@elisym/cli 0.17.1 → 0.17.2

package/dist/index.js

@@ -2035,8 +2035,10 @@ function resolveHealthPair(skill) {
   return null;
 }
 var RATE_LIMIT_WINDOW_MS = 10 * 60 * 1e3;
-var MAX_JOBS_PER_CUSTOMER = 20;
-var GLOBAL_MAX_JOBS_PER_WINDOW = 200;
+var FREE_MAX_JOBS_PER_CUSTOMER = 20;
+var FREE_GLOBAL_MAX_JOBS_PER_WINDOW = 200;
+var PAID_MAX_JOBS_PER_CUSTOMER = 200;
+var PAID_GLOBAL_MAX_JOBS_PER_WINDOW = 2e3;
 var MAX_TRACKED_CUSTOMERS = 1e3;
 var GLOBAL_LIMITER_KEY = "__global__";
 var AgentRuntime = class {
@@ -2060,16 +2062,32 @@ var AgentRuntime = class {
   recoveryInterval = null;
   gcInterval = null;
   stopped = false;
-  /** Per-customer sliding-window rate limiter (keyed on customer pubkey). */
-  customerLimiter = createSlidingWindowLimiter({
+  /** Per-customer sliding-window rate limiter for free skills. */
+  freeCustomerLimiter = createSlidingWindowLimiter({
     windowMs: RATE_LIMIT_WINDOW_MS,
-    maxPerWindow: MAX_JOBS_PER_CUSTOMER,
+    maxPerWindow: FREE_MAX_JOBS_PER_CUSTOMER,
     maxKeys: MAX_TRACKED_CUSTOMERS
   });
-  /** Global sliding-window rate limiter (Sybil protection). */
-  globalLimiter = createSlidingWindowLimiter({
+  /** Global sliding-window rate limiter for free skills (Sybil protection). */
+  freeGlobalLimiter = createSlidingWindowLimiter({
     windowMs: RATE_LIMIT_WINDOW_MS,
-    maxPerWindow: GLOBAL_MAX_JOBS_PER_WINDOW,
+    maxPerWindow: FREE_GLOBAL_MAX_JOBS_PER_WINDOW,
+    maxKeys: 1
+  });
+  /**
+   * Per-customer sliding-window limiter for paid skills (10x looser than free).
+   * Payment is the primary economic deterrent; this cap exists to bound the
+   * "claim paid skill but never pay" queue-spam vector.
+   */
+  paidCustomerLimiter = createSlidingWindowLimiter({
+    windowMs: RATE_LIMIT_WINDOW_MS,
+    maxPerWindow: PAID_MAX_JOBS_PER_CUSTOMER,
+    maxKeys: MAX_TRACKED_CUSTOMERS
+  });
+  /** Global sliding-window limiter for paid skills (Sybil protection, 10x free). */
+  paidGlobalLimiter = createSlidingWindowLimiter({
+    windowMs: RATE_LIMIT_WINDOW_MS,
+    maxPerWindow: PAID_GLOBAL_MAX_JOBS_PER_WINDOW,
     maxKeys: 1
   });
   /**
@@ -2247,17 +2265,20 @@ var AgentRuntime = class {
         });
         return;
       }
-      if (!this.customerLimiter.peek(job.customerId).allowed) {
+      const matched = this.skills.route(job.tags);
+      const isPaid = matched ? matched.priceSubunits > 0 : false;
+      const customerLimiter = isPaid ? this.paidCustomerLimiter : this.freeCustomerLimiter;
+      const globalLimiter = isPaid ? this.paidGlobalLimiter : this.freeGlobalLimiter;
+      if (!customerLimiter.peek(job.customerId).allowed) {
         this.transport.sendFeedback(job, { type: "error", message: "Rate limited, try again later" }).catch(() => {
         });
         return;
       }
-      if (!this.globalLimiter.peek(GLOBAL_LIMITER_KEY).allowed) {
+      if (!globalLimiter.peek(GLOBAL_LIMITER_KEY).allowed) {
         this.transport.sendFeedback(job, { type: "error", message: "Server busy, try again later" }).catch(() => {
         });
         return;
       }
-      const matched = this.skills.route(job.tags);
       const isFreeLlm = matched?.mode === "llm" && matched.priceSubunits === 0;
       let perCustomerLimiter;
       let perSkillKey;
@@ -2278,8 +2299,8 @@ var AgentRuntime = class {
           return;
         }
       }
-      this.customerLimiter.check(job.customerId);
-      this.globalLimiter.check(GLOBAL_LIMITER_KEY);
+      customerLimiter.check(job.customerId);
+      globalLimiter.check(GLOBAL_LIMITER_KEY);
       if (isFreeLlm && perCustomerLimiter && perSkillKey) {
         this.freeLlmLimiters.globalLimiter.check(FREE_LLM_GLOBAL_KEY);
         perCustomerLimiter.check(perSkillKey);
@@ -2313,8 +2334,10 @@ var AgentRuntime = class {
   }
   /** Drop expired hits from every sliding-window limiter. */
   cleanupRateLimits() {
-    this.customerLimiter.prune();
-    this.globalLimiter.prune();
+    this.freeCustomerLimiter.prune();
+    this.freeGlobalLimiter.prune();
+    this.paidCustomerLimiter.prune();
+    this.paidGlobalLimiter.prune();
     this.freeLlmLimiters.globalLimiter.prune();
     this.freeLlmLimiters.prunePerCustomer();
   }