@cqrs-ddd/pipeline-rate-limit 0.5.0

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAEtE;;;;GAIG;AAEH,OAAO,EACL,8BAA8B,GAE/B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,oCAAoC,GAGrC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEL,SAAS,GACV,MAAM,gCAAgC,CAAC;AAUxC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,0BAA0B,CAAC"}

package/dist/interfaces/rate-limit-options.interface.d.ts

@@ -0,0 +1,64 @@
+import type { IPipelineContext } from '@cqrs-ddd/pipeline';
+import type { RateLimiterLike } from './rate-limiter.interface.js';
+/**
+ * Derives the rate-limit bucket key from the pipeline context — e.g. combine
+ * `context.requestName` with a tenant or user id to limit per caller.
+ */
+export type RateLimitKeyFactory = (context: IPipelineContext) => string;
+/**
+ * Computes the points a request costs from the pipeline context — e.g. one
+ * point per item of a bulk command. Must return a non-negative safe integer.
+ */
+export type RateLimitCostFactory = (context: IPipelineContext) => number;
+/**
+ * Per-handler (and constructor-default) options for {@link RateLimitBehavior}.
+ *
+ * @example Tenant + caller scoped limit
+ * ```ts
+ * const perUser = createPartitionedRateLimitKeyFactory(
+ *   (ctx) => ctx.items.get('userId') as string | undefined,
+ * );
+ *
+ * class CreateOrderHandler {
+ *   @pipeline.wrap({ kind: 'command' }, [RateLimitBehavior, {
+ *     keyFactory: perUser,
+ *     points: 1,
+ *   }])
+ *   async handle(command: CreateOrderCommand) {}
+ * }
+ * ```
+ */
+export interface RateLimitBehaviorOptions {
+    /**
+     * Points this request costs: a non-negative safe integer, or a
+     * {@link RateLimitCostFactory} computing it per request. `0` charges
+     * nothing: the limiter is not called and no key is built. Default `1`.
+     *
+     * @example One point per imported row
+     * ```ts
+     * points: (ctx) => (ctx.request as ImportUsersCommand).rows.length
+     * ```
+     */
+    points?: number | RateLimitCostFactory;
+    /**
+     * Builds the bucket key. Required whenever the behavior executes; there is
+     * no implicit shared bucket. Prefer `createPartitionedRateLimitKeyFactory`
+     * for tenant/caller-aware limits.
+     */
+    keyFactory?: RateLimitKeyFactory;
+    /** Optional prefix prepended to the key as `"<prefix>:<key>"`. */
+    keyPrefix?: string;
+    /**
+     * Per-handler limiter override — use a stricter/looser limiter for specific
+     * handlers without changing the global one. Defaults to the injected limiter.
+     */
+    limiter?: RateLimiterLike;
+    /**
+     * When the backing store itself errors (e.g. Redis is unreachable — distinct
+     * from a normal limit hit), allow the request through (`true`, default) or
+     * reject it (`false`). Fail-open favors availability; fail-closed favors
+     * strict protection.
+     */
+    failOpen?: boolean;
+}
+//# sourceMappingURL=rate-limit-options.interface.d.ts.map

package/dist/interfaces/rate-limit-options.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-options.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/rate-limit-options.interface.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnE;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,gBAAgB,KAAK,MAAM,CAAC;AAExE;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,gBAAgB,KAAK,MAAM,CAAC;AAEzE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,oBAAoB,CAAC;IACvC;;;;OAIG;IACH,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB"}

package/dist/interfaces/rate-limit-options.interface.js

@@ -0,0 +1,3 @@
+/* Copyright (C) 2026-present Aristotelis — see repository license. */
+export {};
+//# sourceMappingURL=rate-limit-options.interface.js.map

package/dist/interfaces/rate-limit-options.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-options.interface.js","sourceRoot":"","sources":["../../src/interfaces/rate-limit-options.interface.ts"],"names":[],"mappings":"AAAA,sEAAsE"}

package/dist/interfaces/rate-limiter.interface.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Minimal structural shape of a `rate-limiter-flexible` result
+ * (`RateLimiterRes`). Declared locally so this package does not hard-depend on
+ * `rate-limiter-flexible` — a real result satisfies it.
+ */
+export interface RateLimiterResLike {
+    /** Milliseconds until the next point(s) become available. */
+    msBeforeNext: number;
+    /** Points remaining in the current window after this consumption. */
+    remainingPoints: number;
+    /** Points consumed so far in the current window. */
+    consumedPoints: number;
+    /** Whether this consumption started a fresh window. */
+    isFirstInDuration: boolean;
+}
+/**
+ * Minimal structural shape of a `rate-limiter-flexible` limiter
+ * (`RateLimiterAbstract`). Any of its backends —
+ * `RateLimiterMemory`, `RateLimiterRedis`, `RateLimiterMongo`,
+ * `RateLimiterPostgres`, `RateLimiterMySQL`, … — satisfies this interface, so
+ * they are genuine drop-in replacements. Add it in your app:
+ * `pnpm add rate-limiter-flexible`.
+ */
+export interface RateLimiterLike {
+    /**
+     * Consume `points` (default `1`) for `key`. Resolves with the updated
+     * {@link RateLimiterResLike} when allowed, or **rejects** with a
+     * {@link RateLimiterResLike} when the limit is exceeded (and with a plain
+     * `Error` when the backing store itself fails).
+     */
+    consume(key: string, points?: number): Promise<RateLimiterResLike>;
+    /** The configured point capacity per window, when the limiter exposes it. */
+    readonly points?: number;
+}
+//# sourceMappingURL=rate-limiter.interface.d.ts.map

package/dist/interfaces/rate-limiter.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/rate-limiter.interface.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,eAAe,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,cAAc,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACnE,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B"}

package/dist/interfaces/rate-limiter.interface.js

@@ -0,0 +1,3 @@
+/* Copyright (C) 2026-present Aristotelis — see repository license. */
+export {};
+//# sourceMappingURL=rate-limiter.interface.js.map

package/dist/interfaces/rate-limiter.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.interface.js","sourceRoot":"","sources":["../../src/interfaces/rate-limiter.interface.ts"],"names":[],"mappings":"AAAA,sEAAsE"}

package/dist/rate-limit.behavior.d.ts

@@ -0,0 +1,74 @@
+import { type IPipelineBehavior, type IPipelineBehaviorContract, type IPipelineBehaviorOptionsResolver, type IPipelineContext, type NextDelegate, PIPELINE_BEHAVIOR_CONTRACT, type PipelineItemToken, type PipelineLogger } from '@cqrs-ddd/pipeline';
+import type { RateLimitBehaviorOptions } from './interfaces/rate-limit-options.interface.js';
+import type { RateLimiterLike, RateLimiterResLike } from './interfaces/rate-limiter.interface.js';
+/**
+ * Unique symbol key set on `context.items` containing the result of a rate-limit check (or rejection payload).
+ *
+ * @example
+ * ```ts
+ * const result = context.items.get(RATE_LIMIT_ITEM);
+ * ```
+ */
+export declare const RATE_LIMIT_ITEM: unique symbol;
+/**
+ * Typed token for {@link RATE_LIMIT_ITEM}: the rate-limit result. Reads and writes the same
+ * `context.items` entry through `getPipelineItem` / `requirePipelineItem`.
+ */
+export declare const RATE_LIMIT_ITEM_TOKEN: PipelineItemToken<RateLimiterResLike>;
+/**
+ * Unique symbol key set on `context.items` containing the resolved rate limit bucket key string.
+ *
+ * @example
+ * ```ts
+ * const key = context.items.get(RATE_LIMIT_KEY_ITEM) as string | undefined;
+ * ```
+ */
+export declare const RATE_LIMIT_KEY_ITEM: unique symbol;
+/**
+ * Typed token for {@link RATE_LIMIT_KEY_ITEM}: the resolved rate-limit key. Reads and writes the same
+ * `context.items` entry through `getPipelineItem` / `requirePipelineItem`.
+ */
+export declare const RATE_LIMIT_KEY_ITEM_TOKEN: PipelineItemToken<string>;
+/**
+ * Pipeline behavior that enforces rate limits before a handler runs.
+ *
+ * For each request it consumes `points` (default `1`, or computed per request
+ * when `points` is a function) from a bucket keyed by
+ * {@link buildRateLimitKey}. A cost of `0` charges nothing and skips the
+ * limiter. If the bucket is exhausted it throws
+ * {@link RateLimitExceededError} (map to HTTP 429 with
+ * `toHttpResponse` of `@cqrs-ddd/pipeline-rate-limit/http`); otherwise the handler proceeds.
+ *
+ * `context.request` is the CQRS command/query/event, not an Express/Fastify
+ * request. Transport metadata needed for keying should be copied into the CQRS
+ * request or written to `context.items` by an earlier behavior.
+ *
+ * Backend-agnostic: it depends only on {@link RateLimiterLike}, so any
+ * `rate-limiter-flexible` backend (memory, Redis/Valkey, Mongo, SQL) is a
+ * one-line swap in the constructor.
+ *
+ * @example Per-handler limit, partitioned by tenant and authenticated caller
+ * ```ts
+ * const perUser = createPartitionedRateLimitKeyFactory(
+ *   (ctx) => ctx.items.get('userId') as string | undefined,
+ * );
+ *
+ * class CreateUserHandler {
+ *   @pipeline.wrap({ kind: 'command' }, [RateLimitBehavior, { points: 1, keyFactory: perUser }])
+ *   async handle(command: CreateUserCommand) {}
+ * }
+ * ```
+ */
+export declare class RateLimitBehavior implements IPipelineBehavior, IPipelineBehaviorOptionsResolver<RateLimitBehaviorOptions> {
+    private readonly limiter;
+    static readonly [PIPELINE_BEHAVIOR_CONTRACT]: IPipelineBehaviorContract;
+    private readonly logger;
+    private readonly defaults;
+    constructor(limiter: RateLimiterLike, defaults?: RateLimitBehaviorOptions, logger?: PipelineLogger);
+    handle(context: IPipelineContext, next: NextDelegate): Promise<unknown>;
+    /** Fail-open (default) or fail-closed when the backing store itself errors. */
+    private handleStoreError;
+    /** Shallow-merges pipeline-level options over the constructor defaults. */
+    resolveEffectiveOptions(options?: RateLimitBehaviorOptions): RateLimitBehaviorOptions;
+}
+//# sourceMappingURL=rate-limit.behavior.d.ts.map

package/dist/rate-limit.behavior.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.behavior.d.ts","sourceRoot":"","sources":["../src/rate-limit.behavior.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,gCAAgC,EACrC,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,0BAA0B,EAG1B,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAEpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EACnB,MAAM,wCAAwC,CAAC;AAEhD;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,eAA4B,CAAC;AAEzD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,iBAAiB,CAAC,kBAAkB,CACI,CAAC;AAE7E;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,eAAgC,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,iBAAiB,CAAC,MAAM,CACQ,CAAC;AAYzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBAAa,iBACX,YACE,iBAAiB,EACjB,gCAAgC,CAAC,wBAAwB,CAAC;IA2D1D,OAAO,CAAC,QAAQ,CAAC,OAAO;IAzD1B,MAAM,CAAC,QAAQ,CAAC,CAAC,0BAA0B,CAAC,EAAE,yBAAyB,CAmDrE;IAEF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IAEpD,YACmB,OAAO,EAAE,eAAe,EACzC,QAAQ,CAAC,EAAE,wBAAwB,EACnC,MAAM,CAAC,EAAE,cAAc,EAUxB;IAEK,MAAM,CACV,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,OAAO,CAAC,CAgClB;IAED,+EAA+E;IAC/E,OAAO,CAAC,gBAAgB;IA0BxB,2EAA2E;IAC3E,uBAAuB,CACrB,OAAO,CAAC,EAAE,wBAAwB,GACjC,wBAAwB,CAG1B;CACF"}

package/dist/rate-limit.behavior.js

@@ -0,0 +1,188 @@
+/* Copyright (C) 2026-present Aristotelis — see repository license. */
+import { createPipelineItem, PIPELINE_BEHAVIOR_CONTRACT, setPipelineItem, } from '@cqrs-ddd/pipeline';
+import { RateLimitExceededError } from './errors/rate-limit-exceeded.error.js';
+import { buildRateLimitKey } from './helpers/build-key.js';
+/**
+ * Unique symbol key set on `context.items` containing the result of a rate-limit check (or rejection payload).
+ *
+ * @example
+ * ```ts
+ * const result = context.items.get(RATE_LIMIT_ITEM);
+ * ```
+ */
+export const RATE_LIMIT_ITEM = Symbol('RATE_LIMIT_ITEM');
+/**
+ * Typed token for {@link RATE_LIMIT_ITEM}: the rate-limit result. Reads and writes the same
+ * `context.items` entry through `getPipelineItem` / `requirePipelineItem`.
+ */
+export const RATE_LIMIT_ITEM_TOKEN = createPipelineItem('RATE_LIMIT_ITEM', RATE_LIMIT_ITEM);
+/**
+ * Unique symbol key set on `context.items` containing the resolved rate limit bucket key string.
+ *
+ * @example
+ * ```ts
+ * const key = context.items.get(RATE_LIMIT_KEY_ITEM) as string | undefined;
+ * ```
+ */
+export const RATE_LIMIT_KEY_ITEM = Symbol('RATE_LIMIT_KEY_ITEM');
+/**
+ * Typed token for {@link RATE_LIMIT_KEY_ITEM}: the resolved rate-limit key. Reads and writes the same
+ * `context.items` entry through `getPipelineItem` / `requirePipelineItem`.
+ */
+export const RATE_LIMIT_KEY_ITEM_TOKEN = createPipelineItem('RATE_LIMIT_KEY_ITEM', RATE_LIMIT_KEY_ITEM);
+/** Whether a rejection value is a `rate-limiter-flexible` result (a limit hit). */
+function isRateLimiterRes(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        typeof value.msBeforeNext === 'number' &&
+        typeof value.remainingPoints === 'number');
+}
+/**
+ * Pipeline behavior that enforces rate limits before a handler runs.
+ *
+ * For each request it consumes `points` (default `1`, or computed per request
+ * when `points` is a function) from a bucket keyed by
+ * {@link buildRateLimitKey}. A cost of `0` charges nothing and skips the
+ * limiter. If the bucket is exhausted it throws
+ * {@link RateLimitExceededError} (map to HTTP 429 with
+ * `toHttpResponse` of `@cqrs-ddd/pipeline-rate-limit/http`); otherwise the handler proceeds.
+ *
+ * `context.request` is the CQRS command/query/event, not an Express/Fastify
+ * request. Transport metadata needed for keying should be copied into the CQRS
+ * request or written to `context.items` by an earlier behavior.
+ *
+ * Backend-agnostic: it depends only on {@link RateLimiterLike}, so any
+ * `rate-limiter-flexible` backend (memory, Redis/Valkey, Mongo, SQL) is a
+ * one-line swap in the constructor.
+ *
+ * @example Per-handler limit, partitioned by tenant and authenticated caller
+ * ```ts
+ * const perUser = createPartitionedRateLimitKeyFactory(
+ *   (ctx) => ctx.items.get('userId') as string | undefined,
+ * );
+ *
+ * class CreateUserHandler {
+ *   @pipeline.wrap({ kind: 'command' }, [RateLimitBehavior, { points: 1, keyFactory: perUser }])
+ *   async handle(command: CreateUserCommand) {}
+ * }
+ * ```
+ */
+export class RateLimitBehavior {
+    limiter;
+    static [PIPELINE_BEHAVIOR_CONTRACT] = {
+        validate: (context) => {
+            const options = context.effectiveOptions;
+            if (!options?.keyFactory) {
+                return [
+                    {
+                        handlerName: context.handlerName,
+                        behaviorName: RateLimitBehavior.name,
+                        message: 'Active RateLimitBehavior requires an explicit `keyFactory`',
+                        fix: 'Provide keyFactory in the [RateLimitBehavior, { keyFactory: ... }] entry, ' +
+                            'the constructor defaults, or use createPartitionedRateLimitKeyFactory(...).',
+                    },
+                ];
+            }
+            if (typeof options.keyFactory !== 'function') {
+                return [
+                    {
+                        handlerName: context.handlerName,
+                        behaviorName: RateLimitBehavior.name,
+                        message: `RateLimitBehavior keyFactory must be a callable function, received ${typeof options.keyFactory}`,
+                        fix: 'Pass a valid function (ctx) => string to the keyFactory option of the [RateLimitBehavior, { keyFactory: ... }] entry.',
+                    },
+                ];
+            }
+            const { points } = options;
+            if (points !== undefined &&
+                typeof points !== 'function' &&
+                !isValidPoints(points)) {
+                return [
+                    {
+                        handlerName: context.handlerName,
+                        behaviorName: RateLimitBehavior.name,
+                        message: `RateLimitBehavior points must be a non-negative safe integer or a function, received ${String(points)}`,
+                        fix: 'Pass an integer from 0 up (0 charges nothing) or a function (ctx) => number as the points option.',
+                    },
+                ];
+            }
+            return undefined;
+        },
+    };
+    logger;
+    defaults;
+    constructor(limiter, defaults, logger) {
+        this.limiter = limiter;
+        if (typeof limiter?.consume !== 'function') {
+            throw new TypeError('RateLimitBehavior requires a rate limiter with a consume() method, such as RateLimiterMemory of rate-limiter-flexible.');
+        }
+        this.defaults = defaults ?? {};
+        this.logger = logger ?? console;
+    }
+    async handle(context, next) {
+        const options = this.resolveEffectiveOptions(context.getBehaviorOptions(RateLimitBehavior));
+        const points = resolvePoints(context, options);
+        if (points === 0)
+            return next();
+        const limiter = options.limiter ?? this.limiter;
+        const key = buildRateLimitKey(context, options);
+        setPipelineItem(context, RATE_LIMIT_KEY_ITEM_TOKEN, key);
+        let result;
+        try {
+            result = await limiter.consume(key, points);
+        }
+        catch (error) {
+            if (isRateLimiterRes(error)) {
+                setPipelineItem(context, RATE_LIMIT_ITEM_TOKEN, error);
+                throw new RateLimitExceededError({
+                    key,
+                    requestName: context.requestName,
+                    msBeforeNext: error.msBeforeNext,
+                    remainingPoints: error.remainingPoints,
+                    limit: limiter.points,
+                    points,
+                });
+            }
+            return this.handleStoreError(context, options, key, error, next);
+        }
+        setPipelineItem(context, RATE_LIMIT_ITEM_TOKEN, result);
+        return next();
+    }
+    /** Fail-open (default) or fail-closed when the backing store itself errors. */
+    handleStoreError(context, options, key, error, next) {
+        const message = error instanceof Error ? error.message : String(error);
+        if (options.failOpen ?? true) {
+            this.logger.warn?.(`Rate limiter store error for ${context.requestName} ` +
+                `(key: ${key}); failing open: ${message}`, RateLimitBehavior.name);
+            return next();
+        }
+        this.logger.error?.(`Rate limiter store error for ${context.requestName} ` +
+            `(key: ${key}); failing closed: ${message}`, RateLimitBehavior.name);
+        throw error;
+    }
+    /** Shallow-merges pipeline-level options over the constructor defaults. */
+    resolveEffectiveOptions(options) {
+        if (!options)
+            return this.defaults;
+        return { ...this.defaults, ...options };
+    }
+}
+function isValidPoints(points) {
+    return Number.isSafeInteger(points) && points >= 0;
+}
+/**
+ * Resolves the request's cost: the `points` option, computed when it is a
+ * function, `1` when omitted.
+ *
+ * @throws {TypeError} When the cost is not a non-negative safe integer.
+ */
+function resolvePoints(context, options) {
+    const points = typeof options.points === 'function'
+        ? options.points(context)
+        : (options.points ?? 1);
+    if (!isValidPoints(points)) {
+        throw new TypeError(`Rate-limit points for ${context.handlerName} must be a non-negative safe integer, received ${String(points)}.`);
+    }
+    return points;
+}
+//# sourceMappingURL=rate-limit.behavior.js.map

package/dist/rate-limit.behavior.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.behavior.js","sourceRoot":"","sources":["../src/rate-limit.behavior.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAEtE,OAAO,EACL,kBAAkB,EAMlB,0BAA0B,EAK1B,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAO3D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAEzD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAChC,kBAAkB,CAAqB,iBAAiB,EAAE,eAAe,CAAC,CAAC;AAE7E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GACpC,kBAAkB,CAAS,qBAAqB,EAAE,mBAAmB,CAAC,CAAC;AAEzE,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAQ,KAA4B,CAAC,YAAY,KAAK,QAAQ;QAC9D,OAAQ,KAA4B,CAAC,eAAe,KAAK,QAAQ,CAClE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,OAAO,iBAAiB;IA8DT,OAAO;IAzD1B,MAAM,CAAU,CAAC,0BAA0B,CAAC,GAA8B;QACxE,QAAQ,EAAE,CACR,OAA0C,EACA,EAAE;YAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,gBAEX,CAAC;YAEd,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;gBACzB,OAAO;oBACL;wBACE,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,YAAY,EAAE,iBAAiB,CAAC,IAAI;wBACpC,OAAO,EACL,4DAA4D;wBAC9D,GAAG,EACD,4EAA4E;4BAC5E,6EAA6E;qBAChF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBAC7C,OAAO;oBACL;wBACE,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,YAAY,EAAE,iBAAiB,CAAC,IAAI;wBACpC,OAAO,EAAE,sEAAsE,OAAO,OAAO,CAAC,UAAU,EAAE;wBAC1G,GAAG,EAAE,uHAAuH;qBAC7H;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;YAC3B,IACE,MAAM,KAAK,SAAS;gBACpB,OAAO,MAAM,KAAK,UAAU;gBAC5B,CAAC,aAAa,CAAC,MAAM,CAAC,EACtB,CAAC;gBACD,OAAO;oBACL;wBACE,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,YAAY,EAAE,iBAAiB,CAAC,IAAI;wBACpC,OAAO,EAAE,wFAAwF,MAAM,CAAC,MAAM,CAAC,EAAE;wBACjH,GAAG,EAAE,mGAAmG;qBACzG;iBACF,CAAC;YACJ,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC;IAEe,MAAM,CAAiB;IACvB,QAAQ,CAA2B;IAEpD,YACmB,OAAwB,EACzC,QAAmC,EACnC,MAAuB;uBAFN,OAAO;QAIxB,IAAI,OAAO,OAAO,EAAE,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3C,MAAM,IAAI,SAAS,CACjB,wHAAwH,CACzH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,EAAE,CAAC;QAE/B,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,OAAO,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAyB,EACzB,IAAkB;QAElB,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAC1C,OAAO,CAAC,kBAAkB,CAA2B,iBAAiB,CAAC,CACxE,CAAC;QACF,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAEhC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC;QAChD,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEhD,eAAe,CAAC,OAAO,EAAE,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAEzD,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,eAAe,CAAC,OAAO,EAAE,qBAAqB,EAAE,KAAK,CAAC,CAAC;gBACvD,MAAM,IAAI,sBAAsB,CAAC;oBAC/B,GAAG;oBACH,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,eAAe,EAAE,KAAK,CAAC,eAAe;oBACtC,KAAK,EAAE,OAAO,CAAC,MAAM;oBACrB,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACnE,CAAC;QAED,eAAe,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,+EAA+E;IACvE,gBAAgB,CACtB,OAAyB,EACzB,OAAiC,EACjC,GAAW,EACX,KAAc,EACd,IAAkB;QAElB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEvE,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAChB,gCAAgC,OAAO,CAAC,WAAW,GAAG;gBACpD,SAAS,GAAG,oBAAoB,OAAO,EAAE,EAC3C,iBAAiB,CAAC,IAAI,CACvB,CAAC;YACF,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CACjB,gCAAgC,OAAO,CAAC,WAAW,GAAG;YACpD,SAAS,GAAG,sBAAsB,OAAO,EAAE,EAC7C,iBAAiB,CAAC,IAAI,CACvB,CAAC;QACF,MAAM,KAAK,CAAC;IACd,CAAC;IAED,2EAA2E;IAC3E,uBAAuB,CACrB,OAAkC;QAElC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC;IAC1C,CAAC;CACF;AAED,SAAS,aAAa,CAAC,MAAe;IACpC,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAK,MAAiB,IAAI,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,OAAyB,EACzB,OAAiC;IAEjC,MAAM,MAAM,GACV,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;QAClC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QACzB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CACjB,yBAAyB,OAAO,CAAC,WAAW,kDAAkD,MAAM,CAAC,MAAM,CAAC,GAAG,CAChH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -0,0 +1,73 @@
+{
+  "name": "@cqrs-ddd/pipeline-rate-limit",
+  "version": "0.5.0",
+  "description": "Rate limiting for @cqrs-ddd/pipeline, with keys partitioned by tenant, principal and operation",
+  "author": "Aristotelis",
+  "license": "SEE LICENSE IN LICENSE",
+  "type": "module",
+  "engines": {
+    "node": ">=22.12.0"
+  },
+  "keywords": [
+    "pipeline",
+    "cqrs",
+    "rate-limit",
+    "rate-limiter",
+    "throttle",
+    "rate-limiter-flexible",
+    "redis",
+    "ddos",
+    "behavior"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aristoteliss/ddd-cqrs.git",
+    "directory": "packages/pipeline-rate-limit"
+  },
+  "homepage": "https://aristoteliss.github.io/ddd-cqrs/packages/pipeline-rate-limit/",
+  "bugs": {
+    "url": "https://github.com/aristoteliss/ddd-cqrs/issues"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./http": {
+      "types": "./dist/http.d.ts",
+      "default": "./dist/http.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist",
+    "LICENSE",
+    "COMMERCIAL_LICENSE.txt"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "@cqrs-ddd/pipeline": "^0.5.0"
+  },
+  "devDependencies": {
+    "@vitest/coverage-v8": "^5.0.3",
+    "rate-limiter-flexible": "^11.2.1",
+    "vitest": "^5.0.3",
+    "@cqrs-ddd/pipeline": "0.5.0"
+  },
+  "dependencies": {
+    "@cqrs-ddd/safe-stringify": "^0.5.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "build:watch": "tsc -p tsconfig.build.json --watch",
+    "clean": "rm -rf dist tsconfig.tsbuildinfo",
+    "rebuild": "pnpm run clean && pnpm run build",
+    "lint": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  }
+}