "high";
 /** Per-handler hints for the AI-agent manifest. `expose` overrides the

package/dist/handlers.js

@@ -1,3 +1,4 @@
+import { isOneOf, propertyOf } from "./type-guards.js";
 export const ESCAPE_HATCH_GRANTS = ["systemIdentity", "globalWrites", "unsafeRaw"];
 export function isEscapeHatchGrant(value) {
     return ESCAPE_HATCH_GRANTS.some((grant) => grant === value);
@@ -98,8 +99,41 @@ export function normalizeEventPiiSubject(spec) {
         return { kind: "self" };
     return { kind: "user", ownerField: spec.personal.of, whenAbsent: spec.personal.whenAbsent };
 }
+// --- Handler Definitions (stored in feature/registry) ---
+// Per-handler rate limit. Bucket key derived from `per`:
+//   "user"            → userId
+//   "tenant"          → tenantId
+//   "ip"              → request IP
+//   "user+handler"    → userId + handlerName
+//   "tenant+handler"  → tenantId + handlerName
+//   "ip+handler"      → IP + handlerName (anonymous endpoints)
+// `cost` is the tokens this handler-call deducts. Default 1 — bump for
+// expensive operations (bulk export, bulk import).
+export const RATE_LIMIT_PERS = [
+    "user",
+    "tenant",
+    "ip",
+    "user+handler",
+    "tenant+handler",
+    "ip+handler",
+];
+export function isRateLimitOption(value) {
+    const cost = propertyOf(value, "cost");
+    return (isOneOf(RATE_LIMIT_PERS, propertyOf(value, "per")) &&
+        typeof propertyOf(value, "limit") === "number" &&
+        typeof propertyOf(value, "windowSeconds") === "number" &&
+        (cost === undefined || typeof cost === "number"));
+}
+export function declaredRateLimitOptions(declaration) {
+    if (declaration === undefined || isRateLimitDisabled(declaration))
+        return [];
+    return isRateLimitOptionList(declaration) ? declaration : [declaration];
+}
+function isRateLimitOptionList(declaration) {
+    return Array.isArray(declaration);
+}
 export function isRateLimitDisabled(v) {
-    return v !== undefined && "disabled" in v && v.disabled === true;
+    return v !== undefined && !Array.isArray(v) && "disabled" in v && v.disabled === true;
 }
 // Marker set by defineEntityQueryHandler on both of its verbs. A string, not
 // a Symbol(), for the same reason as PAGED_QUERY_HANDLER_BRAND: a symlinked

package/dist/rate-limit-types.d.ts

@@ -13,8 +13,13 @@ export type RateLimitConfig = {
     readonly windowSeconds: number;
     readonly cost?: number;
 };
+export type RateLimitBucketRequest = {
+    readonly bucket: string;
+    readonly config: RateLimitConfig;
+};
 export type RateLimitResolver = {
     check(bucket: string, config: RateLimitConfig): Promise<RateLimitDecision>;
     enforce(bucket: string, config: RateLimitConfig): Promise<RateLimitDecision>;
+    enforceAll(requests: readonly RateLimitBucketRequest[]): Promise<readonly RateLimitDecision[]>;
     peek(bucket: string, config: Omit<RateLimitConfig, "cost">): Promise<RateLimitDecision>;
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-types",
-  "version": "0.372.0",
+  "version": "0.373.0",
   "description": "Framework-Type-Definitions für Kumiko — FeatureDefinition, BootCheck-Types und die reinen Engine-Types. Erlaubt Downstream-Konsumenten, gegen die Type-Contracts zu bauen, ohne das ganze Framework-Package zu importieren. Enthaelt keine identitaets-sensitiven Runtime-Werte mehr (Error-Klassen leben seit #1629 in kumiko-framework, Brand-Symbole nutzen Symbol.for) und ist deshalb eine plain dependency, keine peerDependency.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",